$ rpki-client -vvf rpki-rsync.idnic.net/repo/68466889-c1ef-4410-ad9c-306c09e1be06/0/8CD86E34E1A21BE873B7ADCC8D2AE7171EA3D96D.mft File: 8CD86E34E1A21BE873B7ADCC8D2AE7171EA3D96D.mft (raw, json) Hash identifier: vhc/YAMtTOf7dtc24bOl46SisxlYDAQf4dhDeBd/WgU= Subject key identifier: B0:75:BB:A9:86:EB:4B:47:11:D4:84:07:8E:1D:E6:C4:44:44:9D:10 Authority key identifier: 8C:D8:6E:34:E1:A2:1B:E8:73:B7:AD:CC:8D:2A:E7:17:1E:A3:D9:6D Certificate issuer: /CN=8CD86E34E1A21BE873B7ADCC8D2AE7171EA3D96D Certificate serial: 362E4C4AB63BD2A726EDE6D9D48497AD17DC98DB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8CD86E34E1A21BE873B7ADCC8D2AE7171EA3D96D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/68466889-c1ef-4410-ad9c-306c09e1be06/0/8CD86E34E1A21BE873B7ADCC8D2AE7171EA3D96D.mft Manifest number: 70 Signing time: Thu 23 Jul 2026 14:22:32 +0000 Manifest this update: Thu 23 Jul 2026 14:17:32 +0000 Manifest next update: Fri 24 Jul 2026 15:47:32 +0000 Files and hashes: 1: 8CD86E34E1A21BE873B7ADCC8D2AE7171EA3D96D.crl (hash: wWTd4aolkoOH227kqUppO5z7KCtAJW+088dOmtEkjfE=) 2: 3130332e3136322e3235322e302f32342d3234203d3e20313431363732.roa (hash: xeD49NnJaETxYZ89zZqsZvQW0lQqtHHDYp/1/JjzAG8=) 3: 3130332e36372e34392e302f32342d3234203d3e20313431363732.roa (hash: Iad4oKdG+cP+QGtzN+0DsTs9ponKGFoBE7JkBGARiyQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/68466889-c1ef-4410-ad9c-306c09e1be06/0/8CD86E34E1A21BE873B7ADCC8D2AE7171EA3D96D.crl rsync://rpki-rsync.idnic.net/repo/68466889-c1ef-4410-ad9c-306c09e1be06/0/8CD86E34E1A21BE873B7ADCC8D2AE7171EA3D96D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8CD86E34E1A21BE873B7ADCC8D2AE7171EA3D96D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 15:47:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:2e:4c:4a:b6:3b:d2:a7:26:ed:e6:d9:d4:84:97:ad:17:dc:98:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8CD86E34E1A21BE873B7ADCC8D2AE7171EA3D96D Validity Not Before: Jul 23 14:17:32 2026 GMT Not After : Jul 24 15:47:32 2026 GMT Subject: CN=B075BBA986EB4B4711D484078E1DE6C444449D10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:fd:a5:37:01:cc:3f:9e:bd:cb:57:b3:08:9c: 6d:fe:02:4c:f7:8b:f5:51:34:8d:c0:39:ba:ed:f0: 29:cd:89:74:6e:09:4d:7c:6c:f8:bb:64:27:5a:70: 48:9d:cd:ad:bf:af:99:70:be:a5:fc:e5:1e:0c:bc: 97:e5:3e:fe:3e:fd:bf:3c:89:9f:08:63:a0:91:2d: c2:eb:be:ed:24:5f:f8:4e:59:27:5a:70:5c:d1:84: 1f:45:85:2e:63:1e:11:65:20:1d:54:00:72:a8:69: da:b6:02:cf:f6:f7:52:0e:a1:3e:62:a0:cb:8e:07: 56:75:a1:bc:ec:24:60:83:6c:a7:9c:85:58:20:b4: d5:e9:a0:d3:f9:e9:6f:00:25:21:4e:d8:2e:5a:d1: 38:32:49:6d:8a:22:7b:6c:fe:9e:ca:38:da:74:0e: 2d:0f:01:fc:5f:c7:87:cb:93:a5:15:6e:f3:f7:93: cf:36:27:1d:7e:4a:b8:13:3e:da:f8:43:a8:cd:63: 74:07:f2:c9:0f:a7:96:d3:cb:9d:25:80:d6:d1:80: f1:12:fe:9b:36:13:82:08:53:b2:a0:f5:25:41:77: 64:8c:4a:17:fe:39:a3:d7:0e:e4:a3:2d:70:fd:b3: 88:d9:26:68:1a:4a:00:1e:cc:da:97:24:17:32:64: c6:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:75:BB:A9:86:EB:4B:47:11:D4:84:07:8E:1D:E6:C4:44:44:9D:10 X509v3 Authority Key Identifier: keyid:8C:D8:6E:34:E1:A2:1B:E8:73:B7:AD:CC:8D:2A:E7:17:1E:A3:D9:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/68466889-c1ef-4410-ad9c-306c09e1be06/0/8CD86E34E1A21BE873B7ADCC8D2AE7171EA3D96D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8CD86E34E1A21BE873B7ADCC8D2AE7171EA3D96D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/68466889-c1ef-4410-ad9c-306c09e1be06/0/8CD86E34E1A21BE873B7ADCC8D2AE7171EA3D96D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:9c:6e:51:5f:b3:87:42:2b:fc:2c:f9:68:9a:24:25:57:2f: 99:b5:d3:68:21:d8:f1:7d:09:4d:78:b9:5f:d2:08:33:2f:41: 43:20:91:4b:39:dc:67:6d:a9:2e:a4:be:8c:91:f0:1f:98:82: b4:a0:24:49:37:33:34:f3:3b:e6:4a:fe:e4:a8:a8:b9:bb:81: 8d:b4:59:87:a7:3d:29:e7:d8:85:54:d4:18:c9:5c:5b:48:a2: 97:96:9a:70:7d:96:9d:c5:c6:9f:25:39:0a:8b:7a:80:72:09: 3f:f9:07:ed:21:72:31:e8:76:07:db:a1:6a:66:da:80:c7:f9: 41:49:a0:5a:d6:2d:04:e9:d5:67:9f:87:36:5d:a2:15:bc:dc: 0f:94:07:57:92:fa:db:c5:91:ee:e3:01:e7:f2:8b:4c:83:c3: 85:a1:ad:a4:3d:7b:36:62:03:bf:54:b5:99:0d:59:9c:54:40: ae:e7:23:41:c4:30:60:17:42:b3:a0:eb:af:f0:55:53:3e:ff: 4d:c0:7a:11:33:ea:1b:6b:94:e2:03:cc:7e:18:83:ee:32:78: e5:1a:cf:ac:95:cb:f3:72:8f:0c:38:70:86:9e:c5:5a:03:52: 41:71:d1:25:fb:38:6b:d0:35:14:0e:08:97:1a:9a:24:d2:fb: ff:25:c2:a1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNi5MSrY70qcm7ebZ1ISXrRfcmNswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOENEODZFMzRFMUEyMUJFODczQjdBRENDOEQyQUU3MTcx RUEzRDk2RDAeFw0yNjA3MjMxNDE3MzJaFw0yNjA3MjQxNTQ3MzJaMDMxMTAvBgNV BAMTKEIwNzVCQkE5ODZFQjRCNDcxMUQ0ODQwNzhFMURFNkM0NDQ0NDlEMTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDl/aU3Acw/nr3LV7MInG3+Akz3 i/VRNI3AObrt8CnNiXRuCU18bPi7ZCdacEidza2/r5lwvqX85R4MvJflPv4+/b88 iZ8IY6CRLcLrvu0kX/hOWSdacFzRhB9FhS5jHhFlIB1UAHKoadq2As/291IOoT5i oMuOB1Z1obzsJGCDbKechVggtNXpoNP56W8AJSFO2C5a0TgySW2KInts/p7KONp0 Di0PAfxfx4fLk6UVbvP3k882Jx1+SrgTPtr4Q6jNY3QH8skPp5bTy50lgNbRgPES /ps2E4IIU7Kg9SVBd2SMShf+OaPXDuSjLXD9s4jZJmgaSgAezNqXJBcyZMZzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsHW7qYbrS0cR1IQHjh3mxEREnRAwHwYDVR0j BBgwFoAUjNhuNOGiG+hzt63MjSrnFx6j2W0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Njg0NjY4ODktYzFlZi00NDEwLWFkOWMtMzA2YzA5ZTFiZTA2LzAvOENEODZFMzRF MUEyMUJFODczQjdBRENDOEQyQUU3MTcxRUEzRDk2RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84Q0Q4NkUzNEUxQTIxQkU4NzNCN0FEQ0M4RDJBRTcxNzFFQTNE OTZELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjg0NjY4ODktYzFlZi00NDEwLWFk OWMtMzA2YzA5ZTFiZTA2LzAvOENEODZFMzRFMUEyMUJFODczQjdBRENDOEQyQUU3 MTcxRUEzRDk2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAacblFfs4dCK/ws+WiaJCVXL5m102gh2PF9 CU14uV/SCDMvQUMgkUs53GdtqS6kvoyR8B+YgrSgJEk3MzTzO+ZK/uSoqLm7gY20 WYenPSnn2IVU1BjJXFtIopeWmnB9lp3Fxp8lOQqLeoByCT/5B+0hcjHodgfboWpm 2oDH+UFJoFrWLQTp1WefhzZdohW83A+UB1eS+tvFke7jAefyi0yDw4WhraQ9ezZi A79UtZkNWZxUQK7nI0HEMGAXQrOg66/wVVM+/03AehEz6htrlOIDzH4Yg+4yeOUa z6yVy/Nyjww4cIaexVoDUkFx0SX7OGvQNRQOCJcamiTS+/8lwqE= -----END CERTIFICATE-----Generated at Fri Jul 24 06:28:22 2026 by rpki-client