$ rpki-client -vvf rpki-rsync.idnic.net/repo/e1af144b-b92e-4fff-b641-e46fdde8c6df/0/A8314E43A1B6F8AFDA8D95E8779C65416911D310.mft File: A8314E43A1B6F8AFDA8D95E8779C65416911D310.mft (raw, json) Hash identifier: kMmW+dvLDY5HvJSrx8rHcsbn3JCtbi9CO3oVz9zaU2I= Subject key identifier: 16:36:B0:CE:CE:7C:44:F1:8E:8C:F3:E3:A0:64:F8:DA:1C:82:2A:E1 Authority key identifier: A8:31:4E:43:A1:B6:F8:AF:DA:8D:95:E8:77:9C:65:41:69:11:D3:10 Certificate issuer: /CN=A8314E43A1B6F8AFDA8D95E8779C65416911D310 Certificate serial: 26BFA88FE45BDD3EF2E33708AF3FD3D8E61F6E8B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A8314E43A1B6F8AFDA8D95E8779C65416911D310.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e1af144b-b92e-4fff-b641-e46fdde8c6df/0/A8314E43A1B6F8AFDA8D95E8779C65416911D310.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 14:02:13 +0000 Manifest this update: Thu 23 Jul 2026 13:57:13 +0000 Manifest next update: Fri 24 Jul 2026 15:49:13 +0000 Files and hashes: 1: 323030313a6466343a393130303a3a2f34382d3438203d3e20313337333233.roa (hash: rj0eAc/Fx3ZnJOzSIDlZ7SEqTTGwaOV3Drw183dIjT4=) 2: 3130332e3131312e3231382e302f32342d3234203d3e20313337333233.roa (hash: GuNiUOOoy6zPyANA8gj8CAZ6aJ70gefpTuHjvXAYLoc=) 3: A8314E43A1B6F8AFDA8D95E8779C65416911D310.crl (hash: 6bEqhXDNLKIPxC7VlnSgiq+DT6DOqgF5wdXoONBJaPM=) 4: 3130332e3131312e3231392e302f32342d3234203d3e20313337333233.roa (hash: 9Ri7gQA5FImbPHcWZvwCuT4KIhatc00BK6BTGVhP2a0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e1af144b-b92e-4fff-b641-e46fdde8c6df/0/A8314E43A1B6F8AFDA8D95E8779C65416911D310.crl rsync://rpki-rsync.idnic.net/repo/e1af144b-b92e-4fff-b641-e46fdde8c6df/0/A8314E43A1B6F8AFDA8D95E8779C65416911D310.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A8314E43A1B6F8AFDA8D95E8779C65416911D310.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 15:49:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:bf:a8:8f:e4:5b:dd:3e:f2:e3:37:08:af:3f:d3:d8:e6:1f:6e:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A8314E43A1B6F8AFDA8D95E8779C65416911D310 Validity Not Before: Jul 23 13:57:13 2026 GMT Not After : Jul 24 15:49:13 2026 GMT Subject: CN=1636B0CECE7C44F18E8CF3E3A064F8DA1C822AE1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:7e:db:c8:69:27:1d:98:ff:f5:d2:77:fa:6c: c6:72:ee:ee:8e:7a:7b:58:9a:80:99:f1:35:46:d0: 8a:62:8f:68:11:11:86:84:78:98:12:c7:b7:24:80: dd:68:e2:02:11:d5:cc:ad:dc:d8:dc:0d:6d:3f:fb: 5f:3a:9d:29:40:76:08:d3:e6:01:e0:17:53:98:aa: e2:01:51:1c:f2:c5:cf:ef:ad:c1:02:08:e5:27:d5: 59:fa:f6:91:20:7c:48:ac:f1:ea:80:95:3f:f0:76: 83:80:ea:dd:d2:22:cb:2f:33:d9:28:d4:e0:a3:79: 34:64:69:c4:03:aa:7a:e4:93:c4:af:f9:79:15:5a: 2a:93:ff:41:4e:38:86:8e:0a:c3:7e:c8:99:e5:ee: ab:e0:df:c6:04:ba:d8:1c:fd:bc:13:15:a4:e2:69: fa:a2:e4:a8:d8:85:00:ab:89:bc:dc:18:2a:92:6b: 7b:84:f0:70:e0:b6:b4:d3:9e:9c:c9:9c:d6:ab:3b: 50:dd:86:9a:c4:08:13:79:fe:cf:65:1d:8d:10:e3: 5c:f4:6e:d8:e4:df:c9:66:45:7b:25:b1:a8:b2:d1: 62:f9:18:9d:b2:80:a0:cf:f5:39:9f:96:7b:45:f3: c1:01:e3:19:61:53:fa:87:94:08:fc:bc:19:c0:db: 74:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:36:B0:CE:CE:7C:44:F1:8E:8C:F3:E3:A0:64:F8:DA:1C:82:2A:E1 X509v3 Authority Key Identifier: keyid:A8:31:4E:43:A1:B6:F8:AF:DA:8D:95:E8:77:9C:65:41:69:11:D3:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e1af144b-b92e-4fff-b641-e46fdde8c6df/0/A8314E43A1B6F8AFDA8D95E8779C65416911D310.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A8314E43A1B6F8AFDA8D95E8779C65416911D310.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e1af144b-b92e-4fff-b641-e46fdde8c6df/0/A8314E43A1B6F8AFDA8D95E8779C65416911D310.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:e4:ec:0c:ed:28:eb:cc:86:48:4e:32:60:66:2e:51:03:18: 63:c4:8b:3b:a4:6f:a3:0e:9f:5f:f3:26:7d:08:43:82:29:46: 7f:99:97:8e:f6:72:20:7b:e7:23:db:62:80:16:7c:dd:28:b9: a4:04:00:2c:7e:0d:ae:b4:56:fc:5f:02:a2:51:8c:12:22:37: 4d:33:ba:02:eb:a6:ca:b5:b0:d0:70:07:de:fa:85:c1:f7:98: d3:33:7d:6a:bb:a9:65:9c:38:48:56:94:20:5f:fd:40:2f:7f: 41:bd:df:4b:79:aa:5f:34:01:82:67:cf:4b:be:12:ab:71:d2: 12:e3:0e:a7:9d:ae:4c:10:7d:f5:a6:ef:3a:df:8b:dc:63:fa: fd:a6:2e:5b:6a:23:54:5b:58:97:25:a1:67:a2:c6:04:8b:75: 18:ce:a2:2d:a2:cb:4e:79:fb:6e:ff:97:d9:10:de:cc:40:51: 06:a9:98:13:46:79:b3:0d:b0:dd:a5:c0:1d:f6:ad:fd:72:7d: 19:bc:a4:4d:6c:db:a2:c5:e4:ce:fc:59:9c:03:51:3f:d0:85: 94:cb:fb:3a:3e:03:2f:a1:58:04:0f:e0:b9:1d:ee:5a:0c:52: 7a:9c:57:67:c1:4e:2f:93:5c:de:32:1e:2b:61:b9:f5:8e:7e: d3:71:5b:c5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJr+oj+Rb3T7y4zcIrz/T2OYfboswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTgzMTRFNDNBMUI2RjhBRkRBOEQ5NUU4Nzc5QzY1NDE2 OTExRDMxMDAeFw0yNjA3MjMxMzU3MTNaFw0yNjA3MjQxNTQ5MTNaMDMxMTAvBgNV BAMTKDE2MzZCMENFQ0U3QzQ0RjE4RThDRjNFM0EwNjRGOERBMUM4MjJBRTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZftvIaScdmP/10nf6bMZy7u6O entYmoCZ8TVG0Ipij2gREYaEeJgSx7ckgN1o4gIR1cyt3NjcDW0/+186nSlAdgjT 5gHgF1OYquIBURzyxc/vrcECCOUn1Vn69pEgfEis8eqAlT/wdoOA6t3SIssvM9ko 1OCjeTRkacQDqnrkk8Sv+XkVWiqT/0FOOIaOCsN+yJnl7qvg38YEutgc/bwTFaTi afqi5KjYhQCribzcGCqSa3uE8HDgtrTTnpzJnNarO1DdhprECBN5/s9lHY0Q41z0 btjk38lmRXslsaiy0WL5GJ2ygKDP9TmflntF88EB4xlhU/qHlAj8vBnA23TJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFjawzs58RPGOjPPjoGT42hyCKuEwHwYDVR0j BBgwFoAUqDFOQ6G2+K/ajZXod5xlQWkR0xAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTFhZjE0NGItYjkyZS00ZmZmLWI2NDEtZTQ2ZmRkZThjNmRmLzAvQTgzMTRFNDNB MUI2RjhBRkRBOEQ5NUU4Nzc5QzY1NDE2OTExRDMxMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BODMxNEU0M0ExQjZGOEFGREE4RDk1RTg3NzlDNjU0MTY5MTFE MzEwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTFhZjE0NGItYjkyZS00ZmZmLWI2 NDEtZTQ2ZmRkZThjNmRmLzAvQTgzMTRFNDNBMUI2RjhBRkRBOEQ5NUU4Nzc5QzY1 NDE2OTExRDMxMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEPk7AztKOvMhkhOMmBmLlEDGGPEizukb6MO n1/zJn0IQ4IpRn+Zl472ciB75yPbYoAWfN0ouaQEACx+Da60VvxfAqJRjBIiN00z ugLrpsq1sNBwB976hcH3mNMzfWq7qWWcOEhWlCBf/UAvf0G930t5ql80AYJnz0u+ Eqtx0hLjDqedrkwQffWm7zrfi9xj+v2mLltqI1RbWJcloWeixgSLdRjOoi2iy055 +27/l9kQ3sxAUQapmBNGebMNsN2lwB32rf1yfRm8pE1s26LF5M78WZwDUT/QhZTL +zo+Ay+hWAQP4Lkd7loMUnqcV2fBTi+TXN4yHithufWOftNxW8U= -----END CERTIFICATE-----Generated at Fri Jul 24 02:40:28 2026 by rpki-client