$ rpki-client -vvf rpki-rsync.idnic.net/repo/1ee94014-87fa-4bc2-b1c6-7fd2a89476f3/0/8863D43C2CD36E9DE28C7E55F1891CC25C4F2985.mft File: 8863D43C2CD36E9DE28C7E55F1891CC25C4F2985.mft (raw, json) Hash identifier: L+CyO5PSPToIWuSNyQe7JSdafi6djZY5RW4ieE/y+D8= Subject key identifier: B2:F1:96:48:6E:CB:47:DC:D2:E6:3E:0B:8A:DF:6E:CF:FA:96:19:9A Authority key identifier: 88:63:D4:3C:2C:D3:6E:9D:E2:8C:7E:55:F1:89:1C:C2:5C:4F:29:85 Certificate issuer: /CN=8863D43C2CD36E9DE28C7E55F1891CC25C4F2985 Certificate serial: 448B6BC5D328CC479D1028CC7282D7D5597F2449 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8863D43C2CD36E9DE28C7E55F1891CC25C4F2985.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1ee94014-87fa-4bc2-b1c6-7fd2a89476f3/0/8863D43C2CD36E9DE28C7E55F1891CC25C4F2985.mft Manifest number: 70 Signing time: Thu 23 Jul 2026 17:16:05 +0000 Manifest this update: Thu 23 Jul 2026 17:11:05 +0000 Manifest next update: Fri 24 Jul 2026 18:01:05 +0000 Files and hashes: 1: 3230322e34372e3138382e302f32342d3234203d3e203435333035.roa (hash: YJRCBupflF/I8POF8sMQ3AXgFo1nrT6mZHr4XrUFzvU=) 2: 3230322e34372e3138392e302f32342d3234203d3e203435333035.roa (hash: l0DIBrvHKOmdXYA8EMn7r3ept4hzvTyfATy5T2AkXgc=) 3: 8863D43C2CD36E9DE28C7E55F1891CC25C4F2985.crl (hash: kyXLwlNF7Tkgx2Te2DbyjfcULbfzbmwySmSD7qDu5Qk=) 4: 3230322e34372e3138382e302f32332d3234203d3e203435333035.roa (hash: 0+nHSjmEBtHrdpW5swBsy/CGgBdToecJRrJ4YRQ1Ieo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1ee94014-87fa-4bc2-b1c6-7fd2a89476f3/0/8863D43C2CD36E9DE28C7E55F1891CC25C4F2985.crl rsync://rpki-rsync.idnic.net/repo/1ee94014-87fa-4bc2-b1c6-7fd2a89476f3/0/8863D43C2CD36E9DE28C7E55F1891CC25C4F2985.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8863D43C2CD36E9DE28C7E55F1891CC25C4F2985.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 18:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:8b:6b:c5:d3:28:cc:47:9d:10:28:cc:72:82:d7:d5:59:7f:24:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8863D43C2CD36E9DE28C7E55F1891CC25C4F2985 Validity Not Before: Jul 23 17:11:05 2026 GMT Not After : Jul 24 18:01:05 2026 GMT Subject: CN=B2F196486ECB47DCD2E63E0B8ADF6ECFFA96199A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:74:1e:d0:9e:91:8d:a8:68:f9:1f:c7:ba:07: c7:0b:f4:f4:07:5e:7f:7d:da:ae:e9:d0:87:6a:c6: 01:ba:4d:4f:f6:1e:cd:bd:5f:15:87:4c:4e:8f:a8: 79:a1:ed:84:69:95:ca:b2:f7:b0:a6:79:f0:08:77: 82:90:1b:37:b0:de:ae:83:b0:e4:7f:82:0f:0f:bb: 3b:33:a9:4f:97:bf:e9:8c:01:0c:44:41:3d:47:62: f6:b1:e0:40:17:7c:45:2d:44:00:db:5d:0f:12:f9: 80:e9:25:b0:93:e9:8e:0c:76:cc:1f:db:9d:49:b8: 08:8c:6e:a2:6f:58:e6:c7:c5:30:92:fc:87:aa:f2: 63:cc:9d:54:51:8c:2d:a4:71:ea:3e:68:dd:1b:56: 4c:2f:fa:2e:68:81:de:a7:95:52:6a:91:f3:fb:48: fc:aa:da:16:25:c1:09:5a:67:7d:3f:86:63:01:cd: 47:0a:14:f2:5b:34:02:de:6a:43:68:94:3f:8c:6e: ab:f3:fe:03:52:60:46:6a:83:86:4c:3f:74:00:d8: fb:1a:d2:67:c5:89:fe:7e:81:0e:c9:e5:27:ce:bf: b3:cc:4b:47:d6:d2:fc:7c:59:35:f9:e8:17:5b:74: a6:7b:4b:84:05:2c:7a:ef:82:e0:e4:eb:c9:60:d5: e6:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:F1:96:48:6E:CB:47:DC:D2:E6:3E:0B:8A:DF:6E:CF:FA:96:19:9A X509v3 Authority Key Identifier: keyid:88:63:D4:3C:2C:D3:6E:9D:E2:8C:7E:55:F1:89:1C:C2:5C:4F:29:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1ee94014-87fa-4bc2-b1c6-7fd2a89476f3/0/8863D43C2CD36E9DE28C7E55F1891CC25C4F2985.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8863D43C2CD36E9DE28C7E55F1891CC25C4F2985.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1ee94014-87fa-4bc2-b1c6-7fd2a89476f3/0/8863D43C2CD36E9DE28C7E55F1891CC25C4F2985.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:49:34:a7:07:4f:3d:c8:45:d6:d6:b1:15:c5:ec:72:aa:98: e1:83:c9:41:3b:9b:4d:9c:5a:e2:dd:8b:33:7a:78:1e:bb:96: 1e:11:e4:4f:e9:ad:f5:98:ab:16:b3:88:55:02:0b:7e:6f:1d: c8:3e:46:20:47:06:ec:6b:35:de:d0:f7:2b:d0:66:f5:fc:f1: d7:ed:65:16:9d:a9:9a:8c:7c:5e:03:b2:4d:40:65:b6:e6:cb: a7:43:bb:d7:a2:18:20:63:ae:7f:7a:73:f3:3f:e8:91:04:ae: 6b:83:2f:39:76:9d:f7:a2:16:c7:07:6c:17:58:7f:2a:29:e7: 78:bd:56:32:82:9d:89:8e:c4:b4:11:fa:66:88:49:b4:b3:d9: 05:fc:30:7f:15:0f:f7:0e:09:f0:c5:f1:0d:17:25:19:8d:b4: c8:cd:0f:45:df:4d:44:5a:02:e6:41:71:74:4f:2e:d6:02:29: 86:41:f6:6c:c1:74:41:0d:96:f6:2d:23:8d:60:e3:33:a2:30: 58:0a:84:e0:d1:13:4d:69:cf:8a:51:01:0f:d6:b1:c5:a4:eb: 49:ec:e6:4c:94:88:9d:7d:29:18:b4:85:b0:0b:a1:c5:11:c0: aa:49:ad:f9:9a:a7:53:f2:0e:b4:5e:aa:31:41:e9:4f:52:a4: b4:7a:a8:1e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURItrxdMozEedECjMcoLX1Vl/JEkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODg2M0Q0M0MyQ0QzNkU5REUyOEM3RTU1RjE4OTFDQzI1 QzRGMjk4NTAeFw0yNjA3MjMxNzExMDVaFw0yNjA3MjQxODAxMDVaMDMxMTAvBgNV BAMTKEIyRjE5NjQ4NkVDQjQ3RENEMkU2M0UwQjhBREY2RUNGRkE5NjE5OUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0dB7QnpGNqGj5H8e6B8cL9PQH Xn992q7p0IdqxgG6TU/2Hs29XxWHTE6PqHmh7YRplcqy97CmefAId4KQGzew3q6D sOR/gg8PuzszqU+Xv+mMAQxEQT1HYvax4EAXfEUtRADbXQ8S+YDpJbCT6Y4Mdswf 251JuAiMbqJvWObHxTCS/Ieq8mPMnVRRjC2kceo+aN0bVkwv+i5ogd6nlVJqkfP7 SPyq2hYlwQlaZ30/hmMBzUcKFPJbNALeakNolD+Mbqvz/gNSYEZqg4ZMP3QA2Psa 0mfFif5+gQ7J5SfOv7PMS0fW0vx8WTX56BdbdKZ7S4QFLHrvguDk68lg1eZ5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsvGWSG7LR9zS5j4Lit9uz/qWGZowHwYDVR0j BBgwFoAUiGPUPCzTbp3ijH5V8YkcwlxPKYUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWVlOTQwMTQtODdmYS00YmMyLWIxYzYtN2ZkMmE4OTQ3NmYzLzAvODg2M0Q0M0My Q0QzNkU5REUyOEM3RTU1RjE4OTFDQzI1QzRGMjk4NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84ODYzRDQzQzJDRDM2RTlERTI4QzdFNTVGMTg5MUNDMjVDNEYy OTg1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWVlOTQwMTQtODdmYS00YmMyLWIx YzYtN2ZkMmE4OTQ3NmYzLzAvODg2M0Q0M0MyQ0QzNkU5REUyOEM3RTU1RjE4OTFD QzI1QzRGMjk4NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAENJNKcHTz3IRdbWsRXF7HKqmOGDyUE7m02c WuLdizN6eB67lh4R5E/prfWYqxaziFUCC35vHcg+RiBHBuxrNd7Q9yvQZvX88dft ZRadqZqMfF4Dsk1AZbbmy6dDu9eiGCBjrn96c/M/6JEErmuDLzl2nfeiFscHbBdY fyop53i9VjKCnYmOxLQR+maISbSz2QX8MH8VD/cOCfDF8Q0XJRmNtMjND0XfTURa AuZBcXRPLtYCKYZB9mzBdEENlvYtI41g4zOiMFgKhODRE01pz4pRAQ/WscWk60ns 5kyUiJ19KRi0hbALocURwKpJrfmap1PyDrReqjFB6U9SpLR6qB4= -----END CERTIFICATE-----Generated at Fri Jul 24 05:13:46 2026 by rpki-client