$ rpki-client -vvvf rpki-rsync.idnic.net/repo/864c3155-c8ff-4207-a2dc-51e005530b52/0/8A88C62D67BF9B5D27095014663D7564A99145C4.mft File: 8A88C62D67BF9B5D27095014663D7564A99145C4.mft (raw, json) Hash identifier: Z9QNroLs9M6D0/N+JGsKZa5ht6Fwx6Gs0QF1vEfhVOE= Subject key identifier: 4D:82:5D:16:73:5F:E5:E0:30:3E:46:B4:F6:19:FC:8C:82:40:39:C9 Authority key identifier: 8A:88:C6:2D:67:BF:9B:5D:27:09:50:14:66:3D:75:64:A9:91:45:C4 Certificate issuer: /CN=8A88C62D67BF9B5D27095014663D7564A99145C4 Certificate serial: 78ACE144CBE1493119687AA8DE4EE2D1CB6F5289 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8A88C62D67BF9B5D27095014663D7564A99145C4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/864c3155-c8ff-4207-a2dc-51e005530b52/0/8A88C62D67BF9B5D27095014663D7564A99145C4.mft Manifest number: F7 Signing time: Tue 03 Nov 2026 23:22:10 +0000 Manifest this update: Tue 03 Nov 2026 23:17:10 +0000 Manifest next update: Thu 05 Nov 2026 02:28:10 +0000 Files and hashes: 1: 8A88C62D67BF9B5D27095014663D7564A99145C4.crl (hash: TKcfOnTN6ap0BWucYtrCfmrLyGTBg8k26ifHI83TS5E=) 2: 3130332e3131392e3133392e302f32342d3234203d3e20313337333831.roa (hash: F053eE0i+9sM4Zlpf0wasuwbYczZ4FiYljBeIYhXU8s=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/864c3155-c8ff-4207-a2dc-51e005530b52/0/8A88C62D67BF9B5D27095014663D7564A99145C4.crl rsync://rpki-rsync.idnic.net/repo/864c3155-c8ff-4207-a2dc-51e005530b52/0/8A88C62D67BF9B5D27095014663D7564A99145C4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8A88C62D67BF9B5D27095014663D7564A99145C4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 02:28:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:ac:e1:44:cb:e1:49:31:19:68:7a:a8:de:4e:e2:d1:cb:6f:52:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8A88C62D67BF9B5D27095014663D7564A99145C4 Validity Not Before: Nov 3 23:17:10 2026 GMT Not After : Nov 5 02:28:10 2026 GMT Subject: CN=4D825D16735FE5E0303E46B4F619FC8C824039C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:77:b8:54:b7:2e:eb:42:a5:0d:21:4b:23:09: 6e:ea:06:07:bd:13:bb:5b:40:7c:86:8c:2f:30:0a: 21:ca:66:5d:02:ea:c3:92:13:1b:2e:94:a5:2c:a1: 39:d3:9c:10:4e:cd:10:30:e4:b0:35:5e:6a:7f:7e: a2:09:3e:90:47:45:44:f4:7b:1c:e4:65:93:41:ab: 79:58:54:e2:89:92:7a:c7:25:90:c1:61:43:4e:cb: 52:47:70:9e:3b:89:18:76:26:44:27:55:cf:42:2e: 6a:84:31:af:ac:b1:f6:05:a1:71:c8:5d:26:2d:48: 1e:8a:63:c5:d2:e2:06:dd:41:2c:f7:38:f3:37:8d: c8:35:f8:7b:c7:46:c2:e7:97:90:ef:32:d0:81:7d: 46:20:6a:23:62:f2:38:e6:81:a4:8f:c9:a2:ba:30: 5b:d7:92:93:74:47:66:e0:3e:6a:fe:d6:9b:0f:fa: e1:1a:ab:ca:65:9b:fc:be:5e:d4:63:df:58:62:0d: 56:b7:dd:64:3f:64:27:b8:0f:6d:a3:23:bd:87:af: 57:10:3c:65:c6:34:e4:66:55:73:b6:9f:9f:b5:bd: aa:c9:32:dd:67:0a:d9:38:67:e5:53:ec:b0:ab:ef: 4c:1c:94:7c:25:33:23:f2:f7:e0:43:66:b8:54:98: b4:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:82:5D:16:73:5F:E5:E0:30:3E:46:B4:F6:19:FC:8C:82:40:39:C9 X509v3 Authority Key Identifier: keyid:8A:88:C6:2D:67:BF:9B:5D:27:09:50:14:66:3D:75:64:A9:91:45:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/864c3155-c8ff-4207-a2dc-51e005530b52/0/8A88C62D67BF9B5D27095014663D7564A99145C4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8A88C62D67BF9B5D27095014663D7564A99145C4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/864c3155-c8ff-4207-a2dc-51e005530b52/0/8A88C62D67BF9B5D27095014663D7564A99145C4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:c3:f6:36:eb:a3:ca:60:9a:60:f7:57:e9:40:40:ae:8b:58: 6b:41:00:39:bc:ff:00:32:ea:bd:60:75:99:29:94:78:1c:0f: db:e1:87:7b:7a:c9:93:a7:a8:2c:01:41:13:db:2f:a7:9a:2e: f3:e5:d1:9c:76:c0:e3:96:0b:c5:15:c0:53:1c:dd:2a:58:b0: 9e:28:6a:63:e3:ff:d9:82:00:76:1f:ee:f2:46:17:6c:f2:4c: 79:fe:9b:5e:b5:c2:41:2a:d1:ca:85:3f:ea:2a:74:25:07:e3: bb:ad:f7:0b:f6:dd:95:36:83:91:01:e4:23:b4:38:fa:00:03: 3e:47:cd:08:84:2d:d7:af:8f:ff:d4:13:8d:70:12:18:33:7c: 01:9a:10:7e:b5:3c:45:47:4c:14:43:b3:15:b9:46:48:79:52: 94:57:c5:61:06:b4:96:a3:69:6f:d4:84:cb:ea:9e:4b:22:a2: 1c:17:02:33:9e:dd:21:01:f2:9f:2c:fe:d8:33:fd:64:5a:4f: a1:80:ed:5b:78:83:95:4d:3b:7c:ae:29:ab:5b:ca:56:6f:8c: fc:fe:88:74:99:7d:06:9d:be:97:67:28:62:f4:8e:a2:a5:1f: d3:4c:cc:aa:fb:f8:1e:5f:30:ca:75:35:38:54:97:c6:df:97: ca:8e:48:e2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeKzhRMvhSTEZaHqo3k7i0ctvUokwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEE4OEM2MkQ2N0JGOUI1RDI3MDk1MDE0NjYzRDc1NjRB OTkxNDVDNDAeFw0yNjExMDMyMzE3MTBaFw0yNjExMDUwMjI4MTBaMDMxMTAvBgNV BAMTKDREODI1RDE2NzM1RkU1RTAzMDNFNDZCNEY2MTlGQzhDODI0MDM5QzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZd7hUty7rQqUNIUsjCW7qBge9 E7tbQHyGjC8wCiHKZl0C6sOSExsulKUsoTnTnBBOzRAw5LA1Xmp/fqIJPpBHRUT0 exzkZZNBq3lYVOKJknrHJZDBYUNOy1JHcJ47iRh2JkQnVc9CLmqEMa+ssfYFoXHI XSYtSB6KY8XS4gbdQSz3OPM3jcg1+HvHRsLnl5DvMtCBfUYgaiNi8jjmgaSPyaK6 MFvXkpN0R2bgPmr+1psP+uEaq8plm/y+XtRj31hiDVa33WQ/ZCe4D22jI72Hr1cQ PGXGNORmVXO2n5+1varJMt1nCtk4Z+VT7LCr70wclHwlMyPy9+BDZrhUmLQZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTYJdFnNf5eAwPka09hn8jIJAOckwHwYDVR0j BBgwFoAUiojGLWe/m10nCVAUZj11ZKmRRcQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODY0YzMxNTUtYzhmZi00MjA3LWEyZGMtNTFlMDA1NTMwYjUyLzAvOEE4OEM2MkQ2 N0JGOUI1RDI3MDk1MDE0NjYzRDc1NjRBOTkxNDVDNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84QTg4QzYyRDY3QkY5QjVEMjcwOTUwMTQ2NjNENzU2NEE5OTE0 NUM0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODY0YzMxNTUtYzhmZi00MjA3LWEy ZGMtNTFlMDA1NTMwYjUyLzAvOEE4OEM2MkQ2N0JGOUI1RDI3MDk1MDE0NjYzRDc1 NjRBOTkxNDVDNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAbD9jbro8pgmmD3V+lAQK6LWGtBADm8/wAy 6r1gdZkplHgcD9vhh3t6yZOnqCwBQRPbL6eaLvPl0Zx2wOOWC8UVwFMc3SpYsJ4o amPj/9mCAHYf7vJGF2zyTHn+m161wkEq0cqFP+oqdCUH47ut9wv23ZU2g5EB5CO0 OPoAAz5HzQiELdevj//UE41wEhgzfAGaEH61PEVHTBRDsxW5Rkh5UpRXxWEGtJaj aW/UhMvqnksiohwXAjOe3SEB8p8s/tgz/WRaT6GA7Vt4g5VNO3yuKatbylZvjPz+ iHSZfQadvpdnKGL0jqKlH9NMzKr7+B5fMMp1NThUl8bfl8qOSOI= -----END CERTIFICATE-----Generated at Wed Nov 4 17:07:51 2026 by rpki-client