$ rpki-client -vvf rpki-rsync.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/D8435659F33EE1F7005A21C1387F49D353431808.mft File: D8435659F33EE1F7005A21C1387F49D353431808.mft (raw, json) Hash identifier: lbjLDKVKqvZ7SOZQJSJ5IBv3920zGVznW8Ie9kYnbeU= Subject key identifier: 4F:DA:CC:A2:8E:E2:49:23:18:F4:D9:2E:D9:F5:52:65:3D:83:92:B9 Authority key identifier: D8:43:56:59:F3:3E:E1:F7:00:5A:21:C1:38:7F:49:D3:53:43:18:08 Certificate issuer: /CN=D8435659F33EE1F7005A21C1387F49D353431808 Certificate serial: 764CDDBB3027638E5A473788FACA99841EE60E31 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D8435659F33EE1F7005A21C1387F49D353431808.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/D8435659F33EE1F7005A21C1387F49D353431808.mft Manifest number: 73 Signing time: Mon 27 Jul 2026 02:30:51 +0000 Manifest this update: Mon 27 Jul 2026 02:25:51 +0000 Manifest next update: Tue 28 Jul 2026 05:13:51 +0000 Files and hashes: 1: 3130332e3234372e31342e302f32332d3234203d3e20313331373036.roa (hash: blqaAQUh+/Ci23PSpz6kWjhOXoOQ7V7lhdmAJgQyDKE=) 2: 323430323a653330303a3a2f33322d3438203d3e20313331373036.roa (hash: nwbiSYQUIY7u5484W08oCWpHX2RPW6F76Z3A6cL7rsY=) 3: 3130332e3234372e31322e302f32342d3234203d3e203535363935.roa (hash: ATVTOuHtUSrfebW1xU18JBrcd7qLtJdgSsLLVk33uGM=) 4: 3132312e3130312e3132382e302f32312d3234203d3e20313331373036.roa (hash: DR008bVSYXJm82RMo+BhRQvkIWKNDedVtmRpjzWrQic=) 5: D8435659F33EE1F7005A21C1387F49D353431808.crl (hash: zHVtCp9eXfCmHNdhsVTQEDEk2y8kzVzdLH15D0is4js=) 6: 3130332e3234372e31332e302f32342d3234203d3e20313331373036.roa (hash: z4cKVwkKHopCzCusKw3/HTDbOMxbEcb0WxL0/PEi5qo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/D8435659F33EE1F7005A21C1387F49D353431808.crl rsync://rpki-rsync.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/D8435659F33EE1F7005A21C1387F49D353431808.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D8435659F33EE1F7005A21C1387F49D353431808.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 04:18:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:4c:dd:bb:30:27:63:8e:5a:47:37:88:fa:ca:99:84:1e:e6:0e:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D8435659F33EE1F7005A21C1387F49D353431808 Validity Not Before: Jul 27 02:25:51 2026 GMT Not After : Jul 28 05:13:51 2026 GMT Subject: CN=4FDACCA28EE2492318F4D92ED9F552653D8392B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:3c:76:44:8d:0a:0f:f3:8b:ac:57:f5:8d:a0: d9:30:5f:30:72:92:d2:0b:c6:49:85:3c:c3:50:93: 7f:8d:46:2e:dd:56:54:ed:bc:9d:e9:9d:ca:b2:42: f0:b0:bd:34:48:05:68:1f:2a:32:b7:50:85:ea:57: 03:1a:3a:9a:a2:d4:a0:58:ac:f4:ea:56:8a:67:60: a1:5a:08:39:10:98:2b:32:65:eb:3c:eb:90:86:fb: 5d:2a:64:3f:e0:e1:a2:b7:cd:ac:d6:69:6b:b5:42: 50:73:0c:c7:73:9f:25:0f:cf:d5:77:20:40:c7:76: 35:6f:1e:e1:5f:eb:ca:66:4e:00:a3:4c:79:22:6c: a1:27:94:97:18:57:a1:64:12:2f:55:ac:95:ca:51: b3:fb:b6:44:79:ad:1e:4d:92:e7:75:4d:0a:a9:00: 70:8c:d2:75:50:05:53:69:61:02:e5:ba:07:1b:d0: ec:ae:58:b9:dc:ad:c0:76:85:69:76:f3:7b:0f:84: fe:e6:c6:26:24:2d:92:b0:67:4a:fe:79:88:97:0f: 56:c6:f3:0f:4f:d7:71:55:b8:51:b3:bc:4b:19:2f: 6d:b2:b9:5c:da:e5:98:98:0f:a0:b2:03:0a:8b:15: de:f6:24:0e:dc:ba:36:a6:9d:eb:0a:da:12:19:b4: ac:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:DA:CC:A2:8E:E2:49:23:18:F4:D9:2E:D9:F5:52:65:3D:83:92:B9 X509v3 Authority Key Identifier: keyid:D8:43:56:59:F3:3E:E1:F7:00:5A:21:C1:38:7F:49:D3:53:43:18:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/D8435659F33EE1F7005A21C1387F49D353431808.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D8435659F33EE1F7005A21C1387F49D353431808.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/D8435659F33EE1F7005A21C1387F49D353431808.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:81:b9:ec:46:2a:ad:e6:46:25:2d:da:0e:b3:98:3a:3d:e7: e8:c8:5c:e7:9f:09:78:64:a8:21:96:79:c7:80:c9:77:e2:5f: 09:69:cd:00:04:9c:61:f0:6a:69:97:66:52:2c:91:f2:85:e7: a6:ef:f3:f4:34:eb:4d:47:82:21:4d:c0:1d:38:b6:c1:77:64: d7:bf:43:be:94:1e:9a:24:d9:ca:c3:b1:27:4e:d0:78:0d:e9: e0:37:94:dd:94:65:a1:a6:bb:c3:2f:47:31:59:68:b1:22:ff: 2e:63:8b:8f:d0:86:1b:38:7e:f3:c7:e1:c8:92:dc:8c:c9:5c: 16:1c:42:3e:8d:95:d8:76:5e:a9:3a:aa:94:e0:b6:38:fd:6a: 64:68:02:38:8c:cf:db:46:8c:e3:ec:af:f6:68:d7:c6:56:3e: 16:76:a3:3c:a9:e2:0d:f1:c2:dd:dd:6c:1a:45:0b:16:22:c0: ec:49:0d:5f:4f:f6:cf:66:53:29:af:1a:6d:d4:0a:2e:0c:fa: 5a:a8:23:f7:c1:74:b9:91:c7:76:2e:d8:e3:0a:41:cb:aa:a3: f5:4f:32:b4:1b:ea:ad:55:7c:25:89:53:e2:38:d8:c1:1e:67: 9e:39:ca:25:9a:aa:b9:38:45:32:ba:9f:33:d8:2b:51:61:b8: b0:c5:e5:6a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdkzduzAnY45aRzeI+sqZhB7mDjEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDg0MzU2NTlGMzNFRTFGNzAwNUEyMUMxMzg3RjQ5RDM1 MzQzMTgwODAeFw0yNjA3MjcwMjI1NTFaFw0yNjA3MjgwNTEzNTFaMDMxMTAvBgNV BAMTKDRGREFDQ0EyOEVFMjQ5MjMxOEY0RDkyRUQ5RjU1MjY1M0Q4MzkyQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCLPHZEjQoP84usV/WNoNkwXzBy ktILxkmFPMNQk3+NRi7dVlTtvJ3pncqyQvCwvTRIBWgfKjK3UIXqVwMaOpqi1KBY rPTqVopnYKFaCDkQmCsyZes865CG+10qZD/g4aK3zazWaWu1QlBzDMdznyUPz9V3 IEDHdjVvHuFf68pmTgCjTHkibKEnlJcYV6FkEi9VrJXKUbP7tkR5rR5Nkud1TQqp AHCM0nVQBVNpYQLlugcb0OyuWLncrcB2hWl283sPhP7mxiYkLZKwZ0r+eYiXD1bG 8w9P13FVuFGzvEsZL22yuVza5ZiYD6CyAwqLFd72JA7cujamnesK2hIZtKwXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUT9rMoo7iSSMY9Nku2fVSZT2DkrkwHwYDVR0j BBgwFoAU2ENWWfM+4fcAWiHBOH9J01NDGAgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTI3YTZmMzQtMWI2ZS00ZTkyLWIyZDItMGI5MzAxYTY2NmE1LzAvRDg0MzU2NTlG MzNFRTFGNzAwNUEyMUMxMzg3RjQ5RDM1MzQzMTgwOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EODQzNTY1OUYzM0VFMUY3MDA1QTIxQzEzODdGNDlEMzUzNDMx ODA4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTI3YTZmMzQtMWI2ZS00ZTkyLWIy ZDItMGI5MzAxYTY2NmE1LzAvRDg0MzU2NTlGMzNFRTFGNzAwNUEyMUMxMzg3RjQ5 RDM1MzQzMTgwOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAACBuexGKq3mRiUt2g6zmDo95+jIXOefCXhk qCGWeceAyXfiXwlpzQAEnGHwammXZlIskfKF56bv8/Q0601HgiFNwB04tsF3ZNe/ Q76UHpok2crDsSdO0HgN6eA3lN2UZaGmu8MvRzFZaLEi/y5ji4/Qhhs4fvPH4ciS 3IzJXBYcQj6Nldh2Xqk6qpTgtjj9amRoAjiMz9tGjOPsr/Zo18ZWPhZ2ozyp4g3x wt3dbBpFCxYiwOxJDV9P9s9mUymvGm3UCi4M+lqoI/fBdLmRx3Yu2OMKQcuqo/VP MrQb6q1VfCWJU+I42MEeZ545yiWaqrk4RTK6nzPYK1FhuLDF5Wo= -----END CERTIFICATE-----Generated at Mon Jul 27 14:30:56 2026 by rpki-client