$ rpki-client -vvf rpki-rsync.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/8FFAA6656CAEB189705F03C7B4148624E4A80597.mft File: 8FFAA6656CAEB189705F03C7B4148624E4A80597.mft (raw, json) Hash identifier: XQhF2wDaE/+jboaRD9zcJT82W/1Cr7A8hESZ010DW/0= Subject key identifier: 62:FE:83:23:ED:B9:A1:81:2D:A6:82:88:99:47:97:07:1E:CF:05:36 Authority key identifier: 8F:FA:A6:65:6C:AE:B1:89:70:5F:03:C7:B4:14:86:24:E4:A8:05:97 Certificate issuer: /CN=8FFAA6656CAEB189705F03C7B4148624E4A80597 Certificate serial: 0899256C7AF1C2013B7900264FA86F65D3118450 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8FFAA6656CAEB189705F03C7B4148624E4A80597.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/8FFAA6656CAEB189705F03C7B4148624E4A80597.mft Manifest number: 6F Signing time: Fri 24 Jul 2026 00:04:14 +0000 Manifest this update: Thu 23 Jul 2026 23:59:14 +0000 Manifest next update: Sat 25 Jul 2026 02:05:14 +0000 Files and hashes: 1: 3230322e35302e3230332e302f32342d3234203d3e203535363936.roa (hash: QgX53d3ZPmwqUeHqTZtdjccW/DQcVacKXuBLz3xuE+Q=) 2: 3230322e35302e3230302e302f32342d3234203d3e203535363936.roa (hash: j7IknYgKj7dl1bu8AJ/aQ/eLpW5VQAB5YDLHEEVUQxU=) 3: 3230322e35302e3230312e302f32342d3234203d3e203535363936.roa (hash: 9g/ng/5n6hJoQNhHnUHUl6+xhhnGERFtgslQ205VyPU=) 4: 8FFAA6656CAEB189705F03C7B4148624E4A80597.crl (hash: o1kcew9BMGVPwR0XTKlEHu8ggCwChMhOdpeol2bKvrw=) 5: 3230322e35302e3230322e302f32342d3234203d3e203535363936.roa (hash: 5tE3feCM9vyNUB/qpwvXZKU/4/GsAVh0LYhHMntcLoo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/8FFAA6656CAEB189705F03C7B4148624E4A80597.crl rsync://rpki-rsync.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/8FFAA6656CAEB189705F03C7B4148624E4A80597.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8FFAA6656CAEB189705F03C7B4148624E4A80597.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 00:48:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:99:25:6c:7a:f1:c2:01:3b:79:00:26:4f:a8:6f:65:d3:11:84:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FFAA6656CAEB189705F03C7B4148624E4A80597 Validity Not Before: Jul 23 23:59:14 2026 GMT Not After : Jul 25 02:05:14 2026 GMT Subject: CN=62FE8323EDB9A1812DA68288994797071ECF0536 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:28:31:f3:ef:ea:e7:7d:53:21:8c:56:6c:3c: 58:84:de:bb:99:68:f5:4e:0e:d7:14:f8:fd:ec:84: 09:f5:dc:af:df:9b:46:4b:19:b0:c6:70:6d:49:7a: 91:30:a4:2e:e9:ad:47:b5:1e:0f:11:ee:90:e5:56: bd:84:ea:a8:fc:c5:58:ad:79:db:12:4e:33:ba:fa: dc:0a:c7:9f:cb:62:a6:c3:b4:f4:39:17:53:28:32: 25:47:7e:56:51:97:76:90:7c:dd:1d:35:c2:27:0e: b2:a6:9b:2f:64:74:b3:81:f9:ff:fc:93:6e:83:65: 8c:57:41:77:d2:ec:aa:33:cc:84:9b:27:50:51:6a: de:ee:9f:92:17:7a:55:77:2e:66:e0:8e:af:16:c7: d2:43:a3:9f:b3:51:99:82:b1:22:e3:7a:24:bb:55: 36:b2:68:1d:78:9b:50:03:80:68:f3:54:c5:92:62: 56:fa:f6:3f:62:bd:9a:7f:26:5f:99:12:44:fa:71: fb:85:88:54:cd:d7:f4:da:96:59:7d:62:5d:c2:ec: 90:17:db:09:3e:b9:9b:0f:3c:2f:28:7c:1a:5a:d7: 17:2c:3b:54:e6:74:9c:6f:ec:95:93:3a:97:8b:29: cb:55:9c:a6:28:a1:6e:9a:cb:2d:ff:18:2f:c2:a3: 29:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:FE:83:23:ED:B9:A1:81:2D:A6:82:88:99:47:97:07:1E:CF:05:36 X509v3 Authority Key Identifier: keyid:8F:FA:A6:65:6C:AE:B1:89:70:5F:03:C7:B4:14:86:24:E4:A8:05:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/8FFAA6656CAEB189705F03C7B4148624E4A80597.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8FFAA6656CAEB189705F03C7B4148624E4A80597.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/8FFAA6656CAEB189705F03C7B4148624E4A80597.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:b2:9e:b4:99:76:f8:e6:65:ef:67:2e:4d:1d:ec:2a:34:5b: 8a:62:27:33:ce:c5:02:8d:cd:4a:9a:80:cc:9c:e2:9a:23:2a: 57:50:14:2e:61:8f:99:98:4e:2e:b9:db:f4:a7:b2:b7:26:95: d0:63:54:df:f2:2a:24:89:2c:99:a4:9f:01:6b:33:ec:3b:7d: 02:7c:fa:a5:73:3e:2e:e0:8a:03:5a:5d:e7:12:75:9d:30:57: f4:d8:a2:40:6b:83:28:ef:1c:41:da:a1:d3:0a:6f:82:43:14: 08:7d:be:1e:5e:34:ca:2c:4d:44:2a:e8:d9:30:bb:a2:6e:7d: f0:9f:39:f6:0c:eb:f7:c7:55:b0:16:0c:ef:55:8b:29:2b:f9: 1f:d5:96:d9:5a:b6:93:42:df:76:86:b3:ac:e7:1a:f7:89:e8: 99:62:fd:77:11:ac:b1:c0:ee:27:b2:c7:32:7b:4a:58:0f:2f: c2:43:db:70:17:20:c2:09:19:e1:91:6a:03:23:ea:e0:f2:55: 26:03:98:b8:fc:4e:d2:b4:7c:b0:37:7e:29:ef:19:d7:6e:31: 88:f8:70:5b:ee:4d:ca:6c:37:49:6d:05:b6:81:14:ca:aa:d8: a3:e9:d5:03:98:3f:85:7e:c4:52:df:fe:a8:07:84:95:5c:14: b8:ec:8f:ae -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCJklbHrxwgE7eQAmT6hvZdMRhFAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZGQUE2NjU2Q0FFQjE4OTcwNUYwM0M3QjQxNDg2MjRF NEE4MDU5NzAeFw0yNjA3MjMyMzU5MTRaFw0yNjA3MjUwMjA1MTRaMDMxMTAvBgNV BAMTKDYyRkU4MzIzRURCOUExODEyREE2ODI4ODk5NDc5NzA3MUVDRjA1MzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1KDHz7+rnfVMhjFZsPFiE3ruZ aPVODtcU+P3shAn13K/fm0ZLGbDGcG1JepEwpC7prUe1Hg8R7pDlVr2E6qj8xVit edsSTjO6+twKx5/LYqbDtPQ5F1MoMiVHflZRl3aQfN0dNcInDrKmmy9kdLOB+f/8 k26DZYxXQXfS7KozzISbJ1BRat7un5IXelV3Lmbgjq8Wx9JDo5+zUZmCsSLjeiS7 VTayaB14m1ADgGjzVMWSYlb69j9ivZp/Jl+ZEkT6cfuFiFTN1/Talll9Yl3C7JAX 2wk+uZsPPC8ofBpa1xcsO1TmdJxv7JWTOpeLKctVnKYooW6ayy3/GC/Coyl7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYv6DI+25oYEtpoKImUeXBx7PBTYwHwYDVR0j BBgwFoAUj/qmZWyusYlwXwPHtBSGJOSoBZcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTI4ODBkZWUtN2FhMi00YmU0LWJmMzUtY2RiZDExZDc5NTA3LzAvOEZGQUE2NjU2 Q0FFQjE4OTcwNUYwM0M3QjQxNDg2MjRFNEE4MDU5Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84RkZBQTY2NTZDQUVCMTg5NzA1RjAzQzdCNDE0ODYyNEU0QTgw NTk3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTI4ODBkZWUtN2FhMi00YmU0LWJm MzUtY2RiZDExZDc5NTA3LzAvOEZGQUE2NjU2Q0FFQjE4OTcwNUYwM0M3QjQxNDg2 MjRFNEE4MDU5Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB+ynrSZdvjmZe9nLk0d7Co0W4piJzPOxQKN zUqagMyc4pojKldQFC5hj5mYTi652/SnsrcmldBjVN/yKiSJLJmknwFrM+w7fQJ8 +qVzPi7gigNaXecSdZ0wV/TYokBrgyjvHEHaodMKb4JDFAh9vh5eNMosTUQq6Nkw u6JuffCfOfYM6/fHVbAWDO9Viykr+R/VltlatpNC33aGs6znGveJ6Jli/XcRrLHA 7ieyxzJ7SlgPL8JD23AXIMIJGeGRagMj6uDyVSYDmLj8TtK0fLA3finvGdduMYj4 cFvuTcpsN0ltBbaBFMqq2KPp1QOYP4V+xFLf/qgHhJVcFLjsj64= -----END CERTIFICATE-----Generated at Fri Jul 24 02:41:14 2026 by rpki-client