$ rpki-client -vvf rpki-rsync.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C8C1A31E42E799E9EDC0FAB813163052945845AC.mft File: C8C1A31E42E799E9EDC0FAB813163052945845AC.mft (raw, json) Hash identifier: aSh1DlX8z2990uuKoor9EIr9V3wzTukfVR/OrxkYpSs= Subject key identifier: 11:F9:F4:25:76:02:41:E1:FB:C2:EF:B3:B0:DC:E3:68:22:57:97:71 Authority key identifier: C8:C1:A3:1E:42:E7:99:E9:ED:C0:FA:B8:13:16:30:52:94:58:45:AC Certificate issuer: /CN=C8C1A31E42E799E9EDC0FAB813163052945845AC Certificate serial: 7D2AFC8375E3002AB93DFD815B4331F1D8854DE4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C8C1A31E42E799E9EDC0FAB813163052945845AC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C8C1A31E42E799E9EDC0FAB813163052945845AC.mft Manifest number: 70 Signing time: Fri 24 Jul 2026 05:46:30 +0000 Manifest this update: Fri 24 Jul 2026 05:41:30 +0000 Manifest next update: Sat 25 Jul 2026 08:55:30 +0000 Files and hashes: 1: C8C1A31E42E799E9EDC0FAB813163052945845AC.crl (hash: EH+rzxUptLnHYKoE2oMDVIQSHiGW6du6KCT5VWtu+Xo=) 2: 323430373a373263303a3a2f33322d3438203d3e203538383230.roa (hash: FEgS5ex34lgarvKtqbdAVQc0toy/dLHosJymf/4jCzU=) 3: 3130332e3135322e39322e302f32332d3234203d3e20313338383630.roa (hash: UWH9gD1/4ElZU52MCqktUtjxRojq4daDEIdWkUnok2k=) 4: 323430373a373263303a3a2f33322d3332203d3e203538383230.roa (hash: QTf5TvW/sGJCtiqjYOWSFSyqMXy6xLfUyzA5Wf2VFMo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C8C1A31E42E799E9EDC0FAB813163052945845AC.crl rsync://rpki-rsync.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C8C1A31E42E799E9EDC0FAB813163052945845AC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C8C1A31E42E799E9EDC0FAB813163052945845AC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 07:07:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:2a:fc:83:75:e3:00:2a:b9:3d:fd:81:5b:43:31:f1:d8:85:4d:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C8C1A31E42E799E9EDC0FAB813163052945845AC Validity Not Before: Jul 24 05:41:30 2026 GMT Not After : Jul 25 08:55:30 2026 GMT Subject: CN=11F9F425760241E1FBC2EFB3B0DCE36822579771 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:1e:da:e0:80:90:7e:7b:13:8f:69:c7:5a:19: b7:18:b6:c0:b4:d0:16:d1:88:19:9e:9f:cc:35:20: 6f:f7:bf:fc:61:24:d6:fe:87:ab:9a:67:a6:75:5f: dc:33:d4:b9:16:70:7c:ec:c4:62:74:62:f8:f5:68: f4:b6:e9:c3:04:f3:29:65:47:8c:10:eb:ab:9a:8a: 4f:1a:d7:33:39:09:5f:8a:5e:18:09:e5:ad:90:dc: b0:90:41:fb:ef:86:23:f4:f8:06:9c:a0:04:af:0e: b3:9e:7a:c8:4e:e0:c7:cf:69:f0:f2:32:16:cb:93: 42:03:d1:35:3d:dd:98:57:61:d4:ee:ed:2f:6e:73: 67:95:85:fa:e4:05:ca:c1:61:4a:48:ec:1b:8b:94: 67:47:d0:cc:96:ea:2b:2e:99:3a:b7:ba:5f:ab:3d: da:79:3e:cc:98:88:74:99:a6:56:58:f4:90:13:ad: fc:16:02:8b:0b:90:2f:d2:73:ed:1a:4a:80:a0:c6: 12:02:b1:f1:bf:69:89:f4:b0:41:cd:37:c1:f6:d3: 25:e9:d2:a6:8f:40:d9:1e:39:aa:ec:b6:dd:71:fd: f4:89:03:6d:72:56:37:61:13:4f:a6:51:39:ee:b3: 00:4d:cd:2a:bc:14:48:3f:04:ac:6b:fc:a4:4e:c5: 39:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:F9:F4:25:76:02:41:E1:FB:C2:EF:B3:B0:DC:E3:68:22:57:97:71 X509v3 Authority Key Identifier: keyid:C8:C1:A3:1E:42:E7:99:E9:ED:C0:FA:B8:13:16:30:52:94:58:45:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C8C1A31E42E799E9EDC0FAB813163052945845AC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C8C1A31E42E799E9EDC0FAB813163052945845AC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C8C1A31E42E799E9EDC0FAB813163052945845AC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:e4:ec:0e:e2:c5:3d:7c:a6:b2:9a:01:9c:c1:99:b2:de:b0: 60:4f:c2:e3:88:ac:aa:32:c4:5e:44:7c:f3:ff:9d:e0:0c:bc: 12:15:e2:cf:8d:a6:6d:9b:26:12:fe:65:6e:e9:80:74:a2:c1: 66:f7:87:f6:70:e2:8b:a1:19:41:2c:d4:2a:71:44:d9:eb:73: 95:53:ab:0d:c7:b9:50:98:3e:cf:05:0d:1b:0a:cf:d9:cb:2d: 4a:39:73:45:fe:c8:5c:45:cf:91:c0:83:05:4d:d9:6c:2f:d7: 2c:ef:ee:db:17:e6:91:d5:c0:f0:b7:0b:84:77:ae:79:b6:8a: df:2d:2d:3b:da:ec:96:a5:b3:60:e9:7a:a6:1b:94:05:d9:3c: 96:68:be:96:9a:ad:2b:80:90:03:46:c3:a0:9c:dd:d5:b0:2f: d5:12:58:d2:06:25:f5:84:3b:ff:2a:92:cb:a2:08:a3:ff:44: af:ba:37:ec:b7:f8:26:72:2b:59:0f:08:b6:80:28:c3:c3:c3: ac:80:50:37:34:a7:74:b0:e0:5e:8c:8a:b9:30:f8:de:47:9a: e6:a5:ce:41:f0:fc:01:9f:7d:0a:b3:12:d1:f7:8b:3e:6e:88: 24:cc:5f:76:6c:8e:a3:6f:51:39:5e:f4:cd:19:3a:c3:82:a9: 6a:39:c0:0f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfSr8g3XjACq5Pf2BW0Mx8diFTeQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzhDMUEzMUU0MkU3OTlFOUVEQzBGQUI4MTMxNjMwNTI5 NDU4NDVBQzAeFw0yNjA3MjQwNTQxMzBaFw0yNjA3MjUwODU1MzBaMDMxMTAvBgNV BAMTKDExRjlGNDI1NzYwMjQxRTFGQkMyRUZCM0IwRENFMzY4MjI1Nzk3NzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHHtrggJB+exOPacdaGbcYtsC0 0BbRiBmen8w1IG/3v/xhJNb+h6uaZ6Z1X9wz1LkWcHzsxGJ0Yvj1aPS26cME8yll R4wQ66uaik8a1zM5CV+KXhgJ5a2Q3LCQQfvvhiP0+AacoASvDrOeeshO4MfPafDy MhbLk0ID0TU93ZhXYdTu7S9uc2eVhfrkBcrBYUpI7BuLlGdH0MyW6isumTq3ul+r Pdp5PsyYiHSZplZY9JATrfwWAosLkC/Sc+0aSoCgxhICsfG/aYn0sEHNN8H20yXp 0qaPQNkeOarstt1x/fSJA21yVjdhE0+mUTnuswBNzSq8FEg/BKxr/KROxTkTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEfn0JXYCQeH7wu+zsNzjaCJXl3EwHwYDVR0j BBgwFoAUyMGjHkLnmentwPq4ExYwUpRYRawwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzhjOWMyNTItZjdjYS00ZGQ1LTg4ZjYtMjJhZGRjODkzNGIzLzAvQzhDMUEzMUU0 MkU3OTlFOUVEQzBGQUI4MTMxNjMwNTI5NDU4NDVBQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DOEMxQTMxRTQyRTc5OUU5RURDMEZBQjgxMzE2MzA1Mjk0NTg0 NUFDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzhjOWMyNTItZjdjYS00ZGQ1LTg4 ZjYtMjJhZGRjODkzNGIzLzAvQzhDMUEzMUU0MkU3OTlFOUVEQzBGQUI4MTMxNjMw NTI5NDU4NDVBQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHjk7A7ixT18prKaAZzBmbLesGBPwuOIrKoy xF5EfPP/neAMvBIV4s+Npm2bJhL+ZW7pgHSiwWb3h/Zw4ouhGUEs1CpxRNnrc5VT qw3HuVCYPs8FDRsKz9nLLUo5c0X+yFxFz5HAgwVN2Wwv1yzv7tsX5pHVwPC3C4R3 rnm2it8tLTva7Jals2DpeqYblAXZPJZovpaarSuAkANGw6Cc3dWwL9USWNIGJfWE O/8qksuiCKP/RK+6N+y3+CZyK1kPCLaAKMPDw6yAUDc0p3Sw4F6Mirkw+N5Hmual zkHw/AGffQqzEtH3iz5uiCTMX3ZsjqNvUTle9M0ZOsOCqWo5wA8= -----END CERTIFICATE-----Generated at Fri Jul 24 13:43:08 2026 by rpki-client