$ rpki-client -vvf rpki-rsync.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/A08BAF2D88514EC041A87F092E6B6A521F3349F3.mft File: A08BAF2D88514EC041A87F092E6B6A521F3349F3.mft (raw, json) Hash identifier: aZsNTpqwi21Wy3TnDV0Xo02uigBq+yp7gidtxfpwyiQ= Subject key identifier: 6B:88:57:5F:38:9F:A5:3C:DC:3E:92:09:CB:53:23:DA:DA:09:90:15 Authority key identifier: A0:8B:AF:2D:88:51:4E:C0:41:A8:7F:09:2E:6B:6A:52:1F:33:49:F3 Certificate issuer: /CN=A08BAF2D88514EC041A87F092E6B6A521F3349F3 Certificate serial: 6E1CCFB90EA6C27DC391AE7D3E1CB1D595856D6B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A08BAF2D88514EC041A87F092E6B6A521F3349F3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/A08BAF2D88514EC041A87F092E6B6A521F3349F3.mft Manifest number: 7B Signing time: Sun 02 Aug 2026 05:23:57 +0000 Manifest this update: Sun 02 Aug 2026 05:18:57 +0000 Manifest next update: Mon 03 Aug 2026 06:03:57 +0000 Files and hashes: 1: 323030313a6466303a3237333a3a2f34382d3438203d3e203538343737.roa (hash: +zXAXB63RMz7uGSWbbDCPnLGVqN8tZG7EPNtc0tQGQw=) 2: A08BAF2D88514EC041A87F092E6B6A521F3349F3.crl (hash: ztkFtwyfgOheJlzeufAjXEXuWlDxhSb+yfWbZbiJphM=) 3: 34352e36342e39362e302f32342d3234203d3e203538343737.roa (hash: 5ev3rc/Wu45AIU9QKYFuF4qHEkUSlKkTnsZ3JdywnVM=) 4: 3130332e32382e3134392e302f32342d3234203d3e203538343737.roa (hash: qDJ/c5qWojiJYfc9eIqgLudqj78rlDzX+1L2SPWNYTQ=) 5: 3130332e33312e3235312e302f32342d3234203d3e203538343737.roa (hash: nNs3zCmZDfGYSq9FVm5Dz3ukk7qRss0F7cyqFrIdiUs=) 6: 34352e36342e39392e302f32342d3234203d3e203538343737.roa (hash: dyN12mfoRjXFlNHqIFEChK7+mIsDEFYombQgQudcekM=) 7: 3130332e32382e3134382e302f32342d3234203d3e203538343737.roa (hash: xw+egA02OX5uOYAGnedHg8tG8xIxYeukOfUcUDfNNIQ=) 8: 3130332e33312e3235302e302f32342d3234203d3e203538343737.roa (hash: 2ZuwNGg62iU8raGM9TYM3A0jrh0UG5HDKyy6dwXOLS0=) 9: 34352e36342e39382e302f32342d3234203d3e203538343737.roa (hash: /BLy7k3doovw3jQVTXaYTnBas7DL4Zfrgn7U9J4fWVA=) 10: 34352e36342e39372e302f32342d3234203d3e20313335333630.roa (hash: eVL30F9FmWg9xfcbeGTmvP0LqqOdBiZkfgWJnF3c51k=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/A08BAF2D88514EC041A87F092E6B6A521F3349F3.crl rsync://rpki-rsync.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/A08BAF2D88514EC041A87F092E6B6A521F3349F3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A08BAF2D88514EC041A87F092E6B6A521F3349F3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 06:03:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:1c:cf:b9:0e:a6:c2:7d:c3:91:ae:7d:3e:1c:b1:d5:95:85:6d:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A08BAF2D88514EC041A87F092E6B6A521F3349F3 Validity Not Before: Aug 2 05:18:57 2026 GMT Not After : Aug 3 06:03:57 2026 GMT Subject: CN=6B88575F389FA53CDC3E9209CB5323DADA099015 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:7e:95:d0:09:0f:77:26:40:de:af:f6:c3:fc: a0:86:06:a1:43:f6:93:ac:06:96:4e:91:91:f2:6e: dd:63:8f:14:d0:49:39:7b:ca:f7:0a:a1:f9:7c:fe: 61:fc:51:c5:fc:29:cc:7b:00:ab:b6:9f:53:d7:07: f4:fe:e0:8b:1f:81:ac:15:fe:3c:fd:29:10:fa:65: ae:b5:c0:6c:3e:ae:96:e6:2f:25:6c:f4:e2:8f:87: 34:2a:a9:48:ad:9d:6f:7c:09:93:dd:08:f0:82:76: e4:eb:a5:29:db:46:2b:08:1a:38:06:ee:5c:72:ee: 26:c9:85:4c:72:93:74:1c:07:21:03:d2:e5:52:c5: 40:49:62:f6:ff:20:77:41:9c:e1:00:76:9f:19:a9: 2d:ec:73:83:ab:5c:13:93:cb:00:c2:17:1a:ab:ba: 66:ab:c2:65:14:7f:67:9d:7b:e8:54:fb:ee:d8:39: 24:8f:b5:e9:ec:d4:c5:8f:28:a9:42:5b:63:59:ec: 78:b3:ea:e7:40:31:d7:78:5a:b1:ce:3b:1e:d5:f2: d6:23:63:7f:09:02:b4:d3:f5:64:cd:f0:32:b2:61: 8c:7e:ba:5c:00:70:a6:91:25:c9:6c:a0:50:9c:cc: 00:59:64:ac:1d:18:4c:f3:82:bf:fa:e2:0e:c4:70: b8:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:88:57:5F:38:9F:A5:3C:DC:3E:92:09:CB:53:23:DA:DA:09:90:15 X509v3 Authority Key Identifier: keyid:A0:8B:AF:2D:88:51:4E:C0:41:A8:7F:09:2E:6B:6A:52:1F:33:49:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/A08BAF2D88514EC041A87F092E6B6A521F3349F3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A08BAF2D88514EC041A87F092E6B6A521F3349F3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/A08BAF2D88514EC041A87F092E6B6A521F3349F3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:da:06:e2:55:22:89:a9:78:af:d7:fa:9b:a1:ce:ac:e3:ef: a9:31:af:95:14:06:2e:9a:13:1b:66:4d:8c:7e:1e:29:d4:21: bd:84:ce:93:e2:4c:d1:55:7b:83:64:bb:26:29:d9:0d:51:04: 4f:65:0d:04:e3:3e:c9:1a:fc:9d:2f:c7:f5:00:4b:48:c6:52: c6:c8:f4:24:98:75:3f:95:64:96:67:ec:2e:38:53:cc:c5:f7: 5e:af:03:fb:74:4e:dc:07:e0:dd:f7:a9:99:7c:e6:24:76:27: 9a:7f:92:25:98:48:43:d6:30:99:68:5c:c3:71:0b:01:67:54: 78:f8:00:be:e4:65:6b:ea:ac:27:30:a8:c4:d2:b9:f4:1e:93: a0:3d:47:8f:e8:ca:0c:74:7d:9f:95:07:fc:91:fa:16:06:39: 00:bb:ec:de:92:49:81:d6:b0:44:2a:6e:fc:05:77:ab:18:46: c3:84:bb:2b:b6:98:60:02:2f:83:a7:3c:03:c4:e3:1f:94:47: f6:5d:bc:83:fa:ca:dc:b7:03:6c:ce:54:06:b2:02:4b:31:05: e8:73:bf:42:63:88:71:b8:e5:ae:2e:62:18:5d:83:81:b5:18: b1:89:87:f9:0c:bd:3c:94:c6:7c:2e:5c:36:59:88:4e:84:5f: 2a:ff:d5:ca -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbhzPuQ6mwn3Dka59Phyx1ZWFbWswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTA4QkFGMkQ4ODUxNEVDMDQxQTg3RjA5MkU2QjZBNTIx RjMzNDlGMzAeFw0yNjA4MDIwNTE4NTdaFw0yNjA4MDMwNjAzNTdaMDMxMTAvBgNV BAMTKDZCODg1NzVGMzg5RkE1M0NEQzNFOTIwOUNCNTMyM0RBREEwOTkwMTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4fpXQCQ93JkDer/bD/KCGBqFD 9pOsBpZOkZHybt1jjxTQSTl7yvcKofl8/mH8UcX8Kcx7AKu2n1PXB/T+4IsfgawV /jz9KRD6Za61wGw+rpbmLyVs9OKPhzQqqUitnW98CZPdCPCCduTrpSnbRisIGjgG 7lxy7ibJhUxyk3QcByED0uVSxUBJYvb/IHdBnOEAdp8ZqS3sc4OrXBOTywDCFxqr umarwmUUf2ede+hU++7YOSSPtens1MWPKKlCW2NZ7Hiz6udAMdd4WrHOOx7V8tYj Y38JArTT9WTN8DKyYYx+ulwAcKaRJclsoFCczABZZKwdGEzzgr/64g7EcLjJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUa4hXXzifpTzcPpIJy1Mj2toJkBUwHwYDVR0j BBgwFoAUoIuvLYhRTsBBqH8JLmtqUh8zSfMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGJjNmFhMDMtMWI0ZC00MzhlLWE5ZjMtZWZlYWFlNmIwOTIxLzAvQTA4QkFGMkQ4 ODUxNEVDMDQxQTg3RjA5MkU2QjZBNTIxRjMzNDlGMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BMDhCQUYyRDg4NTE0RUMwNDFBODdGMDkyRTZCNkE1MjFGMzM0 OUYzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGJjNmFhMDMtMWI0ZC00MzhlLWE5 ZjMtZWZlYWFlNmIwOTIxLzAvQTA4QkFGMkQ4ODUxNEVDMDQxQTg3RjA5MkU2QjZB NTIxRjMzNDlGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKHaBuJVIompeK/X+puhzqzj76kxr5UUBi6a ExtmTYx+HinUIb2EzpPiTNFVe4NkuyYp2Q1RBE9lDQTjPska/J0vx/UAS0jGUsbI 9CSYdT+VZJZn7C44U8zF916vA/t0TtwH4N33qZl85iR2J5p/kiWYSEPWMJloXMNx CwFnVHj4AL7kZWvqrCcwqMTSufQek6A9R4/oygx0fZ+VB/yR+hYGOQC77N6SSYHW sEQqbvwFd6sYRsOEuyu2mGACL4OnPAPE4x+UR/ZdvIP6yty3A2zOVAayAksxBehz v0JjiHG45a4uYhhdg4G1GLGJh/kMvTyUxnwuXDZZiE6EXyr/1co= -----END CERTIFICATE-----Generated at Sun Aug 2 15:49:45 2026 by rpki-client