$ rpki-client -vvf rpki-rsync.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/8B463984C16522A35FAAB60708D34C89D9D9F1E7.mft File: 8B463984C16522A35FAAB60708D34C89D9D9F1E7.mft (raw, json) Hash identifier: AdLmZvSEILkV4ZbAYoHmWVN0YA7Z62We7dx0lTPD/a4= Subject key identifier: 91:DE:87:FB:47:10:BD:AA:7D:89:06:B1:B2:27:15:18:F0:66:E2:A7 Authority key identifier: 8B:46:39:84:C1:65:22:A3:5F:AA:B6:07:08:D3:4C:89:D9:D9:F1:E7 Certificate issuer: /CN=8B463984C16522A35FAAB60708D34C89D9D9F1E7 Certificate serial: 4218BDAB683B812D46218A80D0CEC92C8DFC4A29 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/8B463984C16522A35FAAB60708D34C89D9D9F1E7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/8B463984C16522A35FAAB60708D34C89D9D9F1E7.mft Manifest number: 75 Signing time: Tue 28 Jul 2026 11:10:44 +0000 Manifest this update: Tue 28 Jul 2026 11:05:44 +0000 Manifest next update: Wed 29 Jul 2026 14:48:44 +0000 Files and hashes: 1: 8B463984C16522A35FAAB60708D34C89D9D9F1E7.crl (hash: rJESQ3eKrjmKyPsdcXKoTUhtKFxsYQigvXVD4YOyqHY=) 2: 3135372e36362e35362e302f32342d3234203d3e203538343737.roa (hash: c2UfSKD11fX4h2x5HJIXy7pbYdyuzBLTiInfb4Fri14=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/8B463984C16522A35FAAB60708D34C89D9D9F1E7.crl rsync://rpki-rsync.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/8B463984C16522A35FAAB60708D34C89D9D9F1E7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/8B463984C16522A35FAAB60708D34C89D9D9F1E7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 14:48:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:18:bd:ab:68:3b:81:2d:46:21:8a:80:d0:ce:c9:2c:8d:fc:4a:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B463984C16522A35FAAB60708D34C89D9D9F1E7 Validity Not Before: Jul 28 11:05:44 2026 GMT Not After : Jul 29 14:48:44 2026 GMT Subject: CN=91DE87FB4710BDAA7D8906B1B2271518F066E2A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ae:5d:ec:b7:9f:d1:68:ef:b3:d9:b3:47:e9: 58:c8:57:3e:c2:95:b1:ae:2a:48:24:1a:aa:9a:6f: 95:22:41:e4:ee:b1:77:97:e5:87:dc:57:9e:23:0b: 90:36:16:4b:92:e3:05:f1:bc:2a:d9:7d:45:ce:71: 0a:da:97:2f:a9:7c:fc:96:c6:f4:ee:db:b2:14:ed: e2:11:2f:00:8a:80:3e:02:80:a5:4d:8a:0e:69:25: 03:d7:f3:b6:92:9e:97:85:57:b0:a6:ab:5d:04:51: b4:10:2d:6e:fe:6d:78:82:11:47:e5:4b:65:94:90: b5:43:ef:92:51:b1:0b:7e:4b:5b:90:a5:f8:81:6d: 6e:a8:7f:98:b6:dd:d2:53:f4:84:b7:93:80:f3:e2: 93:52:1d:6f:2e:ac:df:3d:dc:ba:44:f8:2b:bd:14: 3f:51:51:94:76:45:6d:f2:e3:15:05:dc:74:00:ab: 3a:64:e4:8e:92:8b:cd:37:8a:0f:f9:f2:b7:94:57: 23:7f:be:76:ea:80:81:38:30:c1:99:c6:ef:34:b7: 6f:de:1d:d7:6a:2f:fa:90:fe:e9:bf:a0:3c:23:13: 17:3a:c3:72:4e:c4:7d:56:2c:88:bb:14:14:d0:bf: 46:a7:ad:9a:80:23:77:e4:0c:0a:62:8f:fa:50:b4: 2f:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:DE:87:FB:47:10:BD:AA:7D:89:06:B1:B2:27:15:18:F0:66:E2:A7 X509v3 Authority Key Identifier: keyid:8B:46:39:84:C1:65:22:A3:5F:AA:B6:07:08:D3:4C:89:D9:D9:F1:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/8B463984C16522A35FAAB60708D34C89D9D9F1E7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/8B463984C16522A35FAAB60708D34C89D9D9F1E7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/8B463984C16522A35FAAB60708D34C89D9D9F1E7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:68:31:91:bf:78:29:0f:8c:d2:5f:3a:79:4f:09:34:9c:a7: 32:97:9e:7a:31:35:cd:4b:03:9c:32:c1:cd:0a:4e:95:f5:a7: 38:c0:06:9f:70:37:2f:82:4b:ad:0e:ea:92:4c:b4:c0:18:e7: 6f:13:0e:84:0c:6f:76:05:2b:1a:72:06:21:30:30:aa:a4:61: 21:18:9e:dc:02:8b:b2:33:73:85:d6:e6:7e:61:92:d4:d9:a3: f7:35:1f:db:e0:1d:ba:d9:8f:2e:36:38:ee:0a:a3:e1:d6:68: 45:81:85:9b:11:34:a0:1d:65:5e:9b:8c:52:46:0b:94:6c:4c: 83:a8:fd:b5:f8:20:f5:90:8f:41:96:80:0f:98:6a:e3:f5:9f: 1e:89:81:42:9c:97:3b:e5:44:e7:58:9b:c4:e4:33:7e:01:17: 98:d9:61:c0:e8:dd:77:40:9d:b7:a1:1d:f8:ea:09:f3:a6:0b: b3:77:35:90:bb:72:1b:65:2f:35:66:66:a5:a1:a2:ae:d0:ac: 5a:47:a6:c7:fc:7a:6f:38:41:78:18:8f:10:91:00:17:d8:b0: 63:69:24:2b:3c:f5:bb:d4:82:7f:2a:dd:d6:2d:05:f8:1b:e2: c7:ed:5d:f2:e5:c9:f0:85:c6:28:46:1c:f9:55:89:c1:75:3c: c6:99:4b:48 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQhi9q2g7gS1GIYqA0M7JLI38SikwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEI0NjM5ODRDMTY1MjJBMzVGQUFCNjA3MDhEMzRDODlE OUQ5RjFFNzAeFw0yNjA3MjgxMTA1NDRaFw0yNjA3MjkxNDQ4NDRaMDMxMTAvBgNV BAMTKDkxREU4N0ZCNDcxMEJEQUE3RDg5MDZCMUIyMjcxNTE4RjA2NkUyQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIrl3st5/RaO+z2bNH6VjIVz7C lbGuKkgkGqqab5UiQeTusXeX5YfcV54jC5A2FkuS4wXxvCrZfUXOcQraly+pfPyW xvTu27IU7eIRLwCKgD4CgKVNig5pJQPX87aSnpeFV7Cmq10EUbQQLW7+bXiCEUfl S2WUkLVD75JRsQt+S1uQpfiBbW6of5i23dJT9IS3k4Dz4pNSHW8urN893LpE+Cu9 FD9RUZR2RW3y4xUF3HQAqzpk5I6Si803ig/58reUVyN/vnbqgIE4MMGZxu80t2/e HddqL/qQ/um/oDwjExc6w3JOxH1WLIi7FBTQv0anrZqAI3fkDApij/pQtC8HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkd6H+0cQvap9iQaxsicVGPBm4qcwHwYDVR0j BBgwFoAUi0Y5hMFlIqNfqrYHCNNMidnZ8ecwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWQ3NTUzNDctNmIxYy00MmMxLTlmNTQtZDdlYWIyMmUxODJjLzAvOEI0NjM5ODRD MTY1MjJBMzVGQUFCNjA3MDhEMzRDODlEOUQ5RjFFNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC84QjQ2Mzk4NEMxNjUyMkEzNUZBQUI2MDcwOEQzNEM4OUQ5RDlG MUU3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWQ3NTUzNDctNmIxYy00MmMxLTlm NTQtZDdlYWIyMmUxODJjLzAvOEI0NjM5ODRDMTY1MjJBMzVGQUFCNjA3MDhEMzRD ODlEOUQ5RjFFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG9oMZG/eCkPjNJfOnlPCTScpzKXnnoxNc1L A5wywc0KTpX1pzjABp9wNy+CS60O6pJMtMAY528TDoQMb3YFKxpyBiEwMKqkYSEY ntwCi7Izc4XW5n5hktTZo/c1H9vgHbrZjy42OO4Ko+HWaEWBhZsRNKAdZV6bjFJG C5RsTIOo/bX4IPWQj0GWgA+YauP1nx6JgUKclzvlROdYm8TkM34BF5jZYcDo3XdA nbehHfjqCfOmC7N3NZC7chtlLzVmZqWhoq7QrFpHpsf8em84QXgYjxCRABfYsGNp JCs89bvUgn8q3dYtBfgb4sftXfLlyfCFxihGHPlVicF1PMaZS0g= -----END CERTIFICATE-----Generated at Wed Jul 29 06:03:54 2026 by rpki-client