$ rpki-client -vvf rpki-rsync.idnic.net/repo/86f4d4f1-b36c-4a46-8844-4e6c7a3c97d9/0/A8D211A540A0A57C5D6ACB5032091B1A80BA458A.mft File: A8D211A540A0A57C5D6ACB5032091B1A80BA458A.mft (raw, json) Hash identifier: y2XxuXdH5hy2o9hkfKLqNez8oUB0UzWANQ0GHUkCluo= Subject key identifier: 3B:AE:93:E4:84:7B:18:5A:EF:65:BE:EC:CF:B7:EE:02:0F:61:EF:39 Authority key identifier: A8:D2:11:A5:40:A0:A5:7C:5D:6A:CB:50:32:09:1B:1A:80:BA:45:8A Certificate issuer: /CN=A8D211A540A0A57C5D6ACB5032091B1A80BA458A Certificate serial: 0894AECB2CB2F256AA391E6A340A28DAA3AA24BE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A8D211A540A0A57C5D6ACB5032091B1A80BA458A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/86f4d4f1-b36c-4a46-8844-4e6c7a3c97d9/0/A8D211A540A0A57C5D6ACB5032091B1A80BA458A.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 19:08:32 +0000 Manifest this update: Thu 23 Jul 2026 19:03:32 +0000 Manifest next update: Fri 24 Jul 2026 22:40:32 +0000 Files and hashes: 1: A8D211A540A0A57C5D6ACB5032091B1A80BA458A.crl (hash: nGO4i5LTdTINxOaPT+Jp7N023AnfvC74UW9r+kqv6jE=) 2: 3130332e37302e31362e302f32322d3232203d3e20313335343632.roa (hash: Tf1EVsRaCkdXitEPeo2GAGcjlLdYQ1D5kk2M9WCpy3U=) 3: 3130332e37302e31372e302f32342d3234203d3e20313335343632.roa (hash: lI29Pn9PS61mVywxJrefD11DZjjtEbyEF7MkqWi1LZ4=) 4: 3130332e37302e31362e302f32342d3234203d3e20313335343632.roa (hash: SJ+P4+oX8hijYzZ9qA/WaUDV4gideRVgm7o6icDoWoM=) 5: 3130332e37302e31392e302f32342d3234203d3e20313335343632.roa (hash: 7evCo+jZlUXwDGTBsCsQhDg2DWHBDqS4cWsJw91trY0=) 6: 3130332e37302e31382e302f32342d3234203d3e20313335343632.roa (hash: m9ehKEyZKrnBxPUxglJU8vra1GpJJTUpkzpv7UpDmeA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/86f4d4f1-b36c-4a46-8844-4e6c7a3c97d9/0/A8D211A540A0A57C5D6ACB5032091B1A80BA458A.crl rsync://rpki-rsync.idnic.net/repo/86f4d4f1-b36c-4a46-8844-4e6c7a3c97d9/0/A8D211A540A0A57C5D6ACB5032091B1A80BA458A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A8D211A540A0A57C5D6ACB5032091B1A80BA458A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 22:40:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:94:ae:cb:2c:b2:f2:56:aa:39:1e:6a:34:0a:28:da:a3:aa:24:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A8D211A540A0A57C5D6ACB5032091B1A80BA458A Validity Not Before: Jul 23 19:03:32 2026 GMT Not After : Jul 24 22:40:32 2026 GMT Subject: CN=3BAE93E4847B185AEF65BEECCFB7EE020F61EF39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:96:00:9b:9c:2d:35:eb:33:46:96:97:a4:8d: 2e:cf:c8:6e:9b:95:ca:f4:9e:6b:4b:c4:13:d4:70: 92:df:7d:f7:69:49:d4:22:2c:74:23:4f:2b:55:4c: 06:04:ac:22:c4:25:78:c5:7d:3e:18:86:8c:48:45: e0:47:48:a2:d1:65:3a:12:26:73:68:e6:3f:5f:70: ee:1b:fe:af:ab:6b:bb:e5:b5:81:c1:a6:7f:d0:bf: c0:35:cb:d2:a5:63:b5:15:ca:1f:ec:a4:25:0d:72: 4a:7b:ae:e8:70:63:0b:91:a5:e5:f0:7e:83:f9:06: 07:b4:da:57:41:fb:03:6e:ce:be:e8:14:f5:8a:27: 7a:ff:4f:a0:1b:9a:44:1d:20:23:cf:bd:b5:2f:fd: 73:b8:60:1a:e5:b9:42:30:e2:8c:44:57:59:ea:8b: 77:94:6d:3b:4e:44:78:61:72:4a:2f:82:58:23:df: 9f:18:1f:3c:40:06:4e:fd:4b:21:c4:dc:9a:fb:de: 3a:8f:16:cf:ed:22:f2:7c:bd:8d:73:2c:b0:32:8f: 94:82:0f:d8:e3:92:5d:67:39:20:f5:b4:71:bf:29: f4:54:3e:a9:bc:37:2d:11:8f:d2:7d:5f:92:56:e8: c4:3f:4b:a9:ff:8b:58:52:d6:34:09:3e:14:d0:fa: e5:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:AE:93:E4:84:7B:18:5A:EF:65:BE:EC:CF:B7:EE:02:0F:61:EF:39 X509v3 Authority Key Identifier: keyid:A8:D2:11:A5:40:A0:A5:7C:5D:6A:CB:50:32:09:1B:1A:80:BA:45:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/86f4d4f1-b36c-4a46-8844-4e6c7a3c97d9/0/A8D211A540A0A57C5D6ACB5032091B1A80BA458A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A8D211A540A0A57C5D6ACB5032091B1A80BA458A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/86f4d4f1-b36c-4a46-8844-4e6c7a3c97d9/0/A8D211A540A0A57C5D6ACB5032091B1A80BA458A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:59:94:af:a9:79:5d:b4:ad:26:5e:c0:dc:be:4a:c7:4c:e2: 29:a7:b1:f9:0c:a6:98:ab:e6:c0:0c:4d:6e:3a:56:92:fc:86: 81:9d:d5:88:87:a3:f8:5c:5c:84:65:e7:8a:5b:d3:fb:25:4e: 67:79:7b:64:13:3f:fa:8c:18:95:2b:c0:f8:1c:a1:33:33:56: 5a:72:78:10:fe:cd:80:3f:2f:82:42:fc:13:a5:47:9c:23:d6: df:6c:b9:ad:93:04:31:e9:89:e6:df:21:1e:ee:c7:6c:02:aa: 27:6a:47:27:eb:23:3a:f6:5d:1b:1d:bd:b7:07:03:aa:09:68: 54:fb:5c:bc:8d:03:e8:38:6a:69:1a:6e:d3:bd:6f:d4:b0:96: f7:f7:0e:e6:ba:83:47:40:11:b9:f1:14:7e:b9:38:68:58:db: 96:12:f6:6c:08:47:de:3a:ae:c6:71:e8:27:5d:2e:a9:31:0f: 04:55:a3:d1:2b:49:a3:14:98:21:7f:2c:23:a5:6a:6f:c2:fd: e3:12:71:85:58:4c:48:ad:e9:b5:89:1a:89:d5:e2:57:99:f6: 11:be:0a:c8:7f:7e:6d:62:43:29:d2:76:06:ef:23:9c:19:6f: 8c:3c:e2:0b:38:0d:5b:56:5a:87:52:53:57:4b:7f:14:da:22: cd:36:42:0e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCJSuyyyy8laqOR5qNAoo2qOqJL4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQThEMjExQTU0MEEwQTU3QzVENkFDQjUwMzIwOTFCMUE4 MEJBNDU4QTAeFw0yNjA3MjMxOTAzMzJaFw0yNjA3MjQyMjQwMzJaMDMxMTAvBgNV BAMTKDNCQUU5M0U0ODQ3QjE4NUFFRjY1QkVFQ0NGQjdFRTAyMEY2MUVGMzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXlgCbnC016zNGlpekjS7PyG6b lcr0nmtLxBPUcJLfffdpSdQiLHQjTytVTAYErCLEJXjFfT4YhoxIReBHSKLRZToS JnNo5j9fcO4b/q+ra7vltYHBpn/Qv8A1y9KlY7UVyh/spCUNckp7ruhwYwuRpeXw foP5Bge02ldB+wNuzr7oFPWKJ3r/T6AbmkQdICPPvbUv/XO4YBrluUIw4oxEV1nq i3eUbTtORHhhckovglgj358YHzxABk79SyHE3Jr73jqPFs/tIvJ8vY1zLLAyj5SC D9jjkl1nOSD1tHG/KfRUPqm8Ny0Rj9J9X5JW6MQ/S6n/i1hS1jQJPhTQ+uWlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUO66T5IR7GFrvZb7sz7fuAg9h7zkwHwYDVR0j BBgwFoAUqNIRpUCgpXxdastQMgkbGoC6RYowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODZmNGQ0ZjEtYjM2Yy00YTQ2LTg4NDQtNGU2YzdhM2M5N2Q5LzAvQThEMjExQTU0 MEEwQTU3QzVENkFDQjUwMzIwOTFCMUE4MEJBNDU4QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BOEQyMTFBNTQwQTBBNTdDNUQ2QUNCNTAzMjA5MUIxQTgwQkE0 NThBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODZmNGQ0ZjEtYjM2Yy00YTQ2LTg4 NDQtNGU2YzdhM2M5N2Q5LzAvQThEMjExQTU0MEEwQTU3QzVENkFDQjUwMzIwOTFC MUE4MEJBNDU4QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGRZlK+peV20rSZewNy+SsdM4imnsfkMppir 5sAMTW46VpL8hoGd1YiHo/hcXIRl54pb0/slTmd5e2QTP/qMGJUrwPgcoTMzVlpy eBD+zYA/L4JC/BOlR5wj1t9sua2TBDHpiebfIR7ux2wCqidqRyfrIzr2XRsdvbcH A6oJaFT7XLyNA+g4amkabtO9b9Swlvf3Dua6g0dAEbnxFH65OGhY25YS9mwIR946 rsZx6CddLqkxDwRVo9ErSaMUmCF/LCOlam/C/eMScYVYTEit6bWJGonV4leZ9hG+ Csh/fm1iQynSdgbvI5wZb4w84gs4DVtWWodSU1dLfxTaIs02Qg4= -----END CERTIFICATE-----Generated at Fri Jul 24 04:17:27 2026 by rpki-client