$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/8EE359887ED47947E74ECC3D12D7DD874E3AE6EC.mft File: 8EE359887ED47947E74ECC3D12D7DD874E3AE6EC.mft (raw, json) Hash identifier: p9gvEgDsYoieGBqm01zIKTabwnesBGbMunzT2sY3XS8= Subject key identifier: 3D:AC:2E:E4:BC:C4:35:EE:BF:51:B8:D4:B1:90:FB:25:16:84:E8:4B Authority key identifier: 8E:E3:59:88:7E:D4:79:47:E7:4E:CC:3D:12:D7:DD:87:4E:3A:E6:EC Certificate issuer: /CN=8EE359887ED47947E74ECC3D12D7DD874E3AE6EC Certificate serial: 5F8DDB576B8B40CB980264F69BA5A3C15B6DC503 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8EE359887ED47947E74ECC3D12D7DD874E3AE6EC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/8EE359887ED47947E74ECC3D12D7DD874E3AE6EC.mft Manifest number: F9 Signing time: Tue 03 Nov 2026 16:33:20 +0000 Manifest this update: Tue 03 Nov 2026 16:28:20 +0000 Manifest next update: Wed 04 Nov 2026 18:15:20 +0000 Files and hashes: 1: 8EE359887ED47947E74ECC3D12D7DD874E3AE6EC.crl (hash: 6dYqGhY2X3Dk8/xrckD5ZyPBjKk8/kU3E6odzR8vy+E=) 2: 3130332e3130322e3131352e302f32342d3234203d3e20313336383536.roa (hash: UPuTvMckcIYLBYZ54B2+SqyW/0kMWr4eDhHIIPK9IxA=) 3: 3130332e3130322e3131342e302f32342d3234203d3e20313336383536.roa (hash: lR/t7u2Id9Tm/5RG+xZK/WwNnzBrvYgkf9KgY4fbdVM=) 4: 3130332e3130322e3131332e302f32342d3234203d3e20313335363130.roa (hash: fo5FFrU+VdKyHpOjL7ovILvjH4uYFxR7MNCdZIOuxYA=) 5: 3130332e3130322e3131322e302f32342d3234203d3e20313336383536.roa (hash: SmTgUdBZ5Gm9MMySo1hy5IKAztpPtBz8UdMvR7+0nS8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/8EE359887ED47947E74ECC3D12D7DD874E3AE6EC.crl rsync://rpki-rsync.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/8EE359887ED47947E74ECC3D12D7DD874E3AE6EC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8EE359887ED47947E74ECC3D12D7DD874E3AE6EC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Nov 2026 18:15:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:8d:db:57:6b:8b:40:cb:98:02:64:f6:9b:a5:a3:c1:5b:6d:c5:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8EE359887ED47947E74ECC3D12D7DD874E3AE6EC Validity Not Before: Nov 3 16:28:20 2026 GMT Not After : Nov 4 18:15:20 2026 GMT Subject: CN=3DAC2EE4BCC435EEBF51B8D4B190FB251684E84B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:c1:ee:3d:11:0e:57:86:1f:88:5e:d4:34:30: 2a:38:52:92:e8:c9:95:d2:35:37:9a:95:c9:6e:6a: ac:16:70:15:44:57:bc:41:f0:34:ec:ef:bc:48:0b: ea:3e:00:e6:66:9e:39:6a:4f:75:a5:46:14:b2:3d: d8:97:43:c5:a1:e5:a2:5b:cd:b9:7a:3e:42:69:d7: 0b:af:c1:61:4e:ee:9e:ca:c7:e3:83:5f:52:ac:ba: 05:f2:6e:4c:a2:6e:fd:f6:c0:a5:24:42:6a:7f:83: d4:2f:29:dc:d6:f2:57:85:66:f4:ae:f2:b0:0f:0a: 99:c1:f2:12:5f:a3:c9:3d:53:f9:14:d9:95:db:9c: dc:ee:a5:f7:5c:65:06:5b:30:14:9e:e9:c9:ec:f8: 03:65:9f:ce:66:6f:39:50:5f:6b:31:81:f5:45:1d: 74:7b:fd:ae:74:80:e5:b4:1b:19:01:6e:c4:f4:4e: 3c:71:ad:01:5e:4a:ad:01:7d:17:67:06:69:2a:45: a4:d9:32:28:e6:69:8d:62:d8:0b:97:ad:1e:85:62: 5b:e7:e1:2a:64:74:90:14:c3:a9:5d:da:ae:0e:fd: 38:ad:2d:c6:05:11:83:c9:db:a8:08:ec:d6:e1:16: f7:c4:34:a1:54:6f:46:10:3b:58:dd:4c:c3:c9:07: 6e:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:AC:2E:E4:BC:C4:35:EE:BF:51:B8:D4:B1:90:FB:25:16:84:E8:4B X509v3 Authority Key Identifier: keyid:8E:E3:59:88:7E:D4:79:47:E7:4E:CC:3D:12:D7:DD:87:4E:3A:E6:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/8EE359887ED47947E74ECC3D12D7DD874E3AE6EC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8EE359887ED47947E74ECC3D12D7DD874E3AE6EC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/8EE359887ED47947E74ECC3D12D7DD874E3AE6EC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:51:7c:4a:c0:61:a4:a7:a5:54:43:06:d1:03:4c:21:dd:5b: b4:ab:9c:f2:b8:b1:f2:6e:14:fb:31:ed:40:5b:77:cc:20:37: e3:a0:ac:b1:f5:6a:7e:07:57:67:67:de:6b:05:72:52:b6:b1: 88:8a:f8:db:ff:75:d0:3e:fd:1d:d3:ab:b9:f9:7f:18:e5:a8: 05:38:27:94:20:ee:25:da:ae:e9:80:ad:51:8c:01:62:c3:f2: db:ad:01:ee:94:dc:65:4e:ff:b6:96:c7:62:d8:58:1d:45:39: 95:8b:05:71:ca:5c:c1:8d:17:87:7f:2b:34:df:e4:aa:94:0d: 0d:88:72:f4:97:ef:1a:e2:2e:04:ca:29:cb:31:62:d3:14:f2: 5e:2a:59:04:c3:97:96:f4:1e:02:e8:90:56:23:be:48:ab:ec: 25:c7:b4:bb:cd:f0:4f:27:7b:99:48:0b:9d:d2:82:2d:60:be: 65:ff:c8:e2:9d:4f:4f:c3:d5:9c:ad:3d:26:64:03:c5:f6:c0: 5c:97:5c:27:5b:3b:5d:37:60:cc:3a:e8:0d:94:7c:01:67:7d: 87:5f:f1:ce:f5:c3:21:f5:65:da:26:dc:4d:fa:46:dd:14:88: 0f:7c:a5:40:2f:e3:03:9b:de:a9:ae:c3:1d:f4:dd:61:7b:28: 4a:3e:db:3c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX43bV2uLQMuYAmT2m6WjwVttxQMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEVFMzU5ODg3RUQ0Nzk0N0U3NEVDQzNEMTJEN0REODc0 RTNBRTZFQzAeFw0yNjExMDMxNjI4MjBaFw0yNjExMDQxODE1MjBaMDMxMTAvBgNV BAMTKDNEQUMyRUU0QkNDNDM1RUVCRjUxQjhENEIxOTBGQjI1MTY4NEU4NEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPwe49EQ5Xhh+IXtQ0MCo4UpLo yZXSNTealcluaqwWcBVEV7xB8DTs77xIC+o+AOZmnjlqT3WlRhSyPdiXQ8Wh5aJb zbl6PkJp1wuvwWFO7p7Kx+ODX1KsugXybkyibv32wKUkQmp/g9QvKdzW8leFZvSu 8rAPCpnB8hJfo8k9U/kU2ZXbnNzupfdcZQZbMBSe6cns+ANln85mbzlQX2sxgfVF HXR7/a50gOW0GxkBbsT0TjxxrQFeSq0BfRdnBmkqRaTZMijmaY1i2AuXrR6FYlvn 4SpkdJAUw6ld2q4O/TitLcYFEYPJ26gI7NbhFvfENKFUb0YQO1jdTMPJB24XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPawu5LzENe6/UbjUsZD7JRaE6EswHwYDVR0j BBgwFoAUjuNZiH7UeUfnTsw9Etfdh0465uwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTVjN2E0MDQtZWIzZi00Y2YxLTk5ZjktODI3OTYxNjYxZjMxLzAvOEVFMzU5ODg3 RUQ0Nzk0N0U3NEVDQzNEMTJEN0REODc0RTNBRTZFQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84RUUzNTk4ODdFRDQ3OTQ3RTc0RUNDM0QxMkQ3REQ4NzRFM0FF NkVDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTVjN2E0MDQtZWIzZi00Y2YxLTk5 ZjktODI3OTYxNjYxZjMxLzAvOEVFMzU5ODg3RUQ0Nzk0N0U3NEVDQzNEMTJEN0RE ODc0RTNBRTZFQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA9RfErAYaSnpVRDBtEDTCHdW7SrnPK4sfJu FPsx7UBbd8wgN+OgrLH1an4HV2dn3msFclK2sYiK+Nv/ddA+/R3Tq7n5fxjlqAU4 J5Qg7iXarumArVGMAWLD8tutAe6U3GVO/7aWx2LYWB1FOZWLBXHKXMGNF4d/KzTf 5KqUDQ2IcvSX7xriLgTKKcsxYtMU8l4qWQTDl5b0HgLokFYjvkir7CXHtLvN8E8n e5lIC53Sgi1gvmX/yOKdT0/D1ZytPSZkA8X2wFyXXCdbO103YMw66A2UfAFnfYdf 8c71wyH1Zdom3E36Rt0UiA98pUAv4wOb3qmuwx303WF7KEo+2zw= -----END CERTIFICATE-----Generated at Wed Nov 4 11:26:25 2026 by rpki-client