$ rpki-client -vvf rpki-rsync.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/F8E9D48D17CC38E34CBFC74B5C07F4A9B1EBD214.mft File: F8E9D48D17CC38E34CBFC74B5C07F4A9B1EBD214.mft (raw, json) Hash identifier: HKh4Fur+CZisIz2jBt8DEh3Ex/MeBXRfHrFVZIRUlnk= Subject key identifier: 00:8A:AD:0E:0F:78:74:30:C4:53:26:77:61:E1:1E:2E:3A:43:3F:4B Authority key identifier: F8:E9:D4:8D:17:CC:38:E3:4C:BF:C7:4B:5C:07:F4:A9:B1:EB:D2:14 Certificate issuer: /CN=F8E9D48D17CC38E34CBFC74B5C07F4A9B1EBD214 Certificate serial: 58750619EA1276984F32A80A8C7688FF1BB921AF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8E9D48D17CC38E34CBFC74B5C07F4A9B1EBD214.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/F8E9D48D17CC38E34CBFC74B5C07F4A9B1EBD214.mft Manifest number: 6B Signing time: Tue 21 Jul 2026 05:17:23 +0000 Manifest this update: Tue 21 Jul 2026 05:12:23 +0000 Manifest next update: Wed 22 Jul 2026 07:49:23 +0000 Files and hashes: 1: F8E9D48D17CC38E34CBFC74B5C07F4A9B1EBD214.crl (hash: uDRJZkD+AH6AWIbVYsPk/FByNR3Qc+lte+HR+C/FB3o=) 2: 3130332e3132362e3137332e302f32342d3234203d3e20313338313132.roa (hash: prj58PGbUwDLvrT9h5jO7nMgDDmjvocJnN5ph+z3PrU=) 3: 3130332e3132362e3137342e302f32342d3234203d3e20313338313132.roa (hash: VGZWopnP5E+cpki2YrX/ob7V+wdxOvea5qW0A+eDkWM=) 4: 3130332e3132362e3137322e302f32342d3234203d3e20313338313132.roa (hash: 9E/Ti671GF/WZdUwZ2RH1G2YB9kJfWY4JlzPZetlvoI=) 5: 3130332e3132362e3137352e302f32342d3234203d3e20313338313132.roa (hash: rPbVerJ1hIqpxViNC0hFDNp8HCiflf0mjWJTLUhjlFU=) 6: 323430343a6563303a3a2f33322d3332203d3e20313338313132.roa (hash: ebJX0xmBUCyzAXEckdnMbEf0pSEsLD4g9s9OXuyGYmM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/F8E9D48D17CC38E34CBFC74B5C07F4A9B1EBD214.crl rsync://rpki-rsync.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/F8E9D48D17CC38E34CBFC74B5C07F4A9B1EBD214.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8E9D48D17CC38E34CBFC74B5C07F4A9B1EBD214.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 02:08:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:75:06:19:ea:12:76:98:4f:32:a8:0a:8c:76:88:ff:1b:b9:21:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8E9D48D17CC38E34CBFC74B5C07F4A9B1EBD214 Validity Not Before: Jul 21 05:12:23 2026 GMT Not After : Jul 22 07:49:23 2026 GMT Subject: CN=008AAD0E0F787430C453267761E11E2E3A433F4B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:85:37:5f:9f:ed:49:a3:a6:eb:44:4e:a6:4c: 12:a7:be:e7:b6:6b:bd:c6:3d:9d:8d:00:d2:7a:3d: 15:a0:ba:85:f5:c9:60:72:29:92:a3:9c:15:5a:68: ac:af:b0:0d:c7:8e:35:df:69:91:e6:be:a9:cb:37: 07:b2:35:09:6c:94:db:93:2e:26:b8:58:44:f8:fa: d7:c5:fe:2b:b6:f9:5c:43:98:da:cf:c1:84:39:f5: ff:27:e3:50:13:ab:65:74:fa:7a:f3:a5:ef:7e:87: 6d:ce:b4:28:1d:6c:31:f5:16:6b:a2:b1:2e:95:d6: 2d:32:fd:9f:ac:6c:4c:ac:e9:73:31:f6:46:f5:f7: c2:28:f2:c7:79:a7:94:e6:cb:d0:eb:20:e9:ed:0b: 56:7c:76:15:38:f5:fa:ca:2c:a6:15:08:72:d0:c6: 35:66:cf:aa:c0:b4:c5:6c:de:0d:98:38:5f:9d:07: a9:e5:e8:ba:bb:22:cc:e3:9e:0b:49:1b:7b:8e:6f: 33:ed:74:46:d7:a8:6d:c9:42:cb:f8:4f:83:f3:5e: f2:b4:ee:53:16:02:ce:5c:59:6a:a5:cf:2e:b7:22: 74:45:58:a8:26:07:57:44:18:96:5b:cb:d0:92:0d: 6c:6c:ad:2c:6b:e7:58:99:d9:12:69:d3:02:4d:88: 97:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:8A:AD:0E:0F:78:74:30:C4:53:26:77:61:E1:1E:2E:3A:43:3F:4B X509v3 Authority Key Identifier: keyid:F8:E9:D4:8D:17:CC:38:E3:4C:BF:C7:4B:5C:07:F4:A9:B1:EB:D2:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/F8E9D48D17CC38E34CBFC74B5C07F4A9B1EBD214.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8E9D48D17CC38E34CBFC74B5C07F4A9B1EBD214.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/F8E9D48D17CC38E34CBFC74B5C07F4A9B1EBD214.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:84:ba:53:99:9b:b9:2b:d7:c9:ba:41:07:b0:34:5e:56:77: 1e:94:3b:f3:3c:78:ca:22:b6:e5:c0:d1:57:73:c6:e2:8d:36: 41:f0:bd:c8:af:b5:3f:b9:1d:41:f1:c6:ce:7c:0a:60:24:2d: d9:0b:78:c7:8d:c2:20:cb:88:66:49:d8:33:c9:b9:2c:ed:31: 1b:38:f4:76:79:c2:f1:59:56:2d:72:e9:3a:1f:22:b9:78:22: 4a:9f:aa:02:aa:e0:fb:d8:1e:a5:eb:90:4a:dc:a0:51:3d:02: 07:69:fb:19:8d:85:2f:b0:c8:3e:90:6b:ba:0c:1e:34:c7:c1: 07:c9:71:ad:4e:7d:14:0c:2f:76:81:70:0a:3b:08:a6:b1:26: a6:bb:67:fa:c0:74:cd:6d:28:7f:11:43:56:fc:76:27:43:aa: 67:e6:dc:27:41:5e:68:58:8a:ca:eb:1c:73:65:44:e8:c6:83: 31:87:cd:07:be:87:41:86:1f:54:e7:da:91:ce:56:28:bb:20: 3b:9b:64:c2:d4:1b:95:7d:6a:a3:d8:3f:00:1b:90:90:d4:a5: 22:84:85:be:46:08:86:69:a5:03:4b:d7:e8:e0:dd:4a:34:9f: 53:89:6f:94:cb:d2:43:fd:05:90:32:c1:54:a2:95:36:dc:1d: d4:63:08:86 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWHUGGeoSdphPMqgKjHaI/xu5Ia8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhFOUQ0OEQxN0NDMzhFMzRDQkZDNzRCNUMwN0Y0QTlC MUVCRDIxNDAeFw0yNjA3MjEwNTEyMjNaFw0yNjA3MjIwNzQ5MjNaMDMxMTAvBgNV BAMTKDAwOEFBRDBFMEY3ODc0MzBDNDUzMjY3NzYxRTExRTJFM0E0MzNGNEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0hTdfn+1Jo6brRE6mTBKnvue2 a73GPZ2NANJ6PRWguoX1yWByKZKjnBVaaKyvsA3HjjXfaZHmvqnLNweyNQlslNuT Lia4WET4+tfF/iu2+VxDmNrPwYQ59f8n41ATq2V0+nrzpe9+h23OtCgdbDH1Fmui sS6V1i0y/Z+sbEys6XMx9kb198Io8sd5p5Tmy9DrIOntC1Z8dhU49frKLKYVCHLQ xjVmz6rAtMVs3g2YOF+dB6nl6Lq7IszjngtJG3uObzPtdEbXqG3JQsv4T4PzXvK0 7lMWAs5cWWqlzy63InRFWKgmB1dEGJZby9CSDWxsrSxr51iZ2RJp0wJNiJffAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAIqtDg94dDDEUyZ3YeEeLjpDP0swHwYDVR0j BBgwFoAU+OnUjRfMOONMv8dLXAf0qbHr0hQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGRiOGQ5MDgtMWI5OS00NTVjLWFjNzYtOGQ2MjRkZmE0M2I2LzAvRjhFOUQ0OEQx N0NDMzhFMzRDQkZDNzRCNUMwN0Y0QTlCMUVCRDIxNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GOEU5RDQ4RDE3Q0MzOEUzNENCRkM3NEI1QzA3RjRBOUIxRUJE MjE0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGRiOGQ5MDgtMWI5OS00NTVjLWFj NzYtOGQ2MjRkZmE0M2I2LzAvRjhFOUQ0OEQxN0NDMzhFMzRDQkZDNzRCNUMwN0Y0 QTlCMUVCRDIxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE6EulOZm7kr18m6QQewNF5Wdx6UO/M8eMoi tuXA0VdzxuKNNkHwvcivtT+5HUHxxs58CmAkLdkLeMeNwiDLiGZJ2DPJuSztMRs4 9HZ5wvFZVi1y6TofIrl4IkqfqgKq4PvYHqXrkErcoFE9Agdp+xmNhS+wyD6Qa7oM HjTHwQfJca1OfRQML3aBcAo7CKaxJqa7Z/rAdM1tKH8RQ1b8didDqmfm3CdBXmhY isrrHHNlROjGgzGHzQe+h0GGH1Tn2pHOVii7IDubZMLUG5V9aqPYPwAbkJDUpSKE hb5GCIZppQNL1+jg3Uo0n1OJb5TL0kP9BZAywVSilTbcHdRjCIY= -----END CERTIFICATE-----Generated at Tue Jul 21 06:26:42 2026 by rpki-client