$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/0/8E0F94081A4207FEB15CB2A5997CBB738543C65E.mft File: 8E0F94081A4207FEB15CB2A5997CBB738543C65E.mft (raw, json) Hash identifier: a4zMSF/P7voPJxVt7xnmCLMChdZFY7sU5qiBO5LaeC8= Subject key identifier: D3:43:A9:6C:9A:64:77:6F:F4:43:CE:A3:8B:67:C0:49:79:B7:1B:4F Authority key identifier: 8E:0F:94:08:1A:42:07:FE:B1:5C:B2:A5:99:7C:BB:73:85:43:C6:5E Certificate issuer: /CN=8E0F94081A4207FEB15CB2A5997CBB738543C65E Certificate serial: 3BC1C7305D849194524BCB859217148965B872D3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/8E0F94081A4207FEB15CB2A5997CBB738543C65E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/0/8E0F94081A4207FEB15CB2A5997CBB738543C65E.mft Manifest number: F5 Signing time: Tue 03 Nov 2026 01:03:48 +0000 Manifest this update: Tue 03 Nov 2026 00:58:48 +0000 Manifest next update: Wed 04 Nov 2026 04:03:48 +0000 Files and hashes: 1: 8E0F94081A4207FEB15CB2A5997CBB738543C65E.crl (hash: 1nYsNEZbJwSr+nbekrX9BvqE16H4FbKwCQ0Z4OHGyko=) 2: 3136302e32322e3130312e302f32342d3234203d3e20313532383039.roa (hash: 77972k6MYcuZdjQWO5NsuORM4k9B55J3rC8Pahn1Zak=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/0/8E0F94081A4207FEB15CB2A5997CBB738543C65E.crl rsync://rpki-rsync.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/0/8E0F94081A4207FEB15CB2A5997CBB738543C65E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/8E0F94081A4207FEB15CB2A5997CBB738543C65E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Nov 2026 04:03:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:c1:c7:30:5d:84:91:94:52:4b:cb:85:92:17:14:89:65:b8:72:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E0F94081A4207FEB15CB2A5997CBB738543C65E Validity Not Before: Nov 3 00:58:48 2026 GMT Not After : Nov 4 04:03:48 2026 GMT Subject: CN=D343A96C9A64776FF443CEA38B67C04979B71B4F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:41:d5:63:1c:6d:52:a0:95:9f:81:ec:69:88: 3a:61:64:43:ea:fd:df:78:c5:72:07:9a:bc:8d:12: 5e:1c:1a:0c:b3:64:4e:ed:6e:db:cb:b7:8b:bf:59: ea:e6:a0:e2:c4:28:a2:64:0a:cd:17:d3:58:3a:6f: dd:b1:bc:5e:11:bb:89:14:8d:f0:ef:30:4f:d8:74: 41:dc:c7:ea:3c:ad:0e:e8:bf:6a:65:61:bc:ce:6a: 03:ae:1b:e3:83:40:f8:61:04:92:13:a3:b8:8e:c9: d5:c5:21:fc:3d:d5:38:53:28:69:50:c3:2b:37:b4: 0a:a4:80:68:38:ce:6a:7e:b4:09:1e:dd:76:de:a5: 3b:21:a8:8e:f2:d5:0f:88:fb:75:94:d5:ff:ce:a8: e7:0a:8c:8b:b6:4b:fb:89:f9:55:01:99:ac:71:94: 54:68:75:9d:d5:34:70:1b:07:c7:68:1e:85:ae:29: 6c:ac:f2:da:07:58:46:7e:ec:4d:cf:62:e4:13:40: c0:48:b1:50:a1:9f:18:4c:9c:87:e7:64:60:9d:f0: 99:2e:03:fb:4e:27:8c:44:3d:8b:bc:67:49:95:81: 43:35:ff:44:2b:9a:b0:e5:13:8e:b6:1e:33:4f:5c: 31:87:e8:0f:87:f3:df:6a:0e:6a:31:3c:2a:b1:9c: 9f:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:43:A9:6C:9A:64:77:6F:F4:43:CE:A3:8B:67:C0:49:79:B7:1B:4F X509v3 Authority Key Identifier: keyid:8E:0F:94:08:1A:42:07:FE:B1:5C:B2:A5:99:7C:BB:73:85:43:C6:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/0/8E0F94081A4207FEB15CB2A5997CBB738543C65E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/8E0F94081A4207FEB15CB2A5997CBB738543C65E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/0/8E0F94081A4207FEB15CB2A5997CBB738543C65E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:e2:32:b8:3e:de:44:ab:d7:7b:d3:1d:d1:2c:7f:cc:b7:f2: 9f:23:28:62:33:56:67:f8:8b:aa:70:6f:b6:b6:97:c0:d6:9c: 09:a0:d6:3f:90:2a:54:b0:f5:ae:5e:18:71:ce:91:86:b7:bb: 43:73:80:f6:32:17:28:d6:5c:c2:15:25:f4:65:fa:96:e3:0d: 03:db:b9:cf:4e:58:d7:b3:b6:50:c0:28:a1:85:47:9d:b7:b0: 21:e9:e2:db:1c:6a:c6:38:d8:ed:38:ac:77:8c:ac:eb:61:f9: 36:fc:49:e2:18:eb:a2:d3:06:66:f3:fa:2c:ed:7f:b1:25:9b: 90:8c:bf:0f:8a:18:6b:6f:55:df:ab:8b:ca:1a:5d:ef:9a:ee: cd:87:a5:8b:c8:c7:fe:d9:59:95:04:9e:2a:b5:e4:67:60:03: 9d:22:f0:50:1e:99:2a:aa:2e:98:6c:44:0f:04:e6:0c:7a:c6: d8:0f:6b:b2:2a:28:ee:67:cb:f6:aa:f5:33:3e:e2:c5:be:c7: 0c:a9:ab:94:29:1f:bd:d4:bc:9e:67:f5:77:15:f9:ef:47:d6: 1a:c4:f6:fb:fb:55:78:15:6f:89:31:f9:1b:99:ba:2a:94:2f: 2f:29:1c:8a:a1:41:22:4a:ca:43:86:49:76:df:c5:8e:f9:09: 8e:78:21:87 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO8HHMF2EkZRSS8uFkhcUiWW4ctMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEUwRjk0MDgxQTQyMDdGRUIxNUNCMkE1OTk3Q0JCNzM4 NTQzQzY1RTAeFw0yNjExMDMwMDU4NDhaFw0yNjExMDQwNDAzNDhaMDMxMTAvBgNV BAMTKEQzNDNBOTZDOUE2NDc3NkZGNDQzQ0VBMzhCNjdDMDQ5NzlCNzFCNEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoQdVjHG1SoJWfgexpiDphZEPq /d94xXIHmryNEl4cGgyzZE7tbtvLt4u/WermoOLEKKJkCs0X01g6b92xvF4Ru4kU jfDvME/YdEHcx+o8rQ7ov2plYbzOagOuG+ODQPhhBJITo7iOydXFIfw91ThTKGlQ wys3tAqkgGg4zmp+tAke3XbepTshqI7y1Q+I+3WU1f/OqOcKjIu2S/uJ+VUBmaxx lFRodZ3VNHAbB8doHoWuKWys8toHWEZ+7E3PYuQTQMBIsVChnxhMnIfnZGCd8Jku A/tOJ4xEPYu8Z0mVgUM1/0QrmrDlE462HjNPXDGH6A+H899qDmoxPCqxnJ8HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU00OpbJpkd2/0Q86ji2fASXm3G08wHwYDVR0j BBgwFoAUjg+UCBpCB/6xXLKlmXy7c4VDxl4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWQ4ZWYxMTktN2RkZi00NWU1LTg2MzQtMzhiNzcyNThjYmNjLzAvOEUwRjk0MDgx QTQyMDdGRUIxNUNCMkE1OTk3Q0JCNzM4NTQzQzY1RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC84RTBGOTQwODFBNDIwN0ZFQjE1Q0IyQTU5OTdDQkI3Mzg1NDND NjVFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWQ4ZWYxMTktN2RkZi00NWU1LTg2 MzQtMzhiNzcyNThjYmNjLzAvOEUwRjk0MDgxQTQyMDdGRUIxNUNCMkE1OTk3Q0JC NzM4NTQzQzY1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHniMrg+3kSr13vTHdEsf8y38p8jKGIzVmf4 i6pwb7a2l8DWnAmg1j+QKlSw9a5eGHHOkYa3u0NzgPYyFyjWXMIVJfRl+pbjDQPb uc9OWNeztlDAKKGFR523sCHp4tscasY42O04rHeMrOth+Tb8SeIY66LTBmbz+izt f7Elm5CMvw+KGGtvVd+ri8oaXe+a7s2HpYvIx/7ZWZUEniq15GdgA50i8FAemSqq LphsRA8E5gx6xtgPa7IqKO5ny/aq9TM+4sW+xwypq5QpH73UvJ5n9XcV+e9H1hrE 9vv7VXgVb4kx+RuZuiqULy8pHIqhQSJKykOGSXbfxY75CY54IYc= -----END CERTIFICATE-----Generated at Tue Nov 3 22:46:41 2026 by rpki-client