$ rpki-client -vvvf rpki-rsync.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/8FFAA6656CAEB189705F03C7B4148624E4A80597.mft File: 8FFAA6656CAEB189705F03C7B4148624E4A80597.mft (raw, json) Hash identifier: bS6Lgjkrn3p2VhmfERGks966bAnUEi0IWeQ1BX/7Q0o= Subject key identifier: 6B:CA:87:AC:1E:E2:68:27:A2:94:92:80:DB:D3:7B:72:71:B1:C1:D3 Authority key identifier: 8F:FA:A6:65:6C:AE:B1:89:70:5F:03:C7:B4:14:86:24:E4:A8:05:97 Certificate issuer: /CN=8FFAA6656CAEB189705F03C7B4148624E4A80597 Certificate serial: 7499CB64E3526A8C481EFA9D5BE3F162A7D24788 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8FFAA6656CAEB189705F03C7B4148624E4A80597.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/8FFAA6656CAEB189705F03C7B4148624E4A80597.mft Manifest number: F7 Signing time: Wed 04 Nov 2026 04:38:55 +0000 Manifest this update: Wed 04 Nov 2026 04:33:55 +0000 Manifest next update: Thu 05 Nov 2026 07:07:55 +0000 Files and hashes: 1: 3230322e35302e3230302e302f32342d3234203d3e203535363936.roa (hash: j7IknYgKj7dl1bu8AJ/aQ/eLpW5VQAB5YDLHEEVUQxU=) 2: 8FFAA6656CAEB189705F03C7B4148624E4A80597.crl (hash: Q4GrZ6JH9XQFMVFFGrUemATGRrm42xCh42vgpNXjcT0=) 3: 3230322e35302e3230332e302f32342d3234203d3e203535363936.roa (hash: QgX53d3ZPmwqUeHqTZtdjccW/DQcVacKXuBLz3xuE+Q=) 4: 3230322e35302e3230312e302f32342d3234203d3e203535363936.roa (hash: 9g/ng/5n6hJoQNhHnUHUl6+xhhnGERFtgslQ205VyPU=) 5: 3230322e35302e3230322e302f32342d3234203d3e203535363936.roa (hash: 5tE3feCM9vyNUB/qpwvXZKU/4/GsAVh0LYhHMntcLoo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/8FFAA6656CAEB189705F03C7B4148624E4A80597.crl rsync://rpki-rsync.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/8FFAA6656CAEB189705F03C7B4148624E4A80597.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8FFAA6656CAEB189705F03C7B4148624E4A80597.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 07:07:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:99:cb:64:e3:52:6a:8c:48:1e:fa:9d:5b:e3:f1:62:a7:d2:47:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FFAA6656CAEB189705F03C7B4148624E4A80597 Validity Not Before: Nov 4 04:33:55 2026 GMT Not After : Nov 5 07:07:55 2026 GMT Subject: CN=6BCA87AC1EE26827A2949280DBD37B7271B1C1D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:18:74:71:16:d7:b0:c8:3f:98:c5:b9:8c:61: 15:67:ce:1c:64:28:14:96:f9:f1:8b:b7:cb:be:f0: 34:5d:c5:f3:e2:f1:db:0d:d8:ac:28:31:bb:03:5f: f7:a4:46:15:0d:78:c2:a2:82:15:13:93:14:8d:c9: 56:7b:8e:91:d5:99:53:34:47:0b:7f:b0:0b:01:7e: 61:a9:fc:ff:c4:0e:bb:54:9f:f2:b7:f1:fd:ff:d9: 78:86:30:06:72:96:92:c8:3b:1c:9b:51:6c:c2:1c: f1:c5:d8:c8:41:47:db:ec:29:51:b9:5e:3c:b5:55: 53:4e:ef:75:37:47:e5:a3:fc:23:d2:c3:59:5f:eb: 4f:2c:21:98:ae:7b:1e:bd:b0:71:2b:f6:41:49:1f: d0:e7:86:ac:51:b4:94:c0:61:23:4b:9d:3d:e4:ba: 8c:73:53:c2:71:a4:2d:d2:3a:d0:c2:6b:f5:a0:9b: 5d:ef:03:0a:93:a6:87:7b:2b:53:93:9d:03:f0:b7: 41:c5:89:95:1b:20:53:e8:9e:a4:79:2b:b9:20:ce: 01:2e:03:7e:06:3c:94:59:89:52:56:f2:35:33:bf: ba:59:53:3d:67:c6:d3:f9:24:b8:61:d1:f1:a6:f8: a6:6c:91:6a:72:f7:81:27:5e:39:0a:65:09:b3:c3: 02:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:CA:87:AC:1E:E2:68:27:A2:94:92:80:DB:D3:7B:72:71:B1:C1:D3 X509v3 Authority Key Identifier: keyid:8F:FA:A6:65:6C:AE:B1:89:70:5F:03:C7:B4:14:86:24:E4:A8:05:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/8FFAA6656CAEB189705F03C7B4148624E4A80597.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8FFAA6656CAEB189705F03C7B4148624E4A80597.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/8FFAA6656CAEB189705F03C7B4148624E4A80597.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:02:94:ad:8f:0b:9c:95:1c:c0:2f:1a:c6:51:0d:d4:fd:b1: 42:15:92:df:5e:ac:e2:67:f7:70:db:7d:45:a1:e4:b8:45:45: 86:1b:f9:95:6b:ec:d6:14:7f:6a:06:c9:4f:b9:aa:2a:21:e8: db:8a:09:1d:5f:3b:1a:e4:3c:85:c6:02:ec:f9:5f:aa:95:44: ad:2c:d6:81:b0:7e:b7:04:8d:14:a0:7c:2c:0c:3a:19:fc:1d: a7:73:47:3a:54:b2:fc:19:5b:42:60:20:dc:b0:4c:49:3e:90: f3:75:22:08:f7:16:ac:cd:a6:5d:69:2b:62:97:d7:4d:c7:5c: cf:0c:26:12:a8:0c:82:bd:23:85:0f:aa:5f:a5:01:0b:23:c2: 75:d8:c3:70:f4:3a:ba:3b:ab:48:dc:79:47:01:b0:e5:15:04: 03:26:d3:e1:b9:96:9e:70:4c:04:da:76:34:37:12:9a:a7:1a: 3c:cf:9f:33:8c:eb:70:4e:f3:44:49:d8:0b:3a:af:33:d4:49: 15:5c:77:55:03:13:34:3a:53:40:f2:a9:ac:a9:92:b8:42:f3: f7:30:df:17:76:b6:4c:de:7e:73:bc:ae:fa:14:ef:eb:e9:4e: 15:8f:d4:6f:3f:ee:06:54:d8:72:e7:55:7a:6f:cf:a5:ca:cd: f7:67:50:a9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdJnLZONSaoxIHvqdW+PxYqfSR4gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZGQUE2NjU2Q0FFQjE4OTcwNUYwM0M3QjQxNDg2MjRF NEE4MDU5NzAeFw0yNjExMDQwNDMzNTVaFw0yNjExMDUwNzA3NTVaMDMxMTAvBgNV BAMTKDZCQ0E4N0FDMUVFMjY4MjdBMjk0OTI4MERCRDM3QjcyNzFCMUMxRDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMGHRxFtewyD+YxbmMYRVnzhxk KBSW+fGLt8u+8DRdxfPi8dsN2KwoMbsDX/ekRhUNeMKighUTkxSNyVZ7jpHVmVM0 Rwt/sAsBfmGp/P/EDrtUn/K38f3/2XiGMAZylpLIOxybUWzCHPHF2MhBR9vsKVG5 Xjy1VVNO73U3R+Wj/CPSw1lf608sIZiuex69sHEr9kFJH9DnhqxRtJTAYSNLnT3k uoxzU8JxpC3SOtDCa/Wgm13vAwqTpod7K1OTnQPwt0HFiZUbIFPonqR5K7kgzgEu A34GPJRZiVJW8jUzv7pZUz1nxtP5JLhh0fGm+KZskWpy94EnXjkKZQmzwwLbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUa8qHrB7iaCeilJKA29N7cnGxwdMwHwYDVR0j BBgwFoAUj/qmZWyusYlwXwPHtBSGJOSoBZcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTI4ODBkZWUtN2FhMi00YmU0LWJmMzUtY2RiZDExZDc5NTA3LzAvOEZGQUE2NjU2 Q0FFQjE4OTcwNUYwM0M3QjQxNDg2MjRFNEE4MDU5Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84RkZBQTY2NTZDQUVCMTg5NzA1RjAzQzdCNDE0ODYyNEU0QTgw NTk3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTI4ODBkZWUtN2FhMi00YmU0LWJm MzUtY2RiZDExZDc5NTA3LzAvOEZGQUE2NjU2Q0FFQjE4OTcwNUYwM0M3QjQxNDg2 MjRFNEE4MDU5Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACgClK2PC5yVHMAvGsZRDdT9sUIVkt9erOJn 93DbfUWh5LhFRYYb+ZVr7NYUf2oGyU+5qioh6NuKCR1fOxrkPIXGAuz5X6qVRK0s 1oGwfrcEjRSgfCwMOhn8HadzRzpUsvwZW0JgINywTEk+kPN1Igj3FqzNpl1pK2KX 103HXM8MJhKoDIK9I4UPql+lAQsjwnXYw3D0Oro7q0jceUcBsOUVBAMm0+G5lp5w TATadjQ3EpqnGjzPnzOM63BO80RJ2As6rzPUSRVcd1UDEzQ6U0DyqaypkrhC8/cw 3xd2tkzefnO8rvoU7+vpThWP1G8/7gZU2HLnVXpvz6XKzfdnUKk= -----END CERTIFICATE-----Generated at Thu Nov 5 01:17:11 2026 by rpki-client