$ rpki-client -vvf rpki-rsync.idnic.net/repo/0c1e49ab-50ca-4b3e-823c-8b3d31ba85f2/0/A8B4290DB1D500117291858DAF1B1EDF11D478CF.mft File: A8B4290DB1D500117291858DAF1B1EDF11D478CF.mft (raw, json) Hash identifier: cTXk0Q8eq9c/XEK3vtavtKakRDOJ5jc3JxHDAG8XRXU= Subject key identifier: F6:3B:4B:53:57:1B:AD:BB:8B:3F:BB:E4:A0:59:B7:FF:68:B4:AF:60 Authority key identifier: A8:B4:29:0D:B1:D5:00:11:72:91:85:8D:AF:1B:1E:DF:11:D4:78:CF Certificate issuer: /CN=A8B4290DB1D500117291858DAF1B1EDF11D478CF Certificate serial: 798B7562512B1D89796DBD597436C4176B605705 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A8B4290DB1D500117291858DAF1B1EDF11D478CF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0c1e49ab-50ca-4b3e-823c-8b3d31ba85f2/0/A8B4290DB1D500117291858DAF1B1EDF11D478CF.mft Manifest number: 70 Signing time: Thu 23 Jul 2026 19:08:34 +0000 Manifest this update: Thu 23 Jul 2026 19:03:34 +0000 Manifest next update: Fri 24 Jul 2026 21:14:34 +0000 Files and hashes: 1: 3130332e3136332e3130322e302f32332d3233203d3e20313431363733.roa (hash: pahHbmXTulV++MGHGhEL8jSNz3xJ/1KdhQdlxBhfIw4=) 2: A8B4290DB1D500117291858DAF1B1EDF11D478CF.crl (hash: q1WhMRDjTlv6SuhHZu5moSv4dlfMw/FMed3KZJnVMjQ=) 3: 3130332e3136332e3130322e302f32342d3234203d3e20313431363733.roa (hash: h1TE3m56WQ+gTVyqOOSf1UTeQzb1azE9LGSpzK549vA=) 4: 3130332e3136332e3130332e302f32342d3234203d3e20313431363733.roa (hash: /KfC4nr32tMCkBy7+tyxmf0Ms+3hn6LQNee4YzYVhVM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0c1e49ab-50ca-4b3e-823c-8b3d31ba85f2/0/A8B4290DB1D500117291858DAF1B1EDF11D478CF.crl rsync://rpki-rsync.idnic.net/repo/0c1e49ab-50ca-4b3e-823c-8b3d31ba85f2/0/A8B4290DB1D500117291858DAF1B1EDF11D478CF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A8B4290DB1D500117291858DAF1B1EDF11D478CF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 21:14:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:8b:75:62:51:2b:1d:89:79:6d:bd:59:74:36:c4:17:6b:60:57:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A8B4290DB1D500117291858DAF1B1EDF11D478CF Validity Not Before: Jul 23 19:03:34 2026 GMT Not After : Jul 24 21:14:34 2026 GMT Subject: CN=F63B4B53571BADBB8B3FBBE4A059B7FF68B4AF60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:27:55:15:51:c4:ed:b7:5e:55:c3:a9:de:6a: d9:d4:b8:17:14:af:46:b4:f4:07:17:86:37:85:2b: c6:ad:5a:e0:53:54:bd:1b:d0:a5:87:62:b5:f1:df: 5b:9c:94:35:c3:58:e1:85:96:d6:53:35:f3:71:cb: 53:f2:f8:6a:45:80:55:34:c2:b0:ff:23:c0:b4:46: fa:4f:82:76:39:11:66:9b:8f:be:88:54:65:10:1d: bc:a1:6a:be:b8:f7:aa:2d:12:bd:fd:9d:a5:34:4f: a9:e3:12:03:40:b4:37:25:eb:87:2c:06:f1:1d:3a: 38:21:11:f8:50:73:ed:90:33:9b:99:c0:fd:42:a0: fc:16:26:97:03:84:3f:ab:98:a7:33:43:5d:02:45: 48:35:e5:bc:66:0f:4c:86:63:33:ce:38:de:95:9c: e1:43:a3:4f:d3:36:b5:2a:05:01:83:de:c7:09:16: b8:5d:b3:b4:dc:86:75:55:dc:40:d5:6a:f3:41:2b: ae:b6:a6:78:10:72:ff:44:63:37:d4:cb:f3:a4:e4: 3e:c3:f0:d0:39:05:e5:b4:ba:90:6e:03:f4:69:c0: 9e:3e:27:d1:4d:ad:9b:90:5d:4c:d6:c3:b0:05:85: 22:be:ce:ac:f0:d6:72:56:9f:15:a8:d6:50:27:97: 4a:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:3B:4B:53:57:1B:AD:BB:8B:3F:BB:E4:A0:59:B7:FF:68:B4:AF:60 X509v3 Authority Key Identifier: keyid:A8:B4:29:0D:B1:D5:00:11:72:91:85:8D:AF:1B:1E:DF:11:D4:78:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0c1e49ab-50ca-4b3e-823c-8b3d31ba85f2/0/A8B4290DB1D500117291858DAF1B1EDF11D478CF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A8B4290DB1D500117291858DAF1B1EDF11D478CF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0c1e49ab-50ca-4b3e-823c-8b3d31ba85f2/0/A8B4290DB1D500117291858DAF1B1EDF11D478CF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:dc:cb:5f:d4:ee:aa:5f:63:29:17:0e:82:d8:e5:7a:cf:42: cc:e8:08:64:10:e5:82:d5:2d:b1:c5:28:00:78:62:73:99:52: d2:6e:0c:09:63:95:ae:02:d4:00:26:e9:4a:b8:8b:c9:e2:b3: 6d:bd:72:e8:43:a8:4b:68:c4:0f:20:2a:f2:3f:2e:a4:14:fa: 40:0f:6a:2e:9f:7d:b3:53:bf:e6:79:13:51:d5:ce:e5:0d:78: 6c:6c:ce:a0:d2:ab:86:a1:82:d5:b7:38:07:e3:f9:db:0b:7d: 14:ee:ff:d3:c9:68:94:b9:de:7e:0a:96:dc:e7:97:d8:99:ae: a5:b7:cd:cd:0a:20:ca:47:95:96:7a:cf:9d:16:c7:f0:90:67: 13:59:31:20:f3:61:94:42:df:6f:6a:27:3c:b8:f7:8b:d4:32: 93:8b:2f:af:5a:2f:47:68:66:ec:0d:01:c9:7c:6f:a4:c1:a1: fa:3c:f6:ee:d3:e4:fa:9c:01:4e:6e:be:fb:0e:a4:b9:ad:66: 6c:44:f4:bd:a2:1e:52:97:db:60:62:52:9e:fc:92:13:fa:fa: d5:08:05:25:27:09:90:0f:ab:a3:c0:31:e5:4e:b8:7f:78:83: 0c:c8:fa:85:ad:2f:5a:e1:ba:cc:4b:4c:79:be:6d:d2:65:fe: 81:87:f6:10 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeYt1YlErHYl5bb1ZdDbEF2tgVwUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQThCNDI5MERCMUQ1MDAxMTcyOTE4NThEQUYxQjFFREYx MUQ0NzhDRjAeFw0yNjA3MjMxOTAzMzRaFw0yNjA3MjQyMTE0MzRaMDMxMTAvBgNV BAMTKEY2M0I0QjUzNTcxQkFEQkI4QjNGQkJFNEEwNTlCN0ZGNjhCNEFGNjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCLJ1UVUcTtt15Vw6neatnUuBcU r0a09AcXhjeFK8atWuBTVL0b0KWHYrXx31uclDXDWOGFltZTNfNxy1Py+GpFgFU0 wrD/I8C0RvpPgnY5EWabj76IVGUQHbyhar6496otEr39naU0T6njEgNAtDcl64cs BvEdOjghEfhQc+2QM5uZwP1CoPwWJpcDhD+rmKczQ10CRUg15bxmD0yGYzPOON6V nOFDo0/TNrUqBQGD3scJFrhds7TchnVV3EDVavNBK662pngQcv9EYzfUy/Ok5D7D 8NA5BeW0upBuA/RpwJ4+J9FNrZuQXUzWw7AFhSK+zqzw1nJWnxWo1lAnl0rzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9jtLU1cbrbuLP7vkoFm3/2i0r2AwHwYDVR0j BBgwFoAUqLQpDbHVABFykYWNrxse3xHUeM8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGMxZTQ5YWItNTBjYS00YjNlLTgyM2MtOGIzZDMxYmE4NWYyLzAvQThCNDI5MERC MUQ1MDAxMTcyOTE4NThEQUYxQjFFREYxMUQ0NzhDRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BOEI0MjkwREIxRDUwMDExNzI5MTg1OERBRjFCMUVERjExRDQ3 OENGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGMxZTQ5YWItNTBjYS00YjNlLTgy M2MtOGIzZDMxYmE4NWYyLzAvQThCNDI5MERCMUQ1MDAxMTcyOTE4NThEQUYxQjFF REYxMUQ0NzhDRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABzcy1/U7qpfYykXDoLY5XrPQszoCGQQ5YLV LbHFKAB4YnOZUtJuDAljla4C1AAm6Uq4i8nis229cuhDqEtoxA8gKvI/LqQU+kAP ai6ffbNTv+Z5E1HVzuUNeGxszqDSq4ahgtW3OAfj+dsLfRTu/9PJaJS53n4Kltzn l9iZrqW3zc0KIMpHlZZ6z50Wx/CQZxNZMSDzYZRC329qJzy494vUMpOLL69aL0do ZuwNAcl8b6TBofo89u7T5PqcAU5uvvsOpLmtZmxE9L2iHlKX22BiUp78khP6+tUI BSUnCZAPq6PAMeVOuH94gwzI+oWtL1rhusxLTHm+bdJl/oGH9hA= -----END CERTIFICATE-----Generated at Fri Jul 24 05:48:04 2026 by rpki-client