$ rpki-client -vvf rpki-rsync.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/8F1F52C63BB87484D4C5E9D8551AE767566D0060.mft File: 8F1F52C63BB87484D4C5E9D8551AE767566D0060.mft (raw, json) Hash identifier: oVh8sG3NDGeyDOXZK42RXgYvYdqqrCl5J6T62iNmZ+s= Subject key identifier: 4B:CA:45:E3:17:5D:F4:C3:2C:0F:7B:F7:35:E7:56:EF:52:9B:52:F5 Authority key identifier: 8F:1F:52:C6:3B:B8:74:84:D4:C5:E9:D8:55:1A:E7:67:56:6D:00:60 Certificate issuer: /CN=8F1F52C63BB87484D4C5E9D8551AE767566D0060 Certificate serial: 5E514AD2E2436AE490F4CB3F912E0F5DDD1374B5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8F1F52C63BB87484D4C5E9D8551AE767566D0060.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/8F1F52C63BB87484D4C5E9D8551AE767566D0060.mft Manifest number: 76 Signing time: Tue 28 Jul 2026 17:33:22 +0000 Manifest this update: Tue 28 Jul 2026 17:28:22 +0000 Manifest next update: Wed 29 Jul 2026 20:25:22 +0000 Files and hashes: 1: 8F1F52C63BB87484D4C5E9D8551AE767566D0060.crl (hash: 6gZi2NiczaK8J39kv/A/Zlmr1MaaVGzL0pN8bC6hJnA=) 2: 3130332e3137312e31382e302f32342d3234203d3e20313336303532.roa (hash: 5uR0k9um/4xZDeF/1OtaEeN9gAbE1nIuTIkh38U5XcA=) 3: 3130332e3137312e31392e302f32342d3234203d3e20313338363038.roa (hash: +9zDigXxWl0KHwFSHRJ8vK8jloGtZKIEVRmfMrusxTQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/8F1F52C63BB87484D4C5E9D8551AE767566D0060.crl rsync://rpki-rsync.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/8F1F52C63BB87484D4C5E9D8551AE767566D0060.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8F1F52C63BB87484D4C5E9D8551AE767566D0060.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 20:25:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:51:4a:d2:e2:43:6a:e4:90:f4:cb:3f:91:2e:0f:5d:dd:13:74:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F1F52C63BB87484D4C5E9D8551AE767566D0060 Validity Not Before: Jul 28 17:28:22 2026 GMT Not After : Jul 29 20:25:22 2026 GMT Subject: CN=4BCA45E3175DF4C32C0F7BF735E756EF529B52F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:b5:a9:0d:00:7f:9d:b7:ed:70:c8:fd:27:35: d3:54:c9:0b:b8:75:11:27:56:5a:b6:f3:63:af:e0: 4c:32:d1:f0:e4:65:b0:75:62:33:44:be:77:7c:8b: 0a:49:bc:2f:3a:50:c5:e4:4d:6d:a8:ed:78:05:5a: 97:d6:61:f8:44:88:42:e0:b8:81:02:ec:43:e9:19: 8c:d3:5e:c9:85:3f:63:46:f6:14:c1:76:1e:e8:35: 1a:9a:2b:f8:e0:f1:78:95:e6:7c:c8:87:77:ac:2e: b7:7f:28:2c:20:72:db:4b:2a:4a:62:ba:71:21:7f: 34:a7:ed:00:c3:83:94:da:73:d4:3d:c1:ec:62:0f: c5:e0:9a:a7:c4:d8:f3:a2:37:67:dd:c1:4d:b9:e9: 08:18:57:59:81:4f:70:10:70:26:61:a0:ea:64:ba: dc:60:7b:eb:15:2c:1b:78:a5:26:bc:03:c4:1b:11: 2f:d0:26:40:9c:39:94:b8:00:ee:1c:22:87:6b:87: 40:b0:45:7a:a8:70:b6:e7:85:4c:a7:ce:64:33:60: 40:46:90:d3:d4:57:5e:18:f7:c7:0a:5a:48:96:24: a4:65:de:78:a4:90:87:ec:3f:e0:4c:8e:a8:1c:a7: c9:f4:9a:e6:41:f8:56:0c:58:e8:03:1f:cc:8f:d8: ec:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:CA:45:E3:17:5D:F4:C3:2C:0F:7B:F7:35:E7:56:EF:52:9B:52:F5 X509v3 Authority Key Identifier: keyid:8F:1F:52:C6:3B:B8:74:84:D4:C5:E9:D8:55:1A:E7:67:56:6D:00:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/8F1F52C63BB87484D4C5E9D8551AE767566D0060.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8F1F52C63BB87484D4C5E9D8551AE767566D0060.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/8F1F52C63BB87484D4C5E9D8551AE767566D0060.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:80:e7:ab:f7:9c:c1:13:56:a7:9d:2f:46:fc:11:7c:f8:4e: d2:a0:5b:68:b5:15:c6:2d:6e:55:90:ba:3f:77:1e:0d:f7:51: b5:93:1e:59:6a:c2:76:19:12:57:b9:e8:d0:c3:7e:78:44:39: f4:96:30:3d:2c:c5:d2:5b:3e:73:87:91:a8:35:57:e3:e6:15: 5a:be:01:17:fd:e7:55:db:91:69:41:52:4f:2c:2e:e6:fc:24: 27:b7:f8:d9:b3:27:01:f8:20:36:85:d9:9d:43:b9:0f:be:23: 28:c8:f0:14:61:05:96:7a:72:e5:f9:9c:32:94:c1:25:3f:53: ba:ed:ab:a5:41:ea:8a:1d:52:24:6c:61:e1:ec:4e:13:6d:90: c6:43:04:e1:ba:20:57:a0:08:06:a7:f1:69:65:ca:4e:77:e7: f7:16:ea:76:df:95:95:9e:8b:51:a8:07:51:61:69:23:34:fe: aa:71:5e:b5:c1:fb:26:f2:89:91:a3:83:52:9a:0b:79:d7:aa: c6:46:74:65:c0:22:a3:b4:89:d6:95:9d:df:0e:ef:c6:15:cd: 68:09:da:87:b0:eb:9b:d1:16:6f:3e:1c:3c:c5:12:92:ee:0a: f5:ad:56:1f:f2:11:8e:fa:a1:c2:2e:5b:ad:0e:f0:41:a6:5f: cb:a4:d4:57 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXlFK0uJDauSQ9Ms/kS4PXd0TdLUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEYxRjUyQzYzQkI4NzQ4NEQ0QzVFOUQ4NTUxQUU3Njc1 NjZEMDA2MDAeFw0yNjA3MjgxNzI4MjJaFw0yNjA3MjkyMDI1MjJaMDMxMTAvBgNV BAMTKDRCQ0E0NUUzMTc1REY0QzMyQzBGN0JGNzM1RTc1NkVGNTI5QjUyRjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmtakNAH+dt+1wyP0nNdNUyQu4 dREnVlq282Ov4Ewy0fDkZbB1YjNEvnd8iwpJvC86UMXkTW2o7XgFWpfWYfhEiELg uIEC7EPpGYzTXsmFP2NG9hTBdh7oNRqaK/jg8XiV5nzIh3esLrd/KCwgcttLKkpi unEhfzSn7QDDg5Tac9Q9wexiD8XgmqfE2POiN2fdwU256QgYV1mBT3AQcCZhoOpk utxge+sVLBt4pSa8A8QbES/QJkCcOZS4AO4cIodrh0CwRXqocLbnhUynzmQzYEBG kNPUV14Y98cKWkiWJKRl3nikkIfsP+BMjqgcp8n0muZB+FYMWOgDH8yP2OxXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUS8pF4xdd9MMsD3v3NedW71KbUvUwHwYDVR0j BBgwFoAUjx9Sxju4dITUxenYVRrnZ1ZtAGAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWE4ZjY5ZjctOTMzMi00Y2Q0LWIzZTUtY2M2YzQ3NzJjZjczLzAvOEYxRjUyQzYz QkI4NzQ4NEQ0QzVFOUQ4NTUxQUU3Njc1NjZEMDA2MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84RjFGNTJDNjNCQjg3NDg0RDRDNUU5RDg1NTFBRTc2NzU2NkQw MDYwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWE4ZjY5ZjctOTMzMi00Y2Q0LWIz ZTUtY2M2YzQ3NzJjZjczLzAvOEYxRjUyQzYzQkI4NzQ4NEQ0QzVFOUQ4NTUxQUU3 Njc1NjZEMDA2MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIqA56v3nMETVqedL0b8EXz4TtKgW2i1FcYt blWQuj93Hg33UbWTHllqwnYZEle56NDDfnhEOfSWMD0sxdJbPnOHkag1V+PmFVq+ ARf951XbkWlBUk8sLub8JCe3+NmzJwH4IDaF2Z1DuQ++IyjI8BRhBZZ6cuX5nDKU wSU/U7rtq6VB6oodUiRsYeHsThNtkMZDBOG6IFegCAan8Wllyk535/cW6nbflZWe i1GoB1FhaSM0/qpxXrXB+ybyiZGjg1KaC3nXqsZGdGXAIqO0idaVnd8O78YVzWgJ 2oew65vRFm8+HDzFEpLuCvWtVh/yEY76ocIuW60O8EGmX8uk1Fc= -----END CERTIFICATE-----Generated at Wed Jul 29 13:28:37 2026 by rpki-client