$ rpki-client -vvf rpki-rsync.idnic.net/repo/f86a13bd-b79a-450e-9be3-3d5a03ab93b1/0/8B8B53630D4CEDB1FC824C20AE9ADF468A7D43E7.mft File: 8B8B53630D4CEDB1FC824C20AE9ADF468A7D43E7.mft (raw, json) Hash identifier: ybKxXtEj71gy6OUh1w1v+jH6mtYUIWiGckD0c21/I88= Subject key identifier: 56:E2:EE:8C:20:CF:9B:41:26:67:20:15:75:64:0E:FC:68:45:8B:CD Authority key identifier: 8B:8B:53:63:0D:4C:ED:B1:FC:82:4C:20:AE:9A:DF:46:8A:7D:43:E7 Certificate issuer: /CN=8B8B53630D4CEDB1FC824C20AE9ADF468A7D43E7 Certificate serial: 18D3119B795F9176B5CB8A7800984ECFCB581C02 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8B8B53630D4CEDB1FC824C20AE9ADF468A7D43E7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f86a13bd-b79a-450e-9be3-3d5a03ab93b1/0/8B8B53630D4CEDB1FC824C20AE9ADF468A7D43E7.mft Manifest number: 0E Signing time: Tue 12 May 2026 16:00:33 +0000 Manifest this update: Tue 12 May 2026 15:55:33 +0000 Manifest next update: Wed 13 May 2026 18:49:33 +0000 Files and hashes: 1: 8B8B53630D4CEDB1FC824C20AE9ADF468A7D43E7.crl (hash: hIJWwj14MPLjPUR3FxVEOVAUdVKxZrqa3jrSwdqXoiM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f86a13bd-b79a-450e-9be3-3d5a03ab93b1/0/8B8B53630D4CEDB1FC824C20AE9ADF468A7D43E7.crl rsync://rpki-rsync.idnic.net/repo/f86a13bd-b79a-450e-9be3-3d5a03ab93b1/0/8B8B53630D4CEDB1FC824C20AE9ADF468A7D43E7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8B8B53630D4CEDB1FC824C20AE9ADF468A7D43E7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:d3:11:9b:79:5f:91:76:b5:cb:8a:78:00:98:4e:cf:cb:58:1c:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B8B53630D4CEDB1FC824C20AE9ADF468A7D43E7 Validity Not Before: May 12 15:55:33 2026 GMT Not After : May 13 18:49:33 2026 GMT Subject: CN=56E2EE8C20CF9B412667201575640EFC68458BCD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:13:8a:5f:8d:31:fb:26:8d:36:51:fd:08:6e: 36:d7:0c:5a:a1:0c:ed:d6:db:9c:a4:4f:0a:84:b3: 4b:76:9f:99:9b:58:a1:a0:f1:9b:a5:2a:91:91:b8: 69:48:a8:66:fe:f2:0e:19:ba:d5:9f:0b:ae:8b:a3: ec:7f:53:d7:1d:3d:53:8f:b2:63:cf:86:7a:44:64: ee:50:7a:48:d3:fc:58:56:61:46:04:2d:39:2a:9a: e4:53:a9:d4:2b:29:82:ca:75:88:ca:26:9a:7d:5a: 3e:0f:bd:b2:76:28:59:92:1f:1c:65:79:f0:98:ec: 1d:4e:a2:55:5b:5f:9a:91:bb:aa:cd:46:56:31:d8: dd:da:de:1b:cd:de:74:11:d4:97:42:10:0a:95:91: 1c:3d:0c:a1:a8:6f:bb:f5:ba:7b:a9:a2:62:05:a0: d8:38:92:be:79:a2:05:e0:bd:63:66:bc:00:39:7a: cc:84:92:6d:0b:b6:67:9b:5c:7d:cd:ed:bf:59:c9: 21:00:d9:dd:8a:65:ba:f1:08:b3:52:14:83:98:9b: 76:49:f5:89:56:aa:f2:a1:00:e9:a0:5b:96:a9:44: 02:1b:a9:c8:06:97:a8:21:3c:6b:78:bd:86:16:e0: 98:1e:5e:ac:a5:79:b5:0d:36:0c:fc:00:7e:6b:c0: c8:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:E2:EE:8C:20:CF:9B:41:26:67:20:15:75:64:0E:FC:68:45:8B:CD X509v3 Authority Key Identifier: keyid:8B:8B:53:63:0D:4C:ED:B1:FC:82:4C:20:AE:9A:DF:46:8A:7D:43:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f86a13bd-b79a-450e-9be3-3d5a03ab93b1/0/8B8B53630D4CEDB1FC824C20AE9ADF468A7D43E7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8B8B53630D4CEDB1FC824C20AE9ADF468A7D43E7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f86a13bd-b79a-450e-9be3-3d5a03ab93b1/0/8B8B53630D4CEDB1FC824C20AE9ADF468A7D43E7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:01:72:c1:05:f3:72:32:30:23:cf:61:1c:b6:72:c6:c8:e8: 29:10:09:fa:db:46:2d:f1:c8:3f:36:61:9f:4f:2f:8f:d1:0a: a1:9c:dd:23:2e:ae:64:a2:51:39:f4:83:16:ee:ce:99:74:9a: f7:f0:3b:11:76:8c:9d:e6:46:7a:9a:cd:54:e5:47:6a:48:30: fa:3e:78:6b:e6:77:5d:bc:ab:46:22:5d:66:c2:86:5c:fd:0a: 4b:52:9c:17:6e:40:3e:0b:8f:84:f4:c3:85:d9:c1:fe:96:66: 01:13:cf:97:2d:e3:d8:68:57:f2:db:a4:f2:f1:1c:43:2d:44: 2c:b7:9d:73:db:6e:30:7c:7c:f8:43:75:db:e2:37:3d:d5:cc: c8:58:bc:39:f4:95:48:b5:41:db:cf:32:d3:21:9f:63:32:09: aa:33:18:36:43:b0:69:b7:b8:a6:bd:62:5e:91:e9:af:a0:fa: 58:3c:ee:e8:5b:56:2f:d7:69:92:03:07:85:63:b3:2f:bd:a4: 7e:8c:e6:5a:e0:91:ee:7f:55:d3:9c:22:ab:15:bb:89:a6:1c: d3:4c:9d:19:f0:3c:df:d6:62:ef:22:f9:9e:c0:cd:2e:83:33: 8a:92:0a:86:a9:73:6d:59:ac:63:5d:bb:f6:70:88:e2:7d:b0: 60:30:5a:d9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGNMRm3lfkXa1y4p4AJhOz8tYHAIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEI4QjUzNjMwRDRDRURCMUZDODI0QzIwQUU5QURGNDY4 QTdENDNFNzAeFw0yNjA1MTIxNTU1MzNaFw0yNjA1MTMxODQ5MzNaMDMxMTAvBgNV BAMTKDU2RTJFRThDMjBDRjlCNDEyNjY3MjAxNTc1NjQwRUZDNjg0NThCQ0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgE4pfjTH7Jo02Uf0IbjbXDFqh DO3W25ykTwqEs0t2n5mbWKGg8ZulKpGRuGlIqGb+8g4ZutWfC66Lo+x/U9cdPVOP smPPhnpEZO5QekjT/FhWYUYELTkqmuRTqdQrKYLKdYjKJpp9Wj4PvbJ2KFmSHxxl efCY7B1OolVbX5qRu6rNRlYx2N3a3hvN3nQR1JdCEAqVkRw9DKGob7v1unupomIF oNg4kr55ogXgvWNmvAA5esyEkm0LtmebXH3N7b9ZySEA2d2KZbrxCLNSFIOYm3ZJ 9YlWqvKhAOmgW5apRAIbqcgGl6ghPGt4vYYW4JgeXqylebUNNgz8AH5rwMixAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVuLujCDPm0EmZyAVdWQO/GhFi80wHwYDVR0j BBgwFoAUi4tTYw1M7bH8gkwgrprfRop9Q+cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Zjg2YTEzYmQtYjc5YS00NTBlLTliZTMtM2Q1YTAzYWI5M2IxLzAvOEI4QjUzNjMw RDRDRURCMUZDODI0QzIwQUU5QURGNDY4QTdENDNFNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84QjhCNTM2MzBENENFREIxRkM4MjRDMjBBRTlBREY0NjhBN0Q0 M0U3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjg2YTEzYmQtYjc5YS00NTBlLTli ZTMtM2Q1YTAzYWI5M2IxLzAvOEI4QjUzNjMwRDRDRURCMUZDODI0QzIwQUU5QURG NDY4QTdENDNFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABoBcsEF83IyMCPPYRy2csbI6CkQCfrbRi3x yD82YZ9PL4/RCqGc3SMurmSiUTn0gxbuzpl0mvfwOxF2jJ3mRnqazVTlR2pIMPo+ eGvmd128q0YiXWbChlz9CktSnBduQD4Lj4T0w4XZwf6WZgETz5ct49hoV/LbpPLx HEMtRCy3nXPbbjB8fPhDddviNz3VzMhYvDn0lUi1QdvPMtMhn2MyCaozGDZDsGm3 uKa9Yl6R6a+g+lg87uhbVi/XaZIDB4Vjsy+9pH6M5lrgke5/VdOcIqsVu4mmHNNM nRnwPN/WYu8i+Z7AzS6DM4qSCoapc21ZrGNdu/ZwiOJ9sGAwWtk= -----END CERTIFICATE-----Generated at Tue May 12 22:20:04 2026 by rpki-client