$ rpki-client -vvf rpki-rsync.idnic.net/repo/2226be7b-2e28-4950-aa4c-2185e647db3f/0/F8F6686532E7BB704E802B6D3B48B33DD061D9A4.mft File: F8F6686532E7BB704E802B6D3B48B33DD061D9A4.mft (raw, json) Hash identifier: tsLx70VXmCyryTJcRdc/tvaUBpdIp+/cSPxSiWmawk0= Subject key identifier: D8:07:9E:7F:D5:5E:2D:FD:80:FA:73:DC:16:EA:15:64:AD:F6:50:08 Authority key identifier: F8:F6:68:65:32:E7:BB:70:4E:80:2B:6D:3B:48:B3:3D:D0:61:D9:A4 Certificate issuer: /CN=F8F6686532E7BB704E802B6D3B48B33DD061D9A4 Certificate serial: 7526C6C48940B163273431AE1E3A59F8B92602F7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8F6686532E7BB704E802B6D3B48B33DD061D9A4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2226be7b-2e28-4950-aa4c-2185e647db3f/0/F8F6686532E7BB704E802B6D3B48B33DD061D9A4.mft Manifest number: 6A Signing time: Tue 21 Jul 2026 02:08:20 +0000 Manifest this update: Tue 21 Jul 2026 02:03:20 +0000 Manifest next update: Wed 22 Jul 2026 04:34:20 +0000 Files and hashes: 1: 3130332e33392e36382e302f32342d3234203d3e20313530323730.roa (hash: zPAHd45OpjoBbHs1U75wpIAsa5qEeUqNzEkLN1k94xM=) 2: F8F6686532E7BB704E802B6D3B48B33DD061D9A4.crl (hash: OsO1rwm4yVJibYwPGZTqwUk2GFJf+5dBzwVP6x+elW4=) 3: 3130332e33392e36382e302f32332d3233203d3e20313530323730.roa (hash: SMrMHroRrnR9209rBvRZEueHMTUoBXgkpdWBsenWKng=) 4: 3130332e33392e36392e302f32342d3234203d3e20313530323730.roa (hash: 7b9mH0AqpbaWOjZuhqAUMtLrNThijZIRNrCRnrYSzNM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2226be7b-2e28-4950-aa4c-2185e647db3f/0/F8F6686532E7BB704E802B6D3B48B33DD061D9A4.crl rsync://rpki-rsync.idnic.net/repo/2226be7b-2e28-4950-aa4c-2185e647db3f/0/F8F6686532E7BB704E802B6D3B48B33DD061D9A4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8F6686532E7BB704E802B6D3B48B33DD061D9A4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 02:08:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:26:c6:c4:89:40:b1:63:27:34:31:ae:1e:3a:59:f8:b9:26:02:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8F6686532E7BB704E802B6D3B48B33DD061D9A4 Validity Not Before: Jul 21 02:03:20 2026 GMT Not After : Jul 22 04:34:20 2026 GMT Subject: CN=D8079E7FD55E2DFD80FA73DC16EA1564ADF65008 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:5d:07:1a:45:70:5c:61:f7:47:b9:a7:6c:07: cb:e6:a3:08:34:27:6c:01:ac:51:0e:bd:bc:cf:40: ef:5e:a7:13:28:7f:4f:c3:3d:7f:71:70:86:6f:3d: 68:ce:d4:47:be:c8:09:6d:47:0b:6f:69:be:69:a2: d1:bd:4a:20:f7:6b:1e:78:bd:71:88:ee:ea:3e:58: e6:ef:c3:1c:fb:b6:20:dd:1a:ee:96:e0:7f:de:86: 50:79:2e:37:b9:89:5d:27:1f:81:32:ea:c3:32:0b: f7:cd:20:78:fe:0a:98:4d:36:27:7d:b3:7b:77:d7: f5:46:fb:96:0b:2d:5c:b8:15:55:53:6b:05:27:73: d0:3d:26:a4:0c:fc:4f:44:17:66:7d:e1:f4:f6:a5: fd:e9:54:86:17:c0:9c:d4:39:60:13:e2:2b:36:f7: 4b:57:0b:c7:60:c3:e2:27:e6:c2:90:75:97:86:ee: 44:eb:2a:93:94:55:c5:e4:77:2f:3c:48:6c:e7:4a: 2d:df:8c:7c:5d:4f:8b:f7:18:1e:d1:a5:4f:6a:a6: e5:b1:71:7c:c2:9d:6f:2a:99:3f:ad:37:2c:53:04: 5f:72:e9:44:42:b4:4a:9e:22:40:5d:bc:17:cb:4a: 0a:f4:6e:2f:ba:78:20:4f:90:6f:7c:bc:20:80:76: 85:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:07:9E:7F:D5:5E:2D:FD:80:FA:73:DC:16:EA:15:64:AD:F6:50:08 X509v3 Authority Key Identifier: keyid:F8:F6:68:65:32:E7:BB:70:4E:80:2B:6D:3B:48:B3:3D:D0:61:D9:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2226be7b-2e28-4950-aa4c-2185e647db3f/0/F8F6686532E7BB704E802B6D3B48B33DD061D9A4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8F6686532E7BB704E802B6D3B48B33DD061D9A4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2226be7b-2e28-4950-aa4c-2185e647db3f/0/F8F6686532E7BB704E802B6D3B48B33DD061D9A4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:80:0b:d9:17:ce:c1:ca:91:28:a0:d1:44:39:e3:d0:68:62: a0:8e:9b:1d:ec:1f:f8:30:a9:90:96:68:59:97:e1:4c:90:3e: 48:ea:2a:0a:65:98:63:4f:c9:9c:27:67:ac:7b:51:1d:dc:77: 18:90:7e:cf:9e:fb:9a:2a:09:20:39:64:9e:90:19:1a:39:97: a9:2f:e0:a6:12:9b:b7:23:ab:ca:4b:7c:6e:ad:87:97:d2:af: 4c:b5:6f:8b:40:5e:f2:4d:8c:b0:f8:31:a3:28:76:8e:29:10: 40:27:7b:87:e8:dc:4e:17:97:7a:80:fc:b7:7b:2e:cf:89:96: 1d:c1:d9:b4:b5:20:78:dc:40:89:eb:b4:36:14:fc:bf:be:35: ae:2d:13:94:85:21:70:b4:12:c2:46:da:5b:f6:f3:99:38:60: 00:fd:5f:2a:14:17:1f:e5:16:e8:ca:b8:37:b5:3f:82:e9:e5: 5f:b8:44:0a:ef:bc:aa:7e:3d:00:d4:1a:87:e3:03:fc:2f:59: 75:a9:95:6e:e7:4d:1b:35:57:9d:f5:57:af:d1:63:ce:c0:02: a5:9f:2d:19:f9:84:10:05:07:7a:16:aa:45:c7:2c:50:6b:8d: 10:32:f6:d1:dd:ce:b7:d1:11:7a:3f:ee:29:98:15:8c:14:ff: 22:73:4b:5b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdSbGxIlAsWMnNDGuHjpZ+LkmAvcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhGNjY4NjUzMkU3QkI3MDRFODAyQjZEM0I0OEIzM0RE MDYxRDlBNDAeFw0yNjA3MjEwMjAzMjBaFw0yNjA3MjIwNDM0MjBaMDMxMTAvBgNV BAMTKEQ4MDc5RTdGRDU1RTJERkQ4MEZBNzNEQzE2RUExNTY0QURGNjUwMDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrXQcaRXBcYfdHuadsB8vmowg0 J2wBrFEOvbzPQO9epxMof0/DPX9xcIZvPWjO1Ee+yAltRwtvab5potG9SiD3ax54 vXGI7uo+WObvwxz7tiDdGu6W4H/ehlB5Lje5iV0nH4Ey6sMyC/fNIHj+CphNNid9 s3t31/VG+5YLLVy4FVVTawUnc9A9JqQM/E9EF2Z94fT2pf3pVIYXwJzUOWAT4is2 90tXC8dgw+In5sKQdZeG7kTrKpOUVcXkdy88SGznSi3fjHxdT4v3GB7RpU9qpuWx cXzCnW8qmT+tNyxTBF9y6URCtEqeIkBdvBfLSgr0bi+6eCBPkG98vCCAdoX9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2Aeef9VeLf2A+nPcFuoVZK32UAgwHwYDVR0j BBgwFoAU+PZoZTLnu3BOgCttO0izPdBh2aQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjIyNmJlN2ItMmUyOC00OTUwLWFhNGMtMjE4NWU2NDdkYjNmLzAvRjhGNjY4NjUz MkU3QkI3MDRFODAyQjZEM0I0OEIzM0REMDYxRDlBNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GOEY2Njg2NTMyRTdCQjcwNEU4MDJCNkQzQjQ4QjMzREQwNjFE OUE0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjIyNmJlN2ItMmUyOC00OTUwLWFh NGMtMjE4NWU2NDdkYjNmLzAvRjhGNjY4NjUzMkU3QkI3MDRFODAyQjZEM0I0OEIz M0REMDYxRDlBNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFeAC9kXzsHKkSig0UQ549BoYqCOmx3sH/gw qZCWaFmX4UyQPkjqKgplmGNPyZwnZ6x7UR3cdxiQfs+e+5oqCSA5ZJ6QGRo5l6kv 4KYSm7cjq8pLfG6th5fSr0y1b4tAXvJNjLD4MaModo4pEEAne4fo3E4Xl3qA/Ld7 Ls+Jlh3B2bS1IHjcQInrtDYU/L++Na4tE5SFIXC0EsJG2lv285k4YAD9XyoUFx/l FujKuDe1P4Lp5V+4RArvvKp+PQDUGofjA/wvWXWplW7nTRs1V531V6/RY87AAqWf LRn5hBAFB3oWqkXHLFBrjRAy9tHdzrfREXo/7imYFYwU/yJzS1s= -----END CERTIFICATE-----Generated at Tue Jul 21 08:33:31 2026 by rpki-client