$ rpki-client -vvf rpki-rsync.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/8D1A94EA0F9FD5148E09CAE0A307BDC99B1B4573.mft File: 8D1A94EA0F9FD5148E09CAE0A307BDC99B1B4573.mft (raw, json) Hash identifier: 3r2xxtcdTtNZj3uG5uSDsm+mT6XENd4QbVSjAuRDhbk= Subject key identifier: F8:20:C6:1D:05:99:88:62:87:D7:91:AF:7D:49:38:C5:29:54:15:7B Authority key identifier: 8D:1A:94:EA:0F:9F:D5:14:8E:09:CA:E0:A3:07:BD:C9:9B:1B:45:73 Certificate issuer: /CN=8D1A94EA0F9FD5148E09CAE0A307BDC99B1B4573 Certificate serial: 1A89779F3D36B296C61B79C0433F9A58976E13FE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8D1A94EA0F9FD5148E09CAE0A307BDC99B1B4573.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/8D1A94EA0F9FD5148E09CAE0A307BDC99B1B4573.mft Manifest number: 6C Signing time: Tue 21 Jul 2026 04:41:34 +0000 Manifest this update: Tue 21 Jul 2026 04:36:34 +0000 Manifest next update: Wed 22 Jul 2026 06:48:34 +0000 Files and hashes: 1: 3130332e31372e37362e302f32332d3233203d3e20313331373831.roa (hash: NR10Bfbwh6SYopHFVcr7fLYC1ZrjLqSPhi8hfWEGSfc=) 2: 8D1A94EA0F9FD5148E09CAE0A307BDC99B1B4573.crl (hash: YUVK2/94KWjYYlITBnuLRdW+ANEygL89tvMufUv+qKQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/8D1A94EA0F9FD5148E09CAE0A307BDC99B1B4573.crl rsync://rpki-rsync.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/8D1A94EA0F9FD5148E09CAE0A307BDC99B1B4573.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8D1A94EA0F9FD5148E09CAE0A307BDC99B1B4573.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 02:08:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:89:77:9f:3d:36:b2:96:c6:1b:79:c0:43:3f:9a:58:97:6e:13:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D1A94EA0F9FD5148E09CAE0A307BDC99B1B4573 Validity Not Before: Jul 21 04:36:34 2026 GMT Not After : Jul 22 06:48:34 2026 GMT Subject: CN=F820C61D0599886287D791AF7D4938C52954157B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:09:ed:87:55:47:37:c1:3c:07:88:a7:19:0a: 98:8f:59:d2:f8:64:a2:d1:30:d8:aa:53:62:6b:b7: 84:d1:c8:1a:1b:3d:3f:5b:e0:4c:5d:58:27:4b:7a: 83:a8:3a:39:a9:49:d3:39:d2:e9:f8:32:00:b3:6a: 58:4f:34:12:b3:37:14:a5:bb:27:54:3e:23:0c:15: f7:51:0f:01:e0:df:77:d0:ee:9f:76:bd:7e:0f:73: 0f:3c:7c:1e:d0:6c:57:ba:02:10:fc:63:a7:db:c4: f2:21:03:8b:bb:79:0e:42:c5:65:b9:91:e2:64:e8: 3e:3f:4a:d3:99:90:06:14:16:2f:14:ba:dc:85:54: 5c:a3:c2:ee:50:b5:c9:18:de:8a:cb:0a:ea:c6:01: 47:34:f1:c1:f5:a4:ff:bb:1a:82:39:8d:46:12:6e: fc:9b:14:a5:58:be:25:53:1a:a3:a9:76:a4:01:26: 6d:95:48:4a:44:13:27:2e:d4:9a:d0:0f:3e:f4:0f: 24:c9:f3:71:e6:aa:a9:ad:85:8d:3d:f8:4c:d8:e2: 68:8f:5c:e4:96:03:e6:60:6f:71:ef:fa:29:cc:4a: f7:44:07:b8:28:bb:d6:44:88:f6:42:37:08:38:bc: 0d:48:6b:95:d7:91:f5:c8:46:c8:8d:2b:33:8d:fb: 62:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:20:C6:1D:05:99:88:62:87:D7:91:AF:7D:49:38:C5:29:54:15:7B X509v3 Authority Key Identifier: keyid:8D:1A:94:EA:0F:9F:D5:14:8E:09:CA:E0:A3:07:BD:C9:9B:1B:45:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/8D1A94EA0F9FD5148E09CAE0A307BDC99B1B4573.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8D1A94EA0F9FD5148E09CAE0A307BDC99B1B4573.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/8D1A94EA0F9FD5148E09CAE0A307BDC99B1B4573.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:7b:9c:ed:21:7a:79:45:04:e7:da:e9:52:58:97:8d:c6:53: 32:14:16:2a:cb:72:f4:15:94:dd:ff:46:56:84:7e:af:cf:ff: 57:f5:cd:b9:19:99:f9:ec:76:67:eb:35:86:77:5b:e2:d8:40: 5b:13:04:80:4c:d6:45:0e:37:fc:18:1e:af:44:86:e8:f3:79: 47:db:1b:25:9c:79:32:8f:2f:a3:58:ef:a2:b8:fe:73:dd:fa: 3d:4b:ba:aa:20:46:f5:76:59:d5:20:f8:ed:68:52:cd:6c:b4: 52:24:0f:9a:e2:8f:e5:75:18:5a:c4:3b:48:42:3d:ac:c2:fa: 29:ba:38:20:2f:eb:40:32:84:fc:87:e7:dd:89:f6:33:f0:84: 93:50:3c:d3:1b:70:6a:22:88:30:5a:c6:b5:31:5f:42:68:f1: 6f:5f:4d:2f:63:b8:a3:ce:27:e0:68:f2:7b:de:98:58:71:7c: e8:25:e3:21:63:26:e7:8e:d6:d8:fb:52:51:46:88:14:f6:6e: 42:0d:82:60:88:2c:46:a8:26:fd:2f:8a:20:81:38:2a:b6:c1: 87:1c:1c:ea:e6:7b:29:64:de:5e:79:87:56:a7:71:44:2a:49: 62:bf:b9:1a:e6:de:4a:7b:5d:07:4a:5a:9a:9a:07:3a:d2:fb: 62:0b:eb:d7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGol3nz02spbGG3nAQz+aWJduE/4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEQxQTk0RUEwRjlGRDUxNDhFMDlDQUUwQTMwN0JEQzk5 QjFCNDU3MzAeFw0yNjA3MjEwNDM2MzRaFw0yNjA3MjIwNjQ4MzRaMDMxMTAvBgNV BAMTKEY4MjBDNjFEMDU5OTg4NjI4N0Q3OTFBRjdENDkzOEM1Mjk1NDE1N0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrCe2HVUc3wTwHiKcZCpiPWdL4 ZKLRMNiqU2Jrt4TRyBobPT9b4ExdWCdLeoOoOjmpSdM50un4MgCzalhPNBKzNxSl uydUPiMMFfdRDwHg33fQ7p92vX4Pcw88fB7QbFe6AhD8Y6fbxPIhA4u7eQ5CxWW5 keJk6D4/StOZkAYUFi8UutyFVFyjwu5QtckY3orLCurGAUc08cH1pP+7GoI5jUYS bvybFKVYviVTGqOpdqQBJm2VSEpEEycu1JrQDz70DyTJ83HmqqmthY09+EzY4miP XOSWA+Zgb3Hv+inMSvdEB7gou9ZEiPZCNwg4vA1Ia5XXkfXIRsiNKzON+2LrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+CDGHQWZiGKH15GvfUk4xSlUFXswHwYDVR0j BBgwFoAUjRqU6g+f1RSOCcrgowe9yZsbRXMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTA2MjExMWQtMGExMy00NDA3LWFmMzMtMzRjMjJhOWQ3YWVjLzAvOEQxQTk0RUEw RjlGRDUxNDhFMDlDQUUwQTMwN0JEQzk5QjFCNDU3My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84RDFBOTRFQTBGOUZENTE0OEUwOUNBRTBBMzA3QkRDOTlCMUI0 NTczLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTA2MjExMWQtMGExMy00NDA3LWFm MzMtMzRjMjJhOWQ3YWVjLzAvOEQxQTk0RUEwRjlGRDUxNDhFMDlDQUUwQTMwN0JE Qzk5QjFCNDU3My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMN7nO0henlFBOfa6VJYl43GUzIUFirLcvQV lN3/RlaEfq/P/1f1zbkZmfnsdmfrNYZ3W+LYQFsTBIBM1kUON/wYHq9EhujzeUfb GyWceTKPL6NY76K4/nPd+j1LuqogRvV2WdUg+O1oUs1stFIkD5rij+V1GFrEO0hC PazC+im6OCAv60AyhPyH592J9jPwhJNQPNMbcGoiiDBaxrUxX0Jo8W9fTS9juKPO J+Bo8nvemFhxfOgl4yFjJueO1tj7UlFGiBT2bkINgmCILEaoJv0viiCBOCq2wYcc HOrmeylk3l55h1ancUQqSWK/uRrm3kp7XQdKWpqaBzrS+2IL69c= -----END CERTIFICATE-----Generated at Tue Jul 21 06:59:56 2026 by rpki-client