$ rpki-client -vvf rpki-rsync.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/D8435659F33EE1F7005A21C1387F49D353431808.mft File: D8435659F33EE1F7005A21C1387F49D353431808.mft (raw, json) Hash identifier: d33gJF0WgCn+xypul3r5EVuPixIlN1GWuq8qofpoLKE= Subject key identifier: 1E:AF:FF:35:A1:01:2A:51:FD:BF:42:23:BF:40:13:76:D9:C4:C3:00 Authority key identifier: D8:43:56:59:F3:3E:E1:F7:00:5A:21:C1:38:7F:49:D3:53:43:18:08 Certificate issuer: /CN=D8435659F33EE1F7005A21C1387F49D353431808 Certificate serial: 599A6F9B8E03ACFEF39CDF1EBC7C83CC7EEFAAF3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D8435659F33EE1F7005A21C1387F49D353431808.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/D8435659F33EE1F7005A21C1387F49D353431808.mft Manifest number: 75 Signing time: Tue 28 Jul 2026 14:14:01 +0000 Manifest this update: Tue 28 Jul 2026 14:09:01 +0000 Manifest next update: Wed 29 Jul 2026 17:27:01 +0000 Files and hashes: 1: 3130332e3234372e31322e302f32342d3234203d3e203535363935.roa (hash: ATVTOuHtUSrfebW1xU18JBrcd7qLtJdgSsLLVk33uGM=) 2: 3130332e3234372e31332e302f32342d3234203d3e20313331373036.roa (hash: z4cKVwkKHopCzCusKw3/HTDbOMxbEcb0WxL0/PEi5qo=) 3: D8435659F33EE1F7005A21C1387F49D353431808.crl (hash: vISeLJa3JBQehEcY5V7I29d5qlUwGk2HR4vR9FBhlnE=) 4: 3132312e3130312e3132382e302f32312d3234203d3e20313331373036.roa (hash: DR008bVSYXJm82RMo+BhRQvkIWKNDedVtmRpjzWrQic=) 5: 3130332e3234372e31342e302f32332d3234203d3e20313331373036.roa (hash: blqaAQUh+/Ci23PSpz6kWjhOXoOQ7V7lhdmAJgQyDKE=) 6: 323430323a653330303a3a2f33322d3438203d3e20313331373036.roa (hash: nwbiSYQUIY7u5484W08oCWpHX2RPW6F76Z3A6cL7rsY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/D8435659F33EE1F7005A21C1387F49D353431808.crl rsync://rpki-rsync.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/D8435659F33EE1F7005A21C1387F49D353431808.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D8435659F33EE1F7005A21C1387F49D353431808.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 17:27:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:9a:6f:9b:8e:03:ac:fe:f3:9c:df:1e:bc:7c:83:cc:7e:ef:aa:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D8435659F33EE1F7005A21C1387F49D353431808 Validity Not Before: Jul 28 14:09:01 2026 GMT Not After : Jul 29 17:27:01 2026 GMT Subject: CN=1EAFFF35A1012A51FDBF4223BF401376D9C4C300 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:af:50:6c:b9:e6:70:34:fa:ee:29:16:79:2f: ee:78:50:8f:e7:7f:cf:0a:69:7b:1c:e0:13:99:ee: 1d:31:5e:ef:51:92:5c:d4:b4:df:bb:d0:49:c2:cf: a0:6d:4c:d0:43:bd:de:52:86:c4:77:25:c8:a7:c3: b0:b1:ca:b5:f8:f3:7a:32:00:71:08:58:88:39:dc: b5:65:3e:89:73:07:cc:d1:3c:f9:68:8b:36:17:b9: 57:d7:63:58:8a:98:9b:02:7c:98:f1:7e:2a:53:0a: b2:2e:bb:f1:9c:db:b3:db:20:e1:02:23:38:3c:ae: 94:85:1f:62:2f:b1:e2:99:f2:61:1f:70:af:75:cb: cc:c8:31:3f:fa:ab:16:4a:54:15:7b:ca:61:3a:b1: f4:1b:21:de:99:66:3b:d5:4d:d3:2f:ee:b7:46:27: d0:a0:e7:2a:ca:4b:f5:07:d9:13:6f:be:83:3d:27: bb:58:69:d0:bf:33:64:30:70:29:70:32:b7:e9:d8: eb:cf:4c:35:f8:c4:50:cc:2e:c1:80:53:88:5d:eb: 21:fd:ee:37:79:36:1b:18:e6:b8:a6:e7:f7:66:f2: ec:43:bf:61:70:b3:d5:c4:3e:2c:fe:1f:91:48:2c: 7b:ec:86:58:83:86:8a:2f:22:b8:2a:fc:7b:0f:c4: b0:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:AF:FF:35:A1:01:2A:51:FD:BF:42:23:BF:40:13:76:D9:C4:C3:00 X509v3 Authority Key Identifier: keyid:D8:43:56:59:F3:3E:E1:F7:00:5A:21:C1:38:7F:49:D3:53:43:18:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/D8435659F33EE1F7005A21C1387F49D353431808.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D8435659F33EE1F7005A21C1387F49D353431808.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/D8435659F33EE1F7005A21C1387F49D353431808.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:55:2e:af:d8:f1:b9:bb:43:4b:68:4d:46:45:bb:c1:c6:4d: 26:7f:67:5d:b8:bb:31:90:01:c4:d1:66:58:68:76:d1:04:64: ef:4d:47:8b:ec:7e:6f:ab:a2:36:b7:3a:58:dd:35:da:ca:20: a6:79:95:2d:23:48:c5:e2:f8:29:ca:47:0e:e9:16:69:fe:8a: 68:da:70:05:a6:09:f8:83:97:2c:fa:12:c7:eb:97:be:a3:24: 8e:95:7f:1f:3e:11:28:23:c7:39:fc:a6:f2:d4:4b:56:46:6f: 71:b1:4b:bd:e8:ae:99:6c:f6:01:f3:65:c6:8d:00:c9:fd:4c: d0:9b:2b:24:f5:b5:86:5e:27:03:16:f7:a4:cd:d0:73:d0:74: 01:2e:e7:c9:e0:61:14:c0:81:74:14:af:e0:65:cb:f1:45:8d: 74:8a:7c:97:38:c1:ae:92:3a:28:3e:81:82:63:3e:7f:81:2a: a2:f3:9b:49:d8:01:bc:e3:b5:e1:ea:cd:1b:59:69:df:35:14: 31:e1:ad:a5:d6:db:dd:0a:5d:86:cb:67:94:7a:f5:82:36:19: 57:bf:a5:50:d2:2f:6f:ac:ac:8f:e0:12:c1:ce:20:61:07:b2: 17:f8:7d:64:39:80:8f:f4:73:21:8f:e7:f4:23:e3:2f:7f:b8: f0:62:32:28 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWZpvm44DrP7znN8evHyDzH7vqvMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDg0MzU2NTlGMzNFRTFGNzAwNUEyMUMxMzg3RjQ5RDM1 MzQzMTgwODAeFw0yNjA3MjgxNDA5MDFaFw0yNjA3MjkxNzI3MDFaMDMxMTAvBgNV BAMTKDFFQUZGRjM1QTEwMTJBNTFGREJGNDIyM0JGNDAxMzc2RDlDNEMzMDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKr1BsueZwNPruKRZ5L+54UI/n f88KaXsc4BOZ7h0xXu9RklzUtN+70EnCz6BtTNBDvd5ShsR3Jcinw7CxyrX483oy AHEIWIg53LVlPolzB8zRPPloizYXuVfXY1iKmJsCfJjxfipTCrIuu/Gc27PbIOEC Izg8rpSFH2IvseKZ8mEfcK91y8zIMT/6qxZKVBV7ymE6sfQbId6ZZjvVTdMv7rdG J9Cg5yrKS/UH2RNvvoM9J7tYadC/M2QwcClwMrfp2OvPTDX4xFDMLsGAU4hd6yH9 7jd5NhsY5rim5/dm8uxDv2Fws9XEPiz+H5FILHvshliDhoovIrgq/HsPxLABAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHq//NaEBKlH9v0Ijv0ATdtnEwwAwHwYDVR0j BBgwFoAU2ENWWfM+4fcAWiHBOH9J01NDGAgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTI3YTZmMzQtMWI2ZS00ZTkyLWIyZDItMGI5MzAxYTY2NmE1LzAvRDg0MzU2NTlG MzNFRTFGNzAwNUEyMUMxMzg3RjQ5RDM1MzQzMTgwOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EODQzNTY1OUYzM0VFMUY3MDA1QTIxQzEzODdGNDlEMzUzNDMx ODA4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTI3YTZmMzQtMWI2ZS00ZTkyLWIy ZDItMGI5MzAxYTY2NmE1LzAvRDg0MzU2NTlGMzNFRTFGNzAwNUEyMUMxMzg3RjQ5 RDM1MzQzMTgwOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAANVLq/Y8bm7Q0toTUZFu8HGTSZ/Z124uzGQ AcTRZlhodtEEZO9NR4vsfm+roja3OljdNdrKIKZ5lS0jSMXi+CnKRw7pFmn+imja cAWmCfiDlyz6Esfrl76jJI6Vfx8+ESgjxzn8pvLUS1ZGb3GxS73orpls9gHzZcaN AMn9TNCbKyT1tYZeJwMW96TN0HPQdAEu58ngYRTAgXQUr+Bly/FFjXSKfJc4wa6S Oig+gYJjPn+BKqLzm0nYAbzjteHqzRtZad81FDHhraXW290KXYbLZ5R69YI2GVe/ pVDSL2+srI/gEsHOIGEHshf4fWQ5gI/0cyGP5/Qj4y9/uPBiMig= -----END CERTIFICATE-----Generated at Wed Jul 29 09:26:25 2026 by rpki-client