$ rpki-client -vvf rpki-rsync.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/8AA52DB5DB71F638E941254A6B0CE68361DB78A6.mft File: 8AA52DB5DB71F638E941254A6B0CE68361DB78A6.mft (raw, json) Hash identifier: ajLsI3OMEOjXk5FeS2fiiefac/kzu1HtlZ3jdZ03Qbk= Subject key identifier: 25:C2:16:49:24:DF:9B:72:EE:5C:CF:C9:D4:75:7E:13:09:33:60:66 Authority key identifier: 8A:A5:2D:B5:DB:71:F6:38:E9:41:25:4A:6B:0C:E6:83:61:DB:78:A6 Certificate issuer: /CN=8AA52DB5DB71F638E941254A6B0CE68361DB78A6 Certificate serial: 4B14843552CCA1C686691085367F69354E332373 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8AA52DB5DB71F638E941254A6B0CE68361DB78A6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/8AA52DB5DB71F638E941254A6B0CE68361DB78A6.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 17:26:26 +0000 Manifest this update: Thu 23 Jul 2026 17:21:26 +0000 Manifest next update: Fri 24 Jul 2026 19:14:26 +0000 Files and hashes: 1: 3130332e3138312e37362e302f32342d3234203d3e20313439333739.roa (hash: WXHF3ztWLcHGSe6MPgiYVl8CmUEe+OPjuifFRIwvCro=) 2: 8AA52DB5DB71F638E941254A6B0CE68361DB78A6.crl (hash: haZStdvP0NWD9jeAt/HWcMgXIDej8Xc4TgisJ8Uvrik=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/8AA52DB5DB71F638E941254A6B0CE68361DB78A6.crl rsync://rpki-rsync.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/8AA52DB5DB71F638E941254A6B0CE68361DB78A6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8AA52DB5DB71F638E941254A6B0CE68361DB78A6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 19:14:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:14:84:35:52:cc:a1:c6:86:69:10:85:36:7f:69:35:4e:33:23:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8AA52DB5DB71F638E941254A6B0CE68361DB78A6 Validity Not Before: Jul 23 17:21:26 2026 GMT Not After : Jul 24 19:14:26 2026 GMT Subject: CN=25C2164924DF9B72EE5CCFC9D4757E1309336066 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:3d:bc:eb:2b:b7:df:c1:b6:28:50:e3:98:45: a6:e8:89:97:16:7b:26:fa:8a:67:49:92:9b:1a:01: a5:12:cd:96:48:6b:43:33:6c:ba:4c:5d:f7:f7:27: fa:d2:5a:10:77:7e:07:f9:52:0a:3f:1b:fa:d3:98: 94:50:19:91:5e:c3:c4:c8:a8:c6:f1:7b:bb:c7:95: fd:64:d3:2f:6c:35:48:89:99:4c:f8:95:67:d1:31: 07:92:df:c9:a3:3d:02:36:24:da:da:be:82:e0:bc: f8:30:42:07:62:42:26:c5:fe:d8:fc:bb:03:4e:f9: 95:68:0b:9c:d0:a3:b6:b5:70:8e:81:c0:73:4c:75: c1:2b:b8:63:78:8f:ca:10:a3:18:87:4d:19:4c:76: 1f:2d:a0:07:fa:84:80:a5:ad:e8:fa:e0:10:c3:49: 2d:eb:1b:d2:eb:39:c2:03:fc:86:62:f1:2a:7d:85: 65:90:ea:c9:48:59:0a:ff:02:05:b8:da:20:25:45: 6f:e6:76:a3:c7:c0:8d:d4:93:0d:de:de:11:4b:21: 53:63:54:4e:fa:6f:bf:62:50:19:96:62:c8:34:cf: ab:82:48:ec:49:40:20:d5:3b:c0:62:a4:b6:b3:6c: 91:b9:51:88:fe:c0:d3:0b:5a:5b:52:e2:82:95:43: aa:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:C2:16:49:24:DF:9B:72:EE:5C:CF:C9:D4:75:7E:13:09:33:60:66 X509v3 Authority Key Identifier: keyid:8A:A5:2D:B5:DB:71:F6:38:E9:41:25:4A:6B:0C:E6:83:61:DB:78:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/8AA52DB5DB71F638E941254A6B0CE68361DB78A6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8AA52DB5DB71F638E941254A6B0CE68361DB78A6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/8AA52DB5DB71F638E941254A6B0CE68361DB78A6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:2f:43:07:30:05:82:0e:30:b5:b8:dc:cd:03:9d:49:eb:de: 5a:27:0a:79:62:b8:7e:a4:7a:50:ee:8c:98:79:43:58:0d:f7: b7:41:73:8b:71:32:e0:bb:e4:52:61:cd:e9:b8:e3:97:13:9d: 02:d7:f2:f3:89:0e:dc:42:be:bb:ec:44:d1:0c:82:ab:ca:49: 15:dc:f3:90:f9:7f:06:f9:e3:50:1b:26:cd:5e:55:e7:23:e6: 27:00:65:88:c1:7f:90:48:2c:60:9d:1c:c1:2f:11:60:0c:e6: 26:ce:63:e8:95:1d:85:5f:d7:45:b8:cd:28:fc:9e:ec:a6:ec: 89:39:55:33:77:88:03:b7:83:f3:8f:76:1f:77:80:90:90:c8: 2a:21:c7:b7:b4:59:ff:ed:df:d3:21:91:81:86:a1:77:ca:04: d6:cc:39:28:56:67:8b:93:26:50:7e:7a:5e:e8:2e:2c:92:3b: 8e:c3:d0:ed:4b:86:c4:79:86:5b:0f:35:97:32:29:29:c6:e9: 34:23:f7:05:d9:f9:3c:75:ac:b2:ab:d7:af:db:02:b7:94:b0: a2:d2:c2:38:2c:8c:e5:dc:e1:91:e8:f5:21:81:e3:84:4a:66: 9a:19:c3:27:ee:72:7e:0d:d9:a3:24:f7:3e:10:1b:1b:16:d4: 7e:6c:03:86 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSxSENVLMocaGaRCFNn9pNU4zI3MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEFBNTJEQjVEQjcxRjYzOEU5NDEyNTRBNkIwQ0U2ODM2 MURCNzhBNjAeFw0yNjA3MjMxNzIxMjZaFw0yNjA3MjQxOTE0MjZaMDMxMTAvBgNV BAMTKDI1QzIxNjQ5MjRERjlCNzJFRTVDQ0ZDOUQ0NzU3RTEzMDkzMzYwNjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYPbzrK7ffwbYoUOOYRaboiZcW eyb6imdJkpsaAaUSzZZIa0MzbLpMXff3J/rSWhB3fgf5Ugo/G/rTmJRQGZFew8TI qMbxe7vHlf1k0y9sNUiJmUz4lWfRMQeS38mjPQI2JNravoLgvPgwQgdiQibF/tj8 uwNO+ZVoC5zQo7a1cI6BwHNMdcEruGN4j8oQoxiHTRlMdh8toAf6hIClrej64BDD SS3rG9LrOcID/IZi8Sp9hWWQ6slIWQr/AgW42iAlRW/mdqPHwI3Ukw3e3hFLIVNj VE76b79iUBmWYsg0z6uCSOxJQCDVO8BipLazbJG5UYj+wNMLWltS4oKVQ6rNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJcIWSSTfm3LuXM/J1HV+EwkzYGYwHwYDVR0j BBgwFoAUiqUttdtx9jjpQSVKawzmg2HbeKYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmUxY2JkNzktOGYyNi00YjBlLThiM2ItYWI5ZTk5MzhmY2FlLzAvOEFBNTJEQjVE QjcxRjYzOEU5NDEyNTRBNkIwQ0U2ODM2MURCNzhBNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84QUE1MkRCNURCNzFGNjM4RTk0MTI1NEE2QjBDRTY4MzYxREI3 OEE2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmUxY2JkNzktOGYyNi00YjBlLThi M2ItYWI5ZTk5MzhmY2FlLzAvOEFBNTJEQjVEQjcxRjYzOEU5NDEyNTRBNkIwQ0U2 ODM2MURCNzhBNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKAvQwcwBYIOMLW43M0DnUnr3lonCnliuH6k elDujJh5Q1gN97dBc4txMuC75FJhzem445cTnQLX8vOJDtxCvrvsRNEMgqvKSRXc 85D5fwb541AbJs1eVecj5icAZYjBf5BILGCdHMEvEWAM5ibOY+iVHYVf10W4zSj8 nuym7Ik5VTN3iAO3g/OPdh93gJCQyCohx7e0Wf/t39MhkYGGoXfKBNbMOShWZ4uT JlB+el7oLiySO47D0O1LhsR5hlsPNZcyKSnG6TQj9wXZ+Tx1rLKr16/bAreUsKLS wjgsjOXc4ZHo9SGB44RKZpoZwyfucn4N2aMk9z4QGxsW1H5sA4Y= -----END CERTIFICATE-----Generated at Fri Jul 24 06:26:31 2026 by rpki-client