$ rpki-client -vvf rpki-rsync.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/0/8D39D207A49E2A5C1D9FD8A7B27D34484EF1E62C.mft File: 8D39D207A49E2A5C1D9FD8A7B27D34484EF1E62C.mft (raw, json) Hash identifier: xZiyYwxu3e4Yh1D1/TaVkfZGRMJ98C4STz7GXUxyijA= Subject key identifier: 19:0F:5A:C7:F3:13:C4:F3:56:1B:68:6F:13:FF:EB:91:00:AB:99:6E Authority key identifier: 8D:39:D2:07:A4:9E:2A:5C:1D:9F:D8:A7:B2:7D:34:48:4E:F1:E6:2C Certificate issuer: /CN=8D39D207A49E2A5C1D9FD8A7B27D34484EF1E62C Certificate serial: 4425CC92AC0BC898AC9B5AF03CF32F59006CFA63 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/8D39D207A49E2A5C1D9FD8A7B27D34484EF1E62C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/0/8D39D207A49E2A5C1D9FD8A7B27D34484EF1E62C.mft Manifest number: 7C Signing time: Sun 02 Aug 2026 09:24:02 +0000 Manifest this update: Sun 02 Aug 2026 09:19:02 +0000 Manifest next update: Mon 03 Aug 2026 11:45:02 +0000 Files and hashes: 1: 3135372e36362e3137362e302f32342d3234203d3e20313532373536.roa (hash: Bi2PlajLpuJF5Q77N7WIyjkq2NapiUAEv+5ltKF4LBc=) 2: 8D39D207A49E2A5C1D9FD8A7B27D34484EF1E62C.crl (hash: fSVVR5zUpWms9YEHd6gd5YR5AJJrUBZ38VIlgRjfWno=) 3: 3135372e36362e3137362e302f32332d3233203d3e20313532373536.roa (hash: wesRzy414+ZceFD9/gwocQJzbKqVZ+NX+KTjHeWFakA=) 4: 3135372e36362e3137372e302f32342d3234203d3e20313532373536.roa (hash: HIdPJqjIrOEvu8Fg+POUaS/pAuaPSBpatCRmSscMNd8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/0/8D39D207A49E2A5C1D9FD8A7B27D34484EF1E62C.crl rsync://rpki-rsync.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/0/8D39D207A49E2A5C1D9FD8A7B27D34484EF1E62C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/8D39D207A49E2A5C1D9FD8A7B27D34484EF1E62C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 11:45:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:25:cc:92:ac:0b:c8:98:ac:9b:5a:f0:3c:f3:2f:59:00:6c:fa:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D39D207A49E2A5C1D9FD8A7B27D34484EF1E62C Validity Not Before: Aug 2 09:19:02 2026 GMT Not After : Aug 3 11:45:02 2026 GMT Subject: CN=190F5AC7F313C4F3561B686F13FFEB9100AB996E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:9d:55:12:75:05:79:73:12:26:bd:e4:23:5b: f7:66:f0:1b:09:77:9a:0b:e8:fe:9c:1c:1a:d1:ec: d5:c7:b7:b3:37:7f:71:93:36:f7:e1:82:ac:d1:ca: 2e:e1:79:a0:e2:eb:be:08:53:2e:d9:93:0c:83:b3: 3c:f2:95:b4:7f:be:14:6b:be:33:7b:d5:9f:b0:93: 23:b9:11:1d:83:9c:d8:23:d5:95:98:9e:2e:7a:f9: 79:00:b4:a1:50:66:37:ee:56:70:d5:31:1d:ac:e1: 6b:af:56:45:dd:a4:a5:a4:7d:e8:d6:29:b4:e2:8d: 83:93:58:77:11:30:ca:aa:8a:71:0f:b8:72:cb:ca: ba:16:b1:cf:9e:9c:df:12:ed:81:82:36:38:e7:d1: 02:f5:7a:b1:89:b9:0d:09:49:4d:c0:69:21:e3:7c: ef:3a:79:91:5a:91:0e:f5:05:4f:33:7a:40:08:63: 82:fc:01:22:85:a7:b2:aa:a0:89:b0:b8:12:76:e5: 45:e2:8e:c7:76:57:c0:51:26:85:b3:72:ba:74:b3: ca:5e:4c:ca:05:a0:7f:c5:8f:50:48:5d:d2:9b:f6: 08:b5:f1:45:5d:5a:d9:fe:96:0c:6a:72:a1:c8:e2: 70:5f:dc:5d:2d:07:9e:d0:95:17:11:1f:4a:74:d7: 48:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:0F:5A:C7:F3:13:C4:F3:56:1B:68:6F:13:FF:EB:91:00:AB:99:6E X509v3 Authority Key Identifier: keyid:8D:39:D2:07:A4:9E:2A:5C:1D:9F:D8:A7:B2:7D:34:48:4E:F1:E6:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/0/8D39D207A49E2A5C1D9FD8A7B27D34484EF1E62C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/8D39D207A49E2A5C1D9FD8A7B27D34484EF1E62C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/0/8D39D207A49E2A5C1D9FD8A7B27D34484EF1E62C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption da:1a:b1:e4:28:4d:1e:bf:50:e7:d9:9e:bb:be:45:ad:1a:3f: 7d:cf:43:72:b2:29:e2:6d:d8:a5:86:e8:ca:73:e3:96:40:9e: 52:59:69:8b:3f:01:a2:aa:47:3e:13:c9:01:ad:eb:56:76:d8: e9:8f:6e:ed:ec:7c:59:0a:04:b6:0c:68:5a:dd:cc:19:4e:f4: 39:bc:bd:e2:36:04:8e:2a:c8:bf:1e:1d:b1:fe:74:77:53:d3: b7:bc:9c:50:07:6c:15:63:c0:a6:23:b1:a6:93:f9:df:ab:2a: de:95:fd:0f:5e:66:cc:0a:8f:32:b7:fe:9e:c7:d9:41:b0:5c: e2:8b:ef:52:7a:63:23:f0:40:2f:74:7e:b8:d6:2e:26:23:6c: 54:26:d7:3c:1f:24:bc:9d:34:64:a7:a2:07:52:ad:3e:e1:24: 71:4f:29:6c:35:33:c1:59:80:8d:b4:b2:86:27:93:ef:5e:30: 39:c9:3d:4f:a8:0c:00:15:68:8c:74:dc:0d:cc:89:b1:b1:0d: 37:3f:c8:72:9d:8e:1b:73:36:0b:5a:58:67:8b:2f:6c:c3:a7: e7:96:ff:c9:1e:ae:21:ed:ed:75:e9:6b:ef:a5:a0:05:17:6e: 4d:36:6e:dd:c5:3a:4b:80:10:a4:ce:62:7a:72:97:3a:48:c0: 8a:42:39:76 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURCXMkqwLyJism1rwPPMvWQBs+mMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEQzOUQyMDdBNDlFMkE1QzFEOUZEOEE3QjI3RDM0NDg0 RUYxRTYyQzAeFw0yNjA4MDIwOTE5MDJaFw0yNjA4MDMxMTQ1MDJaMDMxMTAvBgNV BAMTKDE5MEY1QUM3RjMxM0M0RjM1NjFCNjg2RjEzRkZFQjkxMDBBQjk5NkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbnVUSdQV5cxImveQjW/dm8BsJ d5oL6P6cHBrR7NXHt7M3f3GTNvfhgqzRyi7heaDi674IUy7ZkwyDszzylbR/vhRr vjN71Z+wkyO5ER2DnNgj1ZWYni56+XkAtKFQZjfuVnDVMR2s4WuvVkXdpKWkfejW KbTijYOTWHcRMMqqinEPuHLLyroWsc+enN8S7YGCNjjn0QL1erGJuQ0JSU3AaSHj fO86eZFakQ71BU8zekAIY4L8ASKFp7KqoImwuBJ25UXijsd2V8BRJoWzcrp0s8pe TMoFoH/Fj1BIXdKb9gi18UVdWtn+lgxqcqHI4nBf3F0tB57QlRcRH0p010gLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGQ9ax/MTxPNWG2hvE//rkQCrmW4wHwYDVR0j BBgwFoAUjTnSB6SeKlwdn9insn00SE7x5iwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWFiNGUxNGQtMDIxZC00MGRjLTkyM2EtYzEyZDFhZjQ0M2I1LzAvOEQzOUQyMDdB NDlFMkE1QzFEOUZEOEE3QjI3RDM0NDg0RUYxRTYyQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC84RDM5RDIwN0E0OUUyQTVDMUQ5RkQ4QTdCMjdEMzQ0ODRFRjFF NjJDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWFiNGUxNGQtMDIxZC00MGRjLTky M2EtYzEyZDFhZjQ0M2I1LzAvOEQzOUQyMDdBNDlFMkE1QzFEOUZEOEE3QjI3RDM0 NDg0RUYxRTYyQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANoaseQoTR6/UOfZnru+Ra0aP33PQ3KyKeJt 2KWG6Mpz45ZAnlJZaYs/AaKqRz4TyQGt61Z22OmPbu3sfFkKBLYMaFrdzBlO9Dm8 veI2BI4qyL8eHbH+dHdT07e8nFAHbBVjwKYjsaaT+d+rKt6V/Q9eZswKjzK3/p7H 2UGwXOKL71J6YyPwQC90frjWLiYjbFQm1zwfJLydNGSnogdSrT7hJHFPKWw1M8FZ gI20soYnk+9eMDnJPU+oDAAVaIx03A3MibGxDTc/yHKdjhtzNgtaWGeLL2zDp+eW /8keriHt7XXpa++loAUXbk02bt3FOkuAEKTOYnpylzpIwIpCOXY= -----END CERTIFICATE-----Generated at Sun Aug 2 20:33:32 2026 by rpki-client