$ rpki-client -vvf rpki-rsync.idnic.net/repo/63669ea4-e82f-46c3-8dd3-2e988159b202/0/008FD9C34C50033457705A2A8FA8AD31C58901DF.mft File: 008FD9C34C50033457705A2A8FA8AD31C58901DF.mft (raw, json) Hash identifier: QlJGitA3yUa3KjVPoSB4Wk+560kAy74b67HClXxnfSw= Subject key identifier: 03:A6:A0:9E:48:25:78:C5:F3:9A:11:34:3F:10:BE:19:F1:2D:A2:48 Authority key identifier: 00:8F:D9:C3:4C:50:03:34:57:70:5A:2A:8F:A8:AD:31:C5:89:01:DF Certificate issuer: /CN=008FD9C34C50033457705A2A8FA8AD31C58901DF Certificate serial: 7BD86D087CEC1C6C511F6F12099F45F48BFC222B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/008FD9C34C50033457705A2A8FA8AD31C58901DF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/63669ea4-e82f-46c3-8dd3-2e988159b202/0/008FD9C34C50033457705A2A8FA8AD31C58901DF.mft Manifest number: 6A Signing time: Mon 20 Jul 2026 20:06:04 +0000 Manifest this update: Mon 20 Jul 2026 20:01:04 +0000 Manifest next update: Tue 21 Jul 2026 23:28:04 +0000 Files and hashes: 1: 3230322e3133332e352e302f32342d3234203d3e203234323030.roa (hash: Uo09a87NfO0QaaV8cWvKqLh7Yr8GIHaL3+B8rEdhvDg=) 2: 3230322e3133332e302e302f32342d3234203d3e203234323030.roa (hash: Ym+oQJAC/FZcNlOtyNB+PyxQjFt4qpTGx2NjQCjEW8k=) 3: 3230322e3133332e372e302f32342d3234203d3e203234323030.roa (hash: +gg97NXHVYnGyTZICqnb0be/ZegxXSjwLJ69frhtl8g=) 4: 008FD9C34C50033457705A2A8FA8AD31C58901DF.crl (hash: JevAueN1SnVhtbTHJwHXWxQkJTgJsFuZmpjvndfg8pg=) 5: 3230322e3133332e362e302f32342d3234203d3e203234323030.roa (hash: Xc9Z6aCULt4h5E7uCljF8rbSvL2mpzVI9I3SrwLMdKA=) 6: 3230322e3133332e342e302f32342d3234203d3e203234323030.roa (hash: KRcAvz4S9RiZMOJ4ntySfmti6yb9mI07p7EYZgs2VTA=) 7: 3230322e3133332e332e302f32342d3234203d3e203234323030.roa (hash: NbNZZ1h00KtVz1iU/OgERwDxHBaHy3Lol9PQ30yLH20=) 8: 3230322e3133332e302e302f32312d3231203d3e203234323030.roa (hash: WS26qbff4FZd1gBCBy7MpBk2HRkLgCPS9ErpAbqZ1Kk=) 9: 3230322e3133332e312e302f32342d3234203d3e203234323030.roa (hash: ikR/F9w4LitTShzkD+KXZlE08zWYB4wLcQeSOu40MHY=) 10: 3230322e3133332e322e302f32342d3234203d3e203234323030.roa (hash: 7PYR6KQD363PCA9CqbyRe3Hlyct7YlcslSh5J5MCne8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/63669ea4-e82f-46c3-8dd3-2e988159b202/0/008FD9C34C50033457705A2A8FA8AD31C58901DF.crl rsync://rpki-rsync.idnic.net/repo/63669ea4-e82f-46c3-8dd3-2e988159b202/0/008FD9C34C50033457705A2A8FA8AD31C58901DF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/008FD9C34C50033457705A2A8FA8AD31C58901DF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 23:28:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:d8:6d:08:7c:ec:1c:6c:51:1f:6f:12:09:9f:45:f4:8b:fc:22:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=008FD9C34C50033457705A2A8FA8AD31C58901DF Validity Not Before: Jul 20 20:01:04 2026 GMT Not After : Jul 21 23:28:04 2026 GMT Subject: CN=03A6A09E482578C5F39A11343F10BE19F12DA248 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:21:42:4c:c0:b8:22:66:8c:1b:f9:14:34:19: a7:1d:a7:26:0d:fe:d2:f6:3e:2c:d5:a8:37:e1:a5: 1c:1b:da:1d:fd:35:43:06:6b:5d:22:fd:d3:d6:10: 27:6f:4e:19:2b:b3:73:96:7c:0f:e9:3c:c0:14:0e: d9:c7:82:8b:a4:53:ce:d7:86:14:fb:de:65:5d:55: 08:f5:f4:54:1b:43:41:68:15:3f:1b:43:99:92:39: 4f:81:b7:75:dc:63:79:16:1d:a7:07:94:24:af:30: 58:72:b3:ef:a1:e4:c3:11:e0:60:db:41:ea:b7:4b: 24:9b:9d:65:26:8f:7a:0f:c6:f5:63:f0:9e:18:7b: af:b7:93:38:91:af:40:74:5e:d7:9e:32:dd:3a:78: c1:2f:f4:28:9c:38:c9:d7:d1:c1:e6:31:72:f5:7e: b2:19:a9:48:20:b7:a0:3e:7f:80:0d:a7:c4:50:9c: ce:f0:1f:07:08:b8:91:83:40:b1:00:15:11:83:4c: ce:b2:63:0b:4b:84:60:30:99:35:37:87:64:fe:93: ad:53:e8:24:0e:61:b9:4c:5d:78:7d:f6:f4:2f:91: 6c:33:a0:d9:4f:01:01:2f:7f:b2:ca:d4:a1:7e:d3: 0a:99:3e:ef:fc:f8:e7:56:8c:44:eb:7a:c2:e8:bc: 07:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:A6:A0:9E:48:25:78:C5:F3:9A:11:34:3F:10:BE:19:F1:2D:A2:48 X509v3 Authority Key Identifier: keyid:00:8F:D9:C3:4C:50:03:34:57:70:5A:2A:8F:A8:AD:31:C5:89:01:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/63669ea4-e82f-46c3-8dd3-2e988159b202/0/008FD9C34C50033457705A2A8FA8AD31C58901DF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/008FD9C34C50033457705A2A8FA8AD31C58901DF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/63669ea4-e82f-46c3-8dd3-2e988159b202/0/008FD9C34C50033457705A2A8FA8AD31C58901DF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:51:59:8b:38:41:14:62:2a:d6:cd:e0:e8:54:b4:22:cb:0b: 39:59:1b:c5:f8:41:3d:07:56:8b:7f:bc:ed:2e:3a:bf:ce:1f: 50:de:2b:63:21:d5:80:69:2c:8d:d4:54:2a:7b:7a:89:c9:2e: 8b:5d:14:39:68:1c:9f:eb:4e:ee:9c:dd:4d:d1:17:49:e4:45: 5c:aa:c2:98:bc:28:fb:1e:52:85:c4:9f:3c:60:d1:6b:45:cc: 02:67:a9:39:3e:3b:c4:7f:34:33:de:5f:dd:00:d8:d6:27:d6: 62:31:8f:a5:f8:01:e9:1f:a0:a8:e8:c9:ff:42:34:b2:0f:23: 3d:6a:8a:91:bc:b7:28:70:c9:57:b9:ff:f3:43:46:d0:23:a1: 4e:a9:58:ce:00:7e:0e:dc:aa:15:f5:e6:ea:f3:de:d9:77:44: a9:7e:bf:61:db:f6:30:3a:2c:5e:01:f7:6e:7e:9d:8f:86:c6: 2c:f3:13:aa:6e:a0:82:e7:74:3d:7e:b2:43:2c:21:4f:0f:1f: 52:53:57:2f:f1:ed:16:cc:df:0e:55:f9:5d:1e:46:90:c1:3e: 70:fd:39:93:b7:02:9c:5c:c6:ff:25:c4:e5:e2:8d:0d:13:72: f8:2b:39:c8:56:16:00:f3:41:28:2b:2f:91:f1:f6:35:58:9b: 67:84:e7:9a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe9htCHzsHGxRH28SCZ9F9Iv8IiswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDA4RkQ5QzM0QzUwMDMzNDU3NzA1QTJBOEZBOEFEMzFD NTg5MDFERjAeFw0yNjA3MjAyMDAxMDRaFw0yNjA3MjEyMzI4MDRaMDMxMTAvBgNV BAMTKDAzQTZBMDlFNDgyNTc4QzVGMzlBMTEzNDNGMTBCRTE5RjEyREEyNDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOIUJMwLgiZowb+RQ0GacdpyYN /tL2PizVqDfhpRwb2h39NUMGa10i/dPWECdvThkrs3OWfA/pPMAUDtnHgoukU87X hhT73mVdVQj19FQbQ0FoFT8bQ5mSOU+Bt3XcY3kWHacHlCSvMFhys++h5MMR4GDb Qeq3SySbnWUmj3oPxvVj8J4Ye6+3kziRr0B0XteeMt06eMEv9CicOMnX0cHmMXL1 frIZqUggt6A+f4ANp8RQnM7wHwcIuJGDQLEAFRGDTM6yYwtLhGAwmTU3h2T+k61T 6CQOYblMXXh99vQvkWwzoNlPAQEvf7LK1KF+0wqZPu/8+OdWjETresLovAevAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUA6agnkgleMXzmhE0PxC+GfEtokgwHwYDVR0j BBgwFoAUAI/Zw0xQAzRXcFoqj6itMcWJAd8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjM2NjllYTQtZTgyZi00NmMzLThkZDMtMmU5ODgxNTliMjAyLzAvMDA4RkQ5QzM0 QzUwMDMzNDU3NzA1QTJBOEZBOEFEMzFDNTg5MDFERi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMDhGRDlDMzRDNTAwMzM0NTc3MDVBMkE4RkE4QUQzMUM1ODkw MURGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjM2NjllYTQtZTgyZi00NmMzLThk ZDMtMmU5ODgxNTliMjAyLzAvMDA4RkQ5QzM0QzUwMDMzNDU3NzA1QTJBOEZBOEFE MzFDNTg5MDFERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGBRWYs4QRRiKtbN4OhUtCLLCzlZG8X4QT0H Vot/vO0uOr/OH1DeK2Mh1YBpLI3UVCp7eonJLotdFDloHJ/rTu6c3U3RF0nkRVyq wpi8KPseUoXEnzxg0WtFzAJnqTk+O8R/NDPeX90A2NYn1mIxj6X4AekfoKjoyf9C NLIPIz1qipG8tyhwyVe5//NDRtAjoU6pWM4Afg7cqhX15urz3tl3RKl+v2Hb9jA6 LF4B925+nY+GxizzE6puoILndD1+skMsIU8PH1JTVy/x7RbM3w5V+V0eRpDBPnD9 OZO3Apxcxv8lxOXijQ0TcvgrOchWFgDzQSgrL5Hx9jVYm2eE55o= -----END CERTIFICATE-----Generated at Tue Jul 21 06:39:27 2026 by rpki-client