$ rpki-client -vvf rpki-rsync.idnic.net/repo/a5481606-d5fd-4196-abcd-58e6c76243c5/0/8577702D614C8CB829CA2CC51C2B3374AC66A40E.mft File: 8577702D614C8CB829CA2CC51C2B3374AC66A40E.mft (raw, json) Hash identifier: DSDmWwql06rerQG3vRuOSRN8tFnZedglFZC7gaWFllM= Subject key identifier: 0A:9E:EB:09:A6:96:90:8A:27:47:6D:7C:AB:01:61:2E:1E:7F:B2:4B Authority key identifier: 85:77:70:2D:61:4C:8C:B8:29:CA:2C:C5:1C:2B:33:74:AC:66:A4:0E Certificate issuer: /CN=8577702D614C8CB829CA2CC51C2B3374AC66A40E Certificate serial: 7E65C5893C347CE856675785EA40DEED55E2DBDB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/8577702D614C8CB829CA2CC51C2B3374AC66A40E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a5481606-d5fd-4196-abcd-58e6c76243c5/0/8577702D614C8CB829CA2CC51C2B3374AC66A40E.mft Manifest number: 6E Signing time: Fri 24 Jul 2026 01:56:40 +0000 Manifest this update: Fri 24 Jul 2026 01:51:40 +0000 Manifest next update: Sat 25 Jul 2026 04:57:40 +0000 Files and hashes: 1: 3135372e36362e3137302e302f32332d3233203d3e20313532373737.roa (hash: b9vSoEj12pKvRl6GFlwGqwDqlYjOzNMwdmXHDB/QoPA=) 2: 3135372e36362e3137302e302f32342d3234203d3e20313532373737.roa (hash: ymv/QzmelT0mY8Z1NXChI2j7830jRvZf9HvAHfEuKp0=) 3: 8577702D614C8CB829CA2CC51C2B3374AC66A40E.crl (hash: czHDRBaD0k5V3fCUs5jWqCOKr9RSBWE3cEKUxegzkYk=) 4: 3135372e36362e3137312e302f32342d3234203d3e20313532373737.roa (hash: uYXVOfIT7P6Dr33KoZiS4hHMvBugVDHDvO0rydITSy0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a5481606-d5fd-4196-abcd-58e6c76243c5/0/8577702D614C8CB829CA2CC51C2B3374AC66A40E.crl rsync://rpki-rsync.idnic.net/repo/a5481606-d5fd-4196-abcd-58e6c76243c5/0/8577702D614C8CB829CA2CC51C2B3374AC66A40E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/8577702D614C8CB829CA2CC51C2B3374AC66A40E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:57:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:65:c5:89:3c:34:7c:e8:56:67:57:85:ea:40:de:ed:55:e2:db:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8577702D614C8CB829CA2CC51C2B3374AC66A40E Validity Not Before: Jul 24 01:51:40 2026 GMT Not After : Jul 25 04:57:40 2026 GMT Subject: CN=0A9EEB09A696908A27476D7CAB01612E1E7FB24B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:54:74:b6:06:59:b9:01:6d:bf:b6:c8:e1:6f: 45:91:5e:e7:24:0a:11:af:75:e1:15:7b:60:c0:b4: 9a:c2:60:7e:5d:97:17:46:39:a2:6e:df:64:c3:b3: 0a:9d:3c:08:5a:29:d3:5d:66:98:dc:eb:18:14:4b: 21:07:2e:59:d2:68:3d:61:4a:5e:17:e7:74:07:b7: 30:49:92:45:37:c8:b1:02:54:85:76:bd:86:b2:20: ed:60:95:33:c0:d0:d8:25:3a:66:52:ca:9f:aa:71: 01:3c:e0:cc:76:a9:29:a0:1a:00:91:04:f9:5c:5f: f4:65:88:b9:00:d2:cc:e6:b2:76:d5:62:a8:df:80: 66:92:78:1d:7b:f7:e9:11:16:07:3f:a7:67:d8:3f: 7e:30:45:02:1f:c1:5b:0e:a6:4d:62:83:39:68:28: ea:90:13:d5:6c:a0:c8:55:78:71:21:96:33:4b:a2: dc:c4:6b:b5:6e:ed:54:ab:fe:f1:cf:4d:2f:2c:07: 6a:46:87:67:03:cb:cb:1e:f5:59:15:c2:b2:cc:54: 19:b8:ff:b1:7e:10:ef:f5:7b:da:06:51:9f:b8:ee: 2d:8e:0a:c2:51:8f:af:53:35:8e:3f:0b:30:c9:fe: 21:f9:16:39:54:1c:40:e8:f2:2f:0f:17:5e:dd:3d: 62:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:9E:EB:09:A6:96:90:8A:27:47:6D:7C:AB:01:61:2E:1E:7F:B2:4B X509v3 Authority Key Identifier: keyid:85:77:70:2D:61:4C:8C:B8:29:CA:2C:C5:1C:2B:33:74:AC:66:A4:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a5481606-d5fd-4196-abcd-58e6c76243c5/0/8577702D614C8CB829CA2CC51C2B3374AC66A40E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/8577702D614C8CB829CA2CC51C2B3374AC66A40E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a5481606-d5fd-4196-abcd-58e6c76243c5/0/8577702D614C8CB829CA2CC51C2B3374AC66A40E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:b4:66:0e:3b:e2:2d:5a:69:30:f7:7e:c4:cd:7e:c0:f1:96: 68:e4:38:c2:9e:6b:7f:45:1d:53:4b:a6:4b:41:a1:70:23:63: 74:65:83:e8:47:88:f9:94:c9:8f:80:b1:2a:55:b8:83:10:79: 99:a3:67:e3:88:5d:5d:e9:60:32:0d:9f:2d:fa:a9:36:f8:2a: 03:be:19:42:82:d7:a2:25:4d:5a:3f:d6:95:57:7c:d6:1f:77: a7:0a:83:63:d8:87:a6:97:db:1b:2d:32:21:bc:e6:b1:c5:13: 51:29:af:b7:75:2d:11:ec:63:27:a0:ff:de:5c:a9:53:9f:fa: 55:f0:3d:cf:b8:84:a0:27:1a:39:1b:19:1b:2c:a8:e8:1d:b3: 82:cb:b5:64:aa:d4:50:e3:f3:5a:51:3f:b9:c4:8a:d2:29:8f: 23:b2:3b:3e:73:97:52:c4:08:4c:1f:3e:b7:08:4a:1b:7a:17: 19:64:15:74:08:4c:f5:df:32:af:6b:99:49:0c:24:8b:4b:76: 6b:5c:f0:4b:64:e8:be:35:43:58:54:27:e8:7e:0f:26:e1:b3: cd:20:13:a0:00:ce:92:c9:f7:f5:09:40:48:eb:3d:96:32:96: 6a:d3:8b:73:3f:8f:95:8a:68:fa:ab:59:33:f5:3a:ac:75:25: ec:7a:dc:fd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfmXFiTw0fOhWZ1eF6kDe7VXi29swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODU3NzcwMkQ2MTRDOENCODI5Q0EyQ0M1MUMyQjMzNzRB QzY2QTQwRTAeFw0yNjA3MjQwMTUxNDBaFw0yNjA3MjUwNDU3NDBaMDMxMTAvBgNV BAMTKDBBOUVFQjA5QTY5NjkwOEEyNzQ3NkQ3Q0FCMDE2MTJFMUU3RkIyNEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGVHS2Blm5AW2/tsjhb0WRXuck ChGvdeEVe2DAtJrCYH5dlxdGOaJu32TDswqdPAhaKdNdZpjc6xgUSyEHLlnSaD1h Sl4X53QHtzBJkkU3yLECVIV2vYayIO1glTPA0NglOmZSyp+qcQE84Mx2qSmgGgCR BPlcX/RliLkA0szmsnbVYqjfgGaSeB179+kRFgc/p2fYP34wRQIfwVsOpk1igzlo KOqQE9VsoMhVeHEhljNLotzEa7Vu7VSr/vHPTS8sB2pGh2cDy8se9VkVwrLMVBm4 /7F+EO/1e9oGUZ+47i2OCsJRj69TNY4/CzDJ/iH5FjlUHEDo8i8PF17dPWJrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCp7rCaaWkIonR218qwFhLh5/skswHwYDVR0j BBgwFoAUhXdwLWFMjLgpyizFHCszdKxmpA4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTU0ODE2MDYtZDVmZC00MTk2LWFiY2QtNThlNmM3NjI0M2M1LzAvODU3NzcwMkQ2 MTRDOENCODI5Q0EyQ0M1MUMyQjMzNzRBQzY2QTQwRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC84NTc3NzAyRDYxNEM4Q0I4MjlDQTJDQzUxQzJCMzM3NEFDNjZB NDBFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTU0ODE2MDYtZDVmZC00MTk2LWFi Y2QtNThlNmM3NjI0M2M1LzAvODU3NzcwMkQ2MTRDOENCODI5Q0EyQ0M1MUMyQjMz NzRBQzY2QTQwRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACW0Zg474i1aaTD3fsTNfsDxlmjkOMKea39F HVNLpktBoXAjY3Rlg+hHiPmUyY+AsSpVuIMQeZmjZ+OIXV3pYDINny36qTb4KgO+ GUKC16IlTVo/1pVXfNYfd6cKg2PYh6aX2xstMiG85rHFE1Epr7d1LRHsYyeg/95c qVOf+lXwPc+4hKAnGjkbGRssqOgds4LLtWSq1FDj81pRP7nEitIpjyOyOz5zl1LE CEwfPrcISht6FxlkFXQITPXfMq9rmUkMJItLdmtc8Etk6L41Q1hUJ+h+Dybhs80g E6AAzpLJ9/UJQEjrPZYylmrTi3M/j5WKaPqrWTP1Oqx1Jex63P0= -----END CERTIFICATE-----Generated at Fri Jul 24 08:54:22 2026 by rpki-client