$ rpki-client -vvf rpki-rsync.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/A08BAF2D88514EC041A87F092E6B6A521F3349F3.mft File: A08BAF2D88514EC041A87F092E6B6A521F3349F3.mft (raw, json) Hash identifier: Ex9TlhmwJqbtsFApmxmgFZvMS/LZbWaq/gyKN7RNhWo= Subject key identifier: 05:4D:5F:FB:38:BD:67:63:24:A3:14:D0:5C:AD:86:F9:35:6F:2A:FC Authority key identifier: A0:8B:AF:2D:88:51:4E:C0:41:A8:7F:09:2E:6B:6A:52:1F:33:49:F3 Certificate issuer: /CN=A08BAF2D88514EC041A87F092E6B6A521F3349F3 Certificate serial: 036F754732DB8B9844CE3880F89D0AE7C992C37C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A08BAF2D88514EC041A87F092E6B6A521F3349F3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/A08BAF2D88514EC041A87F092E6B6A521F3349F3.mft Manifest number: 6F Signing time: Fri 24 Jul 2026 01:10:33 +0000 Manifest this update: Fri 24 Jul 2026 01:05:33 +0000 Manifest next update: Sat 25 Jul 2026 04:57:33 +0000 Files and hashes: 1: 34352e36342e39362e302f32342d3234203d3e203538343737.roa (hash: 5ev3rc/Wu45AIU9QKYFuF4qHEkUSlKkTnsZ3JdywnVM=) 2: 3130332e32382e3134382e302f32342d3234203d3e203538343737.roa (hash: xw+egA02OX5uOYAGnedHg8tG8xIxYeukOfUcUDfNNIQ=) 3: 323030313a6466303a3237333a3a2f34382d3438203d3e203538343737.roa (hash: +zXAXB63RMz7uGSWbbDCPnLGVqN8tZG7EPNtc0tQGQw=) 4: 34352e36342e39372e302f32342d3234203d3e20313335333630.roa (hash: eVL30F9FmWg9xfcbeGTmvP0LqqOdBiZkfgWJnF3c51k=) 5: 3130332e33312e3235312e302f32342d3234203d3e203538343737.roa (hash: nNs3zCmZDfGYSq9FVm5Dz3ukk7qRss0F7cyqFrIdiUs=) 6: 3130332e32382e3134392e302f32342d3234203d3e203538343737.roa (hash: qDJ/c5qWojiJYfc9eIqgLudqj78rlDzX+1L2SPWNYTQ=) 7: 34352e36342e39392e302f32342d3234203d3e203538343737.roa (hash: dyN12mfoRjXFlNHqIFEChK7+mIsDEFYombQgQudcekM=) 8: A08BAF2D88514EC041A87F092E6B6A521F3349F3.crl (hash: maEGXDmMqbyYOJcTeYZMdLHERT71VO7Ucc/6KkOqktw=) 9: 3130332e33312e3235302e302f32342d3234203d3e203538343737.roa (hash: 2ZuwNGg62iU8raGM9TYM3A0jrh0UG5HDKyy6dwXOLS0=) 10: 34352e36342e39382e302f32342d3234203d3e203538343737.roa (hash: /BLy7k3doovw3jQVTXaYTnBas7DL4Zfrgn7U9J4fWVA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/A08BAF2D88514EC041A87F092E6B6A521F3349F3.crl rsync://rpki-rsync.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/A08BAF2D88514EC041A87F092E6B6A521F3349F3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A08BAF2D88514EC041A87F092E6B6A521F3349F3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:30:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:6f:75:47:32:db:8b:98:44:ce:38:80:f8:9d:0a:e7:c9:92:c3:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A08BAF2D88514EC041A87F092E6B6A521F3349F3 Validity Not Before: Jul 24 01:05:33 2026 GMT Not After : Jul 25 04:57:33 2026 GMT Subject: CN=054D5FFB38BD676324A314D05CAD86F9356F2AFC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:6b:be:f5:12:fd:17:9f:20:30:a2:77:66:30: 6b:80:20:6a:02:41:51:ad:b9:8c:03:de:79:ae:3b: 18:0d:a8:92:73:1f:73:a1:49:af:d8:b7:38:31:c0: fa:c4:fb:c1:2a:4b:62:77:7e:fb:a9:fe:c6:9a:66: 1a:e0:48:33:8d:7a:55:eb:e0:38:bb:32:aa:d6:a0: 2a:ce:79:ec:3d:50:7d:3b:19:56:a0:1e:ab:6b:2f: 93:c8:a6:e9:59:51:35:3f:38:28:1a:85:b1:66:e5: b4:58:24:b0:f8:11:a8:ac:33:bf:9a:fc:6c:78:ea: 32:f6:86:fa:af:9a:6a:e8:91:a0:99:9d:97:7a:a7: 60:aa:c0:0f:a0:f8:db:c2:2e:82:7a:48:bf:a4:7f: f4:a5:fa:18:8a:9b:96:14:cf:94:4d:e9:5a:c1:be: 85:70:33:0e:4e:ca:97:f3:fb:0c:80:c5:4a:a3:0f: 6b:46:8c:1f:38:be:4f:92:89:35:c7:17:8e:fd:c9: 46:9a:12:0c:a2:67:68:e5:e0:57:1e:45:43:05:68: 82:08:60:70:75:e5:30:0d:67:4b:98:33:0a:65:53: 94:43:bd:14:36:28:de:78:6a:3b:43:5b:47:84:2a: 71:27:5f:e8:ea:b6:0f:94:43:5b:21:29:fd:79:68: 7d:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:4D:5F:FB:38:BD:67:63:24:A3:14:D0:5C:AD:86:F9:35:6F:2A:FC X509v3 Authority Key Identifier: keyid:A0:8B:AF:2D:88:51:4E:C0:41:A8:7F:09:2E:6B:6A:52:1F:33:49:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/A08BAF2D88514EC041A87F092E6B6A521F3349F3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A08BAF2D88514EC041A87F092E6B6A521F3349F3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/A08BAF2D88514EC041A87F092E6B6A521F3349F3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:a5:1c:c5:68:5a:b6:54:59:92:95:51:8b:11:5a:8c:56:5c: 06:2d:d1:48:28:09:6d:fc:c3:d2:b6:65:cb:19:57:88:10:7b: 9c:cd:a7:67:56:34:4a:c1:a1:4b:95:6b:df:88:77:19:cc:d9: 9b:e3:c5:17:4e:7f:ff:97:94:af:7c:bb:fe:72:66:25:bb:98: 71:90:f9:7a:8a:c7:8b:9b:fd:24:92:7f:33:38:8f:c1:f4:98: 9a:4f:aa:55:ad:be:f7:6d:24:a7:a9:8e:f3:7e:75:79:96:57: e1:f8:54:a3:b6:20:ad:e5:ff:b2:bd:63:1a:9e:a4:bb:5d:12: 47:48:21:ca:90:9d:b6:ae:3c:4a:a3:e5:24:02:4a:0f:32:74: f3:e9:fa:23:e6:15:f1:4c:d0:3a:54:a4:0a:ed:52:11:f9:b3: c9:c3:71:ac:c4:3a:ba:48:84:19:f7:00:92:c3:e8:51:1f:0b: 98:e8:19:c6:c8:cc:36:fb:88:11:f8:9b:e4:e7:db:0b:f6:ae: 74:82:44:4c:84:bf:e3:80:97:1f:3c:36:88:0c:6b:50:9f:75: 09:e1:47:c0:df:63:b0:2a:05:a4:4e:6f:87:de:1a:a1:ca:40: 25:40:82:3f:38:c2:49:0b:1e:20:0d:4f:29:44:23:17:01:e5: 8c:23:c1:8b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA291RzLbi5hEzjiA+J0K58mSw3wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTA4QkFGMkQ4ODUxNEVDMDQxQTg3RjA5MkU2QjZBNTIx RjMzNDlGMzAeFw0yNjA3MjQwMTA1MzNaFw0yNjA3MjUwNDU3MzNaMDMxMTAvBgNV BAMTKDA1NEQ1RkZCMzhCRDY3NjMyNEEzMTREMDVDQUQ4NkY5MzU2RjJBRkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCJa771Ev0XnyAwondmMGuAIGoC QVGtuYwD3nmuOxgNqJJzH3OhSa/YtzgxwPrE+8EqS2J3fvup/saaZhrgSDONelXr 4Di7MqrWoCrOeew9UH07GVagHqtrL5PIpulZUTU/OCgahbFm5bRYJLD4EaisM7+a /Gx46jL2hvqvmmrokaCZnZd6p2CqwA+g+NvCLoJ6SL+kf/Sl+hiKm5YUz5RN6VrB voVwMw5Oypfz+wyAxUqjD2tGjB84vk+SiTXHF479yUaaEgyiZ2jl4FceRUMFaIII YHB15TANZ0uYMwplU5RDvRQ2KN54ajtDW0eEKnEnX+jqtg+UQ1shKf15aH0dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBU1f+zi9Z2MkoxTQXK2G+TVvKvwwHwYDVR0j BBgwFoAUoIuvLYhRTsBBqH8JLmtqUh8zSfMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGJjNmFhMDMtMWI0ZC00MzhlLWE5ZjMtZWZlYWFlNmIwOTIxLzAvQTA4QkFGMkQ4 ODUxNEVDMDQxQTg3RjA5MkU2QjZBNTIxRjMzNDlGMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BMDhCQUYyRDg4NTE0RUMwNDFBODdGMDkyRTZCNkE1MjFGMzM0 OUYzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGJjNmFhMDMtMWI0ZC00MzhlLWE5 ZjMtZWZlYWFlNmIwOTIxLzAvQTA4QkFGMkQ4ODUxNEVDMDQxQTg3RjA5MkU2QjZB NTIxRjMzNDlGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIOlHMVoWrZUWZKVUYsRWoxWXAYt0UgoCW38 w9K2ZcsZV4gQe5zNp2dWNErBoUuVa9+IdxnM2ZvjxRdOf/+XlK98u/5yZiW7mHGQ +XqKx4ub/SSSfzM4j8H0mJpPqlWtvvdtJKepjvN+dXmWV+H4VKO2IK3l/7K9Yxqe pLtdEkdIIcqQnbauPEqj5SQCSg8ydPPp+iPmFfFM0DpUpArtUhH5s8nDcazEOrpI hBn3AJLD6FEfC5joGcbIzDb7iBH4m+Tn2wv2rnSCREyEv+OAlx88NogMa1CfdQnh R8DfY7AqBaROb4feGqHKQCVAgj84wkkLHiANTylEIxcB5YwjwYs= -----END CERTIFICATE-----Generated at Fri Jul 24 05:03:35 2026 by rpki-client