$ rpki-client -vvf rpki-rsync.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/1/F8E24AB4BEAB3EFEDDDD4E1FD2E905FE1C535BE3.mft File: F8E24AB4BEAB3EFEDDDD4E1FD2E905FE1C535BE3.mft (raw, json) Hash identifier: intl3dr8gMXANS4GRAnwcB6CvoFqOk1Yfrww8ns0Yp8= Subject key identifier: 98:76:D7:CA:01:34:D0:06:AE:BA:C0:E7:00:94:92:6E:C4:AD:65:D2 Authority key identifier: F8:E2:4A:B4:BE:AB:3E:FE:DD:DD:4E:1F:D2:E9:05:FE:1C:53:5B:E3 Certificate issuer: /CN=F8E24AB4BEAB3EFEDDDD4E1FD2E905FE1C535BE3 Certificate serial: 326B487560B3D4201AA6156DBF79C17D02C34B34 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8E24AB4BEAB3EFEDDDD4E1FD2E905FE1C535BE3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/1/F8E24AB4BEAB3EFEDDDD4E1FD2E905FE1C535BE3.mft Manifest number: 6F Signing time: Fri 24 Jul 2026 00:09:17 +0000 Manifest this update: Fri 24 Jul 2026 00:04:17 +0000 Manifest next update: Sat 25 Jul 2026 04:07:17 +0000 Files and hashes: 1: F8E24AB4BEAB3EFEDDDD4E1FD2E905FE1C535BE3.crl (hash: YJStNOCV10uvkBfB7YShpz8pzaPnbpx+bni0B6Inwrw=) 2: 323030313a6466333a643334303a3a2f34382d3438203d3e20313532373439.roa (hash: shXgjYK0NRlHgehnbq1wzNndxumpi8gg30laew1y7t0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/1/F8E24AB4BEAB3EFEDDDD4E1FD2E905FE1C535BE3.crl rsync://rpki-rsync.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/1/F8E24AB4BEAB3EFEDDDD4E1FD2E905FE1C535BE3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8E24AB4BEAB3EFEDDDD4E1FD2E905FE1C535BE3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:07:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:6b:48:75:60:b3:d4:20:1a:a6:15:6d:bf:79:c1:7d:02:c3:4b:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8E24AB4BEAB3EFEDDDD4E1FD2E905FE1C535BE3 Validity Not Before: Jul 24 00:04:17 2026 GMT Not After : Jul 25 04:07:17 2026 GMT Subject: CN=9876D7CA0134D006AEBAC0E70094926EC4AD65D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:59:e9:b9:69:81:b9:e0:48:cd:23:2e:f5:ca: e0:4a:1b:30:21:e0:7a:64:a1:c0:7a:e6:30:8e:ce: 10:6a:9c:c3:d4:34:42:aa:9c:05:9a:ef:28:be:e1: 25:ef:5b:de:22:91:ea:4c:7c:c5:05:cc:4c:f8:19: 9f:f0:66:f8:b5:66:b0:64:2b:f8:9e:9a:4f:f0:9c: 19:af:56:93:e1:0c:73:7b:fc:af:40:e6:46:30:c9: 7c:0e:5a:6e:62:6a:9d:32:ec:de:03:80:ee:68:a9: 16:cf:0d:dc:86:56:ac:38:00:79:f9:6e:1b:60:89: 50:2e:91:71:45:bf:6b:17:d7:48:1b:e6:36:f3:70: 71:ce:97:ed:45:e2:c0:98:c1:23:2e:ba:30:6f:3b: 58:d6:1d:a6:ea:14:a2:0c:ca:ae:6a:b9:54:f8:61: e4:f2:22:50:0f:83:21:de:22:51:d1:53:7e:05:7a: 53:06:55:b7:c6:45:ef:b6:a2:e0:cf:42:59:aa:c8: 31:50:2a:7a:b6:2e:73:b1:f6:62:21:ec:2f:da:2b: ea:da:2f:68:5c:b2:39:3c:35:7c:91:06:0a:92:54: 93:45:63:a5:2c:4b:df:50:dc:f3:af:d2:fa:9c:f1: ab:07:61:dc:ed:3c:ac:44:3e:f9:95:70:35:57:fa: df:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:76:D7:CA:01:34:D0:06:AE:BA:C0:E7:00:94:92:6E:C4:AD:65:D2 X509v3 Authority Key Identifier: keyid:F8:E2:4A:B4:BE:AB:3E:FE:DD:DD:4E:1F:D2:E9:05:FE:1C:53:5B:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/1/F8E24AB4BEAB3EFEDDDD4E1FD2E905FE1C535BE3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8E24AB4BEAB3EFEDDDD4E1FD2E905FE1C535BE3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/1/F8E24AB4BEAB3EFEDDDD4E1FD2E905FE1C535BE3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:6f:56:c3:dc:ff:3d:3e:d4:a9:0a:a8:04:08:3a:55:87:a3: c5:eb:37:b3:34:d0:90:18:e8:75:48:0d:3c:8f:ba:7f:32:08: 73:6a:30:f6:51:df:40:ab:0b:e3:70:8d:33:6a:b4:83:33:fd: d2:71:29:35:bd:82:ce:ca:17:7f:1a:d4:d4:2f:c8:0d:72:25: 48:c6:b5:b1:ab:03:ce:05:d9:10:4f:91:42:2a:bb:74:8c:a1: d0:86:51:23:c3:fc:96:5d:0c:1d:fd:71:08:9d:80:44:01:af: 04:b0:64:db:53:45:59:36:51:0a:34:54:33:a4:87:c6:6a:e0: 3b:98:f2:b4:b9:ec:9d:65:d4:e2:9b:e0:49:45:66:4f:6a:fd: b0:48:a0:da:e8:71:63:9b:e6:ce:d9:05:04:0c:dc:9a:24:8a: cc:2f:de:8c:88:79:9e:fa:ce:e1:13:0c:f3:61:46:b0:71:5d: 98:8f:ff:6d:fb:be:67:60:06:a7:87:01:52:23:81:4a:31:62: 14:98:a9:c2:63:58:18:0d:f1:21:be:48:57:25:92:b8:e3:40: b9:a4:57:d4:16:67:c6:c4:5b:b9:33:26:38:d6:4a:c8:14:c1: ea:44:05:50:5e:10:a3:c1:61:75:28:dd:4d:5b:a6:cb:84:cd: 0e:d2:ab:f8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMmtIdWCz1CAaphVtv3nBfQLDSzQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhFMjRBQjRCRUFCM0VGRUREREQ0RTFGRDJFOTA1RkUx QzUzNUJFMzAeFw0yNjA3MjQwMDA0MTdaFw0yNjA3MjUwNDA3MTdaMDMxMTAvBgNV BAMTKDk4NzZEN0NBMDEzNEQwMDZBRUJBQzBFNzAwOTQ5MjZFQzRBRDY1RDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtWem5aYG54EjNIy71yuBKGzAh 4HpkocB65jCOzhBqnMPUNEKqnAWa7yi+4SXvW94ikepMfMUFzEz4GZ/wZvi1ZrBk K/iemk/wnBmvVpPhDHN7/K9A5kYwyXwOWm5iap0y7N4DgO5oqRbPDdyGVqw4AHn5 bhtgiVAukXFFv2sX10gb5jbzcHHOl+1F4sCYwSMuujBvO1jWHabqFKIMyq5quVT4 YeTyIlAPgyHeIlHRU34FelMGVbfGRe+2ouDPQlmqyDFQKnq2LnOx9mIh7C/aK+ra L2hcsjk8NXyRBgqSVJNFY6UsS99Q3POv0vqc8asHYdztPKxEPvmVcDVX+t9NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmHbXygE00AauusDnAJSSbsStZdIwHwYDVR0j BBgwFoAU+OJKtL6rPv7d3U4f0ukF/hxTW+MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWI3MzNkY2YtOWY1ZS00Nzc1LTljZTctOWRkNTI1YjQ0Yjg2LzEvRjhFMjRBQjRC RUFCM0VGRUREREQ0RTFGRDJFOTA1RkUxQzUzNUJFMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GOEUyNEFCNEJFQUIzRUZFRERERDRFMUZEMkU5MDVGRTFDNTM1 QkUzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWI3MzNkY2YtOWY1ZS00Nzc1LTlj ZTctOWRkNTI1YjQ0Yjg2LzEvRjhFMjRBQjRCRUFCM0VGRUREREQ0RTFGRDJFOTA1 RkUxQzUzNUJFMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADVvVsPc/z0+1KkKqAQIOlWHo8XrN7M00JAY 6HVIDTyPun8yCHNqMPZR30CrC+NwjTNqtIMz/dJxKTW9gs7KF38a1NQvyA1yJUjG tbGrA84F2RBPkUIqu3SModCGUSPD/JZdDB39cQidgEQBrwSwZNtTRVk2UQo0VDOk h8Zq4DuY8rS57J1l1OKb4ElFZk9q/bBIoNrocWOb5s7ZBQQM3Jokiswv3oyIeZ76 zuETDPNhRrBxXZiP/237vmdgBqeHAVIjgUoxYhSYqcJjWBgN8SG+SFclkrjjQLmk V9QWZ8bEW7kzJjjWSsgUwepEBVBeEKPBYXUo3U1bpsuEzQ7Sq/g= -----END CERTIFICATE-----Generated at Fri Jul 24 08:46:25 2026 by rpki-client