$ rpki-client -vvf rpki-rsync.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/8F1F52C63BB87484D4C5E9D8551AE767566D0060.mft File: 8F1F52C63BB87484D4C5E9D8551AE767566D0060.mft (raw, json) Hash identifier: pezSCBJiBtFsOGyVFgcbmuBwcylBQOw723o5+nS75YQ= Subject key identifier: 00:06:8A:8D:FB:22:81:38:01:7A:7E:25:29:26:C9:D4:3A:77:AC:1E Authority key identifier: 8F:1F:52:C6:3B:B8:74:84:D4:C5:E9:D8:55:1A:E7:67:56:6D:00:60 Certificate issuer: /CN=8F1F52C63BB87484D4C5E9D8551AE767566D0060 Certificate serial: 652BDBE2F23BF9B88914EB4E74F12FB2763D3775 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8F1F52C63BB87484D4C5E9D8551AE767566D0060.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/8F1F52C63BB87484D4C5E9D8551AE767566D0060.mft Manifest number: 70 Signing time: Fri 24 Jul 2026 02:27:14 +0000 Manifest this update: Fri 24 Jul 2026 02:22:14 +0000 Manifest next update: Sat 25 Jul 2026 04:20:14 +0000 Files and hashes: 1: 8F1F52C63BB87484D4C5E9D8551AE767566D0060.crl (hash: dzaELPQYDibeNC9mlJV+uhrfL7FvZqTPX/rncGLPavI=) 2: 3130332e3137312e31392e302f32342d3234203d3e20313338363038.roa (hash: +9zDigXxWl0KHwFSHRJ8vK8jloGtZKIEVRmfMrusxTQ=) 3: 3130332e3137312e31382e302f32342d3234203d3e20313336303532.roa (hash: 5uR0k9um/4xZDeF/1OtaEeN9gAbE1nIuTIkh38U5XcA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/8F1F52C63BB87484D4C5E9D8551AE767566D0060.crl rsync://rpki-rsync.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/8F1F52C63BB87484D4C5E9D8551AE767566D0060.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8F1F52C63BB87484D4C5E9D8551AE767566D0060.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:20:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:2b:db:e2:f2:3b:f9:b8:89:14:eb:4e:74:f1:2f:b2:76:3d:37:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F1F52C63BB87484D4C5E9D8551AE767566D0060 Validity Not Before: Jul 24 02:22:14 2026 GMT Not After : Jul 25 04:20:14 2026 GMT Subject: CN=00068A8DFB228138017A7E252926C9D43A77AC1E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:c2:d7:e4:b6:85:33:de:0a:58:f4:54:b4:64: 56:1b:8f:c7:dc:8d:01:1c:06:c2:c6:f7:b4:b3:73: 1f:7a:32:75:ca:b1:5a:4c:93:06:22:4c:98:fb:4d: 40:9c:cc:99:e4:f7:11:ff:51:b5:60:b9:1c:00:7b: 54:e5:63:0e:9b:a8:65:c7:9c:81:cb:6d:34:ac:d2: b2:68:b9:b5:21:38:30:c3:b4:00:d5:93:83:b8:b3: 0f:56:ab:9a:ee:76:53:a2:8e:55:63:70:25:e5:bf: ca:88:22:8e:25:26:72:cc:d4:0d:af:5c:6e:3c:6c: 87:ee:b5:3d:0b:9d:f5:ee:86:5d:d7:b3:c7:8d:7b: f4:45:f8:8b:93:01:b4:d3:a7:a5:1d:c6:24:5d:c8: a1:e6:7b:26:0a:b4:2b:76:c1:c0:76:43:fb:1a:b9: 50:51:b4:e1:d8:10:6c:48:3a:a9:73:04:27:9b:17: 33:4d:98:73:b9:c4:d9:19:8c:76:b5:d8:ad:17:ba: 26:ae:2f:2e:fd:a6:15:75:e5:c1:9d:ed:7e:ef:d0: d8:49:a3:cf:4b:29:0c:46:e5:74:41:d0:1b:d6:7d: 48:0a:1a:b2:52:2c:55:52:31:93:b9:51:03:45:3e: d7:36:0a:1a:04:3a:b0:85:88:eb:2e:3a:7f:74:29: 8b:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:06:8A:8D:FB:22:81:38:01:7A:7E:25:29:26:C9:D4:3A:77:AC:1E X509v3 Authority Key Identifier: keyid:8F:1F:52:C6:3B:B8:74:84:D4:C5:E9:D8:55:1A:E7:67:56:6D:00:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/8F1F52C63BB87484D4C5E9D8551AE767566D0060.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8F1F52C63BB87484D4C5E9D8551AE767566D0060.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/8F1F52C63BB87484D4C5E9D8551AE767566D0060.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:51:d0:79:bc:fd:ff:0c:ad:0e:db:c1:ca:55:16:70:99:6e: f5:31:ca:35:96:cc:a7:af:ba:4c:a5:84:98:c8:b7:94:d9:b3: bd:69:62:84:e7:78:26:47:e2:93:e6:b5:6c:4e:c9:2b:4f:92: c5:a2:a8:8d:c9:59:41:9c:f6:cc:4d:1d:67:d3:bb:64:50:46: e3:51:19:81:57:b9:ee:80:a4:94:00:24:31:fb:32:03:2e:76: 6e:50:c6:4e:c6:b8:65:b8:94:e8:0e:56:5d:fc:c1:c2:58:49: 49:45:70:2c:a8:b4:6d:bc:4f:04:5e:18:15:0d:8e:7b:e6:eb: d2:22:08:05:9e:ed:48:36:d8:62:21:f9:e3:2d:f4:2b:c2:01: 65:8e:9c:a7:6c:ca:1d:1c:6e:b5:5c:cc:f9:9a:49:a5:c1:11: 5c:fc:5b:7a:0a:3c:54:37:36:10:ca:b1:f4:d8:71:90:1d:93: 4b:7e:f4:b3:94:74:d2:f4:96:2e:6d:0a:66:af:73:83:5e:b0: b0:2a:6b:53:b5:1b:29:43:d7:e2:67:2d:a3:db:a1:c1:1d:b1: b1:c0:f5:46:f8:6c:c2:77:fb:3f:b7:6d:d8:31:de:27:0a:38: c2:aa:7e:bd:33:a5:45:1f:73:46:5c:18:65:d6:e1:58:4b:67: 55:a7:39:e3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZSvb4vI7+biJFOtOdPEvsnY9N3UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEYxRjUyQzYzQkI4NzQ4NEQ0QzVFOUQ4NTUxQUU3Njc1 NjZEMDA2MDAeFw0yNjA3MjQwMjIyMTRaFw0yNjA3MjUwNDIwMTRaMDMxMTAvBgNV BAMTKDAwMDY4QThERkIyMjgxMzgwMTdBN0UyNTI5MjZDOUQ0M0E3N0FDMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD2wtfktoUz3gpY9FS0ZFYbj8fc jQEcBsLG97Szcx96MnXKsVpMkwYiTJj7TUCczJnk9xH/UbVguRwAe1TlYw6bqGXH nIHLbTSs0rJoubUhODDDtADVk4O4sw9Wq5rudlOijlVjcCXlv8qIIo4lJnLM1A2v XG48bIfutT0LnfXuhl3Xs8eNe/RF+IuTAbTTp6UdxiRdyKHmeyYKtCt2wcB2Q/sa uVBRtOHYEGxIOqlzBCebFzNNmHO5xNkZjHa12K0XuiauLy79phV15cGd7X7v0NhJ o89LKQxG5XRB0BvWfUgKGrJSLFVSMZO5UQNFPtc2ChoEOrCFiOsuOn90KYvzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAAaKjfsigTgBen4lKSbJ1Dp3rB4wHwYDVR0j BBgwFoAUjx9Sxju4dITUxenYVRrnZ1ZtAGAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWE4ZjY5ZjctOTMzMi00Y2Q0LWIzZTUtY2M2YzQ3NzJjZjczLzAvOEYxRjUyQzYz QkI4NzQ4NEQ0QzVFOUQ4NTUxQUU3Njc1NjZEMDA2MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84RjFGNTJDNjNCQjg3NDg0RDRDNUU5RDg1NTFBRTc2NzU2NkQw MDYwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWE4ZjY5ZjctOTMzMi00Y2Q0LWIz ZTUtY2M2YzQ3NzJjZjczLzAvOEYxRjUyQzYzQkI4NzQ4NEQ0QzVFOUQ4NTUxQUU3 Njc1NjZEMDA2MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEJR0Hm8/f8MrQ7bwcpVFnCZbvUxyjWWzKev ukylhJjIt5TZs71pYoTneCZH4pPmtWxOyStPksWiqI3JWUGc9sxNHWfTu2RQRuNR GYFXue6ApJQAJDH7MgMudm5Qxk7GuGW4lOgOVl38wcJYSUlFcCyotG28TwReGBUN jnvm69IiCAWe7Ug22GIh+eMt9CvCAWWOnKdsyh0cbrVczPmaSaXBEVz8W3oKPFQ3 NhDKsfTYcZAdk0t+9LOUdNL0li5tCmavc4NesLAqa1O1GylD1+JnLaPbocEdsbHA 9Ub4bMJ3+z+3bdgx3icKOMKqfr0zpUUfc0ZcGGXW4VhLZ1WnOeM= -----END CERTIFICATE-----Generated at Fri Jul 24 12:40:49 2026 by rpki-client