$ rpki-client -vvvf rpki-rsync.idnic.net/repo/56fd9a58-a906-4029-92e2-adcb56ae18bd/0/8BE268465CE3BF5EB0DF3613FEBDD3C276F5BB2D.mft File: 8BE268465CE3BF5EB0DF3613FEBDD3C276F5BB2D.mft (raw, json) Hash identifier: O3yXo2ttt1uRzk7nHTqD9ntrOSPF9M0nwdPeSkaQNa0= Subject key identifier: 18:C6:69:CA:A1:0D:82:EE:42:1B:E8:82:6F:E6:7A:09:EB:31:7E:44 Authority key identifier: 8B:E2:68:46:5C:E3:BF:5E:B0:DF:36:13:FE:BD:D3:C2:76:F5:BB:2D Certificate issuer: /CN=8BE268465CE3BF5EB0DF3613FEBDD3C276F5BB2D Certificate serial: 1D92ED309D6A39ACE2C3D3ACFB53FC30CD9A2E9E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8BE268465CE3BF5EB0DF3613FEBDD3C276F5BB2D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/56fd9a58-a906-4029-92e2-adcb56ae18bd/0/8BE268465CE3BF5EB0DF3613FEBDD3C276F5BB2D.mft Manifest number: F8 Signing time: Wed 04 Nov 2026 12:03:08 +0000 Manifest this update: Wed 04 Nov 2026 11:58:08 +0000 Manifest next update: Thu 05 Nov 2026 15:54:08 +0000 Files and hashes: 1: 8BE268465CE3BF5EB0DF3613FEBDD3C276F5BB2D.crl (hash: 5rkjw5HQkllaq60onahC1S+ygstRQDV9MGYOaa4xwbE=) 2: 3130332e3137382e32302e302f32342d3234203d3e20313439333139.roa (hash: LvhMo9Ji9pG6mVQPdJp//+4N2gdaqqVMar2Fp2RKr1Q=) 3: 3130332e3137382e32302e302f32332d3233203d3e20313439333139.roa (hash: NY8uhqteE/p2Oynj2juQDQqNJOeFUT9zptMVOdrA1BE=) 4: 3130332e3137382e32312e302f32342d3234203d3e20313439333139.roa (hash: 7H5ayDey2sF8s3x7vuViq2lu5YPxfK0ha8SKey7N61Q=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/56fd9a58-a906-4029-92e2-adcb56ae18bd/0/8BE268465CE3BF5EB0DF3613FEBDD3C276F5BB2D.crl rsync://rpki-rsync.idnic.net/repo/56fd9a58-a906-4029-92e2-adcb56ae18bd/0/8BE268465CE3BF5EB0DF3613FEBDD3C276F5BB2D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8BE268465CE3BF5EB0DF3613FEBDD3C276F5BB2D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 11:48:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:92:ed:30:9d:6a:39:ac:e2:c3:d3:ac:fb:53:fc:30:cd:9a:2e:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BE268465CE3BF5EB0DF3613FEBDD3C276F5BB2D Validity Not Before: Nov 4 11:58:08 2026 GMT Not After : Nov 5 15:54:08 2026 GMT Subject: CN=18C669CAA10D82EE421BE8826FE67A09EB317E44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:94:7d:98:7c:f9:16:32:5c:2d:ea:a9:22:88: 84:57:65:b4:df:c5:0c:89:70:d5:94:db:60:9c:b6: e2:0a:00:3c:0f:9e:94:ed:17:8d:90:8b:55:5e:27: c8:41:1e:5b:f3:0c:5a:b6:97:d2:e1:de:cb:90:5f: 60:0f:44:45:1f:ce:6b:11:9a:9d:aa:2e:de:1f:3e: 00:81:bb:74:2f:66:b3:c4:fa:d0:7d:89:da:fd:ea: 12:f1:ac:28:c5:cd:11:37:c9:31:27:48:ab:d5:65: 7c:22:36:c5:ab:1a:96:69:fa:01:78:cf:71:84:1c: a7:63:65:cf:ca:39:72:2a:fc:b6:4b:4f:2c:f3:d1: 42:94:cc:0a:89:16:50:88:21:5b:c8:3b:32:87:d3: d0:5b:06:a3:0e:6b:71:e3:79:af:de:08:8c:1f:b5: 59:5c:b9:10:42:bf:7c:1e:31:47:e1:8b:64:57:50: d8:f3:f4:02:9b:c4:78:7e:0a:11:64:0c:93:1a:05: 93:31:6e:eb:4c:5b:43:73:af:54:e8:d3:40:5d:16: f2:d3:96:f3:0a:00:a0:f1:33:7e:3b:8b:54:82:82: 82:f6:36:a0:b6:e1:e5:08:3c:56:bf:7b:67:b1:c0: 90:37:89:f3:13:c9:1e:82:df:96:2b:6e:3a:01:2f: 3f:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:C6:69:CA:A1:0D:82:EE:42:1B:E8:82:6F:E6:7A:09:EB:31:7E:44 X509v3 Authority Key Identifier: keyid:8B:E2:68:46:5C:E3:BF:5E:B0:DF:36:13:FE:BD:D3:C2:76:F5:BB:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/56fd9a58-a906-4029-92e2-adcb56ae18bd/0/8BE268465CE3BF5EB0DF3613FEBDD3C276F5BB2D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8BE268465CE3BF5EB0DF3613FEBDD3C276F5BB2D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/56fd9a58-a906-4029-92e2-adcb56ae18bd/0/8BE268465CE3BF5EB0DF3613FEBDD3C276F5BB2D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:77:aa:e0:23:8f:2c:7f:13:66:e4:1d:72:8d:53:3d:bb:81: 59:32:6a:67:03:9c:18:19:9d:99:35:53:78:90:2c:92:64:4f: 0e:e4:ed:d2:c0:55:d7:e9:74:c9:69:86:7e:f2:6c:a8:dc:81: 5a:5a:58:95:f8:e5:eb:a5:06:90:dc:18:4d:04:7e:c3:12:bf: 88:1e:b2:f6:da:d5:66:a1:92:53:76:d7:8b:35:c1:cb:76:c0: eb:e9:36:24:a9:7a:a0:36:d2:a1:77:59:69:ee:2b:9a:49:cb: c1:a8:c2:06:0b:87:b6:44:f8:66:43:cc:ed:17:af:cc:66:ed: 7c:23:34:15:ff:68:4f:6c:fe:95:d3:c9:14:8c:bc:86:24:78: 33:d1:23:b7:da:32:c6:4f:b6:d8:1e:c2:79:93:37:df:31:7c: 4c:f9:95:c6:e3:f7:f1:2e:60:64:1c:a8:85:40:f8:2c:6c:74: d0:1b:82:32:17:66:4a:ec:20:5a:37:fc:7a:7a:a2:9b:b1:a2: b5:d7:fb:6e:4a:d9:c3:42:48:5d:eb:f2:09:a9:86:10:c4:03: 59:12:4b:21:ac:15:0f:70:96:de:f1:23:2f:a7:86:54:60:16: 06:a7:95:57:40:a6:59:77:e2:d4:0a:52:9d:75:40:8c:7c:fe: 8f:19:eb:91 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHZLtMJ1qOaziw9Os+1P8MM2aLp4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJFMjY4NDY1Q0UzQkY1RUIwREYzNjEzRkVCREQzQzI3 NkY1QkIyRDAeFw0yNjExMDQxMTU4MDhaFw0yNjExMDUxNTU0MDhaMDMxMTAvBgNV BAMTKDE4QzY2OUNBQTEwRDgyRUU0MjFCRTg4MjZGRTY3QTA5RUIzMTdFNDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqlH2YfPkWMlwt6qkiiIRXZbTf xQyJcNWU22CctuIKADwPnpTtF42Qi1VeJ8hBHlvzDFq2l9Lh3suQX2APREUfzmsR mp2qLt4fPgCBu3QvZrPE+tB9idr96hLxrCjFzRE3yTEnSKvVZXwiNsWrGpZp+gF4 z3GEHKdjZc/KOXIq/LZLTyzz0UKUzAqJFlCIIVvIOzKH09BbBqMOa3Hjea/eCIwf tVlcuRBCv3weMUfhi2RXUNjz9AKbxHh+ChFkDJMaBZMxbutMW0Nzr1To00BdFvLT lvMKAKDxM347i1SCgoL2NqC24eUIPFa/e2exwJA3ifMTyR6C35YrbjoBLz8DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGMZpyqENgu5CG+iCb+Z6CesxfkQwHwYDVR0j BBgwFoAUi+JoRlzjv16w3zYT/r3Twnb1uy0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTZmZDlhNTgtYTkwNi00MDI5LTkyZTItYWRjYjU2YWUxOGJkLzAvOEJFMjY4NDY1 Q0UzQkY1RUIwREYzNjEzRkVCREQzQzI3NkY1QkIyRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84QkUyNjg0NjVDRTNCRjVFQjBERjM2MTNGRUJERDNDMjc2RjVC QjJELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTZmZDlhNTgtYTkwNi00MDI5LTky ZTItYWRjYjU2YWUxOGJkLzAvOEJFMjY4NDY1Q0UzQkY1RUIwREYzNjEzRkVCREQz QzI3NkY1QkIyRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADt3quAjjyx/E2bkHXKNUz27gVkyamcDnBgZ nZk1U3iQLJJkTw7k7dLAVdfpdMlphn7ybKjcgVpaWJX45eulBpDcGE0EfsMSv4ge svba1WahklN214s1wct2wOvpNiSpeqA20qF3WWnuK5pJy8GowgYLh7ZE+GZDzO0X r8xm7XwjNBX/aE9s/pXTyRSMvIYkeDPRI7faMsZPttgewnmTN98xfEz5lcbj9/Eu YGQcqIVA+CxsdNAbgjIXZkrsIFo3/Hp6opuxorXX+25K2cNCSF3r8gmphhDEA1kS SyGsFQ9wlt7xIy+nhlRgFganlVdApll34tQKUp11QIx8/o8Z65E= -----END CERTIFICATE-----Generated at Wed Nov 4 17:08:40 2026 by rpki-client