$ rpki-client -vvf rpki-rsync.idnic.net/repo/3cc5605d-f17a-4010-9253-210c64f148bd/0/8B57121B495DA86939D79B7BA261CF6D38C999CF.mft File: 8B57121B495DA86939D79B7BA261CF6D38C999CF.mft (raw, json) Hash identifier: ES/I0lQJfe6p2BVQQHP/1Q7nMHBhv4+sPSWNx40JJtI= Subject key identifier: 74:60:52:FB:85:CC:6F:3B:98:6F:A3:70:50:A3:2A:03:0C:14:D8:12 Authority key identifier: 8B:57:12:1B:49:5D:A8:69:39:D7:9B:7B:A2:61:CF:6D:38:C9:99:CF Certificate issuer: /CN=8B57121B495DA86939D79B7BA261CF6D38C999CF Certificate serial: 69D475A1806D159EB2DA3D6B67328E97A304136D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8B57121B495DA86939D79B7BA261CF6D38C999CF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3cc5605d-f17a-4010-9253-210c64f148bd/0/8B57121B495DA86939D79B7BA261CF6D38C999CF.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 21:26:17 +0000 Manifest this update: Thu 23 Jul 2026 21:21:17 +0000 Manifest next update: Fri 24 Jul 2026 23:54:17 +0000 Files and hashes: 1: 8B57121B495DA86939D79B7BA261CF6D38C999CF.crl (hash: 0d9ZW3dF8x/pmQCsNlhd76C74WFdEelh/U/DljbGGTc=) 2: 3130332e3138332e362e302f32332d3234203d3e20313439343037.roa (hash: w+XxfdGQbvXdRZjpGQCwUdlhFyEQmevCuv9dcfZGuKE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3cc5605d-f17a-4010-9253-210c64f148bd/0/8B57121B495DA86939D79B7BA261CF6D38C999CF.crl rsync://rpki-rsync.idnic.net/repo/3cc5605d-f17a-4010-9253-210c64f148bd/0/8B57121B495DA86939D79B7BA261CF6D38C999CF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8B57121B495DA86939D79B7BA261CF6D38C999CF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 23:54:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:d4:75:a1:80:6d:15:9e:b2:da:3d:6b:67:32:8e:97:a3:04:13:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B57121B495DA86939D79B7BA261CF6D38C999CF Validity Not Before: Jul 23 21:21:17 2026 GMT Not After : Jul 24 23:54:17 2026 GMT Subject: CN=746052FB85CC6F3B986FA37050A32A030C14D812 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:0e:26:0b:11:bc:7b:b8:e6:a2:39:a1:b3:6a: 7b:40:a9:4b:db:66:00:c2:27:4e:95:bd:af:dc:28: 49:27:f1:1d:47:86:9a:6d:a4:92:30:fe:76:39:07: 76:33:0e:0e:e7:e6:2a:b2:6e:28:25:3e:cd:2c:e6: 32:07:fa:f4:ef:eb:80:8f:c3:74:3a:3e:5b:a2:dc: be:ad:3c:2e:22:7c:69:56:13:c6:bf:13:0c:3a:bb: 17:fc:74:0b:e0:19:b1:d2:ce:2c:03:75:eb:a8:dd: fd:ae:dd:5a:7b:fe:50:3f:b2:02:e0:44:fa:0f:c8: 00:fb:d4:4a:ea:c6:72:40:92:b9:b0:a3:c7:df:ce: 1f:35:63:d8:91:69:2f:28:f1:af:a4:eb:2c:74:e2: f6:ef:dc:a0:2e:72:b6:f9:c9:ae:6f:63:87:16:24: da:2d:90:e1:70:ca:11:40:5f:3a:c5:c1:53:05:1a: 71:cb:ae:c7:59:a1:ae:09:76:c7:46:1f:c7:91:2b: a5:2f:31:64:e8:38:7f:a3:e9:91:87:74:77:30:4b: 60:4c:a8:e2:35:bd:3d:a5:07:da:da:45:b7:22:21: b0:c4:b0:4b:17:9a:63:ce:6e:c7:40:d9:d8:e4:13: ee:46:d9:ab:cf:da:0a:31:02:d2:6a:0a:29:c3:b5: 18:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:60:52:FB:85:CC:6F:3B:98:6F:A3:70:50:A3:2A:03:0C:14:D8:12 X509v3 Authority Key Identifier: keyid:8B:57:12:1B:49:5D:A8:69:39:D7:9B:7B:A2:61:CF:6D:38:C9:99:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3cc5605d-f17a-4010-9253-210c64f148bd/0/8B57121B495DA86939D79B7BA261CF6D38C999CF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8B57121B495DA86939D79B7BA261CF6D38C999CF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3cc5605d-f17a-4010-9253-210c64f148bd/0/8B57121B495DA86939D79B7BA261CF6D38C999CF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:d1:d9:00:4d:d3:71:a3:81:6f:f2:79:04:d2:a1:db:a6:4d: 11:bf:30:35:4f:fa:bc:75:97:06:16:5a:b8:75:c1:46:8f:3f: d7:55:65:a8:26:cf:24:25:dd:83:23:4b:42:17:28:ed:00:c1: d5:9f:6b:0c:4c:02:a8:1d:a0:09:5a:69:2c:f8:55:59:a8:c4: 22:4a:42:ad:ca:f2:8e:19:db:ab:16:da:5a:80:86:61:9b:74: 86:6c:c7:05:90:2c:11:59:a8:6a:d4:48:64:87:01:01:b5:e4: 39:38:b4:2a:9b:5e:7f:df:f7:63:72:0d:46:fb:8f:df:5f:0d: 74:02:d5:1b:f2:5b:af:7d:27:62:39:6f:cb:ea:16:62:7e:fe: 32:73:8c:52:7f:46:5a:b1:92:d8:ec:0f:13:6a:26:f2:de:68: 55:8a:99:9a:41:52:85:0a:b5:5e:42:29:3f:c8:b0:1d:e6:fc: 01:8b:7b:30:fe:4c:a1:34:d8:45:31:1e:9a:1d:2f:bc:a1:8e: d9:27:fa:01:50:3e:d8:a9:c4:7a:36:11:f4:07:f2:51:ff:2a: 7e:ef:5e:1e:fd:8d:96:27:fa:67:39:2f:2f:b8:e0:e9:37:e0: bf:42:d6:48:34:15:e7:ba:0c:c2:8e:3b:a3:68:40:8f:3a:d0: b4:f5:8d:fb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUadR1oYBtFZ6y2j1rZzKOl6MEE20wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEI1NzEyMUI0OTVEQTg2OTM5RDc5QjdCQTI2MUNGNkQz OEM5OTlDRjAeFw0yNjA3MjMyMTIxMTdaFw0yNjA3MjQyMzU0MTdaMDMxMTAvBgNV BAMTKDc0NjA1MkZCODVDQzZGM0I5ODZGQTM3MDUwQTMyQTAzMEMxNEQ4MTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5DiYLEbx7uOaiOaGzantAqUvb ZgDCJ06Vva/cKEkn8R1HhpptpJIw/nY5B3YzDg7n5iqybiglPs0s5jIH+vTv64CP w3Q6Plui3L6tPC4ifGlWE8a/Eww6uxf8dAvgGbHSziwDdeuo3f2u3Vp7/lA/sgLg RPoPyAD71ErqxnJAkrmwo8ffzh81Y9iRaS8o8a+k6yx04vbv3KAucrb5ya5vY4cW JNotkOFwyhFAXzrFwVMFGnHLrsdZoa4JdsdGH8eRK6UvMWToOH+j6ZGHdHcwS2BM qOI1vT2lB9raRbciIbDEsEsXmmPObsdA2djkE+5G2avP2goxAtJqCinDtRhnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdGBS+4XMbzuYb6NwUKMqAwwU2BIwHwYDVR0j BBgwFoAUi1cSG0ldqGk515t7omHPbTjJmc8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2NjNTYwNWQtZjE3YS00MDEwLTkyNTMtMjEwYzY0ZjE0OGJkLzAvOEI1NzEyMUI0 OTVEQTg2OTM5RDc5QjdCQTI2MUNGNkQzOEM5OTlDRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84QjU3MTIxQjQ5NURBODY5MzlENzlCN0JBMjYxQ0Y2RDM4Qzk5 OUNGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2NjNTYwNWQtZjE3YS00MDEwLTky NTMtMjEwYzY0ZjE0OGJkLzAvOEI1NzEyMUI0OTVEQTg2OTM5RDc5QjdCQTI2MUNG NkQzOEM5OTlDRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAADR2QBN03GjgW/yeQTSodumTRG/MDVP+rx1 lwYWWrh1wUaPP9dVZagmzyQl3YMjS0IXKO0AwdWfawxMAqgdoAlaaSz4VVmoxCJK Qq3K8o4Z26sW2lqAhmGbdIZsxwWQLBFZqGrUSGSHAQG15Dk4tCqbXn/f92NyDUb7 j99fDXQC1RvyW699J2I5b8vqFmJ+/jJzjFJ/RlqxktjsDxNqJvLeaFWKmZpBUoUK tV5CKT/IsB3m/AGLezD+TKE02EUxHpodL7yhjtkn+gFQPtipxHo2EfQH8lH/Kn7v Xh79jZYn+mc5Ly+44Ok34L9C1kg0Fee6DMKOO6NoQI860LT1jfs= -----END CERTIFICATE-----Generated at Fri Jul 24 10:23:25 2026 by rpki-client