$ rpki-client -vvf rpki-rsync.idnic.net/repo/a1ca9435-7224-47a8-951b-c1b42eb0e2f7/0/8369683C9C4A77F4B5AB05185F01C3C810502D34.mft File: 8369683C9C4A77F4B5AB05185F01C3C810502D34.mft (raw, json) Hash identifier: Fa6T4v2Aw0KeR/axyXC4dVDIG5TGCdfEgw8bcuFe3RQ= Subject key identifier: EC:50:AA:08:BE:61:30:78:25:A5:3C:44:40:3C:0B:CC:CF:62:29:8E Authority key identifier: 83:69:68:3C:9C:4A:77:F4:B5:AB:05:18:5F:01:C3:C8:10:50:2D:34 Certificate issuer: /CN=8369683C9C4A77F4B5AB05185F01C3C810502D34 Certificate serial: 7E4A68D874813CDEC6C943CF5219B79A7E6CBBA8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8369683C9C4A77F4B5AB05185F01C3C810502D34.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a1ca9435-7224-47a8-951b-c1b42eb0e2f7/0/8369683C9C4A77F4B5AB05185F01C3C810502D34.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 12:30:23 +0000 Manifest this update: Thu 23 Jul 2026 12:25:23 +0000 Manifest next update: Fri 24 Jul 2026 14:57:23 +0000 Files and hashes: 1: 3130332e3136322e36322e302f32332d3234203d3e20313431363432.roa (hash: fnlL5zMOPvGAUBk55QrgutXcZXU5BAm+3sV40oQEUJw=) 2: 8369683C9C4A77F4B5AB05185F01C3C810502D34.crl (hash: n8lpgi2CKBso6POlzD/zIrZscwJ+8A1OIOvS1eQWGrI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a1ca9435-7224-47a8-951b-c1b42eb0e2f7/0/8369683C9C4A77F4B5AB05185F01C3C810502D34.crl rsync://rpki-rsync.idnic.net/repo/a1ca9435-7224-47a8-951b-c1b42eb0e2f7/0/8369683C9C4A77F4B5AB05185F01C3C810502D34.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8369683C9C4A77F4B5AB05185F01C3C810502D34.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 14:57:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:4a:68:d8:74:81:3c:de:c6:c9:43:cf:52:19:b7:9a:7e:6c:bb:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8369683C9C4A77F4B5AB05185F01C3C810502D34 Validity Not Before: Jul 23 12:25:23 2026 GMT Not After : Jul 24 14:57:23 2026 GMT Subject: CN=EC50AA08BE61307825A53C44403C0BCCCF62298E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:e0:2b:79:ec:09:85:77:48:3b:5b:1f:ac:e3: 90:99:d9:97:4c:d0:ab:a2:e0:aa:00:e4:b0:ee:53: a0:45:94:08:e0:05:1a:19:34:a1:f3:74:83:a1:9d: 3b:48:0c:fe:a9:fe:94:d2:01:53:e0:09:42:86:4e: 6a:5b:79:18:73:2d:95:91:f7:cf:ea:f3:dc:e2:4c: c7:e7:03:e4:80:ec:82:b8:89:9a:99:fe:57:2e:dc: 8b:76:23:d8:e6:f3:e2:65:ee:36:9f:16:2b:b8:70: f6:ad:48:b5:1d:e8:9c:9f:67:95:7f:53:46:54:4c: 4f:8c:c8:5b:0d:3a:e1:fa:0d:f6:4d:76:9c:54:1a: a7:6a:28:58:21:fd:8c:89:5a:7c:45:76:f1:4c:5e: 02:42:4f:ff:f7:33:b9:8e:62:d6:47:25:2a:ae:6f: 63:d3:15:6c:08:8b:14:93:3c:c5:45:e9:80:51:73: 07:cd:f6:5f:96:58:61:92:9e:8e:67:72:0f:39:4c: ad:fd:5f:da:b7:67:8d:8d:4a:85:a2:f5:54:57:38: 9d:a5:8b:ab:46:f2:2d:69:c2:2b:68:28:dc:93:39: 10:b2:0b:f0:d2:e7:8c:60:30:50:ec:5b:b4:43:4a: bf:b8:a0:8f:ff:7c:e1:10:0a:a3:d5:eb:d0:bb:07: 59:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:50:AA:08:BE:61:30:78:25:A5:3C:44:40:3C:0B:CC:CF:62:29:8E X509v3 Authority Key Identifier: keyid:83:69:68:3C:9C:4A:77:F4:B5:AB:05:18:5F:01:C3:C8:10:50:2D:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a1ca9435-7224-47a8-951b-c1b42eb0e2f7/0/8369683C9C4A77F4B5AB05185F01C3C810502D34.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8369683C9C4A77F4B5AB05185F01C3C810502D34.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a1ca9435-7224-47a8-951b-c1b42eb0e2f7/0/8369683C9C4A77F4B5AB05185F01C3C810502D34.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:64:dc:71:fd:37:44:db:4a:00:06:ba:4f:9e:7e:ab:a2:b7: 5a:61:c4:77:fb:02:03:e5:0f:1e:d6:eb:4b:19:ed:e8:88:6e: dd:9a:c8:b5:46:1e:3f:3f:84:f2:e0:9b:83:94:c8:08:3e:a4: 89:66:c9:95:29:9c:0d:4c:ce:b9:92:13:62:23:f1:a5:e0:b6: a1:2f:6b:82:9f:b6:e7:d4:31:bf:8a:32:bc:7b:a5:b1:50:16: 72:60:6f:73:74:10:d9:23:0d:c0:80:c4:0d:91:b3:e9:9d:7c: 83:70:f1:be:d6:ca:2d:f0:bb:cc:f2:cb:4f:5c:6a:8c:41:e3: 05:a6:aa:5c:0e:c3:17:eb:58:57:99:2a:ae:c7:b0:9d:e4:aa: d7:41:9b:78:b5:ff:e4:de:89:9a:0e:96:90:dd:cf:0c:10:ca: 3f:ec:ea:9d:29:d6:7b:fb:38:dc:fd:34:00:55:90:39:dc:e1: 3d:13:6c:e3:05:3a:a2:2b:57:3a:d1:00:10:32:db:04:55:db: 68:be:99:fd:aa:c7:41:de:c4:15:d0:12:9a:54:e3:1a:ff:30: 6a:3b:3b:56:59:81:19:06:c4:60:31:00:05:99:3b:76:db:bd: 3f:03:18:ff:c8:f4:65:6d:d4:ff:67:e3:a5:b9:21:0b:5b:06: cd:b4:17:d9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfkpo2HSBPN7GyUPPUhm3mn5su6gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODM2OTY4M0M5QzRBNzdGNEI1QUIwNTE4NUYwMUMzQzgx MDUwMkQzNDAeFw0yNjA3MjMxMjI1MjNaFw0yNjA3MjQxNDU3MjNaMDMxMTAvBgNV BAMTKEVDNTBBQTA4QkU2MTMwNzgyNUE1M0M0NDQwM0MwQkNDQ0Y2MjI5OEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCd4Ct57AmFd0g7Wx+s45CZ2ZdM 0Kui4KoA5LDuU6BFlAjgBRoZNKHzdIOhnTtIDP6p/pTSAVPgCUKGTmpbeRhzLZWR 98/q89ziTMfnA+SA7IK4iZqZ/lcu3It2I9jm8+Jl7jafFiu4cPatSLUd6JyfZ5V/ U0ZUTE+MyFsNOuH6DfZNdpxUGqdqKFgh/YyJWnxFdvFMXgJCT//3M7mOYtZHJSqu b2PTFWwIixSTPMVF6YBRcwfN9l+WWGGSno5ncg85TK39X9q3Z42NSoWi9VRXOJ2l i6tG8i1pwitoKNyTORCyC/DS54xgMFDsW7RDSr+4oI//fOEQCqPV69C7B1mfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7FCqCL5hMHglpTxEQDwLzM9iKY4wHwYDVR0j BBgwFoAUg2loPJxKd/S1qwUYXwHDyBBQLTQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTFjYTk0MzUtNzIyNC00N2E4LTk1MWItYzFiNDJlYjBlMmY3LzAvODM2OTY4M0M5 QzRBNzdGNEI1QUIwNTE4NUYwMUMzQzgxMDUwMkQzNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84MzY5NjgzQzlDNEE3N0Y0QjVBQjA1MTg1RjAxQzNDODEwNTAy RDM0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTFjYTk0MzUtNzIyNC00N2E4LTk1 MWItYzFiNDJlYjBlMmY3LzAvODM2OTY4M0M5QzRBNzdGNEI1QUIwNTE4NUYwMUMz QzgxMDUwMkQzNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAApk3HH9N0TbSgAGuk+efquit1phxHf7AgPl Dx7W60sZ7eiIbt2ayLVGHj8/hPLgm4OUyAg+pIlmyZUpnA1MzrmSE2Ij8aXgtqEv a4KftufUMb+KMrx7pbFQFnJgb3N0ENkjDcCAxA2Rs+mdfINw8b7Wyi3wu8zyy09c aoxB4wWmqlwOwxfrWFeZKq7HsJ3kqtdBm3i1/+TeiZoOlpDdzwwQyj/s6p0p1nv7 ONz9NABVkDnc4T0TbOMFOqIrVzrRABAy2wRV22i+mf2qx0HexBXQEppU4xr/MGo7 O1ZZgRkGxGAxAAWZO3bbvT8DGP/I9GVt1P9n46W5IQtbBs20F9k= -----END CERTIFICATE-----Generated at Fri Jul 24 05:39:28 2026 by rpki-client