$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/D8CB7F8B5666E07E57CBEFC023C6F60346F29D7F.mft File: D8CB7F8B5666E07E57CBEFC023C6F60346F29D7F.mft (raw, json) Hash identifier: UUl9hSkStDhNKZntAe8ik0zX7BOcJaqZGO4UDuJpw0k= Subject key identifier: 28:80:BF:73:D5:40:BF:4D:3E:5E:6E:4B:03:79:F8:B4:95:AD:CC:DF Authority key identifier: D8:CB:7F:8B:56:66:E0:7E:57:CB:EF:C0:23:C6:F6:03:46:F2:9D:7F Certificate issuer: /CN=D8CB7F8B5666E07E57CBEFC023C6F60346F29D7F Certificate serial: 49D1CFBFBE01FF5CC55CF0E4BC4B81CFDCF78A1B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D8CB7F8B5666E07E57CBEFC023C6F60346F29D7F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/D8CB7F8B5666E07E57CBEFC023C6F60346F29D7F.mft Manifest number: F8 Signing time: Tue 03 Nov 2026 15:57:33 +0000 Manifest this update: Tue 03 Nov 2026 15:52:33 +0000 Manifest next update: Wed 04 Nov 2026 18:30:33 +0000 Files and hashes: 1: 3130332e3130372e3137362e302f32332d3233203d3e20313530393434.roa (hash: BSuw1whkNZvJE4R4/j402PtZbyO7u4uvse4a8U9c4JA=) 2: 3130332e3130372e3137362e302f32342d3234203d3e20313530393434.roa (hash: aqo6iqJhHng8SceS0GB2zDkvhHekA+jqXPQYRYjWZBA=) 3: D8CB7F8B5666E07E57CBEFC023C6F60346F29D7F.crl (hash: Az5rAoA67PnNtMt5MDpof2p//gf6Tgswfw21rh90iM4=) 4: 3130332e3130372e3137372e302f32342d3234203d3e20313530393434.roa (hash: 4zjQiDOO1u6032UYBIQ3bbHO8yvV/zbc51HnTLw1PKM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/D8CB7F8B5666E07E57CBEFC023C6F60346F29D7F.crl rsync://rpki-rsync.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/D8CB7F8B5666E07E57CBEFC023C6F60346F29D7F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D8CB7F8B5666E07E57CBEFC023C6F60346F29D7F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Nov 2026 10:07:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:d1:cf:bf:be:01:ff:5c:c5:5c:f0:e4:bc:4b:81:cf:dc:f7:8a:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D8CB7F8B5666E07E57CBEFC023C6F60346F29D7F Validity Not Before: Nov 3 15:52:33 2026 GMT Not After : Nov 4 18:30:33 2026 GMT Subject: CN=2880BF73D540BF4D3E5E6E4B0379F8B495ADCCDF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a0:a2:57:0a:aa:01:48:f9:76:bd:1e:2f:90: 5b:8e:43:c6:b8:20:60:a1:f0:83:04:dd:79:79:ec: d4:c4:14:f4:3f:98:d4:c4:26:db:fa:a2:2d:04:35: 5d:80:4b:27:0d:74:51:95:8e:41:f3:0b:31:d8:c9: 49:a7:60:03:4d:e1:d7:8c:11:04:b6:c6:52:23:ca: c5:a4:e0:08:74:05:97:ae:62:8d:dc:af:c6:ff:b3: 3c:de:de:ec:db:c6:8f:8d:a9:16:a2:ba:07:3b:c5: 1c:30:0e:4a:d5:28:b3:8c:2b:82:2f:cf:1c:29:44: 71:0d:c7:05:1d:99:50:c9:a4:34:f2:41:72:f9:e7: 59:cf:04:ae:b8:88:07:1e:07:62:33:e8:8f:63:07: 6e:aa:c7:71:39:13:0b:b5:aa:26:25:f2:92:d5:c3: 10:a1:73:d5:26:d7:fc:d4:0a:39:ab:eb:70:80:21: a3:8a:32:6e:05:a1:70:04:99:0f:83:24:e4:3c:b8: fa:cb:25:d7:61:0a:a2:13:22:4e:b7:4b:29:ff:2c: 44:00:c7:d3:5f:c9:d4:67:90:4d:14:c3:38:9a:90: c1:fc:65:46:66:a8:99:34:47:39:8d:cc:97:6d:04: 2b:a8:b2:b3:77:98:ea:d9:47:a6:39:0b:12:7a:74: 90:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:80:BF:73:D5:40:BF:4D:3E:5E:6E:4B:03:79:F8:B4:95:AD:CC:DF X509v3 Authority Key Identifier: keyid:D8:CB:7F:8B:56:66:E0:7E:57:CB:EF:C0:23:C6:F6:03:46:F2:9D:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/D8CB7F8B5666E07E57CBEFC023C6F60346F29D7F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D8CB7F8B5666E07E57CBEFC023C6F60346F29D7F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/D8CB7F8B5666E07E57CBEFC023C6F60346F29D7F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:e9:07:72:14:65:54:b3:af:97:2e:8f:ae:71:6a:01:8d:06: 93:a6:3a:d3:f0:e7:84:dc:89:64:c3:69:ee:72:b9:a7:0e:68: 69:ab:9a:7e:4f:aa:b2:2f:ef:1a:c5:b5:f8:19:9b:04:e5:b9: 3d:bc:e9:8c:97:7e:49:87:c7:d0:fe:0f:32:7d:f3:f3:96:37: 95:c6:24:16:7e:76:e4:f7:37:b7:e9:b0:7c:f8:42:18:b9:29: e5:12:20:ae:6d:d0:38:a7:40:6b:67:42:7f:3a:9a:bd:b4:30: 01:d2:c5:46:66:2e:7b:4a:c2:6b:36:c3:98:3a:86:30:00:e0: 4a:10:7c:17:fb:2a:0e:62:bf:4a:08:5e:e4:1a:44:0b:fb:98: 0f:39:65:ab:12:fb:52:44:bb:15:4a:49:33:fa:fe:4e:f3:1c: 72:14:8b:1e:a8:04:a3:b7:fc:71:25:94:b9:9c:73:b3:de:c4: 40:1c:7b:d1:ef:58:3e:4f:42:49:ab:88:85:79:36:5a:1d:eb: 07:42:20:c2:90:97:f0:db:88:09:9e:47:7e:fc:50:87:e2:da: 32:83:ec:29:58:63:36:bd:27:39:64:8b:3c:1a:08:2b:05:ce: ad:41:12:a8:60:f0:12:05:21:2a:88:fd:1b:ff:7b:cd:e0:a3: b6:0e:57:7f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSdHPv74B/1zFXPDkvEuBz9z3ihswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDhDQjdGOEI1NjY2RTA3RTU3Q0JFRkMwMjNDNkY2MDM0 NkYyOUQ3RjAeFw0yNjExMDMxNTUyMzNaFw0yNjExMDQxODMwMzNaMDMxMTAvBgNV BAMTKDI4ODBCRjczRDU0MEJGNEQzRTVFNkU0QjAzNzlGOEI0OTVBRENDREYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAoKJXCqoBSPl2vR4vkFuOQ8a4 IGCh8IME3Xl57NTEFPQ/mNTEJtv6oi0ENV2ASycNdFGVjkHzCzHYyUmnYANN4deM EQS2xlIjysWk4Ah0BZeuYo3cr8b/szze3uzbxo+NqRaiugc7xRwwDkrVKLOMK4Iv zxwpRHENxwUdmVDJpDTyQXL551nPBK64iAceB2Iz6I9jB26qx3E5Ewu1qiYl8pLV wxChc9Um1/zUCjmr63CAIaOKMm4FoXAEmQ+DJOQ8uPrLJddhCqITIk63Syn/LEQA x9NfydRnkE0UwziakMH8ZUZmqJk0RzmNzJdtBCuosrN3mOrZR6Y5CxJ6dJDVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKIC/c9VAv00+Xm5LA3n4tJWtzN8wHwYDVR0j BBgwFoAU2Mt/i1Zm4H5Xy+/AI8b2A0bynX8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDM2YWIwNGQtNjhjNy00MjQ5LWIxMDktNDZiMjhjZjgwM2YzLzAvRDhDQjdGOEI1 NjY2RTA3RTU3Q0JFRkMwMjNDNkY2MDM0NkYyOUQ3Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EOENCN0Y4QjU2NjZFMDdFNTdDQkVGQzAyM0M2RjYwMzQ2RjI5 RDdGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDM2YWIwNGQtNjhjNy00MjQ5LWIx MDktNDZiMjhjZjgwM2YzLzAvRDhDQjdGOEI1NjY2RTA3RTU3Q0JFRkMwMjNDNkY2 MDM0NkYyOUQ3Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE7pB3IUZVSzr5cuj65xagGNBpOmOtPw54Tc iWTDae5yuacOaGmrmn5PqrIv7xrFtfgZmwTluT286YyXfkmHx9D+DzJ98/OWN5XG JBZ+duT3N7fpsHz4Qhi5KeUSIK5t0DinQGtnQn86mr20MAHSxUZmLntKwms2w5g6 hjAA4EoQfBf7Kg5iv0oIXuQaRAv7mA85ZasS+1JEuxVKSTP6/k7zHHIUix6oBKO3 /HEllLmcc7PexEAce9HvWD5PQkmriIV5Nlod6wdCIMKQl/DbiAmeR378UIfi2jKD 7ClYYza9JzlkizwaCCsFzq1BEqhg8BIFISqI/Rv/e83go7YOV38= -----END CERTIFICATE-----Generated at Wed Nov 4 03:40:00 2026 by rpki-client