$ rpki-client -vvf rpki-rsync.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/8AE9BB21003E87396CEDD7898B4A50424E8CEC8F.mft File: 8AE9BB21003E87396CEDD7898B4A50424E8CEC8F.mft (raw, json) Hash identifier: HMtzA5gk5/7jZIILw6tgRzlZtBMricd0S3vmfYWHsmM= Subject key identifier: 56:56:FC:C4:7C:8C:40:A3:DE:60:3B:11:5E:6E:73:74:69:F9:D7:C2 Authority key identifier: 8A:E9:BB:21:00:3E:87:39:6C:ED:D7:89:8B:4A:50:42:4E:8C:EC:8F Certificate issuer: /CN=8AE9BB21003E87396CEDD7898B4A50424E8CEC8F Certificate serial: 3F85C5B333E7E538AD74C7B71380A62E58810F61 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8AE9BB21003E87396CEDD7898B4A50424E8CEC8F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/8AE9BB21003E87396CEDD7898B4A50424E8CEC8F.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 15:39:04 +0000 Manifest this update: Thu 23 Jul 2026 15:34:04 +0000 Manifest next update: Fri 24 Jul 2026 18:53:04 +0000 Files and hashes: 1: 34352e3132372e3133332e302f32342d3234203d3e203538343737.roa (hash: icfsfhUwquzTy2StQKBYwmmyOmAVCsssAYK5CyA5iDI=) 2: 34352e3132372e3133342e302f32342d3234203d3e203538343737.roa (hash: rkn+DI7lNxqSqCTlwACNzV0qOshNnDXKFLIZsdocYhE=) 3: 3130332e35362e3230362e302f32342d3234203d3e203538343737.roa (hash: CVqG9mh1X9V1ZbC6R/r5UJJ2xSfzA9r4RYW1GFYyElI=) 4: 3130332e35362e3230352e302f32342d3234203d3e203538343737.roa (hash: JuQ4cvsB/3E/np6OBFHLGq+Nt4mQQ/GxzLV4MrmhfZo=) 5: 8AE9BB21003E87396CEDD7898B4A50424E8CEC8F.crl (hash: nxlP/S55DFkXYt6MMW9rEYGmevKm/HRdEGa0M8EsAWE=) 6: 34352e3132372e3133352e302f32342d3234203d3e20313335333630.roa (hash: 0WsKsDzY8LPfrJ1pgXZgjbVmTWXixBFTK8YpHb3DNxU=) 7: 34352e3132372e3133322e302f32342d3234203d3e203538343737.roa (hash: pK3Vu7dEPBnTFAw3IDhWOXFOflNVhPv7/JjAZ1e/ubk=) 8: 3130332e35362e3230372e302f32342d3234203d3e203538343737.roa (hash: FdEj2/miSrHrif/CfoOvLE1OV+PuSrA43YH+LmHuPRM=) 9: 3130332e35362e3230342e302f32342d3234203d3e203538343737.roa (hash: ieJoOGDuwtLlA8t0dN5yUaBjAk+rstjVqpks3BBFT2E=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/8AE9BB21003E87396CEDD7898B4A50424E8CEC8F.crl rsync://rpki-rsync.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/8AE9BB21003E87396CEDD7898B4A50424E8CEC8F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8AE9BB21003E87396CEDD7898B4A50424E8CEC8F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 18:53:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:85:c5:b3:33:e7:e5:38:ad:74:c7:b7:13:80:a6:2e:58:81:0f:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8AE9BB21003E87396CEDD7898B4A50424E8CEC8F Validity Not Before: Jul 23 15:34:04 2026 GMT Not After : Jul 24 18:53:04 2026 GMT Subject: CN=5656FCC47C8C40A3DE603B115E6E737469F9D7C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:a2:4e:5f:06:e8:e2:5d:fd:73:ad:39:e6:b9: c4:e1:6b:8c:34:80:10:c4:85:8a:01:3c:2a:bf:2e: ee:a2:d6:87:bd:8a:7a:9a:ae:3d:bd:54:b3:95:5c: 09:66:d8:c3:00:1d:85:47:c2:0c:43:3b:c5:7b:22: 1c:f4:a3:6b:4a:d7:84:4b:28:7e:13:a1:fd:01:e6: 67:b1:91:ad:1a:e0:40:f9:f0:cd:c2:90:e6:ac:77: 2b:ef:ba:20:d1:a6:e0:cc:25:c4:af:2d:90:1d:24: ac:48:a4:38:cf:3f:0e:0b:b3:0c:0b:2f:83:c9:d3: 93:88:4b:b6:65:8b:7b:95:05:13:a3:ff:2e:3b:3d: 85:22:19:55:39:02:67:d9:9e:36:1e:74:20:17:d7: 03:d4:4e:f4:81:96:36:43:68:b9:32:c1:1b:f0:04: e4:15:92:9b:70:78:a0:86:86:5b:a4:d8:99:23:2a: ba:aa:1f:95:c7:4a:3c:3b:b5:26:ed:0e:3e:48:b6: ef:c7:38:d3:a1:47:f6:13:07:f3:13:ca:53:f1:57: 0d:7b:02:8b:f7:f9:d8:2c:bb:ba:f4:7a:7c:4d:98: c5:4d:bd:9c:65:49:82:a1:c7:66:ef:38:97:60:c1: a5:f5:c5:1d:e1:47:e2:d0:70:c8:8b:5b:8f:88:ac: 75:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:56:FC:C4:7C:8C:40:A3:DE:60:3B:11:5E:6E:73:74:69:F9:D7:C2 X509v3 Authority Key Identifier: keyid:8A:E9:BB:21:00:3E:87:39:6C:ED:D7:89:8B:4A:50:42:4E:8C:EC:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/8AE9BB21003E87396CEDD7898B4A50424E8CEC8F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8AE9BB21003E87396CEDD7898B4A50424E8CEC8F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/8AE9BB21003E87396CEDD7898B4A50424E8CEC8F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:61:2f:43:b3:f7:49:b9:7f:f8:b5:79:d2:6f:af:ba:f1:c0: 0d:19:e1:4b:d5:e7:43:1b:87:d4:a3:ec:75:a0:65:6c:90:db: 54:c2:41:e9:ba:c8:4e:56:3e:3e:2a:4e:76:78:6f:91:d9:5c: d8:9b:5b:e9:d1:86:1f:87:d3:45:4e:15:6b:d4:98:a2:c3:0d: 55:85:67:c2:39:b2:dc:08:8b:cd:4a:13:a7:ae:6f:62:86:cd: 68:97:30:49:bb:70:64:6b:10:fd:ec:92:23:80:48:22:08:a7: c6:5e:72:7f:98:9b:9c:4c:6f:4f:11:15:e9:f1:ff:ba:7d:2d: 9b:df:28:98:6b:44:04:f4:48:83:f0:f2:ce:59:b4:90:39:7e: cc:c4:75:da:bd:4f:cd:4c:d1:35:ff:8a:2f:77:ef:f1:d2:19: fa:2a:fb:bb:98:95:46:bc:ec:1c:12:95:56:4c:6c:57:6c:54: af:0b:c5:77:07:0e:64:66:c9:71:4b:97:ef:71:e9:ce:de:04: 54:69:df:c8:ea:06:57:c6:f4:5b:6b:23:92:77:67:30:09:5f: 49:64:ce:21:e0:42:f9:6a:aa:6c:44:00:fd:b4:85:a0:14:02: 71:21:df:96:e3:96:86:3b:7d:8a:88:a7:fa:91:38:79:51:a1: c9:bf:53:fe -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP4XFszPn5TitdMe3E4CmLliBD2EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEFFOUJCMjEwMDNFODczOTZDRURENzg5OEI0QTUwNDI0 RThDRUM4RjAeFw0yNjA3MjMxNTM0MDRaFw0yNjA3MjQxODUzMDRaMDMxMTAvBgNV BAMTKDU2NTZGQ0M0N0M4QzQwQTNERTYwM0IxMTVFNkU3Mzc0NjlGOUQ3QzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWok5fBujiXf1zrTnmucTha4w0 gBDEhYoBPCq/Lu6i1oe9inqarj29VLOVXAlm2MMAHYVHwgxDO8V7Ihz0o2tK14RL KH4Tof0B5mexka0a4ED58M3CkOasdyvvuiDRpuDMJcSvLZAdJKxIpDjPPw4LswwL L4PJ05OIS7Zli3uVBROj/y47PYUiGVU5AmfZnjYedCAX1wPUTvSBljZDaLkywRvw BOQVkptweKCGhluk2JkjKrqqH5XHSjw7tSbtDj5Itu/HONOhR/YTB/MTylPxVw17 Aov3+dgsu7r0enxNmMVNvZxlSYKhx2bvOJdgwaX1xR3hR+LQcMiLW4+IrHVRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVlb8xHyMQKPeYDsRXm5zdGn518IwHwYDVR0j BBgwFoAUium7IQA+hzls7deJi0pQQk6M7I8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDNmOGY1NWMtOWUzNS00Y2UyLTg5MGYtMGRlM2UyNDA0NjExLzAvOEFFOUJCMjEw MDNFODczOTZDRURENzg5OEI0QTUwNDI0RThDRUM4Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84QUU5QkIyMTAwM0U4NzM5NkNFREQ3ODk4QjRBNTA0MjRFOENF QzhGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDNmOGY1NWMtOWUzNS00Y2UyLTg5 MGYtMGRlM2UyNDA0NjExLzAvOEFFOUJCMjEwMDNFODczOTZDRURENzg5OEI0QTUw NDI0RThDRUM4Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGFhL0Oz90m5f/i1edJvr7rxwA0Z4UvV50Mb h9Sj7HWgZWyQ21TCQem6yE5WPj4qTnZ4b5HZXNibW+nRhh+H00VOFWvUmKLDDVWF Z8I5stwIi81KE6eub2KGzWiXMEm7cGRrEP3skiOASCIIp8Zecn+Ym5xMb08RFenx /7p9LZvfKJhrRAT0SIPw8s5ZtJA5fszEddq9T81M0TX/ii937/HSGfoq+7uYlUa8 7BwSlVZMbFdsVK8LxXcHDmRmyXFLl+9x6c7eBFRp38jqBlfG9FtrI5J3ZzAJX0lk ziHgQvlqqmxEAP20haAUAnEh35bjloY7fYqIp/qROHlRocm/U/4= -----END CERTIFICATE-----Generated at Fri Jul 24 10:52:13 2026 by rpki-client