$ rpki-client -vvf rpki-rsync.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/B8108C7FBEA42B59A4B00DB4A2DC111BAB709406.mft File: B8108C7FBEA42B59A4B00DB4A2DC111BAB709406.mft (raw, json) Hash identifier: 2Ocz/9o8T6oOSGqma+78pbqbjhDUO+IV4twC/WoPusU= Subject key identifier: F1:13:C5:38:09:0F:EC:3A:2A:7D:3C:C2:B4:5E:F4:5A:23:F1:04:31 Authority key identifier: B8:10:8C:7F:BE:A4:2B:59:A4:B0:0D:B4:A2:DC:11:1B:AB:70:94:06 Certificate issuer: /CN=B8108C7FBEA42B59A4B00DB4A2DC111BAB709406 Certificate serial: 3AF9DF1A811895716EF4049BD948131241F925DB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B8108C7FBEA42B59A4B00DB4A2DC111BAB709406.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/B8108C7FBEA42B59A4B00DB4A2DC111BAB709406.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 13:41:46 +0000 Manifest this update: Thu 23 Jul 2026 13:36:46 +0000 Manifest next update: Fri 24 Jul 2026 15:30:46 +0000 Files and hashes: 1: 3130332e3136302e36382e302f32342d3234203d3e203438343635.roa (hash: g5c7Nq+6t4kiF6CKiothKoqaQ8v25zT/n7Wj9Q/sxEQ=) 2: B8108C7FBEA42B59A4B00DB4A2DC111BAB709406.crl (hash: +MLZGz44b45/1bEdPhf75hTdcfaqkKOAksmDwITK4FE=) 3: 3130332e3136302e36392e302f32342d3234203d3e20313431363037.roa (hash: 9VWfd5KMgyw5xyqB55UR/HJrZNws4qzcvTj6ecqQ/Qk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/B8108C7FBEA42B59A4B00DB4A2DC111BAB709406.crl rsync://rpki-rsync.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/B8108C7FBEA42B59A4B00DB4A2DC111BAB709406.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B8108C7FBEA42B59A4B00DB4A2DC111BAB709406.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 15:30:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:f9:df:1a:81:18:95:71:6e:f4:04:9b:d9:48:13:12:41:f9:25:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8108C7FBEA42B59A4B00DB4A2DC111BAB709406 Validity Not Before: Jul 23 13:36:46 2026 GMT Not After : Jul 24 15:30:46 2026 GMT Subject: CN=F113C538090FEC3A2A7D3CC2B45EF45A23F10431 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:8f:e8:b3:19:13:90:4f:ac:e9:20:57:60:fd: d0:98:bb:b1:9e:d8:ad:91:23:cc:4e:16:83:bc:3d: 14:ca:39:65:b3:4c:c9:90:e2:a7:af:bc:05:0c:dd: 27:ba:a9:33:f1:f3:80:f6:03:b3:09:a1:26:2a:a7: 3b:b5:de:d4:a4:fa:94:b5:6a:ad:f8:55:fe:c0:26: f3:aa:2d:01:5f:53:ac:d0:20:90:98:e9:47:25:c8: d2:93:86:55:34:85:6b:4c:1a:4b:3a:88:ed:a6:85: 7b:05:97:74:4d:66:27:31:4a:e0:28:b4:af:52:10: 25:e7:cd:77:92:1a:eb:34:4e:c0:bb:98:f4:0a:5a: b8:00:7f:93:05:64:cf:58:e3:ad:a8:80:26:3f:2f: e0:ca:42:60:37:bf:58:7e:4e:fa:f7:a1:f7:38:61: 0b:00:89:1c:41:e2:8b:d9:14:ab:28:55:22:35:a2: 52:ed:8f:55:ea:66:99:37:e4:6e:09:26:b5:22:4e: cd:0e:52:27:d6:3b:8b:d0:bd:ac:62:4d:fd:37:e9: 32:86:76:38:b4:c9:98:1f:14:05:c2:89:b1:ba:cf: 91:4d:0f:f0:a4:d9:8f:42:92:c0:df:2f:b0:99:4b: 8e:d7:56:cf:2e:b1:6b:98:30:57:6c:c3:ea:f6:a8: ac:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:13:C5:38:09:0F:EC:3A:2A:7D:3C:C2:B4:5E:F4:5A:23:F1:04:31 X509v3 Authority Key Identifier: keyid:B8:10:8C:7F:BE:A4:2B:59:A4:B0:0D:B4:A2:DC:11:1B:AB:70:94:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/B8108C7FBEA42B59A4B00DB4A2DC111BAB709406.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B8108C7FBEA42B59A4B00DB4A2DC111BAB709406.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/B8108C7FBEA42B59A4B00DB4A2DC111BAB709406.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:2e:2c:57:c6:84:56:67:e0:6d:76:ab:01:b6:a4:c5:90:9f: 0c:0a:dd:11:01:88:d9:01:ef:a8:a2:5f:a2:10:05:bc:9a:4d: e5:5a:8e:35:d0:90:a3:5c:f5:23:be:53:4c:4c:b7:71:44:16: 73:47:60:fb:8b:b1:c6:65:f6:eb:35:ce:f3:54:0e:db:67:5d: 31:a1:3f:93:f7:29:62:9b:c7:43:5b:3f:63:43:77:eb:a4:e5: 69:7a:85:64:9b:c7:e0:36:6e:eb:bf:8a:3e:84:cb:8c:2b:a4: e5:e4:dc:12:a6:e8:d8:97:80:12:e2:c8:d2:49:60:fe:cb:f6: c9:33:8e:a1:44:4b:b8:e4:86:ce:58:ec:d5:83:04:52:00:18: b5:ca:96:4f:62:bd:b6:f8:98:7b:1e:69:07:e4:da:d6:b1:ad: 0b:a0:dd:06:c4:b0:e8:49:ac:37:57:a9:ea:13:a3:c0:d4:87: bd:5e:4e:f5:69:9d:60:42:3a:d1:f3:5c:0f:90:ac:93:06:85: 97:ed:f8:e4:ed:80:ee:4e:ba:6f:e6:d6:7a:1f:d3:0a:f9:ab: 1c:69:13:ec:a4:3e:4d:b2:26:db:6c:53:f5:d1:b0:a7:db:ca: 8d:50:5b:30:ae:18:20:a1:d9:0f:ff:53:42:0a:d2:ab:b9:7d: df:d0:6c:19 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOvnfGoEYlXFu9ASb2UgTEkH5JdswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjgxMDhDN0ZCRUE0MkI1OUE0QjAwREI0QTJEQzExMUJB QjcwOTQwNjAeFw0yNjA3MjMxMzM2NDZaFw0yNjA3MjQxNTMwNDZaMDMxMTAvBgNV BAMTKEYxMTNDNTM4MDkwRkVDM0EyQTdEM0NDMkI0NUVGNDVBMjNGMTA0MzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5j+izGROQT6zpIFdg/dCYu7Ge 2K2RI8xOFoO8PRTKOWWzTMmQ4qevvAUM3Se6qTPx84D2A7MJoSYqpzu13tSk+pS1 aq34Vf7AJvOqLQFfU6zQIJCY6UclyNKThlU0hWtMGks6iO2mhXsFl3RNZicxSuAo tK9SECXnzXeSGus0TsC7mPQKWrgAf5MFZM9Y462ogCY/L+DKQmA3v1h+Tvr3ofc4 YQsAiRxB4ovZFKsoVSI1olLtj1XqZpk35G4JJrUiTs0OUifWO4vQvaxiTf036TKG dji0yZgfFAXCibG6z5FND/Ck2Y9CksDfL7CZS47XVs8usWuYMFdsw+r2qKyPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8RPFOAkP7DoqfTzCtF70WiPxBDEwHwYDVR0j BBgwFoAUuBCMf76kK1mksA20otwRG6twlAYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGFjNzlmYmUtNDc5MC00NmJlLWI5YjItMDM1OWIxYTE4ZTMzLzAvQjgxMDhDN0ZC RUE0MkI1OUE0QjAwREI0QTJEQzExMUJBQjcwOTQwNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CODEwOEM3RkJFQTQyQjU5QTRCMDBEQjRBMkRDMTExQkFCNzA5 NDA2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGFjNzlmYmUtNDc5MC00NmJlLWI5 YjItMDM1OWIxYTE4ZTMzLzAvQjgxMDhDN0ZCRUE0MkI1OUE0QjAwREI0QTJEQzEx MUJBQjcwOTQwNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGMuLFfGhFZn4G12qwG2pMWQnwwK3REBiNkB 76iiX6IQBbyaTeVajjXQkKNc9SO+U0xMt3FEFnNHYPuLscZl9us1zvNUDttnXTGh P5P3KWKbx0NbP2NDd+uk5Wl6hWSbx+A2buu/ij6Ey4wrpOXk3BKm6NiXgBLiyNJJ YP7L9skzjqFES7jkhs5Y7NWDBFIAGLXKlk9ivbb4mHseaQfk2taxrQug3QbEsOhJ rDdXqeoTo8DUh71eTvVpnWBCOtHzXA+QrJMGhZft+OTtgO5Oum/m1nof0wr5qxxp E+ykPk2yJttsU/XRsKfbyo1QWzCuGCCh2Q//U0IK0qu5fd/QbBk= -----END CERTIFICATE-----Generated at Fri Jul 24 05:12:56 2026 by rpki-client