$ rpki-client -vvf rpki-rsync.idnic.net/repo/a5481606-d5fd-4196-abcd-58e6c76243c5/0/8577702D614C8CB829CA2CC51C2B3374AC66A40E.mft File: 8577702D614C8CB829CA2CC51C2B3374AC66A40E.mft (raw, json) Hash identifier: KGrqX2HsHovlN61Kosr1HYFbwNsLPn2mWGo1fYfhmQw= Subject key identifier: F8:67:AD:B7:23:BE:D8:69:42:08:48:2A:A1:B4:BC:D8:1E:BB:A8:3B Authority key identifier: 85:77:70:2D:61:4C:8C:B8:29:CA:2C:C5:1C:2B:33:74:AC:66:A4:0E Certificate issuer: /CN=8577702D614C8CB829CA2CC51C2B3374AC66A40E Certificate serial: 4B4E8B46CC40B69081D2B1B02DC49E9FA51833E7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/8577702D614C8CB829CA2CC51C2B3374AC66A40E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a5481606-d5fd-4196-abcd-58e6c76243c5/0/8577702D614C8CB829CA2CC51C2B3374AC66A40E.mft Manifest number: 7A Signing time: Sun 02 Aug 2026 07:31:53 +0000 Manifest this update: Sun 02 Aug 2026 07:26:53 +0000 Manifest next update: Mon 03 Aug 2026 08:51:53 +0000 Files and hashes: 1: 3135372e36362e3137302e302f32332d3233203d3e20313532373737.roa (hash: b9vSoEj12pKvRl6GFlwGqwDqlYjOzNMwdmXHDB/QoPA=) 2: 8577702D614C8CB829CA2CC51C2B3374AC66A40E.crl (hash: 8XITD1qgk/cSPMcHh6vNKxDtLliC/Tg7KYz727Ox/Ls=) 3: 3135372e36362e3137312e302f32342d3234203d3e20313532373737.roa (hash: uYXVOfIT7P6Dr33KoZiS4hHMvBugVDHDvO0rydITSy0=) 4: 3135372e36362e3137302e302f32342d3234203d3e20313532373737.roa (hash: ymv/QzmelT0mY8Z1NXChI2j7830jRvZf9HvAHfEuKp0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a5481606-d5fd-4196-abcd-58e6c76243c5/0/8577702D614C8CB829CA2CC51C2B3374AC66A40E.crl rsync://rpki-rsync.idnic.net/repo/a5481606-d5fd-4196-abcd-58e6c76243c5/0/8577702D614C8CB829CA2CC51C2B3374AC66A40E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/8577702D614C8CB829CA2CC51C2B3374AC66A40E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 08:51:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:4e:8b:46:cc:40:b6:90:81:d2:b1:b0:2d:c4:9e:9f:a5:18:33:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8577702D614C8CB829CA2CC51C2B3374AC66A40E Validity Not Before: Aug 2 07:26:53 2026 GMT Not After : Aug 3 08:51:53 2026 GMT Subject: CN=F867ADB723BED8694208482AA1B4BCD81EBBA83B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:63:39:84:90:0c:9c:76:8e:d5:29:72:4a:e8: de:ce:19:04:31:2c:0a:36:fb:1b:3d:27:61:99:7c: 20:52:5a:2d:da:02:35:ce:56:1f:b1:74:55:50:b8: a8:f2:b2:3a:47:ea:0a:3a:4d:7d:16:77:0f:57:c4: e9:cc:8e:3f:18:be:d8:10:2d:f0:c2:cf:80:97:b5: 34:4d:f6:6b:8f:ee:bf:80:57:21:81:a6:28:8b:37: 71:a8:8c:31:a1:e9:b2:22:5c:00:40:00:5e:7a:b0: 3a:c0:c6:dd:8c:4f:89:73:e1:8d:d7:6f:5c:a5:dd: 2b:bf:de:a6:ec:55:d3:e1:2e:27:5e:e6:29:7d:06: fe:af:87:a4:1a:be:13:23:6c:06:a0:99:1e:c0:b9: 7c:e9:b4:5f:6d:d4:33:78:fb:f6:10:8f:a4:f9:66: 32:f3:65:01:85:68:0b:ad:4e:ab:74:ba:38:94:ec: d2:53:1a:d4:ea:68:21:34:cf:55:34:e9:fd:4a:60: a1:52:82:a0:f0:2e:01:57:41:ee:ed:a8:0e:ba:79: ce:a5:f0:bd:7d:02:28:b7:19:fb:f3:e7:cf:9c:56: 5c:65:60:44:85:f7:f7:d9:5e:f5:0a:c5:f9:c6:fa: 23:46:f3:72:18:49:51:4a:1d:24:d5:2d:ca:ec:23: ba:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:67:AD:B7:23:BE:D8:69:42:08:48:2A:A1:B4:BC:D8:1E:BB:A8:3B X509v3 Authority Key Identifier: keyid:85:77:70:2D:61:4C:8C:B8:29:CA:2C:C5:1C:2B:33:74:AC:66:A4:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a5481606-d5fd-4196-abcd-58e6c76243c5/0/8577702D614C8CB829CA2CC51C2B3374AC66A40E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/8577702D614C8CB829CA2CC51C2B3374AC66A40E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a5481606-d5fd-4196-abcd-58e6c76243c5/0/8577702D614C8CB829CA2CC51C2B3374AC66A40E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:7f:a4:9c:c3:e9:e7:1a:8a:a2:f2:76:da:c8:7d:a6:25:81: 16:1b:05:75:ff:69:10:76:e8:02:1a:6b:ac:41:33:d4:d9:80: f5:7c:6d:35:a6:f8:fd:21:36:5a:97:30:22:8e:7e:e9:26:f1: 3b:14:c1:34:a4:c1:99:5d:bf:f7:c3:55:e5:fd:b5:ee:20:09: a8:cf:34:70:6d:e3:ca:08:04:83:8d:e9:30:f7:2c:11:4f:57: f1:63:68:5f:0e:d1:45:54:f9:ae:80:97:bd:e6:b8:a8:4d:53: cc:71:5a:35:4b:6b:e2:3e:46:e4:9c:43:29:b3:c0:46:d7:d3: 1c:52:ad:c7:f1:2e:bc:a8:e4:eb:d3:d2:f1:2d:65:99:4e:0e: 1e:ee:e9:08:f7:9e:9f:65:00:06:57:4f:7d:9a:ef:38:ba:f8: aa:2d:73:cf:b6:c5:f4:94:f7:51:40:85:77:64:07:2d:6d:f6: 3e:d9:a5:83:08:8d:c7:f0:9e:ad:69:1a:3b:47:40:fd:5a:2e: 5d:c8:01:0d:98:06:db:2f:ee:1d:b1:4e:1c:7e:ab:19:2d:ec: b4:b6:82:c7:a9:20:2f:62:11:b6:5f:a0:5f:ea:cd:9d:81:a0: 38:74:7e:d8:29:73:10:19:d5:ee:6c:81:8c:27:41:56:db:97: f8:12:b7:8a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS06LRsxAtpCB0rGwLcSen6UYM+cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODU3NzcwMkQ2MTRDOENCODI5Q0EyQ0M1MUMyQjMzNzRB QzY2QTQwRTAeFw0yNjA4MDIwNzI2NTNaFw0yNjA4MDMwODUxNTNaMDMxMTAvBgNV BAMTKEY4NjdBREI3MjNCRUQ4Njk0MjA4NDgyQUExQjRCQ0Q4MUVCQkE4M0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdYzmEkAycdo7VKXJK6N7OGQQx LAo2+xs9J2GZfCBSWi3aAjXOVh+xdFVQuKjysjpH6go6TX0Wdw9XxOnMjj8YvtgQ LfDCz4CXtTRN9muP7r+AVyGBpiiLN3GojDGh6bIiXABAAF56sDrAxt2MT4lz4Y3X b1yl3Su/3qbsVdPhLide5il9Bv6vh6QavhMjbAagmR7AuXzptF9t1DN4+/YQj6T5 ZjLzZQGFaAutTqt0ujiU7NJTGtTqaCE0z1U06f1KYKFSgqDwLgFXQe7tqA66ec6l 8L19Aii3Gfvz58+cVlxlYESF9/fZXvUKxfnG+iNG83IYSVFKHSTVLcrsI7q/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+GettyO+2GlCCEgqobS82B67qDswHwYDVR0j BBgwFoAUhXdwLWFMjLgpyizFHCszdKxmpA4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTU0ODE2MDYtZDVmZC00MTk2LWFiY2QtNThlNmM3NjI0M2M1LzAvODU3NzcwMkQ2 MTRDOENCODI5Q0EyQ0M1MUMyQjMzNzRBQzY2QTQwRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC84NTc3NzAyRDYxNEM4Q0I4MjlDQTJDQzUxQzJCMzM3NEFDNjZB NDBFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTU0ODE2MDYtZDVmZC00MTk2LWFi Y2QtNThlNmM3NjI0M2M1LzAvODU3NzcwMkQ2MTRDOENCODI5Q0EyQ0M1MUMyQjMz NzRBQzY2QTQwRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACJ/pJzD6ecaiqLydtrIfaYlgRYbBXX/aRB2 6AIaa6xBM9TZgPV8bTWm+P0hNlqXMCKOfukm8TsUwTSkwZldv/fDVeX9te4gCajP NHBt48oIBION6TD3LBFPV/FjaF8O0UVU+a6Al73muKhNU8xxWjVLa+I+RuScQymz wEbX0xxSrcfxLryo5OvT0vEtZZlODh7u6Qj3np9lAAZXT32a7zi6+Kotc8+2xfSU 91FAhXdkBy1t9j7ZpYMIjcfwnq1pGjtHQP1aLl3IAQ2YBtsv7h2xThx+qxkt7LS2 gsepIC9iEbZfoF/qzZ2BoDh0ftgpcxAZ1e5sgYwnQVbbl/gSt4o= -----END CERTIFICATE-----Generated at Sun Aug 2 20:35:38 2026 by rpki-client