$ rpki-client -vvvf rpki-rsync.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/8644EF5CAFD6FF2C753833B588D6D5E40AD9C077.mft File: 8644EF5CAFD6FF2C753833B588D6D5E40AD9C077.mft (raw, json) Hash identifier: 1ZXT4kvEdk4Rl7JULDosZmgCeiUBsgMno+oQujgWiYg= Subject key identifier: 6D:BF:EA:D3:93:84:CE:C1:9F:BE:10:BB:F5:18:AA:B8:B1:C0:8E:8B Authority key identifier: 86:44:EF:5C:AF:D6:FF:2C:75:38:33:B5:88:D6:D5:E4:0A:D9:C0:77 Certificate issuer: /CN=8644EF5CAFD6FF2C753833B588D6D5E40AD9C077 Certificate serial: 4BB9397A9CFBE57C29424BD0D03B574AA4E9BABA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8644EF5CAFD6FF2C753833B588D6D5E40AD9C077.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/8644EF5CAFD6FF2C753833B588D6D5E40AD9C077.mft Manifest number: ED Signing time: Sun 25 Oct 2026 21:48:57 +0000 Manifest this update: Sun 25 Oct 2026 21:43:57 +0000 Manifest next update: Mon 26 Oct 2026 23:43:57 +0000 Files and hashes: 1: 8644EF5CAFD6FF2C753833B588D6D5E40AD9C077.crl (hash: 7XcUCQgtHYe9kN+J7YvBk9E0jb8Hy2c9QMARNhXeWL0=) 2: 3130332e3134302e3138392e302f32342d3234203d3e20313338383831.roa (hash: buNf/KMT3H26jyT7kcH4G4XIVCs19dscJeFhejymKUs=) 3: 3130332e3134302e3138382e302f32342d3234203d3e20313338383831.roa (hash: V+R7emBXYGxGYC8TKAJDN/rKFNkkzGGzXMecTJssl6Q=) 4: 3130332e3134302e3138382e302f32332d3234203d3e20313338383831.roa (hash: AiKeHz2pWrwnk84HIHiggHrF6Y+TQyS0iMZkjpVVcMY=) 5: 323430353a63303a3a2f33322d3438203d3e20313338383831.roa (hash: A51y95Y2VvHOxleNisrOn7Mw2CXWlCwKbBD4RKfiRXo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/8644EF5CAFD6FF2C753833B588D6D5E40AD9C077.crl rsync://rpki-rsync.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/8644EF5CAFD6FF2C753833B588D6D5E40AD9C077.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8644EF5CAFD6FF2C753833B588D6D5E40AD9C077.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 23:43:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:b9:39:7a:9c:fb:e5:7c:29:42:4b:d0:d0:3b:57:4a:a4:e9:ba:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8644EF5CAFD6FF2C753833B588D6D5E40AD9C077 Validity Not Before: Oct 25 21:43:57 2026 GMT Not After : Oct 26 23:43:57 2026 GMT Subject: CN=6DBFEAD39384CEC19FBE10BBF518AAB8B1C08E8B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:c6:d0:ea:e8:a5:5f:d9:f3:16:13:c5:fc:be: 36:3f:b9:78:7d:e4:1f:ab:4d:a2:79:4c:ef:22:6e: 5a:86:03:fc:8c:1b:10:82:d2:c0:af:94:91:c5:c6: fe:c1:bc:4a:e3:6b:83:d1:16:43:af:59:f4:b1:ca: ac:49:40:fa:f3:09:50:eb:0f:9b:c9:18:a0:7e:f1: 45:d7:6e:29:14:81:95:02:96:22:2e:a7:7e:db:25: 9a:d1:28:3f:90:7f:ff:3e:f4:bb:10:75:41:ec:8c: 38:55:08:97:6c:22:a3:3d:25:cf:0a:71:71:a3:4d: 65:f5:43:88:1e:57:1c:64:ca:9a:64:d5:04:4a:ca: 24:0a:40:ca:71:de:3c:b9:b9:ef:ff:9c:16:92:d8: 9d:54:79:53:21:79:09:6b:21:8b:74:15:5e:cc:d9: 70:f7:fc:42:a8:8d:ca:23:e9:ca:3b:75:93:cb:b3: de:94:41:80:6c:83:84:90:0d:3a:31:cc:c4:f5:be: 9f:7d:24:ab:e8:e2:0f:ce:72:5e:86:cd:9d:32:7e: 18:fd:fc:0d:95:06:e7:3f:52:ae:7e:5c:6a:5f:32: 78:fd:f0:ce:39:d7:db:f3:78:15:b6:83:cf:97:66: bc:0e:78:ec:bb:71:58:3f:b3:d9:c7:6c:94:ef:30: 18:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:BF:EA:D3:93:84:CE:C1:9F:BE:10:BB:F5:18:AA:B8:B1:C0:8E:8B X509v3 Authority Key Identifier: keyid:86:44:EF:5C:AF:D6:FF:2C:75:38:33:B5:88:D6:D5:E4:0A:D9:C0:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/8644EF5CAFD6FF2C753833B588D6D5E40AD9C077.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8644EF5CAFD6FF2C753833B588D6D5E40AD9C077.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/8644EF5CAFD6FF2C753833B588D6D5E40AD9C077.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:ba:a7:bb:3b:05:41:2d:92:58:4a:ab:d1:e9:44:ca:62:59: c2:bb:ec:2f:76:c5:83:cb:1b:d8:45:84:cb:91:84:e3:bc:ce: 73:d0:ec:be:d1:88:a1:42:cc:45:c3:85:20:43:b6:09:4b:e5: 02:7b:c4:be:a9:0d:fe:96:75:fe:c4:7c:b9:02:ac:c6:80:9f: 32:07:b5:65:a8:db:d1:07:ae:40:61:26:06:ce:fd:5f:8a:56: 54:01:40:0b:3f:dc:f7:fa:48:84:5b:28:c3:74:8b:62:cd:96: 1c:57:60:f5:a7:21:ce:f2:32:ce:85:49:e7:c2:6a:3c:7d:a1: c8:9a:7c:42:77:52:32:c8:fe:8d:50:7d:d3:2f:6e:90:cb:4c: 2b:49:e2:5c:c9:a4:ae:0a:c5:aa:d2:a3:53:19:08:f9:0e:f0: 0e:69:ab:62:1a:9f:ab:46:7f:47:31:1f:5a:59:0d:e0:2e:3c: a2:66:6b:df:13:3a:a5:f3:b4:ee:81:6a:37:7c:0c:b0:6d:db: 3d:bc:14:27:f0:88:e4:7f:ad:42:a5:21:44:c9:26:d9:7b:98: 76:7b:e0:89:22:67:04:bd:3f:58:92:13:a9:97:81:8c:8f:c6: 0e:01:bf:26:41:7d:b9:24:5b:4c:22:33:ed:68:db:1e:51:9b: 80:46:37:10 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS7k5epz75XwpQkvQ0DtXSqTpurowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODY0NEVGNUNBRkQ2RkYyQzc1MzgzM0I1ODhENkQ1RTQw QUQ5QzA3NzAeFw0yNjEwMjUyMTQzNTdaFw0yNjEwMjYyMzQzNTdaMDMxMTAvBgNV BAMTKDZEQkZFQUQzOTM4NENFQzE5RkJFMTBCQkY1MThBQUI4QjFDMDhFOEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgxtDq6KVf2fMWE8X8vjY/uXh9 5B+rTaJ5TO8iblqGA/yMGxCC0sCvlJHFxv7BvErja4PRFkOvWfSxyqxJQPrzCVDr D5vJGKB+8UXXbikUgZUCliIup37bJZrRKD+Qf/8+9LsQdUHsjDhVCJdsIqM9Jc8K cXGjTWX1Q4geVxxkyppk1QRKyiQKQMpx3jy5ue//nBaS2J1UeVMheQlrIYt0FV7M 2XD3/EKojcoj6co7dZPLs96UQYBsg4SQDToxzMT1vp99JKvo4g/Ocl6GzZ0yfhj9 /A2VBuc/Uq5+XGpfMnj98M4519vzeBW2g8+XZrwOeOy7cVg/s9nHbJTvMBgrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbb/q05OEzsGfvhC79RiquLHAjoswHwYDVR0j BBgwFoAUhkTvXK/W/yx1ODO1iNbV5ArZwHcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDJjYjBiM2EtNjkyZC00NDJlLTkzMDgtOTAzYzAyZDU3MThmLzAvODY0NEVGNUNB RkQ2RkYyQzc1MzgzM0I1ODhENkQ1RTQwQUQ5QzA3Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NjQ0RUY1Q0FGRDZGRjJDNzUzODMzQjU4OEQ2RDVFNDBBRDlD MDc3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDJjYjBiM2EtNjkyZC00NDJlLTkz MDgtOTAzYzAyZDU3MThmLzAvODY0NEVGNUNBRkQ2RkYyQzc1MzgzM0I1ODhENkQ1 RTQwQUQ5QzA3Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHq6p7s7BUEtklhKq9HpRMpiWcK77C92xYPL G9hFhMuRhOO8znPQ7L7RiKFCzEXDhSBDtglL5QJ7xL6pDf6Wdf7EfLkCrMaAnzIH tWWo29EHrkBhJgbO/V+KVlQBQAs/3Pf6SIRbKMN0i2LNlhxXYPWnIc7yMs6FSefC ajx9ociafEJ3UjLI/o1QfdMvbpDLTCtJ4lzJpK4KxarSo1MZCPkO8A5pq2Ian6tG f0cxH1pZDeAuPKJma98TOqXztO6Bajd8DLBt2z28FCfwiOR/rUKlIUTJJtl7mHZ7 4IkiZwS9P1iSE6mXgYyPxg4BvyZBfbkkW0wiM+1o2x5Rm4BGNxA= -----END CERTIFICATE-----Generated at Mon Oct 26 08:59:17 2026 by rpki-client