$ rpki-client -vvf rpki-rsync.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/8AE9BB21003E87396CEDD7898B4A50424E8CEC8F.mft File: 8AE9BB21003E87396CEDD7898B4A50424E8CEC8F.mft (raw, json) Hash identifier: Xjiyq4fJwPBI1W9Q6BcJ/nmQNp2EZYV9Rm+kvpXrvIY= Subject key identifier: 3F:A7:95:27:39:24:02:DB:C9:A5:D0:7E:21:FB:E6:D2:EB:00:34:C4 Authority key identifier: 8A:E9:BB:21:00:3E:87:39:6C:ED:D7:89:8B:4A:50:42:4E:8C:EC:8F Certificate issuer: /CN=8AE9BB21003E87396CEDD7898B4A50424E8CEC8F Certificate serial: 3FEB214F185AA4D94B940619555AB48A6F98F0BA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8AE9BB21003E87396CEDD7898B4A50424E8CEC8F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/8AE9BB21003E87396CEDD7898B4A50424E8CEC8F.mft Manifest number: 7C Signing time: Sun 02 Aug 2026 11:01:06 +0000 Manifest this update: Sun 02 Aug 2026 10:56:06 +0000 Manifest next update: Mon 03 Aug 2026 14:50:06 +0000 Files and hashes: 1: 3130332e35362e3230372e302f32342d3234203d3e203538343737.roa (hash: FdEj2/miSrHrif/CfoOvLE1OV+PuSrA43YH+LmHuPRM=) 2: 34352e3132372e3133342e302f32342d3234203d3e203538343737.roa (hash: rkn+DI7lNxqSqCTlwACNzV0qOshNnDXKFLIZsdocYhE=) 3: 34352e3132372e3133322e302f32342d3234203d3e203538343737.roa (hash: pK3Vu7dEPBnTFAw3IDhWOXFOflNVhPv7/JjAZ1e/ubk=) 4: 8AE9BB21003E87396CEDD7898B4A50424E8CEC8F.crl (hash: h+5OYE2+FjDP8iknWsa8VF+ZuJTPzBPZzGyreFciaKM=) 5: 34352e3132372e3133352e302f32342d3234203d3e20313335333630.roa (hash: 0WsKsDzY8LPfrJ1pgXZgjbVmTWXixBFTK8YpHb3DNxU=) 6: 3130332e35362e3230342e302f32342d3234203d3e203538343737.roa (hash: ieJoOGDuwtLlA8t0dN5yUaBjAk+rstjVqpks3BBFT2E=) 7: 3130332e35362e3230352e302f32342d3234203d3e203538343737.roa (hash: JuQ4cvsB/3E/np6OBFHLGq+Nt4mQQ/GxzLV4MrmhfZo=) 8: 34352e3132372e3133332e302f32342d3234203d3e203538343737.roa (hash: icfsfhUwquzTy2StQKBYwmmyOmAVCsssAYK5CyA5iDI=) 9: 3130332e35362e3230362e302f32342d3234203d3e203538343737.roa (hash: CVqG9mh1X9V1ZbC6R/r5UJJ2xSfzA9r4RYW1GFYyElI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/8AE9BB21003E87396CEDD7898B4A50424E8CEC8F.crl rsync://rpki-rsync.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/8AE9BB21003E87396CEDD7898B4A50424E8CEC8F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8AE9BB21003E87396CEDD7898B4A50424E8CEC8F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 08:45:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:eb:21:4f:18:5a:a4:d9:4b:94:06:19:55:5a:b4:8a:6f:98:f0:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8AE9BB21003E87396CEDD7898B4A50424E8CEC8F Validity Not Before: Aug 2 10:56:06 2026 GMT Not After : Aug 3 14:50:06 2026 GMT Subject: CN=3FA79527392402DBC9A5D07E21FBE6D2EB0034C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:4d:6b:dd:46:cf:eb:2f:4e:ad:58:6d:64:a7: 03:28:55:e2:87:4e:d9:2b:3c:9b:86:bb:3a:06:10: 18:50:bb:0e:df:6d:55:5d:7f:57:c0:b3:33:ce:6c: 7f:b2:a8:33:96:de:cd:39:9e:80:a7:6b:22:1f:33: 44:09:7a:6d:82:90:e2:aa:bd:2a:d3:91:d1:e8:32: 8d:77:fa:55:83:b8:c4:42:01:85:b6:e4:52:89:66: cd:92:f1:1d:77:7e:fc:f1:50:52:d8:da:26:36:68: d9:57:b8:a0:a9:34:48:bc:40:89:1b:c7:39:c4:67: 7a:54:4d:a7:59:68:58:9a:13:e4:bc:b5:4a:31:07: 63:37:5d:a6:e6:da:03:f6:10:50:86:24:87:47:2d: 66:a0:30:8c:7c:04:8d:a5:0f:36:e0:cf:1f:d4:5e: 30:ff:64:b3:3c:cf:09:81:1e:6c:6c:4d:fb:4d:e9: 02:c3:d6:24:37:44:0d:19:74:6f:dc:c0:10:fd:96: 1b:b7:db:b7:7a:cd:61:0c:7e:28:cf:25:40:04:c5: d5:30:1b:fb:dd:6f:0e:05:3b:a1:c6:d3:44:ff:e8: 4a:13:7f:c7:7a:ed:2a:25:02:c7:ee:df:36:b9:53: 22:7d:ba:7a:d5:16:86:09:69:5e:da:6d:e7:8f:97: 74:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:A7:95:27:39:24:02:DB:C9:A5:D0:7E:21:FB:E6:D2:EB:00:34:C4 X509v3 Authority Key Identifier: keyid:8A:E9:BB:21:00:3E:87:39:6C:ED:D7:89:8B:4A:50:42:4E:8C:EC:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/8AE9BB21003E87396CEDD7898B4A50424E8CEC8F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8AE9BB21003E87396CEDD7898B4A50424E8CEC8F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/8AE9BB21003E87396CEDD7898B4A50424E8CEC8F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:ab:c7:43:9b:d9:08:67:3e:a4:35:ea:9f:c1:b7:3a:8b:73: 57:a3:a5:76:bc:49:2d:e7:bf:4f:45:36:e5:2e:50:7d:49:0e: 18:7f:e6:78:8c:9f:ac:27:2a:2b:ba:42:c7:79:f1:66:ed:c4: 28:ef:30:e8:a0:9a:0a:32:dd:a9:63:49:b0:71:68:3d:f3:5e: 8c:59:f5:78:88:c2:b1:bc:b9:83:98:fd:e4:f2:78:59:8f:6e: 2b:e3:20:25:fb:66:cd:b8:eb:79:74:28:97:d0:3d:ae:d4:5a: f9:23:65:4f:c9:da:8a:f0:1a:cd:fd:09:b2:61:83:9d:d9:72: 8b:af:46:56:ce:bb:4d:a2:dc:40:d6:cd:ef:f6:fb:af:ad:a3: 4e:da:4a:1e:8b:85:af:bd:74:3f:4b:4d:c4:ee:4c:c7:4d:73: 13:3c:15:b4:fa:4a:04:61:a0:5d:9d:68:bc:81:e5:ca:6b:61: 74:6e:2b:51:76:b4:f8:ac:9c:d1:56:10:f5:d0:73:ab:58:83: 4e:e8:a9:d6:71:66:3b:67:7d:4f:33:a1:a5:f9:3f:05:00:f7: a2:8c:56:9c:53:2d:57:78:a4:06:d9:7f:07:12:44:83:97:c8: 4d:94:67:3e:7a:ed:a0:e3:0e:55:66:8c:62:2e:d4:01:91:72: 30:73:d1:19 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP+shTxhapNlLlAYZVVq0im+Y8LowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEFFOUJCMjEwMDNFODczOTZDRURENzg5OEI0QTUwNDI0 RThDRUM4RjAeFw0yNjA4MDIxMDU2MDZaFw0yNjA4MDMxNDUwMDZaMDMxMTAvBgNV BAMTKDNGQTc5NTI3MzkyNDAyREJDOUE1RDA3RTIxRkJFNkQyRUIwMDM0QzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKTWvdRs/rL06tWG1kpwMoVeKH TtkrPJuGuzoGEBhQuw7fbVVdf1fAszPObH+yqDOW3s05noCnayIfM0QJem2CkOKq vSrTkdHoMo13+lWDuMRCAYW25FKJZs2S8R13fvzxUFLY2iY2aNlXuKCpNEi8QIkb xznEZ3pUTadZaFiaE+S8tUoxB2M3Xabm2gP2EFCGJIdHLWagMIx8BI2lDzbgzx/U XjD/ZLM8zwmBHmxsTftN6QLD1iQ3RA0ZdG/cwBD9lhu327d6zWEMfijPJUAExdUw G/vdbw4FO6HG00T/6EoTf8d67SolAsfu3za5UyJ9unrVFoYJaV7abeePl3TRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUP6eVJzkkAtvJpdB+Ifvm0usANMQwHwYDVR0j BBgwFoAUium7IQA+hzls7deJi0pQQk6M7I8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDNmOGY1NWMtOWUzNS00Y2UyLTg5MGYtMGRlM2UyNDA0NjExLzAvOEFFOUJCMjEw MDNFODczOTZDRURENzg5OEI0QTUwNDI0RThDRUM4Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84QUU5QkIyMTAwM0U4NzM5NkNFREQ3ODk4QjRBNTA0MjRFOENF QzhGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDNmOGY1NWMtOWUzNS00Y2UyLTg5 MGYtMGRlM2UyNDA0NjExLzAvOEFFOUJCMjEwMDNFODczOTZDRURENzg5OEI0QTUw NDI0RThDRUM4Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF6rx0Ob2QhnPqQ16p/BtzqLc1ejpXa8SS3n v09FNuUuUH1JDhh/5niMn6wnKiu6Qsd58WbtxCjvMOigmgoy3aljSbBxaD3zXoxZ 9XiIwrG8uYOY/eTyeFmPbivjICX7Zs2463l0KJfQPa7UWvkjZU/J2orwGs39CbJh g53ZcouvRlbOu02i3EDWze/2+6+to07aSh6Lha+9dD9LTcTuTMdNcxM8FbT6SgRh oF2daLyB5cprYXRuK1F2tPisnNFWEPXQc6tYg07oqdZxZjtnfU8zoaX5PwUA96KM VpxTLVd4pAbZfwcSRIOXyE2UZz567aDjDlVmjGIu1AGRcjBz0Rk= -----END CERTIFICATE-----Generated at Sun Aug 2 15:50:51 2026 by rpki-client