$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/8D1A94EA0F9FD5148E09CAE0A307BDC99B1B4573.mft File: 8D1A94EA0F9FD5148E09CAE0A307BDC99B1B4573.mft (raw, json) Hash identifier: KDyfl9RwEle0ozD1X5LKH1IcrqE9QEVgDRUtfO4p7pA= Subject key identifier: EE:7B:66:E9:43:08:B6:B7:F4:C2:20:C3:1B:03:E1:9D:18:F5:C4:0B Authority key identifier: 8D:1A:94:EA:0F:9F:D5:14:8E:09:CA:E0:A3:07:BD:C9:9B:1B:45:73 Certificate issuer: /CN=8D1A94EA0F9FD5148E09CAE0A307BDC99B1B4573 Certificate serial: 6E236B6068FD32FB8E3A5066C41E11C269E09D98 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8D1A94EA0F9FD5148E09CAE0A307BDC99B1B4573.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/8D1A94EA0F9FD5148E09CAE0A307BDC99B1B4573.mft Manifest number: F9 Signing time: Wed 04 Nov 2026 20:39:40 +0000 Manifest this update: Wed 04 Nov 2026 20:34:40 +0000 Manifest next update: Thu 05 Nov 2026 21:22:40 +0000 Files and hashes: 1: 8D1A94EA0F9FD5148E09CAE0A307BDC99B1B4573.crl (hash: pA8rscsvqSAbxetJfGE4y5TsIG0Trzm0ms6sbjOqDRQ=) 2: 3130332e31372e37362e302f32332d3233203d3e20313331373831.roa (hash: NR10Bfbwh6SYopHFVcr7fLYC1ZrjLqSPhi8hfWEGSfc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/8D1A94EA0F9FD5148E09CAE0A307BDC99B1B4573.crl rsync://rpki-rsync.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/8D1A94EA0F9FD5148E09CAE0A307BDC99B1B4573.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8D1A94EA0F9FD5148E09CAE0A307BDC99B1B4573.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 11:48:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:23:6b:60:68:fd:32:fb:8e:3a:50:66:c4:1e:11:c2:69:e0:9d:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D1A94EA0F9FD5148E09CAE0A307BDC99B1B4573 Validity Not Before: Nov 4 20:34:40 2026 GMT Not After : Nov 5 21:22:40 2026 GMT Subject: CN=EE7B66E94308B6B7F4C220C31B03E19D18F5C40B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:33:12:26:46:b5:1d:01:58:6d:0e:32:97:22: 60:7c:df:a9:26:76:16:b3:aa:a9:be:7b:5a:80:65: e3:55:bd:d9:dd:82:b9:0c:46:1f:0d:ae:6f:cf:ae: 8b:04:a6:14:85:f2:f7:99:3d:1c:5d:d7:92:e8:5e: 3b:a5:b2:98:0f:b7:97:b3:01:5f:7e:a3:21:be:3c: e0:23:71:b4:16:6b:98:19:19:20:77:08:43:1f:d6: 64:09:02:ae:c3:00:03:b3:9d:26:75:29:91:6c:e7: d6:ee:b0:3c:1c:3b:5e:a6:41:5f:b5:d3:15:1f:11: 88:1d:09:7f:ae:c4:80:0b:07:24:6a:15:88:6f:94: 40:b6:f3:50:4a:68:9c:f1:67:21:2a:44:b8:db:15: 2b:0b:34:e0:2d:92:e3:8c:de:91:be:8b:9c:cd:a3: c3:b3:83:e4:33:79:92:cf:11:13:b0:44:29:67:0f: 60:ec:a5:3b:53:b0:be:4f:cf:6d:03:4f:aa:ad:6b: 0f:3f:d3:34:29:54:f8:4d:d1:55:26:ae:e1:a3:8b: 15:69:d9:4e:a7:9b:b1:6c:4e:f1:ec:41:96:1e:5e: a9:93:39:32:ba:4f:0b:4f:29:ba:78:68:0f:14:d5: 7a:4d:85:8c:0b:87:7b:05:eb:7b:82:01:5a:54:69: b8:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:7B:66:E9:43:08:B6:B7:F4:C2:20:C3:1B:03:E1:9D:18:F5:C4:0B X509v3 Authority Key Identifier: keyid:8D:1A:94:EA:0F:9F:D5:14:8E:09:CA:E0:A3:07:BD:C9:9B:1B:45:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/8D1A94EA0F9FD5148E09CAE0A307BDC99B1B4573.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8D1A94EA0F9FD5148E09CAE0A307BDC99B1B4573.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/8D1A94EA0F9FD5148E09CAE0A307BDC99B1B4573.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:de:cb:be:a1:7c:af:04:30:ea:ad:a0:bb:c6:90:6d:a3:01: bf:1b:45:7b:54:c1:3b:7f:7d:64:d8:f0:65:1f:45:34:e6:e6: 44:7a:f8:f5:11:49:66:af:0f:bb:d4:bb:83:4f:c6:c2:e6:00: 77:30:fd:12:11:65:8c:45:e3:a7:74:fa:e3:b9:e4:ae:bb:3b: 3f:ba:b8:f5:c3:21:f2:e0:67:19:2d:38:da:bc:1a:86:20:7b: 18:4d:a1:9b:76:81:24:4e:3c:48:b0:80:1b:e2:83:be:03:81: 6d:05:7d:f3:2e:67:fc:d8:fc:d7:e6:9c:39:a1:b6:ad:40:bb: 55:ac:33:f2:79:86:88:9e:59:53:bf:49:a4:63:dc:b9:a7:c1: 2b:bf:59:88:c6:cc:6f:0c:20:97:8b:8d:d7:da:66:c7:bd:83: 19:9b:f1:ca:47:01:f5:7d:57:38:a9:fd:45:0f:c3:f5:21:bb: ac:c1:22:fe:37:b6:d0:86:a7:d8:6a:fe:a9:c2:18:f6:7e:18: 8e:09:bd:7f:34:f2:c2:d4:72:bf:7c:8c:d9:f9:f5:b9:43:2b: fd:a2:2e:e6:e3:cb:19:32:18:f9:39:be:ee:ee:ed:74:04:8b: 18:cb:94:3e:3d:f2:74:e5:78:23:ca:ab:a0:b1:95:bf:28:63: 32:86:fc:f9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbiNrYGj9MvuOOlBmxB4RwmngnZgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEQxQTk0RUEwRjlGRDUxNDhFMDlDQUUwQTMwN0JEQzk5 QjFCNDU3MzAeFw0yNjExMDQyMDM0NDBaFw0yNjExMDUyMTIyNDBaMDMxMTAvBgNV BAMTKEVFN0I2NkU5NDMwOEI2QjdGNEMyMjBDMzFCMDNFMTlEMThGNUM0MEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEMxImRrUdAVhtDjKXImB836km dhazqqm+e1qAZeNVvdndgrkMRh8Nrm/ProsEphSF8veZPRxd15LoXjulspgPt5ez AV9+oyG+POAjcbQWa5gZGSB3CEMf1mQJAq7DAAOznSZ1KZFs59busDwcO16mQV+1 0xUfEYgdCX+uxIALByRqFYhvlEC281BKaJzxZyEqRLjbFSsLNOAtkuOM3pG+i5zN o8Ozg+QzeZLPEROwRClnD2DspTtTsL5Pz20DT6qtaw8/0zQpVPhN0VUmruGjixVp 2U6nm7FsTvHsQZYeXqmTOTK6TwtPKbp4aA8U1XpNhYwLh3sF63uCAVpUabiXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7ntm6UMItrf0wiDDGwPhnRj1xAswHwYDVR0j BBgwFoAUjRqU6g+f1RSOCcrgowe9yZsbRXMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTA2MjExMWQtMGExMy00NDA3LWFmMzMtMzRjMjJhOWQ3YWVjLzAvOEQxQTk0RUEw RjlGRDUxNDhFMDlDQUUwQTMwN0JEQzk5QjFCNDU3My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84RDFBOTRFQTBGOUZENTE0OEUwOUNBRTBBMzA3QkRDOTlCMUI0 NTczLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTA2MjExMWQtMGExMy00NDA3LWFm MzMtMzRjMjJhOWQ3YWVjLzAvOEQxQTk0RUEwRjlGRDUxNDhFMDlDQUUwQTMwN0JE Qzk5QjFCNDU3My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHney76hfK8EMOqtoLvGkG2jAb8bRXtUwTt/ fWTY8GUfRTTm5kR6+PURSWavD7vUu4NPxsLmAHcw/RIRZYxF46d0+uO55K67Oz+6 uPXDIfLgZxktONq8GoYgexhNoZt2gSROPEiwgBvig74DgW0FffMuZ/zY/NfmnDmh tq1Au1WsM/J5hoieWVO/SaRj3LmnwSu/WYjGzG8MIJeLjdfaZse9gxmb8cpHAfV9 Vzip/UUPw/Uhu6zBIv43ttCGp9hq/qnCGPZ+GI4JvX808sLUcr98jNn59blDK/2i LubjyxkyGPk5vu7u7XQEixjLlD498nTleCPKq6Cxlb8oYzKG/Pk= -----END CERTIFICATE-----Generated at Thu Nov 5 01:34:39 2026 by rpki-client