$ rpki-client -vvvf rpki-rsync.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/B82FDFC626E73CB2268F5B1EFEF576715FE5A570.mft File: B82FDFC626E73CB2268F5B1EFEF576715FE5A570.mft (raw, json) Hash identifier: mi7SfUZKtz2skHQjBjIzR3FYBeEUKROwSISXD/4OJhE= Subject key identifier: 8B:CF:CB:C2:13:D7:FE:12:D3:EC:28:DD:AD:37:19:2D:CF:60:E4:1E Authority key identifier: B8:2F:DF:C6:26:E7:3C:B2:26:8F:5B:1E:FE:F5:76:71:5F:E5:A5:70 Certificate issuer: /CN=B82FDFC626E73CB2268F5B1EFEF576715FE5A570 Certificate serial: 66D4E6D578C6DDBF13EA9A65D9C8730546D47578 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B82FDFC626E73CB2268F5B1EFEF576715FE5A570.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/B82FDFC626E73CB2268F5B1EFEF576715FE5A570.mft Manifest number: F9 Signing time: Wed 04 Nov 2026 05:09:34 +0000 Manifest this update: Wed 04 Nov 2026 05:04:34 +0000 Manifest next update: Thu 05 Nov 2026 06:13:34 +0000 Files and hashes: 1: 3130332e3134382e34342e302f32342d3234203d3e20313339393832.roa (hash: 1XW8m/1HHafjwn856SxYeKjsgoK5KYpfAPCW/Yr3PaE=) 2: B82FDFC626E73CB2268F5B1EFEF576715FE5A570.crl (hash: EXPSrM91cCnEkvzs4QRUllBIyj/l/Ob2kap6/5K9qzs=) 3: 3130332e3134382e34342e302f32332d3234203d3e20313339393832.roa (hash: GK/q1qgmQxfM3voSc0k+YTmkhCDo78ptqyplH6DohgE=) 4: 3130332e3134382e34352e302f32342d3234203d3e20313339393832.roa (hash: BFoAAOYL5cXcuIYHdcG6m2LVE3HWh1vuQutXqW1gBIM=) 5: 323430353a636163303a313a3a2f34382d3438203d3e20313339393832.roa (hash: TOnsrcvIXglIicbrrGOcttljfn+j8zuH56+Uevu2CiA=) 6: 323430353a636163303a3a2f33322d3332203d3e20313339393832.roa (hash: HJdyg1CH1wYNkX3IJPS7n0ig1ABVkAurwagIizZ3YJY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/B82FDFC626E73CB2268F5B1EFEF576715FE5A570.crl rsync://rpki-rsync.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/B82FDFC626E73CB2268F5B1EFEF576715FE5A570.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B82FDFC626E73CB2268F5B1EFEF576715FE5A570.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 05:08:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:d4:e6:d5:78:c6:dd:bf:13:ea:9a:65:d9:c8:73:05:46:d4:75:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B82FDFC626E73CB2268F5B1EFEF576715FE5A570 Validity Not Before: Nov 4 05:04:34 2026 GMT Not After : Nov 5 06:13:34 2026 GMT Subject: CN=8BCFCBC213D7FE12D3EC28DDAD37192DCF60E41E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:5d:7a:0b:b6:9b:23:15:2a:7c:db:c3:5f:a5: 66:22:f8:6c:46:83:9b:f1:d0:62:58:55:f3:72:c3: cf:b4:2a:b7:c8:45:04:53:68:10:a0:23:3d:0b:0b: 43:e3:9c:aa:8f:ad:7c:53:8a:27:29:51:bc:ef:74: 07:a4:c6:dd:dc:2c:78:1e:a6:4f:4d:75:6a:0e:e5: d1:e8:34:5e:fc:b1:72:a4:80:1a:de:e0:a9:86:d3: 68:43:ff:8c:ef:49:77:23:fa:69:67:6e:e1:f9:a3: 03:1c:dd:c4:94:31:9f:54:ab:31:7e:c7:5e:50:7b: 60:e8:2f:db:3e:8d:81:47:6e:dc:4f:ff:10:1d:47: b9:40:7a:45:58:76:e8:df:0c:4b:26:66:01:78:70: 0b:44:f6:f3:ab:e2:01:07:b8:f8:a7:11:8a:0b:8f: e7:b9:c4:73:6b:ea:1a:40:12:f7:10:62:89:a3:9f: 95:c1:c8:87:db:07:6a:42:40:f8:c2:c3:03:82:76: 7b:7c:a1:09:13:a0:b2:47:7c:4e:9d:f7:04:bd:be: 3e:3a:49:21:73:a9:cc:48:55:ce:ea:eb:95:50:92: 12:2f:d2:63:a2:ac:71:6b:fb:42:c0:da:1f:6a:91: ed:67:de:7d:61:43:f9:d5:98:9d:6c:fd:6d:fc:f9: d4:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:CF:CB:C2:13:D7:FE:12:D3:EC:28:DD:AD:37:19:2D:CF:60:E4:1E X509v3 Authority Key Identifier: keyid:B8:2F:DF:C6:26:E7:3C:B2:26:8F:5B:1E:FE:F5:76:71:5F:E5:A5:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/B82FDFC626E73CB2268F5B1EFEF576715FE5A570.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B82FDFC626E73CB2268F5B1EFEF576715FE5A570.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/B82FDFC626E73CB2268F5B1EFEF576715FE5A570.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:4d:28:a7:80:f3:b7:7c:29:5e:ed:d2:ff:58:b7:3f:8c:02: f7:45:31:e5:7c:7f:07:64:0d:02:36:d4:6b:1e:91:35:91:19: 37:ee:7f:51:04:90:24:ff:3c:81:7c:ad:c6:ba:18:65:52:8a: 3b:99:b3:1f:a2:a4:b8:d3:7b:3a:a3:3d:79:47:58:84:56:de: 91:27:7b:12:d6:fe:bb:65:fd:2c:a2:4c:31:b3:51:14:84:5c: 7f:c9:92:29:8e:a0:a4:72:11:99:e0:7f:ee:14:78:12:fa:de: b9:32:90:da:b0:40:c8:2a:75:96:95:2d:48:d4:6b:2c:7f:f8: 8e:d0:f7:36:a6:a1:2e:05:92:bc:b0:9b:4e:d1:70:02:67:d4: 53:20:f7:68:24:9c:d3:f6:2e:83:60:b6:ca:b9:c0:a0:f9:f2: 96:f8:3f:5e:4b:f5:e8:36:8f:1b:ec:5c:e0:dd:76:4a:f0:22: d5:02:05:dd:51:12:53:d1:64:f6:44:7f:b4:90:ed:2e:14:3f: 4e:46:37:93:50:4e:11:cd:7d:4e:a8:70:95:0a:37:52:d8:1e: 6a:fd:66:b4:95:c5:da:c2:c8:69:85:af:e9:53:73:25:6c:15: 16:2b:1f:4f:50:c6:7f:6e:e0:86:01:31:40:11:05:ca:c2:33: ff:11:59:d8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZtTm1XjG3b8T6ppl2chzBUbUdXgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjgyRkRGQzYyNkU3M0NCMjI2OEY1QjFFRkVGNTc2NzE1 RkU1QTU3MDAeFw0yNjExMDQwNTA0MzRaFw0yNjExMDUwNjEzMzRaMDMxMTAvBgNV BAMTKDhCQ0ZDQkMyMTNEN0ZFMTJEM0VDMjhEREFEMzcxOTJEQ0Y2MEU0MUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrXXoLtpsjFSp828NfpWYi+GxG g5vx0GJYVfNyw8+0KrfIRQRTaBCgIz0LC0PjnKqPrXxTiicpUbzvdAekxt3cLHge pk9NdWoO5dHoNF78sXKkgBre4KmG02hD/4zvSXcj+mlnbuH5owMc3cSUMZ9UqzF+ x15Qe2DoL9s+jYFHbtxP/xAdR7lAekVYdujfDEsmZgF4cAtE9vOr4gEHuPinEYoL j+e5xHNr6hpAEvcQYomjn5XByIfbB2pCQPjCwwOCdnt8oQkToLJHfE6d9wS9vj46 SSFzqcxIVc7q65VQkhIv0mOirHFr+0LA2h9qke1n3n1hQ/nVmJ1s/W38+dTxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUi8/LwhPX/hLT7CjdrTcZLc9g5B4wHwYDVR0j BBgwFoAUuC/fxibnPLImj1se/vV2cV/lpXAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODlmMjZmYjgtNzJjNC00OWQ5LTljYmUtODIyNjM5NzI3MWEyLzAvQjgyRkRGQzYy NkU3M0NCMjI2OEY1QjFFRkVGNTc2NzE1RkU1QTU3MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CODJGREZDNjI2RTczQ0IyMjY4RjVCMUVGRUY1NzY3MTVGRTVB NTcwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODlmMjZmYjgtNzJjNC00OWQ5LTlj YmUtODIyNjM5NzI3MWEyLzAvQjgyRkRGQzYyNkU3M0NCMjI2OEY1QjFFRkVGNTc2 NzE1RkU1QTU3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHpNKKeA87d8KV7t0v9Ytz+MAvdFMeV8fwdk DQI21GsekTWRGTfuf1EEkCT/PIF8rca6GGVSijuZsx+ipLjTezqjPXlHWIRW3pEn exLW/rtl/SyiTDGzURSEXH/JkimOoKRyEZngf+4UeBL63rkykNqwQMgqdZaVLUjU ayx/+I7Q9zamoS4Fkrywm07RcAJn1FMg92gknNP2LoNgtsq5wKD58pb4P15L9eg2 jxvsXODddkrwItUCBd1RElPRZPZEf7SQ7S4UP05GN5NQThHNfU6ocJUKN1LYHmr9 ZrSVxdrCyGmFr+lTcyVsFRYrH09Qxn9u4IYBMUARBcrCM/8RWdg= -----END CERTIFICATE-----Generated at Wed Nov 4 08:20:59 2026 by rpki-client