$ rpki-client -vvf rpki-rsync.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/8D7E0574648D2E037D2147F409FC002E56E42A23.mft File: 8D7E0574648D2E037D2147F409FC002E56E42A23.mft (raw, json) Hash identifier: mfpBCR3Y+YSuTMIcE0ckVFLsuaE+SfHKaSQg5XrNWOM= Subject key identifier: E7:E6:CA:0A:04:20:71:78:B4:05:53:F1:72:74:A3:1D:5F:3D:98:EF Authority key identifier: 8D:7E:05:74:64:8D:2E:03:7D:21:47:F4:09:FC:00:2E:56:E4:2A:23 Certificate issuer: /CN=8D7E0574648D2E037D2147F409FC002E56E42A23 Certificate serial: 5850D476E5CD058ED416E68CEBF89AE72669A929 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8D7E0574648D2E037D2147F409FC002E56E42A23.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/8D7E0574648D2E037D2147F409FC002E56E42A23.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 14:37:47 +0000 Manifest this update: Thu 23 Jul 2026 14:32:47 +0000 Manifest next update: Fri 24 Jul 2026 16:05:47 +0000 Files and hashes: 1: 8D7E0574648D2E037D2147F409FC002E56E42A23.crl (hash: 2XMqe3toEGhIEBt/+iSfkg4VFGoK8JJuepbpUuyK6dQ=) 2: 3130332e3139312e35322e302f32332d3234203d3e2034383030.roa (hash: Wh9jPiaMLmpVJg4WJmhSTDv7ObmHyLTAXzkGZmow5b0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/8D7E0574648D2E037D2147F409FC002E56E42A23.crl rsync://rpki-rsync.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/8D7E0574648D2E037D2147F409FC002E56E42A23.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8D7E0574648D2E037D2147F409FC002E56E42A23.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 16:05:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:50:d4:76:e5:cd:05:8e:d4:16:e6:8c:eb:f8:9a:e7:26:69:a9:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D7E0574648D2E037D2147F409FC002E56E42A23 Validity Not Before: Jul 23 14:32:47 2026 GMT Not After : Jul 24 16:05:47 2026 GMT Subject: CN=E7E6CA0A04207178B40553F17274A31D5F3D98EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:47:81:86:9f:6b:9d:8e:41:ea:08:be:3b:4c: 3a:ef:43:31:0f:0b:5c:75:5f:ce:e5:19:2a:47:e8: 30:ce:42:ac:78:72:d7:66:66:38:4c:e4:cb:8c:b1: ac:f5:6f:23:30:f5:45:00:c6:59:d8:86:ad:e9:46: 3e:6e:99:48:26:a4:51:f0:88:9c:5a:5e:31:4c:82: a8:0b:a1:6d:aa:0c:0d:9e:18:0a:fa:5a:0e:30:b7: 33:61:91:1d:1d:8f:b2:c1:5d:69:70:43:2b:d7:7b: 6b:62:f3:1b:0b:12:0d:d2:6b:ad:60:e6:51:6e:64: fd:90:23:2e:06:ce:db:a0:13:1c:38:cc:04:35:a9: 0b:e0:90:5d:a3:bc:3f:82:ed:cc:59:e0:c3:47:c6: 64:3a:64:5d:1d:99:1b:9c:cd:9e:5e:e2:ff:cb:a9: a5:01:9e:7e:6f:61:d0:8a:e6:3c:4a:e2:1a:dc:71: 65:af:0b:ff:37:40:a8:0d:90:d7:e2:f5:8d:f4:a0: 9c:74:1d:0b:19:af:df:e2:ef:63:7a:8a:06:40:c2: 8a:27:66:e5:ba:1f:ba:d4:3f:18:90:9c:26:93:b6: ed:83:ab:91:fa:c5:8e:ac:19:ce:4e:29:f1:f5:5f: f2:f4:9a:87:7e:ae:cd:90:03:20:00:37:ac:3c:44: 3f:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:E6:CA:0A:04:20:71:78:B4:05:53:F1:72:74:A3:1D:5F:3D:98:EF X509v3 Authority Key Identifier: keyid:8D:7E:05:74:64:8D:2E:03:7D:21:47:F4:09:FC:00:2E:56:E4:2A:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/8D7E0574648D2E037D2147F409FC002E56E42A23.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8D7E0574648D2E037D2147F409FC002E56E42A23.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/8D7E0574648D2E037D2147F409FC002E56E42A23.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:51:7d:a0:3d:8c:4f:2f:a6:7a:8c:b0:61:3f:6e:06:97:b6: cc:d6:60:6d:2a:02:36:2b:42:4d:bf:bf:e2:da:8c:2f:6f:0f: fb:bb:43:59:6f:46:ea:4d:e3:89:f5:0e:5e:ed:38:e1:6b:ce: 25:25:78:10:12:24:c5:06:99:bd:d8:aa:30:ee:61:2f:0a:4a: 63:8b:c6:e3:e4:58:0c:d8:cc:f1:d6:08:fa:d2:ba:55:19:54: 59:18:d3:b9:4f:f3:48:36:ad:4e:1f:49:12:1b:c4:aa:f6:4e: 80:4a:d2:72:91:5f:8f:16:28:35:90:26:05:47:31:b0:68:a2: 5f:79:53:fa:89:e9:10:22:2b:09:ef:86:c9:90:18:7a:1c:f1: c8:ad:35:37:cc:da:7c:46:12:1d:a1:66:fa:02:d0:ea:6f:43: 6f:f9:cc:1d:c1:9c:91:e6:ce:64:ee:0a:1c:65:7f:1a:96:92: 63:c3:ed:f6:a4:cf:81:e3:46:b2:f8:20:55:60:7d:23:34:81: b4:1e:d8:bc:54:8c:94:a1:24:4c:65:19:42:d7:86:e0:6b:95: 30:9a:b9:03:1d:78:e6:92:a6:64:1a:c0:6f:27:fe:b9:35:13: 1b:c0:65:66:72:76:4d:c0:32:af:a1:f9:83:c2:70:81:9d:9b: a8:70:26:78 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWFDUduXNBY7UFuaM6/ia5yZpqSkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEQ3RTA1NzQ2NDhEMkUwMzdEMjE0N0Y0MDlGQzAwMkU1 NkU0MkEyMzAeFw0yNjA3MjMxNDMyNDdaFw0yNjA3MjQxNjA1NDdaMDMxMTAvBgNV BAMTKEU3RTZDQTBBMDQyMDcxNzhCNDA1NTNGMTcyNzRBMzFENUYzRDk4RUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6R4GGn2udjkHqCL47TDrvQzEP C1x1X87lGSpH6DDOQqx4ctdmZjhM5MuMsaz1byMw9UUAxlnYhq3pRj5umUgmpFHw iJxaXjFMgqgLoW2qDA2eGAr6Wg4wtzNhkR0dj7LBXWlwQyvXe2ti8xsLEg3Sa61g 5lFuZP2QIy4GztugExw4zAQ1qQvgkF2jvD+C7cxZ4MNHxmQ6ZF0dmRuczZ5e4v/L qaUBnn5vYdCK5jxK4hrccWWvC/83QKgNkNfi9Y30oJx0HQsZr9/i72N6igZAwoon ZuW6H7rUPxiQnCaTtu2Dq5H6xY6sGc5OKfH1X/L0mod+rs2QAyAAN6w8RD/xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5+bKCgQgcXi0BVPxcnSjHV89mO8wHwYDVR0j BBgwFoAUjX4FdGSNLgN9IUf0CfwALlbkKiMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDlhZmQzMTUtZjQ3Zi00ZjZhLWI4YjUtNDVhMjI4MGJiYzg1LzAvOEQ3RTA1NzQ2 NDhEMkUwMzdEMjE0N0Y0MDlGQzAwMkU1NkU0MkEyMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84RDdFMDU3NDY0OEQyRTAzN0QyMTQ3RjQwOUZDMDAyRTU2RTQy QTIzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDlhZmQzMTUtZjQ3Zi00ZjZhLWI4 YjUtNDVhMjI4MGJiYzg1LzAvOEQ3RTA1NzQ2NDhEMkUwMzdEMjE0N0Y0MDlGQzAw MkU1NkU0MkEyMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKRRfaA9jE8vpnqMsGE/bgaXtszWYG0qAjYr Qk2/v+LajC9vD/u7Q1lvRupN44n1Dl7tOOFrziUleBASJMUGmb3YqjDuYS8KSmOL xuPkWAzYzPHWCPrSulUZVFkY07lP80g2rU4fSRIbxKr2ToBK0nKRX48WKDWQJgVH MbBool95U/qJ6RAiKwnvhsmQGHoc8citNTfM2nxGEh2hZvoC0OpvQ2/5zB3BnJHm zmTuChxlfxqWkmPD7fakz4HjRrL4IFVgfSM0gbQe2LxUjJShJExlGULXhuBrlTCa uQMdeOaSpmQawG8n/rk1ExvAZWZydk3AMq+h+YPCcIGdm6hwJng= -----END CERTIFICATE-----Generated at Fri Jul 24 06:33:58 2026 by rpki-client