$ rpki-client -vvf rpki-rsync.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/A08BAF2D88514EC041A87F092E6B6A521F3349F3.mft File: A08BAF2D88514EC041A87F092E6B6A521F3349F3.mft (raw, json) Hash identifier: L/TlnvaK1jQFj4788nIfrsP2l4uLr9kNFSLRjso6vkQ= Subject key identifier: B8:E5:E8:E0:A7:E7:82:5D:12:FD:CB:4B:44:45:72:92:CD:27:66:66 Authority key identifier: A0:8B:AF:2D:88:51:4E:C0:41:A8:7F:09:2E:6B:6A:52:1F:33:49:F3 Certificate issuer: /CN=A08BAF2D88514EC041A87F092E6B6A521F3349F3 Certificate serial: 71425F6FDF9274C3D743B179C041106BD0C3401D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A08BAF2D88514EC041A87F092E6B6A521F3349F3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/A08BAF2D88514EC041A87F092E6B6A521F3349F3.mft Manifest number: 75 Signing time: Tue 28 Jul 2026 17:53:51 +0000 Manifest this update: Tue 28 Jul 2026 17:48:51 +0000 Manifest next update: Wed 29 Jul 2026 19:11:51 +0000 Files and hashes: 1: 3130332e33312e3235302e302f32342d3234203d3e203538343737.roa (hash: 2ZuwNGg62iU8raGM9TYM3A0jrh0UG5HDKyy6dwXOLS0=) 2: 3130332e33312e3235312e302f32342d3234203d3e203538343737.roa (hash: nNs3zCmZDfGYSq9FVm5Dz3ukk7qRss0F7cyqFrIdiUs=) 3: 34352e36342e39362e302f32342d3234203d3e203538343737.roa (hash: 5ev3rc/Wu45AIU9QKYFuF4qHEkUSlKkTnsZ3JdywnVM=) 4: 34352e36342e39372e302f32342d3234203d3e20313335333630.roa (hash: eVL30F9FmWg9xfcbeGTmvP0LqqOdBiZkfgWJnF3c51k=) 5: 323030313a6466303a3237333a3a2f34382d3438203d3e203538343737.roa (hash: +zXAXB63RMz7uGSWbbDCPnLGVqN8tZG7EPNtc0tQGQw=) 6: 34352e36342e39382e302f32342d3234203d3e203538343737.roa (hash: /BLy7k3doovw3jQVTXaYTnBas7DL4Zfrgn7U9J4fWVA=) 7: 3130332e32382e3134392e302f32342d3234203d3e203538343737.roa (hash: qDJ/c5qWojiJYfc9eIqgLudqj78rlDzX+1L2SPWNYTQ=) 8: A08BAF2D88514EC041A87F092E6B6A521F3349F3.crl (hash: YLt69RKiVe7lzvgjeOJ6mPds3yfbHruvBTNFu07FcIY=) 9: 3130332e32382e3134382e302f32342d3234203d3e203538343737.roa (hash: xw+egA02OX5uOYAGnedHg8tG8xIxYeukOfUcUDfNNIQ=) 10: 34352e36342e39392e302f32342d3234203d3e203538343737.roa (hash: dyN12mfoRjXFlNHqIFEChK7+mIsDEFYombQgQudcekM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/A08BAF2D88514EC041A87F092E6B6A521F3349F3.crl rsync://rpki-rsync.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/A08BAF2D88514EC041A87F092E6B6A521F3349F3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A08BAF2D88514EC041A87F092E6B6A521F3349F3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 19:11:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:42:5f:6f:df:92:74:c3:d7:43:b1:79:c0:41:10:6b:d0:c3:40:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A08BAF2D88514EC041A87F092E6B6A521F3349F3 Validity Not Before: Jul 28 17:48:51 2026 GMT Not After : Jul 29 19:11:51 2026 GMT Subject: CN=B8E5E8E0A7E7825D12FDCB4B44457292CD276666 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:a0:c6:14:81:0c:69:7e:e9:22:bb:ef:43:c0: b6:74:3a:19:26:88:ea:20:24:35:ed:36:03:b6:9c: e1:0e:e3:13:ce:5b:b0:60:b7:cd:05:c1:36:9f:d5: c4:d6:e9:19:43:8c:c6:7a:d9:ff:86:85:99:81:29: f0:85:10:a8:e3:4e:75:46:7b:77:79:98:ee:0c:29: a2:a4:74:2d:ae:b2:06:13:01:64:7f:5d:de:7e:60: c5:3f:bf:d6:b6:34:4a:e4:ca:2b:f7:b7:b9:87:63: 03:64:32:fd:c6:79:c9:49:a9:ef:46:18:2a:1b:3e: 88:48:5b:e7:e9:76:06:ec:82:ae:ce:aa:24:66:5c: 60:e4:4b:5a:2c:54:a1:71:d6:1e:d1:29:54:1a:c8: 0e:b7:52:80:04:5a:9e:7a:23:fc:e7:8b:14:f5:e5: 88:15:a2:c2:08:53:86:9f:4d:b7:36:7f:6b:03:fe: f0:64:54:e0:2c:f3:05:1b:67:ef:a3:c3:d5:1b:21: cb:0c:53:b3:f0:0a:8a:5f:8d:76:10:ad:30:39:4c: ed:06:23:a9:62:13:b9:ec:89:cd:51:82:0b:30:f6: 4b:4f:34:1a:0e:94:e0:1d:7c:89:11:10:b8:b9:7f: 2a:09:8d:12:86:62:e3:fe:22:81:aa:ba:75:f4:57: d5:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:E5:E8:E0:A7:E7:82:5D:12:FD:CB:4B:44:45:72:92:CD:27:66:66 X509v3 Authority Key Identifier: keyid:A0:8B:AF:2D:88:51:4E:C0:41:A8:7F:09:2E:6B:6A:52:1F:33:49:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/A08BAF2D88514EC041A87F092E6B6A521F3349F3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A08BAF2D88514EC041A87F092E6B6A521F3349F3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/A08BAF2D88514EC041A87F092E6B6A521F3349F3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:08:8b:d3:54:c5:81:9c:c7:e7:9b:24:b8:75:a2:e8:b1:9b: fa:ff:7b:fa:68:d7:b8:6a:4e:f0:04:55:0f:eb:8b:2d:37:8d: 3f:9c:11:56:76:99:db:15:aa:9c:78:0e:ee:ed:74:44:e7:67: ec:78:47:49:9a:59:e7:7b:0e:ff:38:c5:c4:6d:7d:77:d5:2b: 66:62:34:72:7b:7e:60:56:ce:0c:65:9f:2b:08:52:e3:35:ec: 6e:92:fc:51:dc:eb:84:ae:f5:c0:fb:5d:24:40:e3:65:56:d3: ab:b0:2c:b0:32:1f:42:db:3b:fa:45:8a:99:12:bc:66:d8:d6: ff:f4:64:5b:58:f0:2d:d4:d8:5a:b3:3c:8b:9f:25:a6:e7:3d: 88:fa:fd:9f:6a:b0:46:a2:9b:43:49:f6:38:c6:0e:10:f3:3e: fb:0c:b4:34:95:e2:1c:ae:13:8e:0d:2f:53:4d:ff:0a:f1:11: 4d:cc:9b:99:0e:5a:14:d0:9c:fa:df:28:b5:df:13:72:00:09: d4:e3:da:85:82:e4:c0:c3:73:bf:12:c7:f6:96:97:99:be:3f: f0:43:f8:dc:7d:05:90:83:14:e7:32:a5:06:8a:f5:c2:7c:18: c7:af:80:86:3b:57:8b:65:93:99:66:c5:c3:c7:10:70:d5:26: d7:fa:9f:b5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcUJfb9+SdMPXQ7F5wEEQa9DDQB0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTA4QkFGMkQ4ODUxNEVDMDQxQTg3RjA5MkU2QjZBNTIx RjMzNDlGMzAeFw0yNjA3MjgxNzQ4NTFaFw0yNjA3MjkxOTExNTFaMDMxMTAvBgNV BAMTKEI4RTVFOEUwQTdFNzgyNUQxMkZEQ0I0QjQ0NDU3MjkyQ0QyNzY2NjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWoMYUgQxpfukiu+9DwLZ0Ohkm iOogJDXtNgO2nOEO4xPOW7Bgt80FwTaf1cTW6RlDjMZ62f+GhZmBKfCFEKjjTnVG e3d5mO4MKaKkdC2usgYTAWR/Xd5+YMU/v9a2NErkyiv3t7mHYwNkMv3GeclJqe9G GCobPohIW+fpdgbsgq7OqiRmXGDkS1osVKFx1h7RKVQayA63UoAEWp56I/znixT1 5YgVosIIU4afTbc2f2sD/vBkVOAs8wUbZ++jw9UbIcsMU7PwCopfjXYQrTA5TO0G I6liE7nsic1Rggsw9ktPNBoOlOAdfIkRELi5fyoJjRKGYuP+IoGqunX0V9XFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuOXo4Kfngl0S/ctLREVyks0nZmYwHwYDVR0j BBgwFoAUoIuvLYhRTsBBqH8JLmtqUh8zSfMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGJjNmFhMDMtMWI0ZC00MzhlLWE5ZjMtZWZlYWFlNmIwOTIxLzAvQTA4QkFGMkQ4 ODUxNEVDMDQxQTg3RjA5MkU2QjZBNTIxRjMzNDlGMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BMDhCQUYyRDg4NTE0RUMwNDFBODdGMDkyRTZCNkE1MjFGMzM0 OUYzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGJjNmFhMDMtMWI0ZC00MzhlLWE5 ZjMtZWZlYWFlNmIwOTIxLzAvQTA4QkFGMkQ4ODUxNEVDMDQxQTg3RjA5MkU2QjZB NTIxRjMzNDlGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI4Ii9NUxYGcx+ebJLh1ouixm/r/e/po17hq TvAEVQ/riy03jT+cEVZ2mdsVqpx4Du7tdETnZ+x4R0maWed7Dv84xcRtfXfVK2Zi NHJ7fmBWzgxlnysIUuM17G6S/FHc64Su9cD7XSRA42VW06uwLLAyH0LbO/pFipkS vGbY1v/0ZFtY8C3U2FqzPIufJabnPYj6/Z9qsEaim0NJ9jjGDhDzPvsMtDSV4hyu E44NL1NN/wrxEU3Mm5kOWhTQnPrfKLXfE3IACdTj2oWC5MDDc78Sx/aWl5m+P/BD +Nx9BZCDFOcypQaK9cJ8GMevgIY7V4tlk5lmxcPHEHDVJtf6n7U= -----END CERTIFICATE-----Generated at Wed Jul 29 11:14:52 2026 by rpki-client