$ rpki-client -vvf rpki-rsync.idnic.net/repo/89a40089-6041-45ed-8e44-a997c8acf480/0/8B0CF87F2349FC8787EF52E3B0AD80E141E2BE1C.mft File: 8B0CF87F2349FC8787EF52E3B0AD80E141E2BE1C.mft (raw, json) Hash identifier: U5iZxM2SNHcfqZDc4nNao6y13jqkZA8jB06QKMwyc5g= Subject key identifier: 39:2C:32:3C:8A:CC:E1:B8:35:13:C2:C0:A3:59:5E:01:A8:A4:7F:F0 Authority key identifier: 8B:0C:F8:7F:23:49:FC:87:87:EF:52:E3:B0:AD:80:E1:41:E2:BE:1C Certificate issuer: /CN=8B0CF87F2349FC8787EF52E3B0AD80E141E2BE1C Certificate serial: 5EB399D59DDF40AE412F5186E7D8CD54B1C584AB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8B0CF87F2349FC8787EF52E3B0AD80E141E2BE1C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/89a40089-6041-45ed-8e44-a997c8acf480/0/8B0CF87F2349FC8787EF52E3B0AD80E141E2BE1C.mft Manifest number: 6F Signing time: Fri 24 Jul 2026 02:22:12 +0000 Manifest this update: Fri 24 Jul 2026 02:17:12 +0000 Manifest next update: Sat 25 Jul 2026 02:50:12 +0000 Files and hashes: 1: 3130332e3132362e3233322e302f32342d3234203d3e20313530393738.roa (hash: A0fye72fVewvJEctRltf+2Pc+fB290Pn79WveiWFgaQ=) 2: 8B0CF87F2349FC8787EF52E3B0AD80E141E2BE1C.crl (hash: DAsNq78VMNs6xD7zP++jVNkMb+xpL099Jk70GpByvZ8=) 3: 3130332e3132362e3233322e302f32332d3233203d3e20313530393738.roa (hash: 8luvuUZe/inH3n4D6OyQwwD6mGHctkX0bejCwUaYOvA=) 4: 3130332e3132362e3233332e302f32342d3234203d3e20313530393738.roa (hash: feHp+VgvlrJlDWnbvgKdK3q5FY7GJ/3YIOlQqsX2zUs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/89a40089-6041-45ed-8e44-a997c8acf480/0/8B0CF87F2349FC8787EF52E3B0AD80E141E2BE1C.crl rsync://rpki-rsync.idnic.net/repo/89a40089-6041-45ed-8e44-a997c8acf480/0/8B0CF87F2349FC8787EF52E3B0AD80E141E2BE1C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8B0CF87F2349FC8787EF52E3B0AD80E141E2BE1C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 02:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:b3:99:d5:9d:df:40:ae:41:2f:51:86:e7:d8:cd:54:b1:c5:84:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B0CF87F2349FC8787EF52E3B0AD80E141E2BE1C Validity Not Before: Jul 24 02:17:12 2026 GMT Not After : Jul 25 02:50:12 2026 GMT Subject: CN=392C323C8ACCE1B83513C2C0A3595E01A8A47FF0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:7b:02:12:76:95:94:8b:d7:9d:cc:67:0c:be: 0a:d5:6d:75:1d:f5:56:d2:6e:f7:a8:3d:a5:66:7b: 5d:44:7c:52:50:6f:f4:61:5d:cc:10:a6:b1:c7:a1: 41:31:0c:89:cd:d4:0e:bb:09:65:1d:83:f2:fc:bc: 54:66:24:6d:10:3d:1b:7c:ea:f3:58:b6:a7:b3:33: d3:8f:6b:34:30:00:45:af:45:9a:cc:68:f2:05:f1: 2f:49:27:7d:3e:56:e5:3c:91:c6:be:06:6a:bc:74: 1c:15:13:e7:77:5c:a3:26:64:42:0d:6f:8f:a2:37: 11:65:c6:8e:b9:44:31:0e:b4:46:35:a7:f0:3a:60: 8b:8a:94:f2:70:82:ad:b2:36:9a:47:d7:62:f1:1f: c1:26:94:40:72:8e:c3:2b:77:af:27:63:d0:ae:37: eb:32:92:1e:bc:1d:82:93:f7:3b:78:18:11:9b:71: b0:93:33:23:31:f4:18:db:55:8e:e5:ef:33:5e:e5: 8a:d2:90:26:9a:a4:87:10:0e:20:29:1b:4b:2e:d1: 45:23:e4:ba:8c:d8:33:f1:cf:75:74:bc:48:6c:ba: 26:df:db:0c:49:b6:6d:06:ac:81:b9:9c:da:e0:b8: 46:c9:9a:77:d2:89:51:80:77:36:91:11:4a:58:71: 6d:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:2C:32:3C:8A:CC:E1:B8:35:13:C2:C0:A3:59:5E:01:A8:A4:7F:F0 X509v3 Authority Key Identifier: keyid:8B:0C:F8:7F:23:49:FC:87:87:EF:52:E3:B0:AD:80:E1:41:E2:BE:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/89a40089-6041-45ed-8e44-a997c8acf480/0/8B0CF87F2349FC8787EF52E3B0AD80E141E2BE1C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8B0CF87F2349FC8787EF52E3B0AD80E141E2BE1C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/89a40089-6041-45ed-8e44-a997c8acf480/0/8B0CF87F2349FC8787EF52E3B0AD80E141E2BE1C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:08:27:20:3e:7d:cb:04:8e:2b:3a:5b:a0:c3:f8:4f:07:0a: d6:fd:18:a9:75:e8:a3:06:09:1f:9e:1c:33:91:d7:60:39:27: 05:c4:16:f2:6b:7f:78:2f:c2:65:ff:bd:39:c1:a9:bd:48:bc: 05:68:6e:d0:6f:9e:d7:3e:f0:6a:74:ed:9d:75:a4:a7:ec:c8: c6:10:f0:25:27:c1:33:bc:bd:df:15:44:84:7f:2f:eb:7e:b7: 43:75:71:21:51:3c:ec:5a:84:ba:a9:2b:dc:c9:a5:44:7b:f3: 65:14:30:82:d6:e2:f0:9f:2d:ef:5e:c6:27:5a:44:d1:72:f2: 35:1c:c1:42:d5:e5:89:50:8e:77:0a:a9:d3:63:9b:cc:9a:f6: e3:87:73:2f:dc:5a:f0:f3:0d:4e:98:5c:ac:f1:9d:c8:bf:63: 4f:c8:a5:db:c3:41:e8:4f:1c:60:d7:e9:c8:8a:bb:ee:05:84: 14:f3:61:92:db:11:7f:61:0e:a3:e4:35:86:cc:04:d5:6a:9d: e0:84:fe:57:56:a7:40:7e:a0:43:4a:14:98:55:16:52:52:f3: 4f:e6:f4:28:ac:e9:43:50:ec:3e:32:02:72:5c:69:65:47:75: 47:70:90:0b:c1:44:74:bf:d2:ba:d8:b7:64:ed:aa:3b:0b:3b: e9:d4:f5:91 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXrOZ1Z3fQK5BL1GG59jNVLHFhKswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEIwQ0Y4N0YyMzQ5RkM4Nzg3RUY1MkUzQjBBRDgwRTE0 MUUyQkUxQzAeFw0yNjA3MjQwMjE3MTJaFw0yNjA3MjUwMjUwMTJaMDMxMTAvBgNV BAMTKDM5MkMzMjNDOEFDQ0UxQjgzNTEzQzJDMEEzNTk1RTAxQThBNDdGRjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKewISdpWUi9edzGcMvgrVbXUd 9VbSbveoPaVme11EfFJQb/RhXcwQprHHoUExDInN1A67CWUdg/L8vFRmJG0QPRt8 6vNYtqezM9OPazQwAEWvRZrMaPIF8S9JJ30+VuU8kca+Bmq8dBwVE+d3XKMmZEIN b4+iNxFlxo65RDEOtEY1p/A6YIuKlPJwgq2yNppH12LxH8EmlEByjsMrd68nY9Cu N+sykh68HYKT9zt4GBGbcbCTMyMx9BjbVY7l7zNe5YrSkCaapIcQDiApG0su0UUj 5LqM2DPxz3V0vEhsuibf2wxJtm0GrIG5nNrguEbJmnfSiVGAdzaREUpYcW0bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOSwyPIrM4bg1E8LAo1leAaikf/AwHwYDVR0j BBgwFoAUiwz4fyNJ/IeH71LjsK2A4UHivhwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODlhNDAwODktNjA0MS00NWVkLThlNDQtYTk5N2M4YWNmNDgwLzAvOEIwQ0Y4N0Yy MzQ5RkM4Nzg3RUY1MkUzQjBBRDgwRTE0MUUyQkUxQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84QjBDRjg3RjIzNDlGQzg3ODdFRjUyRTNCMEFEODBFMTQxRTJC RTFDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODlhNDAwODktNjA0MS00NWVkLThl NDQtYTk5N2M4YWNmNDgwLzAvOEIwQ0Y4N0YyMzQ5RkM4Nzg3RUY1MkUzQjBBRDgw RTE0MUUyQkUxQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE0IJyA+fcsEjis6W6DD+E8HCtb9GKl16KMG CR+eHDOR12A5JwXEFvJrf3gvwmX/vTnBqb1IvAVobtBvntc+8Gp07Z11pKfsyMYQ 8CUnwTO8vd8VRIR/L+t+t0N1cSFRPOxahLqpK9zJpUR782UUMILW4vCfLe9exida RNFy8jUcwULV5YlQjncKqdNjm8ya9uOHcy/cWvDzDU6YXKzxnci/Y0/IpdvDQehP HGDX6ciKu+4FhBTzYZLbEX9hDqPkNYbMBNVqneCE/ldWp0B+oENKFJhVFlJS80/m 9Cis6UNQ7D4yAnJcaWVHdUdwkAvBRHS/0rrYt2TtqjsLO+nU9ZE= -----END CERTIFICATE-----Generated at Fri Jul 24 05:25:07 2026 by rpki-client