$ rpki-client -vvf rpki-rsync.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/8110570CE55D8512FCBDF02819FB8A0D3BAD1F94.mft File: 8110570CE55D8512FCBDF02819FB8A0D3BAD1F94.mft (raw, json) Hash identifier: Y3Vhe7mF80JV3+oF1kOqRsGOUNACAQMBiZQoR01BSHw= Subject key identifier: D3:E4:94:83:D3:0B:59:47:37:0C:6A:6E:4F:96:E3:30:03:0D:BF:6E Authority key identifier: 81:10:57:0C:E5:5D:85:12:FC:BD:F0:28:19:FB:8A:0D:3B:AD:1F:94 Certificate issuer: /CN=8110570CE55D8512FCBDF02819FB8A0D3BAD1F94 Certificate serial: 541FEBC76BD1EB3A82578F9F0BDA118789220AF2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8110570CE55D8512FCBDF02819FB8A0D3BAD1F94.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/8110570CE55D8512FCBDF02819FB8A0D3BAD1F94.mft Manifest number: 70 Signing time: Thu 23 Jul 2026 19:34:02 +0000 Manifest this update: Thu 23 Jul 2026 19:29:02 +0000 Manifest next update: Fri 24 Jul 2026 22:09:02 +0000 Files and hashes: 1: 3130332e37312e382e302f32322d3234203d3e203535363632.roa (hash: ZkDRUzZF2wR3zLgrv+xtI4hjJvx2gIYYCb4LSNtWkmg=) 2: 3130332e37312e31312e302f32342d3234203d3e203535363632.roa (hash: p8zNdOn26qSx4BGXz+vWlqG1YbrlG0OsNQVGyFkCQnw=) 3: 3130332e37312e382e302f32332d3234203d3e203535363632.roa (hash: ABGORh4lWt4WpXDSQFC2AfJLsKMZzwquOOsUkRU5KZw=) 4: 3130332e37312e382e302f32342d3234203d3e203535363632.roa (hash: 4e1qd57hMv+OkXmKRzkE4lf5ZpRQjvmNHhGL7MHMPZQ=) 5: 3130332e37312e392e302f32342d3234203d3e203535363632.roa (hash: MdXlPd40mbCtjh7iBEjKVSFA2qec8G7HYFT+dNSNEB4=) 6: 3130332e37312e31302e302f32332d3234203d3e203535363632.roa (hash: 0kmlYn3U9dmyxdriKnU2KVYL6nRWvq4iRJ06VUJD99I=) 7: 3130332e37312e31302e302f32342d3234203d3e203535363632.roa (hash: OJi67+qUPfc5UtqMYAV/z7dfCJOkcVNQkK5jTXZKwTQ=) 8: 8110570CE55D8512FCBDF02819FB8A0D3BAD1F94.crl (hash: Q/1y4ITCailSYTL8IfWJZLy9hozq9Sh5woUqqFZMNTk=) 9: 323430303a393134303a3a2f33322d3332203d3e203535363632.roa (hash: QKq/ZGAbqKpUm7CoKZ+QT0ihf4BxzPyawZc6Ixihqm0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/8110570CE55D8512FCBDF02819FB8A0D3BAD1F94.crl rsync://rpki-rsync.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/8110570CE55D8512FCBDF02819FB8A0D3BAD1F94.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8110570CE55D8512FCBDF02819FB8A0D3BAD1F94.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 22:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:1f:eb:c7:6b:d1:eb:3a:82:57:8f:9f:0b:da:11:87:89:22:0a:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8110570CE55D8512FCBDF02819FB8A0D3BAD1F94 Validity Not Before: Jul 23 19:29:02 2026 GMT Not After : Jul 24 22:09:02 2026 GMT Subject: CN=D3E49483D30B5947370C6A6E4F96E330030DBF6E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:97:46:34:ea:91:99:8e:64:53:d1:f3:fc:81: 05:05:89:6e:6f:3e:16:5f:7b:ce:a0:a9:94:46:bd: ac:dd:ee:a3:4c:e0:d4:27:c1:69:94:6d:35:a9:e9: 84:ab:66:e9:64:5c:34:b0:d3:45:c4:d5:ba:23:ab: 63:ea:ae:96:fa:57:dc:8f:44:0c:86:ab:78:66:6e: e5:b9:b4:69:4a:d6:1d:95:0c:6d:f3:f0:e8:b7:61: 76:79:78:01:c1:a1:84:b5:bd:a4:cc:08:e9:c6:d3: 14:e1:16:f1:e3:a3:36:76:69:8d:46:3a:0b:16:cd: 71:3f:e9:e7:5a:37:dc:18:19:84:d4:9a:f1:26:fc: db:b0:b0:62:3a:d1:e0:62:01:55:f7:4e:90:97:5c: 7b:cd:ab:a3:78:c4:e7:a0:b9:07:47:2a:61:a9:c6: e4:3a:73:d2:ba:65:f2:86:ba:cf:e0:0a:dc:ac:3a: 07:15:8e:66:98:da:cd:b1:a1:0b:51:10:15:39:03: 14:02:ef:0a:ab:32:8b:4e:5e:87:36:14:e6:17:35: 10:ad:10:ed:37:ab:09:1a:01:b3:5e:80:e9:1f:ce: fc:6e:19:84:fe:ab:d7:bf:29:ea:70:46:10:be:02: 2e:08:89:06:75:a2:7f:52:5a:82:7b:09:10:91:b6: e8:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:E4:94:83:D3:0B:59:47:37:0C:6A:6E:4F:96:E3:30:03:0D:BF:6E X509v3 Authority Key Identifier: keyid:81:10:57:0C:E5:5D:85:12:FC:BD:F0:28:19:FB:8A:0D:3B:AD:1F:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/8110570CE55D8512FCBDF02819FB8A0D3BAD1F94.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8110570CE55D8512FCBDF02819FB8A0D3BAD1F94.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/8110570CE55D8512FCBDF02819FB8A0D3BAD1F94.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:95:a4:4c:5e:92:1f:c0:8e:e6:ac:67:c5:b9:cd:28:b4:1b: a9:a9:03:68:56:4c:2e:8e:8e:1f:2a:0a:ac:f3:d3:7b:10:c7: 02:b0:bf:15:47:42:33:bf:0d:02:67:42:27:12:27:7e:c6:45: 48:10:e6:9f:55:f9:c5:a3:af:e8:20:a4:31:3b:90:b1:35:3d: 23:a4:6b:09:62:fd:d2:d2:c2:70:5b:17:40:d2:24:3e:9b:1f: e4:3e:0e:66:2b:c6:19:7b:88:3d:99:69:2c:d3:88:96:b3:8c: 8a:98:46:b7:29:61:14:05:db:e4:4f:0d:f8:f7:f1:e6:66:6c: c7:0f:7b:5c:87:09:aa:ec:f1:18:17:9e:59:da:09:d4:a9:c3: e4:ea:dc:af:04:c6:ea:18:23:57:07:e1:2d:41:ca:15:f6:1d: bd:63:9e:81:18:f7:17:94:10:72:7a:71:63:30:8b:6d:1c:49: 0d:18:7d:f3:10:db:b4:1e:4e:ee:09:a7:d4:29:6e:c8:c5:49: d0:78:9f:42:00:ad:d3:8f:7f:9d:fb:e2:23:53:5a:b5:ae:29: 41:96:cf:92:60:64:8a:e4:e7:ea:37:4e:6e:25:0d:31:fe:6c: 9b:dc:9f:c0:95:68:6d:38:8b:3d:69:f2:c0:3c:1a:1b:61:12: dd:2d:2b:83 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVB/rx2vR6zqCV4+fC9oRh4kiCvIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODExMDU3MENFNTVEODUxMkZDQkRGMDI4MTlGQjhBMEQz QkFEMUY5NDAeFw0yNjA3MjMxOTI5MDJaFw0yNjA3MjQyMjA5MDJaMDMxMTAvBgNV BAMTKEQzRTQ5NDgzRDMwQjU5NDczNzBDNkE2RTRGOTZFMzMwMDMwREJGNkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCul0Y06pGZjmRT0fP8gQUFiW5v PhZfe86gqZRGvazd7qNM4NQnwWmUbTWp6YSrZulkXDSw00XE1bojq2Pqrpb6V9yP RAyGq3hmbuW5tGlK1h2VDG3z8Oi3YXZ5eAHBoYS1vaTMCOnG0xThFvHjozZ2aY1G OgsWzXE/6edaN9wYGYTUmvEm/NuwsGI60eBiAVX3TpCXXHvNq6N4xOeguQdHKmGp xuQ6c9K6ZfKGus/gCtysOgcVjmaY2s2xoQtREBU5AxQC7wqrMotOXoc2FOYXNRCt EO03qwkaAbNegOkfzvxuGYT+q9e/KepwRhC+Ai4IiQZ1on9SWoJ7CRCRtuhTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0+SUg9MLWUc3DGpuT5bjMAMNv24wHwYDVR0j BBgwFoAUgRBXDOVdhRL8vfAoGfuKDTutH5QwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmE0OTYwODItYTBhYS00ODM2LWI1ODctOTczZGQ3ZTI5N2FmLzAvODExMDU3MENF NTVEODUxMkZDQkRGMDI4MTlGQjhBMEQzQkFEMUY5NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84MTEwNTcwQ0U1NUQ4NTEyRkNCREYwMjgxOUZCOEEwRDNCQUQx Rjk0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmE0OTYwODItYTBhYS00ODM2LWI1 ODctOTczZGQ3ZTI5N2FmLzAvODExMDU3MENFNTVEODUxMkZDQkRGMDI4MTlGQjhB MEQzQkFEMUY5NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGWVpExekh/AjuasZ8W5zSi0G6mpA2hWTC6O jh8qCqzz03sQxwKwvxVHQjO/DQJnQicSJ37GRUgQ5p9V+cWjr+ggpDE7kLE1PSOk awli/dLSwnBbF0DSJD6bH+Q+DmYrxhl7iD2ZaSzTiJazjIqYRrcpYRQF2+RPDfj3 8eZmbMcPe1yHCars8RgXnlnaCdSpw+Tq3K8ExuoYI1cH4S1ByhX2Hb1jnoEY9xeU EHJ6cWMwi20cSQ0YffMQ27QeTu4Jp9QpbsjFSdB4n0IArdOPf5374iNTWrWuKUGW z5JgZIrk5+o3Tm4lDTH+bJvcn8CVaG04iz1p8sA8GhthEt0tK4M= -----END CERTIFICATE-----Generated at Fri Jul 24 04:02:28 2026 by rpki-client