$ rpki-client -vvf rpki-rsync.idnic.net/repo/89a40089-6041-45ed-8e44-a997c8acf480/0/8B0CF87F2349FC8787EF52E3B0AD80E141E2BE1C.mft File: 8B0CF87F2349FC8787EF52E3B0AD80E141E2BE1C.mft (raw, json) Hash identifier: aLOmNyrA1ursCiSuU2S04mApPoyht/E+audEtB2ICzk= Subject key identifier: 8D:BD:C8:4C:C9:3A:8C:D6:8D:09:C0:70:F4:A6:27:69:EE:DD:41:7C Authority key identifier: 8B:0C:F8:7F:23:49:FC:87:87:EF:52:E3:B0:AD:80:E1:41:E2:BE:1C Certificate issuer: /CN=8B0CF87F2349FC8787EF52E3B0AD80E141E2BE1C Certificate serial: 0A2FB506113D06FAFBA2BA3790271EAB4AEB33B4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8B0CF87F2349FC8787EF52E3B0AD80E141E2BE1C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/89a40089-6041-45ed-8e44-a997c8acf480/0/8B0CF87F2349FC8787EF52E3B0AD80E141E2BE1C.mft Manifest number: 6B Signing time: Tue 21 Jul 2026 00:36:36 +0000 Manifest this update: Tue 21 Jul 2026 00:31:36 +0000 Manifest next update: Wed 22 Jul 2026 02:15:36 +0000 Files and hashes: 1: 3130332e3132362e3233322e302f32332d3233203d3e20313530393738.roa (hash: 8luvuUZe/inH3n4D6OyQwwD6mGHctkX0bejCwUaYOvA=) 2: 3130332e3132362e3233322e302f32342d3234203d3e20313530393738.roa (hash: A0fye72fVewvJEctRltf+2Pc+fB290Pn79WveiWFgaQ=) 3: 8B0CF87F2349FC8787EF52E3B0AD80E141E2BE1C.crl (hash: 5+tv98Giz/E5ZvxN2+Z/TJICigZPOZ5acbRfuVzwtyY=) 4: 3130332e3132362e3233332e302f32342d3234203d3e20313530393738.roa (hash: feHp+VgvlrJlDWnbvgKdK3q5FY7GJ/3YIOlQqsX2zUs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/89a40089-6041-45ed-8e44-a997c8acf480/0/8B0CF87F2349FC8787EF52E3B0AD80E141E2BE1C.crl rsync://rpki-rsync.idnic.net/repo/89a40089-6041-45ed-8e44-a997c8acf480/0/8B0CF87F2349FC8787EF52E3B0AD80E141E2BE1C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8B0CF87F2349FC8787EF52E3B0AD80E141E2BE1C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 02:08:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:2f:b5:06:11:3d:06:fa:fb:a2:ba:37:90:27:1e:ab:4a:eb:33:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B0CF87F2349FC8787EF52E3B0AD80E141E2BE1C Validity Not Before: Jul 21 00:31:36 2026 GMT Not After : Jul 22 02:15:36 2026 GMT Subject: CN=8DBDC84CC93A8CD68D09C070F4A62769EEDD417C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:76:a7:c6:71:d4:ba:fc:80:b8:55:49:70:6a: 52:ca:5b:50:fb:99:d2:f7:69:11:c2:07:19:2d:26: 9e:7f:2f:b6:39:54:3a:23:20:7d:6b:6c:b1:b2:58: f8:38:6b:0a:3c:35:74:66:67:8e:64:79:80:a4:85: 6f:90:30:95:b5:45:24:9c:0d:99:a9:86:d5:16:48: a9:b7:e3:e6:e5:d2:1d:fc:f1:ae:ed:30:bd:b4:5c: 99:ce:f6:60:72:1b:8d:58:de:66:8b:ae:38:af:63: c9:92:0b:91:dd:38:50:00:2c:29:72:00:07:74:48: 34:ad:32:d3:be:ee:dd:ce:e9:c1:22:9a:9c:07:3f: 03:91:30:1a:40:71:47:2a:38:bd:2d:8c:8f:0a:b0: db:ea:b0:ec:e8:eb:88:af:5d:69:6a:15:c9:ae:1d: 10:49:35:a1:3e:fc:cc:71:db:67:4b:44:3a:47:a4: d8:05:c7:4a:8a:00:83:d3:8d:90:25:3a:cd:23:87: 90:04:34:51:32:80:ae:a5:fc:7b:b4:79:ef:21:2a: 3d:4c:f3:39:fc:a9:e8:85:9c:a4:c7:19:b3:46:e2: ed:c4:5a:98:ae:ab:f9:c4:36:0b:68:f5:0a:7f:40: 36:73:f8:57:51:db:94:b4:9b:a3:b3:12:55:dd:e0: d0:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:BD:C8:4C:C9:3A:8C:D6:8D:09:C0:70:F4:A6:27:69:EE:DD:41:7C X509v3 Authority Key Identifier: keyid:8B:0C:F8:7F:23:49:FC:87:87:EF:52:E3:B0:AD:80:E1:41:E2:BE:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/89a40089-6041-45ed-8e44-a997c8acf480/0/8B0CF87F2349FC8787EF52E3B0AD80E141E2BE1C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8B0CF87F2349FC8787EF52E3B0AD80E141E2BE1C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/89a40089-6041-45ed-8e44-a997c8acf480/0/8B0CF87F2349FC8787EF52E3B0AD80E141E2BE1C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:02:eb:c6:2e:86:bc:2d:c0:42:4f:5d:bd:6d:4f:2a:be:c8: 87:38:d5:e0:d9:7a:2c:02:15:8f:c8:eb:9f:16:bc:bf:af:0b: cd:61:65:ad:af:02:9a:6b:89:a9:93:ef:52:87:72:da:85:7c: 58:b9:67:be:0b:7e:fd:2a:c1:f8:ec:c2:6a:f7:33:3f:10:d2: 3a:6b:f1:ab:74:c0:18:cf:40:fe:b8:5c:68:e6:1f:4b:33:ed: 9d:92:13:f2:52:6e:51:9e:64:97:a8:b7:58:e7:58:9a:ea:50: e2:33:e1:df:28:a6:92:c5:ba:aa:b7:4f:1e:4b:df:50:7d:c7: f9:cf:ee:80:79:32:ad:fe:a4:33:c9:c9:38:72:c8:3e:a7:5c: 49:46:79:7a:19:47:9e:26:2d:4d:67:bf:45:e2:92:02:90:d7: 1a:1b:01:b7:90:8f:db:2c:b3:02:10:bc:30:be:67:8b:e6:a4: d3:77:1f:62:a6:60:65:4e:33:f1:8f:62:70:09:88:17:c2:c7: fb:ac:c8:fe:22:25:3b:31:47:f7:e0:73:6a:2b:5d:14:05:70: fb:dd:38:77:dd:96:54:1d:eb:70:55:b2:12:0b:4e:1f:36:ad: e0:6a:56:f5:15:ca:99:c0:ab:13:7d:0b:61:7f:3b:27:e5:f7: 22:ae:35:42 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCi+1BhE9Bvr7oro3kCceq0rrM7QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEIwQ0Y4N0YyMzQ5RkM4Nzg3RUY1MkUzQjBBRDgwRTE0 MUUyQkUxQzAeFw0yNjA3MjEwMDMxMzZaFw0yNjA3MjIwMjE1MzZaMDMxMTAvBgNV BAMTKDhEQkRDODRDQzkzQThDRDY4RDA5QzA3MEY0QTYyNzY5RUVERDQxN0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZdqfGcdS6/IC4VUlwalLKW1D7 mdL3aRHCBxktJp5/L7Y5VDojIH1rbLGyWPg4awo8NXRmZ45keYCkhW+QMJW1RSSc DZmphtUWSKm34+bl0h388a7tML20XJnO9mByG41Y3maLrjivY8mSC5HdOFAALCly AAd0SDStMtO+7t3O6cEimpwHPwORMBpAcUcqOL0tjI8KsNvqsOzo64ivXWlqFcmu HRBJNaE+/Mxx22dLRDpHpNgFx0qKAIPTjZAlOs0jh5AENFEygK6l/Hu0ee8hKj1M 8zn8qeiFnKTHGbNG4u3EWpiuq/nENgto9Qp/QDZz+FdR25S0m6OzElXd4NCDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjb3ITMk6jNaNCcBw9KYnae7dQXwwHwYDVR0j BBgwFoAUiwz4fyNJ/IeH71LjsK2A4UHivhwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODlhNDAwODktNjA0MS00NWVkLThlNDQtYTk5N2M4YWNmNDgwLzAvOEIwQ0Y4N0Yy MzQ5RkM4Nzg3RUY1MkUzQjBBRDgwRTE0MUUyQkUxQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84QjBDRjg3RjIzNDlGQzg3ODdFRjUyRTNCMEFEODBFMTQxRTJC RTFDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODlhNDAwODktNjA0MS00NWVkLThl NDQtYTk5N2M4YWNmNDgwLzAvOEIwQ0Y4N0YyMzQ5RkM4Nzg3RUY1MkUzQjBBRDgw RTE0MUUyQkUxQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFsC68YuhrwtwEJPXb1tTyq+yIc41eDZeiwC FY/I658WvL+vC81hZa2vAppriamT71KHctqFfFi5Z74Lfv0qwfjswmr3Mz8Q0jpr 8at0wBjPQP64XGjmH0sz7Z2SE/JSblGeZJeot1jnWJrqUOIz4d8oppLFuqq3Tx5L 31B9x/nP7oB5Mq3+pDPJyThyyD6nXElGeXoZR54mLU1nv0XikgKQ1xobAbeQj9ss swIQvDC+Z4vmpNN3H2KmYGVOM/GPYnAJiBfCx/usyP4iJTsxR/fgc2orXRQFcPvd OHfdllQd63BVshILTh82reBqVvUVypnAqxN9C2F/Oyfl9yKuNUI= -----END CERTIFICATE-----Generated at Tue Jul 21 08:20:42 2026 by rpki-client