$ rpki-client -vvf rpki-rsync.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/8D1A94EA0F9FD5148E09CAE0A307BDC99B1B4573.mft File: 8D1A94EA0F9FD5148E09CAE0A307BDC99B1B4573.mft (raw, json) Hash identifier: w+VyT6XovkRjHC8nxob4g8VoEK8/es/BqEYl9sG/LhQ= Subject key identifier: 71:D2:97:C0:D8:DD:F8:F2:CB:EF:39:88:6D:A9:37:FE:F3:83:B3:1B Authority key identifier: 8D:1A:94:EA:0F:9F:D5:14:8E:09:CA:E0:A3:07:BD:C9:9B:1B:45:73 Certificate issuer: /CN=8D1A94EA0F9FD5148E09CAE0A307BDC99B1B4573 Certificate serial: 54123DD2010E99FDCBEB0AAEF4A795DF15096EA4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8D1A94EA0F9FD5148E09CAE0A307BDC99B1B4573.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/8D1A94EA0F9FD5148E09CAE0A307BDC99B1B4573.mft Manifest number: 70 Signing time: Fri 24 Jul 2026 02:11:58 +0000 Manifest this update: Fri 24 Jul 2026 02:06:58 +0000 Manifest next update: Sat 25 Jul 2026 04:31:58 +0000 Files and hashes: 1: 8D1A94EA0F9FD5148E09CAE0A307BDC99B1B4573.crl (hash: Jnahrxy6Ntc/M+WO23LhSgp1BDQbMms43Jynv7Zc/Qk=) 2: 3130332e31372e37362e302f32332d3233203d3e20313331373831.roa (hash: NR10Bfbwh6SYopHFVcr7fLYC1ZrjLqSPhi8hfWEGSfc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/8D1A94EA0F9FD5148E09CAE0A307BDC99B1B4573.crl rsync://rpki-rsync.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/8D1A94EA0F9FD5148E09CAE0A307BDC99B1B4573.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8D1A94EA0F9FD5148E09CAE0A307BDC99B1B4573.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:30:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:12:3d:d2:01:0e:99:fd:cb:eb:0a:ae:f4:a7:95:df:15:09:6e:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D1A94EA0F9FD5148E09CAE0A307BDC99B1B4573 Validity Not Before: Jul 24 02:06:58 2026 GMT Not After : Jul 25 04:31:58 2026 GMT Subject: CN=71D297C0D8DDF8F2CBEF39886DA937FEF383B31B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:f0:2d:17:27:da:c1:2c:21:c9:0c:e7:a5:16: 9f:77:fc:ad:7b:85:a9:ce:b2:54:07:9d:83:f0:2b: b5:d7:11:08:c7:f5:57:44:af:cf:92:db:81:cf:70: fb:30:49:17:da:ff:77:d5:68:3b:67:fe:a1:54:46: 46:fa:3a:e2:54:91:9e:5d:ff:12:03:ed:1c:de:69: e0:ac:e9:ed:40:0e:33:ae:6b:c7:58:6e:64:20:89: 08:2a:f6:ec:3f:55:a0:12:00:f9:57:80:5c:4a:9d: 49:f7:9c:fb:df:f0:66:2d:82:7a:23:de:50:29:d0: d3:17:41:2a:38:77:f6:d0:c8:16:da:79:70:71:c2: df:2d:a1:f8:2e:56:e7:1b:c2:9b:65:29:f4:59:e3: 84:5a:45:87:cb:b1:02:ef:33:fd:36:f5:ac:a1:a0: 26:68:a6:8e:84:c8:67:e2:f0:3d:bb:aa:4a:90:c2: 84:22:63:9e:5a:c7:76:0b:f0:4c:7d:ce:f2:68:bf: 54:5c:df:e1:76:77:e4:b2:87:6e:92:a2:ab:48:d2: 49:10:96:34:26:05:24:4e:c8:56:8e:3d:ce:2e:0b: 51:62:dd:ea:b3:83:e0:92:02:87:b3:e0:15:9a:1f: d7:c0:41:bf:c6:da:e7:34:5e:85:5a:d1:f3:62:b9: 22:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:D2:97:C0:D8:DD:F8:F2:CB:EF:39:88:6D:A9:37:FE:F3:83:B3:1B X509v3 Authority Key Identifier: keyid:8D:1A:94:EA:0F:9F:D5:14:8E:09:CA:E0:A3:07:BD:C9:9B:1B:45:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/8D1A94EA0F9FD5148E09CAE0A307BDC99B1B4573.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8D1A94EA0F9FD5148E09CAE0A307BDC99B1B4573.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/8D1A94EA0F9FD5148E09CAE0A307BDC99B1B4573.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:22:66:f0:a8:68:de:4a:9d:5d:77:c0:8e:82:02:9a:44:96: 73:a2:18:d0:87:47:1e:79:df:e7:30:46:92:b2:bf:02:0d:88: f8:6c:da:e2:a6:f5:28:30:82:e1:f3:48:70:00:ab:a9:ab:bc: a6:34:51:e9:fb:6f:73:56:5b:c1:e3:16:20:40:00:20:de:a2: 7a:fc:d1:f9:c8:71:be:87:1c:be:34:c2:8d:92:24:e1:9b:5b: 4d:da:da:f3:81:ec:9e:f2:9e:61:76:1d:12:02:c8:3a:d5:00: 65:11:24:c9:a8:2c:6e:ff:29:fa:5c:09:aa:cf:c8:24:1b:d5: 9d:d8:0f:ed:49:0a:f6:84:35:c8:db:6a:ed:cc:34:71:9b:e1: 91:bd:d3:85:18:de:12:5e:33:3d:a4:ad:ac:df:60:f1:08:97: da:99:17:53:96:ad:5a:27:7f:50:12:b6:ca:69:cb:87:26:3c: d9:5e:38:4f:41:fc:42:2b:42:69:7a:05:df:2f:8c:e0:f4:80: d2:fe:a3:f7:a1:9c:5d:dd:61:85:60:b5:ba:b5:d6:16:2d:1d: f8:9c:07:90:93:7d:5b:3f:2c:8c:df:7d:8a:9e:03:f1:42:4d: 88:f4:0f:4f:0d:ff:2a:94:e5:48:27:16:24:0d:3b:6e:04:0b: 22:75:f3:05 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVBI90gEOmf3L6wqu9KeV3xUJbqQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEQxQTk0RUEwRjlGRDUxNDhFMDlDQUUwQTMwN0JEQzk5 QjFCNDU3MzAeFw0yNjA3MjQwMjA2NThaFw0yNjA3MjUwNDMxNThaMDMxMTAvBgNV BAMTKDcxRDI5N0MwRDhEREY4RjJDQkVGMzk4ODZEQTkzN0ZFRjM4M0IzMUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQ8C0XJ9rBLCHJDOelFp93/K17 hanOslQHnYPwK7XXEQjH9VdEr8+S24HPcPswSRfa/3fVaDtn/qFURkb6OuJUkZ5d /xID7RzeaeCs6e1ADjOua8dYbmQgiQgq9uw/VaASAPlXgFxKnUn3nPvf8GYtgnoj 3lAp0NMXQSo4d/bQyBbaeXBxwt8tofguVucbwptlKfRZ44RaRYfLsQLvM/029ayh oCZopo6EyGfi8D27qkqQwoQiY55ax3YL8Ex9zvJov1Rc3+F2d+Syh26SoqtI0kkQ ljQmBSROyFaOPc4uC1Fi3eqzg+CSAoez4BWaH9fAQb/G2uc0XoVa0fNiuSINAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcdKXwNjd+PLL7zmIbak3/vODsxswHwYDVR0j BBgwFoAUjRqU6g+f1RSOCcrgowe9yZsbRXMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTA2MjExMWQtMGExMy00NDA3LWFmMzMtMzRjMjJhOWQ3YWVjLzAvOEQxQTk0RUEw RjlGRDUxNDhFMDlDQUUwQTMwN0JEQzk5QjFCNDU3My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84RDFBOTRFQTBGOUZENTE0OEUwOUNBRTBBMzA3QkRDOTlCMUI0 NTczLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTA2MjExMWQtMGExMy00NDA3LWFm MzMtMzRjMjJhOWQ3YWVjLzAvOEQxQTk0RUEwRjlGRDUxNDhFMDlDQUUwQTMwN0JE Qzk5QjFCNDU3My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGAiZvCoaN5KnV13wI6CAppElnOiGNCHRx55 3+cwRpKyvwINiPhs2uKm9SgwguHzSHAAq6mrvKY0Uen7b3NWW8HjFiBAACDeonr8 0fnIcb6HHL40wo2SJOGbW03a2vOB7J7ynmF2HRICyDrVAGURJMmoLG7/KfpcCarP yCQb1Z3YD+1JCvaENcjbau3MNHGb4ZG904UY3hJeMz2krazfYPEIl9qZF1OWrVon f1AStsppy4cmPNleOE9B/EIrQml6Bd8vjOD0gNL+o/ehnF3dYYVgtbq11hYtHfic B5CTfVs/LIzffYqeA/FCTYj0D08N/yqU5UgnFiQNO24ECyJ18wU= -----END CERTIFICATE-----Generated at Fri Jul 24 05:52:56 2026 by rpki-client