$ rpki-client -vvf rpki-rsync.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8E7D29B8B2E6F2F09B507FC36B3173162A4316E9.mft File: 8E7D29B8B2E6F2F09B507FC36B3173162A4316E9.mft (raw, json) Hash identifier: zBL76cS7VU9JGftciQGLxwUPrsGnYGxloohWRBNPFAM= Subject key identifier: CF:B6:0D:F9:35:FD:9A:27:7F:59:45:08:5C:28:C1:AC:AC:0A:FC:45 Authority key identifier: 8E:7D:29:B8:B2:E6:F2:F0:9B:50:7F:C3:6B:31:73:16:2A:43:16:E9 Certificate issuer: /CN=8E7D29B8B2E6F2F09B507FC36B3173162A4316E9 Certificate serial: 51D01F7AD663D0B499A5C7A2CA05884DC7AC06B3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8E7D29B8B2E6F2F09B507FC36B3173162A4316E9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8E7D29B8B2E6F2F09B507FC36B3173162A4316E9.mft Manifest number: 70 Signing time: Thu 23 Jul 2026 22:52:46 +0000 Manifest this update: Thu 23 Jul 2026 22:47:46 +0000 Manifest next update: Sat 25 Jul 2026 01:55:46 +0000 Files and hashes: 1: 8E7D29B8B2E6F2F09B507FC36B3173162A4316E9.crl (hash: OwuhNsZurhmR5e+3nkGVG9txoxYcPQ7l7VqeN7QFSV8=) 2: 3130332e3138362e3139352e302f32342d3234203d3e203438343635.roa (hash: r7dovsQ2SZSV7IfPAfAuGK0MlNXhEY5b9y9M8jygZbk=) 3: 3130332e3138362e3139342e302f32342d3234203d3e20313439373132.roa (hash: FAM0vFS+CEP/k4I2FWb6JASyBXq3gfqT8CiCE9WHTo0=) 4: 3130332e3138362e3139342e302f32342d3234203d3e203438343635.roa (hash: 3gBu5z4wg47/tNqaD7YsE1EFFZZ6JYTR0325QFX63A0=) 5: 3130332e3138362e3139342e302f32332d3233203d3e20313439373132.roa (hash: vEKBFb87szZHK58hOoWh27DXWyqF6KjiEygYywKcCcA=) 6: 3130332e3138362e3139342e302f32332d3234203d3e20313439373132.roa (hash: nhCth3GuuL56/ZX/YpeRjeCAIHYgJ/lFofg+gthNMoU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8E7D29B8B2E6F2F09B507FC36B3173162A4316E9.crl rsync://rpki-rsync.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8E7D29B8B2E6F2F09B507FC36B3173162A4316E9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8E7D29B8B2E6F2F09B507FC36B3173162A4316E9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 01:55:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:d0:1f:7a:d6:63:d0:b4:99:a5:c7:a2:ca:05:88:4d:c7:ac:06:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E7D29B8B2E6F2F09B507FC36B3173162A4316E9 Validity Not Before: Jul 23 22:47:46 2026 GMT Not After : Jul 25 01:55:46 2026 GMT Subject: CN=CFB60DF935FD9A277F5945085C28C1ACAC0AFC45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:9d:52:3b:05:1c:bf:65:63:4f:7d:3a:f7:59: 28:49:41:4d:02:18:ce:21:30:82:90:ff:eb:d7:b2: c8:c4:11:a6:9e:e4:6d:58:e6:6b:6b:af:24:e7:e3: 45:22:58:2c:3e:54:c0:64:4b:f2:1a:77:92:6d:82: 70:e7:c1:21:26:d7:24:22:b1:d9:fd:15:19:57:27: b3:a5:a0:f7:66:53:3a:02:34:1f:ca:4c:1b:36:ca: 8e:a6:0f:85:7d:e7:45:3a:71:40:1d:5a:33:92:dc: 8e:15:48:fb:50:f2:20:aa:7a:24:23:22:fb:a1:c1: 80:db:36:09:e4:60:a2:60:42:90:7f:09:0d:09:7c: 3c:90:a9:4a:0a:32:36:9b:e5:9e:02:72:21:7f:cf: 4b:65:02:6b:b3:5b:72:0e:39:8f:f1:5a:a5:3f:6a: ab:4f:98:3f:df:57:a7:1b:91:00:8b:79:96:63:55: 22:8d:41:89:39:47:06:30:f9:91:f9:a1:7b:8d:4e: e8:3d:92:f4:13:85:37:cc:91:75:ca:9e:86:92:1d: d7:bd:e0:c9:35:ce:e9:72:fc:a4:0a:e1:10:bd:38: 64:7c:20:27:f2:13:7c:40:4d:1b:e6:8d:5d:6c:13: 59:6c:54:27:76:82:52:94:c0:16:7b:b2:f5:f7:67: e3:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:B6:0D:F9:35:FD:9A:27:7F:59:45:08:5C:28:C1:AC:AC:0A:FC:45 X509v3 Authority Key Identifier: keyid:8E:7D:29:B8:B2:E6:F2:F0:9B:50:7F:C3:6B:31:73:16:2A:43:16:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8E7D29B8B2E6F2F09B507FC36B3173162A4316E9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8E7D29B8B2E6F2F09B507FC36B3173162A4316E9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8E7D29B8B2E6F2F09B507FC36B3173162A4316E9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:08:82:c4:4b:52:3d:01:90:65:26:7f:38:f2:6c:18:a0:7b: 84:71:9c:20:18:f4:7f:e4:d7:15:81:b4:6f:e4:e9:48:62:91: ac:e8:e3:55:f4:86:48:4f:11:b3:7c:e0:88:2a:92:72:25:e0: 82:e3:a5:5f:de:f8:85:f7:15:39:82:e6:5d:59:f8:af:d1:0b: f7:f0:a9:e9:61:05:29:62:be:e3:5d:ce:e1:b9:a4:90:5e:c6: 52:b1:94:a3:9b:fb:eb:34:27:f2:9f:8e:af:e2:04:1f:90:1b: 3f:a1:de:1b:1f:1e:af:bc:23:19:3d:8a:61:af:78:2a:ae:8b: 6f:44:4e:e0:e6:c9:5d:d7:15:5c:12:91:a8:e3:e5:b8:8c:15: bd:70:18:e2:be:ca:93:cd:5c:bb:11:b7:78:4e:a6:d2:f0:c3: 85:9a:14:f2:13:22:9f:01:4e:f9:52:42:d8:8f:ff:f5:55:58: 61:cc:4d:74:d6:8d:be:35:cc:03:0a:87:3f:77:7a:c1:68:d4: d1:b2:0d:31:bd:16:b8:ed:6a:97:2e:5c:ec:84:d0:66:45:79: 3d:40:a4:a4:15:f4:77:2a:ff:a8:3f:19:7b:41:c3:a9:5f:22: b7:9b:fe:6e:34:a9:ec:66:a9:74:3a:ac:ff:1f:b0:38:d2:c5: 15:f7:d1:34 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUdAfetZj0LSZpceiygWITcesBrMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEU3RDI5QjhCMkU2RjJGMDlCNTA3RkMzNkIzMTczMTYy QTQzMTZFOTAeFw0yNjA3MjMyMjQ3NDZaFw0yNjA3MjUwMTU1NDZaMDMxMTAvBgNV BAMTKENGQjYwREY5MzVGRDlBMjc3RjU5NDUwODVDMjhDMUFDQUMwQUZDNDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCnVI7BRy/ZWNPfTr3WShJQU0C GM4hMIKQ/+vXssjEEaae5G1Y5mtrryTn40UiWCw+VMBkS/Iad5JtgnDnwSEm1yQi sdn9FRlXJ7OloPdmUzoCNB/KTBs2yo6mD4V950U6cUAdWjOS3I4VSPtQ8iCqeiQj IvuhwYDbNgnkYKJgQpB/CQ0JfDyQqUoKMjab5Z4CciF/z0tlAmuzW3IOOY/xWqU/ aqtPmD/fV6cbkQCLeZZjVSKNQYk5RwYw+ZH5oXuNTug9kvQThTfMkXXKnoaSHde9 4Mk1zuly/KQK4RC9OGR8ICfyE3xATRvmjV1sE1lsVCd2glKUwBZ7svX3Z+PfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUz7YN+TX9mid/WUUIXCjBrKwK/EUwHwYDVR0j BBgwFoAUjn0puLLm8vCbUH/DazFzFipDFukwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTI1MmVhZDMtZGM4Zi00ZDg2LWFmY2YtYTE0MGU1Yjg3NTMyLzAvOEU3RDI5QjhC MkU2RjJGMDlCNTA3RkMzNkIzMTczMTYyQTQzMTZFOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84RTdEMjlCOEIyRTZGMkYwOUI1MDdGQzM2QjMxNzMxNjJBNDMx NkU5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTI1MmVhZDMtZGM4Zi00ZDg2LWFm Y2YtYTE0MGU1Yjg3NTMyLzAvOEU3RDI5QjhCMkU2RjJGMDlCNTA3RkMzNkIzMTcz MTYyQTQzMTZFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEkIgsRLUj0BkGUmfzjybBige4RxnCAY9H/k 1xWBtG/k6Uhikazo41X0hkhPEbN84IgqknIl4ILjpV/e+IX3FTmC5l1Z+K/RC/fw qelhBSlivuNdzuG5pJBexlKxlKOb++s0J/Kfjq/iBB+QGz+h3hsfHq+8Ixk9imGv eCqui29ETuDmyV3XFVwSkajj5biMFb1wGOK+ypPNXLsRt3hOptLww4WaFPITIp8B TvlSQtiP//VVWGHMTXTWjb41zAMKhz93esFo1NGyDTG9FrjtapcuXOyE0GZFeT1A pKQV9Hcq/6g/GXtBw6lfIreb/m40qexmqXQ6rP8fsDjSxRX30TQ= -----END CERTIFICATE-----Generated at Fri Jul 24 07:40:03 2026 by rpki-client