$ rpki-client -vvf rpki-rsync.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/8ABD4558C9F94FFC670A52DB39F0C9B0B8398225.mft File: 8ABD4558C9F94FFC670A52DB39F0C9B0B8398225.mft (raw, json) Hash identifier: 7M/cPgHXqpJmoptDz01HOp6w79uoLFT5sNDgI0RTw9Y= Subject key identifier: 6C:29:9E:62:0E:CC:D9:A0:2E:7B:C1:C0:1D:6C:A7:FC:00:FC:6E:73 Authority key identifier: 8A:BD:45:58:C9:F9:4F:FC:67:0A:52:DB:39:F0:C9:B0:B8:39:82:25 Certificate issuer: /CN=8ABD4558C9F94FFC670A52DB39F0C9B0B8398225 Certificate serial: 0A7F5828C4ACC1CB739F1E1197956E469A1928A1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8ABD4558C9F94FFC670A52DB39F0C9B0B8398225.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/8ABD4558C9F94FFC670A52DB39F0C9B0B8398225.mft Manifest number: 6B Signing time: Tue 21 Jul 2026 04:06:00 +0000 Manifest this update: Tue 21 Jul 2026 04:01:00 +0000 Manifest next update: Wed 22 Jul 2026 04:21:00 +0000 Files and hashes: 1: 3130332e3134302e37352e302f32342d3234203d3e20313338383931.roa (hash: C1r63J+tGfKPbhbl/dI9G1bDePtMsBvnKWbTmvbk0OA=) 2: 323430343a663963303a3a2f33322d3332203d3e20313338383931.roa (hash: 0ts/w6oKmrt+r0C8EDap/FK5Uc/o23APxLZIMW88Oo4=) 3: 8ABD4558C9F94FFC670A52DB39F0C9B0B8398225.crl (hash: egPhqvYXR5dx4/JXAwUK4UUBhrDEQ19yI5XzPGk6Q04=) 4: 3130332e3134302e37342e302f32342d3234203d3e20313338383931.roa (hash: gMfUFYSPdVxpBBuGIFKR77copbFj1wN/NAnjtAfZ1Zo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/8ABD4558C9F94FFC670A52DB39F0C9B0B8398225.crl rsync://rpki-rsync.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/8ABD4558C9F94FFC670A52DB39F0C9B0B8398225.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8ABD4558C9F94FFC670A52DB39F0C9B0B8398225.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 02:08:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:7f:58:28:c4:ac:c1:cb:73:9f:1e:11:97:95:6e:46:9a:19:28:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ABD4558C9F94FFC670A52DB39F0C9B0B8398225 Validity Not Before: Jul 21 04:01:00 2026 GMT Not After : Jul 22 04:21:00 2026 GMT Subject: CN=6C299E620ECCD9A02E7BC1C01D6CA7FC00FC6E73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:1b:2a:d9:6a:f2:51:cd:d3:12:c9:17:cb:bb: d8:a1:27:42:fa:94:22:70:f9:20:61:13:32:e1:98: 80:7b:c8:bb:3c:86:c5:d1:92:6a:fa:66:6e:b5:2b: 3b:d9:5e:ca:ce:90:65:dd:72:34:5b:a3:05:cc:23: 4e:bb:ee:35:56:25:ae:07:8d:1b:10:4a:f7:5c:cc: 3c:f4:01:b9:a5:14:14:af:4e:fe:d2:e0:ea:ea:67: ec:f7:2e:2c:33:1b:4d:68:ef:25:fb:8d:f1:eb:5b: b8:a1:b7:02:df:ca:3c:59:3a:16:4d:0b:4e:e7:d5: c4:10:e2:d0:d0:6f:be:49:96:fb:91:65:70:36:a0: 44:4d:ff:92:5d:10:6c:34:20:10:d3:56:ed:fd:38: 87:b9:b9:c3:2e:99:ee:25:7f:b8:e6:7a:cd:20:19: 5f:8b:01:73:e8:53:78:7b:13:35:6a:a6:ac:24:60: 8f:17:75:17:d9:ee:41:df:39:fd:2f:36:d9:3e:4d: 19:e7:a9:65:bd:49:84:04:a4:33:75:5e:0c:73:59: ea:8b:0c:0e:8c:7f:ce:e9:03:f5:15:6e:12:43:7e: 33:37:42:4e:43:61:24:16:5c:f5:7f:0f:3e:28:16: ca:fe:38:d1:eb:58:96:80:4f:8b:cd:d3:88:7d:02: 6c:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:29:9E:62:0E:CC:D9:A0:2E:7B:C1:C0:1D:6C:A7:FC:00:FC:6E:73 X509v3 Authority Key Identifier: keyid:8A:BD:45:58:C9:F9:4F:FC:67:0A:52:DB:39:F0:C9:B0:B8:39:82:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/8ABD4558C9F94FFC670A52DB39F0C9B0B8398225.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8ABD4558C9F94FFC670A52DB39F0C9B0B8398225.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/8ABD4558C9F94FFC670A52DB39F0C9B0B8398225.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:28:df:9c:bd:ee:07:fa:5e:7d:f9:ef:b1:29:d7:5d:03:6f: ea:5f:0f:a2:30:ee:28:28:86:1e:04:1a:68:7c:70:24:2d:ea: dc:0e:e8:7d:d7:43:68:90:01:0c:44:69:fb:4d:e5:f9:fc:6a: 86:2a:87:0b:81:86:ec:34:e3:d7:79:4f:71:8d:64:5b:6d:2f: 46:22:38:52:87:2e:2c:d3:32:78:55:78:0b:71:a7:c1:5c:f4: 83:6b:db:65:18:07:0c:d1:58:e6:6e:c1:53:3c:22:64:d0:7f: 72:4b:5a:4d:00:b0:b2:39:d1:a6:51:e7:e6:d7:4c:0d:94:f6: ab:2b:ff:4e:cf:11:c9:21:d4:9d:14:cd:a7:b2:57:9a:57:16: 92:d6:48:51:c2:6b:9a:f0:ea:3d:0a:81:da:fd:84:8b:05:bf: 79:d9:1f:2e:d3:2c:b2:10:eb:ff:e9:74:a3:cd:8f:b6:39:ea: f4:ad:03:84:0e:6e:90:b7:41:24:94:59:08:46:ae:75:55:89: c3:3b:d2:83:2b:2c:60:d3:95:0e:a8:4e:0b:3e:83:47:91:8d: 7b:22:58:32:8a:b0:34:23:04:5b:ec:d8:94:73:d8:b4:f1:b5: bf:76:84:50:61:b2:fe:c7:4d:17:1d:14:2d:1d:a2:c1:1a:82: f4:17:87:ad -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCn9YKMSswctznx4Rl5VuRpoZKKEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEFCRDQ1NThDOUY5NEZGQzY3MEE1MkRCMzlGMEM5QjBC ODM5ODIyNTAeFw0yNjA3MjEwNDAxMDBaFw0yNjA3MjIwNDIxMDBaMDMxMTAvBgNV BAMTKDZDMjk5RTYyMEVDQ0Q5QTAyRTdCQzFDMDFENkNBN0ZDMDBGQzZFNzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8GyrZavJRzdMSyRfLu9ihJ0L6 lCJw+SBhEzLhmIB7yLs8hsXRkmr6Zm61KzvZXsrOkGXdcjRbowXMI0677jVWJa4H jRsQSvdczDz0AbmlFBSvTv7S4OrqZ+z3LiwzG01o7yX7jfHrW7ihtwLfyjxZOhZN C07n1cQQ4tDQb75JlvuRZXA2oERN/5JdEGw0IBDTVu39OIe5ucMume4lf7jmes0g GV+LAXPoU3h7EzVqpqwkYI8XdRfZ7kHfOf0vNtk+TRnnqWW9SYQEpDN1XgxzWeqL DA6Mf87pA/UVbhJDfjM3Qk5DYSQWXPV/Dz4oFsr+ONHrWJaAT4vN04h9AmwXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbCmeYg7M2aAue8HAHWyn/AD8bnMwHwYDVR0j BBgwFoAUir1FWMn5T/xnClLbOfDJsLg5giUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDM4N2U4NWQtYjE4NS00MzM0LTgwMWItNDljOGM4YjkxODQ0LzAvOEFCRDQ1NThD OUY5NEZGQzY3MEE1MkRCMzlGMEM5QjBCODM5ODIyNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84QUJENDU1OEM5Rjk0RkZDNjcwQTUyREIzOUYwQzlCMEI4Mzk4 MjI1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDM4N2U4NWQtYjE4NS00MzM0LTgw MWItNDljOGM4YjkxODQ0LzAvOEFCRDQ1NThDOUY5NEZGQzY3MEE1MkRCMzlGMEM5 QjBCODM5ODIyNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFgo35y97gf6Xn3577Ep110Db+pfD6Iw7igo hh4EGmh8cCQt6twO6H3XQ2iQAQxEaftN5fn8aoYqhwuBhuw049d5T3GNZFttL0Yi OFKHLizTMnhVeAtxp8Fc9INr22UYBwzRWOZuwVM8ImTQf3JLWk0AsLI50aZR5+bX TA2U9qsr/07PEckh1J0UzaeyV5pXFpLWSFHCa5rw6j0Kgdr9hIsFv3nZHy7TLLIQ 6//pdKPNj7Y56vStA4QObpC3QSSUWQhGrnVVicM70oMrLGDTlQ6oTgs+g0eRjXsi WDKKsDQjBFvs2JRz2LTxtb92hFBhsv7HTRcdFC0dosEagvQXh60= -----END CERTIFICATE-----Generated at Tue Jul 21 08:23:22 2026 by rpki-client