$ rpki-client -vvf rpki-rsync.idnic.net/repo/24207523-d5f5-4acc-b0ac-bfb0954fa4e0/0/8CA8A668A240DF7B15FBC3E4516A8408BBDC47E7.mft File: 8CA8A668A240DF7B15FBC3E4516A8408BBDC47E7.mft (raw, json) Hash identifier: MDptm7oZeVX9N37PSf+8DeWyz2f3L2SbE5MepCtzvcM= Subject key identifier: 28:A7:9B:C5:2E:5A:D8:A3:F9:70:06:60:1F:57:B4:E7:5F:E2:44:CE Authority key identifier: 8C:A8:A6:68:A2:40:DF:7B:15:FB:C3:E4:51:6A:84:08:BB:DC:47:E7 Certificate issuer: /CN=8CA8A668A240DF7B15FBC3E4516A8408BBDC47E7 Certificate serial: 0E080A0C94621D70BE3AF4E4F8189993BCD994DE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8CA8A668A240DF7B15FBC3E4516A8408BBDC47E7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/24207523-d5f5-4acc-b0ac-bfb0954fa4e0/0/8CA8A668A240DF7B15FBC3E4516A8408BBDC47E7.mft Manifest number: 6C Signing time: Tue 21 Jul 2026 02:33:57 +0000 Manifest this update: Tue 21 Jul 2026 02:28:57 +0000 Manifest next update: Wed 22 Jul 2026 04:07:57 +0000 Files and hashes: 1: 3130332e31362e37392e302f32342d3234203d3e20313331373835.roa (hash: KbKAffsvKxiK1iR4ZLtyFSXqzPv63zoW9cNrraJoQ4s=) 2: 3130332e3131362e3130382e302f32342d3234203d3e20313331373835.roa (hash: CtGqY694vs+5rhe29OiFriR1fCqTy1GqyZ3iimqLrsk=) 3: 8CA8A668A240DF7B15FBC3E4516A8408BBDC47E7.crl (hash: How5cU+kqkGxunydRINw1tQryqiXGYBlP24cU9ynrEc=) 4: 3130332e3232362e35352e302f32342d3234203d3e20313331373835.roa (hash: J67UWBhwkB4SyeMxqFOonlk/hP7ZCxo/ttgUlmNhJvU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/24207523-d5f5-4acc-b0ac-bfb0954fa4e0/0/8CA8A668A240DF7B15FBC3E4516A8408BBDC47E7.crl rsync://rpki-rsync.idnic.net/repo/24207523-d5f5-4acc-b0ac-bfb0954fa4e0/0/8CA8A668A240DF7B15FBC3E4516A8408BBDC47E7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8CA8A668A240DF7B15FBC3E4516A8408BBDC47E7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 02:08:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:08:0a:0c:94:62:1d:70:be:3a:f4:e4:f8:18:99:93:bc:d9:94:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8CA8A668A240DF7B15FBC3E4516A8408BBDC47E7 Validity Not Before: Jul 21 02:28:57 2026 GMT Not After : Jul 22 04:07:57 2026 GMT Subject: CN=28A79BC52E5AD8A3F97006601F57B4E75FE244CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:45:59:17:3f:e6:09:7a:ce:ce:0d:cb:98:56: ac:a9:80:96:75:28:90:92:1a:84:ed:d2:b2:bc:90: 3e:08:d9:26:92:8b:4f:7a:cd:e6:d6:b0:e8:e7:dc: 65:d7:34:82:20:1e:f4:59:9e:da:69:b3:ba:42:99: 37:ce:a5:59:3c:dc:cb:12:da:99:21:05:7d:b0:4a: 1c:42:c4:75:93:8b:ee:47:47:a6:09:3c:21:83:98: 9f:db:86:4d:29:a9:66:30:da:d9:8f:6c:ec:7a:55: 5e:ed:78:92:a4:f7:d6:84:34:85:6d:12:df:99:4b: ae:7e:6b:6b:23:2c:89:e0:b9:3c:f1:a6:ec:ae:ef: f0:0b:aa:05:f1:d0:50:77:e4:bd:dc:f7:7e:86:62: 0d:16:09:d3:82:34:26:74:fe:7b:cd:3c:04:3f:30: 41:6c:81:6b:44:0b:4d:ee:50:15:73:5d:b8:16:3d: 73:78:8e:b0:8b:17:73:64:f3:ba:16:49:eb:ec:f1: 37:01:48:a5:69:a8:4e:e1:af:4f:36:65:ec:f8:55: b4:a1:bd:eb:af:a9:45:4d:01:1f:31:60:ee:4a:2f: 4a:55:96:dd:37:31:35:d3:ab:eb:68:94:40:8e:f9: d8:8b:b8:91:ce:98:27:02:ba:34:e0:13:16:35:11: 27:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:A7:9B:C5:2E:5A:D8:A3:F9:70:06:60:1F:57:B4:E7:5F:E2:44:CE X509v3 Authority Key Identifier: keyid:8C:A8:A6:68:A2:40:DF:7B:15:FB:C3:E4:51:6A:84:08:BB:DC:47:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/24207523-d5f5-4acc-b0ac-bfb0954fa4e0/0/8CA8A668A240DF7B15FBC3E4516A8408BBDC47E7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8CA8A668A240DF7B15FBC3E4516A8408BBDC47E7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/24207523-d5f5-4acc-b0ac-bfb0954fa4e0/0/8CA8A668A240DF7B15FBC3E4516A8408BBDC47E7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:a3:22:4d:34:c1:1d:6f:6d:eb:f3:fe:2c:ef:db:bc:b9:b0: 24:d5:b4:84:1a:3f:1e:12:3d:55:90:fd:0f:88:a4:09:5c:09: 4c:46:5d:40:dd:95:64:46:d0:d5:1c:9b:da:ba:64:1e:59:fd: 3a:04:ed:ee:18:e2:a8:3e:70:c4:3d:b9:c6:71:5e:58:7b:cd: eb:51:88:54:53:9d:47:c6:84:00:80:cb:81:c5:95:35:d4:05: 92:5e:3d:00:8e:74:ee:65:45:da:01:be:99:c4:88:c5:1a:27: ab:fc:5f:20:98:f6:5d:c3:54:98:d0:3a:1f:30:11:e7:6b:77: 4f:e7:62:64:7c:e2:3e:b5:ea:a6:8f:6f:dc:97:b7:ab:ae:a4: c2:7e:f9:a9:ea:24:eb:0b:56:f2:de:73:22:f3:ad:df:73:dd: 68:61:37:01:de:05:6d:8f:7c:39:a3:81:a0:9d:3e:a2:bb:7f: c6:86:03:92:08:ea:07:05:38:39:f1:f4:78:80:3d:93:de:11: 8c:29:66:99:ca:1f:5c:76:5f:59:61:20:83:b0:05:c4:e1:9c: da:b4:31:22:fd:b2:68:63:3a:c1:86:d4:0f:c3:64:84:02:19: 49:c8:9a:63:73:2b:02:8f:fd:46:bd:a1:80:ee:17:a0:86:4d: f7:65:68:1c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDggKDJRiHXC+OvTk+BiZk7zZlN4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOENBOEE2NjhBMjQwREY3QjE1RkJDM0U0NTE2QTg0MDhC QkRDNDdFNzAeFw0yNjA3MjEwMjI4NTdaFw0yNjA3MjIwNDA3NTdaMDMxMTAvBgNV BAMTKDI4QTc5QkM1MkU1QUQ4QTNGOTcwMDY2MDFGNTdCNEU3NUZFMjQ0Q0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgRVkXP+YJes7ODcuYVqypgJZ1 KJCSGoTt0rK8kD4I2SaSi096zebWsOjn3GXXNIIgHvRZntpps7pCmTfOpVk83MsS 2pkhBX2wShxCxHWTi+5HR6YJPCGDmJ/bhk0pqWYw2tmPbOx6VV7teJKk99aENIVt Et+ZS65+a2sjLInguTzxpuyu7/ALqgXx0FB35L3c936GYg0WCdOCNCZ0/nvNPAQ/ MEFsgWtEC03uUBVzXbgWPXN4jrCLF3Nk87oWSevs8TcBSKVpqE7hr082Zez4VbSh veuvqUVNAR8xYO5KL0pVlt03MTXTq+tolECO+diLuJHOmCcCujTgExY1ESdvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKKebxS5a2KP5cAZgH1e051/iRM4wHwYDVR0j BBgwFoAUjKimaKJA33sV+8PkUWqECLvcR+cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjQyMDc1MjMtZDVmNS00YWNjLWIwYWMtYmZiMDk1NGZhNGUwLzAvOENBOEE2NjhB MjQwREY3QjE1RkJDM0U0NTE2QTg0MDhCQkRDNDdFNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84Q0E4QTY2OEEyNDBERjdCMTVGQkMzRTQ1MTZBODQwOEJCREM0 N0U3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjQyMDc1MjMtZDVmNS00YWNjLWIw YWMtYmZiMDk1NGZhNGUwLzAvOENBOEE2NjhBMjQwREY3QjE1RkJDM0U0NTE2QTg0 MDhCQkRDNDdFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEmjIk00wR1vbevz/izv27y5sCTVtIQaPx4S PVWQ/Q+IpAlcCUxGXUDdlWRG0NUcm9q6ZB5Z/ToE7e4Y4qg+cMQ9ucZxXlh7zetR iFRTnUfGhACAy4HFlTXUBZJePQCOdO5lRdoBvpnEiMUaJ6v8XyCY9l3DVJjQOh8w Eedrd0/nYmR84j616qaPb9yXt6uupMJ++anqJOsLVvLecyLzrd9z3WhhNwHeBW2P fDmjgaCdPqK7f8aGA5II6gcFODnx9HiAPZPeEYwpZpnKH1x2X1lhIIOwBcThnNq0 MSL9smhjOsGG1A/DZIQCGUnImmNzKwKP/Ua9oYDuF6CGTfdlaBw= -----END CERTIFICATE-----Generated at Tue Jul 21 10:54:12 2026 by rpki-client