$ rpki-client -vvf rpki-rsync.idnic.net/repo/58b58aee-e8ee-4287-a2b8-616155c3eec2/0/F8EF3EE571B0E552132B2C6ABA30EF816A0443BB.mft File: F8EF3EE571B0E552132B2C6ABA30EF816A0443BB.mft (raw, json) Hash identifier: Qva8BqjVjDIT3IBaHaUiBdUGuoaQQ2XgOd8SwOUcMFs= Subject key identifier: 12:2F:5D:FC:9D:B0:9D:05:8D:0A:AF:B8:F7:BD:C2:DF:96:00:C4:A1 Authority key identifier: F8:EF:3E:E5:71:B0:E5:52:13:2B:2C:6A:BA:30:EF:81:6A:04:43:BB Certificate issuer: /CN=F8EF3EE571B0E552132B2C6ABA30EF816A0443BB Certificate serial: 25C289D7CFCCEFBC6F6C2CD6385E6B15C54D8237 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8EF3EE571B0E552132B2C6ABA30EF816A0443BB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/58b58aee-e8ee-4287-a2b8-616155c3eec2/0/F8EF3EE571B0E552132B2C6ABA30EF816A0443BB.mft Manifest number: 6C Signing time: Tue 21 Jul 2026 02:23:40 +0000 Manifest this update: Tue 21 Jul 2026 02:18:40 +0000 Manifest next update: Wed 22 Jul 2026 05:23:40 +0000 Files and hashes: 1: 3130332e392e3134342e302f32322d3234203d3e20313331373133.roa (hash: 4SizHs7Y7jbN84W7yqURK/C+aTckSwx11cvn67uUtqg=) 2: 323430373a363338303a3a2f33322d3430203d3e20313331373133.roa (hash: wGUQKy4FIVL/pJvzv4ocXf6nJRNeroqTQeM/u7L/DBg=) 3: F8EF3EE571B0E552132B2C6ABA30EF816A0443BB.crl (hash: gvwt2HdgI4kMI9RumJ5SgpJDRkEWmS/E/mgBlQz3ibM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/58b58aee-e8ee-4287-a2b8-616155c3eec2/0/F8EF3EE571B0E552132B2C6ABA30EF816A0443BB.crl rsync://rpki-rsync.idnic.net/repo/58b58aee-e8ee-4287-a2b8-616155c3eec2/0/F8EF3EE571B0E552132B2C6ABA30EF816A0443BB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8EF3EE571B0E552132B2C6ABA30EF816A0443BB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 02:08:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:c2:89:d7:cf:cc:ef:bc:6f:6c:2c:d6:38:5e:6b:15:c5:4d:82:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8EF3EE571B0E552132B2C6ABA30EF816A0443BB Validity Not Before: Jul 21 02:18:40 2026 GMT Not After : Jul 22 05:23:40 2026 GMT Subject: CN=122F5DFC9DB09D058D0AAFB8F7BDC2DF9600C4A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:d7:1e:63:1b:09:d5:12:82:89:0b:11:23:5e: 6a:28:f2:d0:c5:8e:87:45:1b:f1:30:eb:bd:a9:04: d2:4c:12:1a:6f:4f:df:c0:8c:82:d9:1a:22:7d:12: f8:26:21:9f:f1:54:6d:55:4a:f4:0d:29:61:01:55: 0b:ca:d5:7d:a9:48:06:0b:f3:ec:b4:90:38:ea:38: 1a:df:7e:75:7d:d8:77:5e:eb:6d:11:fc:01:62:7e: 26:d7:4f:bd:b2:f6:5e:8a:b1:b6:b0:e7:e7:cb:90: 10:5b:50:a3:f7:96:1f:00:99:ee:4e:73:9a:e1:15: 36:de:75:60:48:58:05:26:af:6b:da:6c:9c:05:0c: 62:07:6e:0b:b7:a9:d1:31:2a:34:2c:09:61:28:d2: f7:ad:82:55:08:5e:14:57:88:94:ca:8b:8e:d0:cd: 04:09:61:42:a6:01:f6:9b:71:16:0c:e0:10:66:8b: e0:37:94:cb:df:69:4b:6f:e2:a7:7a:d7:9f:2d:53: 59:8c:b7:8b:fc:e6:98:55:58:aa:d6:51:bb:da:15: 60:95:fa:b1:33:ad:ed:03:87:32:95:96:a3:26:5a: ab:0b:82:b3:da:d1:1c:b3:21:3b:87:52:2b:58:d2: 52:10:c6:95:ee:b0:2a:36:64:24:c5:19:f9:c9:4e: ab:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:2F:5D:FC:9D:B0:9D:05:8D:0A:AF:B8:F7:BD:C2:DF:96:00:C4:A1 X509v3 Authority Key Identifier: keyid:F8:EF:3E:E5:71:B0:E5:52:13:2B:2C:6A:BA:30:EF:81:6A:04:43:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/58b58aee-e8ee-4287-a2b8-616155c3eec2/0/F8EF3EE571B0E552132B2C6ABA30EF816A0443BB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8EF3EE571B0E552132B2C6ABA30EF816A0443BB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/58b58aee-e8ee-4287-a2b8-616155c3eec2/0/F8EF3EE571B0E552132B2C6ABA30EF816A0443BB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:16:3b:15:cc:42:8a:57:60:a6:81:7a:23:77:44:41:76:17: 6d:5d:97:9c:3c:f4:dc:14:d0:88:32:e8:2a:04:48:3b:d4:29: 99:44:1a:12:05:ac:5f:49:8f:b5:c7:10:bf:d4:d1:6a:1d:69: c3:d2:aa:40:32:e6:0c:8f:97:8b:a6:f7:da:57:0c:1d:34:67: 8b:6f:8a:26:ec:ff:7a:37:18:87:b3:25:86:55:52:12:01:05: de:13:a7:f5:d5:33:24:22:e4:0e:ea:d5:0d:64:36:19:23:d1: fe:74:d2:b5:c2:98:7b:13:3f:22:5a:fb:cc:52:1e:1b:90:d6: 4e:26:1b:40:d2:a1:93:1d:01:d9:82:00:a8:86:fc:57:ff:75: 79:bd:24:0c:21:b0:b7:bf:b2:63:79:e9:f6:5c:ea:07:91:35: 11:3e:20:fc:64:ff:b0:85:fd:11:0b:fd:34:38:96:38:78:9c: 3c:70:0e:51:fe:c4:ec:a6:3c:31:3d:dc:4c:f3:2b:5e:5f:f3: 29:4f:a1:f8:3b:58:10:f6:d9:4d:d5:1c:c9:7f:c2:4b:68:72: 5f:31:2d:3d:f9:4f:26:f7:17:39:89:08:e7:42:92:36:2d:3a: 3f:a0:5b:1d:00:af:84:9d:a9:cc:49:3b:06:3d:a0:ad:16:96: 30:a9:f3:43 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJcKJ18/M77xvbCzWOF5rFcVNgjcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhFRjNFRTU3MUIwRTU1MjEzMkIyQzZBQkEzMEVGODE2 QTA0NDNCQjAeFw0yNjA3MjEwMjE4NDBaFw0yNjA3MjIwNTIzNDBaMDMxMTAvBgNV BAMTKDEyMkY1REZDOURCMDlEMDU4RDBBQUZCOEY3QkRDMkRGOTYwMEM0QTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCe1x5jGwnVEoKJCxEjXmoo8tDF jodFG/Ew672pBNJMEhpvT9/AjILZGiJ9EvgmIZ/xVG1VSvQNKWEBVQvK1X2pSAYL 8+y0kDjqOBrffnV92Hde620R/AFifibXT72y9l6Ksbaw5+fLkBBbUKP3lh8Ame5O c5rhFTbedWBIWAUmr2vabJwFDGIHbgu3qdExKjQsCWEo0vetglUIXhRXiJTKi47Q zQQJYUKmAfabcRYM4BBmi+A3lMvfaUtv4qd6158tU1mMt4v85phVWKrWUbvaFWCV +rEzre0DhzKVlqMmWqsLgrPa0RyzITuHUitY0lIQxpXusCo2ZCTFGfnJTqvbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEi9d/J2wnQWNCq+4973C35YAxKEwHwYDVR0j BBgwFoAU+O8+5XGw5VITKyxqujDvgWoEQ7swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NThiNThhZWUtZThlZS00Mjg3LWEyYjgtNjE2MTU1YzNlZWMyLzAvRjhFRjNFRTU3 MUIwRTU1MjEzMkIyQzZBQkEzMEVGODE2QTA0NDNCQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GOEVGM0VFNTcxQjBFNTUyMTMyQjJDNkFCQTMwRUY4MTZBMDQ0 M0JCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNThiNThhZWUtZThlZS00Mjg3LWEy YjgtNjE2MTU1YzNlZWMyLzAvRjhFRjNFRTU3MUIwRTU1MjEzMkIyQzZBQkEzMEVG ODE2QTA0NDNCQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI0WOxXMQopXYKaBeiN3REF2F21dl5w89NwU 0Igy6CoESDvUKZlEGhIFrF9Jj7XHEL/U0WodacPSqkAy5gyPl4um99pXDB00Z4tv iibs/3o3GIezJYZVUhIBBd4Tp/XVMyQi5A7q1Q1kNhkj0f500rXCmHsTPyJa+8xS HhuQ1k4mG0DSoZMdAdmCAKiG/Ff/dXm9JAwhsLe/smN56fZc6geRNRE+IPxk/7CF /REL/TQ4ljh4nDxwDlH+xOymPDE93EzzK15f8ylPofg7WBD22U3VHMl/wktocl8x LT35Tyb3FzmJCOdCkjYtOj+gWx0Ar4SdqcxJOwY9oK0WljCp80M= -----END CERTIFICATE-----Generated at Tue Jul 21 08:37:10 2026 by rpki-client