$ rpki-client -vvf rpki-rsync.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/84122DA5B146979D5AAE13129EB677B96C49C7F6.mft File: 84122DA5B146979D5AAE13129EB677B96C49C7F6.mft (raw, json) Hash identifier: oTM97Hd3iV7R5n7+smJgBnUdfEtDqkTz2qHJcq49Ktc= Subject key identifier: DD:DF:E3:8F:42:63:7E:E6:72:56:D9:97:AA:03:0E:CA:B2:24:AA:0B Authority key identifier: 84:12:2D:A5:B1:46:97:9D:5A:AE:13:12:9E:B6:77:B9:6C:49:C7:F6 Certificate issuer: /CN=84122DA5B146979D5AAE13129EB677B96C49C7F6 Certificate serial: 7C814555B09C6854D9B1890910B5F90ED1D7B184 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/84122DA5B146979D5AAE13129EB677B96C49C7F6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/84122DA5B146979D5AAE13129EB677B96C49C7F6.mft Manifest number: 94 Signing time: Thu 20 Aug 2026 08:58:39 +0000 Manifest this update: Thu 20 Aug 2026 08:53:38 +0000 Manifest next update: Fri 21 Aug 2026 10:57:38 +0000 Files and hashes: 1: 3130332e3130322e31352e302f32342d3234203d3e20313337333331.roa (hash: LXKwnzjsakvh6k668BXuaYJ1O5iQ9reQNkhpZI7YDu8=) 2: 323430313a646234303a3a2f33322d3332203d3e20313336383635.roa (hash: jhYHGOtLAWmv9OcO3/5rDKvnFPZl5OTObgAsQoi8r50=) 3: 3130332e3130322e31342e302f32342d3234203d3e20313336383635.roa (hash: fHid8e/HPZhTBqkYcMs+Y715ZVlDl6RBBe2DwEnsBPc=) 4: 3130332e3130322e31322e302f32342d3234203d3e20313336383635.roa (hash: 2a7WLuRJ0dxekwgo8okkZl2guEN5PE3JgGMBxaSTXY4=) 5: 3130332e3130322e31332e302f32342d3234203d3e20313336383635.roa (hash: LWJq/XJLjGCHAx0PdP5FSd33v0EqmvbG5/RZUAKgCgs=) 6: 3130332e3130322e31322e302f32332d3233203d3e20313336383635.roa (hash: u+tKwHgjMKGgdgEnZPp2mwsftX+fJPIHxzdML3oWuA4=) 7: 84122DA5B146979D5AAE13129EB677B96C49C7F6.crl (hash: 6Jc+tdHJLG4GQi7qUGmpgmTEMkpXWFl0WzLcK6Jnj60=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/84122DA5B146979D5AAE13129EB677B96C49C7F6.crl rsync://rpki-rsync.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/84122DA5B146979D5AAE13129EB677B96C49C7F6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/84122DA5B146979D5AAE13129EB677B96C49C7F6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Aug 2026 06:28:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:81:45:55:b0:9c:68:54:d9:b1:89:09:10:b5:f9:0e:d1:d7:b1:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84122DA5B146979D5AAE13129EB677B96C49C7F6 Validity Not Before: Aug 20 08:53:38 2026 GMT Not After : Aug 21 10:57:38 2026 GMT Subject: CN=DDDFE38F42637EE67256D997AA030ECAB224AA0B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:4f:1c:88:dd:04:09:88:0c:97:c2:bb:24:d3: f7:e7:d4:f1:97:68:66:e0:43:07:ca:17:41:4d:f0: af:83:89:8f:cd:e6:4e:fd:e0:ef:9d:c5:07:4f:1a: 2d:a4:44:af:f9:d1:83:9c:b0:52:ed:06:e0:80:71: 50:8d:ea:4f:c2:ef:d2:89:e7:5f:a9:09:b1:f4:e8: 6e:8d:39:45:f5:c3:68:1e:52:3b:67:e5:97:e3:8f: f3:aa:13:88:3f:54:b8:0d:c9:cb:67:d1:66:ee:38: 53:9b:04:d4:30:f9:8f:14:cb:e7:42:b4:e4:b6:9c: 3c:d0:bf:0c:7b:6d:18:be:3b:49:e2:85:1e:ce:10: 40:4b:07:a4:dd:2a:a2:e1:1c:cb:40:65:a9:88:ec: 4c:47:f2:8e:ed:29:23:c2:75:0e:26:d1:23:21:31: 47:58:11:aa:a6:e0:a2:79:9a:73:8d:5f:b2:a4:34: 09:d4:cd:1c:ac:9f:d7:c2:48:ae:48:69:57:da:f2: e9:c5:fd:53:f5:6b:15:dd:59:6a:d9:d5:28:f5:2d: e1:07:31:7b:53:04:85:e2:91:48:4f:0a:f3:1f:0a: b6:f5:bb:59:b9:ff:33:a1:16:c3:f0:b4:5e:ec:43: fa:09:8a:b7:72:f1:7e:9e:f5:01:8c:c9:5d:0b:79: 78:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:DF:E3:8F:42:63:7E:E6:72:56:D9:97:AA:03:0E:CA:B2:24:AA:0B X509v3 Authority Key Identifier: keyid:84:12:2D:A5:B1:46:97:9D:5A:AE:13:12:9E:B6:77:B9:6C:49:C7:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/84122DA5B146979D5AAE13129EB677B96C49C7F6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/84122DA5B146979D5AAE13129EB677B96C49C7F6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/84122DA5B146979D5AAE13129EB677B96C49C7F6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:69:e1:dc:7d:03:f6:44:e3:9f:b1:11:68:2c:07:cf:4f:ba: 07:73:2c:ad:b6:7d:37:61:1e:c6:ae:05:f1:18:2f:36:6d:e2: b1:4b:e3:4f:8c:9d:ba:03:1b:92:2b:ef:33:e0:59:99:d0:37: da:46:7c:ff:11:71:b3:bf:d8:7a:c1:f8:77:be:fe:7b:32:d6: 67:cc:37:e9:6c:82:b7:06:3e:d6:79:04:5c:4d:40:9a:97:eb: 57:b0:35:c6:47:1f:b6:12:1b:53:21:ac:ac:61:67:71:39:3e: 25:38:ff:5b:d7:dd:de:1a:fb:b8:23:ae:26:20:8b:a7:f0:e7: 80:97:39:16:25:b6:5e:79:b3:7e:39:7a:4e:2a:b9:da:17:ac: e8:c7:83:2a:77:d5:18:61:1b:61:2f:bd:cf:bc:57:9b:54:10: 9b:f7:22:2e:e7:e2:3b:2c:8d:65:4e:37:d3:05:4b:aa:53:5a: 9f:43:9a:12:e1:15:f4:89:16:7e:05:7a:ff:aa:18:33:3e:6c: 4e:a1:ef:a4:3b:e3:85:86:8d:a5:f0:f0:35:28:e0:17:1a:e4: 69:b1:53:64:d4:8e:59:7c:cf:f8:aa:5d:53:47:2c:7e:15:b9: 18:00:2b:ac:d1:69:44:99:41:c8:41:ab:11:b4:7d:80:27:a3: 84:a8:67:d9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfIFFVbCcaFTZsYkJELX5DtHXsYQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQxMjJEQTVCMTQ2OTc5RDVBQUUxMzEyOUVCNjc3Qjk2 QzQ5QzdGNjAeFw0yNjA4MjAwODUzMzhaFw0yNjA4MjExMDU3MzhaMDMxMTAvBgNV BAMTKEREREZFMzhGNDI2MzdFRTY3MjU2RDk5N0FBMDMwRUNBQjIyNEFBMEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUTxyI3QQJiAyXwrsk0/fn1PGX aGbgQwfKF0FN8K+DiY/N5k794O+dxQdPGi2kRK/50YOcsFLtBuCAcVCN6k/C79KJ 51+pCbH06G6NOUX1w2geUjtn5Zfjj/OqE4g/VLgNyctn0WbuOFObBNQw+Y8Uy+dC tOS2nDzQvwx7bRi+O0nihR7OEEBLB6TdKqLhHMtAZamI7ExH8o7tKSPCdQ4m0SMh MUdYEaqm4KJ5mnONX7KkNAnUzRysn9fCSK5IaVfa8unF/VP1axXdWWrZ1Sj1LeEH MXtTBIXikUhPCvMfCrb1u1m5/zOhFsPwtF7sQ/oJirdy8X6e9QGMyV0LeXhPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3d/jj0JjfuZyVtmXqgMOyrIkqgswHwYDVR0j BBgwFoAUhBItpbFGl51arhMSnrZ3uWxJx/YwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWY4NmIxMmUtZTU3NC00MjZiLWFhNmItNDkzOWUzYjAzMGJhLzAvODQxMjJEQTVC MTQ2OTc5RDVBQUUxMzEyOUVCNjc3Qjk2QzQ5QzdGNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NDEyMkRBNUIxNDY5NzlENUFBRTEzMTI5RUI2NzdCOTZDNDlD N0Y2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWY4NmIxMmUtZTU3NC00MjZiLWFh NmItNDkzOWUzYjAzMGJhLzAvODQxMjJEQTVCMTQ2OTc5RDVBQUUxMzEyOUVCNjc3 Qjk2QzQ5QzdGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACxp4dx9A/ZE45+xEWgsB89PugdzLK22fTdh HsauBfEYLzZt4rFL40+MnboDG5Ir7zPgWZnQN9pGfP8RcbO/2HrB+He+/nsy1mfM N+lsgrcGPtZ5BFxNQJqX61ewNcZHH7YSG1MhrKxhZ3E5PiU4/1vX3d4a+7gjriYg i6fw54CXORYltl55s345ek4qudoXrOjHgyp31RhhG2Evvc+8V5tUEJv3Ii7n4jss jWVON9MFS6pTWp9DmhLhFfSJFn4Fev+qGDM+bE6h76Q744WGjaXw8DUo4Bca5Gmx U2TUjll8z/iqXVNHLH4VuRgAK6zRaUSZQchBqxG0fYAno4SoZ9k= -----END CERTIFICATE-----Generated at Thu Aug 20 13:34:19 2026 by rpki-client