$ rpki-client -vvf rpki-rsync.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8E7D29B8B2E6F2F09B507FC36B3173162A4316E9.mft File: 8E7D29B8B2E6F2F09B507FC36B3173162A4316E9.mft (raw, json) Hash identifier: BNj1rEwzVPEU8hdbaY11uslroBYllq1PRnON11i64MQ= Subject key identifier: E0:02:95:A0:72:C1:0A:FB:80:F6:ED:79:DF:39:2F:25:4D:9C:54:CD Authority key identifier: 8E:7D:29:B8:B2:E6:F2:F0:9B:50:7F:C3:6B:31:73:16:2A:43:16:E9 Certificate issuer: /CN=8E7D29B8B2E6F2F09B507FC36B3173162A4316E9 Certificate serial: 1ABEC612B4589F1441D7CCB2EFF2E2ADFB191886 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8E7D29B8B2E6F2F09B507FC36B3173162A4316E9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8E7D29B8B2E6F2F09B507FC36B3173162A4316E9.mft Manifest number: 77 Signing time: Wed 29 Jul 2026 06:23:34 +0000 Manifest this update: Wed 29 Jul 2026 06:18:34 +0000 Manifest next update: Thu 30 Jul 2026 07:08:34 +0000 Files and hashes: 1: 3130332e3138362e3139342e302f32332d3234203d3e20313439373132.roa (hash: nhCth3GuuL56/ZX/YpeRjeCAIHYgJ/lFofg+gthNMoU=) 2: 3130332e3138362e3139342e302f32342d3234203d3e203438343635.roa (hash: 3gBu5z4wg47/tNqaD7YsE1EFFZZ6JYTR0325QFX63A0=) 3: 8E7D29B8B2E6F2F09B507FC36B3173162A4316E9.crl (hash: NpMlj8hZ/7YYCtDqtKWZLRaG1M6zVqgoh+2aKi/kj98=) 4: 3130332e3138362e3139342e302f32332d3233203d3e20313439373132.roa (hash: vEKBFb87szZHK58hOoWh27DXWyqF6KjiEygYywKcCcA=) 5: 3130332e3138362e3139352e302f32342d3234203d3e203438343635.roa (hash: r7dovsQ2SZSV7IfPAfAuGK0MlNXhEY5b9y9M8jygZbk=) 6: 3130332e3138362e3139342e302f32342d3234203d3e20313439373132.roa (hash: FAM0vFS+CEP/k4I2FWb6JASyBXq3gfqT8CiCE9WHTo0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8E7D29B8B2E6F2F09B507FC36B3173162A4316E9.crl rsync://rpki-rsync.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8E7D29B8B2E6F2F09B507FC36B3173162A4316E9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8E7D29B8B2E6F2F09B507FC36B3173162A4316E9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 07:08:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:be:c6:12:b4:58:9f:14:41:d7:cc:b2:ef:f2:e2:ad:fb:19:18:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E7D29B8B2E6F2F09B507FC36B3173162A4316E9 Validity Not Before: Jul 29 06:18:34 2026 GMT Not After : Jul 30 07:08:34 2026 GMT Subject: CN=E00295A072C10AFB80F6ED79DF392F254D9C54CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:94:60:a1:60:1f:28:df:48:f9:34:9a:a3:b2: 3f:ec:c9:a4:57:d9:60:c1:5d:be:15:cd:82:b1:65: d4:d3:32:7b:34:c6:b4:1e:80:59:4a:28:ed:73:a1: db:4d:ab:88:1e:30:5f:da:7f:94:3e:e3:7f:69:a0: 78:5f:26:09:b5:7e:b1:68:cb:ab:c1:51:ff:a4:1a: 26:d9:e6:af:43:64:97:6a:5f:68:1e:f3:71:bc:6c: 8a:d8:23:53:85:88:bb:6a:57:60:44:8f:33:f0:fb: 56:ad:45:42:f3:74:22:ae:c1:10:35:a3:ff:66:81: 7d:1a:7b:6f:87:2e:6b:cb:27:8c:35:8b:96:43:f8: 64:af:cf:af:16:d8:f5:1d:38:1b:0b:73:19:44:ff: 0b:4f:5c:bc:a5:be:91:cb:80:71:e2:c0:71:65:0b: c1:6a:80:f7:4c:01:54:b7:fa:0f:2e:1d:fd:da:f9: f4:3b:fb:83:f0:8d:3e:12:81:16:eb:91:83:ba:62: 04:e9:20:a5:7d:7b:c0:55:a5:bf:9c:8c:1b:82:74: 52:e9:22:45:ea:68:e0:c5:4b:4d:40:ee:6a:fe:98: 63:f3:68:11:fd:44:b9:cf:18:7d:0c:ea:7d:1c:80: 1c:76:dd:14:0f:3d:7d:d9:27:18:3e:f0:5f:64:c0: c6:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:02:95:A0:72:C1:0A:FB:80:F6:ED:79:DF:39:2F:25:4D:9C:54:CD X509v3 Authority Key Identifier: keyid:8E:7D:29:B8:B2:E6:F2:F0:9B:50:7F:C3:6B:31:73:16:2A:43:16:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8E7D29B8B2E6F2F09B507FC36B3173162A4316E9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8E7D29B8B2E6F2F09B507FC36B3173162A4316E9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8E7D29B8B2E6F2F09B507FC36B3173162A4316E9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:cb:af:4d:1f:a4:ae:29:a1:d7:22:4c:f1:fd:c6:8d:e3:af: bd:ea:c5:9b:a8:a6:b4:9c:f0:3b:04:e7:f4:03:28:19:22:13: bf:4b:6a:1f:00:14:af:10:16:99:70:49:dc:77:ed:41:43:68: a4:f1:21:4d:0e:99:d2:9b:af:28:6f:24:e7:5b:71:d6:6d:f8: 8e:92:de:62:d5:b1:ce:b5:8a:25:23:19:ed:cf:6f:8e:72:d4: 4e:1b:08:f5:56:89:4d:ff:fa:e4:ba:52:c5:b3:b0:44:89:61: 53:a8:d6:01:0e:66:05:50:08:db:c3:74:85:18:7c:0f:64:fa: ce:34:6f:9e:e9:9f:ee:1f:a2:14:82:89:9b:7e:34:4c:84:28: 63:26:7b:9d:40:1a:d4:0f:9f:f8:0c:ac:34:9e:31:ff:f1:f2: 2b:fe:42:2f:f4:30:db:65:a8:c8:77:12:57:9f:ba:9a:c6:61: ac:92:1b:f5:6b:ff:e0:86:ae:70:75:0f:33:1b:d4:77:7c:d5: be:14:20:9a:28:26:a5:a6:32:61:8b:07:b2:ac:59:f7:84:f4: 25:29:ab:c4:9d:7c:c2:38:42:f7:20:29:48:52:9a:8b:9c:e2: 80:84:2a:52:4f:3e:90:51:01:79:9d:30:dc:58:79:e8:39:3f: 6c:70:19:5d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGr7GErRYnxRB18yy7/LirfsZGIYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEU3RDI5QjhCMkU2RjJGMDlCNTA3RkMzNkIzMTczMTYy QTQzMTZFOTAeFw0yNjA3MjkwNjE4MzRaFw0yNjA3MzAwNzA4MzRaMDMxMTAvBgNV BAMTKEUwMDI5NUEwNzJDMTBBRkI4MEY2RUQ3OURGMzkyRjI1NEQ5QzU0Q0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrlGChYB8o30j5NJqjsj/syaRX 2WDBXb4VzYKxZdTTMns0xrQegFlKKO1zodtNq4geMF/af5Q+439poHhfJgm1frFo y6vBUf+kGibZ5q9DZJdqX2ge83G8bIrYI1OFiLtqV2BEjzPw+1atRULzdCKuwRA1 o/9mgX0ae2+HLmvLJ4w1i5ZD+GSvz68W2PUdOBsLcxlE/wtPXLylvpHLgHHiwHFl C8FqgPdMAVS3+g8uHf3a+fQ7+4PwjT4SgRbrkYO6YgTpIKV9e8BVpb+cjBuCdFLp IkXqaODFS01A7mr+mGPzaBH9RLnPGH0M6n0cgBx23RQPPX3ZJxg+8F9kwMYtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4AKVoHLBCvuA9u153zkvJU2cVM0wHwYDVR0j BBgwFoAUjn0puLLm8vCbUH/DazFzFipDFukwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTI1MmVhZDMtZGM4Zi00ZDg2LWFmY2YtYTE0MGU1Yjg3NTMyLzAvOEU3RDI5QjhC MkU2RjJGMDlCNTA3RkMzNkIzMTczMTYyQTQzMTZFOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84RTdEMjlCOEIyRTZGMkYwOUI1MDdGQzM2QjMxNzMxNjJBNDMx NkU5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTI1MmVhZDMtZGM4Zi00ZDg2LWFm Y2YtYTE0MGU1Yjg3NTMyLzAvOEU3RDI5QjhCMkU2RjJGMDlCNTA3RkMzNkIzMTcz MTYyQTQzMTZFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA/Lr00fpK4podciTPH9xo3jr73qxZuoprSc 8DsE5/QDKBkiE79Lah8AFK8QFplwSdx37UFDaKTxIU0OmdKbryhvJOdbcdZt+I6S 3mLVsc61iiUjGe3Pb45y1E4bCPVWiU3/+uS6UsWzsESJYVOo1gEOZgVQCNvDdIUY fA9k+s40b57pn+4fohSCiZt+NEyEKGMme51AGtQPn/gMrDSeMf/x8iv+Qi/0MNtl qMh3ElefuprGYaySG/Vr/+CGrnB1DzMb1Hd81b4UIJooJqWmMmGLB7KsWfeE9CUp q8SdfMI4QvcgKUhSmouc4oCEKlJPPpBRAXmdMNxYeeg5P2xwGV0= -----END CERTIFICATE-----Generated at Wed Jul 29 17:30:01 2026 by rpki-client