$ rpki-client -vvf rpki-rsync.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/8EEC1E03B8E52F66A0713DEB14217C87F9EA17A7.mft File: 8EEC1E03B8E52F66A0713DEB14217C87F9EA17A7.mft (raw, json) Hash identifier: 6JsMgaH7LdLi9zTvxDM6zUcSp0JlgWLT2yJdBSznkjE= Subject key identifier: 3D:E4:AD:F1:B0:A9:94:C6:16:E8:5C:4E:66:D7:B2:CF:67:F3:B3:D8 Authority key identifier: 8E:EC:1E:03:B8:E5:2F:66:A0:71:3D:EB:14:21:7C:87:F9:EA:17:A7 Certificate issuer: /CN=8EEC1E03B8E52F66A0713DEB14217C87F9EA17A7 Certificate serial: 68DB363070157341942DB25EEF25A2316B2724B9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8EEC1E03B8E52F66A0713DEB14217C87F9EA17A7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/8EEC1E03B8E52F66A0713DEB14217C87F9EA17A7.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 16:35:11 +0000 Manifest this update: Thu 23 Jul 2026 16:30:11 +0000 Manifest next update: Fri 24 Jul 2026 16:39:11 +0000 Files and hashes: 1: 8EEC1E03B8E52F66A0713DEB14217C87F9EA17A7.crl (hash: chiLYykI63pjzO07ABp7o/0pa0FZm92KEVubQdHMeKw=) 2: 3130332e37302e3132332e302f32342d3234203d3e20313530393830.roa (hash: PZbtbKk588SOuMSDyRHv/Fg/EjC+9RQB0ZQtHocb618=) 3: 323030313a6466323a373463303a3a2f34382d3438203d3e20313530393830.roa (hash: 71PyqcaPYwvm2e6i8fnxEnvNfxXMokDQ1xxLp0rozYA=) 4: 3130332e37302e3132322e302f32342d3234203d3e20313530393830.roa (hash: NdF7z4Axz0mBE/lC0pc0IGrEEOoXFiCSmtcjnukP0y4=) 5: 3130332e37302e3132322e302f32332d3233203d3e20313530393830.roa (hash: HeHfGZB/GAp4q9T9TRaLUnaN9SyHYBb/bDC0hRan7Ak=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/8EEC1E03B8E52F66A0713DEB14217C87F9EA17A7.crl rsync://rpki-rsync.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/8EEC1E03B8E52F66A0713DEB14217C87F9EA17A7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8EEC1E03B8E52F66A0713DEB14217C87F9EA17A7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 16:39:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:db:36:30:70:15:73:41:94:2d:b2:5e:ef:25:a2:31:6b:27:24:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8EEC1E03B8E52F66A0713DEB14217C87F9EA17A7 Validity Not Before: Jul 23 16:30:11 2026 GMT Not After : Jul 24 16:39:11 2026 GMT Subject: CN=3DE4ADF1B0A994C616E85C4E66D7B2CF67F3B3D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:42:e8:4a:b2:2d:fc:3d:14:ca:98:f9:4b:35: db:ac:7c:53:21:0c:9a:3c:8f:bc:9f:84:65:ea:e8: 8d:33:0a:e1:c3:24:9c:02:bb:9c:ad:87:c0:68:7c: e9:ad:c7:4b:6a:56:5c:ce:2c:0f:21:63:e7:0b:8b: 00:45:3a:d8:57:f8:03:67:61:aa:5c:80:ca:97:17: c7:c1:64:da:cb:ff:5c:34:30:5f:6d:26:a3:b0:cc: 06:79:b9:d9:33:7b:40:25:fd:79:12:53:2c:2d:dc: c6:37:13:31:4b:a8:ca:37:ac:f9:32:2a:40:5a:70: 8a:0e:e9:ad:f7:32:1c:bc:b1:47:2f:79:d4:02:b6: 8b:d9:c1:f3:3e:42:90:a1:fc:20:4d:6d:6f:c0:7b: 79:16:95:1c:ca:12:f3:8a:87:92:c4:bb:53:d9:85: 32:b6:85:fb:f4:8f:64:d4:fa:42:75:36:84:20:b7: 90:c3:d8:b2:26:1b:a9:96:9d:30:3c:4e:c3:06:33: a3:fb:10:25:7b:01:8c:0c:69:67:9f:e5:e5:1d:29: d1:4e:24:59:16:1e:62:45:6a:25:53:c3:c4:c2:62: 3b:08:98:ad:54:c4:91:53:a3:35:cf:9a:aa:04:e8: 42:27:eb:e4:64:0c:d0:da:64:7f:44:1c:4d:07:d1: 07:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:E4:AD:F1:B0:A9:94:C6:16:E8:5C:4E:66:D7:B2:CF:67:F3:B3:D8 X509v3 Authority Key Identifier: keyid:8E:EC:1E:03:B8:E5:2F:66:A0:71:3D:EB:14:21:7C:87:F9:EA:17:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/8EEC1E03B8E52F66A0713DEB14217C87F9EA17A7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8EEC1E03B8E52F66A0713DEB14217C87F9EA17A7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/8EEC1E03B8E52F66A0713DEB14217C87F9EA17A7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c7:38:e9:0c:77:4b:34:6a:22:0e:13:b8:6c:95:a9:79:1d:a8: 0d:4d:a4:b5:aa:bc:4e:07:cf:91:3a:ef:8f:76:eb:a8:0b:9c: 79:2a:af:f3:26:f0:13:b3:9e:60:b2:60:1b:5d:cf:ed:02:6e: e5:86:59:96:9a:eb:13:69:5e:92:2e:53:28:c9:4f:b8:34:2c: 91:5b:09:4e:43:58:2e:04:14:95:70:37:a3:91:25:46:37:c6: 2e:07:aa:b8:7d:e5:50:c2:59:fc:87:e0:4a:b0:64:ea:65:13: dd:c7:80:d8:a1:35:9b:b6:4d:d3:6c:37:a9:09:1f:0b:c6:b4: f3:01:83:3e:73:91:9a:76:0e:a4:2e:9f:8a:13:6d:11:c0:d3: a4:23:4a:f0:4d:3e:2f:1f:07:6e:f8:49:92:54:d7:a3:fb:04: f4:97:5a:22:2b:2f:e0:f1:08:66:1e:52:1d:86:01:ce:eb:fe: 5d:94:8b:62:16:03:ff:8d:63:54:26:e3:f4:6e:4c:56:ac:6b: 68:06:5f:42:a5:6e:ae:25:9f:4c:cd:b8:52:44:ce:c6:55:07: f8:f5:35:84:a2:80:77:e8:65:af:9a:e1:28:2b:28:19:e8:dd: 1b:5b:c0:49:b8:d5:76:b4:3f:6c:ee:8b:7e:b9:7e:d4:ec:ef: d4:cd:e7:a8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaNs2MHAVc0GULbJe7yWiMWsnJLkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEVFQzFFMDNCOEU1MkY2NkEwNzEzREVCMTQyMTdDODdG OUVBMTdBNzAeFw0yNjA3MjMxNjMwMTFaFw0yNjA3MjQxNjM5MTFaMDMxMTAvBgNV BAMTKDNERTRBREYxQjBBOTk0QzYxNkU4NUM0RTY2RDdCMkNGNjdGM0IzRDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvQuhKsi38PRTKmPlLNdusfFMh DJo8j7yfhGXq6I0zCuHDJJwCu5yth8BofOmtx0tqVlzOLA8hY+cLiwBFOthX+ANn YapcgMqXF8fBZNrL/1w0MF9tJqOwzAZ5udkze0Al/XkSUywt3MY3EzFLqMo3rPky KkBacIoO6a33Mhy8sUcvedQCtovZwfM+QpCh/CBNbW/Ae3kWlRzKEvOKh5LEu1PZ hTK2hfv0j2TU+kJ1NoQgt5DD2LImG6mWnTA8TsMGM6P7ECV7AYwMaWef5eUdKdFO JFkWHmJFaiVTw8TCYjsImK1UxJFTozXPmqoE6EIn6+RkDNDaZH9EHE0H0QehAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPeSt8bCplMYW6FxOZteyz2fzs9gwHwYDVR0j BBgwFoAUjuweA7jlL2agcT3rFCF8h/nqF6cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTMyNTA2NjItM2VlZi00YWE5LTllZGUtNTYyOWQ1YjZlYTk1LzAvOEVFQzFFMDNC OEU1MkY2NkEwNzEzREVCMTQyMTdDODdGOUVBMTdBNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84RUVDMUUwM0I4RTUyRjY2QTA3MTNERUIxNDIxN0M4N0Y5RUEx N0E3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTMyNTA2NjItM2VlZi00YWE5LTll ZGUtNTYyOWQ1YjZlYTk1LzAvOEVFQzFFMDNCOEU1MkY2NkEwNzEzREVCMTQyMTdD ODdGOUVBMTdBNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMc46Qx3SzRqIg4TuGyVqXkdqA1NpLWqvE4H z5E6749266gLnHkqr/Mm8BOznmCyYBtdz+0CbuWGWZaa6xNpXpIuUyjJT7g0LJFb CU5DWC4EFJVwN6ORJUY3xi4Hqrh95VDCWfyH4EqwZOplE93HgNihNZu2TdNsN6kJ HwvGtPMBgz5zkZp2DqQun4oTbRHA06QjSvBNPi8fB274SZJU16P7BPSXWiIrL+Dx CGYeUh2GAc7r/l2Ui2IWA/+NY1Qm4/RuTFasa2gGX0Klbq4ln0zNuFJEzsZVB/j1 NYSigHfoZa+a4SgrKBno3RtbwEm41Xa0P2zui365ftTs79TN56g= -----END CERTIFICATE-----Generated at Fri Jul 24 07:50:58 2026 by rpki-client