$ rpki-client -vvf rpki-rsync.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/8CD6FC0255FD1ED17FD82CFA8B66D24A29BA1D8E.mft File: 8CD6FC0255FD1ED17FD82CFA8B66D24A29BA1D8E.mft (raw, json) Hash identifier: 0XNrqfPAziuAdESYtfSf1nD9qQeV3Ky5JvLy+Goz5FM= Subject key identifier: 8F:06:F0:1F:D3:C2:99:70:68:99:F8:E7:31:10:1A:5D:AF:EE:CE:74 Authority key identifier: 8C:D6:FC:02:55:FD:1E:D1:7F:D8:2C:FA:8B:66:D2:4A:29:BA:1D:8E Certificate issuer: /CN=8CD6FC0255FD1ED17FD82CFA8B66D24A29BA1D8E Certificate serial: 39E1CA23B1852AB9CFDB9F79844BE8002614099B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8CD6FC0255FD1ED17FD82CFA8B66D24A29BA1D8E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/8CD6FC0255FD1ED17FD82CFA8B66D24A29BA1D8E.mft Manifest number: 6C Signing time: Tue 21 Jul 2026 03:40:27 +0000 Manifest this update: Tue 21 Jul 2026 03:35:27 +0000 Manifest next update: Wed 22 Jul 2026 07:03:27 +0000 Files and hashes: 1: 3130332e38372e3139362e302f32342d3234203d3e20313336303837.roa (hash: tUv0W4gMiS1vhejBIsoiDaLo6/xoWf91YpxI7rtj5ao=) 2: 3130332e38372e3139372e302f32342d3234203d3e20313336303837.roa (hash: VvKS0B4ZLReXOTrvcAhygsCJwutg9GJIYxL7J1Tdiis=) 3: 3130332e38372e3139392e302f32342d3234203d3e20313336303837.roa (hash: Y4fdfPd8CGZXfJi8zT1Xs61mqy3uc8h/5nYm+/f9TOQ=) 4: 8CD6FC0255FD1ED17FD82CFA8B66D24A29BA1D8E.crl (hash: 6oRt8BG8+38jnQhnV+xP1IAKVTKMpfrlsNFhRKW0ywk=) 5: 3130332e38372e3139382e302f32342d3234203d3e20313336303837.roa (hash: j+lgNwhd7sTPpzvBZDbz7MtwJzwdtzVrzUiO5CTg4C0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/8CD6FC0255FD1ED17FD82CFA8B66D24A29BA1D8E.crl rsync://rpki-rsync.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/8CD6FC0255FD1ED17FD82CFA8B66D24A29BA1D8E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8CD6FC0255FD1ED17FD82CFA8B66D24A29BA1D8E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 02:08:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:e1:ca:23:b1:85:2a:b9:cf:db:9f:79:84:4b:e8:00:26:14:09:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8CD6FC0255FD1ED17FD82CFA8B66D24A29BA1D8E Validity Not Before: Jul 21 03:35:27 2026 GMT Not After : Jul 22 07:03:27 2026 GMT Subject: CN=8F06F01FD3C299706899F8E731101A5DAFEECE74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:06:e2:a8:0c:26:10:6e:27:52:12:f3:48:e9: d2:7a:fb:bd:cc:a3:94:7d:93:17:d7:f3:85:32:e1: 37:63:5d:55:9f:9b:8f:80:7f:68:c2:05:f6:13:39: 0a:fb:3d:9f:7a:f6:ab:a9:f0:2a:bd:fb:a0:ca:22: d9:a5:7e:dd:36:6e:b6:1a:12:83:d3:0e:6c:5a:de: e6:11:82:53:8a:83:d4:74:05:0d:72:53:7d:0b:20: a7:8e:31:20:18:da:05:99:0a:48:02:f0:6c:e0:7c: fb:c1:d2:53:ec:6a:b1:04:e1:23:26:8c:36:48:9b: b6:ac:18:8c:42:39:fb:6a:c4:dc:78:11:88:30:3a: df:d6:47:19:09:7a:9a:cd:19:2a:a3:22:2b:70:d2: 7f:7f:6a:a0:0a:5b:4d:34:6a:5a:ed:27:16:4a:13: 5f:a4:f2:de:39:42:9f:77:dc:f2:d6:20:24:90:66: 83:1a:92:45:77:7b:c0:ba:d6:7f:c5:07:94:ed:7a: 65:91:b8:66:cd:66:b9:bd:dd:b8:97:32:1b:d6:d1: ff:aa:e5:e4:8b:dc:d8:9a:ea:e3:c7:e1:b3:04:87: 22:cc:45:32:09:76:8b:89:57:9d:58:54:01:a7:af: e5:06:54:73:cc:17:a1:cd:7f:9a:5e:ab:af:fa:aa: e3:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:06:F0:1F:D3:C2:99:70:68:99:F8:E7:31:10:1A:5D:AF:EE:CE:74 X509v3 Authority Key Identifier: keyid:8C:D6:FC:02:55:FD:1E:D1:7F:D8:2C:FA:8B:66:D2:4A:29:BA:1D:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/8CD6FC0255FD1ED17FD82CFA8B66D24A29BA1D8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8CD6FC0255FD1ED17FD82CFA8B66D24A29BA1D8E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/8CD6FC0255FD1ED17FD82CFA8B66D24A29BA1D8E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d5:a7:53:e4:55:a0:54:7e:e2:27:4a:66:0b:5e:e2:de:c2:38: 54:eb:f6:0b:06:bd:e5:36:b8:98:ab:8e:d9:76:ef:23:6b:f9: af:49:87:cd:d6:ed:1d:8d:84:e9:fe:b0:ef:9f:b6:e2:db:e1: 7c:93:3c:fa:8c:63:23:52:a3:8f:f4:d8:05:d4:50:97:0c:ba: ff:77:fb:1e:a7:e2:45:dc:20:3c:16:f2:70:ec:57:db:fe:6f: 9c:c9:25:40:f2:e9:64:d6:84:06:44:07:bd:71:95:0e:39:51: 45:78:16:8f:e0:d6:12:c6:3d:a8:a2:4f:6e:b9:6d:d2:ae:8a: 8e:f9:8b:bc:36:f5:c5:a0:00:c2:b3:98:18:d5:ae:ac:96:19: 67:1b:72:a3:0e:a8:86:48:b8:a0:8d:19:b0:72:a6:cf:41:f9: df:51:10:ea:94:2f:29:63:2f:42:51:03:54:c8:06:32:20:70: 22:eb:d4:49:82:34:f1:76:c3:3b:49:bf:20:47:f6:66:ea:9f: c3:9c:4e:e7:8f:41:34:df:05:f3:2a:26:ae:d7:3b:b7:74:31: ea:e1:2e:21:8f:92:8f:fe:c2:e1:da:63:41:e0:79:1a:70:90: ab:54:82:ca:8b:3e:06:0d:2f:da:cc:0b:06:49:9c:12:fa:3e: 70:3e:85:70 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOeHKI7GFKrnP2595hEvoACYUCZswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOENENkZDMDI1NUZEMUVEMTdGRDgyQ0ZBOEI2NkQyNEEy OUJBMUQ4RTAeFw0yNjA3MjEwMzM1MjdaFw0yNjA3MjIwNzAzMjdaMDMxMTAvBgNV BAMTKDhGMDZGMDFGRDNDMjk5NzA2ODk5RjhFNzMxMTAxQTVEQUZFRUNFNzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD2BuKoDCYQbidSEvNI6dJ6+73M o5R9kxfX84Uy4TdjXVWfm4+Af2jCBfYTOQr7PZ969qup8Cq9+6DKItmlft02brYa EoPTDmxa3uYRglOKg9R0BQ1yU30LIKeOMSAY2gWZCkgC8GzgfPvB0lPsarEE4SMm jDZIm7asGIxCOftqxNx4EYgwOt/WRxkJeprNGSqjIitw0n9/aqAKW000alrtJxZK E1+k8t45Qp933PLWICSQZoMakkV3e8C61n/FB5TtemWRuGbNZrm93biXMhvW0f+q 5eSL3Nia6uPH4bMEhyLMRTIJdouJV51YVAGnr+UGVHPMF6HNf5peq6/6quMHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjwbwH9PCmXBomfjnMRAaXa/uznQwHwYDVR0j BBgwFoAUjNb8AlX9HtF/2Cz6i2bSSim6HY4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTZlNjNjZDItZmIzYy00MWIyLWI5NmItYWIyMzQ0MjBhMjExLzAvOENENkZDMDI1 NUZEMUVEMTdGRDgyQ0ZBOEI2NkQyNEEyOUJBMUQ4RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84Q0Q2RkMwMjU1RkQxRUQxN0ZEODJDRkE4QjY2RDI0QTI5QkEx RDhFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTZlNjNjZDItZmIzYy00MWIyLWI5 NmItYWIyMzQ0MjBhMjExLzAvOENENkZDMDI1NUZEMUVEMTdGRDgyQ0ZBOEI2NkQy NEEyOUJBMUQ4RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANWnU+RVoFR+4idKZgte4t7COFTr9gsGveU2 uJirjtl27yNr+a9Jh83W7R2NhOn+sO+ftuLb4XyTPPqMYyNSo4/02AXUUJcMuv93 +x6n4kXcIDwW8nDsV9v+b5zJJUDy6WTWhAZEB71xlQ45UUV4Fo/g1hLGPaiiT265 bdKuio75i7w29cWgAMKzmBjVrqyWGWcbcqMOqIZIuKCNGbByps9B+d9REOqULylj L0JRA1TIBjIgcCLr1EmCNPF2wztJvyBH9mbqn8OcTuePQTTfBfMqJq7XO7d0Merh LiGPko/+wuHaY0HgeRpwkKtUgsqLPgYNL9rMCwZJnBL6PnA+hXA= -----END CERTIFICATE-----Generated at Tue Jul 21 06:38:23 2026 by rpki-client