$ rpki-client -vvf rpki-rsync.idnic.net/repo/1ee94014-87fa-4bc2-b1c6-7fd2a89476f3/0/8863D43C2CD36E9DE28C7E55F1891CC25C4F2985.mft File: 8863D43C2CD36E9DE28C7E55F1891CC25C4F2985.mft (raw, json) Hash identifier: YX+CvKcNMCfSL9ZEwNBBVH1kumkxAQJHLExZbMn0dYo= Subject key identifier: 21:40:9B:75:91:56:C9:91:9B:12:72:C2:5A:06:D2:02:0D:E3:FD:64 Authority key identifier: 88:63:D4:3C:2C:D3:6E:9D:E2:8C:7E:55:F1:89:1C:C2:5C:4F:29:85 Certificate issuer: /CN=8863D43C2CD36E9DE28C7E55F1891CC25C4F2985 Certificate serial: 2153FDCA76F7931647FD465BA52F14B28751D6C4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8863D43C2CD36E9DE28C7E55F1891CC25C4F2985.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1ee94014-87fa-4bc2-b1c6-7fd2a89476f3/0/8863D43C2CD36E9DE28C7E55F1891CC25C4F2985.mft Manifest number: 77 Signing time: Tue 28 Jul 2026 22:44:49 +0000 Manifest this update: Tue 28 Jul 2026 22:39:49 +0000 Manifest next update: Wed 29 Jul 2026 23:45:49 +0000 Files and hashes: 1: 8863D43C2CD36E9DE28C7E55F1891CC25C4F2985.crl (hash: B82crTTu8qHXYM/YvoOQ7I9cze2KXDKg+QhB5lNfRwM=) 2: 3230322e34372e3138382e302f32342d3234203d3e203435333035.roa (hash: YJRCBupflF/I8POF8sMQ3AXgFo1nrT6mZHr4XrUFzvU=) 3: 3230322e34372e3138382e302f32332d3234203d3e203435333035.roa (hash: 0+nHSjmEBtHrdpW5swBsy/CGgBdToecJRrJ4YRQ1Ieo=) 4: 3230322e34372e3138392e302f32342d3234203d3e203435333035.roa (hash: l0DIBrvHKOmdXYA8EMn7r3ept4hzvTyfATy5T2AkXgc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1ee94014-87fa-4bc2-b1c6-7fd2a89476f3/0/8863D43C2CD36E9DE28C7E55F1891CC25C4F2985.crl rsync://rpki-rsync.idnic.net/repo/1ee94014-87fa-4bc2-b1c6-7fd2a89476f3/0/8863D43C2CD36E9DE28C7E55F1891CC25C4F2985.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8863D43C2CD36E9DE28C7E55F1891CC25C4F2985.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 23:45:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:53:fd:ca:76:f7:93:16:47:fd:46:5b:a5:2f:14:b2:87:51:d6:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8863D43C2CD36E9DE28C7E55F1891CC25C4F2985 Validity Not Before: Jul 28 22:39:49 2026 GMT Not After : Jul 29 23:45:49 2026 GMT Subject: CN=21409B759156C9919B1272C25A06D2020DE3FD64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ac:ca:88:95:c4:78:b3:c1:30:89:4b:f1:47: ee:33:f4:cc:1f:9b:7c:52:bb:2b:2f:fa:e3:82:df: 85:64:3b:18:22:5d:3f:f5:f0:79:34:6d:dc:53:95: 11:f6:74:37:38:47:ae:bc:40:9d:62:2f:b8:fc:0c: e8:5d:7a:02:5d:22:9a:f1:ac:b9:6b:9b:ee:3e:b4: c9:27:54:a0:29:89:b7:ed:5f:02:3b:55:64:2c:b6: 85:23:6f:bf:29:cc:51:65:b8:91:22:d7:74:95:d0: d5:51:e2:84:fa:16:1f:0b:1d:9f:9d:fb:5d:c1:f9: da:98:c6:ca:db:62:ea:cb:be:38:5a:2d:86:f0:64: df:38:d4:b5:5c:82:d5:22:f1:f2:26:8b:da:1c:31: d4:ef:fb:f2:f1:bb:91:ac:51:ee:e3:3f:11:3d:96: 9f:02:70:99:89:73:01:35:69:33:1a:c3:77:40:bf: ee:b7:c0:3a:4a:a8:6e:58:ce:80:7f:ab:05:24:44: 27:2a:09:6b:cc:54:f0:7b:6c:30:16:48:17:83:47: 14:7d:7a:10:45:16:ec:4b:1a:9b:a7:40:be:7e:40: 6c:76:98:45:db:4b:8e:ac:52:cb:e1:8b:5b:86:ff: a4:04:b9:b1:84:9d:52:3f:78:b6:89:2f:04:10:0b: 3c:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:40:9B:75:91:56:C9:91:9B:12:72:C2:5A:06:D2:02:0D:E3:FD:64 X509v3 Authority Key Identifier: keyid:88:63:D4:3C:2C:D3:6E:9D:E2:8C:7E:55:F1:89:1C:C2:5C:4F:29:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1ee94014-87fa-4bc2-b1c6-7fd2a89476f3/0/8863D43C2CD36E9DE28C7E55F1891CC25C4F2985.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8863D43C2CD36E9DE28C7E55F1891CC25C4F2985.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1ee94014-87fa-4bc2-b1c6-7fd2a89476f3/0/8863D43C2CD36E9DE28C7E55F1891CC25C4F2985.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:77:10:8f:9b:9a:c0:7c:86:ed:01:9a:29:83:1a:63:57:19: a7:32:bd:01:22:36:f5:ec:1f:e7:c8:b5:d6:37:03:e4:6e:b4: ca:1f:82:b5:fe:d0:6f:ae:f6:9a:e8:dc:f4:1d:e8:e6:de:e2: 41:0c:45:35:6c:99:10:bf:40:c9:6d:43:e0:b8:12:9b:c2:21: 65:12:e8:36:d9:63:df:27:5d:c7:d7:b7:f9:fe:61:5e:01:dc: bc:70:f9:40:bc:e2:c7:41:3f:62:10:d1:e2:69:fa:4b:0c:db: 54:90:c0:08:48:70:60:af:c5:aa:22:27:5a:0a:e5:7f:93:56: b6:9d:76:a7:3c:50:08:4f:70:4c:14:bf:1a:18:2d:9d:a1:30: da:38:8a:fc:20:de:81:2a:41:46:ae:56:b3:e0:05:a9:6c:0f: bf:96:54:1d:6b:c5:c9:d8:05:f3:72:1a:8b:22:12:f6:13:d7: bc:a8:76:d6:67:58:23:df:c6:85:e2:76:3f:64:ec:7f:04:5a: a5:ac:7a:5e:fb:c9:52:40:e9:89:f5:fe:84:80:06:13:bc:87: 57:41:f2:85:38:3a:59:b8:b7:ab:63:42:e2:28:ff:60:47:26: 31:f3:f3:7d:e5:cc:25:4f:cf:9b:47:09:7f:7a:66:38:92:fb: c5:76:94:b5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIVP9ynb3kxZH/UZbpS8UsodR1sQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODg2M0Q0M0MyQ0QzNkU5REUyOEM3RTU1RjE4OTFDQzI1 QzRGMjk4NTAeFw0yNjA3MjgyMjM5NDlaFw0yNjA3MjkyMzQ1NDlaMDMxMTAvBgNV BAMTKDIxNDA5Qjc1OTE1NkM5OTE5QjEyNzJDMjVBMDZEMjAyMERFM0ZENjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNrMqIlcR4s8EwiUvxR+4z9Mwf m3xSuysv+uOC34VkOxgiXT/18Hk0bdxTlRH2dDc4R668QJ1iL7j8DOhdegJdIprx rLlrm+4+tMknVKApibftXwI7VWQstoUjb78pzFFluJEi13SV0NVR4oT6Fh8LHZ+d +13B+dqYxsrbYurLvjhaLYbwZN841LVcgtUi8fImi9ocMdTv+/Lxu5GsUe7jPxE9 lp8CcJmJcwE1aTMaw3dAv+63wDpKqG5YzoB/qwUkRCcqCWvMVPB7bDAWSBeDRxR9 ehBFFuxLGpunQL5+QGx2mEXbS46sUsvhi1uG/6QEubGEnVI/eLaJLwQQCzzhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIUCbdZFWyZGbEnLCWgbSAg3j/WQwHwYDVR0j BBgwFoAUiGPUPCzTbp3ijH5V8YkcwlxPKYUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWVlOTQwMTQtODdmYS00YmMyLWIxYzYtN2ZkMmE4OTQ3NmYzLzAvODg2M0Q0M0My Q0QzNkU5REUyOEM3RTU1RjE4OTFDQzI1QzRGMjk4NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84ODYzRDQzQzJDRDM2RTlERTI4QzdFNTVGMTg5MUNDMjVDNEYy OTg1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWVlOTQwMTQtODdmYS00YmMyLWIx YzYtN2ZkMmE4OTQ3NmYzLzAvODg2M0Q0M0MyQ0QzNkU5REUyOEM3RTU1RjE4OTFD QzI1QzRGMjk4NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGd3EI+bmsB8hu0BmimDGmNXGacyvQEiNvXs H+fItdY3A+RutMofgrX+0G+u9pro3PQd6Obe4kEMRTVsmRC/QMltQ+C4EpvCIWUS 6DbZY98nXcfXt/n+YV4B3Lxw+UC84sdBP2IQ0eJp+ksM21SQwAhIcGCvxaoiJ1oK 5X+TVraddqc8UAhPcEwUvxoYLZ2hMNo4ivwg3oEqQUauVrPgBalsD7+WVB1rxcnY BfNyGosiEvYT17yodtZnWCPfxoXidj9k7H8EWqWsel77yVJA6Yn1/oSABhO8h1dB 8oU4Olm4t6tjQuIo/2BHJjHz833lzCVPz5tHCX96ZjiS+8V2lLU= -----END CERTIFICATE-----Generated at Wed Jul 29 05:26:40 2026 by rpki-client