$ rpki-client -vvf rpki-rsync.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/8AE9BB21003E87396CEDD7898B4A50424E8CEC8F.mft File: 8AE9BB21003E87396CEDD7898B4A50424E8CEC8F.mft (raw, json) Hash identifier: WVb2VQ2wiMjT0eHIqCnx0HIQJf8+CiKClZDVET/Lkr8= Subject key identifier: 0A:2E:2B:26:23:27:4B:49:03:9D:91:88:A4:31:A3:2F:F4:C3:86:35 Authority key identifier: 8A:E9:BB:21:00:3E:87:39:6C:ED:D7:89:8B:4A:50:42:4E:8C:EC:8F Certificate issuer: /CN=8AE9BB21003E87396CEDD7898B4A50424E8CEC8F Certificate serial: 2FB8A300CFDC1E1F8748D2B6ED7A37637F6F0B80 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8AE9BB21003E87396CEDD7898B4A50424E8CEC8F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/8AE9BB21003E87396CEDD7898B4A50424E8CEC8F.mft Manifest number: 76 Signing time: Wed 29 Jul 2026 03:30:23 +0000 Manifest this update: Wed 29 Jul 2026 03:25:23 +0000 Manifest next update: Thu 30 Jul 2026 05:23:23 +0000 Files and hashes: 1: 34352e3132372e3133342e302f32342d3234203d3e203538343737.roa (hash: rkn+DI7lNxqSqCTlwACNzV0qOshNnDXKFLIZsdocYhE=) 2: 3130332e35362e3230342e302f32342d3234203d3e203538343737.roa (hash: ieJoOGDuwtLlA8t0dN5yUaBjAk+rstjVqpks3BBFT2E=) 3: 34352e3132372e3133332e302f32342d3234203d3e203538343737.roa (hash: icfsfhUwquzTy2StQKBYwmmyOmAVCsssAYK5CyA5iDI=) 4: 8AE9BB21003E87396CEDD7898B4A50424E8CEC8F.crl (hash: zjFCq2Z9taBM4hLD1gr/44RbVYW45u3abng5ygmJyoU=) 5: 3130332e35362e3230362e302f32342d3234203d3e203538343737.roa (hash: CVqG9mh1X9V1ZbC6R/r5UJJ2xSfzA9r4RYW1GFYyElI=) 6: 3130332e35362e3230352e302f32342d3234203d3e203538343737.roa (hash: JuQ4cvsB/3E/np6OBFHLGq+Nt4mQQ/GxzLV4MrmhfZo=) 7: 34352e3132372e3133322e302f32342d3234203d3e203538343737.roa (hash: pK3Vu7dEPBnTFAw3IDhWOXFOflNVhPv7/JjAZ1e/ubk=) 8: 34352e3132372e3133352e302f32342d3234203d3e20313335333630.roa (hash: 0WsKsDzY8LPfrJ1pgXZgjbVmTWXixBFTK8YpHb3DNxU=) 9: 3130332e35362e3230372e302f32342d3234203d3e203538343737.roa (hash: FdEj2/miSrHrif/CfoOvLE1OV+PuSrA43YH+LmHuPRM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/8AE9BB21003E87396CEDD7898B4A50424E8CEC8F.crl rsync://rpki-rsync.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/8AE9BB21003E87396CEDD7898B4A50424E8CEC8F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8AE9BB21003E87396CEDD7898B4A50424E8CEC8F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 05:23:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:b8:a3:00:cf:dc:1e:1f:87:48:d2:b6:ed:7a:37:63:7f:6f:0b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8AE9BB21003E87396CEDD7898B4A50424E8CEC8F Validity Not Before: Jul 29 03:25:23 2026 GMT Not After : Jul 30 05:23:23 2026 GMT Subject: CN=0A2E2B2623274B49039D9188A431A32FF4C38635 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:45:17:69:f8:90:f4:ff:90:9b:b1:d7:0c:cc: c0:2b:b5:33:51:76:77:36:35:07:98:8f:40:01:6c: b1:9b:fa:cf:32:29:fe:72:4b:80:f9:f7:66:c5:ad: b3:dd:55:77:f1:62:49:3a:94:a7:07:b6:79:ad:a4: 8d:27:71:0b:2b:7d:d6:b8:48:d8:92:f8:c7:6c:af: 5a:a0:75:dc:dc:21:81:e6:69:9d:ed:72:92:f3:cd: 66:87:24:fd:24:f7:d4:85:22:5e:d1:54:5c:6f:1d: 8f:9a:87:b6:8b:a6:7d:d7:ab:60:93:bd:b6:83:48: bf:99:57:91:7e:47:df:9c:07:62:74:a6:fc:6d:c2: 6d:ae:c5:da:3b:1d:3e:fe:25:38:3f:27:8d:86:e2: 30:4c:b6:f6:19:b8:22:52:1f:84:9c:09:fd:e9:69: db:e3:be:e7:3b:92:ec:1f:17:62:f7:2b:36:d8:ed: ce:89:78:4b:52:e9:9b:33:d7:32:72:a4:e2:5f:6d: 63:18:4c:b4:2f:d5:d7:3a:36:34:78:3f:a1:27:a7: 8b:37:a4:01:66:ab:de:7d:d9:f0:c2:ab:1c:1b:33: 92:3e:8f:11:06:f2:ec:80:36:11:6f:4b:e2:7a:f4: 89:ef:d3:df:e6:cc:ba:1a:6b:95:01:4b:f8:49:66: 28:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:2E:2B:26:23:27:4B:49:03:9D:91:88:A4:31:A3:2F:F4:C3:86:35 X509v3 Authority Key Identifier: keyid:8A:E9:BB:21:00:3E:87:39:6C:ED:D7:89:8B:4A:50:42:4E:8C:EC:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/8AE9BB21003E87396CEDD7898B4A50424E8CEC8F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8AE9BB21003E87396CEDD7898B4A50424E8CEC8F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/8AE9BB21003E87396CEDD7898B4A50424E8CEC8F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:84:d3:e5:38:1e:8e:8f:1c:e0:af:f7:51:ea:4c:20:35:ee: 97:da:d4:b9:af:b5:4b:dc:d5:88:74:eb:9e:f2:6c:d2:8f:dd: d6:dc:3d:af:48:4a:7f:bd:71:50:14:c8:c8:c4:41:39:aa:6d: 31:be:c6:4e:98:1d:54:b8:db:a4:6e:d3:5b:d6:d5:c7:94:28: 62:eb:0c:f4:a3:59:ce:2f:9f:57:9c:ae:b3:23:e3:b5:11:15: d9:57:96:ca:37:2f:76:7e:c2:9b:0d:38:eb:06:19:19:11:e4: 04:57:6f:e3:a9:e3:c9:b0:02:b4:42:4f:68:90:01:0e:ff:03: d3:b3:1d:2d:b8:bc:24:72:c2:33:35:5d:ea:f4:4d:f3:43:8b: 98:9c:4d:b2:5c:78:39:a0:0b:b3:5a:2e:6b:54:10:42:8e:cc: 5e:29:9a:f9:d4:62:7f:9f:c0:c6:dd:f1:a1:2d:b8:69:8c:5a: 3c:42:15:3b:6e:c1:01:56:33:25:a4:cb:22:92:70:26:76:47: 04:a8:90:d0:f9:3b:a7:6a:91:cd:f0:b2:09:4d:27:b3:8d:c3: 6a:0c:7c:c3:3f:ec:e2:74:24:4c:56:8c:9a:f6:29:12:9b:f9: 74:0c:75:1d:bf:b9:e9:14:16:2e:5b:24:73:cd:f6:68:69:e3: 66:ae:fb:5c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL7ijAM/cHh+HSNK27Xo3Y39vC4AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEFFOUJCMjEwMDNFODczOTZDRURENzg5OEI0QTUwNDI0 RThDRUM4RjAeFw0yNjA3MjkwMzI1MjNaFw0yNjA3MzAwNTIzMjNaMDMxMTAvBgNV BAMTKDBBMkUyQjI2MjMyNzRCNDkwMzlEOTE4OEE0MzFBMzJGRjRDMzg2MzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQRRdp+JD0/5CbsdcMzMArtTNR dnc2NQeYj0ABbLGb+s8yKf5yS4D592bFrbPdVXfxYkk6lKcHtnmtpI0ncQsrfda4 SNiS+Mdsr1qgddzcIYHmaZ3tcpLzzWaHJP0k99SFIl7RVFxvHY+ah7aLpn3Xq2CT vbaDSL+ZV5F+R9+cB2J0pvxtwm2uxdo7HT7+JTg/J42G4jBMtvYZuCJSH4ScCf3p advjvuc7kuwfF2L3KzbY7c6JeEtS6Zsz1zJypOJfbWMYTLQv1dc6NjR4P6Enp4s3 pAFmq9592fDCqxwbM5I+jxEG8uyANhFvS+J69Inv09/mzLoaa5UBS/hJZiibAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCi4rJiMnS0kDnZGIpDGjL/TDhjUwHwYDVR0j BBgwFoAUium7IQA+hzls7deJi0pQQk6M7I8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDNmOGY1NWMtOWUzNS00Y2UyLTg5MGYtMGRlM2UyNDA0NjExLzAvOEFFOUJCMjEw MDNFODczOTZDRURENzg5OEI0QTUwNDI0RThDRUM4Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84QUU5QkIyMTAwM0U4NzM5NkNFREQ3ODk4QjRBNTA0MjRFOENF QzhGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDNmOGY1NWMtOWUzNS00Y2UyLTg5 MGYtMGRlM2UyNDA0NjExLzAvOEFFOUJCMjEwMDNFODczOTZDRURENzg5OEI0QTUw NDI0RThDRUM4Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGmE0+U4Ho6PHOCv91HqTCA17pfa1LmvtUvc 1Yh0657ybNKP3dbcPa9ISn+9cVAUyMjEQTmqbTG+xk6YHVS426Ru01vW1ceUKGLr DPSjWc4vn1ecrrMj47URFdlXlso3L3Z+wpsNOOsGGRkR5ARXb+Op48mwArRCT2iQ AQ7/A9OzHS24vCRywjM1Xer0TfNDi5icTbJceDmgC7NaLmtUEEKOzF4pmvnUYn+f wMbd8aEtuGmMWjxCFTtuwQFWMyWkyyKScCZ2RwSokND5O6dqkc3wsglNJ7ONw2oM fMM/7OJ0JExWjJr2KRKb+XQMdR2/uekUFi5bJHPN9mhp42au+1w= -----END CERTIFICATE-----Generated at Wed Jul 29 11:13:51 2026 by rpki-client