$ rpki-client -vvf rpki-rsync.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.mft File: F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.mft (raw, json) Hash identifier: a1eItZLVtvUrhdkdQwXkdHuR6a1+vNr1qBdKiSojQCs= Subject key identifier: 7D:00:58:CC:30:93:76:39:82:47:89:57:DA:06:89:98:87:8D:21:5F Authority key identifier: F8:EB:6F:4E:91:DD:D4:7F:A8:E0:48:1B:60:D4:C1:80:86:A8:32:C9 Certificate issuer: /CN=F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9 Certificate serial: 26A37C8CF739D3DC2E7F1908E8C39784E1317AF0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.mft Manifest number: 67 Signing time: Fri 17 Jul 2026 09:09:12 +0000 Manifest this update: Fri 17 Jul 2026 09:04:12 +0000 Manifest next update: Sat 18 Jul 2026 10:28:12 +0000 Files and hashes: 1: 3130332e33312e3133322e302f32322d3232203d3e20313331373439.roa (hash: hVG5QJJlsbYPr5L1RCfsG/I/X2H5aI8Xq7RBOYv0G3o=) 2: 323430323a626538303a653030303a3a2f33352d3335203d3e20313331373439.roa (hash: apqtipmn5kmXtB7pKv4YlNHER/Ifv3+XPDXaeex3R9k=) 3: 3130332e33312e3133332e302f32342d3234203d3e20313331373439.roa (hash: /XQUhdaX/lnH/4pSzymUR8gU8PBZoGnTr2RxGh6dJJI=) 4: 323430323a626538303a643961623a3a2f34382d3438203d3e20313331373439.roa (hash: svAi0R5XEu9X4Ys1yfCbCgtQxluGGulsPQVUUn8ta/o=) 5: 3130332e33312e3133342e302f32332d3233203d3e20313331373439.roa (hash: iFasMrZpPZhCJqBPOEUsMWSE1IL6XiDkC/rJS8HVQTo=) 6: 3130332e33312e3133342e302f32342d3234203d3e20313331373439.roa (hash: OvSsEeapnu+/oiKYJIcMYudEmuSdyI2NmSImX5jHoH4=) 7: 323430323a626538303a323030303a3a2f33352d3335203d3e20313331373439.roa (hash: X24eGimplx9OKKA54SDn3PccRcDMInDYSFbqOhNXsRk=) 8: 323430323a626538303a343030303a3a2f33352d3335203d3e20313331373439.roa (hash: ZMKJ6qvXBCnIGQclOHQhPWyyMM8hgD3nw2GXMro25Y4=) 9: 3130332e33312e3133352e302f32342d3234203d3e20313331373439.roa (hash: kKPyA87cBNNbll+wZXw03s3L6LbkLTPgrzdBootFsHQ=) 10: F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.crl (hash: c+7Ip+0j+tz69+3ckG+e8NbjsKQhp4he5oeUBYnnbCY=) 11: 323430323a626538303a363030303a3a2f33352d3335203d3e20313331373439.roa (hash: bS5P/W+hj7so9J/fGjANaNnPonvylnMwWx29PNvc6E4=) 12: 323430323a626538303a633030303a3a2f33352d3335203d3e20313331373439.roa (hash: CnBcLvoSDxEWtZrVDvNMamVH18oi4O/jyEx1Mt/oRO8=) 13: 323430323a626538303a383030303a3a2f33332d3333203d3e20313331373439.roa (hash: BS5YihTbZaw+pKOipVulLJrh9jJr2QhVUAXi4IwAkiI=) 14: 323430323a626538303a3a2f33322d3332203d3e20313331373439.roa (hash: Fg6XcYLXwzdBTEEbtVqZPj3EQucOEbeogJk1AzgGxAQ=) 15: 3130332e33312e3133322e302f32342d3234203d3e20313331373439.roa (hash: zrBSW8GC94FsmSWPx82P8/uTVF2HgCkoo/2hN3b+4hM=) 16: 323430323a626538303a343030303a3a2f33342d3334203d3e20313331373439.roa (hash: Q18y495vHxKdcsVM96pc/tUI9Fl6GfmbLs035wir/JU=) 17: 323430323a626538303a613030303a3a2f33352d3335203d3e20313331373439.roa (hash: esq0SPO+hAIrG7YQPAU2RMpBG0FEhngieVqoN2H1Z00=) 18: 323430323a626538303a3a2f33352d3335203d3e20313331373439.roa (hash: ZWNoTl3f/QBfpXE45HAww//4eS88vFgydiSHbe0zdhA=) 19: 323430323a626538303a383030303a3a2f33342d3334203d3e20313331373439.roa (hash: V8AjpSzdxp8GDyMCHA7YtvW4QSVvG85ynWbgCsAEXEs=) 20: 323430323a626538303a3a2f33342d3334203d3e20313331373439.roa (hash: XYH3WtUdslBTF725L3cOP4xs8XuxcDg3daKQgahU/wE=) 21: 323430323a626538303a383030303a3a2f33352d3335203d3e20313331373439.roa (hash: bcUDOpCB0dNiYwZx7hB9TNsT/6Q2Z4ktB8wuICtWZXQ=) 22: 3130332e33312e3133322e302f32332d3233203d3e20313331373439.roa (hash: TN3/E7Y5c/nedOyTgYgff8HK90H5iShgi5mk+WZX5nw=) 23: 323430323a626538303a3a2f33332d3333203d3e20313331373439.roa (hash: t5lI2fSBgF1Qk+xi/wexkm174c0g31j+0DtjwN72lnc=) 24: 323430323a626538303a633030303a3a2f33342d3334203d3e20313331373439.roa (hash: v5Ut+HnAU8B++keMYhHXiHiE6JJw8p9vB3wAUzitQ/s=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.crl rsync://rpki-rsync.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Jul 2026 04:19:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:a3:7c:8c:f7:39:d3:dc:2e:7f:19:08:e8:c3:97:84:e1:31:7a:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9 Validity Not Before: Jul 17 09:04:12 2026 GMT Not After : Jul 18 10:28:12 2026 GMT Subject: CN=7D0058CC3093763982478957DA068998878D215F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:28:46:ff:c2:35:70:23:65:e2:7c:04:4c:fb: 43:fa:fc:1b:81:b7:6a:a4:ad:12:44:d7:a7:4a:d9: 57:65:34:fe:d3:a7:cc:d9:2e:e3:02:b5:36:1e:35: 96:dc:5c:6d:1a:79:70:5d:da:a8:f3:3b:ac:cb:e8: ef:a0:d0:a7:35:eb:15:4c:72:5d:15:73:dc:57:1c: 2f:b5:c3:02:91:8d:76:97:4c:c7:7e:35:6f:9f:10: 2e:64:b3:09:38:79:9e:58:a2:49:48:90:07:3c:00: 48:ca:ac:e0:6c:6a:9a:0c:ea:04:15:55:a7:4b:8b: bd:31:9c:48:bb:fa:6a:66:ef:ab:ea:b4:3f:7a:d2: 05:6a:89:23:a4:fc:06:3c:8e:77:d1:0f:e8:89:27: 97:b2:6f:94:1e:d4:aa:5f:80:e2:de:93:d9:4c:75: dc:b1:92:58:7a:92:81:c3:22:1e:cd:b7:ea:0f:a6: fa:ba:c5:71:cf:af:b5:55:17:bc:82:b3:6c:f8:65: 51:68:f5:a5:22:48:e0:f2:b1:cf:9f:39:ed:06:b4: cb:19:3e:2f:e9:30:c2:09:f4:4b:5a:e1:18:7b:1b: 86:55:0f:bd:9e:7b:73:2c:a3:45:f4:f0:b0:78:79: f7:b2:88:d7:5f:36:28:ba:37:28:e5:b4:86:d6:db: 40:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:00:58:CC:30:93:76:39:82:47:89:57:DA:06:89:98:87:8D:21:5F X509v3 Authority Key Identifier: keyid:F8:EB:6F:4E:91:DD:D4:7F:A8:E0:48:1B:60:D4:C1:80:86:A8:32:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:f6:63:56:c5:2e:3a:44:24:65:3d:95:e0:2e:c0:47:eb:47: 69:19:72:4a:5c:a9:63:8d:88:94:dc:93:14:18:5f:ea:51:a1: fd:74:93:be:cc:cc:43:27:c0:ed:6f:01:70:3f:da:03:74:f7: f5:3d:19:8d:60:09:78:a9:f9:db:55:39:e2:f9:e1:7a:db:14: 6f:a9:fa:69:aa:9b:7d:01:e1:86:26:d9:ea:44:09:3f:eb:b5: 65:a3:d1:34:19:7a:62:54:c5:c8:ea:79:43:74:13:c9:3a:5f: 9f:f9:c6:f5:2c:85:7f:bf:6f:41:08:72:a0:43:2b:43:fa:2f: a9:6e:2a:1b:b6:0a:7f:fe:ec:c6:13:be:51:94:10:2e:c3:f2: fa:b5:12:0d:0a:f8:95:00:8f:99:c6:e9:a4:5c:27:d2:80:b0: b2:5b:a6:76:9c:90:19:fd:3b:56:94:6f:76:00:4f:58:fd:dc: 16:45:58:8a:42:6f:d0:9d:60:73:b5:05:b0:86:e5:a6:e6:d5: 53:38:cf:f9:83:c4:fe:1f:d0:e5:14:e3:53:dd:fd:56:dd:a3: c3:15:28:ad:3b:1c:d9:ea:1e:88:50:2c:98:a1:68:1b:34:6d: 85:9a:d8:ee:7b:32:f1:80:84:0f:86:b9:f5:d7:43:c8:71:f2: 94:13:fb:50 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJqN8jPc509wufxkI6MOXhOExevAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhFQjZGNEU5MURERDQ3RkE4RTA0ODFCNjBENEMxODA4 NkE4MzJDOTAeFw0yNjA3MTcwOTA0MTJaFw0yNjA3MTgxMDI4MTJaMDMxMTAvBgNV BAMTKDdEMDA1OENDMzA5Mzc2Mzk4MjQ3ODk1N0RBMDY4OTk4ODc4RDIxNUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1KEb/wjVwI2XifARM+0P6/BuB t2qkrRJE16dK2VdlNP7Tp8zZLuMCtTYeNZbcXG0aeXBd2qjzO6zL6O+g0Kc16xVM cl0Vc9xXHC+1wwKRjXaXTMd+NW+fEC5kswk4eZ5YoklIkAc8AEjKrOBsapoM6gQV VadLi70xnEi7+mpm76vqtD960gVqiSOk/AY8jnfRD+iJJ5eyb5Qe1KpfgOLek9lM ddyxklh6koHDIh7Nt+oPpvq6xXHPr7VVF7yCs2z4ZVFo9aUiSODysc+fOe0GtMsZ Pi/pMMIJ9Eta4Rh7G4ZVD72ee3Mso0X08LB4efeyiNdfNii6NyjltIbW20ABAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfQBYzDCTdjmCR4lX2gaJmIeNIV8wHwYDVR0j BBgwFoAU+OtvTpHd1H+o4EgbYNTBgIaoMskwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzAwZjRmMzctYzdmYi00N2QwLThhODUtZWNmZDEyYjkxNWY1LzAvRjhFQjZGNEU5 MURERDQ3RkE4RTA0ODFCNjBENEMxODA4NkE4MzJDOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GOEVCNkY0RTkxRERENDdGQThFMDQ4MUI2MEQ0QzE4MDg2QTgz MkM5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzAwZjRmMzctYzdmYi00N2QwLThh ODUtZWNmZDEyYjkxNWY1LzAvRjhFQjZGNEU5MURERDQ3RkE4RTA0ODFCNjBENEMx ODA4NkE4MzJDOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAT2Y1bFLjpEJGU9leAuwEfrR2kZckpcqWON iJTckxQYX+pRof10k77MzEMnwO1vAXA/2gN09/U9GY1gCXip+dtVOeL54XrbFG+p +mmqm30B4YYm2epECT/rtWWj0TQZemJUxcjqeUN0E8k6X5/5xvUshX+/b0EIcqBD K0P6L6luKhu2Cn/+7MYTvlGUEC7D8vq1Eg0K+JUAj5nG6aRcJ9KAsLJbpnackBn9 O1aUb3YAT1j93BZFWIpCb9CdYHO1BbCG5abm1VM4z/mDxP4f0OUU41Pd/Vbdo8MV KK07HNnqHohQLJihaBs0bYWa2O57MvGAhA+GufXXQ8hx8pQT+1A= -----END CERTIFICATE-----Generated at Fri Jul 17 17:56:09 2026 by rpki-client