$ rpki-client -vvf rpki-rsync.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/8EE359887ED47947E74ECC3D12D7DD874E3AE6EC.mft File: 8EE359887ED47947E74ECC3D12D7DD874E3AE6EC.mft (raw, json) Hash identifier: bvEvAuS+mBr9L9iBk67A/boJvR0Suars/sBdlLCvyEY= Subject key identifier: 85:D4:2B:98:1B:51:77:48:AA:4C:40:CD:B6:86:E6:D5:3E:D5:D5:FF Authority key identifier: 8E:E3:59:88:7E:D4:79:47:E7:4E:CC:3D:12:D7:DD:87:4E:3A:E6:EC Certificate issuer: /CN=8EE359887ED47947E74ECC3D12D7DD874E3AE6EC Certificate serial: 63900E0DE3F7CFD5E6022AA8D7E0688C1525EC3A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8EE359887ED47947E74ECC3D12D7DD874E3AE6EC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/8EE359887ED47947E74ECC3D12D7DD874E3AE6EC.mft Manifest number: 6E Signing time: Fri 24 Jul 2026 02:52:51 +0000 Manifest this update: Fri 24 Jul 2026 02:47:51 +0000 Manifest next update: Sat 25 Jul 2026 03:36:51 +0000 Files and hashes: 1: 8EE359887ED47947E74ECC3D12D7DD874E3AE6EC.crl (hash: OfGD3pHg3Hr4A6CseOQT3TENtJU/E/lXmbth/EmlefI=) 2: 3130332e3130322e3131322e302f32342d3234203d3e20313336383536.roa (hash: SmTgUdBZ5Gm9MMySo1hy5IKAztpPtBz8UdMvR7+0nS8=) 3: 3130332e3130322e3131342e302f32342d3234203d3e20313336383536.roa (hash: lR/t7u2Id9Tm/5RG+xZK/WwNnzBrvYgkf9KgY4fbdVM=) 4: 3130332e3130322e3131342e302f32332d3233203d3e20313336383536.roa (hash: b/pe4WCQVQeP9RG6dCLewRuXkpf7Roy9CSyh5UkTXss=) 5: 3130332e3130322e3131332e302f32342d3234203d3e20313336383536.roa (hash: 1A2FPi3qFfpFktBr0BMwE4Qlw/qHnARWJ5AeRKnXK6A=) 6: 3130332e3130322e3131322e302f32322d3232203d3e20313336383536.roa (hash: ohA41RSForcViKph50xgqT5CqEd5p9C2x10sK3Y5aMA=) 7: 3130332e3130322e3131352e302f32342d3234203d3e20313336383536.roa (hash: UPuTvMckcIYLBYZ54B2+SqyW/0kMWr4eDhHIIPK9IxA=) 8: 3130332e3130322e3131322e302f32332d3233203d3e20313336383536.roa (hash: 4f9KIpK4kwJHh2WI32w5acQI96jbMxoNcHopJHYsb/k=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/8EE359887ED47947E74ECC3D12D7DD874E3AE6EC.crl rsync://rpki-rsync.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/8EE359887ED47947E74ECC3D12D7DD874E3AE6EC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8EE359887ED47947E74ECC3D12D7DD874E3AE6EC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 03:36:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:90:0e:0d:e3:f7:cf:d5:e6:02:2a:a8:d7:e0:68:8c:15:25:ec:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8EE359887ED47947E74ECC3D12D7DD874E3AE6EC Validity Not Before: Jul 24 02:47:51 2026 GMT Not After : Jul 25 03:36:51 2026 GMT Subject: CN=85D42B981B517748AA4C40CDB686E6D53ED5D5FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f0:ac:4d:55:45:49:f7:ba:f8:cf:b9:29:25: 84:5f:f3:6c:da:3c:5c:e7:76:d7:ec:a3:51:7a:1d: 53:a5:66:b2:e7:44:54:91:99:0c:8e:b7:c6:6c:f7: b7:b7:1e:25:3f:7b:ab:2e:d8:c5:ba:c9:8a:11:e3: a7:a8:01:06:28:20:20:c1:31:0b:89:2b:33:47:a2: bd:a1:b2:e7:d5:81:38:85:72:36:f9:63:1a:df:16: d9:e2:be:47:b3:c1:87:20:8b:78:00:f2:8a:30:34: 1e:43:7e:a7:29:b3:97:c3:ff:d6:95:a2:a5:69:0d: 7c:ee:e6:95:dc:bd:c3:74:52:28:74:c7:2e:f9:57: b5:7a:08:ff:1c:7e:ef:9d:4a:9e:10:a7:cc:db:ff: c1:67:f8:37:e7:0c:fd:1a:16:e1:9c:12:f2:30:bf: ff:9c:b6:f8:cd:e9:4b:02:71:1e:22:09:81:72:6d: 37:e6:2b:89:86:8d:83:a6:a4:5b:90:a1:fd:d9:19: 57:ab:fe:c0:6a:95:91:18:3a:03:a4:e0:64:0d:da: fc:5d:a7:19:ca:7c:5f:aa:4c:12:67:e7:63:05:ba: 13:7b:b5:7e:1f:e7:97:b8:07:7e:5d:d3:d2:58:7f: bd:06:de:81:7f:4a:88:27:11:bb:3c:de:a5:1d:32: 61:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:D4:2B:98:1B:51:77:48:AA:4C:40:CD:B6:86:E6:D5:3E:D5:D5:FF X509v3 Authority Key Identifier: keyid:8E:E3:59:88:7E:D4:79:47:E7:4E:CC:3D:12:D7:DD:87:4E:3A:E6:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/8EE359887ED47947E74ECC3D12D7DD874E3AE6EC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8EE359887ED47947E74ECC3D12D7DD874E3AE6EC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/8EE359887ED47947E74ECC3D12D7DD874E3AE6EC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:2a:1f:ed:e1:a2:72:fd:e1:32:51:71:7e:80:0e:21:35:94: 71:a4:c3:2e:5e:ca:db:bf:98:72:40:87:37:59:01:63:49:d7: 57:de:3d:90:b0:1e:2e:06:b8:60:ba:92:56:d2:63:c6:f9:43: c4:75:19:76:bf:9e:38:2c:33:56:78:f7:92:95:84:24:81:37: 57:4e:79:96:18:e8:95:d1:cf:9c:01:f4:c6:84:4f:31:d0:b9: 0e:ec:6f:4e:74:56:0b:27:4f:a7:a4:9d:50:16:4e:92:09:2f: 27:93:99:b0:15:bf:1e:a2:1b:b2:83:15:cf:7b:44:4b:27:d6: 95:40:71:2f:a1:e7:55:76:09:00:f7:a5:a6:26:77:7e:a8:36: cc:5b:b4:4c:f1:80:fd:1a:95:37:d3:39:b4:82:58:84:f5:18: 4b:ba:eb:1d:ea:37:64:b1:88:48:3d:f2:85:8e:fa:e4:4e:9c: d4:5c:d2:cc:f0:47:7c:94:57:12:04:a1:4b:80:9d:6b:b6:cb: 5b:5e:48:4c:0c:d1:b0:27:3f:7d:69:5f:8f:31:f1:a7:31:0a: 79:28:eb:65:06:31:40:f6:88:46:b2:bf:e6:cd:bc:72:af:1a: b9:99:66:54:0a:57:b3:dd:af:2f:c2:96:09:a9:23:11:76:93: 8e:8c:f5:eb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY5AODeP3z9XmAiqo1+BojBUl7DowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEVFMzU5ODg3RUQ0Nzk0N0U3NEVDQzNEMTJEN0REODc0 RTNBRTZFQzAeFw0yNjA3MjQwMjQ3NTFaFw0yNjA3MjUwMzM2NTFaMDMxMTAvBgNV BAMTKDg1RDQyQjk4MUI1MTc3NDhBQTRDNDBDREI2ODZFNkQ1M0VENUQ1RkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy8KxNVUVJ97r4z7kpJYRf82za PFzndtfso1F6HVOlZrLnRFSRmQyOt8Zs97e3HiU/e6su2MW6yYoR46eoAQYoICDB MQuJKzNHor2hsufVgTiFcjb5YxrfFtnivkezwYcgi3gA8oowNB5Dfqcps5fD/9aV oqVpDXzu5pXcvcN0Uih0xy75V7V6CP8cfu+dSp4Qp8zb/8Fn+DfnDP0aFuGcEvIw v/+ctvjN6UsCcR4iCYFybTfmK4mGjYOmpFuQof3ZGVer/sBqlZEYOgOk4GQN2vxd pxnKfF+qTBJn52MFuhN7tX4f55e4B35d09JYf70G3oF/SognEbs83qUdMmEvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhdQrmBtRd0iqTEDNtobm1T7V1f8wHwYDVR0j BBgwFoAUjuNZiH7UeUfnTsw9Etfdh0465uwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTVjN2E0MDQtZWIzZi00Y2YxLTk5ZjktODI3OTYxNjYxZjMxLzAvOEVFMzU5ODg3 RUQ0Nzk0N0U3NEVDQzNEMTJEN0REODc0RTNBRTZFQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84RUUzNTk4ODdFRDQ3OTQ3RTc0RUNDM0QxMkQ3REQ4NzRFM0FF NkVDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTVjN2E0MDQtZWIzZi00Y2YxLTk5 ZjktODI3OTYxNjYxZjMxLzAvOEVFMzU5ODg3RUQ0Nzk0N0U3NEVDQzNEMTJEN0RE ODc0RTNBRTZFQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADAqH+3honL94TJRcX6ADiE1lHGkwy5eytu/ mHJAhzdZAWNJ11fePZCwHi4GuGC6klbSY8b5Q8R1GXa/njgsM1Z495KVhCSBN1dO eZYY6JXRz5wB9MaETzHQuQ7sb050VgsnT6eknVAWTpIJLyeTmbAVvx6iG7KDFc97 REsn1pVAcS+h51V2CQD3paYmd36oNsxbtEzxgP0alTfTObSCWIT1GEu66x3qN2Sx iEg98oWO+uROnNRc0szwR3yUVxIEoUuAnWu2y1teSEwM0bAnP31pX48x8acxCnko 62UGMUD2iEayv+bNvHKvGrmZZlQKV7Pdry/ClgmpIxF2k46M9es= -----END CERTIFICATE-----Generated at Fri Jul 24 07:03:41 2026 by rpki-client