$ rpki-client -vvf rpki-rsync.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/E8D1C1B412CB64FE5835083F76A7487CE34452B6.mft File: E8D1C1B412CB64FE5835083F76A7487CE34452B6.mft (raw, json) Hash identifier: MJSLH8yjO/AG0EuJ0sXjdlXhL9aLGSNgXvEC8rvrWUg= Subject key identifier: E7:8E:25:35:E0:E5:C8:6E:A2:82:5D:79:03:61:24:D8:EB:8C:45:12 Authority key identifier: E8:D1:C1:B4:12:CB:64:FE:58:35:08:3F:76:A7:48:7C:E3:44:52:B6 Certificate issuer: /CN=E8D1C1B412CB64FE5835083F76A7487CE34452B6 Certificate serial: 0927ED09ADFDAA2FA45D3339B58EC29D876A9DDE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E8D1C1B412CB64FE5835083F76A7487CE34452B6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/E8D1C1B412CB64FE5835083F76A7487CE34452B6.mft Manifest number: 6A Signing time: Mon 20 Jul 2026 22:13:32 +0000 Manifest this update: Mon 20 Jul 2026 22:08:32 +0000 Manifest next update: Wed 22 Jul 2026 00:07:32 +0000 Files and hashes: 1: 3130332e3136332e3138342e302f32342d3234203d3e20313432333636.roa (hash: /pHfUH1NlBnMVG+9w4rBpFljBqBGm2WJrHAQRZot61U=) 2: 3130332e3136332e3138352e302f32342d3234203d3e20313432333636.roa (hash: 7Kp38WdKSSiLKliiaFpY9zvvkr9TIBcqJ58D1X388bM=) 3: E8D1C1B412CB64FE5835083F76A7487CE34452B6.crl (hash: I7hC7EWn7FU4JHG+yAW0rFy+CC6Zpna/pNiJnzb8i+g=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/E8D1C1B412CB64FE5835083F76A7487CE34452B6.crl rsync://rpki-rsync.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/E8D1C1B412CB64FE5835083F76A7487CE34452B6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E8D1C1B412CB64FE5835083F76A7487CE34452B6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 00:07:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:27:ed:09:ad:fd:aa:2f:a4:5d:33:39:b5:8e:c2:9d:87:6a:9d:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E8D1C1B412CB64FE5835083F76A7487CE34452B6 Validity Not Before: Jul 20 22:08:32 2026 GMT Not After : Jul 22 00:07:32 2026 GMT Subject: CN=E78E2535E0E5C86EA2825D79036124D8EB8C4512 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:58:4a:a0:f7:c1:ac:ff:fd:87:26:4c:17:c6: b2:49:ce:17:fd:cb:e2:74:e1:86:c4:d4:de:27:1e: 2b:6b:52:ac:59:cd:cb:6f:6f:bb:d6:55:37:2d:94: 7e:ca:48:09:11:bb:3c:d7:ea:00:7b:d6:cb:9f:3f: 53:69:7d:00:a2:c9:a1:53:b1:13:c6:48:47:af:eb: 68:67:d7:f6:52:43:b1:81:cf:72:46:d8:fe:98:08: f3:ce:4d:6c:a4:6e:8d:c4:6a:c1:c4:17:a8:c1:96: 6d:2b:74:8f:e4:b2:dc:2e:de:2e:0b:de:49:f2:b1: 58:96:dd:57:06:cc:0e:ba:ec:46:54:9b:a4:90:7b: b2:29:ea:de:16:ec:11:88:ba:c6:18:da:90:42:44: 77:9d:9a:07:01:3c:9d:57:18:01:d2:5e:3e:ed:06: a1:56:9e:01:4c:87:72:65:d2:46:0b:aa:b1:6d:1f: 04:4d:93:13:40:c8:32:d0:08:15:cf:a8:42:f2:78: b2:0a:c1:db:18:e5:ea:c9:1c:f9:78:93:f3:9d:d5: f6:aa:1a:88:f0:fb:42:5a:7b:b3:b8:a9:cd:a7:43: b4:c8:74:09:95:df:81:d1:9c:82:b4:e1:5a:2b:e3: be:0f:f3:81:fa:07:48:cc:a8:b3:35:41:4f:0c:65: 28:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:8E:25:35:E0:E5:C8:6E:A2:82:5D:79:03:61:24:D8:EB:8C:45:12 X509v3 Authority Key Identifier: keyid:E8:D1:C1:B4:12:CB:64:FE:58:35:08:3F:76:A7:48:7C:E3:44:52:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/E8D1C1B412CB64FE5835083F76A7487CE34452B6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E8D1C1B412CB64FE5835083F76A7487CE34452B6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/E8D1C1B412CB64FE5835083F76A7487CE34452B6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:2e:d5:7c:7b:f0:a3:9e:36:4b:06:96:18:01:72:7a:11:bb: 5b:47:90:25:4e:b5:bd:67:6e:dc:5a:10:63:0c:11:61:9b:49: fd:17:49:bc:23:b0:a3:b3:ec:18:18:b6:79:c9:4b:32:87:03: f6:9a:71:52:3d:da:47:ea:48:fb:c4:3c:e8:10:f6:bf:26:35: 3e:3f:3d:b2:86:ac:5a:4a:9d:2d:76:3f:17:71:be:27:bf:17: 1b:e2:6a:03:e0:a7:ae:32:ce:de:db:40:b1:94:bd:a7:33:d2: bc:0d:12:3a:9a:0e:a4:9e:c6:24:4f:8b:07:e4:6e:0c:85:c6: 87:ab:d3:a3:76:4e:8a:06:c0:c1:ef:ae:2a:47:de:cf:dc:e8: d5:da:c2:4c:d0:8b:01:9d:56:01:d9:93:f1:65:2f:91:50:07: 4c:f3:41:b8:f7:9e:59:a9:7d:d8:56:cc:03:cc:78:14:24:1f: b2:d6:08:a6:a4:98:ad:7d:39:12:7a:b5:9b:44:26:aa:02:56: 5a:1f:3c:02:9f:01:cf:19:45:ad:cb:4a:63:89:13:be:f1:b2: 15:ea:89:90:3e:63:ec:35:33:89:23:87:b2:19:08:be:9f:3a: 9e:43:88:05:ef:16:68:34:0f:26:37:dd:2c:58:bd:bf:7f:80: 5e:74:7b:86 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCSftCa39qi+kXTM5tY7CnYdqnd4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRThEMUMxQjQxMkNCNjRGRTU4MzUwODNGNzZBNzQ4N0NF MzQ0NTJCNjAeFw0yNjA3MjAyMjA4MzJaFw0yNjA3MjIwMDA3MzJaMDMxMTAvBgNV BAMTKEU3OEUyNTM1RTBFNUM4NkVBMjgyNUQ3OTAzNjEyNEQ4RUI4QzQ1MTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7WEqg98Gs//2HJkwXxrJJzhf9 y+J04YbE1N4nHitrUqxZzctvb7vWVTctlH7KSAkRuzzX6gB71sufP1NpfQCiyaFT sRPGSEev62hn1/ZSQ7GBz3JG2P6YCPPOTWykbo3EasHEF6jBlm0rdI/kstwu3i4L 3knysViW3VcGzA667EZUm6SQe7Ip6t4W7BGIusYY2pBCRHedmgcBPJ1XGAHSXj7t BqFWngFMh3Jl0kYLqrFtHwRNkxNAyDLQCBXPqELyeLIKwdsY5erJHPl4k/Od1faq Gojw+0Jae7O4qc2nQ7TIdAmV34HRnIK04Vor474P84H6B0jMqLM1QU8MZSi1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU544lNeDlyG6igl15A2Ek2OuMRRIwHwYDVR0j BBgwFoAU6NHBtBLLZP5YNQg/dqdIfONEUrYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGIxNjY0YTctYzljOS00NDQyLTg3MTgtOWFlYzllMjExMGEyLzAvRThEMUMxQjQx MkNCNjRGRTU4MzUwODNGNzZBNzQ4N0NFMzQ0NTJCNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FOEQxQzFCNDEyQ0I2NEZFNTgzNTA4M0Y3NkE3NDg3Q0UzNDQ1 MkI2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGIxNjY0YTctYzljOS00NDQyLTg3 MTgtOWFlYzllMjExMGEyLzAvRThEMUMxQjQxMkNCNjRGRTU4MzUwODNGNzZBNzQ4 N0NFMzQ0NTJCNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGQu1Xx78KOeNksGlhgBcnoRu1tHkCVOtb1n btxaEGMMEWGbSf0XSbwjsKOz7BgYtnnJSzKHA/aacVI92kfqSPvEPOgQ9r8mNT4/ PbKGrFpKnS12Pxdxvie/FxviagPgp64yzt7bQLGUvacz0rwNEjqaDqSexiRPiwfk bgyFxoer06N2TooGwMHvripH3s/c6NXawkzQiwGdVgHZk/FlL5FQB0zzQbj3nlmp fdhWzAPMeBQkH7LWCKakmK19ORJ6tZtEJqoCVlofPAKfAc8ZRa3LSmOJE77xshXq iZA+Y+w1M4kjh7IZCL6fOp5DiAXvFmg0DyY33SxYvb9/gF50e4Y= -----END CERTIFICATE-----Generated at Tue Jul 21 07:00:41 2026 by rpki-client