$ rpki-client -vvf rpki-rsync.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/0/D8BF7590C40DE7316F52A1DEE7CE7BEDA43082C3.mft File: D8BF7590C40DE7316F52A1DEE7CE7BEDA43082C3.mft (raw, json) Hash identifier: sltUtXMUzfI5gJXVLMnk6VRUN51WlIhM+xEqi8rpWz8= Subject key identifier: 7A:53:B6:1C:4A:D9:87:EC:E5:10:83:20:9F:03:40:CE:27:0B:1E:E3 Authority key identifier: D8:BF:75:90:C4:0D:E7:31:6F:52:A1:DE:E7:CE:7B:ED:A4:30:82:C3 Certificate issuer: /CN=D8BF7590C40DE7316F52A1DEE7CE7BEDA43082C3 Certificate serial: 1E9E74974C8AE6E6F11668602DA4C51DD57888AA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D8BF7590C40DE7316F52A1DEE7CE7BEDA43082C3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/0/D8BF7590C40DE7316F52A1DEE7CE7BEDA43082C3.mft Manifest number: 7C Signing time: Sun 02 Aug 2026 15:56:39 +0000 Manifest this update: Sun 02 Aug 2026 15:51:39 +0000 Manifest next update: Mon 03 Aug 2026 18:18:39 +0000 Files and hashes: 1: 3136302e3139312e32362e302f32332d3234203d3e20313533313239.roa (hash: JFK4m68zG0lJAd7+KDHHharwdbO7qzWlnuoWt7ljQFI=) 2: 3136302e3139312e32362e302f32342d3234203d3e20313533313239.roa (hash: eXGHZrGd4sU2DLSEdy3de330+Fw4LKj8QHf1Kk8jl8M=) 3: 3136302e3139312e32372e302f32342d3234203d3e20313533313239.roa (hash: JFxGecPe7UA2eaCg+ZKJcplW/KcDw+sS4WqX6uOvlVg=) 4: D8BF7590C40DE7316F52A1DEE7CE7BEDA43082C3.crl (hash: 3aQEJf2AOBVm+l8dKloUiYr/kQJ2xk+q5wV2qjOeQ8A=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/0/D8BF7590C40DE7316F52A1DEE7CE7BEDA43082C3.crl rsync://rpki-rsync.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/0/D8BF7590C40DE7316F52A1DEE7CE7BEDA43082C3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D8BF7590C40DE7316F52A1DEE7CE7BEDA43082C3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 17:07:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:9e:74:97:4c:8a:e6:e6:f1:16:68:60:2d:a4:c5:1d:d5:78:88:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D8BF7590C40DE7316F52A1DEE7CE7BEDA43082C3 Validity Not Before: Aug 2 15:51:39 2026 GMT Not After : Aug 3 18:18:39 2026 GMT Subject: CN=7A53B61C4AD987ECE51083209F0340CE270B1EE3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:a1:cb:26:65:ed:35:8d:8e:9c:b4:fc:dd:31: 2a:28:a3:5b:82:76:8b:6a:2b:1d:87:54:71:1c:2c: 00:1c:86:f1:8e:d1:21:71:c1:bf:e2:8c:8d:fe:60: e7:79:c4:07:dc:a8:88:9e:25:da:65:43:ff:e3:80: a4:2d:70:43:de:5a:1f:2d:e1:23:a9:8b:60:5e:e9: e0:14:12:49:de:c4:90:02:41:7b:aa:07:7f:5f:b0: 0c:a7:5f:ce:89:00:0f:f0:3f:b3:15:2c:62:b9:fa: fe:ad:22:92:bd:93:79:da:64:98:1a:b1:69:ed:e0: ed:86:a4:66:dc:bc:59:a6:3f:e9:81:e1:a8:8c:99: 63:a1:01:9f:18:58:1f:20:99:74:4b:4f:09:30:38: 97:cb:00:b0:3f:42:03:6f:08:1b:22:71:e3:8a:88: 12:c8:87:92:d1:3a:4a:d0:06:da:6e:f6:3e:75:a9: 74:6f:5b:12:18:47:40:07:ea:9d:16:3e:7d:f2:8b: 03:07:1c:ca:95:7d:12:02:c1:1e:7e:f3:23:c5:c3: 10:60:dc:46:b9:8b:49:d3:0e:6b:4b:ed:4a:e1:05: ab:9c:68:08:b5:8e:74:01:a0:3e:ba:8b:cf:d3:d1: 9d:ea:f8:d3:3c:c2:e9:40:09:de:fe:93:b3:5e:2d: c1:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:53:B6:1C:4A:D9:87:EC:E5:10:83:20:9F:03:40:CE:27:0B:1E:E3 X509v3 Authority Key Identifier: keyid:D8:BF:75:90:C4:0D:E7:31:6F:52:A1:DE:E7:CE:7B:ED:A4:30:82:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/0/D8BF7590C40DE7316F52A1DEE7CE7BEDA43082C3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D8BF7590C40DE7316F52A1DEE7CE7BEDA43082C3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/0/D8BF7590C40DE7316F52A1DEE7CE7BEDA43082C3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:aa:d0:12:e3:08:49:87:ca:31:8f:3f:5a:9c:7c:ed:75:87: d8:bb:1d:12:ed:1c:9e:06:1f:83:a7:65:a0:e1:75:b8:45:69: 6a:40:c8:82:99:08:2d:b7:8a:36:1c:b5:39:8a:b4:70:54:10: 26:2d:bf:32:25:ef:18:72:89:1d:11:01:8d:c6:a3:19:6e:80: 87:5d:53:55:89:ce:62:9d:2c:cb:54:5a:c7:3a:5f:42:72:b0: 45:86:a3:6d:a1:29:18:27:96:f6:84:5f:83:50:30:45:49:97: cd:f1:0a:ce:70:a9:29:31:46:1f:5b:ec:d9:b3:68:4a:6c:b0: f8:4f:5d:8d:d4:f3:d8:cb:92:e3:21:13:86:15:fa:08:db:7c: f1:bd:fe:8b:39:f2:7c:55:bf:3e:8b:af:93:20:5d:da:c3:77: f6:db:29:11:85:4e:6e:ca:e7:97:91:67:eb:4c:7f:45:ea:7d: 48:ac:70:25:15:4d:5c:75:47:bc:de:5e:a9:61:47:ab:7a:43: 72:ed:82:29:4c:40:9e:13:93:2f:6a:15:db:44:04:84:8c:73: b0:e9:11:2b:ed:c7:71:12:68:f2:bd:64:ea:c6:f8:ae:02:b0: 61:0c:69:14:c8:93:3b:e5:86:ab:94:d2:d9:8e:05:a1:d5:f9: bf:80:f6:6e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHp50l0yK5ubxFmhgLaTFHdV4iKowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDhCRjc1OTBDNDBERTczMTZGNTJBMURFRTdDRTdCRURB NDMwODJDMzAeFw0yNjA4MDIxNTUxMzlaFw0yNjA4MDMxODE4MzlaMDMxMTAvBgNV BAMTKDdBNTNCNjFDNEFEOTg3RUNFNTEwODMyMDlGMDM0MENFMjcwQjFFRTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgocsmZe01jY6ctPzdMSooo1uC dotqKx2HVHEcLAAchvGO0SFxwb/ijI3+YOd5xAfcqIieJdplQ//jgKQtcEPeWh8t 4SOpi2Be6eAUEknexJACQXuqB39fsAynX86JAA/wP7MVLGK5+v6tIpK9k3naZJga sWnt4O2GpGbcvFmmP+mB4aiMmWOhAZ8YWB8gmXRLTwkwOJfLALA/QgNvCBsiceOK iBLIh5LROkrQBtpu9j51qXRvWxIYR0AH6p0WPn3yiwMHHMqVfRICwR5+8yPFwxBg 3Ea5i0nTDmtL7UrhBaucaAi1jnQBoD66i8/T0Z3q+NM8wulACd7+k7NeLcGLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUelO2HErZh+zlEIMgnwNAzicLHuMwHwYDVR0j BBgwFoAU2L91kMQN5zFvUqHe58577aQwgsMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjAzOTYzODgtMmQ2Yi00NzZlLTk2M2QtMWNjMzgxMzc0YjFjLzAvRDhCRjc1OTBD NDBERTczMTZGNTJBMURFRTdDRTdCRURBNDMwODJDMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9EOEJGNzU5MEM0MERFNzMxNkY1MkExREVFN0NFN0JFREE0MzA4 MkMzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjAzOTYzODgtMmQ2Yi00NzZlLTk2 M2QtMWNjMzgxMzc0YjFjLzAvRDhCRjc1OTBDNDBERTczMTZGNTJBMURFRTdDRTdC RURBNDMwODJDMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB6q0BLjCEmHyjGPP1qcfO11h9i7HRLtHJ4G H4OnZaDhdbhFaWpAyIKZCC23ijYctTmKtHBUECYtvzIl7xhyiR0RAY3GoxlugIdd U1WJzmKdLMtUWsc6X0JysEWGo22hKRgnlvaEX4NQMEVJl83xCs5wqSkxRh9b7Nmz aEpssPhPXY3U89jLkuMhE4YV+gjbfPG9/os58nxVvz6Lr5MgXdrDd/bbKRGFTm7K 55eRZ+tMf0XqfUiscCUVTVx1R7zeXqlhR6t6Q3LtgilMQJ4Tky9qFdtEBISMc7Dp ESvtx3ESaPK9ZOrG+K4CsGEMaRTIkzvlhquU0tmOBaHV+b+A9m4= -----END CERTIFICATE-----Generated at Sun Aug 2 20:35:40 2026 by rpki-client