$ rpki-client -vvf rpki-rsync.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/8F1F52C63BB87484D4C5E9D8551AE767566D0060.mft File: 8F1F52C63BB87484D4C5E9D8551AE767566D0060.mft (raw, json) Hash identifier: g9d2PaglesSpE/Z5PzP9BH3AEvLJuE8JRsjyu+6uZb4= Subject key identifier: 33:AD:FF:28:37:0B:A2:C5:1D:04:5D:E3:85:C0:86:E2:A4:0E:C8:24 Authority key identifier: 8F:1F:52:C6:3B:B8:74:84:D4:C5:E9:D8:55:1A:E7:67:56:6D:00:60 Certificate issuer: /CN=8F1F52C63BB87484D4C5E9D8551AE767566D0060 Certificate serial: 518C5EF55AF3F555A79F4C1528DDB254A96BADA5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8F1F52C63BB87484D4C5E9D8551AE767566D0060.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/8F1F52C63BB87484D4C5E9D8551AE767566D0060.mft Manifest number: 7C Signing time: Sun 02 Aug 2026 08:22:47 +0000 Manifest this update: Sun 02 Aug 2026 08:17:47 +0000 Manifest next update: Mon 03 Aug 2026 10:56:47 +0000 Files and hashes: 1: 3130332e3137312e31382e302f32342d3234203d3e20313336303532.roa (hash: 5uR0k9um/4xZDeF/1OtaEeN9gAbE1nIuTIkh38U5XcA=) 2: 8F1F52C63BB87484D4C5E9D8551AE767566D0060.crl (hash: 8kl5AThoCOGSE9m2UVDEN3r261vS8L/+W/hMU2XshSQ=) 3: 3130332e3137312e31392e302f32342d3234203d3e20313338363038.roa (hash: +9zDigXxWl0KHwFSHRJ8vK8jloGtZKIEVRmfMrusxTQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/8F1F52C63BB87484D4C5E9D8551AE767566D0060.crl rsync://rpki-rsync.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/8F1F52C63BB87484D4C5E9D8551AE767566D0060.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8F1F52C63BB87484D4C5E9D8551AE767566D0060.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 08:45:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:8c:5e:f5:5a:f3:f5:55:a7:9f:4c:15:28:dd:b2:54:a9:6b:ad:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F1F52C63BB87484D4C5E9D8551AE767566D0060 Validity Not Before: Aug 2 08:17:47 2026 GMT Not After : Aug 3 10:56:47 2026 GMT Subject: CN=33ADFF28370BA2C51D045DE385C086E2A40EC824 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:48:47:46:0e:a2:62:92:00:d9:8b:fb:10:b0: 62:78:28:1a:b5:42:df:2d:4f:b3:af:8b:21:4a:e8: 70:78:2b:32:93:44:8c:c3:35:0d:54:60:30:d2:6c: d1:ba:f9:aa:02:89:e0:da:04:c7:57:11:af:82:41: a0:6c:d2:fb:1c:15:9f:d9:ef:6f:39:94:3f:b7:08: fa:e4:63:7c:57:50:a6:f1:2d:2f:7f:a2:04:6b:15: f6:be:bb:48:94:76:f2:c8:8f:d6:58:1b:d7:1e:92: 41:dc:c1:65:24:be:78:d0:04:92:99:a0:dc:4d:ff: f1:70:ce:9a:a6:d9:d4:54:1a:47:e5:eb:bb:6b:78: d8:3e:15:1d:bb:45:91:17:fa:12:79:27:3b:79:01: 34:27:86:9d:63:23:d8:46:bd:9e:9b:b1:fa:fc:7f: 47:fd:a5:88:e2:21:56:a3:60:d2:33:4c:a1:a4:7c: 63:ae:75:99:78:25:cf:a1:28:af:37:75:71:2b:e9: 21:4e:2b:80:aa:5b:c8:af:fc:f0:43:6a:81:e9:52: 49:8d:ea:a2:65:68:cc:1a:c7:65:5c:0a:e3:03:67: 62:e5:70:8f:e2:da:8b:07:0b:69:29:3d:7f:bb:dc: 7f:49:db:18:c4:0c:d1:68:27:56:43:87:eb:77:c9: 9e:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:AD:FF:28:37:0B:A2:C5:1D:04:5D:E3:85:C0:86:E2:A4:0E:C8:24 X509v3 Authority Key Identifier: keyid:8F:1F:52:C6:3B:B8:74:84:D4:C5:E9:D8:55:1A:E7:67:56:6D:00:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/8F1F52C63BB87484D4C5E9D8551AE767566D0060.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8F1F52C63BB87484D4C5E9D8551AE767566D0060.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/8F1F52C63BB87484D4C5E9D8551AE767566D0060.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:d4:7e:1e:8c:28:5c:17:60:e5:13:62:48:90:f4:61:2f:02: 68:87:53:df:e0:12:45:de:9d:5c:f4:d4:6f:da:35:1c:cb:77: 97:ec:7d:bb:35:2c:f5:b1:b4:6c:ae:0b:85:ac:98:41:2d:27: d1:d6:ab:55:76:e5:59:21:64:ab:fd:cb:6e:be:29:eb:d2:d3: 0b:af:c0:95:94:a5:a7:2d:ed:43:c9:95:b0:04:91:77:82:12: 2c:0a:17:da:6e:e7:aa:ed:ce:6d:d8:c2:33:e7:73:11:37:7b: ed:d1:7c:8f:8b:5e:06:63:7f:06:4c:68:04:b7:dd:13:0c:a4: 05:b4:23:f9:e4:eb:fc:25:f4:3f:e8:16:82:61:02:00:d7:a4: 2b:24:66:f2:35:7a:2f:86:2c:b7:97:50:37:c9:21:9c:95:21: d2:04:cf:a7:ea:01:b7:9f:bb:be:0c:3e:64:5d:bf:ae:ad:54: 81:f6:11:69:a6:d6:bb:57:8a:33:05:bd:27:6f:55:15:f0:ba: e4:ba:03:d0:b7:de:39:7e:c7:95:e3:1f:cb:99:db:7d:99:0f: 4a:74:0a:31:21:52:c7:df:a7:64:52:96:1b:6d:c9:6c:a8:c1: a3:68:02:ed:36:db:0f:88:33:c0:e6:9b:0b:85:a0:1a:cf:57: b5:12:31:95 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUYxe9Vrz9VWnn0wVKN2yVKlrraUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEYxRjUyQzYzQkI4NzQ4NEQ0QzVFOUQ4NTUxQUU3Njc1 NjZEMDA2MDAeFw0yNjA4MDIwODE3NDdaFw0yNjA4MDMxMDU2NDdaMDMxMTAvBgNV BAMTKDMzQURGRjI4MzcwQkEyQzUxRDA0NURFMzg1QzA4NkUyQTQwRUM4MjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqSEdGDqJikgDZi/sQsGJ4KBq1 Qt8tT7OviyFK6HB4KzKTRIzDNQ1UYDDSbNG6+aoCieDaBMdXEa+CQaBs0vscFZ/Z 7285lD+3CPrkY3xXUKbxLS9/ogRrFfa+u0iUdvLIj9ZYG9cekkHcwWUkvnjQBJKZ oNxN//Fwzpqm2dRUGkfl67treNg+FR27RZEX+hJ5Jzt5ATQnhp1jI9hGvZ6bsfr8 f0f9pYjiIVajYNIzTKGkfGOudZl4Jc+hKK83dXEr6SFOK4CqW8iv/PBDaoHpUkmN 6qJlaMwax2VcCuMDZ2LlcI/i2osHC2kpPX+73H9J2xjEDNFoJ1ZDh+t3yZ7LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUM63/KDcLosUdBF3jhcCG4qQOyCQwHwYDVR0j BBgwFoAUjx9Sxju4dITUxenYVRrnZ1ZtAGAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWE4ZjY5ZjctOTMzMi00Y2Q0LWIzZTUtY2M2YzQ3NzJjZjczLzAvOEYxRjUyQzYz QkI4NzQ4NEQ0QzVFOUQ4NTUxQUU3Njc1NjZEMDA2MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84RjFGNTJDNjNCQjg3NDg0RDRDNUU5RDg1NTFBRTc2NzU2NkQw MDYwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWE4ZjY5ZjctOTMzMi00Y2Q0LWIz ZTUtY2M2YzQ3NzJjZjczLzAvOEYxRjUyQzYzQkI4NzQ4NEQ0QzVFOUQ4NTUxQUU3 Njc1NjZEMDA2MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAvUfh6MKFwXYOUTYkiQ9GEvAmiHU9/gEkXe nVz01G/aNRzLd5fsfbs1LPWxtGyuC4WsmEEtJ9HWq1V25VkhZKv9y26+KevS0wuv wJWUpact7UPJlbAEkXeCEiwKF9pu56rtzm3YwjPncxE3e+3RfI+LXgZjfwZMaAS3 3RMMpAW0I/nk6/wl9D/oFoJhAgDXpCskZvI1ei+GLLeXUDfJIZyVIdIEz6fqAbef u74MPmRdv66tVIH2EWmm1rtXijMFvSdvVRXwuuS6A9C33jl+x5XjH8uZ232ZD0p0 CjEhUsffp2RSlhttyWyowaNoAu022w+IM8DmmwuFoBrPV7USMZU= -----END CERTIFICATE-----Generated at Sun Aug 2 22:46:20 2026 by rpki-client