$ rpki-client -vvf rpki-rsync.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/8AE9BB21003E87396CEDD7898B4A50424E8CEC8F.mft File: 8AE9BB21003E87396CEDD7898B4A50424E8CEC8F.mft (raw, json) Hash identifier: C8WJElPsYQMv6lzTkcUeENeYEEtDSL3/pZSY0GR+j5Y= Subject key identifier: B2:0F:8B:94:C3:47:F6:07:3E:F1:87:E3:28:37:65:E2:BE:3C:65:0D Authority key identifier: 8A:E9:BB:21:00:3E:87:39:6C:ED:D7:89:8B:4A:50:42:4E:8C:EC:8F Certificate issuer: /CN=8AE9BB21003E87396CEDD7898B4A50424E8CEC8F Certificate serial: 02596FC1F1F969A2B7854B28EE5519E2434EE7BF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8AE9BB21003E87396CEDD7898B4A50424E8CEC8F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/8AE9BB21003E87396CEDD7898B4A50424E8CEC8F.mft Manifest number: 70 Signing time: Fri 24 Jul 2026 10:57:54 +0000 Manifest this update: Fri 24 Jul 2026 10:52:54 +0000 Manifest next update: Sat 25 Jul 2026 11:14:54 +0000 Files and hashes: 1: 3130332e35362e3230362e302f32342d3234203d3e203538343737.roa (hash: CVqG9mh1X9V1ZbC6R/r5UJJ2xSfzA9r4RYW1GFYyElI=) 2: 8AE9BB21003E87396CEDD7898B4A50424E8CEC8F.crl (hash: GuS45xqKnN84dyEt5U9qPwzGf/E44xO/j7sOhfIhejc=) 3: 34352e3132372e3133322e302f32342d3234203d3e203538343737.roa (hash: pK3Vu7dEPBnTFAw3IDhWOXFOflNVhPv7/JjAZ1e/ubk=) 4: 34352e3132372e3133332e302f32342d3234203d3e203538343737.roa (hash: icfsfhUwquzTy2StQKBYwmmyOmAVCsssAYK5CyA5iDI=) 5: 34352e3132372e3133342e302f32342d3234203d3e203538343737.roa (hash: rkn+DI7lNxqSqCTlwACNzV0qOshNnDXKFLIZsdocYhE=) 6: 3130332e35362e3230372e302f32342d3234203d3e203538343737.roa (hash: FdEj2/miSrHrif/CfoOvLE1OV+PuSrA43YH+LmHuPRM=) 7: 3130332e35362e3230352e302f32342d3234203d3e203538343737.roa (hash: JuQ4cvsB/3E/np6OBFHLGq+Nt4mQQ/GxzLV4MrmhfZo=) 8: 34352e3132372e3133352e302f32342d3234203d3e20313335333630.roa (hash: 0WsKsDzY8LPfrJ1pgXZgjbVmTWXixBFTK8YpHb3DNxU=) 9: 3130332e35362e3230342e302f32342d3234203d3e203538343737.roa (hash: ieJoOGDuwtLlA8t0dN5yUaBjAk+rstjVqpks3BBFT2E=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/8AE9BB21003E87396CEDD7898B4A50424E8CEC8F.crl rsync://rpki-rsync.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/8AE9BB21003E87396CEDD7898B4A50424E8CEC8F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8AE9BB21003E87396CEDD7898B4A50424E8CEC8F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 07:07:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:59:6f:c1:f1:f9:69:a2:b7:85:4b:28:ee:55:19:e2:43:4e:e7:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8AE9BB21003E87396CEDD7898B4A50424E8CEC8F Validity Not Before: Jul 24 10:52:54 2026 GMT Not After : Jul 25 11:14:54 2026 GMT Subject: CN=B20F8B94C347F6073EF187E3283765E2BE3C650D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:46:b9:d4:d1:ad:a2:cf:fa:be:83:39:76:e8: ef:ac:4d:75:6e:43:5f:4e:b9:fe:d3:aa:95:27:b1: 3e:da:61:9f:91:9e:b7:f2:73:4e:68:37:2d:74:af: 08:36:7c:1a:de:e6:72:81:68:6c:a0:40:2c:81:a9: f8:25:e0:fa:04:12:ff:ae:37:05:28:0e:25:25:01: 3e:6a:71:53:a3:ba:7e:1c:11:59:aa:ea:91:1f:d8: 73:8f:e8:83:76:79:29:7a:44:93:11:ae:03:53:8a: 8f:55:7a:13:a8:30:ee:38:ad:79:01:23:10:26:53: 64:24:e8:83:7b:b0:74:75:00:c5:ca:d1:d4:a3:8e: a4:f2:33:98:c3:dd:be:00:48:b0:99:0d:d8:50:52: a5:ab:ee:98:e8:0c:bf:64:c6:dc:d5:5f:16:80:05: fe:05:78:54:d1:5e:ef:39:df:6a:41:91:a1:91:bc: b6:6c:90:09:ed:69:f9:b8:3b:46:58:bc:b2:ac:56: 6c:06:a4:2b:15:d5:a2:42:5a:b2:c9:93:64:7f:b1: 18:5c:c0:8a:db:bd:ab:2e:1a:4a:f9:14:db:ea:57: f2:84:8f:84:74:1b:1e:37:bc:aa:4b:00:fa:a7:7e: 8d:09:33:e0:b6:96:bd:28:9f:5c:46:e3:87:58:65: b9:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:0F:8B:94:C3:47:F6:07:3E:F1:87:E3:28:37:65:E2:BE:3C:65:0D X509v3 Authority Key Identifier: keyid:8A:E9:BB:21:00:3E:87:39:6C:ED:D7:89:8B:4A:50:42:4E:8C:EC:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/8AE9BB21003E87396CEDD7898B4A50424E8CEC8F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8AE9BB21003E87396CEDD7898B4A50424E8CEC8F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/8AE9BB21003E87396CEDD7898B4A50424E8CEC8F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:c0:58:16:c7:bf:80:58:9f:21:bb:21:17:c4:4c:42:af:66: 88:5f:99:87:a9:6d:e9:d0:f1:db:ef:c5:78:af:29:b1:9b:56: 03:45:f6:80:28:69:3d:42:f7:bc:c7:11:9a:7b:3c:e9:e8:af: de:1d:b4:bb:50:79:09:cd:0b:ca:ef:d1:bd:21:19:d5:c2:64: f3:b3:e2:01:03:9c:35:0c:7b:74:1f:b6:13:17:be:94:36:08: 13:90:a8:7c:6e:d7:e8:b9:51:f8:e8:48:de:b4:19:64:96:06: 6c:03:d4:e2:82:79:f6:1f:19:ca:bb:b4:af:5d:6e:af:b9:7c: c6:ed:ce:d4:b0:3d:d0:67:28:38:3e:c8:f7:48:60:f4:e8:e2: 5e:d5:53:81:9f:d7:6b:1d:3a:1b:c0:c5:dc:ac:60:e7:9f:9e: 99:f0:ff:d9:60:36:80:d3:7b:77:d4:15:72:1f:16:5e:4d:50: e9:7a:9b:2f:5c:4e:9e:ba:79:ad:1a:a4:13:ad:1d:6c:ca:9e: 3a:dd:bf:59:cb:fe:03:70:97:b0:6c:37:63:fa:88:7d:9d:b7: 17:17:8c:86:aa:82:88:ae:75:8c:02:42:82:89:3c:12:82:bf: 80:3a:cb:14:85:6c:fd:f8:ad:40:f0:b2:94:38:1a:fe:cb:10: d9:68:a1:aa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAllvwfH5aaK3hUso7lUZ4kNO578wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEFFOUJCMjEwMDNFODczOTZDRURENzg5OEI0QTUwNDI0 RThDRUM4RjAeFw0yNjA3MjQxMDUyNTRaFw0yNjA3MjUxMTE0NTRaMDMxMTAvBgNV BAMTKEIyMEY4Qjk0QzM0N0Y2MDczRUYxODdFMzI4Mzc2NUUyQkUzQzY1MEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3RrnU0a2iz/q+gzl26O+sTXVu Q19Ouf7TqpUnsT7aYZ+Rnrfyc05oNy10rwg2fBre5nKBaGygQCyBqfgl4PoEEv+u NwUoDiUlAT5qcVOjun4cEVmq6pEf2HOP6IN2eSl6RJMRrgNTio9VehOoMO44rXkB IxAmU2Qk6IN7sHR1AMXK0dSjjqTyM5jD3b4ASLCZDdhQUqWr7pjoDL9kxtzVXxaA Bf4FeFTRXu8532pBkaGRvLZskAntafm4O0ZYvLKsVmwGpCsV1aJCWrLJk2R/sRhc wIrbvasuGkr5FNvqV/KEj4R0Gx43vKpLAPqnfo0JM+C2lr0on1xG44dYZbldAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsg+LlMNH9gc+8YfjKDdl4r48ZQ0wHwYDVR0j BBgwFoAUium7IQA+hzls7deJi0pQQk6M7I8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDNmOGY1NWMtOWUzNS00Y2UyLTg5MGYtMGRlM2UyNDA0NjExLzAvOEFFOUJCMjEw MDNFODczOTZDRURENzg5OEI0QTUwNDI0RThDRUM4Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84QUU5QkIyMTAwM0U4NzM5NkNFREQ3ODk4QjRBNTA0MjRFOENF QzhGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDNmOGY1NWMtOWUzNS00Y2UyLTg5 MGYtMGRlM2UyNDA0NjExLzAvOEFFOUJCMjEwMDNFODczOTZDRURENzg5OEI0QTUw NDI0RThDRUM4Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAErAWBbHv4BYnyG7IRfETEKvZohfmYepbenQ 8dvvxXivKbGbVgNF9oAoaT1C97zHEZp7POnor94dtLtQeQnNC8rv0b0hGdXCZPOz 4gEDnDUMe3QfthMXvpQ2CBOQqHxu1+i5UfjoSN60GWSWBmwD1OKCefYfGcq7tK9d bq+5fMbtztSwPdBnKDg+yPdIYPTo4l7VU4Gf12sdOhvAxdysYOefnpnw/9lgNoDT e3fUFXIfFl5NUOl6my9cTp66ea0apBOtHWzKnjrdv1nL/gNwl7BsN2P6iH2dtxcX jIaqgoiudYwCQoKJPBKCv4A6yxSFbP34rUDwspQ4Gv7LENlooao= -----END CERTIFICATE-----Generated at Fri Jul 24 15:08:30 2026 by rpki-client