$ rpki-client -vvvf rpki-rsync.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/08D3D556A989E0E477EFEB8242854D7A4029E6C4.mft File: 08D3D556A989E0E477EFEB8242854D7A4029E6C4.mft (raw, json) Hash identifier: GXniqaYMm/e1bpvh52TD9XQUM6VwwlYYMsnw/pFgJ6U= Subject key identifier: DC:E7:B2:EA:A8:4F:45:0B:AC:70:2C:E2:A5:4F:75:04:43:1B:A8:2B Authority key identifier: 08:D3:D5:56:A9:89:E0:E4:77:EF:EB:82:42:85:4D:7A:40:29:E6:C4 Certificate issuer: /CN=08D3D556A989E0E477EFEB8242854D7A4029E6C4 Certificate serial: 23D1CFFEEC62B6F26E94F37F24E03E590375D4E7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/08D3D556A989E0E477EFEB8242854D7A4029E6C4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/08D3D556A989E0E477EFEB8242854D7A4029E6C4.mft Manifest number: FC Signing time: Tue 03 Nov 2026 22:05:22 +0000 Manifest this update: Tue 03 Nov 2026 22:00:22 +0000 Manifest next update: Wed 04 Nov 2026 22:21:22 +0000 Files and hashes: 1: 34332e3234332e3138352e302f32342d3234203d3e203633383237.roa (hash: Z/jdDipYuv3lK5eimMJ72Z70XTynWpBlz182XUeNc+E=) 2: 34332e3234332e3138362e302f32342d3234203d3e203633383237.roa (hash: L1mfkBCHBmcBCuB53aap/zrreHda+IVKN915WxYStVY=) 3: 34332e3234332e3138362e302f32332d3233203d3e203633383237.roa (hash: qqj+W0YE7lPcQQyjA0h+/ikJ5uDXNaW6laVzLp1Qk3I=) 4: 08D3D556A989E0E477EFEB8242854D7A4029E6C4.crl (hash: k+3X+BXxUEDmyxkFeyyHgveki3fsvOoMD68r3woFbu0=) 5: 34332e3234332e3138342e302f32342d3234203d3e203633383237.roa (hash: Yobd92nJofxIMDnwcBhGJ8U1ARrNN8Txd0D+kOpJodU=) 6: 34332e3234332e3138342e302f32322d3232203d3e203633383237.roa (hash: MAEO7ACMQfPreayi5zBOy6AnAEF+RmZdQiFdMvjwjTI=) 7: 3130332e33392e31342e302f32342d3234203d3e203633383237.roa (hash: fBaN9jIwXMILmSYsIQ3Ue7JGtw7WhLW8vbb21prGNGk=) 8: 34332e3234332e3138342e302f32332d3233203d3e203633383237.roa (hash: jBX/qKx/JGa1Du2q2fgwV/fWVjEIgXCKAL9/GZt06jk=) 9: 323430303a363234303a3a2f33322d3332203d3e203633383237.roa (hash: l6710S8jmxJGmeAS8FHaradQgxTchTloDHPECvYc8nE=) 10: 3130332e33392e31332e302f32342d3234203d3e203633383237.roa (hash: RlgIs0QjanrifNmC6pZ/6muj/iE2ejRnuLFDY7kN47g=) 11: 3130332e33392e31352e302f32342d3234203d3e203633383237.roa (hash: CH+q+cxW04syGQTs2qRuGVzpDs6qixBBw3uVzFWNK2g=) 12: 3130332e33392e31322e302f32342d3234203d3e203633383237.roa (hash: NtkyFz71abqYBOulA/yf0usZVvUpaEttpy+f3u3kpp8=) 13: 34332e3234332e3138372e302f32342d3234203d3e203633383237.roa (hash: hujlKc3DzwZfu+/QrUX39XVrQUFGamfbziw+u/7dNJ0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/08D3D556A989E0E477EFEB8242854D7A4029E6C4.crl rsync://rpki-rsync.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/08D3D556A989E0E477EFEB8242854D7A4029E6C4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/08D3D556A989E0E477EFEB8242854D7A4029E6C4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Nov 2026 22:21:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:d1:cf:fe:ec:62:b6:f2:6e:94:f3:7f:24:e0:3e:59:03:75:d4:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08D3D556A989E0E477EFEB8242854D7A4029E6C4 Validity Not Before: Nov 3 22:00:22 2026 GMT Not After : Nov 4 22:21:22 2026 GMT Subject: CN=DCE7B2EAA84F450BAC702CE2A54F7504431BA82B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:f5:2a:67:3c:10:7c:a7:07:65:22:17:85:61: b4:01:da:e0:b3:01:e5:c6:1e:fe:03:1d:45:32:89: c5:3e:56:5e:b9:7d:11:92:7f:f2:54:3e:38:cd:56: 3c:ec:3f:68:70:96:87:64:63:5b:86:fe:b9:a1:7f: 11:67:40:30:d0:76:35:1b:12:46:d3:ec:63:18:15: 78:80:53:41:c9:d9:77:0c:bb:c1:cc:2c:13:91:0d: 47:17:11:a5:5c:17:fb:1e:88:04:63:27:56:79:1e: e3:26:93:5e:97:7e:91:8b:c2:8e:91:76:de:5e:35: 19:dc:c7:24:12:d3:41:19:8c:8b:bb:58:ac:a2:00: 14:1c:d5:0e:cf:af:ba:70:51:71:7a:e8:36:6f:31: 24:ab:de:1d:f7:14:3c:8d:7e:a5:5f:a7:fe:b3:76: dd:78:8e:c7:45:2c:bc:a2:82:ad:8d:77:a1:47:6e: 27:f2:fd:72:76:7d:50:c5:16:2d:f4:e3:f7:22:8a: 6f:95:13:90:fd:bb:cb:c9:cb:ee:e3:df:16:cf:7e: db:c0:82:f7:6a:c6:b3:7b:63:df:c0:f6:39:9f:d1: 8b:a8:bf:63:5e:c7:d4:bc:3b:c0:03:47:1a:b5:ce: 4e:8e:82:11:15:3b:34:96:06:e8:fe:cb:a7:5e:7d: c2:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:E7:B2:EA:A8:4F:45:0B:AC:70:2C:E2:A5:4F:75:04:43:1B:A8:2B X509v3 Authority Key Identifier: keyid:08:D3:D5:56:A9:89:E0:E4:77:EF:EB:82:42:85:4D:7A:40:29:E6:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/08D3D556A989E0E477EFEB8242854D7A4029E6C4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/08D3D556A989E0E477EFEB8242854D7A4029E6C4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/08D3D556A989E0E477EFEB8242854D7A4029E6C4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:26:13:b6:b5:46:63:8a:11:69:1c:4c:e1:c9:57:e3:54:8f: 56:96:23:7a:93:4b:a3:c1:b7:58:11:04:25:80:04:a3:79:13: 2e:60:2a:3e:e4:9c:47:ee:ea:53:1a:b5:1f:de:fb:31:0c:21: 58:4e:e1:4c:8c:9d:33:7c:ab:5c:74:84:0b:3f:87:cb:f2:3b: 02:34:af:c6:70:c8:47:b1:a9:66:6c:9c:01:30:40:a4:52:03: 62:03:bb:c6:96:eb:41:f6:63:e6:32:9e:60:85:63:e6:51:ab: a6:92:ff:e7:93:83:1d:d3:61:c1:88:da:4e:89:62:f6:79:0d: 82:d3:3b:0c:94:6d:af:bf:ea:db:53:2a:0f:2d:6d:82:41:56: ae:c8:e1:43:94:f6:31:55:eb:52:bc:3a:3b:68:43:88:60:88: 51:df:ee:7b:f5:ac:02:24:fc:8d:bd:8e:e2:d6:d2:10:b8:0b: 14:b3:24:5c:72:32:a3:80:29:68:07:86:4e:62:60:c4:ec:c0: 27:f6:dd:e8:f6:b8:5a:56:a3:37:7d:40:15:b9:c0:d0:38:98: c4:18:fe:f6:3b:a4:eb:20:4e:0d:f5:2f:e2:e9:44:56:93:8a: 0c:99:48:16:31:a7:f1:8e:a7:8d:e4:df:f8:04:e7:71:29:d5: 41:c7:b4:24 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI9HP/uxitvJulPN/JOA+WQN11OcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDhEM0Q1NTZBOTg5RTBFNDc3RUZFQjgyNDI4NTREN0E0 MDI5RTZDNDAeFw0yNjExMDMyMjAwMjJaFw0yNjExMDQyMjIxMjJaMDMxMTAvBgNV BAMTKERDRTdCMkVBQTg0RjQ1MEJBQzcwMkNFMkE1NEY3NTA0NDMxQkE4MkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN9SpnPBB8pwdlIheFYbQB2uCz AeXGHv4DHUUyicU+Vl65fRGSf/JUPjjNVjzsP2hwlodkY1uG/rmhfxFnQDDQdjUb EkbT7GMYFXiAU0HJ2XcMu8HMLBORDUcXEaVcF/seiARjJ1Z5HuMmk16XfpGLwo6R dt5eNRncxyQS00EZjIu7WKyiABQc1Q7Pr7pwUXF66DZvMSSr3h33FDyNfqVfp/6z dt14jsdFLLyigq2Nd6FHbify/XJ2fVDFFi304/ciim+VE5D9u8vJy+7j3xbPftvA gvdqxrN7Y9/A9jmf0Yuov2Nex9S8O8ADRxq1zk6OghEVOzSWBuj+y6defcKZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3Oey6qhPRQuscCzipU91BEMbqCswHwYDVR0j BBgwFoAUCNPVVqmJ4OR37+uCQoVNekAp5sQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTFhNjg3MTItMWQ5YS00MTQzLTgyZjEtMWM4MmMzMzE2NWVhLzAvMDhEM0Q1NTZB OTg5RTBFNDc3RUZFQjgyNDI4NTREN0E0MDI5RTZDNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wOEQzRDU1NkE5ODlFMEU0NzdFRkVCODI0Mjg1NEQ3QTQwMjlF NkM0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTFhNjg3MTItMWQ5YS00MTQzLTgy ZjEtMWM4MmMzMzE2NWVhLzAvMDhEM0Q1NTZBOTg5RTBFNDc3RUZFQjgyNDI4NTRE N0E0MDI5RTZDNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF4mE7a1RmOKEWkcTOHJV+NUj1aWI3qTS6PB t1gRBCWABKN5Ey5gKj7knEfu6lMatR/e+zEMIVhO4UyMnTN8q1x0hAs/h8vyOwI0 r8ZwyEexqWZsnAEwQKRSA2IDu8aW60H2Y+YynmCFY+ZRq6aS/+eTgx3TYcGI2k6J YvZ5DYLTOwyUba+/6ttTKg8tbYJBVq7I4UOU9jFV61K8OjtoQ4hgiFHf7nv1rAIk /I29juLW0hC4CxSzJFxyMqOAKWgHhk5iYMTswCf23ej2uFpWozd9QBW5wNA4mMQY /vY7pOsgTg31L+LpRFaTigyZSBYxp/GOp43k3/gE53Ep1UHHtCQ= -----END CERTIFICATE-----Generated at Wed Nov 4 11:32:07 2026 by rpki-client