$ rpki-client -vvf rpki-rsync.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/C8A277B3DEC8C0F0AA4C1FA542E819366C4EDC32.mft File: C8A277B3DEC8C0F0AA4C1FA542E819366C4EDC32.mft (raw, json) Hash identifier: D+07d/NU2k09uhet+H4+xX7l9C8OcPnFDZncPBc51lk= Subject key identifier: A3:59:72:16:DF:DE:95:FC:FD:F6:09:A1:20:DB:9E:90:F5:01:DF:7F Authority key identifier: C8:A2:77:B3:DE:C8:C0:F0:AA:4C:1F:A5:42:E8:19:36:6C:4E:DC:32 Certificate issuer: /CN=C8A277B3DEC8C0F0AA4C1FA542E819366C4EDC32 Certificate serial: 0F05EFBCB7E0FAEB35393C6C38801247EDD7E968 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C8A277B3DEC8C0F0AA4C1FA542E819366C4EDC32.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/C8A277B3DEC8C0F0AA4C1FA542E819366C4EDC32.mft Manifest number: 6A Signing time: Mon 20 Jul 2026 10:49:47 +0000 Manifest this update: Mon 20 Jul 2026 10:44:47 +0000 Manifest next update: Tue 21 Jul 2026 14:41:47 +0000 Files and hashes: 1: C8A277B3DEC8C0F0AA4C1FA542E819366C4EDC32.crl (hash: 4IgOsq6OM0Me6Va5ZtsrBswNjnhDEBSced/cmvbmclM=) 2: 3130332e3232342e37372e302f32342d3234203d3e203536323535.roa (hash: W+SevG4xTFDq1sgkDkONqUQc3ucQK2u8ntiRI2DImrc=) 3: 3130332e3232342e37362e302f32342d3234203d3e203536323535.roa (hash: qW0AGce8XtjjXQ3Aq1xPuwzcIhd6zyH7ybAi9hoWtzA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/C8A277B3DEC8C0F0AA4C1FA542E819366C4EDC32.crl rsync://rpki-rsync.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/C8A277B3DEC8C0F0AA4C1FA542E819366C4EDC32.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C8A277B3DEC8C0F0AA4C1FA542E819366C4EDC32.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 14:41:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:05:ef:bc:b7:e0:fa:eb:35:39:3c:6c:38:80:12:47:ed:d7:e9:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C8A277B3DEC8C0F0AA4C1FA542E819366C4EDC32 Validity Not Before: Jul 20 10:44:47 2026 GMT Not After : Jul 21 14:41:47 2026 GMT Subject: CN=A3597216DFDE95FCFDF609A120DB9E90F501DF7F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:68:da:86:9e:1c:e1:5c:60:49:0d:5e:f6:61: 4e:92:1a:6c:24:2a:71:76:ba:ef:d4:2d:10:04:31: dd:72:bf:be:d5:94:54:1d:5c:57:6a:46:1c:24:75: b9:ed:dd:83:db:50:c6:1b:18:57:27:f5:91:31:16: 8b:1a:b4:24:3b:26:13:83:67:eb:83:60:71:76:97: de:b9:b4:fb:de:49:32:23:9f:65:3c:1d:63:d3:2d: eb:5c:c6:95:ad:55:03:c0:e3:6d:ef:79:12:05:0e: 97:dc:5b:92:4f:26:34:4c:16:25:1f:ea:be:7e:bd: 8c:de:e5:77:0f:28:54:0e:2b:65:05:c0:b4:ea:4e: 8c:1d:ee:34:bd:a6:eb:7c:75:5f:3f:4b:5a:4c:b2: 0d:b2:2e:44:96:f2:3f:f7:ec:1a:87:d6:13:eb:16: df:8b:c7:38:d5:4f:0f:b8:64:f8:84:cf:d7:e4:f5: 09:bb:c6:f4:73:c7:1e:6e:12:23:af:f1:70:26:60: fd:9f:7d:2f:01:1f:ac:65:4a:9e:92:93:09:fe:cd: 2f:81:19:25:4b:71:90:c3:5a:e0:be:e7:cb:ac:52: c0:30:12:69:f8:b6:36:09:82:d7:32:31:af:26:cd: 89:c4:0d:84:f8:f1:23:a7:94:fb:47:a0:81:eb:53: 94:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:59:72:16:DF:DE:95:FC:FD:F6:09:A1:20:DB:9E:90:F5:01:DF:7F X509v3 Authority Key Identifier: keyid:C8:A2:77:B3:DE:C8:C0:F0:AA:4C:1F:A5:42:E8:19:36:6C:4E:DC:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/C8A277B3DEC8C0F0AA4C1FA542E819366C4EDC32.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C8A277B3DEC8C0F0AA4C1FA542E819366C4EDC32.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/C8A277B3DEC8C0F0AA4C1FA542E819366C4EDC32.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:ae:bf:29:db:1d:15:88:ac:5c:b8:50:03:5e:29:b7:d4:c9: e2:ae:7b:45:8b:83:a7:57:1a:12:fd:00:8d:ad:f7:11:a0:5a: 1f:4f:73:2d:46:1d:d6:ae:26:7d:e0:bc:76:c1:ba:a8:0c:94: 3c:6d:24:2e:76:c7:b3:a1:c5:9c:50:ae:c0:47:38:e4:86:2f: c7:65:37:50:2a:9f:21:23:8a:ca:a1:c6:ed:65:ba:c2:5f:53: cd:b2:dc:80:cb:ea:37:6a:ee:fa:03:b4:9c:25:24:f5:26:c7: 7d:94:6c:d2:d6:ee:47:6d:5b:0f:4f:6d:bb:60:70:e7:28:14: 28:1e:bf:c1:86:6e:6c:17:cd:23:84:5f:15:cc:84:61:e1:7e: 77:f5:e5:a3:43:03:c7:39:51:d6:34:d7:cf:19:96:b3:37:0f: 00:b5:0c:09:fb:a6:67:58:f7:f4:86:e4:5b:1f:f8:25:f1:4a: c1:03:36:75:03:a9:fa:db:00:8b:1d:66:96:4f:70:9a:45:aa: ee:d6:28:21:a4:fd:ad:d6:d2:d4:6b:a0:92:7b:d6:98:69:80: 8c:82:45:2f:76:c5:fa:04:85:75:52:c2:9e:75:e3:15:f6:55: cb:0a:9d:43:6c:09:a3:58:75:79:3b:32:00:54:c8:60:da:b4: 70:2c:78:e8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDwXvvLfg+us1OTxsOIASR+3X6WgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzhBMjc3QjNERUM4QzBGMEFBNEMxRkE1NDJFODE5MzY2 QzRFREMzMjAeFw0yNjA3MjAxMDQ0NDdaFw0yNjA3MjExNDQxNDdaMDMxMTAvBgNV BAMTKEEzNTk3MjE2REZERTk1RkNGREY2MDlBMTIwREI5RTkwRjUwMURGN0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfaNqGnhzhXGBJDV72YU6SGmwk KnF2uu/ULRAEMd1yv77VlFQdXFdqRhwkdbnt3YPbUMYbGFcn9ZExFosatCQ7JhOD Z+uDYHF2l965tPveSTIjn2U8HWPTLetcxpWtVQPA423veRIFDpfcW5JPJjRMFiUf 6r5+vYze5XcPKFQOK2UFwLTqTowd7jS9put8dV8/S1pMsg2yLkSW8j/37BqH1hPr Ft+LxzjVTw+4ZPiEz9fk9Qm7xvRzxx5uEiOv8XAmYP2ffS8BH6xlSp6Skwn+zS+B GSVLcZDDWuC+58usUsAwEmn4tjYJgtcyMa8mzYnEDYT48SOnlPtHoIHrU5SvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUo1lyFt/elfz99gmhINuekPUB338wHwYDVR0j BBgwFoAUyKJ3s97IwPCqTB+lQugZNmxO3DIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODIyNmIzZTEtZDdmNi00NjVlLTgzMDItN2Q1MmY1YzM0MGZmLzAvQzhBMjc3QjNE RUM4QzBGMEFBNEMxRkE1NDJFODE5MzY2QzRFREMzMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DOEEyNzdCM0RFQzhDMEYwQUE0QzFGQTU0MkU4MTkzNjZDNEVE QzMyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODIyNmIzZTEtZDdmNi00NjVlLTgz MDItN2Q1MmY1YzM0MGZmLzAvQzhBMjc3QjNERUM4QzBGMEFBNEMxRkE1NDJFODE5 MzY2QzRFREMzMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHWuvynbHRWIrFy4UANeKbfUyeKue0WLg6dX GhL9AI2t9xGgWh9Pcy1GHdauJn3gvHbBuqgMlDxtJC52x7OhxZxQrsBHOOSGL8dl N1AqnyEjisqhxu1lusJfU82y3IDL6jdq7voDtJwlJPUmx32UbNLW7kdtWw9Pbbtg cOcoFCgev8GGbmwXzSOEXxXMhGHhfnf15aNDA8c5UdY0188ZlrM3DwC1DAn7pmdY 9/SG5Fsf+CXxSsEDNnUDqfrbAIsdZpZPcJpFqu7WKCGk/a3W0tRroJJ71phpgIyC RS92xfoEhXVSwp514xX2VcsKnUNsCaNYdXk7MgBUyGDatHAseOg= -----END CERTIFICATE-----Generated at Tue Jul 21 06:39:52 2026 by rpki-client