$ rpki-client -vvf rpki-rsync.idnic.net/repo/a5481606-d5fd-4196-abcd-58e6c76243c5/0/8577702D614C8CB829CA2CC51C2B3374AC66A40E.mft File: 8577702D614C8CB829CA2CC51C2B3374AC66A40E.mft (raw, json) Hash identifier: /VyGnNUXbL4LBVIO8+qwNHkVKwi1TZ/enKuJWAK/RJ0= Subject key identifier: C9:DA:FF:B9:C0:C1:AE:0F:1E:CB:7E:61:E1:FE:3B:A4:5E:0B:96:C0 Authority key identifier: 85:77:70:2D:61:4C:8C:B8:29:CA:2C:C5:1C:2B:33:74:AC:66:A4:0E Certificate issuer: /CN=8577702D614C8CB829CA2CC51C2B3374AC66A40E Certificate serial: 0249489BB99215734F606F8B35369A9EB836D5B3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/8577702D614C8CB829CA2CC51C2B3374AC66A40E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a5481606-d5fd-4196-abcd-58e6c76243c5/0/8577702D614C8CB829CA2CC51C2B3374AC66A40E.mft Manifest number: 74 Signing time: Tue 28 Jul 2026 19:00:12 +0000 Manifest this update: Tue 28 Jul 2026 18:55:12 +0000 Manifest next update: Wed 29 Jul 2026 20:45:12 +0000 Files and hashes: 1: 3135372e36362e3137302e302f32332d3233203d3e20313532373737.roa (hash: b9vSoEj12pKvRl6GFlwGqwDqlYjOzNMwdmXHDB/QoPA=) 2: 8577702D614C8CB829CA2CC51C2B3374AC66A40E.crl (hash: uqmM6K9Yz9fqkM9iKe+yccd3JsqhGx1v8apJ1naN7QE=) 3: 3135372e36362e3137312e302f32342d3234203d3e20313532373737.roa (hash: uYXVOfIT7P6Dr33KoZiS4hHMvBugVDHDvO0rydITSy0=) 4: 3135372e36362e3137302e302f32342d3234203d3e20313532373737.roa (hash: ymv/QzmelT0mY8Z1NXChI2j7830jRvZf9HvAHfEuKp0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a5481606-d5fd-4196-abcd-58e6c76243c5/0/8577702D614C8CB829CA2CC51C2B3374AC66A40E.crl rsync://rpki-rsync.idnic.net/repo/a5481606-d5fd-4196-abcd-58e6c76243c5/0/8577702D614C8CB829CA2CC51C2B3374AC66A40E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/8577702D614C8CB829CA2CC51C2B3374AC66A40E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 09:55:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:49:48:9b:b9:92:15:73:4f:60:6f:8b:35:36:9a:9e:b8:36:d5:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8577702D614C8CB829CA2CC51C2B3374AC66A40E Validity Not Before: Jul 28 18:55:12 2026 GMT Not After : Jul 29 20:45:12 2026 GMT Subject: CN=C9DAFFB9C0C1AE0F1ECB7E61E1FE3BA45E0B96C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:64:5f:45:d1:11:2f:61:15:1d:ab:18:c8:64: 6c:7e:cb:80:33:29:57:39:1b:a9:6e:86:81:5a:e1: e5:46:bc:d0:b7:54:ee:94:65:04:b5:d6:bc:43:55: 7c:95:41:a2:b5:0d:85:27:7f:8d:af:c9:65:c7:9d: de:5d:bd:4d:39:e3:7d:e0:dd:21:06:b0:e4:af:91: 1f:04:3d:0f:cd:9f:72:c1:59:23:72:bf:96:46:ff: f1:a0:9c:38:ec:d3:1d:06:98:3f:38:da:22:6a:32: a2:9f:52:87:9a:e8:bc:90:21:bb:cd:4d:c9:f3:6b: ec:ae:01:0a:9c:3d:48:07:d3:02:29:18:b2:35:7b: b6:cf:6a:b9:93:a8:8e:8d:bf:0d:51:02:49:eb:8a: 1c:04:5d:6b:7b:a9:e3:0e:ee:9f:b9:93:e8:99:37: f3:79:37:9d:9e:44:f4:2c:a7:aa:ee:58:02:5d:6c: 8b:d7:22:36:fd:67:19:f6:60:ce:17:35:3d:bc:d4: 36:8b:82:5f:05:79:a6:dd:20:c0:72:76:b2:03:30: 89:70:a3:20:71:e2:44:ee:37:b5:a1:24:68:32:a8: d8:df:d7:00:39:1a:6b:64:a6:84:86:07:d1:e7:0e: 01:3c:5a:19:00:42:0c:b0:18:a2:38:45:3f:9c:c4: 7f:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:DA:FF:B9:C0:C1:AE:0F:1E:CB:7E:61:E1:FE:3B:A4:5E:0B:96:C0 X509v3 Authority Key Identifier: keyid:85:77:70:2D:61:4C:8C:B8:29:CA:2C:C5:1C:2B:33:74:AC:66:A4:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a5481606-d5fd-4196-abcd-58e6c76243c5/0/8577702D614C8CB829CA2CC51C2B3374AC66A40E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/8577702D614C8CB829CA2CC51C2B3374AC66A40E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a5481606-d5fd-4196-abcd-58e6c76243c5/0/8577702D614C8CB829CA2CC51C2B3374AC66A40E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:6b:46:fb:6b:b9:f7:91:41:b1:e9:37:51:1a:3b:1f:ce:b2: 9a:97:69:41:4b:70:37:d0:a7:76:9a:66:fa:8f:b4:d5:47:e9: 6e:25:79:fd:09:a5:91:ad:3d:bd:3e:8c:20:11:4f:f8:af:ee: 5b:e2:1f:92:00:98:f3:d6:9e:94:b1:05:8f:2a:73:ce:84:e5: 09:6a:c1:3a:ff:19:67:80:09:dd:7a:85:fb:da:41:c7:15:77: 33:f0:cf:2e:42:13:cd:48:b0:95:b8:ab:e2:f6:c2:58:41:24: 7c:19:7c:1d:1c:73:28:ca:a3:14:89:10:f0:24:01:67:40:73: 35:74:f5:71:21:07:4b:59:a4:31:02:b3:cf:dd:3c:da:6b:a6: af:3a:b3:79:9f:02:89:91:d6:83:bb:c8:1e:43:de:86:a4:98: 24:98:56:05:8c:db:23:41:82:5e:fc:93:ad:6b:22:be:1f:56: 83:50:40:95:48:f5:02:f1:c2:07:7a:57:cc:c1:ff:5e:4b:44: 19:41:08:d0:67:19:ca:10:37:53:39:7d:93:05:b4:d0:c3:f6: 99:40:eb:90:95:7f:ea:08:5b:0c:fa:83:a0:26:3a:e2:df:f4: 63:bc:d6:06:77:67:e0:5f:e7:a1:98:24:b3:7d:dd:ca:6e:7e: 7d:79:d2:02 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAklIm7mSFXNPYG+LNTaanrg21bMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODU3NzcwMkQ2MTRDOENCODI5Q0EyQ0M1MUMyQjMzNzRB QzY2QTQwRTAeFw0yNjA3MjgxODU1MTJaFw0yNjA3MjkyMDQ1MTJaMDMxMTAvBgNV BAMTKEM5REFGRkI5QzBDMUFFMEYxRUNCN0U2MUUxRkUzQkE0NUUwQjk2QzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeZF9F0REvYRUdqxjIZGx+y4Az KVc5G6luhoFa4eVGvNC3VO6UZQS11rxDVXyVQaK1DYUnf42vyWXHnd5dvU05433g 3SEGsOSvkR8EPQ/Nn3LBWSNyv5ZG//GgnDjs0x0GmD842iJqMqKfUoea6LyQIbvN Tcnza+yuAQqcPUgH0wIpGLI1e7bParmTqI6Nvw1RAknrihwEXWt7qeMO7p+5k+iZ N/N5N52eRPQsp6ruWAJdbIvXIjb9Zxn2YM4XNT281DaLgl8FeabdIMBydrIDMIlw oyBx4kTuN7WhJGgyqNjf1wA5GmtkpoSGB9HnDgE8WhkAQgywGKI4RT+cxH8fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUydr/ucDBrg8ey35h4f47pF4LlsAwHwYDVR0j BBgwFoAUhXdwLWFMjLgpyizFHCszdKxmpA4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTU0ODE2MDYtZDVmZC00MTk2LWFiY2QtNThlNmM3NjI0M2M1LzAvODU3NzcwMkQ2 MTRDOENCODI5Q0EyQ0M1MUMyQjMzNzRBQzY2QTQwRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC84NTc3NzAyRDYxNEM4Q0I4MjlDQTJDQzUxQzJCMzM3NEFDNjZB NDBFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTU0ODE2MDYtZDVmZC00MTk2LWFi Y2QtNThlNmM3NjI0M2M1LzAvODU3NzcwMkQ2MTRDOENCODI5Q0EyQ0M1MUMyQjMz NzRBQzY2QTQwRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAhrRvtrufeRQbHpN1EaOx/OspqXaUFLcDfQ p3aaZvqPtNVH6W4lef0JpZGtPb0+jCART/iv7lviH5IAmPPWnpSxBY8qc86E5Qlq wTr/GWeACd16hfvaQccVdzPwzy5CE81IsJW4q+L2wlhBJHwZfB0ccyjKoxSJEPAk AWdAczV09XEhB0tZpDECs8/dPNprpq86s3mfAomR1oO7yB5D3oakmCSYVgWM2yNB gl78k61rIr4fVoNQQJVI9QLxwgd6V8zB/15LRBlBCNBnGcoQN1M5fZMFtNDD9plA 65CVf+oIWwz6g6AmOuLf9GO81gZ3Z+Bf56GYJLN93cpufn150gI= -----END CERTIFICATE-----Generated at Wed Jul 29 00:27:04 2026 by rpki-client