$ rpki-client -vvf rpki-rsync.idnic.net/repo/c29cceb6-a4e7-4e82-88be-bb9697bd1d01/0/8AC18CE335977AA0A9BC9AEFFEF530C8934D99DB.mft File: 8AC18CE335977AA0A9BC9AEFFEF530C8934D99DB.mft (raw, json) Hash identifier: KWfEtRcUwrjMxOHvGXlbssXuQ0V2fhr9m3AMrINyGv8= Subject key identifier: D6:9B:72:24:36:59:A1:61:E9:D3:51:79:D1:43:3E:1E:16:A0:8E:58 Authority key identifier: 8A:C1:8C:E3:35:97:7A:A0:A9:BC:9A:EF:FE:F5:30:C8:93:4D:99:DB Certificate issuer: /CN=8AC18CE335977AA0A9BC9AEFFEF530C8934D99DB Certificate serial: 68761DAC0F7FFC69BECDAE24BEB46979D9B05066 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8AC18CE335977AA0A9BC9AEFFEF530C8934D99DB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c29cceb6-a4e7-4e82-88be-bb9697bd1d01/0/8AC18CE335977AA0A9BC9AEFFEF530C8934D99DB.mft Manifest number: 0D Signing time: Tue 12 May 2026 02:56:41 +0000 Manifest this update: Tue 12 May 2026 02:51:41 +0000 Manifest next update: Wed 13 May 2026 04:09:41 +0000 Files and hashes: 1: 8AC18CE335977AA0A9BC9AEFFEF530C8934D99DB.crl (hash: PcmqPlvgeDesvXQvFngULJTO70qtfzAZRGsBSSEh7D0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c29cceb6-a4e7-4e82-88be-bb9697bd1d01/0/8AC18CE335977AA0A9BC9AEFFEF530C8934D99DB.crl rsync://rpki-rsync.idnic.net/repo/c29cceb6-a4e7-4e82-88be-bb9697bd1d01/0/8AC18CE335977AA0A9BC9AEFFEF530C8934D99DB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8AC18CE335977AA0A9BC9AEFFEF530C8934D99DB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 04:09:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:76:1d:ac:0f:7f:fc:69:be:cd:ae:24:be:b4:69:79:d9:b0:50:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8AC18CE335977AA0A9BC9AEFFEF530C8934D99DB Validity Not Before: May 12 02:51:41 2026 GMT Not After : May 13 04:09:41 2026 GMT Subject: CN=D69B72243659A161E9D35179D1433E1E16A08E58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:f6:5d:e1:22:77:28:d8:5a:24:96:47:31:e8: 0a:d5:9b:6e:73:9e:9f:d6:70:49:99:ed:44:3e:70: 52:7d:dc:ae:55:3a:e7:59:75:5d:72:36:c6:32:e9: 97:0d:84:5b:2a:f2:43:eb:8d:da:28:e9:9b:d9:43: af:fb:e6:94:2e:5a:f1:44:f2:66:30:cb:bd:9f:ab: 8e:04:eb:d8:aa:14:4a:31:da:40:c8:62:ae:21:64: 60:04:2c:3d:3a:a9:80:e2:cd:d3:9d:89:03:a1:69: eb:32:43:2a:5d:c2:b3:0f:d3:d7:e4:41:56:3f:4d: 4e:2b:22:2b:3f:e3:3c:56:9f:7e:11:1e:d9:18:9d: 7e:1d:c4:8b:43:d8:a2:56:dd:7b:1f:61:b0:8f:4d: 34:59:b2:31:9e:c1:fd:d1:b7:49:35:5a:8a:5c:0c: 4f:15:35:01:69:1a:c9:23:a0:fc:5b:cb:4a:13:36: 50:94:0f:0d:f8:47:c5:8c:7f:20:59:92:71:8b:87: af:25:7a:36:78:86:aa:3b:2f:5b:51:75:87:4a:2f: f0:1e:6b:65:85:96:8f:a6:28:93:fb:4c:64:4d:23: 80:19:4d:ba:dd:61:3c:a4:9c:76:fe:b7:a6:af:aa: 12:2c:b9:19:0b:a0:de:7d:77:f3:28:6b:43:ce:fc: ee:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:9B:72:24:36:59:A1:61:E9:D3:51:79:D1:43:3E:1E:16:A0:8E:58 X509v3 Authority Key Identifier: keyid:8A:C1:8C:E3:35:97:7A:A0:A9:BC:9A:EF:FE:F5:30:C8:93:4D:99:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c29cceb6-a4e7-4e82-88be-bb9697bd1d01/0/8AC18CE335977AA0A9BC9AEFFEF530C8934D99DB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8AC18CE335977AA0A9BC9AEFFEF530C8934D99DB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c29cceb6-a4e7-4e82-88be-bb9697bd1d01/0/8AC18CE335977AA0A9BC9AEFFEF530C8934D99DB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:e0:af:91:7c:5f:3e:52:c4:15:3f:7b:b4:27:a7:da:35:9c: 5f:e4:bf:cd:e5:56:ba:cc:2b:70:3e:72:6e:86:95:59:cf:96: c5:26:f7:b0:97:32:71:97:e1:40:7a:61:45:48:39:27:14:b0: a8:e7:53:6f:c5:6f:4c:eb:dc:f6:ed:a7:1c:b0:01:80:d1:1d: 0b:93:8d:2b:7d:10:6e:61:9a:24:49:9e:a5:1b:d8:a3:6c:71: 54:4b:3d:1e:c1:83:f8:de:b1:23:91:cf:6f:24:74:e7:a5:58: be:04:82:44:91:aa:07:1d:2e:50:96:ca:57:16:3b:0b:1e:4c: 2c:fd:46:7d:56:1e:c1:48:9d:1f:71:c7:6c:47:4a:b2:21:f0: ea:e2:62:d5:35:78:06:14:9e:c2:c5:0d:24:62:c3:72:42:f8: ef:1c:02:ea:ed:ff:14:2c:42:ad:15:22:9d:8f:86:48:8c:bf: 26:90:74:9b:2c:f2:9b:84:43:60:51:36:e2:aa:b6:64:28:a7: 79:20:a4:11:b1:36:98:d7:d5:9b:79:43:3e:48:85:55:d5:d4: 71:1a:fb:15:75:00:16:61:6f:d9:33:7a:0e:52:0d:6c:37:e4: 70:f4:a7:c7:32:23:bc:26:c3:0e:63:71:63:21:65:d2:17:42: 71:c0:ff:d5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaHYdrA9//Gm+za4kvrRpedmwUGYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEFDMThDRTMzNTk3N0FBMEE5QkM5QUVGRkVGNTMwQzg5 MzREOTlEQjAeFw0yNjA1MTIwMjUxNDFaFw0yNjA1MTMwNDA5NDFaMDMxMTAvBgNV BAMTKEQ2OUI3MjI0MzY1OUExNjFFOUQzNTE3OUQxNDMzRTFFMTZBMDhFNTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC9l3hInco2Foklkcx6ArVm25z np/WcEmZ7UQ+cFJ93K5VOudZdV1yNsYy6ZcNhFsq8kPrjdoo6ZvZQ6/75pQuWvFE 8mYwy72fq44E69iqFEox2kDIYq4hZGAELD06qYDizdOdiQOhaesyQypdwrMP09fk QVY/TU4rIis/4zxWn34RHtkYnX4dxItD2KJW3XsfYbCPTTRZsjGewf3Rt0k1Wopc DE8VNQFpGskjoPxby0oTNlCUDw34R8WMfyBZknGLh68lejZ4hqo7L1tRdYdKL/Ae a2WFlo+mKJP7TGRNI4AZTbrdYTyknHb+t6avqhIsuRkLoN59d/Moa0PO/O71AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1ptyJDZZoWHp01F50UM+HhagjlgwHwYDVR0j BBgwFoAUisGM4zWXeqCpvJrv/vUwyJNNmdswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzI5Y2NlYjYtYTRlNy00ZTgyLTg4YmUtYmI5Njk3YmQxZDAxLzAvOEFDMThDRTMz NTk3N0FBMEE5QkM5QUVGRkVGNTMwQzg5MzREOTlEQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84QUMxOENFMzM1OTc3QUEwQTlCQzlBRUZGRUY1MzBDODkzNEQ5 OURCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzI5Y2NlYjYtYTRlNy00ZTgyLTg4 YmUtYmI5Njk3YmQxZDAxLzAvOEFDMThDRTMzNTk3N0FBMEE5QkM5QUVGRkVGNTMw Qzg5MzREOTlEQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAILgr5F8Xz5SxBU/e7Qnp9o1nF/kv83lVrrM K3A+cm6GlVnPlsUm97CXMnGX4UB6YUVIOScUsKjnU2/Fb0zr3PbtpxywAYDRHQuT jSt9EG5hmiRJnqUb2KNscVRLPR7Bg/jesSORz28kdOelWL4EgkSRqgcdLlCWylcW OwseTCz9Rn1WHsFInR9xx2xHSrIh8OriYtU1eAYUnsLFDSRiw3JC+O8cAurt/xQs Qq0VIp2PhkiMvyaQdJss8puEQ2BRNuKqtmQop3kgpBGxNpjX1Zt5Qz5IhVXV1HEa +xV1ABZhb9kzeg5SDWw35HD0p8cyI7wmww5jcWMhZdIXQnHA/9U= -----END CERTIFICATE-----Generated at Tue May 12 22:39:38 2026 by rpki-client