$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b724e45b-254b-4feb-bf8e-7bf120912af7/0/8DD710534DF68AAB08361EE28306B8FDEE71D144.mft File: 8DD710534DF68AAB08361EE28306B8FDEE71D144.mft (raw, json) Hash identifier: uN+y56ERBMr4TPJEv8S3nUJLQPoG2YqKGlNFnMuqD6Y= Subject key identifier: 83:EC:84:37:EF:E1:89:EC:3F:4E:FD:77:24:E2:27:07:91:48:F0:9F Authority key identifier: 8D:D7:10:53:4D:F6:8A:AB:08:36:1E:E2:83:06:B8:FD:EE:71:D1:44 Certificate issuer: /CN=8DD710534DF68AAB08361EE28306B8FDEE71D144 Certificate serial: 5CBF92A0105206A5CDBC55A81DEE30B2061B7785 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8DD710534DF68AAB08361EE28306B8FDEE71D144.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b724e45b-254b-4feb-bf8e-7bf120912af7/0/8DD710534DF68AAB08361EE28306B8FDEE71D144.mft Manifest number: F9 Signing time: Tue 03 Nov 2026 23:06:48 +0000 Manifest this update: Tue 03 Nov 2026 23:01:48 +0000 Manifest next update: Thu 05 Nov 2026 02:18:48 +0000 Files and hashes: 1: 8DD710534DF68AAB08361EE28306B8FDEE71D144.crl (hash: NPPUefT+nm5vfo9m9/7ANXyZ2YMLYhB2N2N6CXltfs8=) 2: 3130332e3135382e3130332e302f32342d3234203d3e203435333137.roa (hash: mt9y4ArG2gRgvhKLs+xygsf6wYJsNzK3vkSOg2Yasms=) 3: 3130332e3135382e3130322e302f32342d3234203d3e20313431313239.roa (hash: OzarGbzrKygn581G2dCLdzA7C4q7lKqki8T+O4VVozc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b724e45b-254b-4feb-bf8e-7bf120912af7/0/8DD710534DF68AAB08361EE28306B8FDEE71D144.crl rsync://rpki-rsync.idnic.net/repo/b724e45b-254b-4feb-bf8e-7bf120912af7/0/8DD710534DF68AAB08361EE28306B8FDEE71D144.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8DD710534DF68AAB08361EE28306B8FDEE71D144.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Nov 2026 10:07:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:bf:92:a0:10:52:06:a5:cd:bc:55:a8:1d:ee:30:b2:06:1b:77:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8DD710534DF68AAB08361EE28306B8FDEE71D144 Validity Not Before: Nov 3 23:01:48 2026 GMT Not After : Nov 5 02:18:48 2026 GMT Subject: CN=83EC8437EFE189EC3F4EFD7724E227079148F09F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:54:50:27:d8:0c:06:15:dc:fd:64:ca:f7:74: 55:0b:07:24:39:cb:47:4f:03:1b:96:8e:a0:95:29: 59:c6:b7:e9:b3:08:45:4e:56:5d:1a:22:95:cf:1e: cb:20:a4:b3:ef:ea:39:3d:b7:3d:61:68:92:fa:54: 2d:0a:9a:26:67:ef:93:43:b5:d6:be:01:34:f2:5a: 56:6a:3c:75:3b:7b:d5:1d:1a:ed:2e:e2:3b:24:b2: e6:21:7f:d1:c9:b2:28:f0:94:50:95:e8:01:40:9e: ef:e2:9b:a6:f9:52:64:81:f0:a4:61:38:bb:86:2f: ff:77:ee:c8:32:5c:bc:ba:83:e0:77:3b:47:6d:b0: 53:60:80:62:82:b6:c5:4d:ed:e2:0f:49:87:6f:e2: 7e:f9:da:31:e4:ec:24:3e:7d:11:7d:08:29:b8:80: 92:38:dc:b1:4f:95:e6:dd:91:de:87:94:79:61:9d: 00:84:6c:69:02:1f:6a:31:e3:e4:66:ad:9b:bb:1b: 8a:9c:ba:56:45:e4:b0:f6:b6:98:78:6b:90:b8:25: c4:42:db:09:9c:82:68:cf:9d:3b:18:a2:77:44:bd: bb:b9:d1:39:bb:b6:9f:41:26:07:24:53:2c:3a:11: 9e:3d:7b:87:31:93:00:6f:4c:1e:9a:23:75:be:bd: 8e:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:EC:84:37:EF:E1:89:EC:3F:4E:FD:77:24:E2:27:07:91:48:F0:9F X509v3 Authority Key Identifier: keyid:8D:D7:10:53:4D:F6:8A:AB:08:36:1E:E2:83:06:B8:FD:EE:71:D1:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b724e45b-254b-4feb-bf8e-7bf120912af7/0/8DD710534DF68AAB08361EE28306B8FDEE71D144.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8DD710534DF68AAB08361EE28306B8FDEE71D144.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b724e45b-254b-4feb-bf8e-7bf120912af7/0/8DD710534DF68AAB08361EE28306B8FDEE71D144.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:ea:29:f4:1c:ca:29:67:a3:81:ee:04:19:65:3e:5c:bd:95: 5b:5e:c8:bf:ba:38:ea:18:0a:9f:bf:ba:46:c5:72:d5:c0:72: 7a:53:02:dc:90:a1:1c:d2:2e:71:9c:32:cf:d2:4a:8d:56:b5: dc:0b:62:cb:93:20:82:76:05:bf:05:49:58:cd:7e:8a:9a:ec: a4:c5:5d:fb:46:db:a7:a9:7d:2b:fc:56:61:be:5b:b1:96:8b: 9a:d4:c4:63:79:ba:19:04:fc:f5:64:d1:9e:ed:88:d9:13:96: 4a:bb:dd:28:fd:5d:4e:a5:09:bf:e2:d4:49:8b:9d:aa:67:54: 7c:6b:ec:10:de:eb:c3:fe:62:45:b6:04:a6:ee:87:f9:92:12: fc:14:0d:f1:b3:28:c3:ed:a4:da:b1:f3:43:58:83:71:f6:46: ea:d0:cf:3c:4e:fb:72:26:c1:b9:ee:3e:7a:cd:d9:6d:8f:2e: d8:1a:04:97:ed:18:9d:e5:2c:a5:3a:85:52:84:1a:c3:a8:d4: 0a:22:8a:e2:3f:fa:c4:ab:92:00:66:d6:5f:ae:1d:7a:7d:3f: e3:cb:5b:91:db:e9:e4:27:44:ba:7b:51:a2:82:9c:6c:e0:ea: 6b:0d:7b:a6:61:de:45:2a:05:88:b7:56:20:ca:05:1f:67:6e: ff:ce:80:09 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXL+SoBBSBqXNvFWoHe4wsgYbd4UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOERENzEwNTM0REY2OEFBQjA4MzYxRUUyODMwNkI4RkRF RTcxRDE0NDAeFw0yNjExMDMyMzAxNDhaFw0yNjExMDUwMjE4NDhaMDMxMTAvBgNV BAMTKDgzRUM4NDM3RUZFMTg5RUMzRjRFRkQ3NzI0RTIyNzA3OTE0OEYwOUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+VFAn2AwGFdz9ZMr3dFULByQ5 y0dPAxuWjqCVKVnGt+mzCEVOVl0aIpXPHssgpLPv6jk9tz1haJL6VC0KmiZn75ND tda+ATTyWlZqPHU7e9UdGu0u4jsksuYhf9HJsijwlFCV6AFAnu/im6b5UmSB8KRh OLuGL/937sgyXLy6g+B3O0dtsFNggGKCtsVN7eIPSYdv4n752jHk7CQ+fRF9CCm4 gJI43LFPlebdkd6HlHlhnQCEbGkCH2ox4+RmrZu7G4qculZF5LD2tph4a5C4JcRC 2wmcgmjPnTsYondEvbu50Tm7tp9BJgckUyw6EZ49e4cxkwBvTB6aI3W+vY5JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUg+yEN+/hiew/Tv13JOInB5FI8J8wHwYDVR0j BBgwFoAUjdcQU032iqsINh7igwa4/e5x0UQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjcyNGU0NWItMjU0Yi00ZmViLWJmOGUtN2JmMTIwOTEyYWY3LzAvOERENzEwNTM0 REY2OEFBQjA4MzYxRUUyODMwNkI4RkRFRTcxRDE0NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84REQ3MTA1MzRERjY4QUFCMDgzNjFFRTI4MzA2QjhGREVFNzFE MTQ0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjcyNGU0NWItMjU0Yi00ZmViLWJm OGUtN2JmMTIwOTEyYWY3LzAvOERENzEwNTM0REY2OEFBQjA4MzYxRUUyODMwNkI4 RkRFRTcxRDE0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAfqKfQcyilno4HuBBllPly9lVteyL+6OOoY Cp+/ukbFctXAcnpTAtyQoRzSLnGcMs/SSo1WtdwLYsuTIIJ2Bb8FSVjNfoqa7KTF XftG26epfSv8VmG+W7GWi5rUxGN5uhkE/PVk0Z7tiNkTlkq73Sj9XU6lCb/i1EmL napnVHxr7BDe68P+YkW2BKbuh/mSEvwUDfGzKMPtpNqx80NYg3H2RurQzzxO+3Im wbnuPnrN2W2PLtgaBJftGJ3lLKU6hVKEGsOo1AoiiuI/+sSrkgBm1l+uHXp9P+PL W5Hb6eQnRLp7UaKCnGzg6msNe6Zh3kUqBYi3ViDKBR9nbv/OgAk= -----END CERTIFICATE-----Generated at Wed Nov 4 03:06:02 2026 by rpki-client