$ rpki-client -vvf rpki-rsync.idnic.net/repo/633978f8-aeab-427a-bd75-2cdf1d9eb517/0/8CDF206FDB99524CD59E5141686928A6FF94305F.mft File: 8CDF206FDB99524CD59E5141686928A6FF94305F.mft (raw, json) Hash identifier: bP3Jm9Sf9DtSRO0sQZS5TLyWZcXiOk5oAqCIcsS41Qc= Subject key identifier: D5:DE:B6:79:9D:62:10:FF:43:19:8C:AC:0E:11:63:64:7E:0D:8E:4D Authority key identifier: 8C:DF:20:6F:DB:99:52:4C:D5:9E:51:41:68:69:28:A6:FF:94:30:5F Certificate issuer: /CN=8CDF206FDB99524CD59E5141686928A6FF94305F Certificate serial: 46E2FFCC5CF235A29335DC82703B61A6696B2E6C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8CDF206FDB99524CD59E5141686928A6FF94305F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/633978f8-aeab-427a-bd75-2cdf1d9eb517/0/8CDF206FDB99524CD59E5141686928A6FF94305F.mft Manifest number: 6A Signing time: Mon 20 Jul 2026 18:59:53 +0000 Manifest this update: Mon 20 Jul 2026 18:54:53 +0000 Manifest next update: Tue 21 Jul 2026 21:07:53 +0000 Files and hashes: 1: 3130332e3136322e36302e302f32332d3234203d3e20313431363438.roa (hash: AtW3qZZhBOBkSL0i4aoVF1GR5f7KIfCN2XApbUwdv2U=) 2: 8CDF206FDB99524CD59E5141686928A6FF94305F.crl (hash: KsMIIcDm5NfdHW7aXtL0H2YvYV/ClPDysv0glYUDDPQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/633978f8-aeab-427a-bd75-2cdf1d9eb517/0/8CDF206FDB99524CD59E5141686928A6FF94305F.crl rsync://rpki-rsync.idnic.net/repo/633978f8-aeab-427a-bd75-2cdf1d9eb517/0/8CDF206FDB99524CD59E5141686928A6FF94305F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8CDF206FDB99524CD59E5141686928A6FF94305F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 21:07:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:e2:ff:cc:5c:f2:35:a2:93:35:dc:82:70:3b:61:a6:69:6b:2e:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8CDF206FDB99524CD59E5141686928A6FF94305F Validity Not Before: Jul 20 18:54:53 2026 GMT Not After : Jul 21 21:07:53 2026 GMT Subject: CN=D5DEB6799D6210FF43198CAC0E1163647E0D8E4D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ae:7c:c8:21:39:94:f1:c7:df:ab:47:3b:98: e1:3a:53:51:50:7f:ec:7c:f0:59:fc:c1:f2:48:9d: ca:0c:9d:26:e4:ca:f5:97:0a:d1:f8:65:41:d1:ce: 47:77:a6:7a:df:94:f9:eb:98:ea:73:69:61:db:2f: 5a:e6:0c:ec:2a:78:85:7b:3f:e5:a5:cf:5a:78:41: 2f:2a:36:1e:f7:9c:f8:e5:ab:1f:b3:98:c0:ee:4a: 1d:e7:6e:c3:c0:1b:e6:5b:4a:43:d5:78:aa:50:72: 03:e6:b0:c2:48:a5:8c:c6:85:b8:8b:5c:97:5f:da: 3e:1e:97:2c:d8:c4:40:23:74:f0:a5:3c:f7:80:34: 28:d6:22:3b:3f:28:15:41:0b:2f:e0:38:5a:af:e5: 28:bd:14:ff:71:98:96:07:cf:26:55:dd:bb:89:05: f8:ae:5a:7a:d8:a8:1a:94:c5:78:b4:a4:de:e8:39: 52:92:ef:ad:09:d2:85:8f:16:ef:35:f1:bc:4c:cb: c8:eb:f1:a1:17:f3:52:fe:88:db:99:f5:77:15:f7: e3:59:d0:e3:1f:a4:65:7b:d2:1a:49:f4:44:47:07: 24:bd:9f:d1:32:a6:d6:94:d8:5a:cb:14:ae:44:37: c8:20:73:b4:f3:33:74:16:24:38:19:45:66:ab:a2: f5:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:DE:B6:79:9D:62:10:FF:43:19:8C:AC:0E:11:63:64:7E:0D:8E:4D X509v3 Authority Key Identifier: keyid:8C:DF:20:6F:DB:99:52:4C:D5:9E:51:41:68:69:28:A6:FF:94:30:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/633978f8-aeab-427a-bd75-2cdf1d9eb517/0/8CDF206FDB99524CD59E5141686928A6FF94305F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8CDF206FDB99524CD59E5141686928A6FF94305F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/633978f8-aeab-427a-bd75-2cdf1d9eb517/0/8CDF206FDB99524CD59E5141686928A6FF94305F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:32:72:02:22:af:5c:c3:d5:77:2a:1f:8c:e2:69:a6:40:36: 56:c6:f0:b1:77:18:18:c2:f5:9e:ab:17:bf:d5:44:85:6d:06: 6a:11:88:6c:08:82:4d:53:2c:40:5f:bc:8b:35:bd:09:86:10: 24:96:30:6d:d0:14:ee:b9:8c:d1:ec:fe:01:2c:58:4e:61:2a: 4b:05:30:2d:99:a8:c9:0e:85:73:fa:05:60:3d:36:10:79:1d: 61:b2:d1:8c:29:28:52:93:7f:59:60:55:02:b3:d0:b2:9b:78: 0f:18:1f:a1:e3:21:a3:82:07:e8:5b:5e:c7:1f:2f:e5:8d:71: dc:4f:b3:06:1b:6f:9d:a1:54:3d:1c:23:87:1d:6b:8a:21:43: e9:73:71:e9:04:f5:86:23:78:80:8a:51:be:77:c0:58:9a:05: c4:c9:74:66:a7:0c:eb:c9:b6:7c:af:b2:f1:74:74:b4:7e:7a: 1d:89:a7:9d:d8:b3:fb:50:d2:93:78:74:40:c7:ee:9c:e8:b3: 61:fb:3a:62:03:e1:68:27:30:b7:fe:60:7e:c8:b2:37:7e:45: 7b:bb:1b:4e:83:9c:74:c0:b7:a1:e5:4d:67:e2:e5:4e:a2:f2: c6:f4:0e:67:d5:b4:f8:7b:a5:db:4b:34:b3:d2:ef:6f:64:d1: da:32:42:f5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURuL/zFzyNaKTNdyCcDthpmlrLmwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOENERjIwNkZEQjk5NTI0Q0Q1OUU1MTQxNjg2OTI4QTZG Rjk0MzA1RjAeFw0yNjA3MjAxODU0NTNaFw0yNjA3MjEyMTA3NTNaMDMxMTAvBgNV BAMTKEQ1REVCNjc5OUQ2MjEwRkY0MzE5OENBQzBFMTE2MzY0N0UwRDhFNEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4rnzIITmU8cffq0c7mOE6U1FQ f+x88Fn8wfJIncoMnSbkyvWXCtH4ZUHRzkd3pnrflPnrmOpzaWHbL1rmDOwqeIV7 P+Wlz1p4QS8qNh73nPjlqx+zmMDuSh3nbsPAG+ZbSkPVeKpQcgPmsMJIpYzGhbiL XJdf2j4elyzYxEAjdPClPPeANCjWIjs/KBVBCy/gOFqv5Si9FP9xmJYHzyZV3buJ BfiuWnrYqBqUxXi0pN7oOVKS760J0oWPFu818bxMy8jr8aEX81L+iNuZ9XcV9+NZ 0OMfpGV70hpJ9ERHByS9n9EyptaU2FrLFK5EN8ggc7TzM3QWJDgZRWarovXpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1d62eZ1iEP9DGYysDhFjZH4Njk0wHwYDVR0j BBgwFoAUjN8gb9uZUkzVnlFBaGkopv+UMF8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjMzOTc4ZjgtYWVhYi00MjdhLWJkNzUtMmNkZjFkOWViNTE3LzAvOENERjIwNkZE Qjk5NTI0Q0Q1OUU1MTQxNjg2OTI4QTZGRjk0MzA1Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84Q0RGMjA2RkRCOTk1MjRDRDU5RTUxNDE2ODY5MjhBNkZGOTQz MDVGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjMzOTc4ZjgtYWVhYi00MjdhLWJk NzUtMmNkZjFkOWViNTE3LzAvOENERjIwNkZEQjk5NTI0Q0Q1OUU1MTQxNjg2OTI4 QTZGRjk0MzA1Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHQycgIir1zD1XcqH4ziaaZANlbG8LF3GBjC 9Z6rF7/VRIVtBmoRiGwIgk1TLEBfvIs1vQmGECSWMG3QFO65jNHs/gEsWE5hKksF MC2ZqMkOhXP6BWA9NhB5HWGy0YwpKFKTf1lgVQKz0LKbeA8YH6HjIaOCB+hbXscf L+WNcdxPswYbb52hVD0cI4cda4ohQ+lzcekE9YYjeICKUb53wFiaBcTJdGanDOvJ tnyvsvF0dLR+eh2Jp53Ys/tQ0pN4dEDH7pzos2H7OmID4WgnMLf+YH7Isjd+RXu7 G06DnHTAt6HlTWfi5U6i8sb0DmfVtPh7pdtLNLPS729k0doyQvU= -----END CERTIFICATE-----Generated at Tue Jul 21 06:59:05 2026 by rpki-client