$ rpki-client -vvf rpki-rsync.idnic.net/repo/03908782-4520-45b4-99ed-193e51df51c3/0/8EA8EC991253F0665F4149D5FE42C3F8CF2255D8.mft File: 8EA8EC991253F0665F4149D5FE42C3F8CF2255D8.mft (raw, json) Hash identifier: +utYKyZ7RUgvuVggPWSKoIpBEG9eg/PaP/0IPwKEoYg= Subject key identifier: FE:B0:0D:1F:7B:A6:AB:0C:11:B0:B0:94:1F:FC:72:19:E3:58:27:E1 Authority key identifier: 8E:A8:EC:99:12:53:F0:66:5F:41:49:D5:FE:42:C3:F8:CF:22:55:D8 Certificate issuer: /CN=8EA8EC991253F0665F4149D5FE42C3F8CF2255D8 Certificate serial: 5DAAC46D572BC320C0D9C0670D322D38935FC0D3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8EA8EC991253F0665F4149D5FE42C3F8CF2255D8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/03908782-4520-45b4-99ed-193e51df51c3/0/8EA8EC991253F0665F4149D5FE42C3F8CF2255D8.mft Manifest number: 6A Signing time: Sun 19 Jul 2026 22:09:16 +0000 Manifest this update: Sun 19 Jul 2026 22:04:16 +0000 Manifest next update: Mon 20 Jul 2026 23:08:16 +0000 Files and hashes: 1: 8EA8EC991253F0665F4149D5FE42C3F8CF2255D8.crl (hash: KyhzwEhqyWyQTupdwh535PeTcw/gRocCxKPCqWL2Juo=) 2: 3130332e3138302e3136352e302f32342d3234203d3e20313338313331.roa (hash: YXjtjwoesJUSGw40nC73us7OdL7eSn74JJVfMRae8cI=) 3: 3130332e3138302e3136342e302f32332d3233203d3e20313338313331.roa (hash: lli6DgdKqwmEkLtB+BG1rU9nYBqGkyyXfGUHRRk2kyY=) 4: 3130332e3138302e3136342e302f32342d3234203d3e20313338313331.roa (hash: kq6A8cL9NTZnFPc2HUzKmlVXrKIf6u5lrw0WIGV14uo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/03908782-4520-45b4-99ed-193e51df51c3/0/8EA8EC991253F0665F4149D5FE42C3F8CF2255D8.crl rsync://rpki-rsync.idnic.net/repo/03908782-4520-45b4-99ed-193e51df51c3/0/8EA8EC991253F0665F4149D5FE42C3F8CF2255D8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8EA8EC991253F0665F4149D5FE42C3F8CF2255D8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Jul 2026 09:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:aa:c4:6d:57:2b:c3:20:c0:d9:c0:67:0d:32:2d:38:93:5f:c0:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8EA8EC991253F0665F4149D5FE42C3F8CF2255D8 Validity Not Before: Jul 19 22:04:16 2026 GMT Not After : Jul 20 23:08:16 2026 GMT Subject: CN=FEB00D1F7BA6AB0C11B0B0941FFC7219E35827E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:86:5a:a7:c7:c0:d1:58:57:00:9e:70:6e:7c: 56:a6:c8:5f:76:74:3f:65:37:78:b2:e8:2a:27:a4: 81:30:d1:ba:0c:a3:5d:5d:c2:45:ef:64:d1:ac:12: 0e:b8:60:01:39:fe:6e:56:08:a5:16:98:69:20:71: 7b:11:83:33:ad:21:76:93:c3:ef:42:7a:81:e1:a7: f4:be:08:bf:4b:7d:e2:f5:c6:ac:69:db:ad:81:86: 5b:71:65:62:12:44:71:57:ea:cc:b8:98:18:8c:13: 35:69:08:f5:1f:dd:df:af:02:1c:04:a9:63:cc:33: b4:65:61:92:a2:5b:49:51:25:62:8c:0e:4a:d7:05: df:69:b9:91:ca:e7:79:84:32:f3:61:b6:7d:22:40: fb:10:05:4b:61:fb:96:2e:bc:69:2a:8a:e7:b4:f4: 36:76:ae:44:c1:7a:f8:0b:f7:6e:a1:bf:90:e6:ad: 8b:66:4c:dc:8f:86:f9:1a:e5:15:aa:7e:82:b9:0e: 68:c1:d7:6b:a2:51:49:b5:ba:4f:64:aa:ec:3b:99: 37:90:d0:1a:e4:a4:56:fc:04:bf:6b:65:c6:d3:59: 70:93:e1:55:4d:99:c9:fe:2d:ac:48:b7:65:db:bf: 85:ae:e1:e2:ab:d1:9d:ec:75:c4:95:91:48:a2:67: 7a:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:B0:0D:1F:7B:A6:AB:0C:11:B0:B0:94:1F:FC:72:19:E3:58:27:E1 X509v3 Authority Key Identifier: keyid:8E:A8:EC:99:12:53:F0:66:5F:41:49:D5:FE:42:C3:F8:CF:22:55:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/03908782-4520-45b4-99ed-193e51df51c3/0/8EA8EC991253F0665F4149D5FE42C3F8CF2255D8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8EA8EC991253F0665F4149D5FE42C3F8CF2255D8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/03908782-4520-45b4-99ed-193e51df51c3/0/8EA8EC991253F0665F4149D5FE42C3F8CF2255D8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:4a:f9:52:33:53:00:b3:66:9c:b0:2a:4b:40:91:50:83:af: cf:65:b2:f0:b8:bb:62:6a:3f:2f:ac:65:00:dc:b8:21:04:7a: 6f:ac:fc:f9:cb:2e:fc:4d:74:20:c3:0e:c4:16:dd:61:b5:9b: 7f:a3:2a:5e:c7:e4:88:93:9f:e2:ef:1d:ca:66:65:39:ea:af: 87:04:e0:69:d3:f6:f9:7d:5f:55:f3:6a:9d:26:a0:4f:04:f1: af:fd:b9:67:b5:71:8b:f5:e3:8c:98:82:02:7f:55:44:fa:71: e0:a0:31:00:b1:4d:36:32:59:3b:38:ba:65:ef:0c:0c:f5:6b: 6d:5f:8d:d4:3b:3d:d8:14:48:36:15:6b:ea:7d:05:eb:70:b7: e8:f9:17:57:aa:be:36:99:74:5f:b6:28:4d:a7:0b:42:78:3b: ae:9e:99:b3:7a:08:37:f5:0f:54:a6:04:e0:94:bd:fb:00:58: e6:1c:15:c4:86:d5:f9:75:e4:b4:5e:3d:a9:f8:4b:29:47:bb: 12:5b:98:2d:a2:d5:3e:de:52:a3:68:88:66:0b:6b:2c:fc:59: 4f:5a:7b:29:53:ab:2a:31:e4:d4:d7:4b:21:93:85:e7:69:4c: b2:9e:6a:32:48:27:13:5c:44:c3:68:e4:ca:06:d4:2b:11:ba: 01:83:51:37 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXarEbVcrwyDA2cBnDTItOJNfwNMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEVBOEVDOTkxMjUzRjA2NjVGNDE0OUQ1RkU0MkMzRjhD RjIyNTVEODAeFw0yNjA3MTkyMjA0MTZaFw0yNjA3MjAyMzA4MTZaMDMxMTAvBgNV BAMTKEZFQjAwRDFGN0JBNkFCMEMxMUIwQjA5NDFGRkM3MjE5RTM1ODI3RTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFhlqnx8DRWFcAnnBufFamyF92 dD9lN3iy6ConpIEw0boMo11dwkXvZNGsEg64YAE5/m5WCKUWmGkgcXsRgzOtIXaT w+9CeoHhp/S+CL9LfeL1xqxp262BhltxZWISRHFX6sy4mBiMEzVpCPUf3d+vAhwE qWPMM7RlYZKiW0lRJWKMDkrXBd9puZHK53mEMvNhtn0iQPsQBUth+5YuvGkqiue0 9DZ2rkTBevgL926hv5DmrYtmTNyPhvka5RWqfoK5DmjB12uiUUm1uk9kquw7mTeQ 0BrkpFb8BL9rZcbTWXCT4VVNmcn+LaxIt2Xbv4Wu4eKr0Z3sdcSVkUiiZ3pxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/rANH3umqwwRsLCUH/xyGeNYJ+EwHwYDVR0j BBgwFoAUjqjsmRJT8GZfQUnV/kLD+M8iVdgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDM5MDg3ODItNDUyMC00NWI0LTk5ZWQtMTkzZTUxZGY1MWMzLzAvOEVBOEVDOTkx MjUzRjA2NjVGNDE0OUQ1RkU0MkMzRjhDRjIyNTVEOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84RUE4RUM5OTEyNTNGMDY2NUY0MTQ5RDVGRTQyQzNGOENGMjI1 NUQ4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDM5MDg3ODItNDUyMC00NWI0LTk5 ZWQtMTkzZTUxZGY1MWMzLzAvOEVBOEVDOTkxMjUzRjA2NjVGNDE0OUQ1RkU0MkMz RjhDRjIyNTVEOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACdK+VIzUwCzZpywKktAkVCDr89lsvC4u2Jq Py+sZQDcuCEEem+s/PnLLvxNdCDDDsQW3WG1m3+jKl7H5IiTn+LvHcpmZTnqr4cE 4GnT9vl9X1Xzap0moE8E8a/9uWe1cYv144yYggJ/VUT6ceCgMQCxTTYyWTs4umXv DAz1a21fjdQ7PdgUSDYVa+p9Betwt+j5F1eqvjaZdF+2KE2nC0J4O66embN6CDf1 D1SmBOCUvfsAWOYcFcSG1fl15LRePan4SylHuxJbmC2i1T7eUqNoiGYLayz8WU9a eylTqyox5NTXSyGThedpTLKeajJIJxNcRMNo5MoG1CsRugGDUTc= -----END CERTIFICATE-----Generated at Mon Jul 20 00:06:22 2026 by rpki-client