$ rpki-client -vvf rpki-rsync.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/8B463984C16522A35FAAB60708D34C89D9D9F1E7.mft File: 8B463984C16522A35FAAB60708D34C89D9D9F1E7.mft (raw, json) Hash identifier: LrN4y78FEUCtqsXaHZOeRLOFMORyZuBF6JNotp6HvMo= Subject key identifier: 41:27:E5:9B:3E:9C:0C:04:51:C4:2D:CC:02:00:27:04:47:2E:60:61 Authority key identifier: 8B:46:39:84:C1:65:22:A3:5F:AA:B6:07:08:D3:4C:89:D9:D9:F1:E7 Certificate issuer: /CN=8B463984C16522A35FAAB60708D34C89D9D9F1E7 Certificate serial: 1C60A1DBF01E41BE8EFC4598AEBF1A48E39030F3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/8B463984C16522A35FAAB60708D34C89D9D9F1E7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/8B463984C16522A35FAAB60708D34C89D9D9F1E7.mft Manifest number: 6F Signing time: Fri 24 Jul 2026 01:15:46 +0000 Manifest this update: Fri 24 Jul 2026 01:10:46 +0000 Manifest next update: Sat 25 Jul 2026 03:29:46 +0000 Files and hashes: 1: 8B463984C16522A35FAAB60708D34C89D9D9F1E7.crl (hash: qBWUFalzLt7UM3mW9DOwv/WdZg+ftrrE5c3j3zVh6lw=) 2: 3135372e36362e35362e302f32342d3234203d3e203538343737.roa (hash: c2UfSKD11fX4h2x5HJIXy7pbYdyuzBLTiInfb4Fri14=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/8B463984C16522A35FAAB60708D34C89D9D9F1E7.crl rsync://rpki-rsync.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/8B463984C16522A35FAAB60708D34C89D9D9F1E7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/8B463984C16522A35FAAB60708D34C89D9D9F1E7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 03:29:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:60:a1:db:f0:1e:41:be:8e:fc:45:98:ae:bf:1a:48:e3:90:30:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B463984C16522A35FAAB60708D34C89D9D9F1E7 Validity Not Before: Jul 24 01:10:46 2026 GMT Not After : Jul 25 03:29:46 2026 GMT Subject: CN=4127E59B3E9C0C0451C42DCC02002704472E6061 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:72:81:3a:02:f7:0b:c8:7f:92:a1:d9:ce:c1: 76:cb:f7:53:e1:d2:73:62:90:b6:76:f8:03:83:2a: 3b:e1:e3:63:ff:36:3f:69:d6:8f:d0:c2:11:28:5f: 19:10:c0:24:2f:86:d7:58:de:c1:92:e7:6c:3f:54: 11:2d:a9:80:7b:d7:13:d7:d6:31:c3:ba:4c:21:af: 5b:9b:d4:1e:a2:a5:9f:6c:01:a1:6f:30:a9:86:50: fe:5e:16:48:aa:2a:ce:f2:32:3f:47:44:f7:14:11: 7a:6c:0b:3c:06:1e:1e:9b:d0:66:9d:25:e4:c4:ec: ad:03:35:7d:90:05:d5:c9:48:c5:8d:13:6b:77:52: 24:6a:35:62:4b:15:58:44:74:51:0a:5e:9e:5b:65: 47:41:97:14:aa:26:91:33:7b:2d:2d:88:9e:eb:26: dd:dc:63:d3:18:97:95:07:37:b2:77:eb:18:99:ad: 3f:e9:05:d9:11:58:70:d2:ab:d0:29:e1:01:ab:8b: 31:9a:5f:08:00:01:d4:c0:78:cf:b6:1a:52:5c:c1: b4:68:b0:cd:0c:a1:5d:27:67:3f:d4:82:a7:d4:2f: 53:d6:65:cb:a3:ed:ea:20:17:7d:f4:b9:49:10:6c: 6d:9d:8e:5c:5d:7e:f8:59:4c:8f:41:70:d6:4a:71: 33:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:27:E5:9B:3E:9C:0C:04:51:C4:2D:CC:02:00:27:04:47:2E:60:61 X509v3 Authority Key Identifier: keyid:8B:46:39:84:C1:65:22:A3:5F:AA:B6:07:08:D3:4C:89:D9:D9:F1:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/8B463984C16522A35FAAB60708D34C89D9D9F1E7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/8B463984C16522A35FAAB60708D34C89D9D9F1E7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/8B463984C16522A35FAAB60708D34C89D9D9F1E7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:f9:f9:2c:55:bf:4f:d4:be:a6:10:71:bc:dd:08:a1:30:a4: 19:09:e4:fc:09:51:2e:c9:8c:b1:1d:db:51:f0:f2:48:ff:79: 73:cb:a7:08:c1:f1:a1:c7:23:b0:28:fe:0f:d4:f4:9a:33:d8: 41:cc:96:d9:2d:f5:46:b6:15:ce:52:bb:2a:8f:35:37:eb:c8: 7f:cf:76:ff:b2:ee:93:b6:66:55:21:f1:28:65:bf:e1:46:88: 9f:ff:b2:db:45:78:c9:6f:30:72:a8:f0:5c:e6:ee:5e:c4:88: d1:b7:3c:73:b4:28:ce:64:ce:a4:b8:e4:6d:71:96:9c:79:5c: cb:89:9d:4d:5a:fa:30:ab:ee:81:c7:d2:22:09:22:51:da:92: e7:d8:e7:8b:13:5b:b0:31:8d:1b:9a:12:91:74:63:a4:58:25: 60:45:c4:be:ec:a7:28:fe:34:60:04:b8:88:9c:71:a2:2f:10: 6e:62:3a:e4:73:09:7b:66:97:35:f4:79:30:80:79:9d:7f:cd: 10:3e:d2:fd:30:16:fd:0f:d9:f4:19:dc:60:6f:b8:cd:9a:0d: 81:07:08:6e:f4:06:33:65:10:97:4e:6e:a9:30:51:fd:da:61: 7e:4b:cc:52:4d:59:75:ba:6e:9e:85:a5:9d:97:12:02:f6:7e: c3:a2:35:df -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHGCh2/AeQb6O/EWYrr8aSOOQMPMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEI0NjM5ODRDMTY1MjJBMzVGQUFCNjA3MDhEMzRDODlE OUQ5RjFFNzAeFw0yNjA3MjQwMTEwNDZaFw0yNjA3MjUwMzI5NDZaMDMxMTAvBgNV BAMTKDQxMjdFNTlCM0U5QzBDMDQ1MUM0MkRDQzAyMDAyNzA0NDcyRTYwNjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCncoE6AvcLyH+SodnOwXbL91Ph 0nNikLZ2+AODKjvh42P/Nj9p1o/QwhEoXxkQwCQvhtdY3sGS52w/VBEtqYB71xPX 1jHDukwhr1ub1B6ipZ9sAaFvMKmGUP5eFkiqKs7yMj9HRPcUEXpsCzwGHh6b0Gad JeTE7K0DNX2QBdXJSMWNE2t3UiRqNWJLFVhEdFEKXp5bZUdBlxSqJpEzey0tiJ7r Jt3cY9MYl5UHN7J36xiZrT/pBdkRWHDSq9Ap4QGrizGaXwgAAdTAeM+2GlJcwbRo sM0MoV0nZz/UgqfUL1PWZcuj7eogF330uUkQbG2djlxdfvhZTI9BcNZKcTMvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQSflmz6cDARRxC3MAgAnBEcuYGEwHwYDVR0j BBgwFoAUi0Y5hMFlIqNfqrYHCNNMidnZ8ecwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWQ3NTUzNDctNmIxYy00MmMxLTlmNTQtZDdlYWIyMmUxODJjLzAvOEI0NjM5ODRD MTY1MjJBMzVGQUFCNjA3MDhEMzRDODlEOUQ5RjFFNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC84QjQ2Mzk4NEMxNjUyMkEzNUZBQUI2MDcwOEQzNEM4OUQ5RDlG MUU3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWQ3NTUzNDctNmIxYy00MmMxLTlm NTQtZDdlYWIyMmUxODJjLzAvOEI0NjM5ODRDMTY1MjJBMzVGQUFCNjA3MDhEMzRD ODlEOUQ5RjFFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH75+SxVv0/UvqYQcbzdCKEwpBkJ5PwJUS7J jLEd21Hw8kj/eXPLpwjB8aHHI7Ao/g/U9Joz2EHMltkt9Ua2Fc5SuyqPNTfryH/P dv+y7pO2ZlUh8Shlv+FGiJ//sttFeMlvMHKo8Fzm7l7EiNG3PHO0KM5kzqS45G1x lpx5XMuJnU1a+jCr7oHH0iIJIlHakufY54sTW7AxjRuaEpF0Y6RYJWBFxL7spyj+ NGAEuIiccaIvEG5iOuRzCXtmlzX0eTCAeZ1/zRA+0v0wFv0P2fQZ3GBvuM2aDYEH CG70BjNlEJdObqkwUf3aYX5LzFJNWXW6bp6FpZ2XEgL2fsOiNd8= -----END CERTIFICATE-----Generated at Fri Jul 24 06:27:05 2026 by rpki-client