$ rpki-client -vvf rpki-rsync.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/8644EF5CAFD6FF2C753833B588D6D5E40AD9C077.mft File: 8644EF5CAFD6FF2C753833B588D6D5E40AD9C077.mft (raw, json) Hash identifier: Ljai8kY3SjZzdTJW7U8yRX1Nsv67HJbb/Vj4Lh+lLlk= Subject key identifier: B3:6B:F0:69:C8:E1:03:9C:9C:17:12:A3:C7:01:DB:D1:DB:BE:1E:56 Authority key identifier: 86:44:EF:5C:AF:D6:FF:2C:75:38:33:B5:88:D6:D5:E4:0A:D9:C0:77 Certificate issuer: /CN=8644EF5CAFD6FF2C753833B588D6D5E40AD9C077 Certificate serial: 153D68F24D35140B5A049FD742A42103A5A7155B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8644EF5CAFD6FF2C753833B588D6D5E40AD9C077.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/8644EF5CAFD6FF2C753833B588D6D5E40AD9C077.mft Manifest number: 70 Signing time: Fri 24 Jul 2026 08:55:17 +0000 Manifest this update: Fri 24 Jul 2026 08:50:17 +0000 Manifest next update: Sat 25 Jul 2026 09:55:17 +0000 Files and hashes: 1: 323430353a63303a3a2f33322d3438203d3e20313338383831.roa (hash: A51y95Y2VvHOxleNisrOn7Mw2CXWlCwKbBD4RKfiRXo=) 2: 3130332e3134302e3138382e302f32342d3234203d3e20313338383831.roa (hash: V+R7emBXYGxGYC8TKAJDN/rKFNkkzGGzXMecTJssl6Q=) 3: 8644EF5CAFD6FF2C753833B588D6D5E40AD9C077.crl (hash: eCEehdE9kJQu+EWdkP3Ru+1AZANnnoaOmBQZ8WZj/qg=) 4: 3130332e3134302e3138392e302f32342d3234203d3e20313338383831.roa (hash: buNf/KMT3H26jyT7kcH4G4XIVCs19dscJeFhejymKUs=) 5: 3130332e3134302e3138382e302f32332d3234203d3e20313338383831.roa (hash: AiKeHz2pWrwnk84HIHiggHrF6Y+TQyS0iMZkjpVVcMY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/8644EF5CAFD6FF2C753833B588D6D5E40AD9C077.crl rsync://rpki-rsync.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/8644EF5CAFD6FF2C753833B588D6D5E40AD9C077.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8644EF5CAFD6FF2C753833B588D6D5E40AD9C077.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 07:07:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:3d:68:f2:4d:35:14:0b:5a:04:9f:d7:42:a4:21:03:a5:a7:15:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8644EF5CAFD6FF2C753833B588D6D5E40AD9C077 Validity Not Before: Jul 24 08:50:17 2026 GMT Not After : Jul 25 09:55:17 2026 GMT Subject: CN=B36BF069C8E1039C9C1712A3C701DBD1DBBE1E56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f8:1a:7e:d1:86:a9:42:1e:f2:00:4f:d5:a3: 54:c6:99:bb:69:81:b8:90:d4:46:76:62:1a:65:23: 09:ba:e4:e0:3d:36:c5:22:2c:1c:fb:ac:81:fd:a1: 4c:85:31:3d:81:68:32:30:9f:25:8c:ef:75:16:0c: a3:7a:35:78:75:d4:8e:b1:6d:de:a5:92:de:65:e5: 90:c0:6f:2e:40:d0:67:38:c0:80:44:73:a3:c0:c0: ec:1b:44:3d:6a:62:20:f8:92:e0:0e:68:42:dd:d9: bc:39:36:e0:dc:1d:f0:43:65:f6:36:3f:7f:d5:d4: a7:8b:90:54:1a:89:7e:87:cb:05:45:37:fc:f4:86: 24:2a:4f:ff:75:14:85:ab:22:e8:dc:20:4a:c1:fd: e3:a3:7f:29:39:4b:a3:00:27:59:45:f9:68:76:2f: 22:e8:bf:88:64:26:da:de:c7:e3:b0:a5:dc:e7:d5: 49:1e:d3:21:3d:ee:4a:a7:a1:05:c1:26:d5:5f:17: 01:c4:7c:f4:62:bd:11:ad:e2:70:0c:d1:1c:40:df: 99:61:ad:2c:d1:5c:ae:9d:16:72:35:25:9b:ba:54: 49:f2:a4:4b:30:1b:76:41:58:5a:a6:bb:76:5c:47: 71:52:f5:50:61:ff:e7:82:5c:d3:d9:ce:18:0a:68: 93:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:6B:F0:69:C8:E1:03:9C:9C:17:12:A3:C7:01:DB:D1:DB:BE:1E:56 X509v3 Authority Key Identifier: keyid:86:44:EF:5C:AF:D6:FF:2C:75:38:33:B5:88:D6:D5:E4:0A:D9:C0:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/8644EF5CAFD6FF2C753833B588D6D5E40AD9C077.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8644EF5CAFD6FF2C753833B588D6D5E40AD9C077.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/8644EF5CAFD6FF2C753833B588D6D5E40AD9C077.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:25:c8:a2:d3:69:d4:60:e3:79:85:8a:a5:75:3a:0a:df:0d: 0e:97:a9:0e:07:01:b2:3e:54:be:b3:4a:d1:45:b2:ca:b6:b0: 9c:dd:a4:c6:76:34:e4:a4:7c:8e:14:8c:fc:6e:5b:d7:4c:5a: dc:98:56:3c:b9:e9:4f:90:67:3c:ef:77:5f:62:4c:2a:9b:23: c5:52:9c:72:b3:ea:1d:cf:bd:08:5a:d2:2a:91:3a:43:6f:74: c7:79:fd:2d:6a:c2:6e:d9:59:f8:c3:b4:63:da:46:96:92:42: 13:f4:11:6c:f9:c0:2a:32:ff:9c:d5:a6:00:7e:2c:e8:7c:19: 6a:94:f7:26:b8:80:b7:1b:c2:a5:4d:8b:db:70:76:32:af:33: d5:0e:5e:2e:ff:49:8e:ec:db:f2:20:9f:91:98:fb:76:0b:8c: 7c:db:fb:43:03:e3:60:a8:77:9c:78:c2:67:48:92:d6:09:a6: f6:9b:ef:14:cd:90:94:56:77:28:9b:25:d8:cd:71:69:da:d7: e4:fc:74:73:7a:9e:b3:bd:c5:65:7d:0f:cc:18:ee:8a:8f:67: b1:d6:af:b8:45:47:37:b0:bd:de:00:d0:55:08:11:bd:11:96: 22:5e:03:e6:fe:71:fb:fc:f0:5b:a0:13:6c:80:21:59:6a:0c: 63:c9:f9:f6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFT1o8k01FAtaBJ/XQqQhA6WnFVswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODY0NEVGNUNBRkQ2RkYyQzc1MzgzM0I1ODhENkQ1RTQw QUQ5QzA3NzAeFw0yNjA3MjQwODUwMTdaFw0yNjA3MjUwOTU1MTdaMDMxMTAvBgNV BAMTKEIzNkJGMDY5QzhFMTAzOUM5QzE3MTJBM0M3MDFEQkQxREJCRTFFNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC++Bp+0YapQh7yAE/Vo1TGmbtp gbiQ1EZ2YhplIwm65OA9NsUiLBz7rIH9oUyFMT2BaDIwnyWM73UWDKN6NXh11I6x bd6lkt5l5ZDAby5A0Gc4wIBEc6PAwOwbRD1qYiD4kuAOaELd2bw5NuDcHfBDZfY2 P3/V1KeLkFQaiX6HywVFN/z0hiQqT/91FIWrIujcIErB/eOjfyk5S6MAJ1lF+Wh2 LyLov4hkJtrex+Owpdzn1Uke0yE97kqnoQXBJtVfFwHEfPRivRGt4nAM0RxA35lh rSzRXK6dFnI1JZu6VEnypEswG3ZBWFqmu3ZcR3FS9VBh/+eCXNPZzhgKaJOrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUs2vwacjhA5ycFxKjxwHb0du+HlYwHwYDVR0j BBgwFoAUhkTvXK/W/yx1ODO1iNbV5ArZwHcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDJjYjBiM2EtNjkyZC00NDJlLTkzMDgtOTAzYzAyZDU3MThmLzAvODY0NEVGNUNB RkQ2RkYyQzc1MzgzM0I1ODhENkQ1RTQwQUQ5QzA3Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NjQ0RUY1Q0FGRDZGRjJDNzUzODMzQjU4OEQ2RDVFNDBBRDlD MDc3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDJjYjBiM2EtNjkyZC00NDJlLTkz MDgtOTAzYzAyZDU3MThmLzAvODY0NEVGNUNBRkQ2RkYyQzc1MzgzM0I1ODhENkQ1 RTQwQUQ5QzA3Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJglyKLTadRg43mFiqV1OgrfDQ6XqQ4HAbI+ VL6zStFFssq2sJzdpMZ2NOSkfI4UjPxuW9dMWtyYVjy56U+QZzzvd19iTCqbI8VS nHKz6h3PvQha0iqROkNvdMd5/S1qwm7ZWfjDtGPaRpaSQhP0EWz5wCoy/5zVpgB+ LOh8GWqU9ya4gLcbwqVNi9twdjKvM9UOXi7/SY7s2/Ign5GY+3YLjHzb+0MD42Co d5x4wmdIktYJpvab7xTNkJRWdyibJdjNcWna1+T8dHN6nrO9xWV9D8wY7oqPZ7HW r7hFRzewvd4A0FUIEb0RliJeA+b+cfv88FugE2yAIVlqDGPJ+fY= -----END CERTIFICATE-----Generated at Fri Jul 24 11:24:09 2026 by rpki-client