$ rpki-client -vvf rpki-rsync.idnic.net/repo/3ce68b50-0e9e-4ae6-8253-5bc2cd121373/0/8A7F3EF85CF3AFD726ACA31F35E709D8EFF0C13C.mft File: 8A7F3EF85CF3AFD726ACA31F35E709D8EFF0C13C.mft (raw, json) Hash identifier: 9hEEgZ+uNJRToz6XwO5UWSA47OCCX7i7sOCmtHDaTh8= Subject key identifier: 95:A8:99:5D:92:69:92:19:16:31:2B:7C:F6:D4:3C:91:44:C6:74:72 Authority key identifier: 8A:7F:3E:F8:5C:F3:AF:D7:26:AC:A3:1F:35:E7:09:D8:EF:F0:C1:3C Certificate issuer: /CN=8A7F3EF85CF3AFD726ACA31F35E709D8EFF0C13C Certificate serial: 5C026C0631AEFDD4D04983DFEE99AF495DC389D5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8A7F3EF85CF3AFD726ACA31F35E709D8EFF0C13C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3ce68b50-0e9e-4ae6-8253-5bc2cd121373/0/8A7F3EF85CF3AFD726ACA31F35E709D8EFF0C13C.mft Manifest number: 70 Signing time: Thu 23 Jul 2026 22:57:53 +0000 Manifest this update: Thu 23 Jul 2026 22:52:53 +0000 Manifest next update: Sat 25 Jul 2026 02:25:53 +0000 Files and hashes: 1: 8A7F3EF85CF3AFD726ACA31F35E709D8EFF0C13C.crl (hash: xrVuiW/ldx5gS+5RN7he7aeMYCuEoYqYjnkDImN5ddk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3ce68b50-0e9e-4ae6-8253-5bc2cd121373/0/8A7F3EF85CF3AFD726ACA31F35E709D8EFF0C13C.crl rsync://rpki-rsync.idnic.net/repo/3ce68b50-0e9e-4ae6-8253-5bc2cd121373/0/8A7F3EF85CF3AFD726ACA31F35E709D8EFF0C13C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8A7F3EF85CF3AFD726ACA31F35E709D8EFF0C13C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 00:48:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:02:6c:06:31:ae:fd:d4:d0:49:83:df:ee:99:af:49:5d:c3:89:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8A7F3EF85CF3AFD726ACA31F35E709D8EFF0C13C Validity Not Before: Jul 23 22:52:53 2026 GMT Not After : Jul 25 02:25:53 2026 GMT Subject: CN=95A8995D9269921916312B7CF6D43C9144C67472 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:bc:82:56:c2:c9:f3:8b:87:9d:57:d7:f6:6e: 53:86:8a:e5:72:42:78:fa:46:19:84:e8:fe:5e:c0: b1:d7:37:0f:da:d4:c2:36:f6:f1:12:fd:94:fb:65: 25:1e:c6:14:a8:31:10:64:36:1c:e2:4e:b7:d3:a4: 77:3c:5e:95:97:e7:f1:0b:8b:74:3b:5f:d5:1a:db: 5e:97:64:f4:d7:3b:c5:08:f4:57:a7:50:d5:f6:6d: b7:88:32:93:be:a0:fd:1b:cb:97:c4:bc:34:bb:94: a4:b4:fc:0e:75:86:f1:08:e4:c7:48:cc:88:b8:6f: 4a:82:db:e9:ac:10:55:f5:93:b9:a0:54:fe:94:8c: 21:14:57:98:96:5a:b2:d2:09:64:08:43:89:18:2a: c5:78:ab:07:ed:17:c9:e8:f9:2d:cb:dc:4e:f8:1a: 84:4d:f5:6a:c1:6c:8b:72:06:d1:2a:6e:65:33:5b: 7f:d4:1c:28:c9:63:50:9c:a5:0e:3d:c9:69:9b:b7: 79:8b:22:2e:72:3d:8f:1f:ab:80:48:2e:13:09:f0: a3:14:59:ba:3b:a7:28:90:33:73:da:84:08:52:7e: 17:f8:c2:53:5d:1e:90:65:cc:3c:02:60:ec:42:9e: 5f:52:cf:0b:40:17:8d:00:26:87:2b:aa:cc:c3:03: 8f:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:A8:99:5D:92:69:92:19:16:31:2B:7C:F6:D4:3C:91:44:C6:74:72 X509v3 Authority Key Identifier: keyid:8A:7F:3E:F8:5C:F3:AF:D7:26:AC:A3:1F:35:E7:09:D8:EF:F0:C1:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3ce68b50-0e9e-4ae6-8253-5bc2cd121373/0/8A7F3EF85CF3AFD726ACA31F35E709D8EFF0C13C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8A7F3EF85CF3AFD726ACA31F35E709D8EFF0C13C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3ce68b50-0e9e-4ae6-8253-5bc2cd121373/0/8A7F3EF85CF3AFD726ACA31F35E709D8EFF0C13C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:4f:50:85:71:9e:81:a1:05:de:58:a8:62:ce:b4:a7:cd:6e: 02:2b:c9:49:9b:32:32:87:d7:e5:6f:c4:a8:30:2f:3b:33:3b: 42:5f:96:93:58:87:fd:5a:eb:1a:fe:14:11:ea:2b:d8:ae:23: a1:4c:69:e6:9d:d3:46:a1:7a:18:a3:6f:0f:7b:3b:dc:d6:86: bc:0a:27:6e:7f:d5:95:c7:d0:85:59:29:36:78:e2:e1:34:59: 61:87:67:e9:22:ea:64:9f:a8:08:63:9e:f8:df:49:e7:af:60: bb:14:c6:29:43:7a:4b:0b:82:5e:41:30:d4:3d:2b:9d:7b:0e: 00:5f:e5:7c:8a:f4:68:49:15:55:6a:1b:db:59:ac:4a:c0:da: 3a:0f:25:3c:c9:5f:e2:16:69:d3:26:84:97:88:34:15:b5:99: 64:26:d7:8f:55:dd:6b:07:0b:b8:ce:d8:cb:20:b0:7a:f6:c2: d7:87:43:93:f5:66:f1:8e:0e:95:8a:16:d4:74:24:80:05:12: 6f:c2:70:b3:c6:23:0b:31:34:53:0b:62:bf:24:6f:02:24:7e: 0c:0f:1c:0f:1b:2a:07:ea:6c:47:59:6f:78:06:e1:d4:5f:f7: bb:9a:2f:5b:a0:05:73:93:d9:b7:6f:28:88:c8:84:e4:b9:8e: df:f2:7d:cf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXAJsBjGu/dTQSYPf7pmvSV3DidUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEE3RjNFRjg1Q0YzQUZENzI2QUNBMzFGMzVFNzA5RDhF RkYwQzEzQzAeFw0yNjA3MjMyMjUyNTNaFw0yNjA3MjUwMjI1NTNaMDMxMTAvBgNV BAMTKDk1QTg5OTVEOTI2OTkyMTkxNjMxMkI3Q0Y2RDQzQzkxNDRDNjc0NzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgvIJWwsnzi4edV9f2blOGiuVy Qnj6RhmE6P5ewLHXNw/a1MI29vES/ZT7ZSUexhSoMRBkNhziTrfTpHc8XpWX5/EL i3Q7X9Ua216XZPTXO8UI9FenUNX2bbeIMpO+oP0by5fEvDS7lKS0/A51hvEI5MdI zIi4b0qC2+msEFX1k7mgVP6UjCEUV5iWWrLSCWQIQ4kYKsV4qwftF8no+S3L3E74 GoRN9WrBbItyBtEqbmUzW3/UHCjJY1CcpQ49yWmbt3mLIi5yPY8fq4BILhMJ8KMU Wbo7pyiQM3PahAhSfhf4wlNdHpBlzDwCYOxCnl9SzwtAF40AJocrqszDA48jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlaiZXZJpkhkWMSt89tQ8kUTGdHIwHwYDVR0j BBgwFoAUin8++Fzzr9cmrKMfNecJ2O/wwTwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2NlNjhiNTAtMGU5ZS00YWU2LTgyNTMtNWJjMmNkMTIxMzczLzAvOEE3RjNFRjg1 Q0YzQUZENzI2QUNBMzFGMzVFNzA5RDhFRkYwQzEzQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84QTdGM0VGODVDRjNBRkQ3MjZBQ0EzMUYzNUU3MDlEOEVGRjBD MTNDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2NlNjhiNTAtMGU5ZS00YWU2LTgy NTMtNWJjMmNkMTIxMzczLzAvOEE3RjNFRjg1Q0YzQUZENzI2QUNBMzFGMzVFNzA5 RDhFRkYwQzEzQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABZPUIVxnoGhBd5YqGLOtKfNbgIryUmbMjKH 1+VvxKgwLzszO0JflpNYh/1a6xr+FBHqK9iuI6FMaead00ahehijbw97O9zWhrwK J25/1ZXH0IVZKTZ44uE0WWGHZ+ki6mSfqAhjnvjfSeevYLsUxilDeksLgl5BMNQ9 K517DgBf5XyK9GhJFVVqG9tZrErA2joPJTzJX+IWadMmhJeINBW1mWQm149V3WsH C7jO2MsgsHr2wteHQ5P1ZvGODpWKFtR0JIAFEm/CcLPGIwsxNFMLYr8kbwIkfgwP HA8bKgfqbEdZb3gG4dRf97uaL1ugBXOT2bdvKIjIhOS5jt/yfc8= -----END CERTIFICATE-----Generated at Fri Jul 24 01:19:12 2026 by rpki-client