$ rpki-client -vvf rpki-rsync.idnic.net/repo/0c1e49ab-50ca-4b3e-823c-8b3d31ba85f2/0/A8B4290DB1D500117291858DAF1B1EDF11D478CF.mft File: A8B4290DB1D500117291858DAF1B1EDF11D478CF.mft (raw, json) Hash identifier: aPifVPCgMCZP/0jmOvizNzTbt8lUmegzqZadhQCiWdk= Subject key identifier: DA:08:15:52:82:02:11:08:C2:F6:53:1C:7A:69:F5:E1:C6:DD:09:3F Authority key identifier: A8:B4:29:0D:B1:D5:00:11:72:91:85:8D:AF:1B:1E:DF:11:D4:78:CF Certificate issuer: /CN=A8B4290DB1D500117291858DAF1B1EDF11D478CF Certificate serial: 0FE82A78FB70F303C3FE9AA6BD9287BE487B5BC3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A8B4290DB1D500117291858DAF1B1EDF11D478CF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0c1e49ab-50ca-4b3e-823c-8b3d31ba85f2/0/A8B4290DB1D500117291858DAF1B1EDF11D478CF.mft Manifest number: 77 Signing time: Wed 29 Jul 2026 01:27:55 +0000 Manifest this update: Wed 29 Jul 2026 01:22:55 +0000 Manifest next update: Thu 30 Jul 2026 02:47:55 +0000 Files and hashes: 1: 3130332e3136332e3130322e302f32332d3233203d3e20313431363733.roa (hash: pahHbmXTulV++MGHGhEL8jSNz3xJ/1KdhQdlxBhfIw4=) 2: A8B4290DB1D500117291858DAF1B1EDF11D478CF.crl (hash: ZaRlD8h6t+pxC50JpDt81CVH0Fc54m8wcFyxNmIumDA=) 3: 3130332e3136332e3130322e302f32342d3234203d3e20313431363733.roa (hash: h1TE3m56WQ+gTVyqOOSf1UTeQzb1azE9LGSpzK549vA=) 4: 3130332e3136332e3130332e302f32342d3234203d3e20313431363733.roa (hash: /KfC4nr32tMCkBy7+tyxmf0Ms+3hn6LQNee4YzYVhVM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0c1e49ab-50ca-4b3e-823c-8b3d31ba85f2/0/A8B4290DB1D500117291858DAF1B1EDF11D478CF.crl rsync://rpki-rsync.idnic.net/repo/0c1e49ab-50ca-4b3e-823c-8b3d31ba85f2/0/A8B4290DB1D500117291858DAF1B1EDF11D478CF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A8B4290DB1D500117291858DAF1B1EDF11D478CF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 02:47:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:e8:2a:78:fb:70:f3:03:c3:fe:9a:a6:bd:92:87:be:48:7b:5b:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A8B4290DB1D500117291858DAF1B1EDF11D478CF Validity Not Before: Jul 29 01:22:55 2026 GMT Not After : Jul 30 02:47:55 2026 GMT Subject: CN=DA08155282021108C2F6531C7A69F5E1C6DD093F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:af:69:2a:30:fc:2c:61:a9:05:3a:f4:e1:12: 36:19:d3:7d:9b:8d:47:7a:30:34:09:bf:98:be:76: a7:99:82:17:47:a8:d0:f1:e1:3d:74:77:a6:a7:7b: b4:ae:ae:83:50:f4:4a:c6:02:d2:e5:2b:1a:ea:73: 6b:91:cb:97:4c:fc:8b:6b:cf:36:15:dc:8e:42:6d: a2:f7:e6:6b:48:d7:20:5d:c1:51:a1:06:ac:7e:31: f1:ea:1e:f9:ae:43:1c:f0:c2:7a:14:13:fc:d9:b8: f4:13:e4:28:af:73:de:4e:2b:2c:49:2b:1e:f2:c4: 45:06:08:0f:e6:eb:85:00:72:e0:37:74:aa:30:18: 60:5f:a2:27:12:a2:02:44:b2:99:9a:41:22:b7:32: 38:83:a6:b5:03:41:c2:75:bd:a5:39:9f:8b:bb:93: 8c:de:bf:48:f1:82:61:51:c3:66:e5:86:fe:b3:0f: e9:a3:77:4c:d7:85:7e:01:c1:9f:ea:ec:1b:b2:f2: dc:92:f5:2a:93:48:cb:eb:a2:de:0d:f7:dd:29:45: f0:2b:55:14:29:df:17:48:13:b1:7e:cd:31:9e:e0: ac:dd:33:b7:6e:47:db:b0:cc:b7:f5:2d:91:39:ae: 60:a6:23:3e:b3:85:0d:88:f6:07:35:a6:82:72:7b: 1a:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:08:15:52:82:02:11:08:C2:F6:53:1C:7A:69:F5:E1:C6:DD:09:3F X509v3 Authority Key Identifier: keyid:A8:B4:29:0D:B1:D5:00:11:72:91:85:8D:AF:1B:1E:DF:11:D4:78:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0c1e49ab-50ca-4b3e-823c-8b3d31ba85f2/0/A8B4290DB1D500117291858DAF1B1EDF11D478CF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A8B4290DB1D500117291858DAF1B1EDF11D478CF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0c1e49ab-50ca-4b3e-823c-8b3d31ba85f2/0/A8B4290DB1D500117291858DAF1B1EDF11D478CF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:14:06:dc:7e:99:92:04:93:95:db:5d:93:6d:36:41:c2:36: 1a:5a:40:48:30:87:9f:84:cf:b3:ed:2a:16:dc:6e:f7:58:36: 46:5c:36:49:00:b0:23:21:11:72:ae:ef:0e:25:a5:97:ac:94: 5b:65:fe:48:c9:10:38:ba:3b:61:33:ca:f0:0a:d4:55:e3:82: bf:39:1e:47:0e:1f:09:81:c5:e6:3d:c4:80:5e:18:65:cc:16: a2:f9:7b:41:c2:03:bd:b9:0a:0b:2d:4b:96:12:eb:61:f5:2d: e6:42:a3:31:60:94:2e:09:73:ea:b0:d0:d4:02:6c:56:c5:62: 37:9e:07:50:ae:cc:f8:92:06:49:75:3e:a0:d7:0c:2c:5b:e1: 17:b8:41:19:06:b7:0c:83:c3:2a:47:e9:bb:ee:b0:e9:77:73: b1:47:47:85:a6:72:7f:4d:0d:e8:5e:54:63:f5:13:a0:19:65: 1e:1d:26:07:8a:09:82:5a:e2:46:23:9c:9a:56:9d:09:ac:84: 72:35:dc:03:a3:a1:dd:1f:2c:75:21:a1:b2:ef:a7:07:88:5f: c6:1a:43:ef:08:3b:dd:c8:3f:d2:58:30:df:75:64:50:b4:08: 98:53:b3:ff:cd:4f:ff:83:b8:6c:73:5f:95:a4:7a:b0:ca:21: 4e:71:4d:93 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD+gqePtw8wPD/pqmvZKHvkh7W8MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQThCNDI5MERCMUQ1MDAxMTcyOTE4NThEQUYxQjFFREYx MUQ0NzhDRjAeFw0yNjA3MjkwMTIyNTVaFw0yNjA3MzAwMjQ3NTVaMDMxMTAvBgNV BAMTKERBMDgxNTUyODIwMjExMDhDMkY2NTMxQzdBNjlGNUUxQzZERDA5M0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTr2kqMPwsYakFOvThEjYZ032b jUd6MDQJv5i+dqeZghdHqNDx4T10d6ane7SuroNQ9ErGAtLlKxrqc2uRy5dM/Itr zzYV3I5CbaL35mtI1yBdwVGhBqx+MfHqHvmuQxzwwnoUE/zZuPQT5Civc95OKyxJ Kx7yxEUGCA/m64UAcuA3dKowGGBfoicSogJEspmaQSK3MjiDprUDQcJ1vaU5n4u7 k4zev0jxgmFRw2blhv6zD+mjd0zXhX4BwZ/q7Buy8tyS9SqTSMvrot4N990pRfAr VRQp3xdIE7F+zTGe4KzdM7duR9uwzLf1LZE5rmCmIz6zhQ2I9gc1poJyexp9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2ggVUoICEQjC9lMcemn14cbdCT8wHwYDVR0j BBgwFoAUqLQpDbHVABFykYWNrxse3xHUeM8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGMxZTQ5YWItNTBjYS00YjNlLTgyM2MtOGIzZDMxYmE4NWYyLzAvQThCNDI5MERC MUQ1MDAxMTcyOTE4NThEQUYxQjFFREYxMUQ0NzhDRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BOEI0MjkwREIxRDUwMDExNzI5MTg1OERBRjFCMUVERjExRDQ3 OENGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGMxZTQ5YWItNTBjYS00YjNlLTgy M2MtOGIzZDMxYmE4NWYyLzAvQThCNDI5MERCMUQ1MDAxMTcyOTE4NThEQUYxQjFF REYxMUQ0NzhDRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACwUBtx+mZIEk5XbXZNtNkHCNhpaQEgwh5+E z7PtKhbcbvdYNkZcNkkAsCMhEXKu7w4lpZeslFtl/kjJEDi6O2EzyvAK1FXjgr85 HkcOHwmBxeY9xIBeGGXMFqL5e0HCA725CgstS5YS62H1LeZCozFglC4Jc+qw0NQC bFbFYjeeB1CuzPiSBkl1PqDXDCxb4Re4QRkGtwyDwypH6bvusOl3c7FHR4Wmcn9N DeheVGP1E6AZZR4dJgeKCYJa4kYjnJpWnQmshHI13AOjod0fLHUhobLvpweIX8Ya Q+8IO93IP9JYMN91ZFC0CJhTs//NT/+DuGxzX5WkerDKIU5xTZM= -----END CERTIFICATE-----Generated at Wed Jul 29 17:49:29 2026 by rpki-client