$ rpki-client -vvf rpki-rsync.idnic.net/repo/e1af144b-b92e-4fff-b641-e46fdde8c6df/0/A8314E43A1B6F8AFDA8D95E8779C65416911D310.mft File: A8314E43A1B6F8AFDA8D95E8779C65416911D310.mft (raw, json) Hash identifier: udK6EOkljOW4bflemshOOTs6EQAa7M6Pc1897K3trNo= Subject key identifier: 6D:3C:73:6A:24:8A:49:0D:95:50:4E:EE:72:D5:14:98:CC:5E:97:C2 Authority key identifier: A8:31:4E:43:A1:B6:F8:AF:DA:8D:95:E8:77:9C:65:41:69:11:D3:10 Certificate issuer: /CN=A8314E43A1B6F8AFDA8D95E8779C65416911D310 Certificate serial: 59925D11884E9B3AF0762F76A14C62DD3A73C81A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A8314E43A1B6F8AFDA8D95E8779C65416911D310.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e1af144b-b92e-4fff-b641-e46fdde8c6df/0/A8314E43A1B6F8AFDA8D95E8779C65416911D310.mft Manifest number: 6A Signing time: Mon 20 Jul 2026 14:55:01 +0000 Manifest this update: Mon 20 Jul 2026 14:50:01 +0000 Manifest next update: Tue 21 Jul 2026 17:16:01 +0000 Files and hashes: 1: A8314E43A1B6F8AFDA8D95E8779C65416911D310.crl (hash: 2Pz7tLlJsmmo9mJHba8fGSKs1FZbUSZ+CsZPkIxEhl0=) 2: 323030313a6466343a393130303a3a2f34382d3438203d3e20313337333233.roa (hash: rj0eAc/Fx3ZnJOzSIDlZ7SEqTTGwaOV3Drw183dIjT4=) 3: 3130332e3131312e3231392e302f32342d3234203d3e20313337333233.roa (hash: 9Ri7gQA5FImbPHcWZvwCuT4KIhatc00BK6BTGVhP2a0=) 4: 3130332e3131312e3231382e302f32342d3234203d3e20313337333233.roa (hash: GuNiUOOoy6zPyANA8gj8CAZ6aJ70gefpTuHjvXAYLoc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e1af144b-b92e-4fff-b641-e46fdde8c6df/0/A8314E43A1B6F8AFDA8D95E8779C65416911D310.crl rsync://rpki-rsync.idnic.net/repo/e1af144b-b92e-4fff-b641-e46fdde8c6df/0/A8314E43A1B6F8AFDA8D95E8779C65416911D310.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A8314E43A1B6F8AFDA8D95E8779C65416911D310.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 17:16:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:92:5d:11:88:4e:9b:3a:f0:76:2f:76:a1:4c:62:dd:3a:73:c8:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A8314E43A1B6F8AFDA8D95E8779C65416911D310 Validity Not Before: Jul 20 14:50:01 2026 GMT Not After : Jul 21 17:16:01 2026 GMT Subject: CN=6D3C736A248A490D95504EEE72D51498CC5E97C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ed:5c:85:ce:e3:c4:02:1a:98:ce:f4:f1:53: 6f:55:a4:85:06:3c:23:18:77:59:61:28:a9:de:0d: b7:c7:90:ba:be:e6:57:c5:d7:31:91:3a:4a:05:95: 0b:4f:93:25:6f:cf:01:4b:dd:18:8d:61:11:1e:ef: d7:e1:22:0b:60:22:47:fa:ad:7f:9c:4f:78:23:fd: 2d:93:ee:82:57:65:09:a3:c0:05:eb:39:62:7c:ad: 96:50:8a:a8:df:03:26:60:60:d9:dd:e8:10:90:66: 1c:2a:ce:ce:c5:76:01:76:f8:1f:eb:96:64:58:d5: 8c:8b:f2:3b:a3:ad:31:fd:95:27:ef:89:48:64:ad: cc:01:a9:ea:08:e0:c2:3e:88:f8:a0:a1:95:7d:bd: c3:03:53:f1:c6:0a:02:02:53:fa:64:3f:d6:2e:3a: 76:1f:d5:41:3f:06:51:37:22:03:e4:a0:ef:6e:28: 16:d9:cd:13:1a:b2:1a:4e:2d:75:3c:09:a5:33:74: f0:e7:cf:08:39:25:29:fc:68:c1:04:06:16:ce:c5: 92:5b:85:a2:6a:89:e2:f9:49:0f:85:e9:00:08:98: 45:78:0a:f2:12:e8:c1:be:04:4b:d6:2b:6a:0b:61: c5:5a:bd:74:09:88:fd:19:cd:10:ff:a7:da:ea:11: 31:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:3C:73:6A:24:8A:49:0D:95:50:4E:EE:72:D5:14:98:CC:5E:97:C2 X509v3 Authority Key Identifier: keyid:A8:31:4E:43:A1:B6:F8:AF:DA:8D:95:E8:77:9C:65:41:69:11:D3:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e1af144b-b92e-4fff-b641-e46fdde8c6df/0/A8314E43A1B6F8AFDA8D95E8779C65416911D310.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A8314E43A1B6F8AFDA8D95E8779C65416911D310.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e1af144b-b92e-4fff-b641-e46fdde8c6df/0/A8314E43A1B6F8AFDA8D95E8779C65416911D310.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:b4:68:b0:a9:9e:82:d1:31:7c:5d:35:46:cb:51:88:a3:5e: ab:42:eb:b1:0c:12:3b:e5:10:79:22:1b:5d:b2:3f:63:d7:94: 23:c2:8e:22:ea:52:d1:ea:ca:6c:a7:ce:f5:61:f5:2d:1c:71: af:68:e5:d0:16:fb:19:31:72:eb:7f:d6:d1:43:a0:24:65:e3: 13:ff:aa:18:8b:b8:1d:96:aa:aa:da:5b:55:c8:17:46:4f:01: 7b:59:8f:36:95:50:7a:27:ba:a3:e6:2c:80:89:a1:ec:62:73: 99:22:55:95:63:82:47:08:fb:59:36:77:34:59:90:ee:6e:9b: 9a:06:32:f1:be:5e:d4:84:4d:71:38:54:9a:54:92:1d:0d:0f: 38:9f:cf:14:c8:04:e4:a7:82:77:1a:c5:cc:5a:2b:73:97:90: ee:64:10:fb:ed:e1:9b:9a:c5:4d:a2:5d:c4:c7:96:7e:7b:d8: b0:32:10:41:42:7e:e4:15:80:f4:9b:7a:4e:1a:f3:e0:3f:89: 21:d9:d9:1a:7a:4e:d2:0f:1e:02:6a:ca:02:51:55:5a:d7:d2: 08:42:24:e4:c5:b5:c1:63:98:64:f0:00:6c:21:bf:40:cc:d7: 82:79:ac:8a:ee:70:ee:6e:61:b2:47:36:dc:21:e9:eb:28:23: 39:ef:6d:99 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWZJdEYhOmzrwdi92oUxi3TpzyBowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTgzMTRFNDNBMUI2RjhBRkRBOEQ5NUU4Nzc5QzY1NDE2 OTExRDMxMDAeFw0yNjA3MjAxNDUwMDFaFw0yNjA3MjExNzE2MDFaMDMxMTAvBgNV BAMTKDZEM0M3MzZBMjQ4QTQ5MEQ5NTUwNEVFRTcyRDUxNDk4Q0M1RTk3QzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC17VyFzuPEAhqYzvTxU29VpIUG PCMYd1lhKKneDbfHkLq+5lfF1zGROkoFlQtPkyVvzwFL3RiNYREe79fhIgtgIkf6 rX+cT3gj/S2T7oJXZQmjwAXrOWJ8rZZQiqjfAyZgYNnd6BCQZhwqzs7FdgF2+B/r lmRY1YyL8jujrTH9lSfviUhkrcwBqeoI4MI+iPigoZV9vcMDU/HGCgICU/pkP9Yu OnYf1UE/BlE3IgPkoO9uKBbZzRMashpOLXU8CaUzdPDnzwg5JSn8aMEEBhbOxZJb haJqieL5SQ+F6QAImEV4CvIS6MG+BEvWK2oLYcVavXQJiP0ZzRD/p9rqETERAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbTxzaiSKSQ2VUE7uctUUmMxel8IwHwYDVR0j BBgwFoAUqDFOQ6G2+K/ajZXod5xlQWkR0xAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTFhZjE0NGItYjkyZS00ZmZmLWI2NDEtZTQ2ZmRkZThjNmRmLzAvQTgzMTRFNDNB MUI2RjhBRkRBOEQ5NUU4Nzc5QzY1NDE2OTExRDMxMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BODMxNEU0M0ExQjZGOEFGREE4RDk1RTg3NzlDNjU0MTY5MTFE MzEwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTFhZjE0NGItYjkyZS00ZmZmLWI2 NDEtZTQ2ZmRkZThjNmRmLzAvQTgzMTRFNDNBMUI2RjhBRkRBOEQ5NUU4Nzc5QzY1 NDE2OTExRDMxMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACK0aLCpnoLRMXxdNUbLUYijXqtC67EMEjvl EHkiG12yP2PXlCPCjiLqUtHqymynzvVh9S0cca9o5dAW+xkxcut/1tFDoCRl4xP/ qhiLuB2WqqraW1XIF0ZPAXtZjzaVUHonuqPmLICJoexic5kiVZVjgkcI+1k2dzRZ kO5um5oGMvG+XtSETXE4VJpUkh0NDzifzxTIBOSngncaxcxaK3OXkO5kEPvt4Zua xU2iXcTHln572LAyEEFCfuQVgPSbek4a8+A/iSHZ2Rp6TtIPHgJqygJRVVrX0ghC JOTFtcFjmGTwAGwhv0DM14J5rIrucO5uYbJHNtwh6esoIznvbZk= -----END CERTIFICATE-----Generated at Tue Jul 21 10:04:43 2026 by rpki-client