$ rpki-client -vvf rpki-rsync.idnic.net/repo/0c1e49ab-50ca-4b3e-823c-8b3d31ba85f2/0/A8B4290DB1D500117291858DAF1B1EDF11D478CF.mft File: A8B4290DB1D500117291858DAF1B1EDF11D478CF.mft (raw, json) Hash identifier: SFBAHupEmLLHATmVBMARiCxYXON+GlotG617JBQ16fQ= Subject key identifier: 6E:06:80:61:BB:C6:4E:8D:FB:CE:58:ED:2C:F2:9C:56:86:F7:DF:D5 Authority key identifier: A8:B4:29:0D:B1:D5:00:11:72:91:85:8D:AF:1B:1E:DF:11:D4:78:CF Certificate issuer: /CN=A8B4290DB1D500117291858DAF1B1EDF11D478CF Certificate serial: 6A7DEBA8BFF407D60F917D7C80954198EB402C1B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A8B4290DB1D500117291858DAF1B1EDF11D478CF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0c1e49ab-50ca-4b3e-823c-8b3d31ba85f2/0/A8B4290DB1D500117291858DAF1B1EDF11D478CF.mft Manifest number: 62 Signing time: Mon 13 Jul 2026 15:12:31 +0000 Manifest this update: Mon 13 Jul 2026 15:07:31 +0000 Manifest next update: Tue 14 Jul 2026 16:00:31 +0000 Files and hashes: 1: 3130332e3136332e3130322e302f32342d3234203d3e20313431363733.roa (hash: h1TE3m56WQ+gTVyqOOSf1UTeQzb1azE9LGSpzK549vA=) 2: 3130332e3136332e3130322e302f32332d3233203d3e20313431363733.roa (hash: pahHbmXTulV++MGHGhEL8jSNz3xJ/1KdhQdlxBhfIw4=) 3: A8B4290DB1D500117291858DAF1B1EDF11D478CF.crl (hash: LP2ZZWBX9wYuw/nIqQQMYRbQMWG6cvxhkatnLb2Un3M=) 4: 3130332e3136332e3130332e302f32342d3234203d3e20313431363733.roa (hash: /KfC4nr32tMCkBy7+tyxmf0Ms+3hn6LQNee4YzYVhVM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0c1e49ab-50ca-4b3e-823c-8b3d31ba85f2/0/A8B4290DB1D500117291858DAF1B1EDF11D478CF.crl rsync://rpki-rsync.idnic.net/repo/0c1e49ab-50ca-4b3e-823c-8b3d31ba85f2/0/A8B4290DB1D500117291858DAF1B1EDF11D478CF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A8B4290DB1D500117291858DAF1B1EDF11D478CF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Jul 2026 05:49:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:7d:eb:a8:bf:f4:07:d6:0f:91:7d:7c:80:95:41:98:eb:40:2c:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A8B4290DB1D500117291858DAF1B1EDF11D478CF Validity Not Before: Jul 13 15:07:31 2026 GMT Not After : Jul 14 16:00:31 2026 GMT Subject: CN=6E068061BBC64E8DFBCE58ED2CF29C5686F7DFD5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:48:f0:d3:2e:e9:0f:23:39:46:bd:7c:f2:4d: 7b:fd:00:48:38:ed:f8:1b:e2:fd:50:1d:0b:e9:36: ee:62:61:3e:aa:2c:3c:0e:44:28:98:8a:27:1f:54: 82:e2:7f:8c:7f:b0:6f:90:ba:46:0f:c2:57:12:20: 83:29:1b:db:3d:61:10:d8:fc:01:74:f8:28:a1:e5: de:6c:1b:00:b2:bc:c8:21:14:e7:fe:67:62:44:d1: 69:99:f3:7c:ae:fa:85:d6:67:62:66:2a:24:fa:6d: 25:37:41:75:92:97:cc:16:1f:84:6a:13:0b:ce:f1: f2:57:24:6e:fd:9d:fa:9c:e4:7f:ce:d2:7e:3e:2d: 0f:90:93:e9:d8:6c:a6:b2:44:52:f4:c2:76:fe:66: f4:d5:bb:76:e1:96:b9:22:a7:2b:71:6e:45:3f:db: 88:3e:98:da:cb:e5:77:e3:45:08:e6:6b:6b:2f:c6: 12:48:fc:a1:ca:b1:e1:9a:56:e7:2b:b9:8b:99:a3: d0:c7:4b:df:5a:7b:f7:6d:85:94:8f:a5:d8:c8:e8: 02:76:e2:f5:16:ed:1e:a4:c8:b1:0b:4b:51:7e:94: c7:10:27:4b:d2:b8:9a:8e:c1:9c:7e:cc:62:2b:ea: 8a:05:32:23:a3:06:74:5c:ab:39:5b:40:30:cb:83: f9:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:06:80:61:BB:C6:4E:8D:FB:CE:58:ED:2C:F2:9C:56:86:F7:DF:D5 X509v3 Authority Key Identifier: keyid:A8:B4:29:0D:B1:D5:00:11:72:91:85:8D:AF:1B:1E:DF:11:D4:78:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0c1e49ab-50ca-4b3e-823c-8b3d31ba85f2/0/A8B4290DB1D500117291858DAF1B1EDF11D478CF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A8B4290DB1D500117291858DAF1B1EDF11D478CF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0c1e49ab-50ca-4b3e-823c-8b3d31ba85f2/0/A8B4290DB1D500117291858DAF1B1EDF11D478CF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:89:de:c1:d7:fa:cb:6c:a4:7a:6d:7e:d9:e9:c2:07:eb:79: 4c:e6:cb:05:3e:cc:76:84:6f:b5:bb:be:97:0e:e6:fe:44:5c: 0d:d4:09:6e:66:6c:ce:ca:6d:ef:8c:d2:80:49:18:61:12:75: 6f:c3:aa:75:0d:60:83:16:d7:2c:f8:5a:7a:60:a3:4b:86:52: 84:67:22:19:b2:5b:e0:9f:43:e7:35:37:30:71:0d:6f:67:de: 52:80:b3:fd:1d:9b:c0:ad:2e:bb:ef:7e:81:fd:cb:f1:93:b7: 60:6d:64:e6:07:75:3e:92:34:3e:11:e4:bb:b5:70:12:b0:2a: ae:ea:86:0c:99:60:d3:ea:84:f7:40:99:58:82:79:c3:e6:8e: 8b:c3:5b:7f:3f:d0:52:29:30:41:d1:84:b4:d0:ab:ce:1d:ee: 79:98:f6:24:1a:75:1b:41:ce:6c:21:b5:52:12:5a:fd:66:57: 61:e0:df:ed:09:90:39:74:d8:6a:0a:05:09:0b:9d:4a:9b:0d: 62:99:7b:61:4c:a4:36:60:87:0f:48:da:70:79:8b:1b:3d:f2: 42:0c:d3:7e:4c:c3:f6:05:ba:38:64:3d:26:fa:66:4d:77:b8: 83:7d:fe:15:82:17:52:10:f9:ba:28:42:39:98:43:ca:5e:ec: cd:e7:e7:98 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUan3rqL/0B9YPkX18gJVBmOtALBswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQThCNDI5MERCMUQ1MDAxMTcyOTE4NThEQUYxQjFFREYx MUQ0NzhDRjAeFw0yNjA3MTMxNTA3MzFaFw0yNjA3MTQxNjAwMzFaMDMxMTAvBgNV BAMTKDZFMDY4MDYxQkJDNjRFOERGQkNFNThFRDJDRjI5QzU2ODZGN0RGRDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGSPDTLukPIzlGvXzyTXv9AEg4 7fgb4v1QHQvpNu5iYT6qLDwORCiYiicfVILif4x/sG+QukYPwlcSIIMpG9s9YRDY /AF0+Cih5d5sGwCyvMghFOf+Z2JE0WmZ83yu+oXWZ2JmKiT6bSU3QXWSl8wWH4Rq EwvO8fJXJG79nfqc5H/O0n4+LQ+Qk+nYbKayRFL0wnb+ZvTVu3bhlrkipytxbkU/ 24g+mNrL5XfjRQjma2svxhJI/KHKseGaVucruYuZo9DHS99ae/dthZSPpdjI6AJ2 4vUW7R6kyLELS1F+lMcQJ0vSuJqOwZx+zGIr6ooFMiOjBnRcqzlbQDDLg/lxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbgaAYbvGTo37zljtLPKcVob339UwHwYDVR0j BBgwFoAUqLQpDbHVABFykYWNrxse3xHUeM8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGMxZTQ5YWItNTBjYS00YjNlLTgyM2MtOGIzZDMxYmE4NWYyLzAvQThCNDI5MERC MUQ1MDAxMTcyOTE4NThEQUYxQjFFREYxMUQ0NzhDRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BOEI0MjkwREIxRDUwMDExNzI5MTg1OERBRjFCMUVERjExRDQ3 OENGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGMxZTQ5YWItNTBjYS00YjNlLTgy M2MtOGIzZDMxYmE4NWYyLzAvQThCNDI5MERCMUQ1MDAxMTcyOTE4NThEQUYxQjFF REYxMUQ0NzhDRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGiJ3sHX+stspHptftnpwgfreUzmywU+zHaE b7W7vpcO5v5EXA3UCW5mbM7Kbe+M0oBJGGESdW/DqnUNYIMW1yz4Wnpgo0uGUoRn IhmyW+CfQ+c1NzBxDW9n3lKAs/0dm8CtLrvvfoH9y/GTt2BtZOYHdT6SND4R5Lu1 cBKwKq7qhgyZYNPqhPdAmViCecPmjovDW38/0FIpMEHRhLTQq84d7nmY9iQadRtB zmwhtVISWv1mV2Hg3+0JkDl02GoKBQkLnUqbDWKZe2FMpDZghw9I2nB5ixs98kIM 035Mw/YFujhkPSb6Zk13uIN9/hWCF1IQ+booQjmYQ8pe7M3n55g= -----END CERTIFICATE-----Generated at Mon Jul 13 22:17:32 2026 by rpki-client