$ rpki-client -vvf rpki-rsync.idnic.net/repo/1bae58ac-5917-4069-9a6c-83dc1ba32126/0/E8F23942C871B1A23D50AA7027A74ABDC7172EA3.mft File: E8F23942C871B1A23D50AA7027A74ABDC7172EA3.mft (raw, json) Hash identifier: mATcKIJ38wME6gcTUa8eX7kks0ASETosOLzA8NVwI8I= Subject key identifier: 83:53:71:F8:05:00:51:25:54:80:3D:67:23:66:AA:1F:D0:1B:32:15 Authority key identifier: E8:F2:39:42:C8:71:B1:A2:3D:50:AA:70:27:A7:4A:BD:C7:17:2E:A3 Certificate issuer: /CN=E8F23942C871B1A23D50AA7027A74ABDC7172EA3 Certificate serial: 672F017DED81F02A893B4386E7D929595365F99F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E8F23942C871B1A23D50AA7027A74ABDC7172EA3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1bae58ac-5917-4069-9a6c-83dc1ba32126/0/E8F23942C871B1A23D50AA7027A74ABDC7172EA3.mft Manifest number: 6B Signing time: Mon 20 Jul 2026 18:44:38 +0000 Manifest this update: Mon 20 Jul 2026 18:39:38 +0000 Manifest next update: Tue 21 Jul 2026 20:52:38 +0000 Files and hashes: 1: 3130332e3234362e3130372e302f32342d3234203d3e20313331373738.roa (hash: hL7QfKjtDKqwKchVRtqitw7xLrTQDNQicxI0MMMupQI=) 2: 323030313a6466303a3232393a3a2f34382d3438203d3e20313331373738.roa (hash: /GUQyhQCCG48GVOr5PjkMlvyumHtwdaSkLWzQJVBKPU=) 3: E8F23942C871B1A23D50AA7027A74ABDC7172EA3.crl (hash: i2Gt/jmwiM8FRFtEWfqqjypPTl+RW3dA2wle2U2K7i0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1bae58ac-5917-4069-9a6c-83dc1ba32126/0/E8F23942C871B1A23D50AA7027A74ABDC7172EA3.crl rsync://rpki-rsync.idnic.net/repo/1bae58ac-5917-4069-9a6c-83dc1ba32126/0/E8F23942C871B1A23D50AA7027A74ABDC7172EA3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E8F23942C871B1A23D50AA7027A74ABDC7172EA3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 20:52:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:2f:01:7d:ed:81:f0:2a:89:3b:43:86:e7:d9:29:59:53:65:f9:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E8F23942C871B1A23D50AA7027A74ABDC7172EA3 Validity Not Before: Jul 20 18:39:38 2026 GMT Not After : Jul 21 20:52:38 2026 GMT Subject: CN=835371F80500512554803D672366AA1FD01B3215 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:57:93:18:a6:0c:26:37:41:3d:db:e9:c1:b6: 9a:44:d6:4d:5f:92:0a:38:3c:2e:8e:2b:3c:c4:b6: 26:b0:e7:a1:5e:e3:21:90:71:a1:35:69:3d:f0:cb: 07:08:56:24:fe:97:0d:59:f1:55:07:c9:f3:cb:a6: 2e:20:5e:bb:84:9b:34:55:f2:55:67:5c:58:1a:cc: 0d:ba:5d:e2:b1:f5:5a:73:39:64:a3:4f:3e:ca:35: 56:52:3d:02:4e:4a:ff:01:47:11:85:5d:b6:7b:a9: dd:9b:4c:d6:d9:75:b5:03:ef:1d:73:e9:f1:e1:b0: c8:c3:ae:94:8b:68:9b:d8:80:36:21:13:cb:50:aa: 8d:f3:5c:63:e2:27:05:1e:78:fd:a4:06:41:35:24: f8:38:56:dc:f3:09:e6:20:4f:c8:bc:3b:a9:ad:81: c2:65:33:d6:12:a3:de:c3:73:eb:84:c1:92:69:eb: 89:be:a2:63:d8:e1:e9:f5:85:79:a5:6c:1e:c5:87: 6a:97:41:85:5d:7c:17:58:0f:2e:ec:84:60:c2:d7: 97:6c:19:36:83:b1:58:2f:08:47:60:b7:cb:07:5a: 3b:03:20:aa:d9:08:bb:a6:7e:22:d3:af:dd:fb:5b: 37:5b:cb:3f:a7:c0:73:4c:e4:ec:b0:92:9a:c9:30: 88:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:53:71:F8:05:00:51:25:54:80:3D:67:23:66:AA:1F:D0:1B:32:15 X509v3 Authority Key Identifier: keyid:E8:F2:39:42:C8:71:B1:A2:3D:50:AA:70:27:A7:4A:BD:C7:17:2E:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1bae58ac-5917-4069-9a6c-83dc1ba32126/0/E8F23942C871B1A23D50AA7027A74ABDC7172EA3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E8F23942C871B1A23D50AA7027A74ABDC7172EA3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1bae58ac-5917-4069-9a6c-83dc1ba32126/0/E8F23942C871B1A23D50AA7027A74ABDC7172EA3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:db:56:73:f0:6c:40:d1:95:87:fe:04:0c:34:a5:11:f9:81: 7e:fe:79:8e:73:ee:08:74:e7:b6:de:97:a2:f5:5d:aa:38:7e: 84:19:78:0d:be:f5:ea:d6:60:c6:6e:d4:fb:11:41:f8:94:14: 92:a5:e5:0d:84:08:45:24:ce:d2:1b:36:ba:6b:15:73:39:c1: 29:b2:88:b8:5d:d5:ea:eb:34:74:ae:be:43:01:44:73:05:5f: 62:6d:f7:0e:1e:cf:87:ad:8d:11:ae:5a:25:91:76:98:ff:79: 2c:b0:f5:3d:ce:07:df:bc:24:6f:21:ff:6d:02:7a:d5:7f:58: 9f:43:aa:4e:b9:45:6f:9a:64:e5:45:d2:f6:da:b9:f2:b6:e8: 7f:7e:22:ad:d3:b5:5d:13:af:b1:49:29:a1:8e:9e:4f:21:6a: 70:77:3d:34:bd:3b:d0:78:fe:f8:b0:3e:58:10:3f:90:9c:26: 7b:ba:ae:71:17:e1:24:83:cf:82:a7:d0:f0:0d:36:bf:98:48: 77:a0:a9:02:c6:08:15:81:ba:02:b4:ba:bc:40:d1:d4:37:32: 59:d8:88:60:73:5e:37:a4:bf:bb:49:81:a1:a1:76:2c:d5:a9: f8:f5:9b:cd:a8:c1:cc:85:f1:c1:c5:e1:d7:ec:6d:68:e6:d7: cd:d1:88:08 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZy8Bfe2B8CqJO0OG59kpWVNl+Z8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRThGMjM5NDJDODcxQjFBMjNENTBBQTcwMjdBNzRBQkRD NzE3MkVBMzAeFw0yNjA3MjAxODM5MzhaFw0yNjA3MjEyMDUyMzhaMDMxMTAvBgNV BAMTKDgzNTM3MUY4MDUwMDUxMjU1NDgwM0Q2NzIzNjZBQTFGRDAxQjMyMTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjV5MYpgwmN0E92+nBtppE1k1f kgo4PC6OKzzEtiaw56Fe4yGQcaE1aT3wywcIViT+lw1Z8VUHyfPLpi4gXruEmzRV 8lVnXFgazA26XeKx9VpzOWSjTz7KNVZSPQJOSv8BRxGFXbZ7qd2bTNbZdbUD7x1z 6fHhsMjDrpSLaJvYgDYhE8tQqo3zXGPiJwUeeP2kBkE1JPg4VtzzCeYgT8i8O6mt gcJlM9YSo97Dc+uEwZJp64m+omPY4en1hXmlbB7Fh2qXQYVdfBdYDy7shGDC15ds GTaDsVgvCEdgt8sHWjsDIKrZCLumfiLTr937Wzdbyz+nwHNM5OywkprJMIjtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUg1Nx+AUAUSVUgD1nI2aqH9AbMhUwHwYDVR0j BBgwFoAU6PI5QshxsaI9UKpwJ6dKvccXLqMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWJhZTU4YWMtNTkxNy00MDY5LTlhNmMtODNkYzFiYTMyMTI2LzAvRThGMjM5NDJD ODcxQjFBMjNENTBBQTcwMjdBNzRBQkRDNzE3MkVBMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FOEYyMzk0MkM4NzFCMUEyM0Q1MEFBNzAyN0E3NEFCREM3MTcy RUEzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWJhZTU4YWMtNTkxNy00MDY5LTlh NmMtODNkYzFiYTMyMTI2LzAvRThGMjM5NDJDODcxQjFBMjNENTBBQTcwMjdBNzRB QkRDNzE3MkVBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG7bVnPwbEDRlYf+BAw0pRH5gX7+eY5z7gh0 57bel6L1Xao4foQZeA2+9erWYMZu1PsRQfiUFJKl5Q2ECEUkztIbNrprFXM5wSmy iLhd1errNHSuvkMBRHMFX2Jt9w4ez4etjRGuWiWRdpj/eSyw9T3OB9+8JG8h/20C etV/WJ9Dqk65RW+aZOVF0vbaufK26H9+Iq3TtV0Tr7FJKaGOnk8hanB3PTS9O9B4 /viwPlgQP5CcJnu6rnEX4SSDz4Kn0PANNr+YSHegqQLGCBWBugK0urxA0dQ3MlnY iGBzXjekv7tJgaGhdizVqfj1m82owcyF8cHF4dfsbWjm183RiAg= -----END CERTIFICATE-----Generated at Tue Jul 21 08:42:23 2026 by rpki-client