$ rpki-client -vvf rpki-rsync.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/D2825506798E48EE4F6BD0B7C8A4B980BDF3FD89.mft File: D2825506798E48EE4F6BD0B7C8A4B980BDF3FD89.mft (raw, json) Hash identifier: La8y6uPx1ANLXwhKBzIPpdt29+cTTz39mYjDIujo62Y= Subject key identifier: C8:8A:CB:6F:D5:42:BA:AF:D7:44:54:FC:1D:58:A8:F3:E1:28:08:4E Authority key identifier: D2:82:55:06:79:8E:48:EE:4F:6B:D0:B7:C8:A4:B9:80:BD:F3:FD:89 Certificate issuer: /CN=D2825506798E48EE4F6BD0B7C8A4B980BDF3FD89 Certificate serial: 382129BA21C3C19A6602BEE16932ECC4EDAC5C6E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D2825506798E48EE4F6BD0B7C8A4B980BDF3FD89.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/D2825506798E48EE4F6BD0B7C8A4B980BDF3FD89.mft Manifest number: 75 Signing time: Tue 28 Jul 2026 22:29:35 +0000 Manifest this update: Tue 28 Jul 2026 22:24:35 +0000 Manifest next update: Thu 30 Jul 2026 00:32:35 +0000 Files and hashes: 1: D2825506798E48EE4F6BD0B7C8A4B980BDF3FD89.crl (hash: mVpdu0Z+V+2r78tuSM3RJuoperiJQjdr99zmKlZuCc4=) 2: 3130332e3137382e31362e302f32332d3233203d3e2039333431.roa (hash: L6oL2whYFSSKY1+OlvsQBxpegvioTL+JL/PrizaKM4w=) 3: 3130332e3137382e31362e302f32342d3234203d3e2039333431.roa (hash: dz8GDvSUHBxefCxM449tm0eNclhVLJnu4XpLW3XQ1J8=) 4: 3130332e3137382e31372e302f32342d3234203d3e2039333431.roa (hash: Jbbv7LheQBY4j7uxSO+OAvKD/NoLJjSel5LCZW8mlwI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/D2825506798E48EE4F6BD0B7C8A4B980BDF3FD89.crl rsync://rpki-rsync.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/D2825506798E48EE4F6BD0B7C8A4B980BDF3FD89.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D2825506798E48EE4F6BD0B7C8A4B980BDF3FD89.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 00:32:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:21:29:ba:21:c3:c1:9a:66:02:be:e1:69:32:ec:c4:ed:ac:5c:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2825506798E48EE4F6BD0B7C8A4B980BDF3FD89 Validity Not Before: Jul 28 22:24:35 2026 GMT Not After : Jul 30 00:32:35 2026 GMT Subject: CN=C88ACB6FD542BAAFD74454FC1D58A8F3E128084E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:f4:48:45:e1:4a:97:34:6d:42:0f:59:5f:d4: 4c:f2:4d:2b:17:25:22:e0:e4:c9:b4:e0:af:24:99: a9:13:a0:b2:f1:f8:cc:a7:28:76:e3:cb:2e:84:d3: e1:c8:5a:35:bb:75:81:7d:64:89:1e:55:18:5f:d6: b9:13:b6:22:77:5a:fd:2c:f1:07:d7:18:2f:9d:bd: 27:86:dd:c7:0e:32:25:6b:63:b4:b2:60:f9:34:34: c3:86:ff:85:56:d8:a3:55:47:38:65:58:22:aa:a6: eb:01:0c:0e:38:3d:c1:c1:dc:02:8c:52:a0:d2:33: 23:77:33:82:a1:da:a2:6d:d5:32:7b:cd:e2:c2:15: 81:d6:28:a2:8f:a9:d6:b6:83:0d:7c:c9:21:c5:f7: 1c:9e:e7:97:3c:10:2f:cb:eb:e1:5f:e0:de:58:fc: ca:5b:0c:72:13:ec:0c:27:6b:b7:da:08:4e:6f:76: b1:bd:a0:cf:34:9b:72:33:d0:58:c9:e2:38:3f:20: b5:bd:c6:ea:fa:ae:e3:32:0c:47:41:3e:99:94:da: b3:58:95:d8:73:aa:c9:b6:bb:88:0a:b0:7b:3a:9d: 11:23:aa:4d:87:0e:53:18:50:b4:9a:fa:20:f5:34: 4d:e8:75:43:76:1c:a8:bf:e8:22:42:61:d5:4f:1b: 78:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:8A:CB:6F:D5:42:BA:AF:D7:44:54:FC:1D:58:A8:F3:E1:28:08:4E X509v3 Authority Key Identifier: keyid:D2:82:55:06:79:8E:48:EE:4F:6B:D0:B7:C8:A4:B9:80:BD:F3:FD:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/D2825506798E48EE4F6BD0B7C8A4B980BDF3FD89.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D2825506798E48EE4F6BD0B7C8A4B980BDF3FD89.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/D2825506798E48EE4F6BD0B7C8A4B980BDF3FD89.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:7d:aa:db:43:b3:05:b6:5f:37:72:54:77:99:f6:68:d2:78: d2:d0:4c:0c:8a:ba:7a:bb:69:e7:6d:18:44:78:aa:b6:58:97: f0:b8:8c:fb:78:b4:dd:f0:d2:02:90:33:f3:20:48:82:f0:c3: 3e:76:64:37:64:02:28:70:86:79:e0:11:18:ca:35:6a:dc:d5: f3:9e:55:48:3c:cc:0d:7f:32:02:0a:b8:80:6e:7c:65:a5:14: 20:ad:d3:cf:4c:7d:cd:25:49:10:65:61:3d:1d:e7:27:4f:e3: c1:e2:59:47:e0:a6:ef:49:f3:29:18:18:2d:59:1a:56:a1:4d: ec:a8:43:f6:a0:e6:fe:72:d8:02:6d:c0:f5:d7:a9:ec:5e:b4: 61:f6:1a:73:2e:38:20:78:6e:67:0b:c3:39:6f:c1:4f:da:43: 2e:e0:fd:61:30:bc:ab:78:2d:d3:cd:35:6b:59:3d:fc:79:06: 52:de:dd:e3:d8:77:e8:b0:5d:d0:aa:e0:c9:58:98:09:a9:2d: 26:57:45:7a:e6:bb:89:b9:7f:58:d0:ff:58:45:f5:5b:f7:b2: 61:55:b3:e6:48:00:88:df:51:7f:a0:97:68:4b:70:90:ee:ce: 97:76:95:97:1c:d6:26:7e:ac:ff:17:df:d1:ad:72:76:36:cd: 18:80:9a:23 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOCEpuiHDwZpmAr7haTLsxO2sXG4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDI4MjU1MDY3OThFNDhFRTRGNkJEMEI3QzhBNEI5ODBC REYzRkQ4OTAeFw0yNjA3MjgyMjI0MzVaFw0yNjA3MzAwMDMyMzVaMDMxMTAvBgNV BAMTKEM4OEFDQjZGRDU0MkJBQUZENzQ0NTRGQzFENThBOEYzRTEyODA4NEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo9EhF4UqXNG1CD1lf1EzyTSsX JSLg5Mm04K8kmakToLLx+MynKHbjyy6E0+HIWjW7dYF9ZIkeVRhf1rkTtiJ3Wv0s 8QfXGC+dvSeG3ccOMiVrY7SyYPk0NMOG/4VW2KNVRzhlWCKqpusBDA44PcHB3AKM UqDSMyN3M4Kh2qJt1TJ7zeLCFYHWKKKPqda2gw18ySHF9xye55c8EC/L6+Ff4N5Y /MpbDHIT7Awna7faCE5vdrG9oM80m3Iz0FjJ4jg/ILW9xur6ruMyDEdBPpmU2rNY ldhzqsm2u4gKsHs6nREjqk2HDlMYULSa+iD1NE3odUN2HKi/6CJCYdVPG3hPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyIrLb9VCuq/XRFT8HVio8+EoCE4wHwYDVR0j BBgwFoAU0oJVBnmOSO5Pa9C3yKS5gL3z/YkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGMxZTgwZDQtNmViZS00OTJjLWEwYzUtZDc1OTgyNzUzM2IzLzAvRDI4MjU1MDY3 OThFNDhFRTRGNkJEMEI3QzhBNEI5ODBCREYzRkQ4OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EMjgyNTUwNjc5OEU0OEVFNEY2QkQwQjdDOEE0Qjk4MEJERjNG RDg5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGMxZTgwZDQtNmViZS00OTJjLWEw YzUtZDc1OTgyNzUzM2IzLzAvRDI4MjU1MDY3OThFNDhFRTRGNkJEMEI3QzhBNEI5 ODBCREYzRkQ4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABh9qttDswW2XzdyVHeZ9mjSeNLQTAyKunq7 aedtGER4qrZYl/C4jPt4tN3w0gKQM/MgSILwwz52ZDdkAihwhnngERjKNWrc1fOe VUg8zA1/MgIKuIBufGWlFCCt089Mfc0lSRBlYT0d5ydP48HiWUfgpu9J8ykYGC1Z GlahTeyoQ/ag5v5y2AJtwPXXqexetGH2GnMuOCB4bmcLwzlvwU/aQy7g/WEwvKt4 LdPNNWtZPfx5BlLe3ePYd+iwXdCq4MlYmAmpLSZXRXrmu4m5f1jQ/1hF9Vv3smFV s+ZIAIjfUX+gl2hLcJDuzpd2lZcc1iZ+rP8X39GtcnY2zRiAmiM= -----END CERTIFICATE-----Generated at Wed Jul 29 09:12:01 2026 by rpki-client