$ rpki-client -vvf rpki-rsync.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/873409842DEE948D3DE05C618194C87A259E04BF.mft File: 873409842DEE948D3DE05C618194C87A259E04BF.mft (raw, json) Hash identifier: PaBn9gxhwJqWABzLJGjO3Cc9BvRqtvJa8yyoeas6Xtc= Subject key identifier: C4:60:85:98:A4:87:A0:D7:A1:40:B5:F6:0C:FB:CF:E0:E9:DE:5A:DE Authority key identifier: 87:34:09:84:2D:EE:94:8D:3D:E0:5C:61:81:94:C8:7A:25:9E:04:BF Certificate issuer: /CN=873409842DEE948D3DE05C618194C87A259E04BF Certificate serial: 1CA94190E6B7753FD1191AFB405129C267B69DA7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/873409842DEE948D3DE05C618194C87A259E04BF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/873409842DEE948D3DE05C618194C87A259E04BF.mft Manifest number: 61 Signing time: Mon 13 Jul 2026 09:45:40 +0000 Manifest this update: Mon 13 Jul 2026 09:40:40 +0000 Manifest next update: Tue 14 Jul 2026 11:28:40 +0000 Files and hashes: 1: 323430363a346563303a3a2f33322d3332203d3e20313430343735.roa (hash: grkHY3zf57XsShC3GloC/Ysy8CRxkBA2HYvszXntAaM=) 2: 3130332e3135332e3234372e302f32342d3234203d3e20313430343735.roa (hash: OzhJdHffqoSTJ5pFjxmQ04VEvXqHaJWqkM8YRHVnaeQ=) 3: 873409842DEE948D3DE05C618194C87A259E04BF.crl (hash: 4Z4xeblLl9uOxDdxJOZvkVhu7jzbOmcmOqTe07Pb43s=) 4: 3130332e3135332e3234362e302f32342d3234203d3e20313430343735.roa (hash: M8QTZuDsRpJ1yY06WkCYeFwFPm5+TLSWxZVTx0+FX3U=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/873409842DEE948D3DE05C618194C87A259E04BF.crl rsync://rpki-rsync.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/873409842DEE948D3DE05C618194C87A259E04BF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/873409842DEE948D3DE05C618194C87A259E04BF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Jul 2026 05:49:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:a9:41:90:e6:b7:75:3f:d1:19:1a:fb:40:51:29:c2:67:b6:9d:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=873409842DEE948D3DE05C618194C87A259E04BF Validity Not Before: Jul 13 09:40:40 2026 GMT Not After : Jul 14 11:28:40 2026 GMT Subject: CN=C4608598A487A0D7A140B5F60CFBCFE0E9DE5ADE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:09:0d:8c:ea:53:c5:16:3a:2e:88:27:6f:09: 28:7b:04:61:ea:81:e8:b7:b1:fb:45:04:13:35:6c: 1f:15:6f:01:e4:b4:00:68:20:30:25:ef:e1:23:d6: 71:36:13:f4:b0:a6:ee:b4:40:dd:93:ad:b7:53:80: e2:e8:18:b4:08:e7:04:f6:ee:79:eb:c9:26:e9:1a: 0e:b9:69:f1:7c:6d:47:f0:7a:d7:89:32:87:4e:b0: 95:1e:7a:f6:bb:d6:97:c1:52:3f:df:9b:4e:ec:0f: e1:f3:dd:c7:c3:1a:51:fe:a0:40:86:93:b3:5f:55: b7:46:6a:97:a2:a7:d1:e4:19:ca:c4:7f:ea:01:f6: f4:63:79:1c:4d:4e:2c:3a:c5:19:21:17:2a:63:e1: 46:af:54:cc:9e:e5:a0:d6:b5:cf:5e:d1:ce:84:f6: e4:d5:ee:c3:63:ee:6a:f8:13:06:74:df:cc:ad:23: 2d:db:4e:20:0a:a3:d7:97:f7:e6:6f:d1:db:dd:cc: 2f:dd:2b:d6:77:da:2a:da:52:84:11:47:5f:29:1c: 30:7a:bc:38:29:80:cd:ca:2a:38:57:a0:84:c6:25: 4a:1d:b0:d5:ea:ee:8c:78:18:d6:53:c6:13:2e:3a: 3b:a4:92:7a:ce:37:f2:9e:2d:4f:b1:41:9d:a3:80: 9f:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:60:85:98:A4:87:A0:D7:A1:40:B5:F6:0C:FB:CF:E0:E9:DE:5A:DE X509v3 Authority Key Identifier: keyid:87:34:09:84:2D:EE:94:8D:3D:E0:5C:61:81:94:C8:7A:25:9E:04:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/873409842DEE948D3DE05C618194C87A259E04BF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/873409842DEE948D3DE05C618194C87A259E04BF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/873409842DEE948D3DE05C618194C87A259E04BF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:0b:51:f9:ce:c1:59:3f:47:a0:ad:cb:67:4a:fd:f4:44:d8: 74:85:cb:a7:ec:e3:fe:cf:23:e7:d1:5c:13:af:a0:d9:f0:a6: f2:a0:21:21:d8:06:60:f0:b3:1a:5e:a3:8d:d8:4d:89:c6:58: f4:15:9a:89:c6:2d:16:f6:d5:64:86:91:06:c6:38:7e:49:81: 54:0d:45:2a:b6:7b:dc:61:68:22:67:b9:c2:e9:e9:a5:d8:56: c1:af:34:1f:dc:6c:1e:67:d1:c6:fb:81:84:3a:28:b1:1f:d4: 16:c9:37:0b:d8:cf:b2:bc:a7:39:78:19:3b:c8:28:f9:a3:4a: c9:e2:a4:f0:be:75:19:91:6d:0d:c8:27:b3:a5:8c:66:2c:df: bd:23:d9:4c:ef:dc:0e:3e:fd:f3:f9:72:a7:e7:eb:53:c2:6d: d1:96:86:64:5c:98:f2:1a:2d:d2:cb:a8:e9:02:6c:2a:1c:5b: be:a5:e4:a5:86:23:0a:6a:e6:9f:d7:d8:63:c3:56:81:2a:60: 6f:74:9e:30:fc:d6:93:59:c7:aa:7a:c3:58:68:98:bd:ad:0b: 27:65:69:aa:2f:42:5f:c8:a7:e9:ee:6f:c8:8f:6d:bb:c2:d9: 14:5f:ce:30:29:82:9d:46:60:52:7c:e7:aa:ff:33:dc:b1:54: eb:f4:ff:11 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHKlBkOa3dT/RGRr7QFEpwme2nacwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODczNDA5ODQyREVFOTQ4RDNERTA1QzYxODE5NEM4N0Ey NTlFMDRCRjAeFw0yNjA3MTMwOTQwNDBaFw0yNjA3MTQxMTI4NDBaMDMxMTAvBgNV BAMTKEM0NjA4NTk4QTQ4N0EwRDdBMTQwQjVGNjBDRkJDRkUwRTlERTVBREUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmCQ2M6lPFFjouiCdvCSh7BGHq gei3sftFBBM1bB8VbwHktABoIDAl7+Ej1nE2E/Swpu60QN2TrbdTgOLoGLQI5wT2 7nnrySbpGg65afF8bUfweteJModOsJUeeva71pfBUj/fm07sD+Hz3cfDGlH+oECG k7NfVbdGapeip9HkGcrEf+oB9vRjeRxNTiw6xRkhFypj4UavVMye5aDWtc9e0c6E 9uTV7sNj7mr4EwZ038ytIy3bTiAKo9eX9+Zv0dvdzC/dK9Z32iraUoQRR18pHDB6 vDgpgM3KKjhXoITGJUodsNXq7ox4GNZTxhMuOjukknrON/KeLU+xQZ2jgJ+hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxGCFmKSHoNehQLX2DPvP4OneWt4wHwYDVR0j BBgwFoAUhzQJhC3ulI094FxhgZTIeiWeBL8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGRjZjQwNjctYTY5ZC00OTA4LWJlZTgtYjQ2NTViZGMxNWY4LzAvODczNDA5ODQy REVFOTQ4RDNERTA1QzYxODE5NEM4N0EyNTlFMDRCRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NzM0MDk4NDJERUU5NDhEM0RFMDVDNjE4MTk0Qzg3QTI1OUUw NEJGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGRjZjQwNjctYTY5ZC00OTA4LWJl ZTgtYjQ2NTViZGMxNWY4LzAvODczNDA5ODQyREVFOTQ4RDNERTA1QzYxODE5NEM4 N0EyNTlFMDRCRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK8LUfnOwVk/R6Cty2dK/fRE2HSFy6fs4/7P I+fRXBOvoNnwpvKgISHYBmDwsxpeo43YTYnGWPQVmonGLRb21WSGkQbGOH5JgVQN RSq2e9xhaCJnucLp6aXYVsGvNB/cbB5n0cb7gYQ6KLEf1BbJNwvYz7K8pzl4GTvI KPmjSsnipPC+dRmRbQ3IJ7OljGYs370j2Uzv3A4+/fP5cqfn61PCbdGWhmRcmPIa LdLLqOkCbCocW76l5KWGIwpq5p/X2GPDVoEqYG90njD81pNZx6p6w1homL2tCydl aaovQl/Ip+nub8iPbbvC2RRfzjApgp1GYFJ856r/M9yxVOv0/xE= -----END CERTIFICATE-----Generated at Mon Jul 13 13:55:12 2026 by rpki-client