$ rpki-client -vvvf rpki-rsync.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/108BD2ED0D3114613C2725256398C38B9DBAD520.mft File: 108BD2ED0D3114613C2725256398C38B9DBAD520.mft (raw, json) Hash identifier: zKBjKx09B+Axb3z1aw2BF3606i84nntzcDZzaVx0BCQ= Subject key identifier: 8B:88:43:3F:E1:6B:A5:38:FC:DB:6F:F8:44:61:80:79:11:9B:48:EF Authority key identifier: 10:8B:D2:ED:0D:31:14:61:3C:27:25:25:63:98:C3:8B:9D:BA:D5:20 Certificate issuer: /CN=108BD2ED0D3114613C2725256398C38B9DBAD520 Certificate serial: 427E5E6BE8E290B3EB4D4542C29B73E8BB0EAF6F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/108BD2ED0D3114613C2725256398C38B9DBAD520.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/108BD2ED0D3114613C2725256398C38B9DBAD520.mft Manifest number: EC Signing time: Sun 25 Oct 2026 19:15:54 +0000 Manifest this update: Sun 25 Oct 2026 19:10:54 +0000 Manifest next update: Mon 26 Oct 2026 21:39:54 +0000 Files and hashes: 1: 3131392e31302e3137362e302f32342d3234203d3e203234353330.roa (hash: jhVYi1rtAR5MxAuCXQ51AbZzQNRaKl8p9WMw+ffrY1g=) 2: 3131392e31302e3138312e302f32342d3234203d3e203234353330.roa (hash: ybxkb0B+hs5pt/EvlpkTwH/9ZJ1gNWd/AVaEY/3TjMw=) 3: 3131392e31302e3138332e302f32342d3234203d3e203234353330.roa (hash: DRkP4Rbo/CCQujXep36UcLsFucXNff21TtbLk7RG9SM=) 4: 3131392e31302e3137362e302f32312d3234203d3e203234353330.roa (hash: CprlVpIAhuZZ+TvberfWR+fBEc8FklJHg5e3Yj9s2YM=) 5: 323430313a643934303a3a2f33322d3332203d3e203234353330.roa (hash: GNdi5uU7mmpbww293clFlNy9lTQ5KrlF2tYcTj15jTw=) 6: 3131392e31302e3138302e302f32322d3232203d3e203234353330.roa (hash: QQz19AU/3ag6WIvOpz+6vMYYG0ifu3LuEG3RYnhZW1o=) 7: 3131392e31302e3137372e302f32342d3234203d3e203234353330.roa (hash: HA8oysbBANlVY/UvbExuOyGu423Ies7m420JK3DCo1o=) 8: 3131392e31302e3137382e302f32342d3234203d3e203234353330.roa (hash: GxTOWueUzacQJLW8/Lw/u7dSqU8jy6t+nHDrIvlJlj4=) 9: 3131392e31302e3138302e302f32342d3234203d3e203234353330.roa (hash: 0ou1MA6qNBtVm99WbTegwqF+NpmPqc1Ktrk0OHI11U4=) 10: 3131392e31302e3137382e302f32332d3233203d3e203234353330.roa (hash: PwM3oQKmuXyEeAOnaDonlOle/IcF5DW+Zh/RIO3hM04=) 11: 3131392e31302e3137362e302f32312d3231203d3e203234353330.roa (hash: M2e4yYR/RlmXdndzlSbI4SF0SK1f8bM5s0bETw7ewlU=) 12: 323430313a643934303a653066663a3a2f34382d3438203d3e203234353330.roa (hash: 3AOdmgKzkbZxwPp2bCxMQYnSsnvXDmSvwUIaP+cc8u8=) 13: 3131392e31302e3138302e302f32332d3233203d3e203234353330.roa (hash: J3mFc+blOdqx9rOGug3IYw5ONv5fbpx/wInrtP6ubZ8=) 14: 3131392e31302e3137362e302f32332d3233203d3e203234353330.roa (hash: 0NwKpcPERLvBE69Wt/igLsf2q1CoJnvxAbw3+CiCst8=) 15: 3131392e31302e3138322e302f32332d3233203d3e203234353330.roa (hash: P1NOd8bnXDoe1Us3SAeiUo7ByuV/RRZY5l/EMzT/C1k=) 16: 3131392e31302e3137362e302f32322d3232203d3e203234353330.roa (hash: lhKQdAX20mlvRL5BGbA0faxy+2IyoM1d90NTGWc0wAA=) 17: 108BD2ED0D3114613C2725256398C38B9DBAD520.crl (hash: WydWsR/lEmVTV+UkaMmhtG1EQQBCb2OofXo8vFtAt1E=) 18: 3131392e31302e3138322e302f32342d3234203d3e203234353330.roa (hash: QDeYOiv+3vHs+MEBjUuMwoTIYLRTIqwHuQD6t1530Iw=) 19: 3131392e31302e3137392e302f32342d3234203d3e203234353330.roa (hash: 4xOrTa7LOQthmjAbRy6Dje8YDXSs3QUpwJ2MSJFD6BE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/108BD2ED0D3114613C2725256398C38B9DBAD520.crl rsync://rpki-rsync.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/108BD2ED0D3114613C2725256398C38B9DBAD520.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/108BD2ED0D3114613C2725256398C38B9DBAD520.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 21:39:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:7e:5e:6b:e8:e2:90:b3:eb:4d:45:42:c2:9b:73:e8:bb:0e:af:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=108BD2ED0D3114613C2725256398C38B9DBAD520 Validity Not Before: Oct 25 19:10:54 2026 GMT Not After : Oct 26 21:39:54 2026 GMT Subject: CN=8B88433FE16BA538FCDB6FF844618079119B48EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:9b:54:69:d2:b4:d6:69:72:3b:56:77:67:8c: 68:55:d2:f6:26:aa:d5:96:8f:83:ae:35:11:61:79: 1a:8f:77:4e:6a:51:1c:4c:32:f8:80:77:2d:e7:bc: a7:0f:63:e6:7b:20:71:da:0f:57:ff:37:88:41:bb: d9:30:01:31:bf:79:ee:ec:8d:71:ca:c2:24:cf:41: c6:98:2e:12:76:c1:5a:72:a7:0e:74:15:fa:8c:b1: 10:0a:eb:7b:6e:98:c9:8d:7b:a3:c0:24:9a:ec:13: 85:dc:ef:6c:d9:da:ff:46:be:c3:7d:88:cd:69:4d: f7:56:4c:47:a6:eb:7e:9d:fd:43:3c:49:77:91:d2: 87:03:44:d8:5a:b5:8a:e7:64:3b:1e:03:95:9c:03: 10:7d:74:c0:1a:7f:11:ce:cb:9b:71:f0:2a:37:33: 0a:5e:10:17:1f:07:0c:9e:fb:cb:7d:55:49:33:c7: 6b:2c:7e:b5:b5:12:65:eb:bc:f5:6d:a1:21:43:65: f8:45:66:4b:30:80:8c:a2:a4:7c:0a:9c:39:1b:dd: d3:93:85:a6:a9:10:31:d5:f6:21:33:d3:d5:de:85: 50:91:d0:9a:d3:1b:07:b5:db:0d:8b:ce:81:51:f5: a7:17:40:a3:00:97:94:d6:f2:a3:74:2b:d8:d4:9f: 4f:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:88:43:3F:E1:6B:A5:38:FC:DB:6F:F8:44:61:80:79:11:9B:48:EF X509v3 Authority Key Identifier: keyid:10:8B:D2:ED:0D:31:14:61:3C:27:25:25:63:98:C3:8B:9D:BA:D5:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/108BD2ED0D3114613C2725256398C38B9DBAD520.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/108BD2ED0D3114613C2725256398C38B9DBAD520.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/108BD2ED0D3114613C2725256398C38B9DBAD520.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:d4:fc:b3:78:85:da:8c:7b:32:2f:f2:40:81:50:35:29:13: 5e:9a:4b:45:39:24:e4:02:0e:33:88:4e:70:1f:c6:a6:d5:0c: f4:63:ea:1e:d0:33:7d:f7:41:8e:ec:fb:cd:c5:52:b9:49:0f: c5:c8:f6:96:84:43:5e:2b:dd:1d:4f:b7:e1:8b:db:3d:e2:66: 6c:0a:ac:f5:5f:14:9b:e6:f6:c6:b4:83:7d:ee:f5:79:8b:46: 27:23:34:8b:30:3a:45:6c:21:77:17:81:d4:f3:57:e6:20:47: 87:eb:bb:74:b9:f4:44:09:49:ce:dc:5a:e4:cc:ef:87:9f:ce: f2:74:5e:4c:c4:28:43:8a:46:33:5a:99:c0:45:76:8f:ab:ee: d3:0a:14:16:85:a2:c0:d7:81:19:79:5f:ad:d1:43:f2:d3:8a: 8b:a5:ad:9d:63:a0:3f:c4:ad:04:65:8e:da:aa:58:9d:cd:a6: 28:47:26:d5:3e:18:0d:4e:7c:d3:13:37:51:83:0e:0e:26:4e: 9c:f3:09:d9:60:a0:d1:57:53:70:55:aa:15:3b:86:91:ea:e4: 2f:db:1a:a7:b4:f2:8b:43:2a:c6:d9:51:bd:7c:d9:d7:3f:2e: 8d:48:15:4b:1f:3f:f9:01:d3:af:2b:3d:77:97:94:70:4e:fb: d9:1d:b8:46 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQn5ea+jikLPrTUVCwptz6LsOr28wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTA4QkQyRUQwRDMxMTQ2MTNDMjcyNTI1NjM5OEMzOEI5 REJBRDUyMDAeFw0yNjEwMjUxOTEwNTRaFw0yNjEwMjYyMTM5NTRaMDMxMTAvBgNV BAMTKDhCODg0MzNGRTE2QkE1MzhGQ0RCNkZGODQ0NjE4MDc5MTE5QjQ4RUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMm1Rp0rTWaXI7VndnjGhV0vYm qtWWj4OuNRFheRqPd05qURxMMviAdy3nvKcPY+Z7IHHaD1f/N4hBu9kwATG/ee7s jXHKwiTPQcaYLhJ2wVpypw50FfqMsRAK63tumMmNe6PAJJrsE4Xc72zZ2v9GvsN9 iM1pTfdWTEem636d/UM8SXeR0ocDRNhatYrnZDseA5WcAxB9dMAafxHOy5tx8Co3 MwpeEBcfBwye+8t9VUkzx2ssfrW1EmXrvPVtoSFDZfhFZkswgIyipHwKnDkb3dOT haapEDHV9iEz09XehVCR0JrTGwe12w2LzoFR9acXQKMAl5TW8qN0K9jUn08VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUi4hDP+FrpTj822/4RGGAeRGbSO8wHwYDVR0j BBgwFoAUEIvS7Q0xFGE8JyUlY5jDi5261SAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDQyMzQ0YmUtZjlmYi00NjM0LTkyZDYtODk0ZGQ1MzhjYWRmLzAvMTA4QkQyRUQw RDMxMTQ2MTNDMjcyNTI1NjM5OEMzOEI5REJBRDUyMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xMDhCRDJFRDBEMzExNDYxM0MyNzI1MjU2Mzk4QzM4QjlEQkFE NTIwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDQyMzQ0YmUtZjlmYi00NjM0LTky ZDYtODk0ZGQ1MzhjYWRmLzAvMTA4QkQyRUQwRDMxMTQ2MTNDMjcyNTI1NjM5OEMz OEI5REJBRDUyMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAArU/LN4hdqMezIv8kCBUDUpE16aS0U5JOQC DjOITnAfxqbVDPRj6h7QM333QY7s+83FUrlJD8XI9paEQ14r3R1Pt+GL2z3iZmwK rPVfFJvm9sa0g33u9XmLRicjNIswOkVsIXcXgdTzV+YgR4fru3S59EQJSc7cWuTM 74efzvJ0XkzEKEOKRjNamcBFdo+r7tMKFBaFosDXgRl5X63RQ/LTioulrZ1joD/E rQRljtqqWJ3NpihHJtU+GA1OfNMTN1GDDg4mTpzzCdlgoNFXU3BVqhU7hpHq5C/b Gqe08otDKsbZUb182dc/Lo1IFUsfP/kB068rPXeXlHBO+9kduEY= -----END CERTIFICATE-----Generated at Mon Oct 26 11:39:40 2026 by rpki-client