$ rpki-client -vvf rpki-rsync.idnic.net/repo/f86a13bd-b79a-450e-9be3-3d5a03ab93b1/0/8B8B53630D4CEDB1FC824C20AE9ADF468A7D43E7.mft File: 8B8B53630D4CEDB1FC824C20AE9ADF468A7D43E7.mft (raw, json) Hash identifier: hD5DhOxZvL4e4J+XWYTsfHP/7tH+S3BBr4+RbhaWRZI= Subject key identifier: 02:3E:7E:F0:C6:35:27:9D:A5:08:C8:21:4F:3C:66:CB:4B:26:90:7D Authority key identifier: 8B:8B:53:63:0D:4C:ED:B1:FC:82:4C:20:AE:9A:DF:46:8A:7D:43:E7 Certificate issuer: /CN=8B8B53630D4CEDB1FC824C20AE9ADF468A7D43E7 Certificate serial: 1E25015A3F033B3435DF69252B0E55F5641D7C9F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8B8B53630D4CEDB1FC824C20AE9ADF468A7D43E7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f86a13bd-b79a-450e-9be3-3d5a03ab93b1/0/8B8B53630D4CEDB1FC824C20AE9ADF468A7D43E7.mft Manifest number: 6F Signing time: Fri 24 Jul 2026 03:33:42 +0000 Manifest this update: Fri 24 Jul 2026 03:28:42 +0000 Manifest next update: Sat 25 Jul 2026 07:28:42 +0000 Files and hashes: 1: 8B8B53630D4CEDB1FC824C20AE9ADF468A7D43E7.crl (hash: eA6+OFBuUWZhEy/ah3qSP4d2+Lh6iso9pTf1qru/j34=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f86a13bd-b79a-450e-9be3-3d5a03ab93b1/0/8B8B53630D4CEDB1FC824C20AE9ADF468A7D43E7.crl rsync://rpki-rsync.idnic.net/repo/f86a13bd-b79a-450e-9be3-3d5a03ab93b1/0/8B8B53630D4CEDB1FC824C20AE9ADF468A7D43E7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8B8B53630D4CEDB1FC824C20AE9ADF468A7D43E7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:30:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:25:01:5a:3f:03:3b:34:35:df:69:25:2b:0e:55:f5:64:1d:7c:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B8B53630D4CEDB1FC824C20AE9ADF468A7D43E7 Validity Not Before: Jul 24 03:28:42 2026 GMT Not After : Jul 25 07:28:42 2026 GMT Subject: CN=023E7EF0C635279DA508C8214F3C66CB4B26907D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:40:ba:b4:e6:2d:e4:ef:86:52:95:bc:4a:0d: 79:1a:a6:21:d9:83:b6:85:ba:bc:84:4f:47:cc:65: 07:a1:fa:46:5f:dd:19:2c:36:a8:9c:30:bd:be:4e: 50:17:77:ed:96:cd:44:e4:7e:8f:30:b9:8e:0f:b5: 32:2e:b7:a4:c3:e5:9e:f6:23:cf:0f:1c:cb:a3:34: 26:bb:f0:e7:fb:89:28:b5:a9:e6:83:aa:84:e0:22: 0e:6e:35:fd:f5:44:0f:6c:ec:0b:1d:31:7d:eb:8c: f1:de:b9:88:d1:9a:37:82:d1:51:dc:19:45:90:42: 37:ef:ac:a1:51:2d:46:24:c5:7f:9f:77:13:26:49: 23:2f:8e:76:23:db:e5:fd:ab:49:13:6d:08:53:ea: 57:3b:19:18:ad:f1:e7:17:f2:8d:6f:44:c7:81:83: c9:f0:9f:f6:fc:dd:42:59:6c:f7:e8:43:ac:34:6d: 33:c9:1c:88:a1:1b:cd:34:f3:7e:a9:e9:7b:60:cc: 5a:27:d8:8c:99:9c:ae:8b:a0:2c:55:9d:5e:a3:5c: 3f:42:5b:97:20:48:94:e4:c6:fe:09:b9:5b:3e:f7: 3a:7a:da:00:8e:99:39:88:6d:c7:48:6b:5c:28:22: 62:a5:d5:37:10:ca:64:ce:7a:e4:7d:8a:e7:af:60: 7f:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:3E:7E:F0:C6:35:27:9D:A5:08:C8:21:4F:3C:66:CB:4B:26:90:7D X509v3 Authority Key Identifier: keyid:8B:8B:53:63:0D:4C:ED:B1:FC:82:4C:20:AE:9A:DF:46:8A:7D:43:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f86a13bd-b79a-450e-9be3-3d5a03ab93b1/0/8B8B53630D4CEDB1FC824C20AE9ADF468A7D43E7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8B8B53630D4CEDB1FC824C20AE9ADF468A7D43E7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f86a13bd-b79a-450e-9be3-3d5a03ab93b1/0/8B8B53630D4CEDB1FC824C20AE9ADF468A7D43E7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:1c:f4:b4:27:6f:c5:e3:9f:7e:fb:94:f3:b1:ee:36:0a:e3: ab:eb:7e:85:e3:17:fe:12:1f:53:a7:8e:b1:b3:f7:8b:be:f6: 67:28:0e:76:98:87:90:78:ca:6c:5c:ad:83:bc:05:2f:6b:57: 4b:1b:8f:82:70:be:44:e4:c5:37:cd:a4:c4:96:91:fd:37:e1: c5:ca:bf:6d:bd:87:0c:a0:b4:21:f9:cb:be:cd:a8:75:e0:ae: f1:5b:8b:d3:88:04:63:43:2e:8c:63:5e:e4:78:b1:2f:75:b7: cf:b2:fb:cf:04:5a:cc:c4:37:ee:29:f6:5c:8f:7c:bf:51:80: d9:c6:d4:d0:91:cc:01:5c:06:5a:98:21:f5:7b:5d:55:2e:3b: b4:5a:37:ed:1e:72:50:43:b6:29:9f:4d:4b:a1:7d:e1:0a:94: 1e:54:ee:9f:2d:8f:62:da:f9:5a:b7:01:6e:84:70:64:26:6b: 5a:ac:f9:21:ce:87:0d:28:65:de:6a:6b:aa:b1:04:e8:b5:ab: 41:27:e1:df:a0:a0:cd:b8:70:d8:cb:e8:40:3a:7b:ba:87:d4: 0f:27:22:9e:4d:02:c5:19:30:d7:ad:67:b4:e6:03:0c:56:cc: 15:7b:4e:c1:e7:a7:2a:c8:fa:b3:ff:07:58:d1:f9:7c:df:0f: a1:45:1f:08 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHiUBWj8DOzQ132klKw5V9WQdfJ8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEI4QjUzNjMwRDRDRURCMUZDODI0QzIwQUU5QURGNDY4 QTdENDNFNzAeFw0yNjA3MjQwMzI4NDJaFw0yNjA3MjUwNzI4NDJaMDMxMTAvBgNV BAMTKDAyM0U3RUYwQzYzNTI3OURBNTA4QzgyMTRGM0M2NkNCNEIyNjkwN0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkQLq05i3k74ZSlbxKDXkapiHZ g7aFuryET0fMZQeh+kZf3RksNqicML2+TlAXd+2WzUTkfo8wuY4PtTIut6TD5Z72 I88PHMujNCa78Of7iSi1qeaDqoTgIg5uNf31RA9s7AsdMX3rjPHeuYjRmjeC0VHc GUWQQjfvrKFRLUYkxX+fdxMmSSMvjnYj2+X9q0kTbQhT6lc7GRit8ecX8o1vRMeB g8nwn/b83UJZbPfoQ6w0bTPJHIihG800836p6XtgzFon2IyZnK6LoCxVnV6jXD9C W5cgSJTkxv4JuVs+9zp62gCOmTmIbcdIa1woImKl1TcQymTOeuR9iuevYH/RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAj5+8MY1J52lCMghTzxmy0smkH0wHwYDVR0j BBgwFoAUi4tTYw1M7bH8gkwgrprfRop9Q+cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Zjg2YTEzYmQtYjc5YS00NTBlLTliZTMtM2Q1YTAzYWI5M2IxLzAvOEI4QjUzNjMw RDRDRURCMUZDODI0QzIwQUU5QURGNDY4QTdENDNFNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84QjhCNTM2MzBENENFREIxRkM4MjRDMjBBRTlBREY0NjhBN0Q0 M0U3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjg2YTEzYmQtYjc5YS00NTBlLTli ZTMtM2Q1YTAzYWI5M2IxLzAvOEI4QjUzNjMwRDRDRURCMUZDODI0QzIwQUU5QURG NDY4QTdENDNFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIwc9LQnb8Xjn377lPOx7jYK46vrfoXjF/4S H1OnjrGz94u+9mcoDnaYh5B4ymxcrYO8BS9rV0sbj4JwvkTkxTfNpMSWkf034cXK v229hwygtCH5y77NqHXgrvFbi9OIBGNDLoxjXuR4sS91t8+y+88EWszEN+4p9lyP fL9RgNnG1NCRzAFcBlqYIfV7XVUuO7RaN+0eclBDtimfTUuhfeEKlB5U7p8tj2La +Vq3AW6EcGQma1qs+SHOhw0oZd5qa6qxBOi1q0En4d+goM24cNjL6EA6e7qH1A8n Ip5NAsUZMNetZ7TmAwxWzBV7TsHnpyrI+rP/B1jR+XzfD6FFHwg= -----END CERTIFICATE-----Generated at Fri Jul 24 06:22:53 2026 by rpki-client