$ rpki-client -vvf rpki-rsync.idnic.net/repo/68466889-c1ef-4410-ad9c-306c09e1be06/0/8CD86E34E1A21BE873B7ADCC8D2AE7171EA3D96D.mft File: 8CD86E34E1A21BE873B7ADCC8D2AE7171EA3D96D.mft (raw, json) Hash identifier: Lk6b/38EZyoWWGTa7K4u7tMvzbF0FdG5I2oey86OHIQ= Subject key identifier: C5:8C:21:0B:A5:5A:E3:88:18:51:DA:C8:A7:6A:23:7A:E6:2F:15:9B Authority key identifier: 8C:D8:6E:34:E1:A2:1B:E8:73:B7:AD:CC:8D:2A:E7:17:1E:A3:D9:6D Certificate issuer: /CN=8CD86E34E1A21BE873B7ADCC8D2AE7171EA3D96D Certificate serial: 26E8E84DBAB34B43DC2C0C65C873DA4B777861E6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8CD86E34E1A21BE873B7ADCC8D2AE7171EA3D96D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/68466889-c1ef-4410-ad9c-306c09e1be06/0/8CD86E34E1A21BE873B7ADCC8D2AE7171EA3D96D.mft Manifest number: 6C Signing time: Mon 20 Jul 2026 13:53:46 +0000 Manifest this update: Mon 20 Jul 2026 13:48:45 +0000 Manifest next update: Tue 21 Jul 2026 17:40:45 +0000 Files and hashes: 1: 8CD86E34E1A21BE873B7ADCC8D2AE7171EA3D96D.crl (hash: cTs8ZxnQGMMTOmdLr7sPW5yoB1jb7lanH/HWW90MGdo=) 2: 3130332e36372e34392e302f32342d3234203d3e20313431363732.roa (hash: Iad4oKdG+cP+QGtzN+0DsTs9ponKGFoBE7JkBGARiyQ=) 3: 3130332e3136322e3235322e302f32342d3234203d3e20313431363732.roa (hash: xeD49NnJaETxYZ89zZqsZvQW0lQqtHHDYp/1/JjzAG8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/68466889-c1ef-4410-ad9c-306c09e1be06/0/8CD86E34E1A21BE873B7ADCC8D2AE7171EA3D96D.crl rsync://rpki-rsync.idnic.net/repo/68466889-c1ef-4410-ad9c-306c09e1be06/0/8CD86E34E1A21BE873B7ADCC8D2AE7171EA3D96D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8CD86E34E1A21BE873B7ADCC8D2AE7171EA3D96D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 17:40:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:e8:e8:4d:ba:b3:4b:43:dc:2c:0c:65:c8:73:da:4b:77:78:61:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8CD86E34E1A21BE873B7ADCC8D2AE7171EA3D96D Validity Not Before: Jul 20 13:48:45 2026 GMT Not After : Jul 21 17:40:45 2026 GMT Subject: CN=C58C210BA55AE3881851DAC8A76A237AE62F159B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:3e:25:b7:5b:ed:8e:70:78:35:2e:16:87:c3: ef:4a:a4:a8:a3:e1:28:e3:1d:1f:46:cc:97:ee:3e: 4d:6e:d5:80:f2:fe:0a:85:bd:0a:71:2c:c8:76:9a: 46:41:fd:88:4a:fc:b7:af:a9:cb:c6:af:8e:ce:42: 78:26:c1:06:6d:a8:2c:d2:25:84:8e:d8:89:98:58: 2f:88:dd:a9:92:bf:5e:cc:9b:48:0c:62:3d:e0:6f: ac:50:33:24:9c:ff:cd:78:0c:cf:ea:f4:a9:39:ec: 0f:22:8c:d9:9e:17:67:0f:16:0f:cf:0d:d2:ef:e7: 65:8a:d1:06:db:c6:f8:30:a4:be:3f:69:47:ac:b6: a7:bc:7f:1a:d6:3a:f0:15:03:73:4a:52:9b:53:9c: a6:33:b0:59:f0:75:b0:c7:54:8d:f8:d3:8f:51:4c: 2f:e7:96:5b:2d:fe:4a:4f:a6:c1:d0:7d:d0:a2:70: d9:8d:a3:e2:4a:16:64:65:db:95:2a:58:ef:67:75: 68:70:f5:25:67:c9:a4:71:05:32:a8:52:21:75:85: ed:48:9e:db:04:ff:c9:03:a7:e7:cd:91:19:71:0d: b2:32:4e:c8:38:3f:af:f2:f6:7c:9e:6f:14:91:a5: 83:35:b1:91:f5:db:84:d2:70:ab:ce:7e:ab:d3:19: 72:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:8C:21:0B:A5:5A:E3:88:18:51:DA:C8:A7:6A:23:7A:E6:2F:15:9B X509v3 Authority Key Identifier: keyid:8C:D8:6E:34:E1:A2:1B:E8:73:B7:AD:CC:8D:2A:E7:17:1E:A3:D9:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/68466889-c1ef-4410-ad9c-306c09e1be06/0/8CD86E34E1A21BE873B7ADCC8D2AE7171EA3D96D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8CD86E34E1A21BE873B7ADCC8D2AE7171EA3D96D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/68466889-c1ef-4410-ad9c-306c09e1be06/0/8CD86E34E1A21BE873B7ADCC8D2AE7171EA3D96D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:72:5f:3f:f7:f2:a3:e0:c6:ee:b4:a9:6f:91:40:98:1b:f6: 85:00:cf:86:59:b0:c6:15:10:ff:26:12:23:9a:34:e6:b6:c7: b7:e2:fa:cd:0a:60:b5:48:bf:dc:6f:fb:d7:ba:49:00:f2:cd: 5d:3e:19:e2:94:ee:1a:75:2f:6d:d8:11:7a:61:85:8d:96:a2: 98:8e:95:04:c7:d3:98:02:09:14:6b:03:93:3d:bc:64:d2:65: eb:38:4a:18:3f:96:11:82:91:50:97:ea:e1:70:44:ba:0b:62: 7f:b7:78:72:e9:b6:1b:cb:8f:0c:88:1c:11:ed:4a:9b:2a:e4: ed:b0:39:a6:37:50:f1:12:7f:75:da:be:ca:30:98:59:f3:2e: 4d:c3:0b:f2:ac:ee:10:97:dd:d3:fe:84:5e:ef:04:83:ed:22: 6e:ba:6b:2e:5e:f7:ca:d1:de:6c:db:1e:ce:d2:3c:b1:f3:eb: 98:a6:39:2e:de:3c:d6:9d:f6:8e:e4:ab:36:fe:3b:b4:48:a4: ce:e1:30:df:d4:14:49:f4:e1:26:bb:a6:c0:7a:67:64:46:28: 56:46:92:8d:d5:12:61:35:2f:b4:97:6c:9e:55:c0:89:9a:92: d7:55:b5:14:91:5a:a0:be:aa:a4:b2:1d:a1:b7:e5:c0:22:e3: 47:dc:47:b2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJujoTbqzS0PcLAxlyHPaS3d4YeYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOENEODZFMzRFMUEyMUJFODczQjdBRENDOEQyQUU3MTcx RUEzRDk2RDAeFw0yNjA3MjAxMzQ4NDVaFw0yNjA3MjExNzQwNDVaMDMxMTAvBgNV BAMTKEM1OEMyMTBCQTU1QUUzODgxODUxREFDOEE3NkEyMzdBRTYyRjE1OUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTPiW3W+2OcHg1LhaHw+9KpKij 4SjjHR9GzJfuPk1u1YDy/gqFvQpxLMh2mkZB/YhK/LevqcvGr47OQngmwQZtqCzS JYSO2ImYWC+I3amSv17Mm0gMYj3gb6xQMySc/814DM/q9Kk57A8ijNmeF2cPFg/P DdLv52WK0QbbxvgwpL4/aUestqe8fxrWOvAVA3NKUptTnKYzsFnwdbDHVI34049R TC/nllst/kpPpsHQfdCicNmNo+JKFmRl25UqWO9ndWhw9SVnyaRxBTKoUiF1he1I ntsE/8kDp+fNkRlxDbIyTsg4P6/y9nyebxSRpYM1sZH124TScKvOfqvTGXL/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxYwhC6Va44gYUdrIp2ojeuYvFZswHwYDVR0j BBgwFoAUjNhuNOGiG+hzt63MjSrnFx6j2W0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Njg0NjY4ODktYzFlZi00NDEwLWFkOWMtMzA2YzA5ZTFiZTA2LzAvOENEODZFMzRF MUEyMUJFODczQjdBRENDOEQyQUU3MTcxRUEzRDk2RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84Q0Q4NkUzNEUxQTIxQkU4NzNCN0FEQ0M4RDJBRTcxNzFFQTNE OTZELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjg0NjY4ODktYzFlZi00NDEwLWFk OWMtMzA2YzA5ZTFiZTA2LzAvOENEODZFMzRFMUEyMUJFODczQjdBRENDOEQyQUU3 MTcxRUEzRDk2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABxyXz/38qPgxu60qW+RQJgb9oUAz4ZZsMYV EP8mEiOaNOa2x7fi+s0KYLVIv9xv+9e6SQDyzV0+GeKU7hp1L23YEXphhY2WopiO lQTH05gCCRRrA5M9vGTSZes4Shg/lhGCkVCX6uFwRLoLYn+3eHLpthvLjwyIHBHt Spsq5O2wOaY3UPESf3XavsowmFnzLk3DC/Ks7hCX3dP+hF7vBIPtIm66ay5e98rR 3mzbHs7SPLHz65imOS7ePNad9o7kqzb+O7RIpM7hMN/UFEn04Sa7psB6Z2RGKFZG ko3VEmE1L7SXbJ5VwImaktdVtRSRWqC+qqSyHaG35cAi40fcR7I= -----END CERTIFICATE-----Generated at Tue Jul 21 06:50:45 2026 by rpki-client