$ rpki-client -vvf rpki-rsync.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/8CD6FC0255FD1ED17FD82CFA8B66D24A29BA1D8E.mft File: 8CD6FC0255FD1ED17FD82CFA8B66D24A29BA1D8E.mft (raw, json) Hash identifier: 5wwyPccMaF0YruRkTWLctxxARZxy0Xd7kqJsPJu4c+E= Subject key identifier: 07:AB:5E:47:82:26:43:E0:42:E1:62:14:4C:1A:06:76:02:4A:E9:BE Authority key identifier: 8C:D6:FC:02:55:FD:1E:D1:7F:D8:2C:FA:8B:66:D2:4A:29:BA:1D:8E Certificate issuer: /CN=8CD6FC0255FD1ED17FD82CFA8B66D24A29BA1D8E Certificate serial: 2529AEE3DDA4BD2C4164FBFA159C3DAFCA5B194E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8CD6FC0255FD1ED17FD82CFA8B66D24A29BA1D8E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/8CD6FC0255FD1ED17FD82CFA8B66D24A29BA1D8E.mft Manifest number: 70 Signing time: Fri 24 Jul 2026 05:36:24 +0000 Manifest this update: Fri 24 Jul 2026 05:31:24 +0000 Manifest next update: Sat 25 Jul 2026 07:02:24 +0000 Files and hashes: 1: 3130332e38372e3139372e302f32342d3234203d3e20313336303837.roa (hash: VvKS0B4ZLReXOTrvcAhygsCJwutg9GJIYxL7J1Tdiis=) 2: 3130332e38372e3139362e302f32342d3234203d3e20313336303837.roa (hash: tUv0W4gMiS1vhejBIsoiDaLo6/xoWf91YpxI7rtj5ao=) 3: 8CD6FC0255FD1ED17FD82CFA8B66D24A29BA1D8E.crl (hash: fE2aTHwkAEaIg7lk12WgHjwSCitc4xFGs4yVSTh1rSM=) 4: 3130332e38372e3139382e302f32342d3234203d3e20313336303837.roa (hash: j+lgNwhd7sTPpzvBZDbz7MtwJzwdtzVrzUiO5CTg4C0=) 5: 3130332e38372e3139392e302f32342d3234203d3e20313336303837.roa (hash: Y4fdfPd8CGZXfJi8zT1Xs61mqy3uc8h/5nYm+/f9TOQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/8CD6FC0255FD1ED17FD82CFA8B66D24A29BA1D8E.crl rsync://rpki-rsync.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/8CD6FC0255FD1ED17FD82CFA8B66D24A29BA1D8E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8CD6FC0255FD1ED17FD82CFA8B66D24A29BA1D8E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 07:02:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:29:ae:e3:dd:a4:bd:2c:41:64:fb:fa:15:9c:3d:af:ca:5b:19:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8CD6FC0255FD1ED17FD82CFA8B66D24A29BA1D8E Validity Not Before: Jul 24 05:31:24 2026 GMT Not After : Jul 25 07:02:24 2026 GMT Subject: CN=07AB5E47822643E042E162144C1A0676024AE9BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:84:54:8d:fd:58:e5:07:3a:80:66:8a:4b:3b: bb:5f:1a:46:f6:66:59:12:f3:c1:ce:4a:b4:ae:8e: 4e:c2:8e:00:e5:fc:00:9e:ef:e6:ee:75:f3:b6:d8: e7:79:c5:20:70:1b:63:dd:5e:03:12:4f:de:c0:f8: 01:a7:38:5d:09:d4:e4:10:a8:ec:13:fe:50:b2:0f: 2d:5a:2e:4e:03:46:5d:e2:3a:3a:6d:58:08:ad:98: 0d:b6:6f:db:e4:d5:48:37:57:bb:93:88:e2:cf:09: 6c:91:03:f3:c4:96:cb:65:33:b9:dd:3d:a4:e8:cd: 35:3f:b1:6d:4a:8b:5c:a2:bd:f2:96:3a:66:94:9e: 18:db:53:2a:c0:de:2b:2d:5b:9b:ec:2c:d7:e4:2a: b5:81:9c:fa:a6:ac:69:69:29:ad:66:8e:57:19:a9: cd:51:ca:61:81:c4:01:39:f9:05:53:6d:89:aa:25: 01:f4:f1:05:3d:c2:66:c4:56:c7:70:aa:96:52:f8: ed:37:ed:83:3b:ec:c6:28:e2:02:e9:e6:6e:a4:7b: ee:fe:f5:9b:55:81:98:27:ce:a3:71:e7:eb:e1:8b: ac:43:d7:e0:a2:44:a1:3d:11:7c:7c:5d:73:3b:f8: 80:a7:fb:8c:eb:e8:a4:0c:d2:f1:86:07:74:e1:38: 5f:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:AB:5E:47:82:26:43:E0:42:E1:62:14:4C:1A:06:76:02:4A:E9:BE X509v3 Authority Key Identifier: keyid:8C:D6:FC:02:55:FD:1E:D1:7F:D8:2C:FA:8B:66:D2:4A:29:BA:1D:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/8CD6FC0255FD1ED17FD82CFA8B66D24A29BA1D8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8CD6FC0255FD1ED17FD82CFA8B66D24A29BA1D8E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/8CD6FC0255FD1ED17FD82CFA8B66D24A29BA1D8E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:9c:7f:af:5c:b8:fe:f3:03:b6:ab:e9:5d:21:d4:cb:9e:56: b5:9e:46:9d:0b:b3:76:cc:1b:a2:6c:47:2b:94:91:87:64:e0: 6a:38:f1:0d:39:94:e8:72:d1:26:1b:c2:4f:1b:f5:ee:7b:61: 59:b2:5c:88:95:0b:1d:71:76:6c:58:f8:3e:01:23:4e:dd:35: fd:8f:1c:4e:29:85:0b:7e:65:e5:c0:30:8d:19:cd:82:36:8d: 74:17:83:b4:13:0e:e7:e1:ba:b3:53:de:b9:01:98:e5:e7:d4: 31:6f:d3:fe:0a:50:6a:e2:55:ec:ed:11:38:71:e8:c3:3f:fa: ee:bf:89:37:a1:c1:80:35:12:d7:60:a9:59:79:97:77:a8:de: 5c:b4:9d:32:35:69:72:5b:4b:b3:de:14:03:ee:3b:25:3f:b3: b0:c7:18:c4:ce:a8:92:5b:ca:ee:58:5d:d1:52:bc:eb:7f:86: 5f:51:9d:19:71:bd:bb:a3:55:42:8d:50:0d:fa:b6:41:66:07: 38:2b:02:e3:9e:9c:b5:96:da:e4:bd:dc:64:ff:80:7e:49:c6: 84:f1:99:2a:87:54:6e:3b:05:65:4d:90:39:e2:2b:e5:e7:b6: e5:4e:a6:be:8f:3f:69:8f:60:c1:24:fb:31:01:04:e7:1d:cc: 81:be:47:7d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJSmu492kvSxBZPv6FZw9r8pbGU4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOENENkZDMDI1NUZEMUVEMTdGRDgyQ0ZBOEI2NkQyNEEy OUJBMUQ4RTAeFw0yNjA3MjQwNTMxMjRaFw0yNjA3MjUwNzAyMjRaMDMxMTAvBgNV BAMTKDA3QUI1RTQ3ODIyNjQzRTA0MkUxNjIxNDRDMUEwNjc2MDI0QUU5QkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1hFSN/VjlBzqAZopLO7tfGkb2 ZlkS88HOSrSujk7CjgDl/ACe7+budfO22Od5xSBwG2PdXgMST97A+AGnOF0J1OQQ qOwT/lCyDy1aLk4DRl3iOjptWAitmA22b9vk1Ug3V7uTiOLPCWyRA/PElstlM7nd PaTozTU/sW1Ki1yivfKWOmaUnhjbUyrA3istW5vsLNfkKrWBnPqmrGlpKa1mjlcZ qc1RymGBxAE5+QVTbYmqJQH08QU9wmbEVsdwqpZS+O037YM77MYo4gLp5m6ke+7+ 9ZtVgZgnzqNx5+vhi6xD1+CiRKE9EXx8XXM7+ICn+4zr6KQM0vGGB3ThOF9XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUB6teR4ImQ+BC4WIUTBoGdgJK6b4wHwYDVR0j BBgwFoAUjNb8AlX9HtF/2Cz6i2bSSim6HY4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTZlNjNjZDItZmIzYy00MWIyLWI5NmItYWIyMzQ0MjBhMjExLzAvOENENkZDMDI1 NUZEMUVEMTdGRDgyQ0ZBOEI2NkQyNEEyOUJBMUQ4RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84Q0Q2RkMwMjU1RkQxRUQxN0ZEODJDRkE4QjY2RDI0QTI5QkEx RDhFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTZlNjNjZDItZmIzYy00MWIyLWI5 NmItYWIyMzQ0MjBhMjExLzAvOENENkZDMDI1NUZEMUVEMTdGRDgyQ0ZBOEI2NkQy NEEyOUJBMUQ4RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACicf69cuP7zA7ar6V0h1MueVrWeRp0Ls3bM G6JsRyuUkYdk4Go48Q05lOhy0SYbwk8b9e57YVmyXIiVCx1xdmxY+D4BI07dNf2P HE4phQt+ZeXAMI0ZzYI2jXQXg7QTDufhurNT3rkBmOXn1DFv0/4KUGriVeztEThx 6MM/+u6/iTehwYA1EtdgqVl5l3eo3ly0nTI1aXJbS7PeFAPuOyU/s7DHGMTOqJJb yu5YXdFSvOt/hl9RnRlxvbujVUKNUA36tkFmBzgrAuOenLWW2uS93GT/gH5JxoTx mSqHVG47BWVNkDniK+XntuVOpr6PP2mPYMEk+zEBBOcdzIG+R30= -----END CERTIFICATE-----Generated at Fri Jul 24 08:40:04 2026 by rpki-client