$ rpki-client -vvf rpki-rsync.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/8828D395B775E6267ED1C496B6DA870C9DA36235.mft File: 8828D395B775E6267ED1C496B6DA870C9DA36235.mft (raw, json) Hash identifier: U4bEruTRi1F31iEAIRQ+WfEouIjRyZvQYiCg8vss1SM= Subject key identifier: AD:39:CA:CC:55:C2:F8:3B:31:1C:ED:70:F4:08:5F:FA:AF:D9:4E:64 Authority key identifier: 88:28:D3:95:B7:75:E6:26:7E:D1:C4:96:B6:DA:87:0C:9D:A3:62:35 Certificate issuer: /CN=8828D395B775E6267ED1C496B6DA870C9DA36235 Certificate serial: 5ECD4E004223112DCBDE8642D13B30F791FB3E88 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8828D395B775E6267ED1C496B6DA870C9DA36235.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/8828D395B775E6267ED1C496B6DA870C9DA36235.mft Manifest number: 6B Signing time: Mon 20 Jul 2026 15:40:52 +0000 Manifest this update: Mon 20 Jul 2026 15:35:52 +0000 Manifest next update: Tue 21 Jul 2026 15:41:52 +0000 Files and hashes: 1: 8828D395B775E6267ED1C496B6DA870C9DA36235.crl (hash: rwWwSThImVljiGNJOcwmp4OhToUtrQbCGqabEkwVDI8=) 2: 3130332e3137392e38392e302f32342d3234203d3e20313439333432.roa (hash: KKSmfUNkqalCLO37YcNIo/DR91Odj11Ccmn9dQDHPBE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/8828D395B775E6267ED1C496B6DA870C9DA36235.crl rsync://rpki-rsync.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/8828D395B775E6267ED1C496B6DA870C9DA36235.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8828D395B775E6267ED1C496B6DA870C9DA36235.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 15:41:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:cd:4e:00:42:23:11:2d:cb:de:86:42:d1:3b:30:f7:91:fb:3e:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8828D395B775E6267ED1C496B6DA870C9DA36235 Validity Not Before: Jul 20 15:35:52 2026 GMT Not After : Jul 21 15:41:52 2026 GMT Subject: CN=AD39CACC55C2F83B311CED70F4085FFAAFD94E64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:17:ec:ea:f2:d6:eb:19:e2:a6:9d:d7:c1:16: 0d:3f:6b:04:89:c9:68:3e:72:a5:a1:9c:48:b8:82: b3:a4:bc:25:5a:cf:a3:f5:a6:60:5b:63:73:9b:6e: 21:65:4f:57:1e:73:1e:f9:35:53:13:fb:a5:33:35: 8a:a1:f4:85:be:c0:8b:86:c2:1a:ef:03:78:12:31: d2:77:e6:b4:e6:aa:84:ae:89:6d:b6:61:97:fc:67: 9a:f7:49:c6:08:b8:11:73:f4:ad:ed:1c:aa:ab:df: c9:fc:e4:e8:08:e0:af:bf:4d:8a:85:e3:9d:0b:d9: 9c:b0:0f:09:f8:5a:ce:56:c4:f7:28:20:18:3f:e4: 56:cc:b7:8b:cb:37:ed:ad:95:5a:27:f9:f7:50:e1: f6:7f:52:2b:c7:c7:da:53:a5:39:29:35:b5:9e:0a: 04:c0:56:75:2a:39:87:ed:50:20:32:e8:e8:31:4f: e0:e6:d6:96:ae:a2:1a:1f:73:12:47:0f:17:da:09: 4d:3a:d0:01:b0:3b:73:92:62:b7:53:b5:a7:d3:fe: e3:02:4b:4a:7b:6e:33:94:b5:54:d7:16:2c:8f:7f: e1:d3:f1:e8:a5:ba:4c:27:4d:3b:81:8d:12:32:31: 48:18:e8:4d:b6:0e:a5:0a:fd:37:74:28:bb:d1:dc: 97:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:39:CA:CC:55:C2:F8:3B:31:1C:ED:70:F4:08:5F:FA:AF:D9:4E:64 X509v3 Authority Key Identifier: keyid:88:28:D3:95:B7:75:E6:26:7E:D1:C4:96:B6:DA:87:0C:9D:A3:62:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/8828D395B775E6267ED1C496B6DA870C9DA36235.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8828D395B775E6267ED1C496B6DA870C9DA36235.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/8828D395B775E6267ED1C496B6DA870C9DA36235.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:5b:18:ac:b1:ad:46:68:42:96:f6:b1:05:28:b9:18:e6:b1: f2:d6:c3:8c:9f:c1:e3:a6:00:70:0f:7c:dc:01:c5:dc:8e:71: 0c:c6:14:32:e5:6b:94:c6:c1:96:ee:1e:f7:ec:ff:74:44:35: e8:33:1a:f3:ac:ed:97:e4:6c:52:a3:cc:72:de:e6:33:e7:f3: 55:1e:2d:09:2e:d9:41:23:8a:02:7f:a7:b4:51:a6:a7:ab:03: 55:e5:f7:f0:4f:76:5d:ef:4e:9e:1b:b8:b1:f9:75:cf:64:8b: 09:8d:3f:24:a8:a6:7e:10:0f:25:a7:ec:c5:90:a8:fa:c0:34: cf:87:d8:8e:09:87:ea:87:71:75:82:23:ce:6c:91:ae:b7:6c: 40:89:b8:a0:6c:b8:a7:9e:20:6d:50:66:47:ca:2d:6e:58:ab: 1d:88:c9:b5:ff:7d:13:08:42:fa:ee:77:b7:40:13:c6:04:93: 64:e7:c3:aa:60:88:7a:0a:b7:da:26:ac:fc:09:6c:e6:80:83: ca:03:e1:1f:90:9e:b0:0b:5d:d1:e2:a0:9f:69:16:8a:9d:5d: f9:f3:98:e1:9f:12:ce:39:f1:f0:49:9e:90:8a:2e:dc:a3:d3: f4:49:71:4d:25:9f:72:15:bd:d9:38:91:fc:a6:1c:12:bc:4c: 1b:e5:e5:56 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXs1OAEIjES3L3oZC0Tsw95H7PogwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODgyOEQzOTVCNzc1RTYyNjdFRDFDNDk2QjZEQTg3MEM5 REEzNjIzNTAeFw0yNjA3MjAxNTM1NTJaFw0yNjA3MjExNTQxNTJaMDMxMTAvBgNV BAMTKEFEMzlDQUNDNTVDMkY4M0IzMTFDRUQ3MEY0MDg1RkZBQUZEOTRFNjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvF+zq8tbrGeKmndfBFg0/awSJ yWg+cqWhnEi4grOkvCVaz6P1pmBbY3ObbiFlT1cecx75NVMT+6UzNYqh9IW+wIuG whrvA3gSMdJ35rTmqoSuiW22YZf8Z5r3ScYIuBFz9K3tHKqr38n85OgI4K+/TYqF 450L2ZywDwn4Ws5WxPcoIBg/5FbMt4vLN+2tlVon+fdQ4fZ/UivHx9pTpTkpNbWe CgTAVnUqOYftUCAy6OgxT+Dm1pauohofcxJHDxfaCU060AGwO3OSYrdTtafT/uMC S0p7bjOUtVTXFiyPf+HT8eilukwnTTuBjRIyMUgY6E22DqUK/Td0KLvR3Jc/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrTnKzFXC+DsxHO1w9Ahf+q/ZTmQwHwYDVR0j BBgwFoAUiCjTlbd15iZ+0cSWttqHDJ2jYjUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTljMjc2MjEtZTI5Ny00MTAwLTk3MWEtMWM2OTY3YzUyYjFiLzAvODgyOEQzOTVC Nzc1RTYyNjdFRDFDNDk2QjZEQTg3MEM5REEzNjIzNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84ODI4RDM5NUI3NzVFNjI2N0VEMUM0OTZCNkRBODcwQzlEQTM2 MjM1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTljMjc2MjEtZTI5Ny00MTAwLTk3 MWEtMWM2OTY3YzUyYjFiLzAvODgyOEQzOTVCNzc1RTYyNjdFRDFDNDk2QjZEQTg3 MEM5REEzNjIzNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALxbGKyxrUZoQpb2sQUouRjmsfLWw4yfweOm AHAPfNwBxdyOcQzGFDLla5TGwZbuHvfs/3RENegzGvOs7ZfkbFKjzHLe5jPn81Ue LQku2UEjigJ/p7RRpqerA1Xl9/BPdl3vTp4buLH5dc9kiwmNPySopn4QDyWn7MWQ qPrANM+H2I4Jh+qHcXWCI85ska63bECJuKBsuKeeIG1QZkfKLW5Yqx2IybX/fRMI Qvrud7dAE8YEk2Tnw6pgiHoKt9omrPwJbOaAg8oD4R+QnrALXdHioJ9pFoqdXfnz mOGfEs458fBJnpCKLtyj0/RJcU0ln3IVvdk4kfymHBK8TBvl5VY= -----END CERTIFICATE-----Generated at Tue Jul 21 07:06:58 2026 by rpki-client