$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/D8CB7F8B5666E07E57CBEFC023C6F60346F29D7F.mft File: D8CB7F8B5666E07E57CBEFC023C6F60346F29D7F.mft (raw, json) Hash identifier: 6wwk6aKdWWLbfX2Ogl43sr/5FVz+zjra8TXJHngev1k= Subject key identifier: C8:90:01:61:F5:DF:08:C7:D4:99:5F:CD:38:D7:7C:EC:09:64:1E:76 Authority key identifier: D8:CB:7F:8B:56:66:E0:7E:57:CB:EF:C0:23:C6:F6:03:46:F2:9D:7F Certificate issuer: /CN=D8CB7F8B5666E07E57CBEFC023C6F60346F29D7F Certificate serial: 4844ADE919A90D6BDC18F697D7BA2F444BFCACCC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D8CB7F8B5666E07E57CBEFC023C6F60346F29D7F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/D8CB7F8B5666E07E57CBEFC023C6F60346F29D7F.mft Manifest number: F9 Signing time: Wed 04 Nov 2026 10:31:15 +0000 Manifest this update: Wed 04 Nov 2026 10:26:15 +0000 Manifest next update: Thu 05 Nov 2026 14:24:15 +0000 Files and hashes: 1: 3130332e3130372e3137372e302f32342d3234203d3e20313530393434.roa (hash: 4zjQiDOO1u6032UYBIQ3bbHO8yvV/zbc51HnTLw1PKM=) 2: 3130332e3130372e3137362e302f32332d3233203d3e20313530393434.roa (hash: BSuw1whkNZvJE4R4/j402PtZbyO7u4uvse4a8U9c4JA=) 3: D8CB7F8B5666E07E57CBEFC023C6F60346F29D7F.crl (hash: VpiexFbqgt05/RTqvoFzjuLlwVfH5bov9pA6I5FEx34=) 4: 3130332e3130372e3137362e302f32342d3234203d3e20313530393434.roa (hash: aqo6iqJhHng8SceS0GB2zDkvhHekA+jqXPQYRYjWZBA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/D8CB7F8B5666E07E57CBEFC023C6F60346F29D7F.crl rsync://rpki-rsync.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/D8CB7F8B5666E07E57CBEFC023C6F60346F29D7F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D8CB7F8B5666E07E57CBEFC023C6F60346F29D7F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 11:48:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:44:ad:e9:19:a9:0d:6b:dc:18:f6:97:d7:ba:2f:44:4b:fc:ac:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D8CB7F8B5666E07E57CBEFC023C6F60346F29D7F Validity Not Before: Nov 4 10:26:15 2026 GMT Not After : Nov 5 14:24:15 2026 GMT Subject: CN=C8900161F5DF08C7D4995FCD38D77CEC09641E76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:95:db:90:a9:b8:0a:c9:c0:bb:f0:07:1e:6c: 70:87:fe:c4:75:2f:bc:73:c4:c3:d2:01:14:9d:5e: a0:9f:cc:1c:8f:40:ad:20:09:10:2e:2d:29:2f:53: 8a:e3:87:65:c4:da:78:75:f9:35:df:82:8e:89:fd: ba:f9:bd:99:fe:e1:83:9d:21:b0:5b:2d:08:b7:8c: 11:09:6c:3b:af:f8:5e:21:73:dc:18:b4:61:51:b3: e0:08:16:d4:f0:a2:fe:b2:33:a5:ca:1d:13:6a:8b: 73:58:c5:78:cf:74:de:93:1e:fc:64:ef:b9:3d:55: fc:ed:89:15:28:35:dc:cc:1a:11:bb:c4:20:1b:39: f8:6e:f6:c7:f4:ae:d0:6a:35:6a:49:81:a9:bf:01: 78:aa:65:fa:3e:58:fa:fc:77:09:70:f5:c0:04:5f: f3:da:e3:25:65:23:11:72:3d:b0:05:eb:e3:8e:fd: 5c:e6:d6:4f:98:a0:4e:ae:df:98:c2:c2:f3:33:14: b1:6d:7b:6d:e0:d9:66:8e:7c:aa:89:08:f8:c3:9f: f7:e1:00:c0:2c:f8:9b:84:e8:67:2c:6c:26:21:54: 07:d1:d3:69:c1:01:55:ed:13:61:8c:69:c0:bc:56: 50:52:f8:3d:b4:e1:5c:92:5f:26:74:ca:23:9e:97: 39:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:90:01:61:F5:DF:08:C7:D4:99:5F:CD:38:D7:7C:EC:09:64:1E:76 X509v3 Authority Key Identifier: keyid:D8:CB:7F:8B:56:66:E0:7E:57:CB:EF:C0:23:C6:F6:03:46:F2:9D:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/D8CB7F8B5666E07E57CBEFC023C6F60346F29D7F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D8CB7F8B5666E07E57CBEFC023C6F60346F29D7F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/D8CB7F8B5666E07E57CBEFC023C6F60346F29D7F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:f6:d8:d2:8d:14:ad:76:15:9a:41:2f:e0:00:5f:83:4f:46: aa:35:65:07:e6:47:30:7d:8d:63:ea:2b:37:db:9b:82:ce:cb: 16:75:af:8f:35:93:4a:47:72:99:d9:4c:41:48:62:0d:58:0b: 97:e9:af:c8:dc:28:ad:54:b4:97:08:65:25:ad:1a:6c:ef:d2: bb:fd:37:59:02:2b:65:64:01:bd:25:56:05:49:3b:c5:14:3f: 5e:64:8b:72:7e:43:28:10:2a:ae:ba:33:99:a6:b3:fb:48:eb: d7:bb:ce:9b:96:3a:4c:df:1d:5c:8c:5c:61:b6:d2:df:ef:e2: 7c:e3:4d:33:b7:03:23:07:b2:2f:f1:33:65:bb:50:b2:fa:f9: 8d:3b:c1:85:de:43:24:46:7f:71:b9:43:14:47:82:65:44:c9: bd:63:d0:5c:72:d8:c5:55:45:cf:b0:cd:98:c3:09:f3:4d:81: e5:e8:43:1d:a7:8a:2b:d7:3a:f6:3c:45:f8:06:01:50:1d:39: cc:db:a6:ce:62:cc:dc:24:0b:61:77:a3:b1:fe:93:74:2e:2f: 3c:4e:dc:bb:6a:d1:fa:e6:a6:71:2a:88:cc:f4:df:7f:29:88: 69:37:a6:fd:c4:fd:7e:ad:38:4d:64:a3:29:54:fa:84:de:f9: 8f:35:0d:53 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSESt6RmpDWvcGPaX17ovREv8rMwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDhDQjdGOEI1NjY2RTA3RTU3Q0JFRkMwMjNDNkY2MDM0 NkYyOUQ3RjAeFw0yNjExMDQxMDI2MTVaFw0yNjExMDUxNDI0MTVaMDMxMTAvBgNV BAMTKEM4OTAwMTYxRjVERjA4QzdENDk5NUZDRDM4RDc3Q0VDMDk2NDFFNzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYlduQqbgKycC78AcebHCH/sR1 L7xzxMPSARSdXqCfzByPQK0gCRAuLSkvU4rjh2XE2nh1+TXfgo6J/br5vZn+4YOd IbBbLQi3jBEJbDuv+F4hc9wYtGFRs+AIFtTwov6yM6XKHRNqi3NYxXjPdN6THvxk 77k9VfztiRUoNdzMGhG7xCAbOfhu9sf0rtBqNWpJgam/AXiqZfo+WPr8dwlw9cAE X/Pa4yVlIxFyPbAF6+OO/Vzm1k+YoE6u35jCwvMzFLFte23g2WaOfKqJCPjDn/fh AMAs+JuE6GcsbCYhVAfR02nBAVXtE2GMacC8VlBS+D204VySXyZ0yiOelznfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyJABYfXfCMfUmV/NONd87AlkHnYwHwYDVR0j BBgwFoAU2Mt/i1Zm4H5Xy+/AI8b2A0bynX8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDM2YWIwNGQtNjhjNy00MjQ5LWIxMDktNDZiMjhjZjgwM2YzLzAvRDhDQjdGOEI1 NjY2RTA3RTU3Q0JFRkMwMjNDNkY2MDM0NkYyOUQ3Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EOENCN0Y4QjU2NjZFMDdFNTdDQkVGQzAyM0M2RjYwMzQ2RjI5 RDdGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDM2YWIwNGQtNjhjNy00MjQ5LWIx MDktNDZiMjhjZjgwM2YzLzAvRDhDQjdGOEI1NjY2RTA3RTU3Q0JFRkMwMjNDNkY2 MDM0NkYyOUQ3Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGH22NKNFK12FZpBL+AAX4NPRqo1ZQfmRzB9 jWPqKzfbm4LOyxZ1r481k0pHcpnZTEFIYg1YC5fpr8jcKK1UtJcIZSWtGmzv0rv9 N1kCK2VkAb0lVgVJO8UUP15ki3J+QygQKq66M5mms/tI69e7zpuWOkzfHVyMXGG2 0t/v4nzjTTO3AyMHsi/xM2W7ULL6+Y07wYXeQyRGf3G5QxRHgmVEyb1j0Fxy2MVV Rc+wzZjDCfNNgeXoQx2niivXOvY8RfgGAVAdOczbps5izNwkC2F3o7H+k3QuLzxO 3Ltq0frmpnEqiMz0338piGk3pv3E/X6tOE1koylU+oTe+Y81DVM= -----END CERTIFICATE-----Generated at Wed Nov 4 17:07:57 2026 by rpki-client