$ rpki-client -vvvf rpki-rsync.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/0/8D39D207A49E2A5C1D9FD8A7B27D34484EF1E62C.mft File: 8D39D207A49E2A5C1D9FD8A7B27D34484EF1E62C.mft (raw, json) Hash identifier: wRrM376vp9ktDzpFhipZUnN4HRCYDhXzH2Qsyq9/TiA= Subject key identifier: 6B:36:78:2C:C6:57:CE:F0:8A:C8:63:C8:A2:DB:88:E7:27:A5:90:77 Authority key identifier: 8D:39:D2:07:A4:9E:2A:5C:1D:9F:D8:A7:B2:7D:34:48:4E:F1:E6:2C Certificate issuer: /CN=8D39D207A49E2A5C1D9FD8A7B27D34484EF1E62C Certificate serial: 7E585026C3C2D8091FAC0D13F92D58C5FAF10AFE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/8D39D207A49E2A5C1D9FD8A7B27D34484EF1E62C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/0/8D39D207A49E2A5C1D9FD8A7B27D34484EF1E62C.mft Manifest number: F7 Signing time: Mon 02 Nov 2026 15:06:56 +0000 Manifest this update: Mon 02 Nov 2026 15:01:56 +0000 Manifest next update: Tue 03 Nov 2026 15:41:56 +0000 Files and hashes: 1: 3135372e36362e3137362e302f32332d3233203d3e20313532373536.roa (hash: wesRzy414+ZceFD9/gwocQJzbKqVZ+NX+KTjHeWFakA=) 2: 3135372e36362e3137362e302f32342d3234203d3e20313532373536.roa (hash: Bi2PlajLpuJF5Q77N7WIyjkq2NapiUAEv+5ltKF4LBc=) 3: 8D39D207A49E2A5C1D9FD8A7B27D34484EF1E62C.crl (hash: xjxZsYtpcoivJWPmEhqrFyDBV3DtU+ljlOJUZzFclGM=) 4: 3135372e36362e3137372e302f32342d3234203d3e20313532373536.roa (hash: HIdPJqjIrOEvu8Fg+POUaS/pAuaPSBpatCRmSscMNd8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/0/8D39D207A49E2A5C1D9FD8A7B27D34484EF1E62C.crl rsync://rpki-rsync.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/0/8D39D207A49E2A5C1D9FD8A7B27D34484EF1E62C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/8D39D207A49E2A5C1D9FD8A7B27D34484EF1E62C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 11:54:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:58:50:26:c3:c2:d8:09:1f:ac:0d:13:f9:2d:58:c5:fa:f1:0a:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D39D207A49E2A5C1D9FD8A7B27D34484EF1E62C Validity Not Before: Nov 2 15:01:56 2026 GMT Not After : Nov 3 15:41:56 2026 GMT Subject: CN=6B36782CC657CEF08AC863C8A2DB88E727A59077 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:3f:42:f0:89:28:90:28:d1:37:9e:18:60:1d: 71:3a:34:ca:ca:5d:80:a7:9d:e8:b8:e7:96:b2:93: 20:43:fb:a4:8a:26:3a:9a:29:55:a7:23:3c:3d:c3: 7b:92:6f:cf:7b:ef:e3:ee:c8:99:1a:5c:68:33:cf: 0d:25:14:ff:18:aa:c6:00:49:c7:90:de:2c:fa:93: 47:43:4d:59:8f:06:a7:92:18:c4:23:c9:34:17:21: 95:6b:b2:13:ee:8e:87:e9:68:b8:f9:c2:46:75:16: 37:67:ec:7d:df:33:7a:62:72:73:21:cd:ef:4a:e1: bf:e1:c2:25:78:67:3a:5f:9f:66:8f:3f:eb:4b:80: ff:08:1c:c2:07:88:35:10:3e:b2:8c:6a:06:4d:d9: 78:ec:0f:92:bb:2d:2c:c4:26:10:8d:b1:b2:e2:12: 47:cc:bb:d8:30:d2:eb:2f:82:99:1f:d3:79:38:a7: 0d:b1:3e:d5:87:8a:1e:e3:0a:0e:14:88:fa:73:d4: e5:23:db:54:22:a4:f8:8f:9f:0c:6d:de:fd:d6:a6: e4:58:9f:03:ad:50:7b:a2:a7:9f:5d:48:c0:ed:a4: 85:99:b6:0e:87:9b:43:a0:34:d5:28:71:51:ba:b2: aa:e1:b8:eb:37:96:63:dc:9d:39:b1:7f:1a:26:52: b6:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:36:78:2C:C6:57:CE:F0:8A:C8:63:C8:A2:DB:88:E7:27:A5:90:77 X509v3 Authority Key Identifier: keyid:8D:39:D2:07:A4:9E:2A:5C:1D:9F:D8:A7:B2:7D:34:48:4E:F1:E6:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/0/8D39D207A49E2A5C1D9FD8A7B27D34484EF1E62C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/8D39D207A49E2A5C1D9FD8A7B27D34484EF1E62C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/0/8D39D207A49E2A5C1D9FD8A7B27D34484EF1E62C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:c4:83:ff:ca:e9:ae:1b:c6:8e:a0:c0:b4:38:ba:d9:df:62: 2e:d4:60:ae:b3:1d:d5:5a:be:55:b4:9e:c2:45:9f:52:dc:44: 99:ad:ee:c4:c5:e4:aa:ed:0b:cc:0a:d9:7f:02:f9:ea:5a:f5: bf:e2:c9:76:16:0f:8b:6e:dd:b5:c4:37:8f:a9:ab:e3:69:97: bc:e9:ac:71:94:25:88:dc:cc:15:5a:fa:8e:fa:ea:b0:0e:bd: f3:8b:96:c6:1d:b3:98:ff:e5:a1:25:fe:0d:2a:90:94:c9:63: 23:48:94:af:b4:1b:42:36:a6:9e:7d:da:81:9e:84:17:8f:5d: 6a:89:75:c9:4e:55:71:a7:89:88:9e:48:0d:bd:f4:ca:91:0a: 26:64:c8:32:03:1c:1a:2d:60:3f:cc:05:d1:91:4e:3a:d7:ee: 60:32:3e:65:5a:ea:a2:20:a2:f1:11:29:c7:8d:43:0a:61:94: 77:e7:fe:ad:48:d9:57:c1:25:09:e7:01:f7:5d:69:b3:9d:7c: 6c:a6:4f:5d:7f:cf:02:59:fe:89:36:28:01:55:2b:51:0d:35: 5d:b1:ee:ec:fe:54:1e:5e:68:3c:60:fc:74:72:f7:ab:0d:d9: 18:29:54:89:2d:29:36:08:c3:6d:53:f9:26:62:b8:da:62:49: 30:53:1f:1c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUflhQJsPC2AkfrA0T+S1YxfrxCv4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEQzOUQyMDdBNDlFMkE1QzFEOUZEOEE3QjI3RDM0NDg0 RUYxRTYyQzAeFw0yNjExMDIxNTAxNTZaFw0yNjExMDMxNTQxNTZaMDMxMTAvBgNV BAMTKDZCMzY3ODJDQzY1N0NFRjA4QUM4NjNDOEEyREI4OEU3MjdBNTkwNzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFP0LwiSiQKNE3nhhgHXE6NMrK XYCnnei455aykyBD+6SKJjqaKVWnIzw9w3uSb8977+PuyJkaXGgzzw0lFP8YqsYA SceQ3iz6k0dDTVmPBqeSGMQjyTQXIZVrshPujofpaLj5wkZ1Fjdn7H3fM3picnMh ze9K4b/hwiV4Zzpfn2aPP+tLgP8IHMIHiDUQPrKMagZN2XjsD5K7LSzEJhCNsbLi EkfMu9gw0usvgpkf03k4pw2xPtWHih7jCg4UiPpz1OUj21QipPiPnwxt3v3WpuRY nwOtUHuip59dSMDtpIWZtg6Hm0OgNNUocVG6sqrhuOs3lmPcnTmxfxomUraXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUazZ4LMZXzvCKyGPIotuI5yelkHcwHwYDVR0j BBgwFoAUjTnSB6SeKlwdn9insn00SE7x5iwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWFiNGUxNGQtMDIxZC00MGRjLTkyM2EtYzEyZDFhZjQ0M2I1LzAvOEQzOUQyMDdB NDlFMkE1QzFEOUZEOEE3QjI3RDM0NDg0RUYxRTYyQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC84RDM5RDIwN0E0OUUyQTVDMUQ5RkQ4QTdCMjdEMzQ0ODRFRjFF NjJDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWFiNGUxNGQtMDIxZC00MGRjLTky M2EtYzEyZDFhZjQ0M2I1LzAvOEQzOUQyMDdBNDlFMkE1QzFEOUZEOEE3QjI3RDM0 NDg0RUYxRTYyQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC3Eg//K6a4bxo6gwLQ4utnfYi7UYK6zHdVa vlW0nsJFn1LcRJmt7sTF5KrtC8wK2X8C+epa9b/iyXYWD4tu3bXEN4+pq+Npl7zp rHGUJYjczBVa+o766rAOvfOLlsYds5j/5aEl/g0qkJTJYyNIlK+0G0I2pp592oGe hBePXWqJdclOVXGniYieSA299MqRCiZkyDIDHBotYD/MBdGRTjrX7mAyPmVa6qIg ovERKceNQwphlHfn/q1I2VfBJQnnAfddabOdfGymT11/zwJZ/ok2KAFVK1ENNV2x 7uz+VB5eaDxg/HRy96sN2RgpVIktKTYIw21T+SZiuNpiSTBTHxw= -----END CERTIFICATE-----Generated at Mon Nov 2 21:16:12 2026 by rpki-client