$ rpki-client -vvf rpki-rsync.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/873409842DEE948D3DE05C618194C87A259E04BF.mft File: 873409842DEE948D3DE05C618194C87A259E04BF.mft (raw, json) Hash identifier: bCx6aG8xOnvHvKQ/dAFnh0r1YhVUGYcSp/Rr83GV/k4= Subject key identifier: 0A:7D:09:77:D7:D8:2B:2C:26:76:66:FC:79:9C:D3:20:EF:84:01:D7 Authority key identifier: 87:34:09:84:2D:EE:94:8D:3D:E0:5C:61:81:94:C8:7A:25:9E:04:BF Certificate issuer: /CN=873409842DEE948D3DE05C618194C87A259E04BF Certificate serial: 20369B491EB5F0B6E8C769A2CD61FCA2DECD58F9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/873409842DEE948D3DE05C618194C87A259E04BF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/873409842DEE948D3DE05C618194C87A259E04BF.mft Manifest number: 76 Signing time: Tue 28 Jul 2026 21:28:07 +0000 Manifest this update: Tue 28 Jul 2026 21:23:07 +0000 Manifest next update: Thu 30 Jul 2026 00:09:07 +0000 Files and hashes: 1: 873409842DEE948D3DE05C618194C87A259E04BF.crl (hash: HR6DqbEFxZQ+awXQHkbpm0NFuEjoXAUqxMk+Y/6L5F8=) 2: 3130332e3135332e3234372e302f32342d3234203d3e20313430343735.roa (hash: OzhJdHffqoSTJ5pFjxmQ04VEvXqHaJWqkM8YRHVnaeQ=) 3: 323430363a346563303a3a2f33322d3332203d3e20313430343735.roa (hash: grkHY3zf57XsShC3GloC/Ysy8CRxkBA2HYvszXntAaM=) 4: 3130332e3135332e3234362e302f32342d3234203d3e20313430343735.roa (hash: M8QTZuDsRpJ1yY06WkCYeFwFPm5+TLSWxZVTx0+FX3U=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/873409842DEE948D3DE05C618194C87A259E04BF.crl rsync://rpki-rsync.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/873409842DEE948D3DE05C618194C87A259E04BF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/873409842DEE948D3DE05C618194C87A259E04BF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 00:09:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:36:9b:49:1e:b5:f0:b6:e8:c7:69:a2:cd:61:fc:a2:de:cd:58:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=873409842DEE948D3DE05C618194C87A259E04BF Validity Not Before: Jul 28 21:23:07 2026 GMT Not After : Jul 30 00:09:07 2026 GMT Subject: CN=0A7D0977D7D82B2C267666FC799CD320EF8401D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:72:7d:0d:08:ac:1c:4b:65:c3:9d:e1:78:54: 7f:2d:5e:de:97:25:f1:7e:1c:0f:76:52:6e:a2:82: 63:61:a5:86:a4:32:ee:3a:5e:07:78:8a:78:08:f2: 66:66:28:c9:82:82:2e:6a:da:57:34:04:db:b2:53: cf:12:77:c8:cf:8b:b0:78:b1:76:4b:3c:cc:85:1f: cc:76:79:6e:db:ff:95:eb:8a:12:40:23:6a:fe:d7: a8:5e:7c:2c:99:05:a7:36:d4:0e:24:bf:03:60:08: eb:8d:1d:a9:73:fc:18:a7:ba:92:5d:f4:c3:8e:e6: c6:c3:19:6a:b0:83:33:5d:ce:3b:5c:f8:08:5d:0f: 90:58:e1:5d:7c:a0:df:f9:cf:c6:b9:c8:02:2d:4c: fa:81:9d:22:ab:05:0b:ed:50:b0:25:8e:05:db:47: c9:99:76:fe:e7:57:82:51:9f:c8:59:3e:1c:7c:d8: e7:02:fc:29:de:8b:8a:f8:a7:69:68:e7:2f:89:f6: 4b:9b:64:90:79:be:83:b1:6b:b6:8d:41:a0:d6:5e: 0b:a6:e7:d2:da:3b:3e:70:0a:25:80:86:18:cd:22: d9:d5:0b:e9:16:93:58:d6:24:dc:7e:8d:07:10:40: 93:b3:88:e0:b4:a1:7a:fe:90:cb:55:42:f4:04:c1: c0:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:7D:09:77:D7:D8:2B:2C:26:76:66:FC:79:9C:D3:20:EF:84:01:D7 X509v3 Authority Key Identifier: keyid:87:34:09:84:2D:EE:94:8D:3D:E0:5C:61:81:94:C8:7A:25:9E:04:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/873409842DEE948D3DE05C618194C87A259E04BF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/873409842DEE948D3DE05C618194C87A259E04BF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/873409842DEE948D3DE05C618194C87A259E04BF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption f1:87:db:5b:f5:8b:a4:8d:9b:a2:eb:a4:73:93:a9:51:47:c1: 79:6a:e2:e0:53:35:62:53:30:c6:f4:7a:ed:80:8b:c0:31:f0: 1d:f0:85:1e:e2:30:0c:ee:f1:65:82:68:4d:15:91:c1:f0:84: df:69:b1:43:55:b1:7f:60:97:1c:54:7f:49:ac:5f:ff:89:73: ef:de:73:e9:fd:d8:b4:5c:fb:f4:47:7a:01:e5:78:ec:ca:b4: 3b:ee:be:34:66:55:28:66:06:9c:97:1e:82:1d:b1:9b:f2:83: 7d:85:a1:25:0e:c2:0f:8f:f0:17:5f:5e:bc:9b:e3:e6:75:9f: bd:d8:c8:0c:25:fa:a8:54:14:dc:05:7a:96:80:a0:e1:4b:9e: 2b:81:76:45:7c:d8:6b:d5:2b:2a:38:f8:89:6c:b9:79:99:55: 99:b0:50:52:b8:f4:51:0b:c3:a7:24:3f:3f:db:17:b5:23:86: 44:85:4a:17:a2:97:1d:d9:e7:16:b4:0d:cf:c7:84:5a:9d:04: 1f:7e:c8:fc:e0:cc:e1:3d:a6:b6:c9:9f:60:e1:9c:40:02:8e: 2a:e5:d8:e9:cd:43:eb:21:50:ef:3e:79:c1:8f:c7:89:ee:e8: 6b:f2:8a:10:32:a7:59:25:b6:ae:40:ed:e2:60:bf:03:1e:31: 72:9e:03:fc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIDabSR618Lbox2mizWH8ot7NWPkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODczNDA5ODQyREVFOTQ4RDNERTA1QzYxODE5NEM4N0Ey NTlFMDRCRjAeFw0yNjA3MjgyMTIzMDdaFw0yNjA3MzAwMDA5MDdaMDMxMTAvBgNV BAMTKDBBN0QwOTc3RDdEODJCMkMyNjc2NjZGQzc5OUNEMzIwRUY4NDAxRDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3cn0NCKwcS2XDneF4VH8tXt6X JfF+HA92Um6igmNhpYakMu46Xgd4ingI8mZmKMmCgi5q2lc0BNuyU88Sd8jPi7B4 sXZLPMyFH8x2eW7b/5XrihJAI2r+16hefCyZBac21A4kvwNgCOuNHalz/BinupJd 9MOO5sbDGWqwgzNdzjtc+AhdD5BY4V18oN/5z8a5yAItTPqBnSKrBQvtULAljgXb R8mZdv7nV4JRn8hZPhx82OcC/Cnei4r4p2lo5y+J9kubZJB5voOxa7aNQaDWXgum 59LaOz5wCiWAhhjNItnVC+kWk1jWJNx+jQcQQJOziOC0oXr+kMtVQvQEwcA/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCn0Jd9fYKywmdmb8eZzTIO+EAdcwHwYDVR0j BBgwFoAUhzQJhC3ulI094FxhgZTIeiWeBL8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGRjZjQwNjctYTY5ZC00OTA4LWJlZTgtYjQ2NTViZGMxNWY4LzAvODczNDA5ODQy REVFOTQ4RDNERTA1QzYxODE5NEM4N0EyNTlFMDRCRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NzM0MDk4NDJERUU5NDhEM0RFMDVDNjE4MTk0Qzg3QTI1OUUw NEJGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGRjZjQwNjctYTY5ZC00OTA4LWJl ZTgtYjQ2NTViZGMxNWY4LzAvODczNDA5ODQyREVFOTQ4RDNERTA1QzYxODE5NEM4 N0EyNTlFMDRCRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAPGH21v1i6SNm6LrpHOTqVFHwXlq4uBTNWJT MMb0eu2Ai8Ax8B3whR7iMAzu8WWCaE0VkcHwhN9psUNVsX9glxxUf0msX/+Jc+/e c+n92LRc+/RHegHleOzKtDvuvjRmVShmBpyXHoIdsZvyg32FoSUOwg+P8BdfXryb 4+Z1n73YyAwl+qhUFNwFepaAoOFLniuBdkV82GvVKyo4+IlsuXmZVZmwUFK49FEL w6ckPz/bF7UjhkSFSheilx3Z5xa0Dc/HhFqdBB9+yPzgzOE9prbJn2DhnEACjirl 2OnNQ+shUO8+ecGPx4nu6GvyihAyp1kltq5A7eJgvwMeMXKeA/w= -----END CERTIFICATE-----Generated at Wed Jul 29 08:59:46 2026 by rpki-client