$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/CD845730E45E4D531071D97C1EDC23DA378D662F.mft File: CD845730E45E4D531071D97C1EDC23DA378D662F.mft (raw, json) Hash identifier: 6owDJtGCgSnPcxc9jhmPSFNbEIEwlIkhYoDdizPjkDw= Subject key identifier: 38:5D:5C:45:ED:8E:83:18:AD:27:38:97:F4:07:14:0E:06:5B:A7:3F Authority key identifier: CD:84:57:30:E4:5E:4D:53:10:71:D9:7C:1E:DC:23:DA:37:8D:66:2F Certificate issuer: /CN=CD845730E45E4D531071D97C1EDC23DA378D662F Certificate serial: 52D1C436CFE7750E457B9A66BA3EF84E94FE262A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CD845730E45E4D531071D97C1EDC23DA378D662F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/CD845730E45E4D531071D97C1EDC23DA378D662F.mft Manifest number: F8 Signing time: Tue 03 Nov 2026 13:40:08 +0000 Manifest this update: Tue 03 Nov 2026 13:35:08 +0000 Manifest next update: Wed 04 Nov 2026 14:19:08 +0000 Files and hashes: 1: 3130332e3131342e35322e302f32342d3234203d3e20313337333439.roa (hash: qBRAe7C40tWA04dsJPNXkwqtoGUaunwx7S+rfFhu9ho=) 2: 3130332e3131342e35322e302f32332d3234203d3e20313337333439.roa (hash: ZyTKIgLUxCGhcIet/CFJoBSXRoiA7e9G+Kr6S5o0mEQ=) 3: 3130332e3131342e35332e302f32342d3234203d3e20313337333439.roa (hash: BgiKJc54U9vx0Bz6VAlgbJ7Gti2eL3QTE9xees67wzA=) 4: 323030313a6466343a663330303a3a2f34382d3438203d3e20313337333439.roa (hash: lb4d9lrnmMWGai0ItqfgLnvKFt7iEuEC2HCE9pUg2nE=) 5: CD845730E45E4D531071D97C1EDC23DA378D662F.crl (hash: qVcm5OdI6BUdojUzpfGNf/9MFpIE1WSXnYtSkLrOzM0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/CD845730E45E4D531071D97C1EDC23DA378D662F.crl rsync://rpki-rsync.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/CD845730E45E4D531071D97C1EDC23DA378D662F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CD845730E45E4D531071D97C1EDC23DA378D662F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Nov 2026 10:07:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:d1:c4:36:cf:e7:75:0e:45:7b:9a:66:ba:3e:f8:4e:94:fe:26:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD845730E45E4D531071D97C1EDC23DA378D662F Validity Not Before: Nov 3 13:35:08 2026 GMT Not After : Nov 4 14:19:08 2026 GMT Subject: CN=385D5C45ED8E8318AD273897F407140E065BA73F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:8e:b5:98:3a:f2:19:88:63:04:53:38:5e:fb: 85:80:0a:07:67:58:a0:1d:92:24:70:02:91:b1:c3: d3:32:50:60:8a:06:d8:bd:c1:2c:1c:fe:96:d9:f2: 8a:3d:10:23:69:df:a2:ae:3a:e3:0e:7b:53:7d:f2: c5:db:7c:ca:fb:67:4a:09:48:dd:ac:3c:4d:8b:b2: 7e:b9:ab:9f:24:62:53:c1:36:32:36:98:79:06:7a: 63:2a:af:5a:23:25:50:8d:1c:c7:da:c9:f7:00:34: 63:20:db:b2:9b:7e:b3:41:b1:f9:e0:8a:47:7c:34: cf:b1:74:19:3d:c5:56:81:af:6d:9f:19:1d:de:ac: 87:6f:20:47:de:10:8c:6e:06:11:33:d4:ac:c0:a9: 13:8a:50:e5:2d:6d:5f:0a:b8:01:3e:5a:3b:6b:a4: c6:97:35:20:20:53:c9:45:08:20:a8:e2:1b:db:dc: fc:c4:5e:ae:4d:19:31:68:73:2e:d4:7d:0c:8a:6b: 97:ca:cf:53:94:ef:28:0d:ef:97:6b:bf:f3:ae:fc: 15:f5:16:67:3b:8c:91:c8:9b:7d:e9:82:2e:9f:f7: 79:31:93:49:f5:00:03:11:af:b9:bd:35:1d:e7:2c: d3:60:95:6f:04:8b:37:08:5d:2a:6d:18:51:a9:eb: 44:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:5D:5C:45:ED:8E:83:18:AD:27:38:97:F4:07:14:0E:06:5B:A7:3F X509v3 Authority Key Identifier: keyid:CD:84:57:30:E4:5E:4D:53:10:71:D9:7C:1E:DC:23:DA:37:8D:66:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/CD845730E45E4D531071D97C1EDC23DA378D662F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CD845730E45E4D531071D97C1EDC23DA378D662F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/CD845730E45E4D531071D97C1EDC23DA378D662F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:99:9c:41:73:90:85:fc:bf:2b:22:c5:df:e1:04:34:37:41: 02:fa:d6:80:c5:68:bc:3d:46:83:7d:f0:99:26:f4:09:dd:eb: 7c:a8:0f:b5:41:87:66:33:7c:ae:4f:87:ec:a8:9d:09:a1:72: 9a:8c:09:5e:3d:23:e4:f5:37:6b:9b:cd:10:9a:1a:61:07:c9: e5:c2:bc:67:b3:f4:f9:af:09:56:9f:40:12:2f:56:fb:fc:02: c0:a9:4a:61:28:8b:43:f4:ab:07:66:df:7f:ca:9c:83:35:e5: 19:58:ee:4e:81:7f:d8:e3:16:a9:27:50:1f:a8:47:fb:ec:8e: 35:34:0d:f1:97:36:d8:6b:0a:8e:76:9e:51:b7:32:72:5a:35: 43:0e:97:37:50:7d:3d:43:93:3a:70:e2:6b:3e:43:b7:27:77: 00:e3:63:f8:be:24:d2:bb:0e:2d:f0:d8:45:72:8e:9c:95:95: 5c:fd:c1:df:23:ea:1e:9c:fa:f9:75:5b:b6:fd:80:a0:21:44: b4:a4:e7:6f:fa:dc:c3:1b:4f:cc:04:27:fa:d5:28:bc:d0:6d: 47:24:51:c4:77:f2:cf:42:76:c7:f4:36:85:b0:12:b0:b7:84: 55:7f:56:36:4b:05:7b:a7:66:ab:c9:23:a2:26:6a:60:a2:18: ad:5b:a6:23 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUtHENs/ndQ5Fe5pmuj74TpT+JiowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0Q4NDU3MzBFNDVFNEQ1MzEwNzFEOTdDMUVEQzIzREEz NzhENjYyRjAeFw0yNjExMDMxMzM1MDhaFw0yNjExMDQxNDE5MDhaMDMxMTAvBgNV BAMTKDM4NUQ1QzQ1RUQ4RTgzMThBRDI3Mzg5N0Y0MDcxNDBFMDY1QkE3M0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCMjrWYOvIZiGMEUzhe+4WACgdn WKAdkiRwApGxw9MyUGCKBti9wSwc/pbZ8oo9ECNp36KuOuMOe1N98sXbfMr7Z0oJ SN2sPE2Lsn65q58kYlPBNjI2mHkGemMqr1ojJVCNHMfayfcANGMg27KbfrNBsfng ikd8NM+xdBk9xVaBr22fGR3erIdvIEfeEIxuBhEz1KzAqROKUOUtbV8KuAE+Wjtr pMaXNSAgU8lFCCCo4hvb3PzEXq5NGTFocy7UfQyKa5fKz1OU7ygN75drv/Ou/BX1 Fmc7jJHIm33pgi6f93kxk0n1AAMRr7m9NR3nLNNglW8EizcIXSptGFGp60QlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOF1cRe2OgxitJziX9AcUDgZbpz8wHwYDVR0j BBgwFoAUzYRXMOReTVMQcdl8Htwj2jeNZi8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDA5NjJjNmUtNTk1YS00N2M0LWFhN2MtZWY4ZTc3Y2FlNjQyLzAvQ0Q4NDU3MzBF NDVFNEQ1MzEwNzFEOTdDMUVEQzIzREEzNzhENjYyRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DRDg0NTczMEU0NUU0RDUzMTA3MUQ5N0MxRURDMjNEQTM3OEQ2 NjJGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDA5NjJjNmUtNTk1YS00N2M0LWFh N2MtZWY4ZTc3Y2FlNjQyLzAvQ0Q4NDU3MzBFNDVFNEQ1MzEwNzFEOTdDMUVEQzIz REEzNzhENjYyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF6ZnEFzkIX8vysixd/hBDQ3QQL61oDFaLw9 RoN98Jkm9And63yoD7VBh2YzfK5Ph+yonQmhcpqMCV49I+T1N2ubzRCaGmEHyeXC vGez9PmvCVafQBIvVvv8AsCpSmEoi0P0qwdm33/KnIM15RlY7k6Bf9jjFqknUB+o R/vsjjU0DfGXNthrCo52nlG3MnJaNUMOlzdQfT1Dkzpw4ms+Q7cndwDjY/i+JNK7 Di3w2EVyjpyVlVz9wd8j6h6c+vl1W7b9gKAhRLSk52/63MMbT8wEJ/rVKLzQbUck UcR38s9Cdsf0NoWwErC3hFV/VjZLBXunZqvJI6ImamCiGK1bpiM= -----END CERTIFICATE-----Generated at Wed Nov 4 02:51:25 2026 by rpki-client