$ rpki-client -vvf rpki-rsync.idnic.net/repo/6aad6a3f-6ca0-4669-98f7-6f34837faa62/0/A008821941A61F29770FC73A584B71178BCAE916.mft File: A008821941A61F29770FC73A584B71178BCAE916.mft (raw, json) Hash identifier: EhqbqQ67WlV+a7fCSemEcey+6DCdRKJAxYDf0WojrI4= Subject key identifier: A8:A4:EC:A9:98:65:5E:3B:0D:85:4D:E8:97:7F:E0:0C:1A:1B:0C:51 Authority key identifier: A0:08:82:19:41:A6:1F:29:77:0F:C7:3A:58:4B:71:17:8B:CA:E9:16 Certificate issuer: /CN=A008821941A61F29770FC73A584B71178BCAE916 Certificate serial: 3DD98B7C7BB316A749EDD5E2146040EB19A67B63 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A008821941A61F29770FC73A584B71178BCAE916.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6aad6a3f-6ca0-4669-98f7-6f34837faa62/0/A008821941A61F29770FC73A584B71178BCAE916.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 11:49:33 +0000 Manifest this update: Thu 23 Jul 2026 11:44:33 +0000 Manifest next update: Fri 24 Jul 2026 15:15:33 +0000 Files and hashes: 1: 3130332e3232302e32332e302f32342d3234203d3e20313431363037.roa (hash: MEn9rSCA+X2qT8GUKSJ4R7eRC44YahAnX3SQmIywZAg=) 2: A008821941A61F29770FC73A584B71178BCAE916.crl (hash: U+Ui81eUuv/KfqGjb1D3ONjFoXJKm2WOaLXEEFFK2bs=) 3: 3130332e3232302e32322e302f32342d3234203d3e20313431363037.roa (hash: IsFb+2IB3+NAOmMQ4bANX3K12nM98beEkYNtdgmBcMk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6aad6a3f-6ca0-4669-98f7-6f34837faa62/0/A008821941A61F29770FC73A584B71178BCAE916.crl rsync://rpki-rsync.idnic.net/repo/6aad6a3f-6ca0-4669-98f7-6f34837faa62/0/A008821941A61F29770FC73A584B71178BCAE916.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A008821941A61F29770FC73A584B71178BCAE916.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 15:15:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:d9:8b:7c:7b:b3:16:a7:49:ed:d5:e2:14:60:40:eb:19:a6:7b:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A008821941A61F29770FC73A584B71178BCAE916 Validity Not Before: Jul 23 11:44:33 2026 GMT Not After : Jul 24 15:15:33 2026 GMT Subject: CN=A8A4ECA998655E3B0D854DE8977FE00C1A1B0C51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:b5:8f:39:07:10:56:13:57:39:43:3f:57:a7: c4:0e:87:13:f0:67:84:84:c1:0e:04:19:a8:41:3d: b4:13:72:9d:1f:91:ed:95:ba:a6:ac:b2:ff:a0:fd: e7:5e:16:32:a1:46:6b:bf:9b:f4:c6:f0:df:4b:45: 30:6d:02:bc:bb:65:30:f2:b6:74:f5:3e:cf:45:75: 23:40:18:3f:1f:e8:ed:3c:92:67:4b:a1:3e:8a:35: 27:d5:39:0c:6d:c5:15:f4:dd:a8:63:ba:58:38:28: 79:42:40:9d:dd:eb:ae:91:df:6f:07:29:8d:f1:80: e5:21:8f:2e:6d:4c:a6:01:0c:cf:da:59:f1:71:f0: db:cc:3f:bc:85:f6:71:74:02:35:49:db:2e:3f:89: 2c:47:85:e5:05:4f:b7:00:93:2c:3e:87:bc:4e:fa: 25:a5:ff:6d:57:37:39:46:ce:8e:0b:b6:06:1b:9e: 91:3b:28:fb:91:5b:2b:2f:2e:99:1d:f1:eb:65:72: 06:68:8b:79:6a:1d:5e:17:34:4a:8a:29:48:f2:ad: 47:21:0a:5c:00:81:aa:e2:d5:2e:a0:e2:88:0d:a0: 7d:e5:4f:d5:e9:25:fe:f7:86:fb:cf:36:eb:7b:0b: 46:84:82:5b:82:0b:e8:fc:ad:1a:43:25:9b:8a:a3: b3:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:A4:EC:A9:98:65:5E:3B:0D:85:4D:E8:97:7F:E0:0C:1A:1B:0C:51 X509v3 Authority Key Identifier: keyid:A0:08:82:19:41:A6:1F:29:77:0F:C7:3A:58:4B:71:17:8B:CA:E9:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6aad6a3f-6ca0-4669-98f7-6f34837faa62/0/A008821941A61F29770FC73A584B71178BCAE916.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A008821941A61F29770FC73A584B71178BCAE916.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6aad6a3f-6ca0-4669-98f7-6f34837faa62/0/A008821941A61F29770FC73A584B71178BCAE916.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:4c:12:62:fa:e0:26:50:00:69:2e:47:3c:e2:77:60:3c:f4: b4:e3:e7:ab:93:d4:f2:03:47:ae:5e:75:c4:ac:2a:bd:d9:51: f5:33:61:32:5d:9e:78:6d:61:b7:4d:b3:0e:2e:c8:ee:81:a6: 0f:b9:99:1c:20:9d:d9:41:e0:29:f4:ca:c7:57:ed:63:f8:57: 5e:77:56:ab:93:f2:1c:d3:14:3b:45:14:ab:9a:a3:1a:c5:aa: 37:70:e7:1e:80:2a:e5:c9:c1:9e:21:66:90:33:a1:f9:97:e2: 33:4c:3d:c0:ac:c9:f1:10:26:20:be:81:24:23:82:16:e8:18: 27:56:27:62:7b:de:ac:b6:ea:d7:f6:9b:c1:20:bb:a6:c8:4a: 7a:08:49:a1:9f:e0:55:74:bd:af:20:01:f9:d7:ba:24:e5:b2: 9c:17:3b:3e:9f:e6:f1:61:4a:04:e7:5f:51:b8:2a:23:63:38: 81:5d:31:5a:13:4e:fe:94:0a:ce:c3:b0:8b:25:8e:0a:cd:04: 9b:d2:02:02:a9:7c:00:18:19:58:55:09:60:c0:a6:b2:23:a0: 0c:c6:17:c9:92:83:be:c8:11:75:fc:f4:bb:36:d2:c9:94:75: 70:6a:50:5f:33:6e:1a:0f:69:de:6e:5d:0f:6c:d9:29:d3:56: 05:40:2b:46 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPdmLfHuzFqdJ7dXiFGBA6xmme2MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTAwODgyMTk0MUE2MUYyOTc3MEZDNzNBNTg0QjcxMTc4 QkNBRTkxNjAeFw0yNjA3MjMxMTQ0MzNaFw0yNjA3MjQxNTE1MzNaMDMxMTAvBgNV BAMTKEE4QTRFQ0E5OTg2NTVFM0IwRDg1NERFODk3N0ZFMDBDMUExQjBDNTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdtY85BxBWE1c5Qz9Xp8QOhxPw Z4SEwQ4EGahBPbQTcp0fke2Vuqassv+g/edeFjKhRmu/m/TG8N9LRTBtAry7ZTDy tnT1Ps9FdSNAGD8f6O08kmdLoT6KNSfVOQxtxRX03ahjulg4KHlCQJ3d666R328H KY3xgOUhjy5tTKYBDM/aWfFx8NvMP7yF9nF0AjVJ2y4/iSxHheUFT7cAkyw+h7xO +iWl/21XNzlGzo4LtgYbnpE7KPuRWysvLpkd8etlcgZoi3lqHV4XNEqKKUjyrUch ClwAgari1S6g4ogNoH3lT9XpJf73hvvPNut7C0aEgluCC+j8rRpDJZuKo7PvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqKTsqZhlXjsNhU3ol3/gDBobDFEwHwYDVR0j BBgwFoAUoAiCGUGmHyl3D8c6WEtxF4vK6RYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmFhZDZhM2YtNmNhMC00NjY5LTk4ZjctNmYzNDgzN2ZhYTYyLzAvQTAwODgyMTk0 MUE2MUYyOTc3MEZDNzNBNTg0QjcxMTc4QkNBRTkxNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BMDA4ODIxOTQxQTYxRjI5NzcwRkM3M0E1ODRCNzExNzhCQ0FF OTE2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmFhZDZhM2YtNmNhMC00NjY5LTk4 ZjctNmYzNDgzN2ZhYTYyLzAvQTAwODgyMTk0MUE2MUYyOTc3MEZDNzNBNTg0Qjcx MTc4QkNBRTkxNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABlMEmL64CZQAGkuRzzid2A89LTj56uT1PID R65edcSsKr3ZUfUzYTJdnnhtYbdNsw4uyO6Bpg+5mRwgndlB4Cn0ysdX7WP4V153 VquT8hzTFDtFFKuaoxrFqjdw5x6AKuXJwZ4hZpAzofmX4jNMPcCsyfEQJiC+gSQj ghboGCdWJ2J73qy26tf2m8Egu6bISnoISaGf4FV0va8gAfnXuiTlspwXOz6f5vFh SgTnX1G4KiNjOIFdMVoTTv6UCs7DsIsljgrNBJvSAgKpfAAYGVhVCWDAprIjoAzG F8mSg77IEXX89Ls20smUdXBqUF8zbhoPad5uXQ9s2SnTVgVAK0Y= -----END CERTIFICATE-----Generated at Fri Jul 24 05:59:33 2026 by rpki-client