$ rpki-client -vvf rpki-rsync.idnic.net/repo/f0520b54-3ba7-4631-af0b-55984b0ba7f2/0/8A8B155E8335C028549D2BF6B54C25E4A78B8C92.mft File: 8A8B155E8335C028549D2BF6B54C25E4A78B8C92.mft (raw, json) Hash identifier: jUxfAGqiQKkG1HwT5/8oiBpw/TVelEAXzns+EhdDy2s= Subject key identifier: BD:97:96:67:41:BA:6F:CC:70:62:D3:07:6E:67:64:FF:A5:4A:6B:4F Authority key identifier: 8A:8B:15:5E:83:35:C0:28:54:9D:2B:F6:B5:4C:25:E4:A7:8B:8C:92 Certificate issuer: /CN=8A8B155E8335C028549D2BF6B54C25E4A78B8C92 Certificate serial: 5B414AE4D4D32A075CEA853761746A6082772721 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8A8B155E8335C028549D2BF6B54C25E4A78B8C92.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f0520b54-3ba7-4631-af0b-55984b0ba7f2/0/8A8B155E8335C028549D2BF6B54C25E4A78B8C92.mft Manifest number: 6F Signing time: Fri 24 Jul 2026 09:56:38 +0000 Manifest this update: Fri 24 Jul 2026 09:51:38 +0000 Manifest next update: Sat 25 Jul 2026 13:24:38 +0000 Files and hashes: 1: 8A8B155E8335C028549D2BF6B54C25E4A78B8C92.crl (hash: ME1l4h4knmtyRfeHQUwNiRfNxPIJlA39n0rXRPfFFac=) 2: 3130332e3136322e3134362e302f32332d3234203d3e203137393935.roa (hash: LMawcFvlyGAFjmzGIPIL0Pb1GIlo75+QClOxIhDqopY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f0520b54-3ba7-4631-af0b-55984b0ba7f2/0/8A8B155E8335C028549D2BF6B54C25E4A78B8C92.crl rsync://rpki-rsync.idnic.net/repo/f0520b54-3ba7-4631-af0b-55984b0ba7f2/0/8A8B155E8335C028549D2BF6B54C25E4A78B8C92.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8A8B155E8335C028549D2BF6B54C25E4A78B8C92.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 07:07:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:41:4a:e4:d4:d3:2a:07:5c:ea:85:37:61:74:6a:60:82:77:27:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8A8B155E8335C028549D2BF6B54C25E4A78B8C92 Validity Not Before: Jul 24 09:51:38 2026 GMT Not After : Jul 25 13:24:38 2026 GMT Subject: CN=BD97966741BA6FCC7062D3076E6764FFA54A6B4F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:74:c3:94:37:4d:04:05:ed:f2:a3:73:1d:61: 1d:16:9e:6b:ed:64:72:b0:4f:d5:65:4c:f1:ce:d6: c9:4e:e5:f0:58:81:cb:d8:a6:f9:25:2c:42:8e:ff: ad:33:99:68:86:12:df:dc:18:b2:06:0e:ef:85:00: a3:58:43:35:6f:7f:4f:c9:8d:67:64:c0:13:fb:d3: 25:72:a6:40:ef:04:ff:10:5c:b1:63:9d:9f:4f:83: 15:f7:d7:e4:83:e8:b3:a8:d6:b7:f5:71:ef:da:6b: 54:bc:75:31:f5:14:88:67:db:7a:37:fe:b8:ce:46: f9:a3:42:7e:6b:a1:c4:f2:25:43:00:d1:2b:22:1f: 5f:a8:5f:d7:27:32:42:a7:cf:d7:f8:ae:e1:08:17: 89:26:ff:8c:2f:8a:4b:fa:f0:6c:d3:e8:3c:a4:dd: 6e:f5:cf:01:0e:1f:2b:c8:7c:44:2c:3e:25:5d:ab: e5:17:10:d1:66:15:f7:b2:09:fb:3b:df:a2:66:c2: e4:64:6b:4c:b4:38:cc:9c:25:1e:14:fb:e1:8e:be: fe:dc:fd:58:18:17:33:56:95:f9:bb:66:74:88:96: 4e:a8:6c:ca:99:5f:bc:fb:b1:6b:f2:45:6c:cf:aa: 28:02:cd:bd:91:de:61:2f:59:e2:cf:f4:e1:bb:ed: 85:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:97:96:67:41:BA:6F:CC:70:62:D3:07:6E:67:64:FF:A5:4A:6B:4F X509v3 Authority Key Identifier: keyid:8A:8B:15:5E:83:35:C0:28:54:9D:2B:F6:B5:4C:25:E4:A7:8B:8C:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f0520b54-3ba7-4631-af0b-55984b0ba7f2/0/8A8B155E8335C028549D2BF6B54C25E4A78B8C92.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8A8B155E8335C028549D2BF6B54C25E4A78B8C92.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f0520b54-3ba7-4631-af0b-55984b0ba7f2/0/8A8B155E8335C028549D2BF6B54C25E4A78B8C92.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:31:ee:81:49:64:f4:c2:10:d4:e0:21:34:f0:4e:85:45:a9: 94:90:52:97:fa:35:1a:c7:47:1b:65:24:b0:7e:62:04:44:27: 8b:48:98:b5:0b:e7:17:fd:8f:8b:dd:2a:79:58:58:1a:19:eb: 4b:6f:b8:86:ff:21:fe:ee:ae:8a:7f:bb:78:a5:cf:57:81:b2: 45:cf:89:6c:ea:cd:4a:89:a2:dc:9e:45:95:66:26:5c:93:0c: 86:f6:1e:15:29:c0:77:61:25:25:9c:8e:58:f8:d6:45:dc:ba: 47:81:f5:8c:f2:70:c6:24:87:78:3f:43:0d:6e:1f:d1:e7:3e: 93:5a:23:60:b7:07:e2:b5:12:cd:7f:3b:42:ce:0f:c5:9f:58: 47:23:0e:b9:c2:93:45:48:77:ae:50:39:1f:bf:16:f3:88:16: d1:2a:86:37:4c:71:ee:7d:57:70:79:df:c6:77:e7:cd:b2:2f: 49:92:ec:75:26:a2:e7:8c:a1:69:2f:60:66:d1:da:30:0c:40: 58:12:2f:e0:23:55:21:13:70:d1:12:da:ed:bc:07:a0:2f:bf: 52:c9:c9:01:56:ed:b7:3e:b6:05:0f:27:a2:a7:88:53:97:19: 30:4f:68:8a:eb:c0:2c:e4:f3:bd:b4:94:6f:3e:5f:a0:81:7a: 54:23:49:dd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW0FK5NTTKgdc6oU3YXRqYIJ3JyEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEE4QjE1NUU4MzM1QzAyODU0OUQyQkY2QjU0QzI1RTRB NzhCOEM5MjAeFw0yNjA3MjQwOTUxMzhaFw0yNjA3MjUxMzI0MzhaMDMxMTAvBgNV BAMTKEJEOTc5NjY3NDFCQTZGQ0M3MDYyRDMwNzZFNjc2NEZGQTU0QTZCNEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKdMOUN00EBe3yo3MdYR0Wnmvt ZHKwT9VlTPHO1slO5fBYgcvYpvklLEKO/60zmWiGEt/cGLIGDu+FAKNYQzVvf0/J jWdkwBP70yVypkDvBP8QXLFjnZ9PgxX31+SD6LOo1rf1ce/aa1S8dTH1FIhn23o3 /rjORvmjQn5rocTyJUMA0SsiH1+oX9cnMkKnz9f4ruEIF4km/4wvikv68GzT6Dyk 3W71zwEOHyvIfEQsPiVdq+UXENFmFfeyCfs736JmwuRka0y0OMycJR4U++GOvv7c /VgYFzNWlfm7ZnSIlk6obMqZX7z7sWvyRWzPqigCzb2R3mEvWeLP9OG77YUFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvZeWZ0G6b8xwYtMHbmdk/6VKa08wHwYDVR0j BBgwFoAUiosVXoM1wChUnSv2tUwl5KeLjJIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjA1MjBiNTQtM2JhNy00NjMxLWFmMGItNTU5ODRiMGJhN2YyLzAvOEE4QjE1NUU4 MzM1QzAyODU0OUQyQkY2QjU0QzI1RTRBNzhCOEM5Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84QThCMTU1RTgzMzVDMDI4NTQ5RDJCRjZCNTRDMjVFNEE3OEI4 QzkyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjA1MjBiNTQtM2JhNy00NjMxLWFm MGItNTU5ODRiMGJhN2YyLzAvOEE4QjE1NUU4MzM1QzAyODU0OUQyQkY2QjU0QzI1 RTRBNzhCOEM5Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE0x7oFJZPTCENTgITTwToVFqZSQUpf6NRrH RxtlJLB+YgREJ4tImLUL5xf9j4vdKnlYWBoZ60tvuIb/If7urop/u3ilz1eBskXP iWzqzUqJotyeRZVmJlyTDIb2HhUpwHdhJSWcjlj41kXcukeB9YzycMYkh3g/Qw1u H9HnPpNaI2C3B+K1Es1/O0LOD8WfWEcjDrnCk0VId65QOR+/FvOIFtEqhjdMce59 V3B538Z3582yL0mS7HUmoueMoWkvYGbR2jAMQFgSL+AjVSETcNES2u28B6Avv1LJ yQFW7bc+tgUPJ6KniFOXGTBPaIrrwCzk8720lG8+X6CBelQjSd0= -----END CERTIFICATE-----Generated at Fri Jul 24 15:08:16 2026 by rpki-client