$ rpki-client -vvf rpki-rsync.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/C8A277B3DEC8C0F0AA4C1FA542E819366C4EDC32.mft File: C8A277B3DEC8C0F0AA4C1FA542E819366C4EDC32.mft (raw, json) Hash identifier: 410zs9Q69dFah87G7MoawG8duAaFVYQPRuYLtkNWouI= Subject key identifier: 7A:3C:58:CD:3E:99:25:B3:31:E5:50:31:45:22:F4:B0:29:C6:5E:E2 Authority key identifier: C8:A2:77:B3:DE:C8:C0:F0:AA:4C:1F:A5:42:E8:19:36:6C:4E:DC:32 Certificate issuer: /CN=C8A277B3DEC8C0F0AA4C1FA542E819366C4EDC32 Certificate serial: 1EA6DD2578325435C1AE50763226A2B6FA0B9943 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C8A277B3DEC8C0F0AA4C1FA542E819366C4EDC32.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/C8A277B3DEC8C0F0AA4C1FA542E819366C4EDC32.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 12:35:26 +0000 Manifest this update: Thu 23 Jul 2026 12:30:26 +0000 Manifest next update: Fri 24 Jul 2026 15:51:26 +0000 Files and hashes: 1: 3130332e3232342e37362e302f32342d3234203d3e203536323535.roa (hash: qW0AGce8XtjjXQ3Aq1xPuwzcIhd6zyH7ybAi9hoWtzA=) 2: C8A277B3DEC8C0F0AA4C1FA542E819366C4EDC32.crl (hash: ONKvpE4bdv77MnsQE39bMKCUQ8y2MwQxMJXg2I5AeSw=) 3: 3130332e3232342e37372e302f32342d3234203d3e203536323535.roa (hash: W+SevG4xTFDq1sgkDkONqUQc3ucQK2u8ntiRI2DImrc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/C8A277B3DEC8C0F0AA4C1FA542E819366C4EDC32.crl rsync://rpki-rsync.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/C8A277B3DEC8C0F0AA4C1FA542E819366C4EDC32.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C8A277B3DEC8C0F0AA4C1FA542E819366C4EDC32.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 15:51:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:a6:dd:25:78:32:54:35:c1:ae:50:76:32:26:a2:b6:fa:0b:99:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C8A277B3DEC8C0F0AA4C1FA542E819366C4EDC32 Validity Not Before: Jul 23 12:30:26 2026 GMT Not After : Jul 24 15:51:26 2026 GMT Subject: CN=7A3C58CD3E9925B331E550314522F4B029C65EE2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:f7:d9:ef:11:f3:f4:da:79:11:b6:59:60:13: 7b:ba:41:17:be:74:1d:a7:22:78:1f:b9:7c:c1:07: f1:cd:b3:5a:2c:34:98:b0:cd:7f:7d:c3:b4:e7:68: b4:eb:76:c5:41:85:4c:2a:99:c7:9c:4d:1c:47:cc: f8:c0:4b:07:88:5c:04:d2:77:70:07:d5:44:d0:d2: 0c:32:f7:2d:cb:c5:15:45:0b:44:ab:81:4d:d0:f9: f4:9b:b0:96:66:b5:47:36:9c:15:8a:9b:ad:66:7f: 69:2e:c7:12:27:45:7e:63:5f:c6:a5:ca:45:c1:9f: b8:3e:8d:62:19:66:b3:42:8e:38:9f:57:ca:68:f7: 74:c4:9a:9c:03:18:8b:05:f3:2f:70:05:b4:52:a3: ed:ee:fa:7d:7c:18:cd:d9:f0:ed:77:a3:d0:46:40: e8:5d:f3:64:78:df:75:cd:de:dd:16:c0:c7:6e:31: 7e:5e:bd:94:3d:09:b8:f0:a4:4f:1b:e4:b0:81:1b: b3:a0:24:e9:02:34:70:30:79:50:ac:71:83:bd:8c: b1:4c:69:18:8b:c4:90:a9:9c:b9:b4:ff:94:31:48: 1e:94:d5:0e:d6:2f:30:0f:df:23:2a:1d:6c:2b:de: 11:29:bc:2a:7e:6b:47:31:6f:ab:1e:dc:06:e4:55: a1:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:3C:58:CD:3E:99:25:B3:31:E5:50:31:45:22:F4:B0:29:C6:5E:E2 X509v3 Authority Key Identifier: keyid:C8:A2:77:B3:DE:C8:C0:F0:AA:4C:1F:A5:42:E8:19:36:6C:4E:DC:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/C8A277B3DEC8C0F0AA4C1FA542E819366C4EDC32.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C8A277B3DEC8C0F0AA4C1FA542E819366C4EDC32.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/C8A277B3DEC8C0F0AA4C1FA542E819366C4EDC32.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:88:1d:6a:08:48:4a:4a:e1:00:31:a5:68:77:53:29:cc:01: c1:a0:2e:59:57:d1:3c:d6:17:0c:4f:54:27:f8:b5:50:a4:f2: 42:a3:ee:c1:de:7b:cd:e7:aa:15:d3:5f:f7:8d:9d:09:7f:19: b3:31:45:7d:4d:18:c6:18:d3:90:c8:f6:7d:1a:0e:a7:58:d1: 5c:ad:cb:7f:70:1c:4a:d4:c0:e4:2f:55:e9:38:0a:51:2b:49: 52:90:db:28:90:0a:09:30:8a:2c:2d:ae:41:6f:0e:3d:34:f2: 2b:35:e8:5f:d7:de:0c:c7:e7:91:96:4c:ad:2b:57:c7:fc:be: 27:5c:fa:7f:96:5b:fd:9b:73:cc:ea:f3:15:64:f5:0a:f0:9d: 84:18:f6:dc:a4:96:96:15:5e:d6:ab:a4:7b:3b:fa:65:1c:c2: a7:1a:78:5a:66:f6:9f:8e:08:0e:23:69:64:35:e5:d8:7a:69: 69:50:1a:9f:7e:c3:12:04:35:43:22:bf:e7:04:45:73:d6:da: ab:49:58:78:9f:2a:91:37:08:38:ce:7e:2f:a2:59:25:b5:f0: f2:83:ba:82:42:56:34:3d:f7:13:c1:fd:c3:2f:68:69:34:d8: 82:da:b5:f2:20:9b:b3:8c:40:bf:4f:cf:5e:00:ff:84:57:ea: 0e:40:33:14 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHqbdJXgyVDXBrlB2MiaitvoLmUMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzhBMjc3QjNERUM4QzBGMEFBNEMxRkE1NDJFODE5MzY2 QzRFREMzMjAeFw0yNjA3MjMxMjMwMjZaFw0yNjA3MjQxNTUxMjZaMDMxMTAvBgNV BAMTKDdBM0M1OENEM0U5OTI1QjMzMUU1NTAzMTQ1MjJGNEIwMjlDNjVFRTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCV99nvEfP02nkRtllgE3u6QRe+ dB2nIngfuXzBB/HNs1osNJiwzX99w7TnaLTrdsVBhUwqmcecTRxHzPjASweIXATS d3AH1UTQ0gwy9y3LxRVFC0SrgU3Q+fSbsJZmtUc2nBWKm61mf2kuxxInRX5jX8al ykXBn7g+jWIZZrNCjjifV8po93TEmpwDGIsF8y9wBbRSo+3u+n18GM3Z8O13o9BG QOhd82R433XN3t0WwMduMX5evZQ9CbjwpE8b5LCBG7OgJOkCNHAweVCscYO9jLFM aRiLxJCpnLm0/5QxSB6U1Q7WLzAP3yMqHWwr3hEpvCp+a0cxb6se3AbkVaF5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUejxYzT6ZJbMx5VAxRSL0sCnGXuIwHwYDVR0j BBgwFoAUyKJ3s97IwPCqTB+lQugZNmxO3DIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODIyNmIzZTEtZDdmNi00NjVlLTgzMDItN2Q1MmY1YzM0MGZmLzAvQzhBMjc3QjNE RUM4QzBGMEFBNEMxRkE1NDJFODE5MzY2QzRFREMzMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DOEEyNzdCM0RFQzhDMEYwQUE0QzFGQTU0MkU4MTkzNjZDNEVE QzMyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODIyNmIzZTEtZDdmNi00NjVlLTgz MDItN2Q1MmY1YzM0MGZmLzAvQzhBMjc3QjNERUM4QzBGMEFBNEMxRkE1NDJFODE5 MzY2QzRFREMzMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACqIHWoISEpK4QAxpWh3UynMAcGgLllX0TzW FwxPVCf4tVCk8kKj7sHee83nqhXTX/eNnQl/GbMxRX1NGMYY05DI9n0aDqdY0Vyt y39wHErUwOQvVek4ClErSVKQ2yiQCgkwiiwtrkFvDj008is16F/X3gzH55GWTK0r V8f8vidc+n+WW/2bc8zq8xVk9QrwnYQY9tyklpYVXtarpHs7+mUcwqcaeFpm9p+O CA4jaWQ15dh6aWlQGp9+wxIENUMiv+cERXPW2qtJWHifKpE3CDjOfi+iWSW18PKD uoJCVjQ99xPB/cMvaGk02ILatfIgm7OMQL9Pz14A/4RX6g5AMxQ= -----END CERTIFICATE-----Generated at Fri Jul 24 02:45:19 2026 by rpki-client