$ rpki-client -vvf rpki-rsync.idnic.net/repo/b724e45b-254b-4feb-bf8e-7bf120912af7/0/8DD710534DF68AAB08361EE28306B8FDEE71D144.mft File: 8DD710534DF68AAB08361EE28306B8FDEE71D144.mft (raw, json) Hash identifier: v0Ji/g+JL453CKyKVsocIiBl8BS5fKf2sSQMdMwwDFI= Subject key identifier: C9:48:5C:03:CD:C4:7F:63:CB:A2:83:B4:B4:D4:4E:53:2D:5F:69:D7 Authority key identifier: 8D:D7:10:53:4D:F6:8A:AB:08:36:1E:E2:83:06:B8:FD:EE:71:D1:44 Certificate issuer: /CN=8DD710534DF68AAB08361EE28306B8FDEE71D144 Certificate serial: 211EB87D7492AA8DB3CD957670CA8B143C78A15C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8DD710534DF68AAB08361EE28306B8FDEE71D144.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b724e45b-254b-4feb-bf8e-7bf120912af7/0/8DD710534DF68AAB08361EE28306B8FDEE71D144.mft Manifest number: 70 Signing time: Thu 23 Jul 2026 21:46:35 +0000 Manifest this update: Thu 23 Jul 2026 21:41:35 +0000 Manifest next update: Sat 25 Jul 2026 01:21:35 +0000 Files and hashes: 1: 3130332e3135382e3130332e302f32342d3234203d3e203435333137.roa (hash: mt9y4ArG2gRgvhKLs+xygsf6wYJsNzK3vkSOg2Yasms=) 2: 8DD710534DF68AAB08361EE28306B8FDEE71D144.crl (hash: GtWm3yppOIKm8cBCPzqtT9HGJp9EAIl8jXAjyt9hrgM=) 3: 3130332e3135382e3130322e302f32342d3234203d3e20313431313239.roa (hash: OzarGbzrKygn581G2dCLdzA7C4q7lKqki8T+O4VVozc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b724e45b-254b-4feb-bf8e-7bf120912af7/0/8DD710534DF68AAB08361EE28306B8FDEE71D144.crl rsync://rpki-rsync.idnic.net/repo/b724e45b-254b-4feb-bf8e-7bf120912af7/0/8DD710534DF68AAB08361EE28306B8FDEE71D144.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8DD710534DF68AAB08361EE28306B8FDEE71D144.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 00:48:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:1e:b8:7d:74:92:aa:8d:b3:cd:95:76:70:ca:8b:14:3c:78:a1:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8DD710534DF68AAB08361EE28306B8FDEE71D144 Validity Not Before: Jul 23 21:41:35 2026 GMT Not After : Jul 25 01:21:35 2026 GMT Subject: CN=C9485C03CDC47F63CBA283B4B4D44E532D5F69D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:9b:93:df:b4:22:8a:8b:21:58:f5:78:83:02: bc:81:d7:97:60:86:7e:66:cb:c4:96:57:09:6c:21: 2b:e4:11:d6:4d:0a:a3:09:6b:8a:2b:f8:91:8f:3a: dc:c5:88:c5:8d:a2:b1:67:66:f5:06:9c:d8:58:04: c5:08:4f:77:0a:16:8b:2a:df:5a:25:ab:0c:d0:49: 96:a6:b7:85:26:73:fa:86:60:3c:b8:1b:38:79:0b: 33:2b:8e:29:65:43:0f:a9:46:f7:74:8e:91:c7:ea: 46:ac:4e:bd:36:30:35:e9:51:af:ee:77:c5:a4:6a: 1b:a8:1c:ab:cf:a2:61:86:6b:10:16:35:35:a4:a6: 3e:77:5a:7f:d3:a8:64:1c:9d:4f:0d:b7:fc:18:c1: 03:95:d2:1c:73:f4:f4:c2:9e:32:24:d2:1d:5e:2e: 22:46:3d:4f:03:23:9a:8d:3e:a1:3e:13:2f:28:53: c3:ea:31:ec:5c:7c:cf:4f:99:b8:13:5b:3a:c7:29: fd:b4:6d:b3:3e:59:e0:32:e1:95:83:ac:da:b8:32: 5c:4c:69:40:61:06:64:4b:75:7d:02:e7:65:83:47: 75:67:f2:78:54:d0:6b:7b:f0:23:fb:b2:0d:89:49: 88:e6:55:31:fa:e0:34:a0:ba:0f:9c:55:50:45:13: a7:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:48:5C:03:CD:C4:7F:63:CB:A2:83:B4:B4:D4:4E:53:2D:5F:69:D7 X509v3 Authority Key Identifier: keyid:8D:D7:10:53:4D:F6:8A:AB:08:36:1E:E2:83:06:B8:FD:EE:71:D1:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b724e45b-254b-4feb-bf8e-7bf120912af7/0/8DD710534DF68AAB08361EE28306B8FDEE71D144.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8DD710534DF68AAB08361EE28306B8FDEE71D144.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b724e45b-254b-4feb-bf8e-7bf120912af7/0/8DD710534DF68AAB08361EE28306B8FDEE71D144.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:cd:1c:f0:7c:43:57:65:89:ff:fa:c6:da:76:80:03:5e:13: 5f:66:a3:8f:11:55:d7:3e:c6:7d:84:b0:e8:ee:b7:c5:93:b7: eb:67:67:3c:f2:f5:f0:2e:ed:21:af:91:60:38:5b:6e:b3:73: 37:25:08:a2:e3:51:8e:af:b1:0b:d6:e1:ed:63:75:b6:db:b4: 99:6f:a8:5d:47:5f:41:60:c0:9c:16:72:ae:91:77:20:15:ea: 55:3b:17:db:8f:dd:db:21:e3:17:85:01:aa:8a:13:55:df:19: 48:ab:07:8b:c0:e2:82:2c:12:c1:70:67:9f:ce:f5:4f:46:02: ae:ed:e8:2f:c8:31:57:9d:88:16:9f:70:d7:57:cc:a8:2b:a1: 13:7e:12:87:4d:9a:e9:be:01:cc:37:f7:9d:fd:71:e5:bb:4a: d9:5f:a5:70:1f:19:c9:ca:bc:15:19:cf:27:f1:dd:ad:8b:65: ed:72:9c:66:f0:9a:18:2b:b9:ea:7a:bf:b2:be:77:94:85:8a: 61:51:60:c0:50:08:6a:61:af:a3:24:58:cd:5c:da:1f:56:70: 40:92:b3:ae:1f:dd:68:8b:17:aa:31:73:90:fe:94:98:4a:8d: 54:60:18:7d:95:51:09:2b:88:b4:c8:a6:28:4a:d6:ac:a4:44: 78:c0:b6:09 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIR64fXSSqo2zzZV2cMqLFDx4oVwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOERENzEwNTM0REY2OEFBQjA4MzYxRUUyODMwNkI4RkRF RTcxRDE0NDAeFw0yNjA3MjMyMTQxMzVaFw0yNjA3MjUwMTIxMzVaMDMxMTAvBgNV BAMTKEM5NDg1QzAzQ0RDNDdGNjNDQkEyODNCNEI0RDQ0RTUzMkQ1RjY5RDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCLm5PftCKKiyFY9XiDAryB15dg hn5my8SWVwlsISvkEdZNCqMJa4or+JGPOtzFiMWNorFnZvUGnNhYBMUIT3cKFosq 31olqwzQSZamt4Umc/qGYDy4Gzh5CzMrjillQw+pRvd0jpHH6kasTr02MDXpUa/u d8WkahuoHKvPomGGaxAWNTWkpj53Wn/TqGQcnU8Nt/wYwQOV0hxz9PTCnjIk0h1e LiJGPU8DI5qNPqE+Ey8oU8PqMexcfM9PmbgTWzrHKf20bbM+WeAy4ZWDrNq4MlxM aUBhBmRLdX0C52WDR3Vn8nhU0Gt78CP7sg2JSYjmVTH64DSgug+cVVBFE6f/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyUhcA83Ef2PLooO0tNROUy1fadcwHwYDVR0j BBgwFoAUjdcQU032iqsINh7igwa4/e5x0UQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjcyNGU0NWItMjU0Yi00ZmViLWJmOGUtN2JmMTIwOTEyYWY3LzAvOERENzEwNTM0 REY2OEFBQjA4MzYxRUUyODMwNkI4RkRFRTcxRDE0NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84REQ3MTA1MzRERjY4QUFCMDgzNjFFRTI4MzA2QjhGREVFNzFE MTQ0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjcyNGU0NWItMjU0Yi00ZmViLWJm OGUtN2JmMTIwOTEyYWY3LzAvOERENzEwNTM0REY2OEFBQjA4MzYxRUUyODMwNkI4 RkRFRTcxRDE0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGDNHPB8Q1dlif/6xtp2gANeE19mo48RVdc+ xn2EsOjut8WTt+tnZzzy9fAu7SGvkWA4W26zczclCKLjUY6vsQvW4e1jdbbbtJlv qF1HX0FgwJwWcq6RdyAV6lU7F9uP3dsh4xeFAaqKE1XfGUirB4vA4oIsEsFwZ5/O 9U9GAq7t6C/IMVediBafcNdXzKgroRN+EodNmum+Acw39539ceW7StlfpXAfGcnK vBUZzyfx3a2LZe1ynGbwmhgruep6v7K+d5SFimFRYMBQCGphr6MkWM1c2h9WcECS s64f3WiLF6oxc5D+lJhKjVRgGH2VUQkriLTIpihK1qykRHjAtgk= -----END CERTIFICATE-----Generated at Fri Jul 24 01:19:02 2026 by rpki-client