$ rpki-client -vvf rpki-rsync.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/B8108C7FBEA42B59A4B00DB4A2DC111BAB709406.mft File: B8108C7FBEA42B59A4B00DB4A2DC111BAB709406.mft (raw, json) Hash identifier: /kcj3vOMkhRHpLhy1rW9s4S0/uvegWXu+g1n3CHWuP4= Subject key identifier: 17:43:27:AC:E8:94:64:E1:BA:ED:55:7B:C0:83:F6:01:B5:03:C3:22 Authority key identifier: B8:10:8C:7F:BE:A4:2B:59:A4:B0:0D:B4:A2:DC:11:1B:AB:70:94:06 Certificate issuer: /CN=B8108C7FBEA42B59A4B00DB4A2DC111BAB709406 Certificate serial: 5DD9B07DA53E93AA8BF797F8EBF47848423C9328 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B8108C7FBEA42B59A4B00DB4A2DC111BAB709406.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/B8108C7FBEA42B59A4B00DB4A2DC111BAB709406.mft Manifest number: 76 Signing time: Wed 29 Jul 2026 01:43:15 +0000 Manifest this update: Wed 29 Jul 2026 01:38:15 +0000 Manifest next update: Thu 30 Jul 2026 02:51:15 +0000 Files and hashes: 1: 3130332e3136302e36382e302f32342d3234203d3e203438343635.roa (hash: g5c7Nq+6t4kiF6CKiothKoqaQ8v25zT/n7Wj9Q/sxEQ=) 2: 3130332e3136302e36392e302f32342d3234203d3e20313431363037.roa (hash: 9VWfd5KMgyw5xyqB55UR/HJrZNws4qzcvTj6ecqQ/Qk=) 3: B8108C7FBEA42B59A4B00DB4A2DC111BAB709406.crl (hash: 2dThw9iLszWI0KKs1qc8hzIEvp8XmNHUdN2XA94MrBU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/B8108C7FBEA42B59A4B00DB4A2DC111BAB709406.crl rsync://rpki-rsync.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/B8108C7FBEA42B59A4B00DB4A2DC111BAB709406.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B8108C7FBEA42B59A4B00DB4A2DC111BAB709406.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 02:51:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:d9:b0:7d:a5:3e:93:aa:8b:f7:97:f8:eb:f4:78:48:42:3c:93:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8108C7FBEA42B59A4B00DB4A2DC111BAB709406 Validity Not Before: Jul 29 01:38:15 2026 GMT Not After : Jul 30 02:51:15 2026 GMT Subject: CN=174327ACE89464E1BAED557BC083F601B503C322 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:bd:36:1e:60:c7:0e:88:2b:ad:ff:02:8f:39: e2:a0:f2:1b:6e:64:ba:ff:b5:b9:9d:ba:72:a3:47: f1:00:b4:9a:ed:a6:39:70:e4:2e:ac:d4:2a:74:ed: 63:2d:79:e3:57:e6:30:b6:8c:aa:55:ad:2a:67:36: 42:38:49:92:45:da:2f:7f:36:46:34:31:c3:1d:68: fa:c4:3e:b6:10:a2:ca:f0:d0:68:f4:02:58:c3:8f: 47:8f:38:3e:ed:5c:4f:cb:01:87:26:36:0e:84:d9: de:46:01:f5:07:32:1d:c8:67:6e:82:be:5d:d4:99: f7:c8:eb:19:b0:df:25:83:ac:20:4a:9b:2c:07:4d: ae:99:42:f0:04:a8:e2:a7:f3:de:4c:68:2c:d0:61: 38:0f:28:d2:84:f6:54:c4:df:7b:e6:d6:98:cc:26: 38:e1:81:11:11:a6:1a:87:aa:da:c3:ec:d0:e3:33: c7:a5:fd:2c:b8:11:27:d8:82:f8:55:34:e4:36:67: 1a:33:c0:b2:0c:a0:d8:24:47:8c:72:19:6f:b8:30: 02:89:e2:6e:51:53:1a:22:63:5b:a4:38:ef:e0:08: 8e:c0:2f:82:a3:57:5c:00:5c:e7:57:5a:2b:7a:95: 10:75:16:a7:a2:c8:49:ac:bc:df:e5:25:fb:b5:18: f6:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:43:27:AC:E8:94:64:E1:BA:ED:55:7B:C0:83:F6:01:B5:03:C3:22 X509v3 Authority Key Identifier: keyid:B8:10:8C:7F:BE:A4:2B:59:A4:B0:0D:B4:A2:DC:11:1B:AB:70:94:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/B8108C7FBEA42B59A4B00DB4A2DC111BAB709406.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B8108C7FBEA42B59A4B00DB4A2DC111BAB709406.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/B8108C7FBEA42B59A4B00DB4A2DC111BAB709406.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:fb:e0:e0:d3:d1:e7:07:c7:84:ca:78:37:48:62:85:9d:21: 20:91:a6:67:c7:db:86:8c:7e:91:7d:e9:b7:5c:38:f5:f3:fb: 24:05:16:f4:58:9d:2a:15:d8:10:5a:a5:ee:a0:8e:9c:14:4c: 26:79:a9:0f:1b:d7:e8:fe:37:66:9e:ce:28:ab:80:c5:2b:f3: 68:83:4f:90:63:7c:4c:72:04:ae:0f:e4:c0:bb:11:5e:d5:92: 46:98:64:4c:8d:bb:b5:d2:57:22:d4:18:04:c2:70:f7:af:ba: e0:ab:46:bc:af:67:fa:db:f2:94:25:db:a7:64:bb:02:75:d4: bd:fc:e7:49:24:b8:c5:28:aa:0f:62:87:68:29:98:56:67:ab: 29:95:c7:fb:a4:42:79:f7:b9:0d:6f:e7:ca:83:7d:dd:bb:76: 0b:00:cd:5a:7f:0f:ab:a3:7c:f9:36:61:93:5f:75:46:79:b4: b8:05:b2:7c:fd:0d:0c:26:42:82:91:e9:4b:e5:30:2f:9b:97: 6a:53:5a:1a:81:88:6e:1d:aa:8c:f7:1e:16:8e:56:0c:0d:af: 12:cb:28:38:00:3c:a9:b5:40:12:c1:5e:83:7d:f5:3a:f3:fd: f9:7f:31:38:44:39:8e:58:1f:ab:34:f1:7d:c5:c0:88:6d:6e: 39:a8:3c:1f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXdmwfaU+k6qL95f46/R4SEI8kygwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjgxMDhDN0ZCRUE0MkI1OUE0QjAwREI0QTJEQzExMUJB QjcwOTQwNjAeFw0yNjA3MjkwMTM4MTVaFw0yNjA3MzAwMjUxMTVaMDMxMTAvBgNV BAMTKDE3NDMyN0FDRTg5NDY0RTFCQUVENTU3QkMwODNGNjAxQjUwM0MzMjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOvTYeYMcOiCut/wKPOeKg8htu ZLr/tbmdunKjR/EAtJrtpjlw5C6s1Cp07WMteeNX5jC2jKpVrSpnNkI4SZJF2i9/ NkY0McMdaPrEPrYQosrw0Gj0AljDj0ePOD7tXE/LAYcmNg6E2d5GAfUHMh3IZ26C vl3UmffI6xmw3yWDrCBKmywHTa6ZQvAEqOKn895MaCzQYTgPKNKE9lTE33vm1pjM JjjhgRERphqHqtrD7NDjM8el/Sy4ESfYgvhVNOQ2ZxozwLIMoNgkR4xyGW+4MAKJ 4m5RUxoiY1ukOO/gCI7AL4KjV1wAXOdXWit6lRB1FqeiyEmsvN/lJfu1GPZrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUF0MnrOiUZOG67VV7wIP2AbUDwyIwHwYDVR0j BBgwFoAUuBCMf76kK1mksA20otwRG6twlAYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGFjNzlmYmUtNDc5MC00NmJlLWI5YjItMDM1OWIxYTE4ZTMzLzAvQjgxMDhDN0ZC RUE0MkI1OUE0QjAwREI0QTJEQzExMUJBQjcwOTQwNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CODEwOEM3RkJFQTQyQjU5QTRCMDBEQjRBMkRDMTExQkFCNzA5 NDA2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGFjNzlmYmUtNDc5MC00NmJlLWI5 YjItMDM1OWIxYTE4ZTMzLzAvQjgxMDhDN0ZCRUE0MkI1OUE0QjAwREI0QTJEQzEx MUJBQjcwOTQwNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADX74ODT0ecHx4TKeDdIYoWdISCRpmfH24aM fpF96bdcOPXz+yQFFvRYnSoV2BBape6gjpwUTCZ5qQ8b1+j+N2aeziirgMUr82iD T5BjfExyBK4P5MC7EV7VkkaYZEyNu7XSVyLUGATCcPevuuCrRryvZ/rb8pQl26dk uwJ11L3850kkuMUoqg9ih2gpmFZnqymVx/ukQnn3uQ1v58qDfd27dgsAzVp/D6uj fPk2YZNfdUZ5tLgFsnz9DQwmQoKR6UvlMC+bl2pTWhqBiG4dqoz3HhaOVgwNrxLL KDgAPKm1QBLBXoN99Trz/fl/MThEOY5YH6s08X3FwIhtbjmoPB8= -----END CERTIFICATE-----Generated at Wed Jul 29 08:10:56 2026 by rpki-client