$ rpki-client -vvf rpki-rsync.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/D2825506798E48EE4F6BD0B7C8A4B980BDF3FD89.mft File: D2825506798E48EE4F6BD0B7C8A4B980BDF3FD89.mft (raw, json) Hash identifier: XAr+oTdB0XyMMoF2QlzDe0O7PLZUlOfiJ4Bf25or8KI= Subject key identifier: FD:7B:AE:1A:1E:21:A3:1A:65:A6:91:C2:42:5E:EB:F6:7A:C7:DE:98 Authority key identifier: D2:82:55:06:79:8E:48:EE:4F:6B:D0:B7:C8:A4:B9:80:BD:F3:FD:89 Certificate issuer: /CN=D2825506798E48EE4F6BD0B7C8A4B980BDF3FD89 Certificate serial: 2A87127DB3AAC67416FED574F041588DCFC276FC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D2825506798E48EE4F6BD0B7C8A4B980BDF3FD89.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/D2825506798E48EE4F6BD0B7C8A4B980BDF3FD89.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 18:12:18 +0000 Manifest this update: Thu 23 Jul 2026 18:07:18 +0000 Manifest next update: Fri 24 Jul 2026 19:16:18 +0000 Files and hashes: 1: 3130332e3137382e31362e302f32332d3233203d3e2039333431.roa (hash: L6oL2whYFSSKY1+OlvsQBxpegvioTL+JL/PrizaKM4w=) 2: 3130332e3137382e31362e302f32342d3234203d3e2039333431.roa (hash: dz8GDvSUHBxefCxM449tm0eNclhVLJnu4XpLW3XQ1J8=) 3: 3130332e3137382e31372e302f32342d3234203d3e2039333431.roa (hash: Jbbv7LheQBY4j7uxSO+OAvKD/NoLJjSel5LCZW8mlwI=) 4: D2825506798E48EE4F6BD0B7C8A4B980BDF3FD89.crl (hash: xv30TStKw/gT3o4F/YkGjvcib4OcVXZ1Ip0UCUJIe7A=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/D2825506798E48EE4F6BD0B7C8A4B980BDF3FD89.crl rsync://rpki-rsync.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/D2825506798E48EE4F6BD0B7C8A4B980BDF3FD89.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D2825506798E48EE4F6BD0B7C8A4B980BDF3FD89.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 19:16:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:87:12:7d:b3:aa:c6:74:16:fe:d5:74:f0:41:58:8d:cf:c2:76:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2825506798E48EE4F6BD0B7C8A4B980BDF3FD89 Validity Not Before: Jul 23 18:07:18 2026 GMT Not After : Jul 24 19:16:18 2026 GMT Subject: CN=FD7BAE1A1E21A31A65A691C2425EEBF67AC7DE98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:e8:c7:27:c4:50:00:1c:f4:69:f4:83:fd:10: cb:6f:92:c6:3d:e5:3b:2f:49:2c:18:3a:b1:1c:c5: 81:0e:51:d4:d6:68:17:cc:eb:e3:40:a6:dd:3f:fd: f5:46:ae:9b:de:16:5c:83:b6:5e:5b:d4:3f:bf:e4: bd:f3:6b:1b:8a:8c:9f:ce:f0:7f:cd:9e:39:05:0b: 0f:e1:e4:8b:98:37:04:e0:1d:aa:66:37:a0:c8:26: 89:5c:8b:df:be:99:86:0a:12:e8:6a:bf:9f:83:b0: 2c:62:39:bb:05:11:3d:f7:63:10:a0:6c:cb:25:43: c7:1c:e2:5c:84:ec:a5:17:9d:7d:d9:1b:e3:56:4e: 3d:b3:e9:33:39:7d:f7:2f:ec:c8:1d:cd:65:cb:96: 06:72:aa:90:4f:13:f4:fa:70:b6:9b:bf:20:aa:07: 1b:1d:da:f1:95:2c:94:c2:0b:38:9a:2c:ed:8f:a6: e4:eb:d5:35:fe:5d:10:c9:a0:88:14:a6:6e:de:22: d8:01:e4:c6:e5:4b:2f:75:66:6b:aa:95:b4:1e:2c: c5:5a:49:b9:9b:da:e4:6a:7b:b3:08:fa:90:12:ba: f2:a0:21:9a:e5:c2:fe:93:fe:7e:61:a6:1e:a7:ee: 24:49:57:0a:04:f1:07:a2:6e:80:49:6a:55:4f:2f: 8a:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:7B:AE:1A:1E:21:A3:1A:65:A6:91:C2:42:5E:EB:F6:7A:C7:DE:98 X509v3 Authority Key Identifier: keyid:D2:82:55:06:79:8E:48:EE:4F:6B:D0:B7:C8:A4:B9:80:BD:F3:FD:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/D2825506798E48EE4F6BD0B7C8A4B980BDF3FD89.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D2825506798E48EE4F6BD0B7C8A4B980BDF3FD89.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/D2825506798E48EE4F6BD0B7C8A4B980BDF3FD89.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:9b:4d:e2:1a:ed:7a:ee:34:88:8d:c3:fa:85:a1:49:29:75: d6:33:b8:45:79:d2:c0:bf:cb:41:33:3a:16:83:59:81:2f:8c: 1d:33:67:be:81:41:5f:ac:dc:ef:05:c7:ec:41:13:a9:1b:2d: 1c:b3:f5:e2:d3:42:b2:bc:de:6f:1f:c4:86:a2:54:07:b6:fd: 92:9e:e0:4a:2b:e5:01:12:21:71:3c:d6:c0:06:03:4a:52:dd: aa:e8:0b:c8:7e:b8:8b:31:76:64:9c:c7:4c:b3:e5:9c:0b:46: 89:5b:dd:c0:9b:32:3d:44:0d:2c:78:35:ce:e1:8a:be:49:3a: 94:b5:d4:be:7b:f9:be:fb:88:60:ba:ff:54:e2:04:e7:d4:03: 0a:08:7f:7e:c9:46:97:b1:14:af:3d:20:88:a8:4f:1b:ea:24: e3:c9:73:53:b4:b2:6a:cc:a1:00:f4:a1:21:76:6e:2a:80:ab: 5d:4f:37:80:ed:45:64:23:6c:3f:13:29:9b:4f:0c:15:a3:32: a8:a5:bd:d0:f8:46:d0:eb:65:e5:0f:35:f5:55:7e:56:92:b7: bf:5c:7b:66:fd:51:89:25:50:f3:25:28:27:f4:3c:c0:bb:d0: 46:48:6c:5d:30:8d:61:ca:02:32:b4:bd:79:9c:b9:3d:b4:d2: cf:fa:78:b1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKocSfbOqxnQW/tV08EFYjc/CdvwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDI4MjU1MDY3OThFNDhFRTRGNkJEMEI3QzhBNEI5ODBC REYzRkQ4OTAeFw0yNjA3MjMxODA3MThaFw0yNjA3MjQxOTE2MThaMDMxMTAvBgNV BAMTKEZEN0JBRTFBMUUyMUEzMUE2NUE2OTFDMjQyNUVFQkY2N0FDN0RFOTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCj6McnxFAAHPRp9IP9EMtvksY9 5TsvSSwYOrEcxYEOUdTWaBfM6+NApt0//fVGrpveFlyDtl5b1D+/5L3zaxuKjJ/O 8H/NnjkFCw/h5IuYNwTgHapmN6DIJolci9++mYYKEuhqv5+DsCxiObsFET33YxCg bMslQ8cc4lyE7KUXnX3ZG+NWTj2z6TM5ffcv7MgdzWXLlgZyqpBPE/T6cLabvyCq Bxsd2vGVLJTCCziaLO2PpuTr1TX+XRDJoIgUpm7eItgB5MblSy91ZmuqlbQeLMVa Sbmb2uRqe7MI+pASuvKgIZrlwv6T/n5hph6n7iRJVwoE8QeiboBJalVPL4r7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/XuuGh4hoxplppHCQl7r9nrH3pgwHwYDVR0j BBgwFoAU0oJVBnmOSO5Pa9C3yKS5gL3z/YkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGMxZTgwZDQtNmViZS00OTJjLWEwYzUtZDc1OTgyNzUzM2IzLzAvRDI4MjU1MDY3 OThFNDhFRTRGNkJEMEI3QzhBNEI5ODBCREYzRkQ4OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EMjgyNTUwNjc5OEU0OEVFNEY2QkQwQjdDOEE0Qjk4MEJERjNG RDg5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGMxZTgwZDQtNmViZS00OTJjLWEw YzUtZDc1OTgyNzUzM2IzLzAvRDI4MjU1MDY3OThFNDhFRTRGNkJEMEI3QzhBNEI5 ODBCREYzRkQ4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHybTeIa7XruNIiNw/qFoUkpddYzuEV50sC/ y0EzOhaDWYEvjB0zZ76BQV+s3O8Fx+xBE6kbLRyz9eLTQrK83m8fxIaiVAe2/ZKe 4Eor5QESIXE81sAGA0pS3aroC8h+uIsxdmScx0yz5ZwLRolb3cCbMj1EDSx4Nc7h ir5JOpS11L57+b77iGC6/1TiBOfUAwoIf37JRpexFK89IIioTxvqJOPJc1O0smrM oQD0oSF2biqAq11PN4DtRWQjbD8TKZtPDBWjMqilvdD4RtDrZeUPNfVVflaSt79c e2b9UYklUPMlKCf0PMC70EZIbF0wjWHKAjK0vXmcuT200s/6eLE= -----END CERTIFICATE-----Generated at Fri Jul 24 04:38:22 2026 by rpki-client