$ rpki-client -vvf rpki-rsync.idnic.net/repo/1ee94014-87fa-4bc2-b1c6-7fd2a89476f3/0/8863D43C2CD36E9DE28C7E55F1891CC25C4F2985.mft File: 8863D43C2CD36E9DE28C7E55F1891CC25C4F2985.mft (raw, json) Hash identifier: PKt44z42aFzy+wm4qOnseANSM5qqeaPIihtLdVnvkN4= Subject key identifier: 1A:27:0F:FF:8B:7F:F9:B9:64:88:E0:0C:0A:E0:64:E1:28:52:ED:D1 Authority key identifier: 88:63:D4:3C:2C:D3:6E:9D:E2:8C:7E:55:F1:89:1C:C2:5C:4F:29:85 Certificate issuer: /CN=8863D43C2CD36E9DE28C7E55F1891CC25C4F2985 Certificate serial: 16E444D6C5BBA7588E571180145A429DB44CF8D2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8863D43C2CD36E9DE28C7E55F1891CC25C4F2985.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1ee94014-87fa-4bc2-b1c6-7fd2a89476f3/0/8863D43C2CD36E9DE28C7E55F1891CC25C4F2985.mft Manifest number: 62 Signing time: Mon 13 Jul 2026 02:37:12 +0000 Manifest this update: Mon 13 Jul 2026 02:32:12 +0000 Manifest next update: Tue 14 Jul 2026 04:37:12 +0000 Files and hashes: 1: 3230322e34372e3138382e302f32332d3234203d3e203435333035.roa (hash: 0+nHSjmEBtHrdpW5swBsy/CGgBdToecJRrJ4YRQ1Ieo=) 2: 3230322e34372e3138392e302f32342d3234203d3e203435333035.roa (hash: l0DIBrvHKOmdXYA8EMn7r3ept4hzvTyfATy5T2AkXgc=) 3: 8863D43C2CD36E9DE28C7E55F1891CC25C4F2985.crl (hash: jNgVUcMvGyv97UN0JnsHewxL5HJXP4g5IFH8rPsx3IM=) 4: 3230322e34372e3138382e302f32342d3234203d3e203435333035.roa (hash: YJRCBupflF/I8POF8sMQ3AXgFo1nrT6mZHr4XrUFzvU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1ee94014-87fa-4bc2-b1c6-7fd2a89476f3/0/8863D43C2CD36E9DE28C7E55F1891CC25C4F2985.crl rsync://rpki-rsync.idnic.net/repo/1ee94014-87fa-4bc2-b1c6-7fd2a89476f3/0/8863D43C2CD36E9DE28C7E55F1891CC25C4F2985.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8863D43C2CD36E9DE28C7E55F1891CC25C4F2985.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Jul 2026 04:37:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:e4:44:d6:c5:bb:a7:58:8e:57:11:80:14:5a:42:9d:b4:4c:f8:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8863D43C2CD36E9DE28C7E55F1891CC25C4F2985 Validity Not Before: Jul 13 02:32:12 2026 GMT Not After : Jul 14 04:37:12 2026 GMT Subject: CN=1A270FFF8B7FF9B96488E00C0AE064E12852EDD1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:60:79:4c:fa:fe:93:bc:ce:5e:46:54:23:5c: 63:0b:e0:97:87:38:a5:df:3b:ae:1b:2c:d7:93:3f: e5:f4:75:72:01:20:1d:7e:19:91:a6:15:87:f9:ed: 61:96:ef:73:ce:3d:65:94:f9:79:26:22:c3:e4:14: 15:3b:88:ba:bd:64:7f:0b:d3:a8:72:0e:37:e2:69: c1:9c:e7:e0:39:a3:c4:2c:99:60:f7:32:61:67:1c: 0a:92:5a:be:10:5b:e5:93:1f:6a:06:61:f8:8a:37: a1:ad:64:28:6a:8a:31:2d:1b:98:b5:81:d2:22:90: b3:6c:c2:ee:c3:72:72:a6:e8:8d:76:ec:1e:fc:56: 43:b1:ee:e1:ad:af:4f:9a:db:24:29:8b:3c:90:92: fb:5f:24:68:ab:ea:f4:dc:31:2c:cd:74:90:e1:3f: f3:4b:55:6b:d6:de:3b:1c:e5:f7:34:6d:fb:ed:a5: 23:9f:e4:9c:0f:c5:a5:7a:25:40:36:23:d5:69:df: 1b:17:d3:6a:69:07:71:48:bf:e1:ea:d7:6c:5f:76: 13:49:a5:88:5f:9f:9e:ba:cf:13:96:eb:3f:d9:6a: 62:d4:8a:07:08:9f:f3:40:cf:c5:23:ea:98:16:86: 02:26:a2:d6:32:31:3f:df:f7:56:e2:38:34:96:1e: 3d:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:27:0F:FF:8B:7F:F9:B9:64:88:E0:0C:0A:E0:64:E1:28:52:ED:D1 X509v3 Authority Key Identifier: keyid:88:63:D4:3C:2C:D3:6E:9D:E2:8C:7E:55:F1:89:1C:C2:5C:4F:29:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1ee94014-87fa-4bc2-b1c6-7fd2a89476f3/0/8863D43C2CD36E9DE28C7E55F1891CC25C4F2985.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8863D43C2CD36E9DE28C7E55F1891CC25C4F2985.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1ee94014-87fa-4bc2-b1c6-7fd2a89476f3/0/8863D43C2CD36E9DE28C7E55F1891CC25C4F2985.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:bb:5d:c6:2f:bd:c8:e6:09:5f:6e:82:5f:92:7a:95:98:e6: e9:2f:ff:6f:87:65:69:24:bb:3a:f0:7b:d7:17:1c:72:6f:76: 90:89:c4:1f:c9:25:65:04:23:b6:ec:e3:ad:ab:73:dc:34:49: c4:c9:53:0a:64:4d:35:57:dd:aa:ef:37:91:15:9e:8c:cb:e9: a8:3b:fa:4b:4b:44:ab:f5:b6:2b:d0:ff:a1:96:63:71:1d:13: 55:ec:2e:22:89:44:c1:7c:6e:ea:67:ab:17:5a:06:8e:32:e8: 10:7e:f6:25:ff:70:7e:c0:aa:cb:d8:3a:3c:ff:ec:e4:a2:d0: bb:61:07:6a:15:52:b4:60:8e:ea:f0:c5:63:17:b1:56:c8:3f: 21:14:9d:2c:8d:d8:9e:b0:56:45:41:05:47:08:6e:17:74:8e: cb:88:fc:ab:29:c5:c4:a1:b7:f6:44:0f:05:f4:59:cb:be:ef: c1:f7:18:da:d6:6d:53:a3:15:26:ef:ba:71:13:b5:53:48:d3: e5:f0:88:31:92:39:12:78:92:1b:a8:bd:81:05:3d:f6:a1:6e: 0d:30:5f:da:7c:00:1b:3b:9d:21:b7:4a:6d:37:bc:1b:85:21: 74:0e:5e:c3:ab:e3:d5:16:90:ec:a3:85:8a:af:74:7b:0f:8f: a6:e4:07:0a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFuRE1sW7p1iOVxGAFFpCnbRM+NIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODg2M0Q0M0MyQ0QzNkU5REUyOEM3RTU1RjE4OTFDQzI1 QzRGMjk4NTAeFw0yNjA3MTMwMjMyMTJaFw0yNjA3MTQwNDM3MTJaMDMxMTAvBgNV BAMTKDFBMjcwRkZGOEI3RkY5Qjk2NDg4RTAwQzBBRTA2NEUxMjg1MkVERDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuYHlM+v6TvM5eRlQjXGML4JeH OKXfO64bLNeTP+X0dXIBIB1+GZGmFYf57WGW73POPWWU+XkmIsPkFBU7iLq9ZH8L 06hyDjfiacGc5+A5o8QsmWD3MmFnHAqSWr4QW+WTH2oGYfiKN6GtZChqijEtG5i1 gdIikLNswu7DcnKm6I127B78VkOx7uGtr0+a2yQpizyQkvtfJGir6vTcMSzNdJDh P/NLVWvW3jsc5fc0bfvtpSOf5JwPxaV6JUA2I9Vp3xsX02ppB3FIv+Hq12xfdhNJ pYhfn566zxOW6z/ZamLUigcIn/NAz8Uj6pgWhgImotYyMT/f91biODSWHj0DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGicP/4t/+blkiOAMCuBk4ShS7dEwHwYDVR0j BBgwFoAUiGPUPCzTbp3ijH5V8YkcwlxPKYUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWVlOTQwMTQtODdmYS00YmMyLWIxYzYtN2ZkMmE4OTQ3NmYzLzAvODg2M0Q0M0My Q0QzNkU5REUyOEM3RTU1RjE4OTFDQzI1QzRGMjk4NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84ODYzRDQzQzJDRDM2RTlERTI4QzdFNTVGMTg5MUNDMjVDNEYy OTg1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWVlOTQwMTQtODdmYS00YmMyLWIx YzYtN2ZkMmE4OTQ3NmYzLzAvODg2M0Q0M0MyQ0QzNkU5REUyOEM3RTU1RjE4OTFD QzI1QzRGMjk4NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAq7XcYvvcjmCV9ugl+SepWY5ukv/2+HZWkk uzrwe9cXHHJvdpCJxB/JJWUEI7bs462rc9w0ScTJUwpkTTVX3arvN5EVnozL6ag7 +ktLRKv1tivQ/6GWY3EdE1XsLiKJRMF8bupnqxdaBo4y6BB+9iX/cH7AqsvYOjz/ 7OSi0LthB2oVUrRgjurwxWMXsVbIPyEUnSyN2J6wVkVBBUcIbhd0jsuI/KspxcSh t/ZEDwX0Wcu+78H3GNrWbVOjFSbvunETtVNI0+XwiDGSORJ4khuovYEFPfahbg0w X9p8ABs7nSG3Sm03vBuFIXQOXsOr49UWkOyjhYqvdHsPj6bkBwo= -----END CERTIFICATE-----Generated at Mon Jul 13 11:35:04 2026 by rpki-client