$ rpki-client -vvvf rpki-rsync.idnic.net/repo/eb74ece6-880c-4cef-add2-77719ebedec9/0/8705B5B7FD97EB20892E8DB5A7F7BD23BE8268CC.mft File: 8705B5B7FD97EB20892E8DB5A7F7BD23BE8268CC.mft (raw, json) Hash identifier: wIBJB9mwzNVwIEOHXpYI11yAS2DOCrc2YDK89qAliO4= Subject key identifier: D0:05:90:2E:4B:2B:18:2B:9E:A3:F2:64:03:3A:0D:63:DC:D3:90:AB Authority key identifier: 87:05:B5:B7:FD:97:EB:20:89:2E:8D:B5:A7:F7:BD:23:BE:82:68:CC Certificate issuer: /CN=8705B5B7FD97EB20892E8DB5A7F7BD23BE8268CC Certificate serial: 0CAED677F8FE49C4D8DAC1AC960A6A719B0BF40D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8705B5B7FD97EB20892E8DB5A7F7BD23BE8268CC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/eb74ece6-880c-4cef-add2-77719ebedec9/0/8705B5B7FD97EB20892E8DB5A7F7BD23BE8268CC.mft Manifest number: F9 Signing time: Wed 04 Nov 2026 16:34:20 +0000 Manifest this update: Wed 04 Nov 2026 16:29:20 +0000 Manifest next update: Thu 05 Nov 2026 20:06:20 +0000 Files and hashes: 1: 8705B5B7FD97EB20892E8DB5A7F7BD23BE8268CC.crl (hash: gSd8TnZwnK6ual9dW8LHbwdNuW/iMJBh9mKhRlauqNc=) 2: 3131352e3138372e32382e302f32332d3234203d3e20313532303334.roa (hash: ILEPt3NLdu2PTg7IxG5hw5UfVvO4+tHzRcaeRjRDOH8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/eb74ece6-880c-4cef-add2-77719ebedec9/0/8705B5B7FD97EB20892E8DB5A7F7BD23BE8268CC.crl rsync://rpki-rsync.idnic.net/repo/eb74ece6-880c-4cef-add2-77719ebedec9/0/8705B5B7FD97EB20892E8DB5A7F7BD23BE8268CC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8705B5B7FD97EB20892E8DB5A7F7BD23BE8268CC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 11:48:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:ae:d6:77:f8:fe:49:c4:d8:da:c1:ac:96:0a:6a:71:9b:0b:f4:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8705B5B7FD97EB20892E8DB5A7F7BD23BE8268CC Validity Not Before: Nov 4 16:29:20 2026 GMT Not After : Nov 5 20:06:20 2026 GMT Subject: CN=D005902E4B2B182B9EA3F264033A0D63DCD390AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:d7:7c:a9:dc:a8:94:1e:b4:4d:66:8e:d3:c8: 0b:c4:44:32:65:d9:f7:36:32:0b:de:1e:e9:b6:29: a1:5e:8b:58:b6:c5:7d:0c:0c:dc:fa:27:0b:8f:c4: be:d4:4b:cd:e6:59:4a:cb:0c:07:57:58:84:35:aa: 45:f5:24:95:78:0b:dc:c2:ef:9e:bb:e6:95:b1:17: fb:4f:98:a9:8b:29:60:e2:8a:7e:6e:d4:64:a6:f8: ca:ee:fb:b4:e9:eb:b3:17:5d:e8:1f:1c:7d:45:46: 59:ca:1d:f7:0c:92:8a:73:21:ec:4c:13:88:ea:b0: df:91:5f:3b:ed:4e:6a:d6:6e:6d:93:b0:3d:cc:5a: 51:17:64:06:71:91:ad:b8:7f:0f:8e:48:d3:3e:bb: fd:1a:5c:07:c5:00:c7:f7:d4:42:98:c5:2d:f5:a2: ce:83:5b:d4:e9:1d:fd:ae:bc:a4:16:cc:2d:ab:38: 68:e6:11:14:33:13:f9:58:c3:ba:79:46:05:80:fe: c9:5f:0e:33:e7:42:ff:bd:52:8b:74:06:72:59:2d: 51:5b:37:c9:00:26:a6:8d:9f:9f:d6:a5:aa:ef:06: a4:b7:66:a5:4b:54:75:d3:ab:52:25:2b:93:20:62: 35:8c:be:32:d8:44:9b:f1:af:de:96:77:4f:d2:1a: c4:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:05:90:2E:4B:2B:18:2B:9E:A3:F2:64:03:3A:0D:63:DC:D3:90:AB X509v3 Authority Key Identifier: keyid:87:05:B5:B7:FD:97:EB:20:89:2E:8D:B5:A7:F7:BD:23:BE:82:68:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/eb74ece6-880c-4cef-add2-77719ebedec9/0/8705B5B7FD97EB20892E8DB5A7F7BD23BE8268CC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8705B5B7FD97EB20892E8DB5A7F7BD23BE8268CC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/eb74ece6-880c-4cef-add2-77719ebedec9/0/8705B5B7FD97EB20892E8DB5A7F7BD23BE8268CC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:1b:40:c5:c8:4d:5a:47:90:91:f4:d3:3e:34:ff:e7:9f:6c: 65:6b:8b:56:bc:3d:66:c6:59:7b:2a:3f:f0:d8:0f:07:14:37: b8:27:e1:b1:01:79:73:f5:38:6d:f4:5d:c1:e0:c5:4d:89:c1: 4f:40:fd:88:29:df:21:17:31:05:35:87:09:05:3d:9d:83:49: 96:aa:10:fa:fb:f6:65:d7:ba:b2:d5:e7:a2:e4:8b:df:6b:86: 26:3b:52:e7:7c:32:5a:47:c4:fc:ac:55:fd:ac:cd:8a:d9:e0: 04:cc:62:fe:e4:b6:22:b7:5f:51:21:20:97:0c:fb:69:6a:11: fd:34:c2:51:28:fd:a6:73:4e:0e:27:b1:15:42:a0:0a:24:23: c7:0b:6d:f1:11:af:09:d8:a9:72:31:e0:05:12:d2:0a:ef:c7: a2:86:8d:48:bd:cb:71:4f:c7:fe:ba:49:ff:88:4d:17:0f:5f: 92:71:25:01:47:d4:45:5f:cc:24:bd:c7:b5:da:a6:ea:ea:19: db:26:7a:e9:2b:38:8b:b0:83:4d:fc:2b:8b:ed:7d:b7:4b:9d: 22:d3:09:74:0f:5a:a5:a3:3a:3c:2e:a7:5e:8a:74:f0:2f:f0: ed:f2:d3:27:4f:3c:a4:e4:c4:f2:0c:a4:63:89:29:65:71:bf: 05:d8:7e:17 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDK7Wd/j+ScTY2sGslgpqcZsL9A0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODcwNUI1QjdGRDk3RUIyMDg5MkU4REI1QTdGN0JEMjNC RTgyNjhDQzAeFw0yNjExMDQxNjI5MjBaFw0yNjExMDUyMDA2MjBaMDMxMTAvBgNV BAMTKEQwMDU5MDJFNEIyQjE4MkI5RUEzRjI2NDAzM0EwRDYzRENEMzkwQUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI13yp3KiUHrRNZo7TyAvERDJl 2fc2MgveHum2KaFei1i2xX0MDNz6JwuPxL7US83mWUrLDAdXWIQ1qkX1JJV4C9zC 75675pWxF/tPmKmLKWDiin5u1GSm+Mru+7Tp67MXXegfHH1FRlnKHfcMkopzIexM E4jqsN+RXzvtTmrWbm2TsD3MWlEXZAZxka24fw+OSNM+u/0aXAfFAMf31EKYxS31 os6DW9TpHf2uvKQWzC2rOGjmERQzE/lYw7p5RgWA/slfDjPnQv+9Uot0BnJZLVFb N8kAJqaNn5/WparvBqS3ZqVLVHXTq1IlK5MgYjWMvjLYRJvxr96Wd0/SGsRFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0AWQLksrGCueo/JkAzoNY9zTkKswHwYDVR0j BBgwFoAUhwW1t/2X6yCJLo21p/e9I76CaMwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWI3NGVjZTYtODgwYy00Y2VmLWFkZDItNzc3MTllYmVkZWM5LzAvODcwNUI1QjdG RDk3RUIyMDg5MkU4REI1QTdGN0JEMjNCRTgyNjhDQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NzA1QjVCN0ZEOTdFQjIwODkyRThEQjVBN0Y3QkQyM0JFODI2 OENDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWI3NGVjZTYtODgwYy00Y2VmLWFk ZDItNzc3MTllYmVkZWM5LzAvODcwNUI1QjdGRDk3RUIyMDg5MkU4REI1QTdGN0JE MjNCRTgyNjhDQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIYbQMXITVpHkJH00z40/+efbGVri1a8PWbG WXsqP/DYDwcUN7gn4bEBeXP1OG30XcHgxU2JwU9A/Ygp3yEXMQU1hwkFPZ2DSZaq EPr79mXXurLV56Lki99rhiY7Uud8MlpHxPysVf2szYrZ4ATMYv7ktiK3X1EhIJcM +2lqEf00wlEo/aZzTg4nsRVCoAokI8cLbfERrwnYqXIx4AUS0grvx6KGjUi9y3FP x/66Sf+ITRcPX5JxJQFH1EVfzCS9x7XapurqGdsmeukrOIuwg038K4vtfbdLnSLT CXQPWqWjOjwup16KdPAv8O3y0ydPPKTkxPIMpGOJKWVxvwXYfhc= -----END CERTIFICATE-----Generated at Wed Nov 4 18:51:25 2026 by rpki-client