$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/8AE9BB21003E87396CEDD7898B4A50424E8CEC8F.mft File: 8AE9BB21003E87396CEDD7898B4A50424E8CEC8F.mft (raw, json) Hash identifier: /aVhXMRVhHBoB0bVKOqSGJ2vmYNSWW0t9+6zLTzJIS4= Subject key identifier: 3F:9C:34:A8:32:58:B4:9B:EB:A4:19:66:35:14:3A:6C:72:5D:1E:03 Authority key identifier: 8A:E9:BB:21:00:3E:87:39:6C:ED:D7:89:8B:4A:50:42:4E:8C:EC:8F Certificate issuer: /CN=8AE9BB21003E87396CEDD7898B4A50424E8CEC8F Certificate serial: 5565FD1B45F3A406EF1F46D0EDDA52CAFB1FF8AA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8AE9BB21003E87396CEDD7898B4A50424E8CEC8F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/8AE9BB21003E87396CEDD7898B4A50424E8CEC8F.mft Manifest number: F4 Signing time: Sun 01 Nov 2026 06:10:29 +0000 Manifest this update: Sun 01 Nov 2026 06:05:29 +0000 Manifest next update: Mon 02 Nov 2026 07:04:29 +0000 Files and hashes: 1: 3130332e35362e3230372e302f32342d3234203d3e203538343737.roa (hash: FdEj2/miSrHrif/CfoOvLE1OV+PuSrA43YH+LmHuPRM=) 2: 34352e3132372e3133322e302f32342d3234203d3e203538343737.roa (hash: pK3Vu7dEPBnTFAw3IDhWOXFOflNVhPv7/JjAZ1e/ubk=) 3: 3130332e35362e3230342e302f32342d3234203d3e203538343737.roa (hash: ieJoOGDuwtLlA8t0dN5yUaBjAk+rstjVqpks3BBFT2E=) 4: 34352e3132372e3133332e302f32342d3234203d3e203538343737.roa (hash: icfsfhUwquzTy2StQKBYwmmyOmAVCsssAYK5CyA5iDI=) 5: 8AE9BB21003E87396CEDD7898B4A50424E8CEC8F.crl (hash: +0PZoLmC1uyVZh5lfrLHfPy+6xEHRHEcAcJEz/UlijY=) 6: 34352e3132372e3133352e302f32342d3234203d3e20313335333630.roa (hash: 0WsKsDzY8LPfrJ1pgXZgjbVmTWXixBFTK8YpHb3DNxU=) 7: 34352e3132372e3133342e302f32342d3234203d3e203538343737.roa (hash: rkn+DI7lNxqSqCTlwACNzV0qOshNnDXKFLIZsdocYhE=) 8: 3130332e35362e3230362e302f32342d3234203d3e203538343737.roa (hash: CVqG9mh1X9V1ZbC6R/r5UJJ2xSfzA9r4RYW1GFYyElI=) 9: 3130332e35362e3230352e302f32342d3234203d3e203538343737.roa (hash: JuQ4cvsB/3E/np6OBFHLGq+Nt4mQQ/GxzLV4MrmhfZo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/8AE9BB21003E87396CEDD7898B4A50424E8CEC8F.crl rsync://rpki-rsync.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/8AE9BB21003E87396CEDD7898B4A50424E8CEC8F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8AE9BB21003E87396CEDD7898B4A50424E8CEC8F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 07:04:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:65:fd:1b:45:f3:a4:06:ef:1f:46:d0:ed:da:52:ca:fb:1f:f8:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8AE9BB21003E87396CEDD7898B4A50424E8CEC8F Validity Not Before: Nov 1 06:05:29 2026 GMT Not After : Nov 2 07:04:29 2026 GMT Subject: CN=3F9C34A83258B49BEBA4196635143A6C725D1E03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:91:5c:22:1d:ac:64:45:cf:28:fb:4d:18:1e: 89:8e:02:88:35:09:b3:62:91:09:23:c7:89:ab:4f: 6e:26:e4:5b:8b:4a:9a:2f:c8:a0:40:e1:cb:a0:c6: 25:0d:d7:88:dc:1b:2b:3e:30:63:84:f0:33:08:5e: ad:4f:63:5b:f3:6c:23:2c:36:56:49:e2:0c:43:61: b7:58:e7:95:85:01:5f:e6:eb:c7:40:cd:c2:88:5c: 2b:db:5a:3c:14:e8:e2:ce:5d:de:45:ae:a5:28:40: 9a:56:0a:31:89:3e:ed:2a:3f:77:28:73:de:a5:ea: 11:e7:e8:59:96:f6:ed:96:82:8a:03:03:a0:55:ff: bb:2a:fa:fe:13:23:01:0c:7f:0e:8b:bd:66:80:41: 04:74:e4:14:fe:7d:db:44:88:42:22:9c:86:cf:46: 74:32:33:77:e2:41:ae:34:17:b1:0b:14:de:37:c4: b5:f0:1f:db:bd:37:16:cd:a4:10:af:8f:c3:35:53: 5d:de:a5:05:d7:d1:b1:0c:ee:c7:ad:61:41:94:68: bb:7d:a4:bb:95:ae:97:b0:92:f6:e4:b6:a8:02:21: 92:a3:39:1c:e8:5f:ec:94:d1:23:36:65:5e:6e:a6: 1c:7d:aa:d5:9f:55:b3:10:2f:5a:fc:9d:fe:66:4a: dc:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:9C:34:A8:32:58:B4:9B:EB:A4:19:66:35:14:3A:6C:72:5D:1E:03 X509v3 Authority Key Identifier: keyid:8A:E9:BB:21:00:3E:87:39:6C:ED:D7:89:8B:4A:50:42:4E:8C:EC:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/8AE9BB21003E87396CEDD7898B4A50424E8CEC8F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8AE9BB21003E87396CEDD7898B4A50424E8CEC8F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/8AE9BB21003E87396CEDD7898B4A50424E8CEC8F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:59:e2:94:5e:55:b0:e3:e5:68:67:c3:1a:bb:30:44:ab:ab: ea:7b:1c:8e:89:45:23:fa:21:09:f8:14:3f:5c:ce:31:cd:be: 36:0e:88:b0:bf:5a:98:3a:97:96:9a:eb:72:3f:82:8f:b7:e7: 37:80:ee:1a:fe:82:67:e3:d9:80:60:3f:08:6e:3b:b3:09:1e: 6e:e6:a1:6a:c2:32:0e:6d:02:be:7c:1d:10:61:93:72:87:62: 8a:e6:1e:e8:56:66:f4:31:64:7b:1d:ff:3b:64:00:09:0d:6b: fc:20:eb:a9:f0:96:1c:9f:93:b2:fd:e7:9d:69:c5:97:48:bf: 9d:5b:95:9d:a5:dc:bb:6d:d3:7c:09:0a:ee:8d:2e:ac:1f:f7: a6:b2:20:0e:a9:90:cc:a8:3f:a8:ae:f1:58:84:6f:38:e3:62: 3c:33:f3:9b:20:dc:f7:40:ff:8c:44:69:19:de:31:f9:98:65: 0b:59:86:43:db:74:22:90:0d:6c:23:e2:ed:41:3b:dd:df:ff: f1:88:a2:38:b7:e4:46:a7:12:70:c7:75:98:e0:a3:e1:a0:53: cd:b3:8b:f5:8a:0c:0b:8e:a2:5d:21:96:55:2a:d2:a2:6c:50: 47:bc:67:0e:31:47:b3:50:a5:22:0d:78:d8:54:e2:d4:79:91: 08:90:60:5a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVWX9G0XzpAbvH0bQ7dpSyvsf+KowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEFFOUJCMjEwMDNFODczOTZDRURENzg5OEI0QTUwNDI0 RThDRUM4RjAeFw0yNjExMDEwNjA1MjlaFw0yNjExMDIwNzA0MjlaMDMxMTAvBgNV BAMTKDNGOUMzNEE4MzI1OEI0OUJFQkE0MTk2NjM1MTQzQTZDNzI1RDFFMDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCckVwiHaxkRc8o+00YHomOAog1 CbNikQkjx4mrT24m5FuLSpovyKBA4cugxiUN14jcGys+MGOE8DMIXq1PY1vzbCMs NlZJ4gxDYbdY55WFAV/m68dAzcKIXCvbWjwU6OLOXd5FrqUoQJpWCjGJPu0qP3co c96l6hHn6FmW9u2WgooDA6BV/7sq+v4TIwEMfw6LvWaAQQR05BT+fdtEiEIinIbP RnQyM3fiQa40F7ELFN43xLXwH9u9NxbNpBCvj8M1U13epQXX0bEM7setYUGUaLt9 pLuVrpewkvbktqgCIZKjORzoX+yU0SM2ZV5uphx9qtWfVbMQL1r8nf5mStxFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUP5w0qDJYtJvrpBlmNRQ6bHJdHgMwHwYDVR0j BBgwFoAUium7IQA+hzls7deJi0pQQk6M7I8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDNmOGY1NWMtOWUzNS00Y2UyLTg5MGYtMGRlM2UyNDA0NjExLzAvOEFFOUJCMjEw MDNFODczOTZDRURENzg5OEI0QTUwNDI0RThDRUM4Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84QUU5QkIyMTAwM0U4NzM5NkNFREQ3ODk4QjRBNTA0MjRFOENF QzhGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDNmOGY1NWMtOWUzNS00Y2UyLTg5 MGYtMGRlM2UyNDA0NjExLzAvOEFFOUJCMjEwMDNFODczOTZDRURENzg5OEI0QTUw NDI0RThDRUM4Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGxZ4pReVbDj5Whnwxq7MESrq+p7HI6JRSP6 IQn4FD9czjHNvjYOiLC/Wpg6l5aa63I/go+35zeA7hr+gmfj2YBgPwhuO7MJHm7m oWrCMg5tAr58HRBhk3KHYormHuhWZvQxZHsd/ztkAAkNa/wg66nwlhyfk7L9551p xZdIv51blZ2l3Ltt03wJCu6NLqwf96ayIA6pkMyoP6iu8ViEbzjjYjwz85sg3PdA /4xEaRneMfmYZQtZhkPbdCKQDWwj4u1BO93f//GIoji35EanEnDHdZjgo+GgU82z i/WKDAuOol0hllUq0qJsUEe8Zw4xR7NQpSINeNhU4tR5kQiQYFo= -----END CERTIFICATE-----Generated at Sun Nov 1 21:12:06 2026 by rpki-client