$ rpki-client -vvf rpki-rsync.idnic.net/repo/5d5af22c-7e3e-40b5-ac50-637772a95c21/0/8FFA8BB9C09DC4CA42C95C817C0FFD95B14C896C.mft File: 8FFA8BB9C09DC4CA42C95C817C0FFD95B14C896C.mft (raw, json) Hash identifier: m00HSnrWr7xEnP52TntJnlJYvNCzx4MOrw7yshpwITM= Subject key identifier: 1D:67:63:0D:6A:E9:89:EA:15:2D:7D:14:40:3D:3D:D5:58:C5:89:F6 Authority key identifier: 8F:FA:8B:B9:C0:9D:C4:CA:42:C9:5C:81:7C:0F:FD:95:B1:4C:89:6C Certificate issuer: /CN=8FFA8BB9C09DC4CA42C95C817C0FFD95B14C896C Certificate serial: 67A1F45D3C13BFE9BB11C15CE56001574F957CE9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8FFA8BB9C09DC4CA42C95C817C0FFD95B14C896C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5d5af22c-7e3e-40b5-ac50-637772a95c21/0/8FFA8BB9C09DC4CA42C95C817C0FFD95B14C896C.mft Manifest number: 6F Signing time: Fri 24 Jul 2026 03:54:13 +0000 Manifest this update: Fri 24 Jul 2026 03:49:13 +0000 Manifest next update: Sat 25 Jul 2026 05:23:13 +0000 Files and hashes: 1: 8FFA8BB9C09DC4CA42C95C817C0FFD95B14C896C.crl (hash: FvW/Kh0Zu3ek4sZiWgfEZO7VShClS7WvHOPKsOHj3hM=) 2: 3130332e3233362e3133302e302f32332d3233203d3e20313531353435.roa (hash: gHaL9xm6upsCMiwuTIzMiljzjIKdP3tM2s5bdfg68uM=) 3: 3130332e3233362e3133302e302f32342d3234203d3e20313531353435.roa (hash: kAF9XX+k/l/rK1GEr+bjFHX1YeYovpaBVZcUfCaqwVQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5d5af22c-7e3e-40b5-ac50-637772a95c21/0/8FFA8BB9C09DC4CA42C95C817C0FFD95B14C896C.crl rsync://rpki-rsync.idnic.net/repo/5d5af22c-7e3e-40b5-ac50-637772a95c21/0/8FFA8BB9C09DC4CA42C95C817C0FFD95B14C896C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8FFA8BB9C09DC4CA42C95C817C0FFD95B14C896C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:30:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:a1:f4:5d:3c:13:bf:e9:bb:11:c1:5c:e5:60:01:57:4f:95:7c:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FFA8BB9C09DC4CA42C95C817C0FFD95B14C896C Validity Not Before: Jul 24 03:49:13 2026 GMT Not After : Jul 25 05:23:13 2026 GMT Subject: CN=1D67630D6AE989EA152D7D14403D3DD558C589F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:39:eb:0e:de:c9:ed:5e:d1:fc:f9:58:91:4b: 87:3b:40:8e:5b:03:bb:b2:1b:5c:16:11:39:cd:a5: 43:c1:1e:6f:9f:ff:54:ae:2d:be:6e:6e:9f:23:ea: b2:82:7b:15:57:3e:ec:01:87:09:c5:ab:76:7b:db: 0a:0e:52:f6:2c:20:0a:b6:63:38:4d:99:52:39:7c: 1f:ac:71:ca:1c:76:f8:37:23:f5:8b:fa:9c:2f:00: af:c9:f5:a2:28:b3:db:15:89:ef:95:78:f7:39:75: d6:2d:5a:41:e7:a5:2f:ec:0b:fd:28:8e:8c:d1:00: 99:4e:84:30:a7:e8:a8:ac:6f:1a:55:1c:20:b4:5f: f7:ca:29:f8:0a:d3:1c:fe:9f:63:09:6e:cc:da:91: 04:39:e8:ad:0c:f7:de:62:73:ed:6f:48:c0:02:6a: dc:24:21:2d:87:af:94:fb:02:09:d9:e7:ec:4d:55: 3b:e0:c4:b5:d4:76:38:4d:3d:c7:1d:90:dd:5d:fa: ad:22:17:e7:98:8b:da:be:95:ce:cb:ea:29:6b:b3: 8e:fb:b2:3c:72:7f:3c:56:f6:5f:fb:eb:7b:33:6a: 9e:ff:35:d9:70:d1:8e:c4:e3:74:ac:01:94:46:a2: 25:9f:48:4c:af:f7:cf:04:2f:a6:98:39:7b:30:57: 50:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:67:63:0D:6A:E9:89:EA:15:2D:7D:14:40:3D:3D:D5:58:C5:89:F6 X509v3 Authority Key Identifier: keyid:8F:FA:8B:B9:C0:9D:C4:CA:42:C9:5C:81:7C:0F:FD:95:B1:4C:89:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5d5af22c-7e3e-40b5-ac50-637772a95c21/0/8FFA8BB9C09DC4CA42C95C817C0FFD95B14C896C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8FFA8BB9C09DC4CA42C95C817C0FFD95B14C896C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5d5af22c-7e3e-40b5-ac50-637772a95c21/0/8FFA8BB9C09DC4CA42C95C817C0FFD95B14C896C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:4d:bc:c2:ec:df:86:20:77:ec:72:27:e2:67:5c:07:62:d2: 70:44:01:de:73:86:71:88:41:b2:d2:fa:f5:d4:e5:d0:4b:6c: f1:90:cc:a4:83:cb:12:1b:5c:ba:45:38:3d:43:b4:4b:92:02: 8f:e2:3c:4d:df:a1:22:2e:e7:44:90:f4:64:a5:ac:d4:16:22: 01:a9:d5:c7:67:94:5e:e6:c2:9c:0d:fc:20:48:8f:43:88:3d: e5:62:02:15:1a:b1:d1:fc:d9:b2:0e:8f:a4:26:1f:0b:73:c3: 95:7c:f1:38:c5:3d:d7:e0:1a:61:c1:0f:5e:53:42:a2:2a:17: 44:f6:19:53:26:be:df:b0:90:a5:de:03:85:f2:de:ad:c4:09: da:4d:a6:af:1b:90:3f:f5:f6:dd:0c:a3:1a:11:c5:61:ce:e7: bd:66:6c:8b:57:35:76:79:ed:74:5f:a9:98:e9:f0:7e:18:73: 76:f7:a8:a9:f2:bc:e3:e4:b2:1d:1a:10:15:8a:f6:21:e3:ea: e0:b1:61:2a:e0:b3:06:64:5d:65:3a:a2:d2:bb:ae:ea:a9:32: d8:a2:bb:36:01:f0:47:a9:1f:ff:9d:8f:e8:bd:40:8b:59:4c: b0:5b:8e:70:a3:98:fb:a7:42:73:a5:9d:67:a2:3d:f6:2f:ef: 67:e7:a9:16 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ6H0XTwTv+m7EcFc5WABV0+VfOkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZGQThCQjlDMDlEQzRDQTQyQzk1QzgxN0MwRkZEOTVC MTRDODk2QzAeFw0yNjA3MjQwMzQ5MTNaFw0yNjA3MjUwNTIzMTNaMDMxMTAvBgNV BAMTKDFENjc2MzBENkFFOTg5RUExNTJEN0QxNDQwM0QzREQ1NThDNTg5RjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlOesO3sntXtH8+ViRS4c7QI5b A7uyG1wWETnNpUPBHm+f/1SuLb5ubp8j6rKCexVXPuwBhwnFq3Z72woOUvYsIAq2 YzhNmVI5fB+sccocdvg3I/WL+pwvAK/J9aIos9sVie+VePc5ddYtWkHnpS/sC/0o jozRAJlOhDCn6KisbxpVHCC0X/fKKfgK0xz+n2MJbszakQQ56K0M995ic+1vSMAC atwkIS2Hr5T7AgnZ5+xNVTvgxLXUdjhNPccdkN1d+q0iF+eYi9q+lc7L6ilrs477 sjxyfzxW9l/763szap7/Ndlw0Y7E43SsAZRGoiWfSEyv988EL6aYOXswV1CvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHWdjDWrpieoVLX0UQD091VjFifYwHwYDVR0j BBgwFoAUj/qLucCdxMpCyVyBfA/9lbFMiWwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWQ1YWYyMmMtN2UzZS00MGI1LWFjNTAtNjM3NzcyYTk1YzIxLzAvOEZGQThCQjlD MDlEQzRDQTQyQzk1QzgxN0MwRkZEOTVCMTRDODk2Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84RkZBOEJCOUMwOURDNENBNDJDOTVDODE3QzBGRkQ5NUIxNEM4 OTZDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWQ1YWYyMmMtN2UzZS00MGI1LWFj NTAtNjM3NzcyYTk1YzIxLzAvOEZGQThCQjlDMDlEQzRDQTQyQzk1QzgxN0MwRkZE OTVCMTRDODk2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKxNvMLs34Ygd+xyJ+JnXAdi0nBEAd5zhnGI QbLS+vXU5dBLbPGQzKSDyxIbXLpFOD1DtEuSAo/iPE3foSIu50SQ9GSlrNQWIgGp 1cdnlF7mwpwN/CBIj0OIPeViAhUasdH82bIOj6QmHwtzw5V88TjFPdfgGmHBD15T QqIqF0T2GVMmvt+wkKXeA4Xy3q3ECdpNpq8bkD/19t0MoxoRxWHO571mbItXNXZ5 7XRfqZjp8H4Yc3b3qKnyvOPksh0aEBWK9iHj6uCxYSrgswZkXWU6otK7ruqpMtii uzYB8EepH/+dj+i9QItZTLBbjnCjmPunQnOlnWeiPfYv72fnqRY= -----END CERTIFICATE-----Generated at Fri Jul 24 06:28:32 2026 by rpki-client