$ rpki-client -vvf rpki-rsync.idnic.net/repo/d7ff01d0-26f9-4b20-a318-c311c267f2af/0/8638D28E3BD2280125963C7B30C34A226398A39F.mft File: 8638D28E3BD2280125963C7B30C34A226398A39F.mft (raw, json) Hash identifier: syIsAQ3Dw90BKFMgB7vkcCb4ZVTxdpFmPrrlssY6a4A= Subject key identifier: 26:E5:6E:3C:1E:6E:1F:84:F8:8F:9E:C1:CD:58:77:54:C3:F8:99:89 Authority key identifier: 86:38:D2:8E:3B:D2:28:01:25:96:3C:7B:30:C3:4A:22:63:98:A3:9F Certificate issuer: /CN=8638D28E3BD2280125963C7B30C34A226398A39F Certificate serial: 5286A8EE21CE166EEB1D66F8F035B3C5CFD8A583 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8638D28E3BD2280125963C7B30C34A226398A39F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d7ff01d0-26f9-4b20-a318-c311c267f2af/0/8638D28E3BD2280125963C7B30C34A226398A39F.mft Manifest number: 6B Signing time: Mon 20 Jul 2026 21:58:14 +0000 Manifest this update: Mon 20 Jul 2026 21:53:14 +0000 Manifest next update: Wed 22 Jul 2026 00:18:14 +0000 Files and hashes: 1: 3130332e3136362e3135382e302f32342d3234203d3e20313431393535.roa (hash: 7CUUFxXBF00bkdoTMxFKQ2ao9fNDKa33JZ3nwQoI/v0=) 2: 3130332e3136362e3135382e302f32332d3233203d3e20313431393535.roa (hash: 9/PIsC2XMlKZxB7OIm0Zr26jWW2WY5JodvXs3A+orYA=) 3: 8638D28E3BD2280125963C7B30C34A226398A39F.crl (hash: AHBVEV6abefDp7xYrHMI5AP4VuK9WPpazZ3wdXVghy4=) 4: 3130332e3136362e3135392e302f32342d3234203d3e20313431393535.roa (hash: K8RuD4iVWNDoq5/nKnK+l+BvrNOPQLNp6COtNPtCMfY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d7ff01d0-26f9-4b20-a318-c311c267f2af/0/8638D28E3BD2280125963C7B30C34A226398A39F.crl rsync://rpki-rsync.idnic.net/repo/d7ff01d0-26f9-4b20-a318-c311c267f2af/0/8638D28E3BD2280125963C7B30C34A226398A39F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8638D28E3BD2280125963C7B30C34A226398A39F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 00:18:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:86:a8:ee:21:ce:16:6e:eb:1d:66:f8:f0:35:b3:c5:cf:d8:a5:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8638D28E3BD2280125963C7B30C34A226398A39F Validity Not Before: Jul 20 21:53:14 2026 GMT Not After : Jul 22 00:18:14 2026 GMT Subject: CN=26E56E3C1E6E1F84F88F9EC1CD587754C3F89989 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:38:ce:5b:03:53:e8:66:39:fe:84:23:17:cc: 9a:11:05:81:d8:12:7c:09:8d:a6:80:99:d6:d5:ba: ef:11:c2:a2:5a:71:cc:96:84:81:5a:27:b7:b9:20: 38:4d:ed:4f:6f:2d:c7:94:fa:95:a0:e2:34:94:2b: fd:25:64:88:10:8d:0e:ed:af:cb:3a:43:04:0a:bc: 35:00:34:f7:b7:5e:d9:1d:7e:d3:bc:0a:1f:53:e5: d4:e9:e9:81:a5:31:19:67:c4:49:1e:cd:66:0a:d2: 8b:f4:5e:76:4f:34:ca:5b:39:88:2b:24:54:cf:15: e9:c4:04:5c:de:d0:51:43:e7:11:4b:06:68:39:6d: c6:2e:24:6a:6e:61:86:ba:99:c2:bd:8d:f9:62:1d: c4:6b:d4:a5:f3:8d:ce:40:6f:a3:ec:aa:be:80:81: 5e:92:8a:5b:14:0c:d5:8c:41:c8:00:6e:1e:b4:e1: cc:35:8a:74:43:7a:05:b9:9c:77:76:81:b9:6c:32: 86:2c:b9:d2:70:5c:7f:40:29:f0:31:50:cb:a6:85: 06:50:9a:49:5f:8a:4c:5e:81:64:71:06:61:9f:ca: c1:e7:03:28:78:cf:47:fb:3e:b1:dd:4e:1e:9d:8a: 5e:55:33:c4:39:50:1d:91:13:af:3d:74:dd:c7:e0: 02:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:E5:6E:3C:1E:6E:1F:84:F8:8F:9E:C1:CD:58:77:54:C3:F8:99:89 X509v3 Authority Key Identifier: keyid:86:38:D2:8E:3B:D2:28:01:25:96:3C:7B:30:C3:4A:22:63:98:A3:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d7ff01d0-26f9-4b20-a318-c311c267f2af/0/8638D28E3BD2280125963C7B30C34A226398A39F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8638D28E3BD2280125963C7B30C34A226398A39F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d7ff01d0-26f9-4b20-a318-c311c267f2af/0/8638D28E3BD2280125963C7B30C34A226398A39F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:2f:19:25:40:02:d8:d2:41:1a:f9:30:09:d0:eb:61:fd:56: 7b:c6:a0:75:d7:12:82:94:2d:36:ac:84:15:db:ef:c9:24:0e: 26:4a:03:52:fc:4c:77:30:62:a6:e6:f9:a8:f2:52:c2:08:cc: 30:97:7c:ea:17:2f:ef:5e:a3:6b:08:29:da:d3:62:81:10:6f: b1:e4:8e:27:72:0a:83:0e:1e:c0:0b:e4:17:94:25:d6:95:bf: 45:66:b4:27:e8:de:0a:96:2c:37:23:b8:a5:39:13:72:00:48: 04:cc:48:f7:77:54:15:a4:6c:be:54:75:fb:e6:2a:9d:61:38: 86:69:85:f0:98:2f:8a:ac:85:c5:55:39:9f:1b:b7:e7:29:a9: bf:cb:3e:c7:24:a2:1b:ef:ea:ab:90:3e:d8:95:dd:e8:f7:fa: 55:6b:3c:d7:89:f9:a6:83:16:a3:3a:10:f2:3c:3f:92:70:0e: 50:ee:13:80:05:38:9c:d5:85:c3:3e:80:a9:a3:1b:e8:af:2a: 06:26:b1:57:6e:22:1b:3a:cd:6b:7c:53:54:ec:57:0b:4f:63: b3:1f:e8:7b:d0:d8:18:32:2f:14:45:8d:64:6d:5d:f3:24:de: e4:24:53:7e:24:e4:51:9f:57:4d:de:65:00:c7:bc:cc:b9:fb: ba:27:c0:5c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUoao7iHOFm7rHWb48DWzxc/YpYMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODYzOEQyOEUzQkQyMjgwMTI1OTYzQzdCMzBDMzRBMjI2 Mzk4QTM5RjAeFw0yNjA3MjAyMTUzMTRaFw0yNjA3MjIwMDE4MTRaMDMxMTAvBgNV BAMTKDI2RTU2RTNDMUU2RTFGODRGODhGOUVDMUNENTg3NzU0QzNGODk5ODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwOM5bA1PoZjn+hCMXzJoRBYHY EnwJjaaAmdbVuu8RwqJaccyWhIFaJ7e5IDhN7U9vLceU+pWg4jSUK/0lZIgQjQ7t r8s6QwQKvDUANPe3XtkdftO8Ch9T5dTp6YGlMRlnxEkezWYK0ov0XnZPNMpbOYgr JFTPFenEBFze0FFD5xFLBmg5bcYuJGpuYYa6mcK9jfliHcRr1KXzjc5Ab6Psqr6A gV6SilsUDNWMQcgAbh604cw1inRDegW5nHd2gblsMoYsudJwXH9AKfAxUMumhQZQ mklfikxegWRxBmGfysHnAyh4z0f7PrHdTh6dil5VM8Q5UB2RE689dN3H4AITAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJuVuPB5uH4T4j57BzVh3VMP4mYkwHwYDVR0j BBgwFoAUhjjSjjvSKAElljx7MMNKImOYo58wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDdmZjAxZDAtMjZmOS00YjIwLWEzMTgtYzMxMWMyNjdmMmFmLzAvODYzOEQyOEUz QkQyMjgwMTI1OTYzQzdCMzBDMzRBMjI2Mzk4QTM5Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NjM4RDI4RTNCRDIyODAxMjU5NjNDN0IzMEMzNEEyMjYzOThB MzlGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDdmZjAxZDAtMjZmOS00YjIwLWEz MTgtYzMxMWMyNjdmMmFmLzAvODYzOEQyOEUzQkQyMjgwMTI1OTYzQzdCMzBDMzRB MjI2Mzk4QTM5Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIYvGSVAAtjSQRr5MAnQ62H9VnvGoHXXEoKU LTashBXb78kkDiZKA1L8THcwYqbm+ajyUsIIzDCXfOoXL+9eo2sIKdrTYoEQb7Hk jidyCoMOHsAL5BeUJdaVv0VmtCfo3gqWLDcjuKU5E3IASATMSPd3VBWkbL5Udfvm Kp1hOIZphfCYL4qshcVVOZ8bt+cpqb/LPsckohvv6quQPtiV3ej3+lVrPNeJ+aaD FqM6EPI8P5JwDlDuE4AFOJzVhcM+gKmjG+ivKgYmsVduIhs6zWt8U1TsVwtPY7Mf 6HvQ2BgyLxRFjWRtXfMk3uQkU34k5FGfV03eZQDHvMy5+7onwFw= -----END CERTIFICATE-----Generated at Tue Jul 21 07:01:49 2026 by rpki-client