$ rpki-client -vvf rpki-rsync.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/C8647EDF5EFDE971229F5D76818B3957AA6D8A14.mft File: C8647EDF5EFDE971229F5D76818B3957AA6D8A14.mft (raw, json) Hash identifier: XzRsJuKqYsXOpAWa1qxb2uZYmakxq6jD8Z1lsKaBRvs= Subject key identifier: D6:E3:80:DB:0A:1B:DE:F9:A1:77:69:BC:8F:C2:5E:15:AC:69:59:1F Authority key identifier: C8:64:7E:DF:5E:FD:E9:71:22:9F:5D:76:81:8B:39:57:AA:6D:8A:14 Certificate issuer: /CN=C8647EDF5EFDE971229F5D76818B3957AA6D8A14 Certificate serial: 77004AD07735C6032CD570E0EB9AD048530A33C8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C8647EDF5EFDE971229F5D76818B3957AA6D8A14.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/C8647EDF5EFDE971229F5D76818B3957AA6D8A14.mft Manifest number: 6B Signing time: Mon 20 Jul 2026 17:43:19 +0000 Manifest this update: Mon 20 Jul 2026 17:38:19 +0000 Manifest next update: Tue 21 Jul 2026 18:20:19 +0000 Files and hashes: 1: 3130332e3138342e31372e302f32342d3234203d3e20313530343739.roa (hash: pBKVlpjSQfisARzQp/uCxR6vxT0fT2aUvnTqNxA3JGc=) 2: 3130332e3138342e31362e302f32342d3234203d3e20313439333135.roa (hash: oRViKlwXLb62v1XHH/P9v9PE35BuLaTpbEgB9nVLGXo=) 3: 3130332e3138342e31372e302f32342d3234203d3e20313439333135.roa (hash: 1Jb72gV9Cql494HOmw4p+CcUceiPzhX48HtoigKm8xc=) 4: C8647EDF5EFDE971229F5D76818B3957AA6D8A14.crl (hash: etz5oT3kQKxDd8Y5yMprRBIO0uV3INlTFy5EpjhUCg0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/C8647EDF5EFDE971229F5D76818B3957AA6D8A14.crl rsync://rpki-rsync.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/C8647EDF5EFDE971229F5D76818B3957AA6D8A14.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C8647EDF5EFDE971229F5D76818B3957AA6D8A14.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 18:20:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:00:4a:d0:77:35:c6:03:2c:d5:70:e0:eb:9a:d0:48:53:0a:33:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C8647EDF5EFDE971229F5D76818B3957AA6D8A14 Validity Not Before: Jul 20 17:38:19 2026 GMT Not After : Jul 21 18:20:19 2026 GMT Subject: CN=D6E380DB0A1BDEF9A17769BC8FC25E15AC69591F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:41:a6:a2:b2:81:05:2f:39:d5:7e:ab:7e:88: 0a:d0:db:4b:c1:77:65:36:ef:26:5a:fa:91:cb:91: cd:1e:40:86:21:fd:72:8b:02:c9:8a:48:21:46:2b: b0:90:8a:29:8e:dd:79:9d:ed:3e:bf:07:f8:a3:4e: 40:e5:ef:7f:82:05:77:d9:7b:bf:72:0a:91:3b:95: b3:df:f5:b0:5b:75:9c:b4:5a:f0:ff:db:61:70:a2: bd:15:dd:29:09:8f:48:44:8f:0f:7d:43:90:a9:68: 3f:c2:39:32:98:7d:2b:61:05:c7:bb:5a:f0:0f:fb: e0:02:d6:6b:d1:a4:10:1d:28:c8:2f:2b:ca:2a:c7: 88:13:db:31:b3:c3:2e:a8:42:5f:1c:75:6e:88:0b: d9:92:4c:fb:cd:c8:32:9c:53:a1:dd:44:ff:0d:17: 58:cd:2f:64:49:99:3e:59:b9:cd:fc:88:d6:1a:2b: f5:45:4f:c1:04:c5:4a:da:7f:3a:eb:5c:45:18:4c: 76:72:7c:24:41:e5:c9:e6:b9:b1:ba:38:28:42:12: f8:20:f2:e9:20:25:45:58:fc:0f:90:bc:b3:81:d5: a8:91:4d:e4:60:b3:d9:cc:bc:07:b2:9f:52:18:4c: c6:e8:a0:c4:f4:75:57:5e:c4:1a:d4:74:e4:53:d8: 9e:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:E3:80:DB:0A:1B:DE:F9:A1:77:69:BC:8F:C2:5E:15:AC:69:59:1F X509v3 Authority Key Identifier: keyid:C8:64:7E:DF:5E:FD:E9:71:22:9F:5D:76:81:8B:39:57:AA:6D:8A:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/C8647EDF5EFDE971229F5D76818B3957AA6D8A14.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C8647EDF5EFDE971229F5D76818B3957AA6D8A14.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/C8647EDF5EFDE971229F5D76818B3957AA6D8A14.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:f0:dd:9a:db:71:28:77:2e:cc:e8:9b:27:01:08:b1:34:3c: e0:b7:a8:ae:7c:ef:bb:ec:46:74:93:30:bc:72:75:ad:b8:92: 24:2f:15:5f:91:e4:57:76:96:2c:1d:5c:22:b7:24:1f:52:0c: b0:3c:fa:d5:8a:5c:1d:6f:2f:8d:3a:12:72:22:e7:34:2b:83: 5c:6d:c1:f2:5e:01:03:e7:72:65:7c:4b:d9:a6:88:01:d8:a9: 34:a6:aa:8e:d7:f8:86:d3:65:a8:62:e1:15:64:90:bb:a8:15: 25:0b:c1:19:3d:4b:f2:f7:0a:0a:ce:a7:69:a7:b8:94:e0:48: c9:8f:18:13:4a:d6:2b:91:60:73:2f:6b:61:65:8b:40:cf:aa: 55:bb:f7:c3:a9:5e:f8:1a:ea:67:e4:ac:46:46:96:a2:a3:f2: 1e:6a:75:ea:89:b5:13:38:b1:7c:6c:55:9a:d7:eb:7d:d9:6a: 65:57:6b:cf:5a:c8:ae:e9:a0:f5:6a:91:86:15:d9:cf:c6:8b: 8c:fc:d8:d5:a0:44:0a:c5:d0:a2:e2:2e:38:e4:22:9d:7f:e8: 56:f3:39:32:74:49:4b:38:06:f4:78:03:69:dc:18:84:87:ba: 3c:89:c8:2d:b9:f1:d1:a6:35:44:95:ce:9c:57:69:f4:0a:43: 34:f5:61:8f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdwBK0Hc1xgMs1XDg65rQSFMKM8gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzg2NDdFREY1RUZERTk3MTIyOUY1RDc2ODE4QjM5NTdB QTZEOEExNDAeFw0yNjA3MjAxNzM4MTlaFw0yNjA3MjExODIwMTlaMDMxMTAvBgNV BAMTKEQ2RTM4MERCMEExQkRFRjlBMTc3NjlCQzhGQzI1RTE1QUM2OTU5MUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUQaaisoEFLznVfqt+iArQ20vB d2U27yZa+pHLkc0eQIYh/XKLAsmKSCFGK7CQiimO3Xmd7T6/B/ijTkDl73+CBXfZ e79yCpE7lbPf9bBbdZy0WvD/22Fwor0V3SkJj0hEjw99Q5CpaD/COTKYfSthBce7 WvAP++AC1mvRpBAdKMgvK8oqx4gT2zGzwy6oQl8cdW6IC9mSTPvNyDKcU6HdRP8N F1jNL2RJmT5Zuc38iNYaK/VFT8EExUrafzrrXEUYTHZyfCRB5cnmubG6OChCEvgg 8ukgJUVY/A+QvLOB1aiRTeRgs9nMvAeyn1IYTMbooMT0dVdexBrUdORT2J4FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1uOA2wob3vmhd2m8j8JeFaxpWR8wHwYDVR0j BBgwFoAUyGR+31796XEin112gYs5V6ptihQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjVkMzhiNDItYjdjMi00MmI2LWEyZmMtNjc1ZGEyNTRjNzc2LzAvQzg2NDdFREY1 RUZERTk3MTIyOUY1RDc2ODE4QjM5NTdBQTZEOEExNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DODY0N0VERjVFRkRFOTcxMjI5RjVENzY4MThCMzk1N0FBNkQ4 QTE0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjVkMzhiNDItYjdjMi00MmI2LWEy ZmMtNjc1ZGEyNTRjNzc2LzAvQzg2NDdFREY1RUZERTk3MTIyOUY1RDc2ODE4QjM5 NTdBQTZEOEExNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHfw3ZrbcSh3LszomycBCLE0POC3qK5877vs RnSTMLxyda24kiQvFV+R5Fd2liwdXCK3JB9SDLA8+tWKXB1vL406EnIi5zQrg1xt wfJeAQPncmV8S9mmiAHYqTSmqo7X+IbTZahi4RVkkLuoFSULwRk9S/L3CgrOp2mn uJTgSMmPGBNK1iuRYHMva2Fli0DPqlW798OpXvga6mfkrEZGlqKj8h5qdeqJtRM4 sXxsVZrX633ZamVXa89ayK7poPVqkYYV2c/Gi4z82NWgRArF0KLiLjjkIp1/6Fbz OTJ0SUs4BvR4A2ncGISHujyJyC258dGmNUSVzpxXafQKQzT1YY8= -----END CERTIFICATE-----Generated at Tue Jul 21 08:39:02 2026 by rpki-client