$ rpki-client -vvf rpki-rsync.idnic.net/repo/d7ff01d0-26f9-4b20-a318-c311c267f2af/0/8638D28E3BD2280125963C7B30C34A226398A39F.mft File: 8638D28E3BD2280125963C7B30C34A226398A39F.mft (raw, json) Hash identifier: ul9K91jlMmEUGwjLFLoHRij3vXppFV7dkRCzI90QimI= Subject key identifier: 2B:1F:1D:6C:B7:3C:69:34:0F:96:E7:DB:78:29:9E:2D:95:6C:D0:F9 Authority key identifier: 86:38:D2:8E:3B:D2:28:01:25:96:3C:7B:30:C3:4A:22:63:98:A3:9F Certificate issuer: /CN=8638D28E3BD2280125963C7B30C34A226398A39F Certificate serial: 5E71E19A258F32793945BED4FBB1CDD3BB0D3CE1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8638D28E3BD2280125963C7B30C34A226398A39F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d7ff01d0-26f9-4b20-a318-c311c267f2af/0/8638D28E3BD2280125963C7B30C34A226398A39F.mft Manifest number: 6F Signing time: Fri 24 Jul 2026 00:29:44 +0000 Manifest this update: Fri 24 Jul 2026 00:24:44 +0000 Manifest next update: Sat 25 Jul 2026 01:33:44 +0000 Files and hashes: 1: 3130332e3136362e3135382e302f32342d3234203d3e20313431393535.roa (hash: 7CUUFxXBF00bkdoTMxFKQ2ao9fNDKa33JZ3nwQoI/v0=) 2: 8638D28E3BD2280125963C7B30C34A226398A39F.crl (hash: Ry7IjAT/V6OnW28tPGRFocsAw1tct7UZU9M/V+E+zYY=) 3: 3130332e3136362e3135392e302f32342d3234203d3e20313431393535.roa (hash: K8RuD4iVWNDoq5/nKnK+l+BvrNOPQLNp6COtNPtCMfY=) 4: 3130332e3136362e3135382e302f32332d3233203d3e20313431393535.roa (hash: 9/PIsC2XMlKZxB7OIm0Zr26jWW2WY5JodvXs3A+orYA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d7ff01d0-26f9-4b20-a318-c311c267f2af/0/8638D28E3BD2280125963C7B30C34A226398A39F.crl rsync://rpki-rsync.idnic.net/repo/d7ff01d0-26f9-4b20-a318-c311c267f2af/0/8638D28E3BD2280125963C7B30C34A226398A39F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8638D28E3BD2280125963C7B30C34A226398A39F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 01:33:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:71:e1:9a:25:8f:32:79:39:45:be:d4:fb:b1:cd:d3:bb:0d:3c:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8638D28E3BD2280125963C7B30C34A226398A39F Validity Not Before: Jul 24 00:24:44 2026 GMT Not After : Jul 25 01:33:44 2026 GMT Subject: CN=2B1F1D6CB73C69340F96E7DB78299E2D956CD0F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:f1:e2:ac:08:f1:55:78:46:85:5a:2d:2e:cf: d6:10:1f:d4:c3:09:30:cd:6f:78:77:6a:cb:99:3f: f9:6f:3e:99:a0:2c:f3:cd:e6:1d:ae:92:b2:e1:a5: 78:8b:6b:a7:f3:ed:eb:c5:ea:51:4d:28:6e:50:3f: 7a:25:85:75:84:13:17:7b:f1:42:5b:0e:da:70:04: 40:60:04:e4:15:0f:51:df:76:f9:0b:2f:0c:27:ed: 1d:0d:4a:25:17:73:b9:09:56:ee:ba:a1:a5:b4:46: 9f:09:98:87:b9:f2:8f:2f:16:06:cc:91:ab:55:d7: 59:3c:0f:13:04:d0:d6:21:6d:fa:7d:8e:cc:35:63: 63:00:29:5d:59:b5:9e:23:98:7a:e1:d5:9b:c6:f0: fb:22:58:4e:ac:a5:5b:0d:d5:d1:3c:37:f1:e3:d5: b9:30:3b:53:d6:99:3f:82:26:c6:90:a7:ac:45:e2: a5:06:d9:58:f6:d9:fb:10:78:bc:7c:74:d5:90:c7: f5:17:96:2c:04:3b:ed:21:ad:21:99:52:3b:dd:90: 86:a4:98:80:f0:a7:7b:9d:f1:d7:9f:cd:3a:63:a5: 85:fb:bf:a2:91:ea:02:89:44:9c:8e:3d:07:74:e1: c0:e3:2b:11:69:e4:3c:9f:ab:62:01:70:74:9a:fd: e6:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:1F:1D:6C:B7:3C:69:34:0F:96:E7:DB:78:29:9E:2D:95:6C:D0:F9 X509v3 Authority Key Identifier: keyid:86:38:D2:8E:3B:D2:28:01:25:96:3C:7B:30:C3:4A:22:63:98:A3:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d7ff01d0-26f9-4b20-a318-c311c267f2af/0/8638D28E3BD2280125963C7B30C34A226398A39F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8638D28E3BD2280125963C7B30C34A226398A39F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d7ff01d0-26f9-4b20-a318-c311c267f2af/0/8638D28E3BD2280125963C7B30C34A226398A39F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:13:5a:0e:95:04:5c:6b:6c:50:22:8b:c3:e1:55:ca:5b:b9: bf:aa:6b:a7:d6:90:fd:c6:b2:3c:a8:32:5c:2c:d4:cf:41:e8: cd:99:d9:02:9f:0b:62:84:d8:c3:66:92:9f:96:80:87:18:30: 97:3f:e0:76:75:ef:53:a6:1a:15:58:6f:fa:fe:73:9d:af:59: a9:ab:92:81:7b:c8:42:8a:20:52:e4:88:44:19:0e:5b:14:7d: 26:be:95:07:fb:d1:e6:66:dc:f9:d9:d0:d2:2b:de:54:2a:04: 06:b7:31:08:09:df:5d:29:8c:a8:d0:29:cb:26:ef:30:0a:49: 98:5a:17:8f:78:50:68:52:dd:83:f9:6f:11:32:fe:d2:d3:72: e5:de:1f:fd:35:94:f2:45:e7:12:78:99:34:fa:63:2f:3e:52: a5:09:a6:7a:77:4b:ba:8f:ff:f0:84:2c:88:72:c0:96:4a:13: 98:ea:e2:27:ba:9b:a4:1f:8a:17:29:47:e9:27:3f:0d:a1:db: 82:8e:ff:f4:78:1a:b9:92:d8:62:75:ec:92:e6:1c:22:60:7a: 18:88:55:86:d6:c2:d2:af:3a:54:f8:5f:19:a1:a3:b4:8a:48: bb:ae:23:14:ba:67:8c:0a:77:06:e3:ca:a1:83:78:ab:d0:61: ed:1f:b6:ae -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXnHhmiWPMnk5Rb7U+7HN07sNPOEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODYzOEQyOEUzQkQyMjgwMTI1OTYzQzdCMzBDMzRBMjI2 Mzk4QTM5RjAeFw0yNjA3MjQwMDI0NDRaFw0yNjA3MjUwMTMzNDRaMDMxMTAvBgNV BAMTKDJCMUYxRDZDQjczQzY5MzQwRjk2RTdEQjc4Mjk5RTJEOTU2Q0QwRjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT8eKsCPFVeEaFWi0uz9YQH9TD CTDNb3h3asuZP/lvPpmgLPPN5h2ukrLhpXiLa6fz7evF6lFNKG5QP3olhXWEExd7 8UJbDtpwBEBgBOQVD1HfdvkLLwwn7R0NSiUXc7kJVu66oaW0Rp8JmIe58o8vFgbM katV11k8DxME0NYhbfp9jsw1Y2MAKV1ZtZ4jmHrh1ZvG8PsiWE6spVsN1dE8N/Hj 1bkwO1PWmT+CJsaQp6xF4qUG2Vj22fsQeLx8dNWQx/UXliwEO+0hrSGZUjvdkIak mIDwp3ud8defzTpjpYX7v6KR6gKJRJyOPQd04cDjKxFp5Dyfq2IBcHSa/eZ3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKx8dbLc8aTQPlufbeCmeLZVs0PkwHwYDVR0j BBgwFoAUhjjSjjvSKAElljx7MMNKImOYo58wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDdmZjAxZDAtMjZmOS00YjIwLWEzMTgtYzMxMWMyNjdmMmFmLzAvODYzOEQyOEUz QkQyMjgwMTI1OTYzQzdCMzBDMzRBMjI2Mzk4QTM5Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NjM4RDI4RTNCRDIyODAxMjU5NjNDN0IzMEMzNEEyMjYzOThB MzlGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDdmZjAxZDAtMjZmOS00YjIwLWEz MTgtYzMxMWMyNjdmMmFmLzAvODYzOEQyOEUzQkQyMjgwMTI1OTYzQzdCMzBDMzRB MjI2Mzk4QTM5Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEwTWg6VBFxrbFAii8PhVcpbub+qa6fWkP3G sjyoMlws1M9B6M2Z2QKfC2KE2MNmkp+WgIcYMJc/4HZ171OmGhVYb/r+c52vWamr koF7yEKKIFLkiEQZDlsUfSa+lQf70eZm3PnZ0NIr3lQqBAa3MQgJ310pjKjQKcsm 7zAKSZhaF494UGhS3YP5bxEy/tLTcuXeH/01lPJF5xJ4mTT6Yy8+UqUJpnp3S7qP //CELIhywJZKE5jq4ie6m6QfihcpR+knPw2h24KO//R4GrmS2GJ17JLmHCJgehiI VYbWwtKvOlT4Xxmho7SKSLuuIxS6Z4wKdwbjyqGDeKvQYe0ftq4= -----END CERTIFICATE-----Generated at Fri Jul 24 03:59:31 2026 by rpki-client