$ rpki-client -vvf rpki-rsync.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/E8D1C1B412CB64FE5835083F76A7487CE34452B6.mft File: E8D1C1B412CB64FE5835083F76A7487CE34452B6.mft (raw, json) Hash identifier: PWX3+SxyqSm3vEFG8uJdE/kpiATQXIlA5zjI45MBH7w= Subject key identifier: 05:60:8D:20:69:00:51:BC:D8:61:F5:C5:63:F5:DC:4E:05:69:D5:D8 Authority key identifier: E8:D1:C1:B4:12:CB:64:FE:58:35:08:3F:76:A7:48:7C:E3:44:52:B6 Certificate issuer: /CN=E8D1C1B412CB64FE5835083F76A7487CE34452B6 Certificate serial: 6B3D879F4AB3ABFECFB4AF30D0CB242018DECF4F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E8D1C1B412CB64FE5835083F76A7487CE34452B6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/E8D1C1B412CB64FE5835083F76A7487CE34452B6.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 23:08:02 +0000 Manifest this update: Thu 23 Jul 2026 23:03:02 +0000 Manifest next update: Sat 25 Jul 2026 01:55:02 +0000 Files and hashes: 1: E8D1C1B412CB64FE5835083F76A7487CE34452B6.crl (hash: BzGpU49GfNmKieWOJrm9M2hEZy/y9QnnvJoRqROoVtw=) 2: 3130332e3136332e3138352e302f32342d3234203d3e20313432333636.roa (hash: 7Kp38WdKSSiLKliiaFpY9zvvkr9TIBcqJ58D1X388bM=) 3: 3130332e3136332e3138342e302f32342d3234203d3e20313432333636.roa (hash: /pHfUH1NlBnMVG+9w4rBpFljBqBGm2WJrHAQRZot61U=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/E8D1C1B412CB64FE5835083F76A7487CE34452B6.crl rsync://rpki-rsync.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/E8D1C1B412CB64FE5835083F76A7487CE34452B6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E8D1C1B412CB64FE5835083F76A7487CE34452B6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 01:55:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:3d:87:9f:4a:b3:ab:fe:cf:b4:af:30:d0:cb:24:20:18:de:cf:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E8D1C1B412CB64FE5835083F76A7487CE34452B6 Validity Not Before: Jul 23 23:03:02 2026 GMT Not After : Jul 25 01:55:02 2026 GMT Subject: CN=05608D20690051BCD861F5C563F5DC4E0569D5D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:53:65:06:d3:f9:99:29:0e:b0:5a:86:e8:54: aa:8b:5b:0e:44:44:07:ab:80:4f:57:2e:25:87:ab: e5:dc:4b:b6:10:b9:0e:42:50:00:65:72:39:27:f0: 66:3b:8d:f5:2e:30:75:b4:59:f6:72:ad:1c:ee:88: dc:ff:5c:2b:2b:8e:f7:81:00:2d:ce:c0:6a:df:9b: f0:1c:2b:79:63:ac:5b:4c:2f:38:e3:23:8d:81:0d: 9d:e3:cd:f8:64:65:44:0a:14:77:25:64:5f:eb:53: 66:1e:22:1f:f0:a2:11:9a:b8:d8:44:c3:fb:4b:3c: fe:8a:b2:23:9a:9a:67:c8:2b:44:aa:f2:0f:aa:59: e4:79:f8:70:be:27:9a:d8:c8:04:27:83:c4:52:af: 0f:f4:eb:88:1e:77:ea:aa:84:5c:1a:b9:e8:63:85: 19:1e:76:6e:cf:98:77:51:6d:2b:53:d1:bc:bc:78: c4:a1:b8:e0:ba:e1:10:a8:76:bd:86:b4:62:cc:fc: fa:e6:7c:1b:9a:76:10:c9:35:71:c9:c3:bf:8d:31: b2:25:98:ed:7a:b5:04:f1:8f:ea:d6:5d:04:61:da: fc:3d:3d:73:a1:3e:72:48:17:4d:67:1d:d2:57:ba: fc:58:58:64:19:58:e8:fd:58:70:0c:ec:59:e2:8e: c1:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:60:8D:20:69:00:51:BC:D8:61:F5:C5:63:F5:DC:4E:05:69:D5:D8 X509v3 Authority Key Identifier: keyid:E8:D1:C1:B4:12:CB:64:FE:58:35:08:3F:76:A7:48:7C:E3:44:52:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/E8D1C1B412CB64FE5835083F76A7487CE34452B6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E8D1C1B412CB64FE5835083F76A7487CE34452B6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/E8D1C1B412CB64FE5835083F76A7487CE34452B6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:e0:e3:00:2d:95:f2:e6:71:58:07:fe:f1:51:f1:04:71:c7: cb:ca:eb:86:da:d0:81:ea:6a:7e:04:f2:9c:f2:1a:af:11:21: 94:0a:4e:f0:69:9d:e7:99:15:cf:b4:ad:0a:0a:c2:1c:7b:b1: 5d:18:32:cd:50:e6:81:45:96:cf:93:c4:10:55:9a:59:c9:c4: ea:cc:4d:1c:ee:f7:0b:3e:40:91:18:f5:d6:b9:c2:a5:24:c5: f1:24:b1:9c:ad:dd:34:94:e3:da:b0:f0:ba:5f:53:b4:2a:81: 55:80:75:ef:b0:70:11:9f:a7:5d:33:dd:c7:8f:a1:99:0c:04: 04:25:5c:02:a3:27:0d:c3:de:1d:c3:33:44:c8:24:61:27:cf: db:61:74:14:68:ae:ce:60:16:84:4a:c7:cf:fc:64:dc:0f:6f: c0:4b:a1:b6:74:2f:cb:ae:f2:fc:54:b1:b4:84:5e:e4:4e:7b: 2d:1f:7d:b8:5d:21:7c:6e:64:05:65:ab:31:aa:f4:07:d4:d8: 08:72:2c:16:2b:7f:f4:5b:91:ec:4b:0d:e0:1d:61:70:36:3d: e5:e1:bc:70:fc:36:1a:26:0e:1d:bf:a8:d4:14:98:44:94:90: 98:52:b4:07:37:f0:64:c3:02:75:75:79:e0:ab:7d:1c:97:c5: 03:97:b0:d5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaz2Hn0qzq/7PtK8w0MskIBjez08wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRThEMUMxQjQxMkNCNjRGRTU4MzUwODNGNzZBNzQ4N0NF MzQ0NTJCNjAeFw0yNjA3MjMyMzAzMDJaFw0yNjA3MjUwMTU1MDJaMDMxMTAvBgNV BAMTKDA1NjA4RDIwNjkwMDUxQkNEODYxRjVDNTYzRjVEQzRFMDU2OUQ1RDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnU2UG0/mZKQ6wWoboVKqLWw5E RAergE9XLiWHq+XcS7YQuQ5CUABlcjkn8GY7jfUuMHW0WfZyrRzuiNz/XCsrjveB AC3OwGrfm/AcK3ljrFtMLzjjI42BDZ3jzfhkZUQKFHclZF/rU2YeIh/wohGauNhE w/tLPP6KsiOammfIK0Sq8g+qWeR5+HC+J5rYyAQng8RSrw/064ged+qqhFwauehj hRkedm7PmHdRbStT0by8eMShuOC64RCodr2GtGLM/PrmfBuadhDJNXHJw7+NMbIl mO16tQTxj+rWXQRh2vw9PXOhPnJIF01nHdJXuvxYWGQZWOj9WHAM7FnijsHDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBWCNIGkAUbzYYfXFY/XcTgVp1dgwHwYDVR0j BBgwFoAU6NHBtBLLZP5YNQg/dqdIfONEUrYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGIxNjY0YTctYzljOS00NDQyLTg3MTgtOWFlYzllMjExMGEyLzAvRThEMUMxQjQx MkNCNjRGRTU4MzUwODNGNzZBNzQ4N0NFMzQ0NTJCNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FOEQxQzFCNDEyQ0I2NEZFNTgzNTA4M0Y3NkE3NDg3Q0UzNDQ1 MkI2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGIxNjY0YTctYzljOS00NDQyLTg3 MTgtOWFlYzllMjExMGEyLzAvRThEMUMxQjQxMkNCNjRGRTU4MzUwODNGNzZBNzQ4 N0NFMzQ0NTJCNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF7g4wAtlfLmcVgH/vFR8QRxx8vK64ba0IHq an4E8pzyGq8RIZQKTvBpneeZFc+0rQoKwhx7sV0YMs1Q5oFFls+TxBBVmlnJxOrM TRzu9ws+QJEY9da5wqUkxfEksZyt3TSU49qw8LpfU7QqgVWAde+wcBGfp10z3ceP oZkMBAQlXAKjJw3D3h3DM0TIJGEnz9thdBRors5gFoRKx8/8ZNwPb8BLobZ0L8uu 8vxUsbSEXuROey0ffbhdIXxuZAVlqzGq9AfU2AhyLBYrf/RbkexLDeAdYXA2PeXh vHD8NhomDh2/qNQUmESUkJhStAc38GTDAnV1eeCrfRyXxQOXsNU= -----END CERTIFICATE-----Generated at Fri Jul 24 08:57:45 2026 by rpki-client