$ rpki-client -vvf rpki-rsync.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/D8CB7F8B5666E07E57CBEFC023C6F60346F29D7F.mft File: D8CB7F8B5666E07E57CBEFC023C6F60346F29D7F.mft (raw, json) Hash identifier: TJWhcNaFd7RKkeGQ1PVNO64KVTcwnIddYKeXqDz9t8k= Subject key identifier: C5:F5:8A:00:29:FB:10:79:A4:2B:57:15:07:70:E8:33:49:DB:43:DA Authority key identifier: D8:CB:7F:8B:56:66:E0:7E:57:CB:EF:C0:23:C6:F6:03:46:F2:9D:7F Certificate issuer: /CN=D8CB7F8B5666E07E57CBEFC023C6F60346F29D7F Certificate serial: 403763CF7D850F0CCE3156A5B94BE7BDE590BA29 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D8CB7F8B5666E07E57CBEFC023C6F60346F29D7F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/D8CB7F8B5666E07E57CBEFC023C6F60346F29D7F.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 14:32:41 +0000 Manifest this update: Thu 23 Jul 2026 14:27:41 +0000 Manifest next update: Fri 24 Jul 2026 16:27:41 +0000 Files and hashes: 1: 3130332e3130372e3137372e302f32342d3234203d3e20313530393434.roa (hash: 4zjQiDOO1u6032UYBIQ3bbHO8yvV/zbc51HnTLw1PKM=) 2: 3130332e3130372e3137362e302f32332d3233203d3e20313530393434.roa (hash: BSuw1whkNZvJE4R4/j402PtZbyO7u4uvse4a8U9c4JA=) 3: 3130332e3130372e3137362e302f32342d3234203d3e20313530393434.roa (hash: aqo6iqJhHng8SceS0GB2zDkvhHekA+jqXPQYRYjWZBA=) 4: D8CB7F8B5666E07E57CBEFC023C6F60346F29D7F.crl (hash: PhngQQF7zQFfHaWTqf9jY7OnPVLK0kQnZPgxDRrNBPA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/D8CB7F8B5666E07E57CBEFC023C6F60346F29D7F.crl rsync://rpki-rsync.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/D8CB7F8B5666E07E57CBEFC023C6F60346F29D7F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D8CB7F8B5666E07E57CBEFC023C6F60346F29D7F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 16:27:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:37:63:cf:7d:85:0f:0c:ce:31:56:a5:b9:4b:e7:bd:e5:90:ba:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D8CB7F8B5666E07E57CBEFC023C6F60346F29D7F Validity Not Before: Jul 23 14:27:41 2026 GMT Not After : Jul 24 16:27:41 2026 GMT Subject: CN=C5F58A0029FB1079A42B57150770E83349DB43DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:52:67:2e:37:da:f4:6a:e5:c9:fb:f7:aa:fd: eb:33:d0:43:96:84:23:da:fe:88:55:80:69:f1:83: cc:fd:74:a4:08:72:96:92:cb:25:52:09:32:a2:63: 80:c4:14:be:1f:dd:06:d5:c0:59:57:73:b9:3c:cb: d6:0d:8c:96:90:76:6b:1b:55:ab:39:12:84:36:ed: 0f:74:bc:ea:2d:f3:89:d3:0f:87:27:f1:d8:59:19: 2d:bc:ab:b7:bb:68:7a:c0:08:e7:9a:84:90:60:41: 88:af:1f:a1:67:6a:2d:39:b5:91:76:18:7c:cb:19: 53:60:11:e5:38:ac:6f:bb:c0:46:fe:e3:97:09:29: 3d:db:9d:02:3d:d7:57:38:29:b9:17:69:40:29:2e: 8f:2a:7c:15:83:75:a8:13:dc:12:8b:48:75:22:f3: 42:5e:92:1b:3f:55:f6:59:2e:be:c1:a5:2d:cd:98: c8:d1:ed:9f:8c:8f:d3:d3:2e:82:ea:b3:43:af:c3: a4:a2:43:dd:4c:5c:c1:9b:f9:15:57:69:ea:9f:6f: f5:88:ee:e4:ff:aa:e4:45:48:6f:e0:71:76:9c:b5: 9f:f3:41:4c:a9:db:15:83:af:6d:9c:f4:e2:75:1d: a8:4d:e6:f5:63:45:16:f2:73:66:18:d5:11:86:3e: a8:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:F5:8A:00:29:FB:10:79:A4:2B:57:15:07:70:E8:33:49:DB:43:DA X509v3 Authority Key Identifier: keyid:D8:CB:7F:8B:56:66:E0:7E:57:CB:EF:C0:23:C6:F6:03:46:F2:9D:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/D8CB7F8B5666E07E57CBEFC023C6F60346F29D7F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D8CB7F8B5666E07E57CBEFC023C6F60346F29D7F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/D8CB7F8B5666E07E57CBEFC023C6F60346F29D7F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:3e:64:2c:d3:ee:ad:48:74:f0:da:31:eb:cf:4d:93:5a:d6: 83:6d:1b:f7:bd:4c:25:7e:cf:12:8c:06:1a:0b:ec:a8:ed:80: cb:cf:91:0e:f4:00:35:0f:38:d3:90:f9:d9:8d:96:4c:0e:f6: dd:0c:88:06:b7:64:04:5e:e1:64:63:f8:06:3c:45:bb:6b:eb: b2:01:59:eb:92:5d:7e:70:41:60:52:d8:b8:60:54:12:4f:27: db:87:12:b0:b2:a7:46:d2:13:d9:77:08:2a:16:84:16:b3:72: 2d:d6:b2:81:57:44:2e:a3:9d:20:9a:2b:f3:61:62:fe:79:e3: f0:27:33:17:ab:77:bb:9b:25:74:a1:97:8d:b1:5f:5f:06:65: 00:c2:79:e4:18:cf:58:28:3a:48:a3:c9:a4:29:be:08:ff:d9: 0e:b9:49:ea:b4:aa:6a:c6:24:e7:79:99:e5:f4:76:ae:b0:91: 82:14:8e:a9:da:b1:2c:cd:dd:ff:f9:3d:ad:21:3a:39:cd:3c: 44:40:da:5e:2b:d1:51:61:1c:32:d1:23:4d:3a:e1:e2:98:73: 88:b6:2b:5b:14:1b:a2:5e:01:7b:7b:ef:94:75:e3:91:1b:ee: 30:f4:fa:7b:25:26:e3:e4:77:b7:a5:64:77:b2:5a:61:4e:c5: 51:0f:0f:42 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQDdjz32FDwzOMValuUvnveWQuikwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDhDQjdGOEI1NjY2RTA3RTU3Q0JFRkMwMjNDNkY2MDM0 NkYyOUQ3RjAeFw0yNjA3MjMxNDI3NDFaFw0yNjA3MjQxNjI3NDFaMDMxMTAvBgNV BAMTKEM1RjU4QTAwMjlGQjEwNzlBNDJCNTcxNTA3NzBFODMzNDlEQjQzREEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbUmcuN9r0auXJ+/eq/esz0EOW hCPa/ohVgGnxg8z9dKQIcpaSyyVSCTKiY4DEFL4f3QbVwFlXc7k8y9YNjJaQdmsb Vas5EoQ27Q90vOot84nTD4cn8dhZGS28q7e7aHrACOeahJBgQYivH6Fnai05tZF2 GHzLGVNgEeU4rG+7wEb+45cJKT3bnQI911c4KbkXaUApLo8qfBWDdagT3BKLSHUi 80Jekhs/VfZZLr7BpS3NmMjR7Z+Mj9PTLoLqs0Ovw6SiQ91MXMGb+RVXaeqfb/WI 7uT/quRFSG/gcXactZ/zQUyp2xWDr22c9OJ1HahN5vVjRRbyc2YY1RGGPqhJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxfWKACn7EHmkK1cVB3DoM0nbQ9owHwYDVR0j BBgwFoAU2Mt/i1Zm4H5Xy+/AI8b2A0bynX8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDM2YWIwNGQtNjhjNy00MjQ5LWIxMDktNDZiMjhjZjgwM2YzLzAvRDhDQjdGOEI1 NjY2RTA3RTU3Q0JFRkMwMjNDNkY2MDM0NkYyOUQ3Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EOENCN0Y4QjU2NjZFMDdFNTdDQkVGQzAyM0M2RjYwMzQ2RjI5 RDdGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDM2YWIwNGQtNjhjNy00MjQ5LWIx MDktNDZiMjhjZjgwM2YzLzAvRDhDQjdGOEI1NjY2RTA3RTU3Q0JFRkMwMjNDNkY2 MDM0NkYyOUQ3Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGw+ZCzT7q1IdPDaMevPTZNa1oNtG/e9TCV+ zxKMBhoL7KjtgMvPkQ70ADUPONOQ+dmNlkwO9t0MiAa3ZARe4WRj+AY8Rbtr67IB WeuSXX5wQWBS2LhgVBJPJ9uHErCyp0bSE9l3CCoWhBazci3WsoFXRC6jnSCaK/Nh Yv554/AnMxerd7ubJXShl42xX18GZQDCeeQYz1goOkijyaQpvgj/2Q65Seq0qmrG JOd5meX0dq6wkYIUjqnasSzN3f/5Pa0hOjnNPERA2l4r0VFhHDLRI0064eKYc4i2 K1sUG6JeAXt775R145Eb7jD0+nslJuPkd7elZHeyWmFOxVEPD0I= -----END CERTIFICATE-----Generated at Fri Jul 24 08:54:17 2026 by rpki-client