$ rpki-client -vvvf rpki-rsync.idnic.net/repo/31b433a5-72b1-4653-99d3-9469c8b8b762/0/8100B25D994714EDA24AA78389FB6369505FB6A1.mft File: 8100B25D994714EDA24AA78389FB6369505FB6A1.mft (raw, json) Hash identifier: i2GyMe9XvaPQgWbSvsM8kimDBknzdbzhJBYjTXptIzo= Subject key identifier: 75:65:96:72:7D:9D:C5:2F:37:81:49:E1:08:9E:C1:8A:BB:1F:34:BE Authority key identifier: 81:00:B2:5D:99:47:14:ED:A2:4A:A7:83:89:FB:63:69:50:5F:B6:A1 Certificate issuer: /CN=8100B25D994714EDA24AA78389FB6369505FB6A1 Certificate serial: 702A2ABB18C8D169AA3127F68A6B1D1146C909C9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/8100B25D994714EDA24AA78389FB6369505FB6A1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/31b433a5-72b1-4653-99d3-9469c8b8b762/0/8100B25D994714EDA24AA78389FB6369505FB6A1.mft Manifest number: F9 Signing time: Tue 03 Nov 2026 10:21:03 +0000 Manifest this update: Tue 03 Nov 2026 10:16:03 +0000 Manifest next update: Wed 04 Nov 2026 12:50:03 +0000 Files and hashes: 1: 3135372e36362e32392e302f32342d3234203d3e203539323831.roa (hash: Lkb66D/b6HHbDg6MW2ra2IYcOlvwvMwBNjyaQ7Wpqq4=) 2: 8100B25D994714EDA24AA78389FB6369505FB6A1.crl (hash: It6skNEYdqxc2gtiN6wVni0dDryy+b9sN4CUeQH1kTM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/31b433a5-72b1-4653-99d3-9469c8b8b762/0/8100B25D994714EDA24AA78389FB6369505FB6A1.crl rsync://rpki-rsync.idnic.net/repo/31b433a5-72b1-4653-99d3-9469c8b8b762/0/8100B25D994714EDA24AA78389FB6369505FB6A1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/8100B25D994714EDA24AA78389FB6369505FB6A1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Nov 2026 12:50:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:2a:2a:bb:18:c8:d1:69:aa:31:27:f6:8a:6b:1d:11:46:c9:09:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8100B25D994714EDA24AA78389FB6369505FB6A1 Validity Not Before: Nov 3 10:16:03 2026 GMT Not After : Nov 4 12:50:03 2026 GMT Subject: CN=756596727D9DC52F378149E1089EC18ABB1F34BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a6:89:dd:75:77:44:bf:d3:15:99:3b:c8:1d: 2a:19:72:aa:32:fe:0b:ad:6a:46:50:2f:93:53:54: 07:b8:97:ea:97:72:57:60:79:a2:37:5c:be:62:85: 75:a0:19:e8:79:ab:22:fe:83:77:21:79:ff:cb:bd: 22:49:4b:da:46:3f:ff:df:44:12:3b:58:c7:22:3c: 86:95:d4:e9:4b:98:a0:07:36:62:44:cc:1b:37:a0: fa:80:0b:f8:e0:ba:5e:f7:86:7a:46:92:72:6c:a1: fe:07:bd:c3:6a:e5:73:f3:ba:48:76:c6:2a:67:4e: f0:41:f4:8b:46:50:cc:9e:95:13:eb:04:2f:15:61: ba:53:fe:16:f3:d1:be:54:ed:4c:bc:ff:11:37:2b: f3:fa:24:c9:8d:a8:f4:c7:91:98:3e:c2:dd:b7:ea: 2b:08:79:34:ab:a4:7d:df:07:ad:1d:2d:9a:8e:0a: 62:dc:e6:a3:f2:92:35:8d:19:b5:af:54:24:47:cf: e7:58:fb:f4:e6:1b:55:d6:24:a9:b6:d5:9c:d0:2b: 00:6b:c5:1e:fa:f4:88:4d:f8:31:78:2d:33:d8:be: eb:ed:73:3e:f9:2c:b1:38:c4:1d:c7:4c:d9:07:c9: c6:05:a6:1c:07:c4:36:27:3e:5d:5e:ba:db:e9:ee: ad:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:65:96:72:7D:9D:C5:2F:37:81:49:E1:08:9E:C1:8A:BB:1F:34:BE X509v3 Authority Key Identifier: keyid:81:00:B2:5D:99:47:14:ED:A2:4A:A7:83:89:FB:63:69:50:5F:B6:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/31b433a5-72b1-4653-99d3-9469c8b8b762/0/8100B25D994714EDA24AA78389FB6369505FB6A1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/8100B25D994714EDA24AA78389FB6369505FB6A1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/31b433a5-72b1-4653-99d3-9469c8b8b762/0/8100B25D994714EDA24AA78389FB6369505FB6A1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:18:29:97:07:78:3c:a1:84:34:8c:46:bd:83:cd:d9:41:04: 41:47:a6:5c:3a:31:62:c2:03:db:07:c0:af:6f:08:58:d9:ff: 10:6f:25:f2:96:6c:c3:d6:10:a0:87:f6:39:51:37:47:1e:6c: 4e:c3:49:47:12:02:4f:ba:99:62:cb:10:06:08:1b:e8:a4:d7: 44:86:ed:fc:ba:90:11:3f:7a:5c:80:52:0c:2c:30:20:33:fd: f8:77:d5:3c:70:1a:cb:eb:a2:d3:e4:88:7c:3a:3e:05:89:f7: 30:37:2f:75:4f:24:59:fd:23:a5:fb:c6:f6:78:f1:60:3b:49: ab:0e:62:7a:a6:13:b2:54:bf:23:82:0a:3d:84:6f:74:dc:3e: b6:25:9d:49:e4:11:54:3e:f7:24:07:1d:7e:4c:3e:7d:5f:c5: 31:13:8c:13:0a:74:0c:01:4e:52:d6:c8:a0:e5:9d:93:3b:a2: 61:62:b8:a3:6d:de:7d:d8:8b:18:5c:3c:7e:d2:f0:e0:16:c2: 28:57:83:69:f2:e0:e9:dd:b6:e4:b4:5e:26:c8:4f:51:02:c0: bd:9b:a5:ef:b2:19:2c:53:7b:5a:6e:cf:99:0e:3b:40:21:3a: 7f:04:d7:28:8b:6e:41:8f:5b:c3:c7:5d:01:20:0d:7a:1f:37: 10:75:16:d1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcCoquxjI0WmqMSf2imsdEUbJCckwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODEwMEIyNUQ5OTQ3MTRFREEyNEFBNzgzODlGQjYzNjk1 MDVGQjZBMTAeFw0yNjExMDMxMDE2MDNaFw0yNjExMDQxMjUwMDNaMDMxMTAvBgNV BAMTKDc1NjU5NjcyN0Q5REM1MkYzNzgxNDlFMTA4OUVDMThBQkIxRjM0QkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzponddXdEv9MVmTvIHSoZcqoy /gutakZQL5NTVAe4l+qXcldgeaI3XL5ihXWgGeh5qyL+g3chef/LvSJJS9pGP//f RBI7WMciPIaV1OlLmKAHNmJEzBs3oPqAC/jgul73hnpGknJsof4HvcNq5XPzukh2 xipnTvBB9ItGUMyelRPrBC8VYbpT/hbz0b5U7Uy8/xE3K/P6JMmNqPTHkZg+wt23 6isIeTSrpH3fB60dLZqOCmLc5qPykjWNGbWvVCRHz+dY+/TmG1XWJKm21ZzQKwBr xR769IhN+DF4LTPYvuvtcz75LLE4xB3HTNkHycYFphwHxDYnPl1eutvp7q3pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdWWWcn2dxS83gUnhCJ7BirsfNL4wHwYDVR0j BBgwFoAUgQCyXZlHFO2iSqeDiftjaVBftqEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzFiNDMzYTUtNzJiMS00NjUzLTk5ZDMtOTQ2OWM4YjhiNzYyLzAvODEwMEIyNUQ5 OTQ3MTRFREEyNEFBNzgzODlGQjYzNjk1MDVGQjZBMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC84MTAwQjI1RDk5NDcxNEVEQTI0QUE3ODM4OUZCNjM2OTUwNUZC NkExLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzFiNDMzYTUtNzJiMS00NjUzLTk5 ZDMtOTQ2OWM4YjhiNzYyLzAvODEwMEIyNUQ5OTQ3MTRFREEyNEFBNzgzODlGQjYz Njk1MDVGQjZBMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADEYKZcHeDyhhDSMRr2DzdlBBEFHplw6MWLC A9sHwK9vCFjZ/xBvJfKWbMPWEKCH9jlRN0cebE7DSUcSAk+6mWLLEAYIG+ik10SG 7fy6kBE/elyAUgwsMCAz/fh31TxwGsvrotPkiHw6PgWJ9zA3L3VPJFn9I6X7xvZ4 8WA7SasOYnqmE7JUvyOCCj2Eb3TcPrYlnUnkEVQ+9yQHHX5MPn1fxTETjBMKdAwB TlLWyKDlnZM7omFiuKNt3n3YixhcPH7S8OAWwihXg2ny4OndtuS0XibIT1ECwL2b pe+yGSxTe1puz5kOO0AhOn8E1yiLbkGPW8PHXQEgDXofNxB1FtE= -----END CERTIFICATE-----Generated at Tue Nov 3 12:14:01 2026 by rpki-client