$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1ee94014-87fa-4bc2-b1c6-7fd2a89476f3/0/8863D43C2CD36E9DE28C7E55F1891CC25C4F2985.mft File: 8863D43C2CD36E9DE28C7E55F1891CC25C4F2985.mft (raw, json) Hash identifier: PfGcm3ILP2xYbLGZ0AUA5WEycDjD54ihh2ae0Qlt7TQ= Subject key identifier: 32:29:65:AD:7C:7F:6F:92:C8:23:3D:2E:8F:C4:85:64:B3:ED:DF:1A Authority key identifier: 88:63:D4:3C:2C:D3:6E:9D:E2:8C:7E:55:F1:89:1C:C2:5C:4F:29:85 Certificate issuer: /CN=8863D43C2CD36E9DE28C7E55F1891CC25C4F2985 Certificate serial: 4CFB6A467A97761302CB5A61D5AA99F494415DFB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8863D43C2CD36E9DE28C7E55F1891CC25C4F2985.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1ee94014-87fa-4bc2-b1c6-7fd2a89476f3/0/8863D43C2CD36E9DE28C7E55F1891CC25C4F2985.mft Manifest number: EE Signing time: Sun 25 Oct 2026 12:06:38 +0000 Manifest this update: Sun 25 Oct 2026 12:01:38 +0000 Manifest next update: Mon 26 Oct 2026 16:03:38 +0000 Files and hashes: 1: 3230322e34372e3138382e302f32332d3234203d3e203435333035.roa (hash: 0+nHSjmEBtHrdpW5swBsy/CGgBdToecJRrJ4YRQ1Ieo=) 2: 3230322e34372e3138382e302f32342d3234203d3e203435333035.roa (hash: YJRCBupflF/I8POF8sMQ3AXgFo1nrT6mZHr4XrUFzvU=) 3: 8863D43C2CD36E9DE28C7E55F1891CC25C4F2985.crl (hash: 080NWrUMGpU8OjLRA6h9WWeWAoeFonYgILEPMo4Wg2E=) 4: 3230322e34372e3138392e302f32342d3234203d3e203435333035.roa (hash: l0DIBrvHKOmdXYA8EMn7r3ept4hzvTyfATy5T2AkXgc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1ee94014-87fa-4bc2-b1c6-7fd2a89476f3/0/8863D43C2CD36E9DE28C7E55F1891CC25C4F2985.crl rsync://rpki-rsync.idnic.net/repo/1ee94014-87fa-4bc2-b1c6-7fd2a89476f3/0/8863D43C2CD36E9DE28C7E55F1891CC25C4F2985.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8863D43C2CD36E9DE28C7E55F1891CC25C4F2985.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 12:34:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:fb:6a:46:7a:97:76:13:02:cb:5a:61:d5:aa:99:f4:94:41:5d:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8863D43C2CD36E9DE28C7E55F1891CC25C4F2985 Validity Not Before: Oct 25 12:01:38 2026 GMT Not After : Oct 26 16:03:38 2026 GMT Subject: CN=322965AD7C7F6F92C8233D2E8FC48564B3EDDF1A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:f3:d7:cf:bf:3a:8e:1c:9a:97:4f:f2:46:aa: fa:f9:48:29:ee:cb:02:e7:f8:f6:3d:ce:34:a0:32: 46:ac:f1:63:c7:e4:f5:34:a5:70:a4:57:1d:f7:a0: 30:3f:24:a1:1a:4c:aa:a9:05:2b:18:45:bc:2d:d6: b8:db:63:09:93:54:03:e7:6b:ac:72:15:d5:1e:a6: f2:a1:fe:fd:61:aa:73:3f:eb:e4:47:37:56:1f:1b: e3:38:14:de:d5:45:f3:d3:fa:22:5b:ee:7f:ed:34: 86:3e:ef:1e:45:3c:2e:2b:14:f3:72:fc:4f:9e:67: fa:9b:3d:2e:94:25:ee:a4:91:e4:2e:eb:33:02:e6: 20:8f:aa:01:9b:33:e0:27:72:7f:4b:6e:68:8e:01: bf:7a:ca:1e:3b:bc:86:7d:f8:04:f2:55:67:83:6c: d5:25:29:07:63:f3:19:bb:19:ab:54:1a:05:9f:7f: 21:4f:6d:67:a6:59:9b:c4:ea:70:9a:51:b3:f4:35: 65:62:2f:69:ad:29:76:ed:33:04:e9:9a:83:58:42: 11:17:a5:fd:ea:a1:20:7b:0c:2c:dc:90:b3:53:09: ca:6a:a2:4a:c9:4f:00:e0:ed:ad:3c:c5:83:ac:86: ae:8f:4a:64:d8:43:29:d2:5a:d1:dc:56:74:9c:4d: f1:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:29:65:AD:7C:7F:6F:92:C8:23:3D:2E:8F:C4:85:64:B3:ED:DF:1A X509v3 Authority Key Identifier: keyid:88:63:D4:3C:2C:D3:6E:9D:E2:8C:7E:55:F1:89:1C:C2:5C:4F:29:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1ee94014-87fa-4bc2-b1c6-7fd2a89476f3/0/8863D43C2CD36E9DE28C7E55F1891CC25C4F2985.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8863D43C2CD36E9DE28C7E55F1891CC25C4F2985.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1ee94014-87fa-4bc2-b1c6-7fd2a89476f3/0/8863D43C2CD36E9DE28C7E55F1891CC25C4F2985.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:a9:6b:e4:a0:7c:f3:a5:4b:b5:83:8e:31:c7:9f:92:ef:0c: 07:dc:b4:22:a1:e4:8a:fe:47:6c:fa:28:ca:3d:aa:f4:0f:f3: 34:af:a9:9a:e2:ec:b9:dc:80:eb:78:d0:7b:62:f3:af:27:83: 9c:92:3d:1c:38:7c:d1:4b:9e:34:d9:95:b9:ca:80:a4:49:60: 30:78:9c:30:fe:eb:ae:15:b9:4c:d6:0e:3f:da:d7:93:d0:ae: eb:19:10:c4:90:44:2b:92:b0:1a:27:1d:ff:04:22:0f:a2:3d: 28:cd:04:7c:63:32:2d:99:2e:72:d4:97:fa:e7:bf:af:d8:ac: d0:ce:94:15:eb:be:96:cf:0f:32:ee:bc:05:f9:a0:f6:14:7e: 9c:08:32:0f:4b:a6:08:a2:0b:a1:9f:ac:df:0d:ce:ca:00:f3: 67:8d:6b:2f:c6:2e:bc:4b:99:29:5c:6a:39:bd:51:0b:6a:c5: 2b:51:ba:e0:5c:5a:9d:d2:52:36:1f:e9:73:83:0a:b6:69:c6: 7b:de:49:06:79:9f:1c:9e:c9:cd:bd:bb:fd:20:d4:b1:18:50: e2:f1:35:65:97:a2:e6:5a:56:81:a9:82:e6:6b:9e:29:d0:e6: 21:2d:58:e4:73:50:b3:3b:6c:d7:bc:17:5c:fc:6e:83:d7:f8: 16:1f:87:ac -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTPtqRnqXdhMCy1ph1aqZ9JRBXfswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODg2M0Q0M0MyQ0QzNkU5REUyOEM3RTU1RjE4OTFDQzI1 QzRGMjk4NTAeFw0yNjEwMjUxMjAxMzhaFw0yNjEwMjYxNjAzMzhaMDMxMTAvBgNV BAMTKDMyMjk2NUFEN0M3RjZGOTJDODIzM0QyRThGQzQ4NTY0QjNFRERGMUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCa89fPvzqOHJqXT/JGqvr5SCnu ywLn+PY9zjSgMkas8WPH5PU0pXCkVx33oDA/JKEaTKqpBSsYRbwt1rjbYwmTVAPn a6xyFdUepvKh/v1hqnM/6+RHN1YfG+M4FN7VRfPT+iJb7n/tNIY+7x5FPC4rFPNy /E+eZ/qbPS6UJe6kkeQu6zMC5iCPqgGbM+Ancn9LbmiOAb96yh47vIZ9+ATyVWeD bNUlKQdj8xm7GatUGgWffyFPbWemWZvE6nCaUbP0NWViL2mtKXbtMwTpmoNYQhEX pf3qoSB7DCzckLNTCcpqokrJTwDg7a08xYOshq6PSmTYQynSWtHcVnScTfHlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMillrXx/b5LIIz0uj8SFZLPt3xowHwYDVR0j BBgwFoAUiGPUPCzTbp3ijH5V8YkcwlxPKYUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWVlOTQwMTQtODdmYS00YmMyLWIxYzYtN2ZkMmE4OTQ3NmYzLzAvODg2M0Q0M0My Q0QzNkU5REUyOEM3RTU1RjE4OTFDQzI1QzRGMjk4NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84ODYzRDQzQzJDRDM2RTlERTI4QzdFNTVGMTg5MUNDMjVDNEYy OTg1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWVlOTQwMTQtODdmYS00YmMyLWIx YzYtN2ZkMmE4OTQ3NmYzLzAvODg2M0Q0M0MyQ0QzNkU5REUyOEM3RTU1RjE4OTFD QzI1QzRGMjk4NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGipa+SgfPOlS7WDjjHHn5LvDAfctCKh5Ir+ R2z6KMo9qvQP8zSvqZri7LncgOt40Hti868ng5ySPRw4fNFLnjTZlbnKgKRJYDB4 nDD+664VuUzWDj/a15PQrusZEMSQRCuSsBonHf8EIg+iPSjNBHxjMi2ZLnLUl/rn v6/YrNDOlBXrvpbPDzLuvAX5oPYUfpwIMg9LpgiiC6GfrN8NzsoA82eNay/GLrxL mSlcajm9UQtqxStRuuBcWp3SUjYf6XODCrZpxnveSQZ5nxyeyc29u/0g1LEYUOLx NWWXouZaVoGpguZrninQ5iEtWORzULM7bNe8F1z8boPX+BYfh6w= -----END CERTIFICATE-----Generated at Sun Oct 25 20:53:27 2026 by rpki-client