$ rpki-client -vvf rpki-rsync.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C8C1A31E42E799E9EDC0FAB813163052945845AC.mft File: C8C1A31E42E799E9EDC0FAB813163052945845AC.mft (raw, json) Hash identifier: L1rYJTh0l5QRQISdNHPtg0lw91FJ0a1DQSAQCYzgdMo= Subject key identifier: 7D:1D:3E:A3:3A:6D:1D:A7:27:1E:D8:F4:69:BA:53:3F:79:1D:34:AC Authority key identifier: C8:C1:A3:1E:42:E7:99:E9:ED:C0:FA:B8:13:16:30:52:94:58:45:AC Certificate issuer: /CN=C8C1A31E42E799E9EDC0FAB813163052945845AC Certificate serial: 7F1FD4A59E7930CB2A0815BED248AC5381FCF3DE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C8C1A31E42E799E9EDC0FAB813163052945845AC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C8C1A31E42E799E9EDC0FAB813163052945845AC.mft Manifest number: 55 Signing time: Sat 04 Jul 2026 07:01:00 +0000 Manifest this update: Sat 04 Jul 2026 06:56:00 +0000 Manifest next update: Sun 05 Jul 2026 09:21:00 +0000 Files and hashes: 1: C8C1A31E42E799E9EDC0FAB813163052945845AC.crl (hash: YE/pSQ5uniYaK0s6ZaH2rDjq0Vz2hp9giYqufW8G6/w=) 2: 323430373a373263303a3a2f33322d3332203d3e203538383230.roa (hash: QTf5TvW/sGJCtiqjYOWSFSyqMXy6xLfUyzA5Wf2VFMo=) 3: 3130332e3135322e39322e302f32332d3234203d3e20313338383630.roa (hash: UWH9gD1/4ElZU52MCqktUtjxRojq4daDEIdWkUnok2k=) 4: 323430373a373263303a3a2f33322d3438203d3e203538383230.roa (hash: FEgS5ex34lgarvKtqbdAVQc0toy/dLHosJymf/4jCzU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C8C1A31E42E799E9EDC0FAB813163052945845AC.crl rsync://rpki-rsync.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C8C1A31E42E799E9EDC0FAB813163052945845AC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C8C1A31E42E799E9EDC0FAB813163052945845AC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 Jul 2026 05:42:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:1f:d4:a5:9e:79:30:cb:2a:08:15:be:d2:48:ac:53:81:fc:f3:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C8C1A31E42E799E9EDC0FAB813163052945845AC Validity Not Before: Jul 4 06:56:00 2026 GMT Not After : Jul 5 09:21:00 2026 GMT Subject: CN=7D1D3EA33A6D1DA7271ED8F469BA533F791D34AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:5f:7c:66:7b:28:65:a0:af:ee:77:d7:26:44: 94:17:a2:b7:ca:3f:61:98:6e:66:a0:3c:a2:24:a2: 52:77:08:f9:2c:09:3e:30:46:c6:f4:58:e0:9c:1d: 27:66:82:da:33:13:2b:cf:54:f3:34:d6:f5:df:17: 74:17:ec:17:34:50:23:a6:1b:4f:20:39:79:12:98: 1d:57:fe:4a:d5:b9:80:7d:03:8c:ae:32:6e:a5:05: ba:e4:40:63:0b:23:08:8a:e1:85:79:e8:c9:4c:70: bc:ce:56:fc:1d:a9:d8:db:96:7e:45:92:17:f2:6c: 45:0c:a3:86:2b:c9:87:be:a9:52:1f:ef:ba:a9:b4: da:7f:71:84:b5:de:b5:96:1f:f2:f8:84:44:be:b9: 5b:ea:04:a7:a1:52:14:6c:99:3c:d2:71:6c:69:e0: 5b:2c:78:f7:7c:1f:df:77:a7:9c:70:0d:b2:c4:e3: 71:2e:40:f7:ae:97:07:3a:f0:ad:d4:04:e4:43:d1: be:85:1b:68:69:52:df:05:26:b9:14:18:45:93:0f: b5:ae:e1:2f:90:11:d5:4f:26:3d:ff:53:da:96:0c: 43:e2:c0:e2:8c:32:35:ff:e8:cb:ad:41:03:08:3e: 0a:c4:f4:d9:0f:8d:ab:34:eb:5c:67:72:e9:88:ec: 74:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:1D:3E:A3:3A:6D:1D:A7:27:1E:D8:F4:69:BA:53:3F:79:1D:34:AC X509v3 Authority Key Identifier: keyid:C8:C1:A3:1E:42:E7:99:E9:ED:C0:FA:B8:13:16:30:52:94:58:45:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C8C1A31E42E799E9EDC0FAB813163052945845AC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C8C1A31E42E799E9EDC0FAB813163052945845AC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C8C1A31E42E799E9EDC0FAB813163052945845AC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:ac:88:28:06:2c:ae:02:7e:bc:5a:ea:e9:8a:8e:b1:d7:3e: 9c:e0:6a:37:ed:03:27:5c:ae:0a:c6:18:f1:e0:20:a7:43:9a: eb:99:09:c6:1b:a1:f8:57:79:82:bb:3a:25:fd:0c:5e:2e:7f: 87:d2:cb:d3:d6:85:8a:6a:e6:20:ce:1e:9b:5b:6d:61:a7:20: d5:60:37:cc:07:05:d3:68:ea:fa:8d:9e:4f:13:b2:a2:ce:dd: c0:80:96:63:14:8e:ee:69:a0:58:84:ee:9d:b8:79:d6:0b:aa: 56:92:77:b4:da:9c:12:ae:66:c7:8f:9f:53:1d:58:fb:9e:61: 33:09:fa:41:e5:74:70:7e:d6:23:79:b0:22:14:ea:ed:0f:d5: 8a:91:8c:7e:e4:29:10:0e:cf:5d:37:d6:5a:ea:aa:20:ef:30: eb:9b:75:85:04:06:f1:c5:40:c5:b3:a8:04:cf:20:58:95:2c: 73:e9:a8:86:ca:ab:57:a0:5a:94:9a:bd:97:90:b0:74:eb:7e: e5:9c:f6:9b:8b:ae:59:44:0d:91:35:93:bb:14:af:59:8b:99: 3d:ff:9b:56:e5:5c:d7:2f:ea:40:d9:b7:7c:ea:e2:2d:39:1f: 1a:a9:1b:a1:88:c5:88:15:4e:1b:ac:0e:d8:6e:c8:00:7d:62: c7:90:62:cc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfx/UpZ55MMsqCBW+0kisU4H8894wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzhDMUEzMUU0MkU3OTlFOUVEQzBGQUI4MTMxNjMwNTI5 NDU4NDVBQzAeFw0yNjA3MDQwNjU2MDBaFw0yNjA3MDUwOTIxMDBaMDMxMTAvBgNV BAMTKDdEMUQzRUEzM0E2RDFEQTcyNzFFRDhGNDY5QkE1MzNGNzkxRDM0QUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmX3xmeyhloK/ud9cmRJQXorfK P2GYbmagPKIkolJ3CPksCT4wRsb0WOCcHSdmgtozEyvPVPM01vXfF3QX7Bc0UCOm G08gOXkSmB1X/krVuYB9A4yuMm6lBbrkQGMLIwiK4YV56MlMcLzOVvwdqdjbln5F khfybEUMo4YryYe+qVIf77qptNp/cYS13rWWH/L4hES+uVvqBKehUhRsmTzScWxp 4FssePd8H993p5xwDbLE43EuQPeulwc68K3UBORD0b6FG2hpUt8FJrkUGEWTD7Wu 4S+QEdVPJj3/U9qWDEPiwOKMMjX/6MutQQMIPgrE9NkPjas061xncumI7HQXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfR0+ozptHacnHtj0abpTP3kdNKwwHwYDVR0j BBgwFoAUyMGjHkLnmentwPq4ExYwUpRYRawwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzhjOWMyNTItZjdjYS00ZGQ1LTg4ZjYtMjJhZGRjODkzNGIzLzAvQzhDMUEzMUU0 MkU3OTlFOUVEQzBGQUI4MTMxNjMwNTI5NDU4NDVBQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DOEMxQTMxRTQyRTc5OUU5RURDMEZBQjgxMzE2MzA1Mjk0NTg0 NUFDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzhjOWMyNTItZjdjYS00ZGQ1LTg4 ZjYtMjJhZGRjODkzNGIzLzAvQzhDMUEzMUU0MkU3OTlFOUVEQzBGQUI4MTMxNjMw NTI5NDU4NDVBQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGSsiCgGLK4Cfrxa6umKjrHXPpzgajftAydc rgrGGPHgIKdDmuuZCcYbofhXeYK7OiX9DF4uf4fSy9PWhYpq5iDOHptbbWGnINVg N8wHBdNo6vqNnk8TsqLO3cCAlmMUju5poFiE7p24edYLqlaSd7TanBKuZsePn1Md WPueYTMJ+kHldHB+1iN5sCIU6u0P1YqRjH7kKRAOz1031lrqqiDvMOubdYUEBvHF QMWzqATPIFiVLHPpqIbKq1egWpSavZeQsHTrfuWc9puLrllEDZE1k7sUr1mLmT3/ m1blXNcv6kDZt3zq4i05HxqpG6GIxYgVThusDthuyAB9YseQYsw= -----END CERTIFICATE-----Generated at Sat Jul 4 11:20:47 2026 by rpki-client