$ rpki-client -vvf rpki-rsync.idnic.net/repo/03908782-4520-45b4-99ed-193e51df51c3/0/8EA8EC991253F0665F4149D5FE42C3F8CF2255D8.mft File: 8EA8EC991253F0665F4149D5FE42C3F8CF2255D8.mft (raw, json) Hash identifier: +nP8xFC9j4aKGXdGZa22S4wwqIXC9RFE8rqkMfupM/k= Subject key identifier: AF:C4:CB:50:F2:E6:D1:C9:27:72:9D:A6:85:63:D1:DD:2A:15:12:7A Authority key identifier: 8E:A8:EC:99:12:53:F0:66:5F:41:49:D5:FE:42:C3:F8:CF:22:55:D8 Certificate issuer: /CN=8EA8EC991253F0665F4149D5FE42C3F8CF2255D8 Certificate serial: 3C4371E3C0E7AB10155D33DE2D0ED072330F9B13 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8EA8EC991253F0665F4149D5FE42C3F8CF2255D8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/03908782-4520-45b4-99ed-193e51df51c3/0/8EA8EC991253F0665F4149D5FE42C3F8CF2255D8.mft Manifest number: 70 Signing time: Fri 24 Jul 2026 09:10:39 +0000 Manifest this update: Fri 24 Jul 2026 09:05:39 +0000 Manifest next update: Sat 25 Jul 2026 12:14:39 +0000 Files and hashes: 1: 3130332e3138302e3136352e302f32342d3234203d3e20313338313331.roa (hash: YXjtjwoesJUSGw40nC73us7OdL7eSn74JJVfMRae8cI=) 2: 8EA8EC991253F0665F4149D5FE42C3F8CF2255D8.crl (hash: H/SL2vXg46kpZOLSv/dVVLLhuGmXh23C+r2b7W4A41A=) 3: 3130332e3138302e3136342e302f32342d3234203d3e20313338313331.roa (hash: kq6A8cL9NTZnFPc2HUzKmlVXrKIf6u5lrw0WIGV14uo=) 4: 3130332e3138302e3136342e302f32332d3233203d3e20313338313331.roa (hash: lli6DgdKqwmEkLtB+BG1rU9nYBqGkyyXfGUHRRk2kyY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/03908782-4520-45b4-99ed-193e51df51c3/0/8EA8EC991253F0665F4149D5FE42C3F8CF2255D8.crl rsync://rpki-rsync.idnic.net/repo/03908782-4520-45b4-99ed-193e51df51c3/0/8EA8EC991253F0665F4149D5FE42C3F8CF2255D8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8EA8EC991253F0665F4149D5FE42C3F8CF2255D8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 07:07:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:43:71:e3:c0:e7:ab:10:15:5d:33:de:2d:0e:d0:72:33:0f:9b:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8EA8EC991253F0665F4149D5FE42C3F8CF2255D8 Validity Not Before: Jul 24 09:05:39 2026 GMT Not After : Jul 25 12:14:39 2026 GMT Subject: CN=AFC4CB50F2E6D1C927729DA68563D1DD2A15127A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:58:a8:3e:67:dd:1a:9a:f8:61:99:f2:37:d3: b4:aa:7c:93:5d:69:4e:db:0c:c8:4d:26:0f:aa:f1: c5:b2:5c:15:8c:14:62:a8:77:82:09:7d:f1:09:a8: ca:e2:23:2a:d5:f5:55:41:49:12:7e:28:a6:7b:3f: b5:49:a5:f0:f2:f6:c6:41:1b:81:14:0b:dc:24:65: 85:8c:29:0e:8b:b6:d1:e1:96:84:90:7f:ee:47:71: 1c:08:dd:cf:96:ab:70:b2:9a:8e:d3:6c:8c:d5:75: c7:9d:d6:f1:16:16:25:53:36:aa:fe:9c:0e:8f:a5: 8d:2f:a2:c6:ff:9a:0a:f8:68:82:8f:85:15:bc:a2: a3:02:7b:a5:c5:09:b1:a4:30:b1:0d:d4:28:86:60: ff:8a:e9:bd:bb:73:a6:65:54:df:f9:7a:50:aa:51: 02:9c:11:d2:30:24:a0:9c:be:a5:41:2b:21:9e:7e: da:67:b7:86:d6:c2:34:d9:07:f9:00:f5:f3:a7:db: af:c3:35:73:fc:73:2c:f3:b1:c7:fd:3c:6f:d3:23: 65:0d:f9:ad:25:12:97:60:cc:68:42:c9:3d:eb:56: 57:33:54:8e:11:a7:d2:39:0a:6a:b6:6c:6b:bc:39: 48:ba:36:e9:bf:41:bb:eb:86:62:ad:d9:5c:f4:c2: 7f:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:C4:CB:50:F2:E6:D1:C9:27:72:9D:A6:85:63:D1:DD:2A:15:12:7A X509v3 Authority Key Identifier: keyid:8E:A8:EC:99:12:53:F0:66:5F:41:49:D5:FE:42:C3:F8:CF:22:55:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/03908782-4520-45b4-99ed-193e51df51c3/0/8EA8EC991253F0665F4149D5FE42C3F8CF2255D8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8EA8EC991253F0665F4149D5FE42C3F8CF2255D8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/03908782-4520-45b4-99ed-193e51df51c3/0/8EA8EC991253F0665F4149D5FE42C3F8CF2255D8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:52:8b:61:28:62:6a:37:28:6f:14:22:96:8e:48:25:12:ad: a0:6d:18:5d:a2:bd:c5:eb:a3:4f:17:b2:1f:c6:6b:51:6b:ae: fc:6a:80:5a:23:77:e6:9c:45:28:8a:9d:86:c3:73:89:13:5b: c9:f1:65:65:8e:ff:20:87:14:30:03:de:70:e8:e1:90:ce:8b: e1:fb:f4:63:3b:10:00:1b:6b:b3:c7:f8:19:ac:45:e5:32:ad: 74:a3:08:b4:58:ba:e8:b6:64:e8:9d:b6:d0:a2:3d:d3:4c:9e: e8:29:3a:00:a6:5a:13:b1:2a:56:e7:ed:14:4b:c9:f8:94:37: f0:3d:63:db:6f:93:d0:ab:c1:97:4d:91:6a:14:72:d1:46:4d: e5:73:c9:21:3a:62:0c:da:1d:b9:99:64:0d:77:70:62:aa:d2: ca:51:84:dd:4c:54:4e:74:bc:05:ff:c1:33:a0:c4:29:96:d1: 7e:2e:39:50:bb:70:d2:83:a6:ff:1f:84:80:a6:ce:96:73:b9: cc:a5:93:c7:4e:13:f7:bb:89:96:f5:cc:a6:37:f7:73:2d:98: d5:af:e0:5c:91:03:63:26:89:37:f1:ce:ad:93:2b:c4:aa:b1: 21:4a:2f:bf:34:3f:5a:c2:a1:1a:7d:d8:d9:55:cc:aa:9c:5a: a6:a7:b9:34 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPENx48DnqxAVXTPeLQ7QcjMPmxMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEVBOEVDOTkxMjUzRjA2NjVGNDE0OUQ1RkU0MkMzRjhD RjIyNTVEODAeFw0yNjA3MjQwOTA1MzlaFw0yNjA3MjUxMjE0MzlaMDMxMTAvBgNV BAMTKEFGQzRDQjUwRjJFNkQxQzkyNzcyOURBNjg1NjNEMUREMkExNTEyN0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnWKg+Z90amvhhmfI307SqfJNd aU7bDMhNJg+q8cWyXBWMFGKod4IJffEJqMriIyrV9VVBSRJ+KKZ7P7VJpfDy9sZB G4EUC9wkZYWMKQ6LttHhloSQf+5HcRwI3c+Wq3Cymo7TbIzVdced1vEWFiVTNqr+ nA6PpY0vosb/mgr4aIKPhRW8oqMCe6XFCbGkMLEN1CiGYP+K6b27c6ZlVN/5elCq UQKcEdIwJKCcvqVBKyGeftpnt4bWwjTZB/kA9fOn26/DNXP8cyzzscf9PG/TI2UN +a0lEpdgzGhCyT3rVlczVI4Rp9I5Cmq2bGu8OUi6Num/QbvrhmKt2Vz0wn/VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUr8TLUPLm0ckncp2mhWPR3SoVEnowHwYDVR0j BBgwFoAUjqjsmRJT8GZfQUnV/kLD+M8iVdgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDM5MDg3ODItNDUyMC00NWI0LTk5ZWQtMTkzZTUxZGY1MWMzLzAvOEVBOEVDOTkx MjUzRjA2NjVGNDE0OUQ1RkU0MkMzRjhDRjIyNTVEOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84RUE4RUM5OTEyNTNGMDY2NUY0MTQ5RDVGRTQyQzNGOENGMjI1 NUQ4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDM5MDg3ODItNDUyMC00NWI0LTk5 ZWQtMTkzZTUxZGY1MWMzLzAvOEVBOEVDOTkxMjUzRjA2NjVGNDE0OUQ1RkU0MkMz RjhDRjIyNTVEOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADFSi2EoYmo3KG8UIpaOSCUSraBtGF2ivcXr o08Xsh/Ga1FrrvxqgFojd+acRSiKnYbDc4kTW8nxZWWO/yCHFDAD3nDo4ZDOi+H7 9GM7EAAba7PH+BmsReUyrXSjCLRYuui2ZOidttCiPdNMnugpOgCmWhOxKlbn7RRL yfiUN/A9Y9tvk9CrwZdNkWoUctFGTeVzySE6YgzaHbmZZA13cGKq0spRhN1MVE50 vAX/wTOgxCmW0X4uOVC7cNKDpv8fhICmzpZzucylk8dOE/e7iZb1zKY393MtmNWv 4FyRA2MmiTfxzq2TK8SqsSFKL780P1rCoRp92NlVzKqcWqanuTQ= -----END CERTIFICATE-----Generated at Fri Jul 24 16:18:41 2026 by rpki-client