$ rpki-client -vvf rpki-rsync.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/8828D395B775E6267ED1C496B6DA870C9DA36235.mft File: 8828D395B775E6267ED1C496B6DA870C9DA36235.mft (raw, json) Hash identifier: HW+h7tmdAFIMEraknzTARMd1EugxEhHNFBgTlXYAe9o= Subject key identifier: 90:23:D3:A9:50:1B:07:7D:F6:34:9F:6D:E8:95:83:03:4D:A4:F0:B3 Authority key identifier: 88:28:D3:95:B7:75:E6:26:7E:D1:C4:96:B6:DA:87:0C:9D:A3:62:35 Certificate issuer: /CN=8828D395B775E6267ED1C496B6DA870C9DA36235 Certificate serial: 7F1667C4344F037000FED0CF1B980BC1D33566 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8828D395B775E6267ED1C496B6DA870C9DA36235.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/8828D395B775E6267ED1C496B6DA870C9DA36235.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 15:03:18 +0000 Manifest this update: Thu 23 Jul 2026 14:58:18 +0000 Manifest next update: Fri 24 Jul 2026 15:27:18 +0000 Files and hashes: 1: 8828D395B775E6267ED1C496B6DA870C9DA36235.crl (hash: lPzhPNaovs3S7gIpF6lMAcrpIf+3eG0y5ZKRHgnyESM=) 2: 3130332e3137392e38392e302f32342d3234203d3e20313439333432.roa (hash: KKSmfUNkqalCLO37YcNIo/DR91Odj11Ccmn9dQDHPBE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/8828D395B775E6267ED1C496B6DA870C9DA36235.crl rsync://rpki-rsync.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/8828D395B775E6267ED1C496B6DA870C9DA36235.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8828D395B775E6267ED1C496B6DA870C9DA36235.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 15:27:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:16:67:c4:34:4f:03:70:00:fe:d0:cf:1b:98:0b:c1:d3:35:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8828D395B775E6267ED1C496B6DA870C9DA36235 Validity Not Before: Jul 23 14:58:18 2026 GMT Not After : Jul 24 15:27:18 2026 GMT Subject: CN=9023D3A9501B077DF6349F6DE89583034DA4F0B3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c1:83:a8:1e:3a:a7:1a:8d:25:2d:ec:26:d7: 11:9d:84:6e:99:0c:5b:55:b5:f4:3d:c3:61:30:74: 59:be:10:a1:88:25:4a:da:f6:2a:db:5e:a4:22:81: 78:1c:fd:a7:0b:77:26:b9:c4:8a:60:43:3a:21:4c: aa:2f:20:ea:58:f6:8c:33:1a:62:9d:c3:04:09:ea: 4a:ed:8e:b0:51:d3:d9:74:58:a4:94:fc:0d:d9:a6: c1:84:07:3c:e3:84:b3:fb:da:e3:4b:6d:f2:dd:0d: 19:e0:a5:10:84:e9:f2:b7:27:fa:82:4b:db:d7:15: f7:60:21:c8:a1:a3:c5:62:ed:6d:21:cc:c5:9f:c3: 61:b3:a9:7b:83:18:8f:f3:db:cd:58:dc:f1:3f:3d: f1:10:39:8f:25:46:42:92:17:16:b9:6e:c3:30:fe: 62:80:9f:0c:d7:10:e1:3b:76:b4:10:02:40:a2:a2: 65:b7:31:23:f1:26:e6:de:dd:b5:1a:33:ee:88:ed: 75:f4:e8:59:40:a1:59:3b:a1:a1:cf:f7:8a:5f:5d: 8a:1a:00:2b:d1:9f:17:e0:19:04:d0:0a:c5:45:55: 3b:db:17:67:31:b1:9b:8c:3c:37:0d:8a:ac:6f:32: 34:09:54:4d:95:75:b0:12:4f:83:5e:90:4a:1f:4f: e6:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:23:D3:A9:50:1B:07:7D:F6:34:9F:6D:E8:95:83:03:4D:A4:F0:B3 X509v3 Authority Key Identifier: keyid:88:28:D3:95:B7:75:E6:26:7E:D1:C4:96:B6:DA:87:0C:9D:A3:62:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/8828D395B775E6267ED1C496B6DA870C9DA36235.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8828D395B775E6267ED1C496B6DA870C9DA36235.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/8828D395B775E6267ED1C496B6DA870C9DA36235.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:92:19:dc:ab:2e:86:c2:94:4b:12:fb:a5:7c:09:5c:7e:81: 5d:2a:c1:da:75:65:26:9e:2e:db:52:31:5d:5d:e8:86:70:0a: a5:38:3e:96:91:3e:a1:bc:81:a8:1c:91:ce:dc:cd:2c:b8:94: 05:6e:0e:40:32:de:90:b2:a3:a8:a4:83:b2:b4:ed:d8:e0:72: d0:04:16:cb:cd:47:1c:88:2f:80:a4:59:c1:4c:69:e4:2f:8c: fd:1f:2d:c4:3c:4f:91:e9:ad:9d:0e:08:c5:5d:5e:7a:88:c0: 92:22:52:0e:5a:c0:22:98:f2:fb:33:f5:a5:e7:8d:4c:01:21: 60:2f:9f:d6:8b:b9:86:f4:be:25:0e:02:db:55:2b:31:12:62: d7:1b:7f:87:92:4a:70:75:02:7f:87:d0:1a:93:e7:b2:ef:b1: f0:f5:88:52:17:af:6b:81:d7:2a:fc:e7:8d:8f:c7:86:af:af: c1:e0:46:14:0d:b2:e6:ca:3c:00:f0:da:6d:10:34:84:0d:92: 65:63:e4:90:d7:c5:3f:95:c0:a3:28:06:50:2a:e6:f9:ae:36: 32:f5:9e:95:63:b6:82:62:00:86:53:0e:c0:f1:5a:b2:63:18: 32:c6:6b:50:df:a4:0a:61:1d:66:d9:4a:c8:c4:f3:55:e0:b7: 03:70:49:a6 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgITfxZnxDRPA3AA/tDPG5gLwdM1ZjANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyg4ODI4RDM5NUI3NzVFNjI2N0VEMUM0OTZCNkRBODcwQzlE QTM2MjM1MB4XDTI2MDcyMzE0NTgxOFoXDTI2MDcyNDE1MjcxOFowMzExMC8GA1UE AxMoOTAyM0QzQTk1MDFCMDc3REY2MzQ5RjZERTg5NTgzMDM0REE0RjBCMzCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMHBg6geOqcajSUt7CbXEZ2EbpkM W1W19D3DYTB0Wb4QoYglStr2KttepCKBeBz9pwt3JrnEimBDOiFMqi8g6lj2jDMa Yp3DBAnqSu2OsFHT2XRYpJT8DdmmwYQHPOOEs/va40tt8t0NGeClEITp8rcn+oJL 29cV92AhyKGjxWLtbSHMxZ/DYbOpe4MYj/PbzVjc8T898RA5jyVGQpIXFrluwzD+ YoCfDNcQ4Tt2tBACQKKiZbcxI/Em5t7dtRoz7ojtdfToWUChWTuhoc/3il9dihoA K9GfF+AZBNAKxUVVO9sXZzGxm4w8Nw2KrG8yNAlUTZV1sBJPg16QSh9P5ksCAwEA AaOCAjwwggI4MB0GA1UdDgQWBBSQI9OpUBsHffY0n23olYMDTaTwszAfBgNVHSME GDAWgBSIKNOVt3XmJn7RxJa22ocMnaNiNTAOBgNVHQ8BAf8EBAMCB4AwgYYGA1Ud HwR/MH0we6B5oHeGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8x OWMyNzYyMS1lMjk3LTQxMDAtOTcxYS0xYzY5NjdjNTJiMWIvMC84ODI4RDM5NUI3 NzVFNjI2N0VEMUM0OTZCNkRBODcwQzlEQTM2MjM1LmNybDByBggrBgEFBQcBAQRm MGQwYgYIKwYBBQUHMAKGVnJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVw by9JRE5JQy8xLzg4MjhEMzk1Qjc3NUU2MjY3RUQxQzQ5NkI2REE4NzBDOURBMzYy MzUuY2VyMIGUBggrBgEFBQcBCwSBhzCBhDCBgQYIKwYBBQUHMAuGdXJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8xOWMyNzYyMS1lMjk3LTQxMDAtOTcx YS0xYzY5NjdjNTJiMWIvMC84ODI4RDM5NUI3NzVFNjI2N0VEMUM0OTZCNkRBODcw QzlEQTM2MjM1Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADANBgkqhkiG9w0BAQsFAAOCAQEAXpIZ3KsuhsKUSxL7pXwJXH6BXSrB2nVlJp4u 21IxXV3ohnAKpTg+lpE+obyBqByRztzNLLiUBW4OQDLekLKjqKSDsrTt2OBy0AQW y81HHIgvgKRZwUxp5C+M/R8txDxPkemtnQ4IxV1eeojAkiJSDlrAIpjy+zP1peeN TAEhYC+f1ou5hvS+JQ4C21UrMRJi1xt/h5JKcHUCf4fQGpPnsu+x8PWIUheva4HX KvznjY/Hhq+vweBGFA2y5so8APDabRA0hA2SZWPkkNfFP5XAoygGUCrm+a42MvWe lWO2gmIAhlMOwPFasmMYMsZrUN+kCmEdZtlKyMTzVeC3A3BJpg== -----END CERTIFICATE-----Generated at Fri Jul 24 06:24:16 2026 by rpki-client