$ rpki-client -vvf rpki-rsync.idnic.net/repo/1bae58ac-5917-4069-9a6c-83dc1ba32126/0/E8F23942C871B1A23D50AA7027A74ABDC7172EA3.mft File: E8F23942C871B1A23D50AA7027A74ABDC7172EA3.mft (raw, json) Hash identifier: 1IpNW1Gc0jWUbTguyCAOgMPUsfZY9X84FLJVbXGnXBo= Subject key identifier: 0A:80:F9:E6:F9:A5:4B:A0:B5:D6:BA:BB:4F:D8:04:AF:26:49:B2:45 Authority key identifier: E8:F2:39:42:C8:71:B1:A2:3D:50:AA:70:27:A7:4A:BD:C7:17:2E:A3 Certificate issuer: /CN=E8F23942C871B1A23D50AA7027A74ABDC7172EA3 Certificate serial: 41523C2E50B0D218D5341384B5EB7C3EF2796C8D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E8F23942C871B1A23D50AA7027A74ABDC7172EA3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1bae58ac-5917-4069-9a6c-83dc1ba32126/0/E8F23942C871B1A23D50AA7027A74ABDC7172EA3.mft Manifest number: 70 Signing time: Fri 24 Jul 2026 13:15:43 +0000 Manifest this update: Fri 24 Jul 2026 13:10:43 +0000 Manifest next update: Sat 25 Jul 2026 15:56:43 +0000 Files and hashes: 1: E8F23942C871B1A23D50AA7027A74ABDC7172EA3.crl (hash: NH50tYISfZlehnR5GeDwf8/gYu0cfki019OxzfNPqgk=) 2: 3130332e3234362e3130372e302f32342d3234203d3e20313331373738.roa (hash: hL7QfKjtDKqwKchVRtqitw7xLrTQDNQicxI0MMMupQI=) 3: 323030313a6466303a3232393a3a2f34382d3438203d3e20313331373738.roa (hash: /GUQyhQCCG48GVOr5PjkMlvyumHtwdaSkLWzQJVBKPU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1bae58ac-5917-4069-9a6c-83dc1ba32126/0/E8F23942C871B1A23D50AA7027A74ABDC7172EA3.crl rsync://rpki-rsync.idnic.net/repo/1bae58ac-5917-4069-9a6c-83dc1ba32126/0/E8F23942C871B1A23D50AA7027A74ABDC7172EA3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E8F23942C871B1A23D50AA7027A74ABDC7172EA3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 07:07:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:52:3c:2e:50:b0:d2:18:d5:34:13:84:b5:eb:7c:3e:f2:79:6c:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E8F23942C871B1A23D50AA7027A74ABDC7172EA3 Validity Not Before: Jul 24 13:10:43 2026 GMT Not After : Jul 25 15:56:43 2026 GMT Subject: CN=0A80F9E6F9A54BA0B5D6BABB4FD804AF2649B245 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:0b:a6:f7:d7:11:90:1e:b2:1c:fa:44:fa:52: 2e:f3:a4:55:fb:67:fa:28:ac:e5:8f:c1:5f:ee:be: 6e:dc:63:57:24:c1:65:e2:1e:fb:7d:94:a7:7a:53: dd:88:26:5f:ce:21:3f:d4:b1:30:ea:8b:ca:db:23: 8f:20:ab:7b:a2:18:2f:b0:b5:d3:ce:1d:6d:24:e6: 6f:59:0d:b4:84:48:58:6f:69:68:a4:58:e5:88:48: 4b:2b:13:1f:9c:56:82:4f:2e:7c:2c:92:26:a7:90: 47:a8:c9:93:33:be:cc:34:8a:37:e8:1e:02:c2:36: 49:82:a9:f3:64:9f:62:46:bb:43:b3:16:f5:0f:cf: da:f4:10:de:73:73:2d:de:cd:96:df:b7:64:81:80: f3:7d:b7:a6:a1:ac:63:27:53:fe:58:32:88:aa:ed: b9:5c:10:41:d8:fe:f3:f8:d9:75:c5:0d:3e:57:42: 69:6e:60:84:0b:fb:e2:ff:6c:f8:5d:fb:6f:b9:44: d3:c7:93:fc:2a:f7:1a:36:9c:00:e6:0f:17:62:f6: 11:92:f5:78:db:17:8e:a0:3c:08:e4:99:41:25:e6: 49:88:38:24:63:22:26:21:87:d3:64:b6:98:fb:18: 2f:2a:3d:c4:bc:6f:06:5e:76:f3:ac:00:9c:60:3a: a5:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:80:F9:E6:F9:A5:4B:A0:B5:D6:BA:BB:4F:D8:04:AF:26:49:B2:45 X509v3 Authority Key Identifier: keyid:E8:F2:39:42:C8:71:B1:A2:3D:50:AA:70:27:A7:4A:BD:C7:17:2E:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1bae58ac-5917-4069-9a6c-83dc1ba32126/0/E8F23942C871B1A23D50AA7027A74ABDC7172EA3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E8F23942C871B1A23D50AA7027A74ABDC7172EA3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1bae58ac-5917-4069-9a6c-83dc1ba32126/0/E8F23942C871B1A23D50AA7027A74ABDC7172EA3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:2f:bf:5f:94:3d:3f:02:42:b7:2c:28:3e:bb:ca:a9:69:0f: 39:b7:56:a1:c0:6e:5e:58:c5:fc:ef:c6:65:44:cc:3c:89:c2: bf:40:8d:63:56:79:c3:9e:5c:13:de:e7:9b:2f:37:82:4e:36: 70:a3:21:ac:83:ce:db:49:c2:14:b7:09:c8:43:62:37:3e:e3: 38:49:54:0f:0a:4a:df:fd:c7:f2:ea:de:f0:08:5c:a0:17:5e: a6:f7:df:d4:f3:cf:3b:ac:8f:d0:b8:3d:a9:48:8f:6c:5d:83: a4:eb:61:27:77:9a:a5:01:31:4e:fe:f2:66:c2:5d:44:1c:76: 86:5c:6d:b5:3c:08:89:95:f6:87:6c:28:06:4f:f0:e7:dd:7f: 56:cd:07:70:b6:e8:ad:d1:c9:67:1b:d9:1b:9b:85:2a:77:0f: 33:99:99:44:39:c5:08:9d:6b:f7:54:18:c4:55:63:35:94:11: 57:dc:54:10:6c:18:69:c0:ac:ab:d8:ea:db:e1:c3:0e:b3:7f: f9:ae:c5:01:3a:45:88:5a:28:df:46:1b:05:41:12:c8:9e:19: c9:fd:e3:f6:b1:0b:30:b5:a2:65:7d:a1:a6:71:8b:2d:84:9e: ca:01:74:f4:67:10:6a:19:ed:2a:a0:3f:27:1f:1b:60:8d:5e: 22:51:47:49 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQVI8LlCw0hjVNBOEtet8PvJ5bI0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRThGMjM5NDJDODcxQjFBMjNENTBBQTcwMjdBNzRBQkRD NzE3MkVBMzAeFw0yNjA3MjQxMzEwNDNaFw0yNjA3MjUxNTU2NDNaMDMxMTAvBgNV BAMTKDBBODBGOUU2RjlBNTRCQTBCNUQ2QkFCQjRGRDgwNEFGMjY0OUIyNDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfC6b31xGQHrIc+kT6Ui7zpFX7 Z/oorOWPwV/uvm7cY1ckwWXiHvt9lKd6U92IJl/OIT/UsTDqi8rbI48gq3uiGC+w tdPOHW0k5m9ZDbSESFhvaWikWOWISEsrEx+cVoJPLnwskiankEeoyZMzvsw0ijfo HgLCNkmCqfNkn2JGu0OzFvUPz9r0EN5zcy3ezZbft2SBgPN9t6ahrGMnU/5YMoiq 7blcEEHY/vP42XXFDT5XQmluYIQL++L/bPhd+2+5RNPHk/wq9xo2nADmDxdi9hGS 9XjbF46gPAjkmUEl5kmIOCRjIiYhh9Nktpj7GC8qPcS8bwZedvOsAJxgOqUnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCoD55vmlS6C11rq7T9gEryZJskUwHwYDVR0j BBgwFoAU6PI5QshxsaI9UKpwJ6dKvccXLqMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWJhZTU4YWMtNTkxNy00MDY5LTlhNmMtODNkYzFiYTMyMTI2LzAvRThGMjM5NDJD ODcxQjFBMjNENTBBQTcwMjdBNzRBQkRDNzE3MkVBMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FOEYyMzk0MkM4NzFCMUEyM0Q1MEFBNzAyN0E3NEFCREM3MTcy RUEzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWJhZTU4YWMtNTkxNy00MDY5LTlh NmMtODNkYzFiYTMyMTI2LzAvRThGMjM5NDJDODcxQjFBMjNENTBBQTcwMjdBNzRB QkRDNzE3MkVBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL8vv1+UPT8CQrcsKD67yqlpDzm3VqHAbl5Y xfzvxmVEzDyJwr9AjWNWecOeXBPe55svN4JONnCjIayDzttJwhS3CchDYjc+4zhJ VA8KSt/9x/Lq3vAIXKAXXqb339Tzzzusj9C4PalIj2xdg6TrYSd3mqUBMU7+8mbC XUQcdoZcbbU8CImV9odsKAZP8Ofdf1bNB3C26K3RyWcb2RubhSp3DzOZmUQ5xQid a/dUGMRVYzWUEVfcVBBsGGnArKvY6tvhww6zf/muxQE6RYhaKN9GGwVBEsieGcn9 4/axCzC1omV9oaZxiy2EnsoBdPRnEGoZ7SqgPycfG2CNXiJRR0k= -----END CERTIFICATE-----Generated at Fri Jul 24 17:01:03 2026 by rpki-client