$ rpki-client -vvvf rpki-rsync.idnic.net/repo/03908782-4520-45b4-99ed-193e51df51c3/0/8EA8EC991253F0665F4149D5FE42C3F8CF2255D8.mft File: 8EA8EC991253F0665F4149D5FE42C3F8CF2255D8.mft (raw, json) Hash identifier: RHBZK2PsGtv8Uk1SGYSoD7gRLFQM3NzmPLuz9YqWs7U= Subject key identifier: A8:33:82:B5:0D:F3:53:22:E0:F4:DD:2B:E3:13:68:B5:8F:5B:49:B3 Authority key identifier: 8E:A8:EC:99:12:53:F0:66:5F:41:49:D5:FE:42:C3:F8:CF:22:55:D8 Certificate issuer: /CN=8EA8EC991253F0665F4149D5FE42C3F8CF2255D8 Certificate serial: 7DBDD35091B2F65AF41A6A9E7F5F6B6204D5EB42 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8EA8EC991253F0665F4149D5FE42C3F8CF2255D8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/03908782-4520-45b4-99ed-193e51df51c3/0/8EA8EC991253F0665F4149D5FE42C3F8CF2255D8.mft Manifest number: E9 Signing time: Sat 24 Oct 2026 10:27:00 +0000 Manifest this update: Sat 24 Oct 2026 10:22:00 +0000 Manifest next update: Sun 25 Oct 2026 11:39:00 +0000 Files and hashes: 1: 3130332e3138302e3136342e302f32342d3234203d3e20313338313331.roa (hash: kq6A8cL9NTZnFPc2HUzKmlVXrKIf6u5lrw0WIGV14uo=) 2: 8EA8EC991253F0665F4149D5FE42C3F8CF2255D8.crl (hash: UzqYnH+wnkCHyotLN8SulG/mUTNBbFBnXAeg9vxdlJU=) 3: 3130332e3138302e3136342e302f32332d3233203d3e20313338313331.roa (hash: lli6DgdKqwmEkLtB+BG1rU9nYBqGkyyXfGUHRRk2kyY=) 4: 3130332e3138302e3136352e302f32342d3234203d3e20313338313331.roa (hash: YXjtjwoesJUSGw40nC73us7OdL7eSn74JJVfMRae8cI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/03908782-4520-45b4-99ed-193e51df51c3/0/8EA8EC991253F0665F4149D5FE42C3F8CF2255D8.crl rsync://rpki-rsync.idnic.net/repo/03908782-4520-45b4-99ed-193e51df51c3/0/8EA8EC991253F0665F4149D5FE42C3F8CF2255D8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8EA8EC991253F0665F4149D5FE42C3F8CF2255D8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 11:39:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:bd:d3:50:91:b2:f6:5a:f4:1a:6a:9e:7f:5f:6b:62:04:d5:eb:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8EA8EC991253F0665F4149D5FE42C3F8CF2255D8 Validity Not Before: Oct 24 10:22:00 2026 GMT Not After : Oct 25 11:39:00 2026 GMT Subject: CN=A83382B50DF35322E0F4DD2BE31368B58F5B49B3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:15:26:7b:d6:b9:bd:84:f7:6e:dc:9e:61:d9: a0:05:5d:2a:ee:ee:72:e0:b7:02:40:a8:74:72:36: fb:6a:a9:f7:69:12:e5:be:fa:9f:c5:47:a5:bc:4d: 20:14:17:34:d5:4c:28:e0:15:38:16:8e:12:03:26: 29:86:68:8e:84:1d:8c:16:a8:db:07:8a:76:3c:d3: 19:4f:b3:a1:6c:33:b3:df:57:61:56:f4:97:a8:ec: bc:d7:5a:2b:9e:5a:3f:e9:33:51:9e:a1:30:87:32: f5:a4:74:e9:5c:e3:74:e8:f4:68:79:71:e2:c6:f7: 73:30:d1:97:97:04:fc:02:39:00:b7:7d:0d:ab:c9: 17:cf:55:f2:bd:0d:9c:77:f7:8a:f8:9d:d3:60:b0: 19:78:70:04:e4:ca:da:8e:41:6d:a7:11:bc:7a:55: fd:6f:f6:28:82:5b:81:02:70:3e:15:13:a1:94:3c: e5:47:54:d9:26:fd:68:d6:a1:fe:b9:7b:cb:14:c2: 51:68:e5:4f:94:c8:27:ff:ce:ed:fd:c9:04:3a:11: 6a:6e:87:0b:b3:5d:5f:50:5e:c6:5b:87:f1:08:1f: dc:7a:c7:c3:89:4e:1c:43:6f:37:e1:df:d9:d5:af: 01:c4:31:da:4a:6b:57:a0:3f:7d:4d:bd:50:43:4d: 2e:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:33:82:B5:0D:F3:53:22:E0:F4:DD:2B:E3:13:68:B5:8F:5B:49:B3 X509v3 Authority Key Identifier: keyid:8E:A8:EC:99:12:53:F0:66:5F:41:49:D5:FE:42:C3:F8:CF:22:55:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/03908782-4520-45b4-99ed-193e51df51c3/0/8EA8EC991253F0665F4149D5FE42C3F8CF2255D8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8EA8EC991253F0665F4149D5FE42C3F8CF2255D8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/03908782-4520-45b4-99ed-193e51df51c3/0/8EA8EC991253F0665F4149D5FE42C3F8CF2255D8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:81:78:0a:4e:e6:73:23:49:ca:d8:f2:65:4e:ae:67:25:08: 17:40:52:36:a1:0b:54:a0:54:0d:9e:11:9c:17:8f:73:85:81: ea:3a:19:8f:25:dd:0b:a9:14:8f:d8:9c:55:6f:01:8d:61:26: f0:55:ab:a2:25:37:93:a7:a4:20:b2:a6:8a:55:b6:fe:fe:0c: dc:bf:2e:7a:b7:02:62:ba:d3:c1:df:80:86:07:bd:f1:c2:33: 9c:53:5e:c8:2e:e2:35:fe:2b:c4:cd:d7:86:eb:47:a4:84:75: ff:00:be:1f:ca:fd:49:51:f9:fd:4e:49:20:48:bc:37:37:6d: ad:ac:af:04:24:1f:ae:4d:94:e7:34:94:9c:8f:cd:5c:f0:eb: 96:96:5d:a4:94:e1:3d:c4:f0:24:55:0c:5e:c6:12:9e:5c:43: 65:d6:b6:4f:e9:7a:07:1f:bc:52:4e:a5:51:de:5d:0f:a7:ac: 5d:e0:d4:89:1e:fe:55:3d:0b:05:7e:26:78:18:e8:c3:af:b2: d5:ed:ed:d1:69:5d:61:00:5c:1c:31:eb:f2:95:e2:60:3e:0b: f0:a8:1a:32:3a:ab:38:61:3d:54:4b:0e:26:88:d6:b4:a7:e6: e9:72:b3:bf:7c:d2:da:c2:2e:20:ea:6b:f5:ab:ef:a0:f8:53: 5e:29:ed:c6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfb3TUJGy9lr0Gmqef19rYgTV60IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEVBOEVDOTkxMjUzRjA2NjVGNDE0OUQ1RkU0MkMzRjhD RjIyNTVEODAeFw0yNjEwMjQxMDIyMDBaFw0yNjEwMjUxMTM5MDBaMDMxMTAvBgNV BAMTKEE4MzM4MkI1MERGMzUzMjJFMEY0REQyQkUzMTM2OEI1OEY1QjQ5QjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCFSZ71rm9hPdu3J5h2aAFXSru 7nLgtwJAqHRyNvtqqfdpEuW++p/FR6W8TSAUFzTVTCjgFTgWjhIDJimGaI6EHYwW qNsHinY80xlPs6FsM7PfV2FW9Jeo7LzXWiueWj/pM1GeoTCHMvWkdOlc43To9Gh5 ceLG93Mw0ZeXBPwCOQC3fQ2ryRfPVfK9DZx394r4ndNgsBl4cATkytqOQW2nEbx6 Vf1v9iiCW4ECcD4VE6GUPOVHVNkm/WjWof65e8sUwlFo5U+UyCf/zu39yQQ6EWpu hwuzXV9QXsZbh/EIH9x6x8OJThxDbzfh39nVrwHEMdpKa1egP31NvVBDTS7vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqDOCtQ3zUyLg9N0r4xNotY9bSbMwHwYDVR0j BBgwFoAUjqjsmRJT8GZfQUnV/kLD+M8iVdgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDM5MDg3ODItNDUyMC00NWI0LTk5ZWQtMTkzZTUxZGY1MWMzLzAvOEVBOEVDOTkx MjUzRjA2NjVGNDE0OUQ1RkU0MkMzRjhDRjIyNTVEOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84RUE4RUM5OTEyNTNGMDY2NUY0MTQ5RDVGRTQyQzNGOENGMjI1 NUQ4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDM5MDg3ODItNDUyMC00NWI0LTk5 ZWQtMTkzZTUxZGY1MWMzLzAvOEVBOEVDOTkxMjUzRjA2NjVGNDE0OUQ1RkU0MkMz RjhDRjIyNTVEOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFuBeApO5nMjScrY8mVOrmclCBdAUjahC1Sg VA2eEZwXj3OFgeo6GY8l3QupFI/YnFVvAY1hJvBVq6IlN5OnpCCypopVtv7+DNy/ Lnq3AmK608HfgIYHvfHCM5xTXsgu4jX+K8TN14brR6SEdf8Avh/K/UlR+f1OSSBI vDc3ba2srwQkH65NlOc0lJyPzVzw65aWXaSU4T3E8CRVDF7GEp5cQ2XWtk/pegcf vFJOpVHeXQ+nrF3g1Ike/lU9CwV+JngY6MOvstXt7dFpXWEAXBwx6/KV4mA+C/Co GjI6qzhhPVRLDiaI1rSn5ulys7980trCLiDqa/Wr76D4U14p7cY= -----END CERTIFICATE-----Generated at Sat Oct 24 20:47:43 2026 by rpki-client