$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/8B463984C16522A35FAAB60708D34C89D9D9F1E7.mft File: 8B463984C16522A35FAAB60708D34C89D9D9F1E7.mft (raw, json) Hash identifier: mWFLybn/fDAkBTgx75vf48TZ22lV1Pw3ASufDgt2b38= Subject key identifier: AC:CB:68:07:1A:B0:69:DA:72:47:AE:94:92:FC:3C:00:BD:5C:62:C5 Authority key identifier: 8B:46:39:84:C1:65:22:A3:5F:AA:B6:07:08:D3:4C:89:D9:D9:F1:E7 Certificate issuer: /CN=8B463984C16522A35FAAB60708D34C89D9D9F1E7 Certificate serial: 5148D92F170B3934F3CC0C7AE3AE38D99B4BC580 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/8B463984C16522A35FAAB60708D34C89D9D9F1E7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/8B463984C16522A35FAAB60708D34C89D9D9F1E7.mft Manifest number: F4 Signing time: Sun 01 Nov 2026 13:24:15 +0000 Manifest this update: Sun 01 Nov 2026 13:19:15 +0000 Manifest next update: Mon 02 Nov 2026 15:00:15 +0000 Files and hashes: 1: 3135372e36362e35362e302f32342d3234203d3e203538343737.roa (hash: c2UfSKD11fX4h2x5HJIXy7pbYdyuzBLTiInfb4Fri14=) 2: 8B463984C16522A35FAAB60708D34C89D9D9F1E7.crl (hash: IhoV1JcHR/CI+P8S8XnL0DrkefiiILeI+GW+qow5uOY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/8B463984C16522A35FAAB60708D34C89D9D9F1E7.crl rsync://rpki-rsync.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/8B463984C16522A35FAAB60708D34C89D9D9F1E7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/8B463984C16522A35FAAB60708D34C89D9D9F1E7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 15:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:48:d9:2f:17:0b:39:34:f3:cc:0c:7a:e3:ae:38:d9:9b:4b:c5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B463984C16522A35FAAB60708D34C89D9D9F1E7 Validity Not Before: Nov 1 13:19:15 2026 GMT Not After : Nov 2 15:00:15 2026 GMT Subject: CN=ACCB68071AB069DA7247AE9492FC3C00BD5C62C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:78:8b:4c:16:41:4f:45:78:f1:33:46:db:98: 3a:d2:84:ff:e6:ac:d4:b3:8b:5a:22:87:ae:16:48: c9:7b:37:3d:6e:6c:d4:bb:e3:eb:38:8a:0d:46:60: 0d:1b:7c:13:89:b6:f7:c2:1e:c6:05:c1:84:30:34: 81:bd:2a:c0:0f:f4:fe:71:79:cb:f4:2a:04:14:3a: 9e:b2:cb:5e:0c:34:6e:ef:5a:6a:90:91:58:93:bf: ff:d7:09:5f:c3:67:47:36:f9:4b:9a:cd:13:96:03: af:7f:00:6e:7f:d0:5b:e9:ed:bc:81:c8:79:cf:a6: 2b:65:49:8c:ab:de:a2:99:cf:ef:ca:43:cd:66:eb: 94:70:46:3a:94:b7:9c:c9:fb:3b:cc:f6:ef:ad:b1: dd:de:38:5b:14:0e:9d:bf:2a:4f:31:2b:af:42:23: 6e:6b:64:9e:28:cb:cf:90:0e:ae:89:cb:ab:4d:78: 53:2c:6a:7d:b7:74:fa:9b:ba:d5:03:77:ba:a9:61: 75:31:db:fe:41:11:b8:a6:70:32:3f:69:f5:9e:44: fa:0b:91:be:66:2c:c5:02:62:46:71:52:84:78:cd: b2:fe:7e:ca:bf:98:03:85:3e:2d:62:b8:10:88:99: 2e:d6:c0:d3:0b:8d:46:a8:11:c8:b1:f6:11:bf:dd: 45:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:CB:68:07:1A:B0:69:DA:72:47:AE:94:92:FC:3C:00:BD:5C:62:C5 X509v3 Authority Key Identifier: keyid:8B:46:39:84:C1:65:22:A3:5F:AA:B6:07:08:D3:4C:89:D9:D9:F1:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/8B463984C16522A35FAAB60708D34C89D9D9F1E7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/8B463984C16522A35FAAB60708D34C89D9D9F1E7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/8B463984C16522A35FAAB60708D34C89D9D9F1E7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:b4:31:0a:0e:a3:52:a3:79:3d:84:65:12:bf:ff:b8:4b:1d: 9d:db:48:6e:14:aa:24:d1:37:20:76:a2:78:5d:3d:67:2f:44: 56:4d:76:50:a3:be:b5:99:f5:46:0b:d8:cc:7e:d4:64:72:82: 38:05:93:85:45:ce:5b:1c:c9:04:18:0e:96:ea:ee:5b:3e:38: 69:ec:c8:00:6c:1c:dc:37:52:b0:c3:87:ae:89:13:26:2a:21: 58:64:46:bb:d5:1a:61:46:d5:1b:14:23:bd:95:0c:f7:1a:f1: f9:1b:2e:c9:89:2b:74:ba:4f:14:f4:b5:fe:c9:77:d6:f5:9e: 64:75:6c:4b:2f:1f:17:b7:cf:3d:07:8c:7d:bc:70:0f:77:2e: 31:7c:53:12:13:64:55:5e:a6:af:46:ae:3a:ba:e8:61:3c:ca: 23:bd:82:be:6f:69:b1:cb:c4:02:e6:f0:ee:e2:30:d7:df:62: ad:e8:e2:cc:29:f9:70:8a:b7:54:82:dd:4d:bb:84:b7:2c:9f: 00:81:81:a9:d3:8c:70:f4:b8:ce:6f:7e:5a:41:02:c7:67:04: 3e:83:0e:56:6d:64:b8:3f:84:d4:8c:15:e1:44:b6:6a:27:ef: c7:54:97:20:8d:4f:96:9f:e9:92:ab:aa:f9:58:4c:d3:de:10: 68:4a:47:77 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUUjZLxcLOTTzzAx646442ZtLxYAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEI0NjM5ODRDMTY1MjJBMzVGQUFCNjA3MDhEMzRDODlE OUQ5RjFFNzAeFw0yNjExMDExMzE5MTVaFw0yNjExMDIxNTAwMTVaMDMxMTAvBgNV BAMTKEFDQ0I2ODA3MUFCMDY5REE3MjQ3QUU5NDkyRkMzQzAwQkQ1QzYyQzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD2eItMFkFPRXjxM0bbmDrShP/m rNSzi1oih64WSMl7Nz1ubNS74+s4ig1GYA0bfBOJtvfCHsYFwYQwNIG9KsAP9P5x ecv0KgQUOp6yy14MNG7vWmqQkViTv//XCV/DZ0c2+UuazROWA69/AG5/0Fvp7byB yHnPpitlSYyr3qKZz+/KQ81m65RwRjqUt5zJ+zvM9u+tsd3eOFsUDp2/Kk8xK69C I25rZJ4oy8+QDq6Jy6tNeFMsan23dPqbutUDd7qpYXUx2/5BEbimcDI/afWeRPoL kb5mLMUCYkZxUoR4zbL+fsq/mAOFPi1iuBCImS7WwNMLjUaoEcix9hG/3UVTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrMtoBxqwadpyR66Ukvw8AL1cYsUwHwYDVR0j BBgwFoAUi0Y5hMFlIqNfqrYHCNNMidnZ8ecwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWQ3NTUzNDctNmIxYy00MmMxLTlmNTQtZDdlYWIyMmUxODJjLzAvOEI0NjM5ODRD MTY1MjJBMzVGQUFCNjA3MDhEMzRDODlEOUQ5RjFFNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC84QjQ2Mzk4NEMxNjUyMkEzNUZBQUI2MDcwOEQzNEM4OUQ5RDlG MUU3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWQ3NTUzNDctNmIxYy00MmMxLTlm NTQtZDdlYWIyMmUxODJjLzAvOEI0NjM5ODRDMTY1MjJBMzVGQUFCNjA3MDhEMzRD ODlEOUQ5RjFFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADK0MQoOo1KjeT2EZRK//7hLHZ3bSG4UqiTR NyB2onhdPWcvRFZNdlCjvrWZ9UYL2Mx+1GRygjgFk4VFzlscyQQYDpbq7ls+OGns yABsHNw3UrDDh66JEyYqIVhkRrvVGmFG1RsUI72VDPca8fkbLsmJK3S6TxT0tf7J d9b1nmR1bEsvHxe3zz0HjH28cA93LjF8UxITZFVepq9Grjq66GE8yiO9gr5vabHL xALm8O7iMNffYq3o4swp+XCKt1SC3U27hLcsnwCBganTjHD0uM5vflpBAsdnBD6D DlZtZLg/hNSMFeFEtmon78dUlyCNT5af6ZKrqvlYTNPeEGhKR3c= -----END CERTIFICATE-----Generated at Mon Nov 2 02:55:48 2026 by rpki-client