$ rpki-client -vvf rpki-rsync.idnic.net/repo/b11ca620-dace-4a9f-b8e8-a3a2e581500e/0/D8A963CE57E99B1ABE162A8452D9E4D368BB012A.mft File: D8A963CE57E99B1ABE162A8452D9E4D368BB012A.mft (raw, json) Hash identifier: TCP/QSNaFjqMxqFwPSYmL4CHMlPZ72ACoNtT/zhv3M8= Subject key identifier: 0A:C6:77:98:2D:D4:10:F2:45:8B:69:87:FD:53:A8:4A:F2:CA:EA:24 Authority key identifier: D8:A9:63:CE:57:E9:9B:1A:BE:16:2A:84:52:D9:E4:D3:68:BB:01:2A Certificate issuer: /CN=D8A963CE57E99B1ABE162A8452D9E4D368BB012A Certificate serial: 0380F5CE9E3AD51D89ABF40D6EE1F83DAFF8A1A8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D8A963CE57E99B1ABE162A8452D9E4D368BB012A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b11ca620-dace-4a9f-b8e8-a3a2e581500e/0/D8A963CE57E99B1ABE162A8452D9E4D368BB012A.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 13:11:09 +0000 Manifest this update: Thu 23 Jul 2026 13:06:09 +0000 Manifest next update: Fri 24 Jul 2026 15:50:09 +0000 Files and hashes: 1: 3130332e3136392e3233382e302f32342d3234203d3e20313338383831.roa (hash: Jx05B7mkwgYoEihHJr1Mblw6Kt55kFXhZ9MUCvCt+Go=) 2: D8A963CE57E99B1ABE162A8452D9E4D368BB012A.crl (hash: sQmboZJxXqgY2IA88kRLnGPEo2fCtonjD93liQxRVMY=) 3: 3130332e3136392e3233392e302f32342d3234203d3e20313338383831.roa (hash: B7a7PzCNzeD/tq1cXAKoZlfFY/BQzoD5xWVoqKq0SF0=) 4: 3130332e3136392e3233382e302f32332d3233203d3e20313338383831.roa (hash: 6VIXf9PufTTIF0jlFfBvIGu6EFZnq37iO9mrrQ1/lbk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b11ca620-dace-4a9f-b8e8-a3a2e581500e/0/D8A963CE57E99B1ABE162A8452D9E4D368BB012A.crl rsync://rpki-rsync.idnic.net/repo/b11ca620-dace-4a9f-b8e8-a3a2e581500e/0/D8A963CE57E99B1ABE162A8452D9E4D368BB012A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D8A963CE57E99B1ABE162A8452D9E4D368BB012A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 15:50:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:80:f5:ce:9e:3a:d5:1d:89:ab:f4:0d:6e:e1:f8:3d:af:f8:a1:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D8A963CE57E99B1ABE162A8452D9E4D368BB012A Validity Not Before: Jul 23 13:06:09 2026 GMT Not After : Jul 24 15:50:09 2026 GMT Subject: CN=0AC677982DD410F2458B6987FD53A84AF2CAEA24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:dc:f4:94:48:90:65:81:8e:ee:f2:a7:a6:d1: c1:1e:8c:a0:25:6e:bc:be:d6:fe:5a:b9:78:1e:78: c8:78:97:d6:4f:24:d0:a8:6d:31:c3:cb:e1:6d:f0: 91:e8:df:63:de:8e:86:1f:b7:8e:9b:b0:84:94:43: 34:a1:b8:05:8a:99:28:66:c8:10:03:a5:83:b7:93: 27:bf:c5:1c:8d:ae:07:73:26:37:87:41:b0:c1:e9: 13:6c:f4:df:6a:f5:66:b3:9a:88:c9:73:7b:16:c7: 1f:55:53:77:a7:9a:cb:6f:77:e6:7e:10:44:e3:2a: 82:f6:76:a8:55:29:ab:06:8c:48:5b:a9:4c:bf:3f: 97:01:b2:aa:29:ab:35:24:63:fb:4a:ad:38:9f:00: cf:3c:9c:da:61:35:1a:e6:f5:d6:74:d0:91:31:01: 69:1b:da:59:3e:da:fa:2f:ef:3d:4d:9c:36:a4:71: d1:6b:67:4d:f4:3c:3f:89:a3:6e:e4:e1:ff:a9:3c: e5:85:08:46:03:08:d4:1b:f4:59:9e:08:a3:3a:ed: 0b:e6:73:a7:1c:09:65:f7:47:cd:17:21:bf:c6:6b: f8:48:50:32:90:e4:2c:50:a4:25:67:be:38:37:0d: 8a:5b:8a:eb:1e:d4:7e:ec:e4:a1:a8:55:50:f2:6a: c4:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:C6:77:98:2D:D4:10:F2:45:8B:69:87:FD:53:A8:4A:F2:CA:EA:24 X509v3 Authority Key Identifier: keyid:D8:A9:63:CE:57:E9:9B:1A:BE:16:2A:84:52:D9:E4:D3:68:BB:01:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b11ca620-dace-4a9f-b8e8-a3a2e581500e/0/D8A963CE57E99B1ABE162A8452D9E4D368BB012A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D8A963CE57E99B1ABE162A8452D9E4D368BB012A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b11ca620-dace-4a9f-b8e8-a3a2e581500e/0/D8A963CE57E99B1ABE162A8452D9E4D368BB012A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:e7:49:93:41:ed:49:40:f9:ba:b3:5b:09:8e:83:f1:f6:4b: 47:4e:f5:ac:7a:10:4d:b1:79:4b:dc:4c:d0:7f:22:d0:cd:c8: c1:af:46:1d:01:4a:24:b9:40:16:be:71:09:8f:48:10:17:6b: 97:5e:c2:f9:27:de:99:bb:90:95:e4:65:ba:ce:83:51:1e:77: ef:f0:ee:45:df:ee:05:90:c6:f2:00:de:7c:a8:34:e1:ae:c1: 4c:b9:97:ad:e6:61:66:49:53:69:26:e3:0f:fe:41:fb:ab:09: ae:12:4f:a1:d7:f7:13:63:5d:29:b4:9f:ae:21:9f:ea:19:db: f8:7b:2c:37:be:21:d3:13:b9:00:ab:69:29:97:7b:db:ab:69: d4:1d:1b:d7:99:35:a3:19:3a:ae:70:9a:87:87:cb:87:36:d0: c2:5b:58:07:f1:7f:16:da:e0:af:c6:9d:fa:ef:20:d5:a5:e3: b5:13:9a:0a:c4:38:31:94:c6:4c:b6:ea:36:f8:29:c3:ee:3a: 00:24:37:6c:33:74:5f:dd:1c:b0:07:76:fb:4e:7d:38:1f:61: ff:92:8b:b4:66:ac:85:c1:bd:80:15:53:2a:ec:80:fa:91:e0: 9e:cd:80:1c:c9:40:c0:7f:a8:f2:52:55:b8:b1:15:89:30:f3: 69:ac:41:5e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA4D1zp461R2Jq/QNbuH4Pa/4oagwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDhBOTYzQ0U1N0U5OUIxQUJFMTYyQTg0NTJEOUU0RDM2 OEJCMDEyQTAeFw0yNjA3MjMxMzA2MDlaFw0yNjA3MjQxNTUwMDlaMDMxMTAvBgNV BAMTKDBBQzY3Nzk4MkRENDEwRjI0NThCNjk4N0ZENTNBODRBRjJDQUVBMjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCX3PSUSJBlgY7u8qem0cEejKAl bry+1v5auXgeeMh4l9ZPJNCobTHDy+Ft8JHo32PejoYft46bsISUQzShuAWKmShm yBADpYO3kye/xRyNrgdzJjeHQbDB6RNs9N9q9WazmojJc3sWxx9VU3enmstvd+Z+ EETjKoL2dqhVKasGjEhbqUy/P5cBsqopqzUkY/tKrTifAM88nNphNRrm9dZ00JEx AWkb2lk+2vov7z1NnDakcdFrZ030PD+Jo27k4f+pPOWFCEYDCNQb9FmeCKM67Qvm c6ccCWX3R80XIb/Ga/hIUDKQ5CxQpCVnvjg3DYpbiuse1H7s5KGoVVDyasTZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCsZ3mC3UEPJFi2mH/VOoSvLK6iQwHwYDVR0j BBgwFoAU2Kljzlfpmxq+FiqEUtnk02i7ASowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjExY2E2MjAtZGFjZS00YTlmLWI4ZTgtYTNhMmU1ODE1MDBlLzAvRDhBOTYzQ0U1 N0U5OUIxQUJFMTYyQTg0NTJEOUU0RDM2OEJCMDEyQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EOEE5NjNDRTU3RTk5QjFBQkUxNjJBODQ1MkQ5RTREMzY4QkIw MTJBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjExY2E2MjAtZGFjZS00YTlmLWI4 ZTgtYTNhMmU1ODE1MDBlLzAvRDhBOTYzQ0U1N0U5OUIxQUJFMTYyQTg0NTJEOUU0 RDM2OEJCMDEyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABvnSZNB7UlA+bqzWwmOg/H2S0dO9ax6EE2x eUvcTNB/ItDNyMGvRh0BSiS5QBa+cQmPSBAXa5dewvkn3pm7kJXkZbrOg1Eed+/w 7kXf7gWQxvIA3nyoNOGuwUy5l63mYWZJU2km4w/+QfurCa4ST6HX9xNjXSm0n64h n+oZ2/h7LDe+IdMTuQCraSmXe9uradQdG9eZNaMZOq5wmoeHy4c20MJbWAfxfxba 4K/GnfrvINWl47UTmgrEODGUxky26jb4KcPuOgAkN2wzdF/dHLAHdvtOfTgfYf+S i7RmrIXBvYAVUyrsgPqR4J7NgBzJQMB/qPJSVbixFYkw82msQV4= -----END CERTIFICATE-----Generated at Fri Jul 24 04:17:10 2026 by rpki-client