$ rpki-client -vvf rpki-rsync.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/8FFAA6656CAEB189705F03C7B4148624E4A80597.mft File: 8FFAA6656CAEB189705F03C7B4148624E4A80597.mft (raw, json) Hash identifier: mwO2A0jSffhhrvfKm9Q2FhW4xYEeLXyhoDrs2ufTQ7E= Subject key identifier: DC:60:8A:8C:34:D0:29:4D:00:6D:6D:9E:9F:C1:3C:FE:3A:ED:95:0A Authority key identifier: 8F:FA:A6:65:6C:AE:B1:89:70:5F:03:C7:B4:14:86:24:E4:A8:05:97 Certificate issuer: /CN=8FFAA6656CAEB189705F03C7B4148624E4A80597 Certificate serial: 5E84C3CA84E3D0F130A19ABF18D9C5FFB3EFA34A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8FFAA6656CAEB189705F03C7B4148624E4A80597.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/8FFAA6656CAEB189705F03C7B4148624E4A80597.mft Manifest number: 6B Signing time: Mon 20 Jul 2026 23:40:24 +0000 Manifest this update: Mon 20 Jul 2026 23:35:24 +0000 Manifest next update: Wed 22 Jul 2026 00:37:24 +0000 Files and hashes: 1: 3230322e35302e3230332e302f32342d3234203d3e203535363936.roa (hash: QgX53d3ZPmwqUeHqTZtdjccW/DQcVacKXuBLz3xuE+Q=) 2: 3230322e35302e3230322e302f32342d3234203d3e203535363936.roa (hash: 5tE3feCM9vyNUB/qpwvXZKU/4/GsAVh0LYhHMntcLoo=) 3: 3230322e35302e3230312e302f32342d3234203d3e203535363936.roa (hash: 9g/ng/5n6hJoQNhHnUHUl6+xhhnGERFtgslQ205VyPU=) 4: 8FFAA6656CAEB189705F03C7B4148624E4A80597.crl (hash: dpq1lR/RRjNDOQfOv74wINhXafxpNr5dJ3sIrtC41qs=) 5: 3230322e35302e3230302e302f32342d3234203d3e203535363936.roa (hash: j7IknYgKj7dl1bu8AJ/aQ/eLpW5VQAB5YDLHEEVUQxU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/8FFAA6656CAEB189705F03C7B4148624E4A80597.crl rsync://rpki-rsync.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/8FFAA6656CAEB189705F03C7B4148624E4A80597.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8FFAA6656CAEB189705F03C7B4148624E4A80597.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 00:37:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:84:c3:ca:84:e3:d0:f1:30:a1:9a:bf:18:d9:c5:ff:b3:ef:a3:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FFAA6656CAEB189705F03C7B4148624E4A80597 Validity Not Before: Jul 20 23:35:24 2026 GMT Not After : Jul 22 00:37:24 2026 GMT Subject: CN=DC608A8C34D0294D006D6D9E9FC13CFE3AED950A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:09:ad:fd:65:7c:77:d0:4b:6f:2b:0c:38:c0: 90:9b:ac:0d:dd:a6:94:fe:6f:dc:fc:23:bb:bc:8f: 10:dd:a9:dd:a1:dc:13:03:f6:9a:6d:45:5b:b3:37: 8b:90:9e:c0:4a:62:59:66:e9:aa:4e:e5:32:7f:a3: 28:d4:d2:b8:07:3d:c6:24:a9:69:20:62:1e:53:f1: 1c:18:7e:1a:a9:bd:f7:ce:5f:5e:a9:b0:3d:15:71: 3f:6d:66:5b:5e:39:4a:c6:ef:a2:a6:e0:c0:a6:0a: e5:ca:40:02:58:db:93:1d:a2:e2:9f:fb:d6:76:48: 4f:20:21:7f:69:85:51:39:9b:c3:22:fb:af:3e:24: ce:e5:22:09:d3:d5:dc:95:0a:85:38:e5:0c:b3:4f: d6:09:5f:72:a7:f8:ac:19:d0:db:12:0b:9a:b6:f4: b0:22:11:e1:e7:dc:3e:8d:10:35:91:94:59:56:c8: 75:14:d1:9f:f4:50:ba:17:df:a1:7b:a0:c2:07:e0: 14:bb:a8:b7:10:bb:13:55:af:78:ef:af:d5:2f:5c: b5:4f:99:9b:ea:64:36:c8:af:66:80:d0:c0:0d:0e: 3c:be:2e:a5:1d:3e:12:18:a9:04:82:00:2c:4c:7f: 42:4c:1b:9a:ac:96:ea:2f:b4:fb:0a:15:1c:b5:f1: 3b:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:60:8A:8C:34:D0:29:4D:00:6D:6D:9E:9F:C1:3C:FE:3A:ED:95:0A X509v3 Authority Key Identifier: keyid:8F:FA:A6:65:6C:AE:B1:89:70:5F:03:C7:B4:14:86:24:E4:A8:05:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/8FFAA6656CAEB189705F03C7B4148624E4A80597.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8FFAA6656CAEB189705F03C7B4148624E4A80597.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/8FFAA6656CAEB189705F03C7B4148624E4A80597.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:33:44:82:0f:dd:e9:e5:e1:3a:be:0f:c1:1d:a7:37:5e:87: 76:f9:c1:66:34:31:eb:6b:c3:48:a8:b4:81:d2:84:9a:2b:e3: 8d:49:7a:c5:20:77:9f:c8:a4:63:6f:10:ec:92:ab:79:b2:e6: 92:47:7c:10:6f:de:4f:29:7a:56:ff:09:f5:13:e4:3c:11:2e: e1:ca:b8:dc:b3:a7:fd:99:e5:ba:53:8f:96:bc:3f:52:02:fd: 08:1c:8f:27:b2:61:12:94:bc:d1:c0:a8:d3:dc:29:04:48:3a: e0:39:b9:20:c0:f5:47:54:e0:9e:41:05:d9:53:32:0f:6a:01: 7c:65:59:04:a6:ae:0c:0a:fd:c7:01:77:3b:72:79:01:83:aa: 50:38:c4:eb:13:04:df:5c:f1:cf:78:ab:72:2c:78:bc:c0:ae: f0:56:76:f8:f1:db:56:c2:69:a7:0d:3f:2d:78:7d:6a:c7:60: ac:d2:84:d9:c6:c8:97:b7:52:c2:29:f5:45:52:53:12:fa:f7: 93:18:b7:1c:8a:24:bd:b9:59:d6:a0:28:ac:77:3d:4c:e0:e8: d6:bb:38:aa:64:d8:3f:32:bf:df:c4:f4:09:90:8d:2d:6b:de: 98:65:b9:18:f8:2e:dc:71:7b:c5:db:75:47:7d:a5:d0:7e:1f: fa:ac:78:23 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXoTDyoTj0PEwoZq/GNnF/7Pvo0owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZGQUE2NjU2Q0FFQjE4OTcwNUYwM0M3QjQxNDg2MjRF NEE4MDU5NzAeFw0yNjA3MjAyMzM1MjRaFw0yNjA3MjIwMDM3MjRaMDMxMTAvBgNV BAMTKERDNjA4QThDMzREMDI5NEQwMDZENkQ5RTlGQzEzQ0ZFM0FFRDk1MEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzCa39ZXx30EtvKww4wJCbrA3d ppT+b9z8I7u8jxDdqd2h3BMD9pptRVuzN4uQnsBKYllm6apO5TJ/oyjU0rgHPcYk qWkgYh5T8RwYfhqpvffOX16psD0VcT9tZlteOUrG76Km4MCmCuXKQAJY25MdouKf +9Z2SE8gIX9phVE5m8Mi+68+JM7lIgnT1dyVCoU45QyzT9YJX3Kn+KwZ0NsSC5q2 9LAiEeHn3D6NEDWRlFlWyHUU0Z/0ULoX36F7oMIH4BS7qLcQuxNVr3jvr9UvXLVP mZvqZDbIr2aA0MANDjy+LqUdPhIYqQSCACxMf0JMG5qsluovtPsKFRy18Tv3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3GCKjDTQKU0AbW2en8E8/jrtlQowHwYDVR0j BBgwFoAUj/qmZWyusYlwXwPHtBSGJOSoBZcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTI4ODBkZWUtN2FhMi00YmU0LWJmMzUtY2RiZDExZDc5NTA3LzAvOEZGQUE2NjU2 Q0FFQjE4OTcwNUYwM0M3QjQxNDg2MjRFNEE4MDU5Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84RkZBQTY2NTZDQUVCMTg5NzA1RjAzQzdCNDE0ODYyNEU0QTgw NTk3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTI4ODBkZWUtN2FhMi00YmU0LWJm MzUtY2RiZDExZDc5NTA3LzAvOEZGQUE2NjU2Q0FFQjE4OTcwNUYwM0M3QjQxNDg2 MjRFNEE4MDU5Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHIzRIIP3enl4Tq+D8Edpzdeh3b5wWY0Metr w0iotIHShJor441JesUgd5/IpGNvEOySq3my5pJHfBBv3k8pelb/CfUT5DwRLuHK uNyzp/2Z5bpTj5a8P1IC/QgcjyeyYRKUvNHAqNPcKQRIOuA5uSDA9UdU4J5BBdlT Mg9qAXxlWQSmrgwK/ccBdztyeQGDqlA4xOsTBN9c8c94q3IseLzArvBWdvjx21bC aacNPy14fWrHYKzShNnGyJe3UsIp9UVSUxL695MYtxyKJL25WdagKKx3PUzg6Na7 OKpk2D8yv9/E9AmQjS1r3phluRj4Ltxxe8XbdUd9pdB+H/qseCM= -----END CERTIFICATE-----Generated at Tue Jul 21 08:33:28 2026 by rpki-client