$ rpki-client -vvf rpki-rsync.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/F8E9D48D17CC38E34CBFC74B5C07F4A9B1EBD214.mft File: F8E9D48D17CC38E34CBFC74B5C07F4A9B1EBD214.mft (raw, json) Hash identifier: dZFfeAI5G/STHGXhXhADPTm3CZ4czfTaQIjvcD5tPH8= Subject key identifier: 78:4C:DF:72:A7:15:71:05:18:56:7F:EB:B6:34:36:6C:7C:A8:33:1D Authority key identifier: F8:E9:D4:8D:17:CC:38:E3:4C:BF:C7:4B:5C:07:F4:A9:B1:EB:D2:14 Certificate issuer: /CN=F8E9D48D17CC38E34CBFC74B5C07F4A9B1EBD214 Certificate serial: 7DB1124D35E906845EC1CEE41196B563AF99BE1B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8E9D48D17CC38E34CBFC74B5C07F4A9B1EBD214.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/F8E9D48D17CC38E34CBFC74B5C07F4A9B1EBD214.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 15:08:26 +0000 Manifest this update: Thu 23 Jul 2026 15:03:26 +0000 Manifest next update: Fri 24 Jul 2026 17:11:26 +0000 Files and hashes: 1: 3130332e3132362e3137342e302f32342d3234203d3e20313338313132.roa (hash: VGZWopnP5E+cpki2YrX/ob7V+wdxOvea5qW0A+eDkWM=) 2: 3130332e3132362e3137322e302f32342d3234203d3e20313338313132.roa (hash: 9E/Ti671GF/WZdUwZ2RH1G2YB9kJfWY4JlzPZetlvoI=) 3: F8E9D48D17CC38E34CBFC74B5C07F4A9B1EBD214.crl (hash: 6lFQZfbY0RZh1nAo1/aKoVVmgt+SIVhk1FrIcZAEf4s=) 4: 3130332e3132362e3137332e302f32342d3234203d3e20313338313132.roa (hash: prj58PGbUwDLvrT9h5jO7nMgDDmjvocJnN5ph+z3PrU=) 5: 3130332e3132362e3137352e302f32342d3234203d3e20313338313132.roa (hash: rPbVerJ1hIqpxViNC0hFDNp8HCiflf0mjWJTLUhjlFU=) 6: 323430343a6563303a3a2f33322d3332203d3e20313338313132.roa (hash: ebJX0xmBUCyzAXEckdnMbEf0pSEsLD4g9s9OXuyGYmM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/F8E9D48D17CC38E34CBFC74B5C07F4A9B1EBD214.crl rsync://rpki-rsync.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/F8E9D48D17CC38E34CBFC74B5C07F4A9B1EBD214.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8E9D48D17CC38E34CBFC74B5C07F4A9B1EBD214.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 17:11:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:b1:12:4d:35:e9:06:84:5e:c1:ce:e4:11:96:b5:63:af:99:be:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8E9D48D17CC38E34CBFC74B5C07F4A9B1EBD214 Validity Not Before: Jul 23 15:03:26 2026 GMT Not After : Jul 24 17:11:26 2026 GMT Subject: CN=784CDF72A715710518567FEBB634366C7CA8331D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:1f:a0:44:80:49:c1:7f:7b:e9:b6:a3:15:56: 70:3a:5c:47:19:f9:6d:48:6b:2e:64:8e:3f:30:ea: 03:f4:c8:b8:5c:5e:29:82:b2:09:99:7f:fd:45:fd: 92:49:0f:cb:65:e8:d6:10:57:e4:51:7f:f6:bb:82: 46:bb:ad:a6:37:38:76:1e:4d:6f:2b:db:d2:91:70: e4:26:51:92:c5:ae:ab:0b:0a:bc:74:c9:6e:d7:6b: d3:2e:da:df:80:e2:8b:a9:a5:42:05:2b:5e:42:28: bd:db:a4:59:1d:1a:67:c2:fd:14:11:2e:11:73:6d: a2:88:20:ed:8b:a3:42:6d:34:4c:7d:a3:ad:c6:38: 42:0a:74:2f:95:cc:a2:f0:c4:94:b4:04:5a:6c:40: 1d:19:ae:e6:b4:60:67:1e:5a:09:25:9b:e3:e1:00: bb:9f:a9:86:64:4b:33:dc:87:bc:16:50:3d:c3:81: 65:6e:29:43:54:75:15:5a:6e:d2:70:81:88:43:71: 71:05:7e:34:74:83:45:13:51:af:f6:46:0e:68:6d: 14:b6:60:5a:82:d2:05:7c:78:c9:a3:6d:26:e5:c4: 0e:e6:5d:ce:34:4e:25:a4:bf:90:ef:b2:48:ea:15: 9a:7c:37:d2:01:71:12:89:2f:71:3f:22:2d:a1:9e: 2d:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:4C:DF:72:A7:15:71:05:18:56:7F:EB:B6:34:36:6C:7C:A8:33:1D X509v3 Authority Key Identifier: keyid:F8:E9:D4:8D:17:CC:38:E3:4C:BF:C7:4B:5C:07:F4:A9:B1:EB:D2:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/F8E9D48D17CC38E34CBFC74B5C07F4A9B1EBD214.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8E9D48D17CC38E34CBFC74B5C07F4A9B1EBD214.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/F8E9D48D17CC38E34CBFC74B5C07F4A9B1EBD214.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:5f:a1:e1:39:4f:a8:6f:3c:45:b0:45:d6:c5:b3:fb:95:9f: 03:a0:5a:3a:e7:b3:5c:74:be:96:95:84:9e:2e:e3:c4:e7:a1: 25:2b:7c:51:37:98:cc:19:2b:d8:32:92:b8:6f:76:d9:c2:4c: 3f:5e:f8:c8:1b:91:8e:df:fb:ab:4c:b4:d1:1c:ed:19:52:6f: 16:1b:1a:6e:6e:9d:23:4e:dc:0a:9e:cb:2a:b8:47:f9:4f:01: 74:d0:be:bf:ee:b9:a4:c3:93:fe:ca:9f:33:a1:38:1a:42:2b: 62:da:76:ca:71:53:15:97:3a:ca:36:e2:22:4d:56:15:c7:20: 87:45:f8:63:55:f1:ba:33:a5:99:10:e1:a4:bb:9f:80:eb:cb: b7:83:d7:fa:06:2b:31:50:42:53:d0:32:6e:71:00:df:80:41: 76:1a:39:09:56:96:51:8c:9b:65:33:21:04:fa:fb:10:30:4e: 8a:ff:0d:76:fb:bc:89:d0:5f:a3:da:09:56:16:00:44:9f:a6: a0:0d:3e:29:c9:04:b1:4b:1e:26:6e:17:f7:7d:88:c6:56:5f: 14:27:58:fb:87:54:03:1e:bc:f9:5e:f0:1a:a8:6e:43:4e:ca: e7:48:6d:15:73:7b:2c:1d:4f:ae:5d:fd:44:2c:9c:ad:68:0f: 09:fb:b9:8a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfbESTTXpBoRewc7kEZa1Y6+ZvhswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhFOUQ0OEQxN0NDMzhFMzRDQkZDNzRCNUMwN0Y0QTlC MUVCRDIxNDAeFw0yNjA3MjMxNTAzMjZaFw0yNjA3MjQxNzExMjZaMDMxMTAvBgNV BAMTKDc4NENERjcyQTcxNTcxMDUxODU2N0ZFQkI2MzQzNjZDN0NBODMzMUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpH6BEgEnBf3vptqMVVnA6XEcZ +W1Iay5kjj8w6gP0yLhcXimCsgmZf/1F/ZJJD8tl6NYQV+RRf/a7gka7raY3OHYe TW8r29KRcOQmUZLFrqsLCrx0yW7Xa9Mu2t+A4ouppUIFK15CKL3bpFkdGmfC/RQR LhFzbaKIIO2Lo0JtNEx9o63GOEIKdC+VzKLwxJS0BFpsQB0Zrua0YGceWgklm+Ph ALufqYZkSzPch7wWUD3DgWVuKUNUdRVabtJwgYhDcXEFfjR0g0UTUa/2Rg5obRS2 YFqC0gV8eMmjbSblxA7mXc40TiWkv5DvskjqFZp8N9IBcRKJL3E/Ii2hni0TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeEzfcqcVcQUYVn/rtjQ2bHyoMx0wHwYDVR0j BBgwFoAU+OnUjRfMOONMv8dLXAf0qbHr0hQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGRiOGQ5MDgtMWI5OS00NTVjLWFjNzYtOGQ2MjRkZmE0M2I2LzAvRjhFOUQ0OEQx N0NDMzhFMzRDQkZDNzRCNUMwN0Y0QTlCMUVCRDIxNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GOEU5RDQ4RDE3Q0MzOEUzNENCRkM3NEI1QzA3RjRBOUIxRUJE MjE0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGRiOGQ5MDgtMWI5OS00NTVjLWFj NzYtOGQ2MjRkZmE0M2I2LzAvRjhFOUQ0OEQxN0NDMzhFMzRDQkZDNzRCNUMwN0Y0 QTlCMUVCRDIxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHZfoeE5T6hvPEWwRdbFs/uVnwOgWjrns1x0 vpaVhJ4u48TnoSUrfFE3mMwZK9gykrhvdtnCTD9e+MgbkY7f+6tMtNEc7RlSbxYb Gm5unSNO3Aqeyyq4R/lPAXTQvr/uuaTDk/7KnzOhOBpCK2LadspxUxWXOso24iJN VhXHIIdF+GNV8bozpZkQ4aS7n4Dry7eD1/oGKzFQQlPQMm5xAN+AQXYaOQlWllGM m2UzIQT6+xAwTor/DXb7vInQX6PaCVYWAESfpqANPinJBLFLHiZuF/d9iMZWXxQn WPuHVAMevPle8BqobkNOyudIbRVzeywdT65d/UQsnK1oDwn7uYo= -----END CERTIFICATE-----Generated at Fri Jul 24 08:53:42 2026 by rpki-client