$ rpki-client -vvvf rpki-rsync.idnic.net/repo/07680d0d-e240-4aaf-bc23-282359373289/0/A8B7FD04F9C2A7D6EF8E532792F9C803D12FA1AA.mft File: A8B7FD04F9C2A7D6EF8E532792F9C803D12FA1AA.mft (raw, json) Hash identifier: VR97gUD0hESfteDahVOrxN1WpMtZQEmUMKB0cqB6Y3w= Subject key identifier: 23:1D:4C:1A:F6:75:8F:F3:54:13:AA:ED:F3:26:F5:34:CC:18:55:5D Authority key identifier: A8:B7:FD:04:F9:C2:A7:D6:EF:8E:53:27:92:F9:C8:03:D1:2F:A1:AA Certificate issuer: /CN=A8B7FD04F9C2A7D6EF8E532792F9C803D12FA1AA Certificate serial: 4BDEEFDC981853B06A15F7A78715F0B3561C6F39 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A8B7FD04F9C2A7D6EF8E532792F9C803D12FA1AA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/07680d0d-e240-4aaf-bc23-282359373289/0/A8B7FD04F9C2A7D6EF8E532792F9C803D12FA1AA.mft Manifest number: EC Signing time: Sun 25 Oct 2026 14:55:16 +0000 Manifest this update: Sun 25 Oct 2026 14:50:16 +0000 Manifest next update: Mon 26 Oct 2026 15:20:16 +0000 Files and hashes: 1: A8B7FD04F9C2A7D6EF8E532792F9C803D12FA1AA.crl (hash: xa1rIeknMGLZvPoXZ4hlP78PkIFV4S0I1es8wORWlwg=) 2: 3130332e3138362e3230342e302f32342d3234203d3e20313439373233.roa (hash: 6SPqfWofEqX1QD5UAEMH2hqU1phhUwtiErMkzEVth0s=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/07680d0d-e240-4aaf-bc23-282359373289/0/A8B7FD04F9C2A7D6EF8E532792F9C803D12FA1AA.crl rsync://rpki-rsync.idnic.net/repo/07680d0d-e240-4aaf-bc23-282359373289/0/A8B7FD04F9C2A7D6EF8E532792F9C803D12FA1AA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A8B7FD04F9C2A7D6EF8E532792F9C803D12FA1AA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 15:20:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:de:ef:dc:98:18:53:b0:6a:15:f7:a7:87:15:f0:b3:56:1c:6f:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A8B7FD04F9C2A7D6EF8E532792F9C803D12FA1AA Validity Not Before: Oct 25 14:50:16 2026 GMT Not After : Oct 26 15:20:16 2026 GMT Subject: CN=231D4C1AF6758FF35413AAEDF326F534CC18555D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:16:53:35:70:a0:00:28:de:6a:36:dc:01:5e: 49:d4:18:26:f5:93:aa:f2:19:06:8a:42:8b:74:50: d0:52:6e:a6:58:f7:80:65:15:6c:21:f7:6b:a6:6a: f1:68:c8:30:a8:8e:94:ec:88:54:d6:88:f8:ef:d0: 14:d5:63:d8:79:ec:fa:82:7e:0d:da:81:5e:3f:e7: c0:b5:54:cd:e1:43:cb:f7:f7:43:b9:68:10:a6:bf: 9b:fe:f7:fe:ad:42:ff:35:75:73:9e:77:b9:2e:56: 9a:20:58:dd:b4:5e:36:0c:e6:da:76:4c:f5:ea:67: 8c:71:27:9b:d4:4b:3a:cd:4d:73:1a:f1:7f:b3:f9: 53:da:e9:03:35:16:7a:f0:ff:41:75:0e:bc:b4:55: 85:7a:34:9d:5e:87:d8:0f:5b:71:bc:31:f2:b1:48: 1d:7e:59:ca:99:b0:88:8f:d7:5a:39:de:f6:bb:8d: 1f:2f:61:79:2e:58:29:dc:89:40:08:92:be:47:ea: b9:91:37:4d:67:28:8c:ce:a9:80:12:70:b8:33:68: d5:08:76:52:07:1f:34:30:a7:52:45:61:22:c3:50: 6f:74:4a:6c:29:5c:80:bd:98:41:82:92:2b:37:19: 48:95:7c:fa:db:45:0c:fb:55:97:c5:18:1d:e4:8c: 6e:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:1D:4C:1A:F6:75:8F:F3:54:13:AA:ED:F3:26:F5:34:CC:18:55:5D X509v3 Authority Key Identifier: keyid:A8:B7:FD:04:F9:C2:A7:D6:EF:8E:53:27:92:F9:C8:03:D1:2F:A1:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/07680d0d-e240-4aaf-bc23-282359373289/0/A8B7FD04F9C2A7D6EF8E532792F9C803D12FA1AA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A8B7FD04F9C2A7D6EF8E532792F9C803D12FA1AA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/07680d0d-e240-4aaf-bc23-282359373289/0/A8B7FD04F9C2A7D6EF8E532792F9C803D12FA1AA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:ae:a8:76:79:d0:c4:2c:65:1c:bd:f7:9c:2f:f8:b5:59:aa: 8a:7a:c6:39:3e:08:47:7d:e5:5d:9f:2d:a1:ee:24:46:88:c7: db:50:21:a5:64:89:a8:d5:09:a2:74:d7:46:78:28:24:13:a4: b3:e9:b6:e8:2f:ca:db:75:51:b6:dc:81:69:1a:c2:44:37:cb: d1:9d:f1:17:b1:99:22:04:e2:40:00:8a:ad:09:d3:89:fb:18: c1:0d:29:00:2d:8c:c0:f1:be:04:0b:26:c1:53:f8:f9:0e:29: 23:dd:97:d8:48:a2:15:b2:e9:25:6e:7e:87:e0:40:9e:fb:cd: f8:8e:c9:63:d6:a8:0c:72:4f:da:ac:ec:69:d8:da:ac:f9:62: 7b:0e:b9:55:3f:d7:30:64:3a:35:56:bb:0f:bc:cc:d7:43:c1: 8d:35:98:cc:cd:9e:44:74:02:cd:cd:b2:56:f2:91:f6:04:9b: 3d:12:9c:fa:1d:80:19:32:ff:92:f5:ae:66:56:0b:2c:8f:61: 46:cf:4e:5c:04:e4:b8:25:9b:db:06:ce:67:90:c3:40:ce:22: 21:7a:1a:27:2a:89:b8:1d:09:7c:ff:3a:20:a3:8e:6e:40:2f: 68:a0:43:e7:98:78:cc:1a:58:4a:c1:f2:bc:64:53:70:d4:29: 25:9b:05:ee -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS97v3JgYU7BqFfenhxXws1YcbzkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQThCN0ZEMDRGOUMyQTdENkVGOEU1MzI3OTJGOUM4MDNE MTJGQTFBQTAeFw0yNjEwMjUxNDUwMTZaFw0yNjEwMjYxNTIwMTZaMDMxMTAvBgNV BAMTKDIzMUQ0QzFBRjY3NThGRjM1NDEzQUFFREYzMjZGNTM0Q0MxODU1NUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKFlM1cKAAKN5qNtwBXknUGCb1 k6ryGQaKQot0UNBSbqZY94BlFWwh92umavFoyDCojpTsiFTWiPjv0BTVY9h57PqC fg3agV4/58C1VM3hQ8v390O5aBCmv5v+9/6tQv81dXOed7kuVpogWN20XjYM5tp2 TPXqZ4xxJ5vUSzrNTXMa8X+z+VPa6QM1Fnrw/0F1Dry0VYV6NJ1eh9gPW3G8MfKx SB1+WcqZsIiP11o53va7jR8vYXkuWCnciUAIkr5H6rmRN01nKIzOqYAScLgzaNUI dlIHHzQwp1JFYSLDUG90SmwpXIC9mEGCkis3GUiVfPrbRQz7VZfFGB3kjG51AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIx1MGvZ1j/NUE6rt8yb1NMwYVV0wHwYDVR0j BBgwFoAUqLf9BPnCp9bvjlMnkvnIA9EvoaowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDc2ODBkMGQtZTI0MC00YWFmLWJjMjMtMjgyMzU5MzczMjg5LzAvQThCN0ZEMDRG OUMyQTdENkVGOEU1MzI3OTJGOUM4MDNEMTJGQTFBQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BOEI3RkQwNEY5QzJBN0Q2RUY4RTUzMjc5MkY5QzgwM0QxMkZB MUFBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDc2ODBkMGQtZTI0MC00YWFmLWJj MjMtMjgyMzU5MzczMjg5LzAvQThCN0ZEMDRGOUMyQTdENkVGOEU1MzI3OTJGOUM4 MDNEMTJGQTFBQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJauqHZ50MQsZRy995wv+LVZqop6xjk+CEd9 5V2fLaHuJEaIx9tQIaVkiajVCaJ010Z4KCQTpLPptugvytt1UbbcgWkawkQ3y9Gd 8RexmSIE4kAAiq0J04n7GMENKQAtjMDxvgQLJsFT+PkOKSPdl9hIohWy6SVufofg QJ77zfiOyWPWqAxyT9qs7GnY2qz5YnsOuVU/1zBkOjVWuw+8zNdDwY01mMzNnkR0 As3NslbykfYEmz0SnPodgBky/5L1rmZWCyyPYUbPTlwE5Lglm9sGzmeQw0DOIiF6 GicqibgdCXz/OiCjjm5AL2igQ+eYeMwaWErB8rxkU3DUKSWbBe4= -----END CERTIFICATE-----Generated at Mon Oct 26 08:57:40 2026 by rpki-client