$ rpki-client -vvvf rpki-rsync.idnic.net/repo/272907d3-be24-4da8-96bb-f1228fc99205/0/8E131245E38E845BE2A218F9928EAD530FFFFEAC.mft File: 8E131245E38E845BE2A218F9928EAD530FFFFEAC.mft (raw, json) Hash identifier: G91HgvLa5HMi55fI/NWODWO68mC3fc0EbDE5B+TUkUY= Subject key identifier: B4:FE:72:70:A5:AC:33:9D:43:4C:C2:12:3E:6E:E3:44:21:E1:BA:72 Authority key identifier: 8E:13:12:45:E3:8E:84:5B:E2:A2:18:F9:92:8E:AD:53:0F:FF:FE:AC Certificate issuer: /CN=8E131245E38E845BE2A218F9928EAD530FFFFEAC Certificate serial: 2D83D2E2398D71D9E769A11734BFF5ABA0E3F358 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8E131245E38E845BE2A218F9928EAD530FFFFEAC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/272907d3-be24-4da8-96bb-f1228fc99205/0/8E131245E38E845BE2A218F9928EAD530FFFFEAC.mft Manifest number: EC Signing time: Sun 25 Oct 2026 22:19:32 +0000 Manifest this update: Sun 25 Oct 2026 22:14:32 +0000 Manifest next update: Tue 27 Oct 2026 00:13:32 +0000 Files and hashes: 1: 8E131245E38E845BE2A218F9928EAD530FFFFEAC.crl (hash: 4Hn4Bdz0Em6VOMMXKOFeS2hfrEteR9JPJ6hzrUT4E7I=) 2: 3130332e3134372e37342e302f32332d3234203d3e203137373639.roa (hash: fGKw2WFahFPpQMw21POO2xmihiDm+uI9kc4e8STtyBE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/272907d3-be24-4da8-96bb-f1228fc99205/0/8E131245E38E845BE2A218F9928EAD530FFFFEAC.crl rsync://rpki-rsync.idnic.net/repo/272907d3-be24-4da8-96bb-f1228fc99205/0/8E131245E38E845BE2A218F9928EAD530FFFFEAC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8E131245E38E845BE2A218F9928EAD530FFFFEAC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Oct 2026 00:13:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:83:d2:e2:39:8d:71:d9:e7:69:a1:17:34:bf:f5:ab:a0:e3:f3:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E131245E38E845BE2A218F9928EAD530FFFFEAC Validity Not Before: Oct 25 22:14:32 2026 GMT Not After : Oct 27 00:13:32 2026 GMT Subject: CN=B4FE7270A5AC339D434CC2123E6EE34421E1BA72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:e2:a1:82:61:79:87:12:bb:c3:a1:bc:83:c6: bf:4a:20:4e:ee:de:34:b1:74:65:2d:19:5f:21:4f: e0:4e:2e:5f:87:d7:29:ff:d0:9e:60:5b:a8:8c:ad: d4:1d:c6:8b:7a:e2:31:f7:93:88:bb:4a:b6:07:bf: 0f:3b:06:93:89:41:d3:ad:a2:43:03:33:f2:74:39: dd:6a:3a:44:e7:96:8e:fc:58:9a:5c:a0:50:fb:a5: f1:44:1f:a5:aa:78:0f:f0:cc:d2:e8:1b:05:ba:65: 76:19:b3:4f:bd:45:bf:9f:82:74:22:58:60:54:7a: cc:81:9c:ad:dc:7b:b9:d3:6c:2d:3a:af:6a:92:39: 5a:51:06:be:59:c5:62:fe:4b:94:10:61:6e:b9:b3: 0f:d7:bf:f0:9a:30:5b:8e:72:9f:9e:bc:c3:b4:a2: 22:7c:6d:8e:4c:d7:e4:32:78:a6:4f:64:fc:e5:89: 52:d3:9d:94:a0:15:c5:db:f6:2c:94:60:8b:10:af: b5:56:ef:80:09:d9:7c:2b:68:ce:0e:5e:52:d8:d6: 10:fc:e1:a9:98:9e:a8:da:d6:70:0b:27:0a:62:33: 43:1c:c0:22:e3:44:a1:a1:05:18:e0:d3:dc:5a:98: 9b:fe:61:a4:70:73:03:7b:28:a5:92:c1:30:cb:01: fc:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:FE:72:70:A5:AC:33:9D:43:4C:C2:12:3E:6E:E3:44:21:E1:BA:72 X509v3 Authority Key Identifier: keyid:8E:13:12:45:E3:8E:84:5B:E2:A2:18:F9:92:8E:AD:53:0F:FF:FE:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/272907d3-be24-4da8-96bb-f1228fc99205/0/8E131245E38E845BE2A218F9928EAD530FFFFEAC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8E131245E38E845BE2A218F9928EAD530FFFFEAC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/272907d3-be24-4da8-96bb-f1228fc99205/0/8E131245E38E845BE2A218F9928EAD530FFFFEAC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:59:df:00:3c:f6:1b:57:9e:b3:5a:f9:6b:c7:11:13:1a:a8: e0:12:97:6f:ee:b4:45:bf:8f:9c:07:b2:9e:73:0d:4a:40:38: f4:2f:ff:7a:d8:d5:23:d2:95:be:3b:12:d0:6a:72:db:21:a2: 85:f8:16:18:35:16:15:83:43:59:7b:a5:ad:fb:34:a2:74:e4: 42:b9:e2:af:a3:ff:43:24:01:c5:85:a3:8a:e5:31:92:bb:f0: 2a:74:0f:7b:54:04:64:39:40:5d:3c:e7:90:7d:44:f1:76:4d: 7f:01:a9:fd:49:b0:94:9b:3e:66:f7:da:49:c5:74:4b:fa:31: 0e:89:fa:08:e5:a6:80:3e:70:b5:1f:38:85:15:bd:bb:2a:83: bd:15:0d:47:f6:c2:41:68:f6:d9:f8:00:c9:56:69:bc:62:4b: 4c:88:4f:b3:89:17:b4:42:dc:0d:d3:7c:32:a8:0f:2e:43:18: ae:36:40:93:70:80:f8:3a:5f:31:66:6e:3d:8a:89:0a:c3:23: 17:bb:3d:ab:db:a9:10:82:b8:99:69:ee:dc:3b:0f:d3:fb:95: 0b:89:c8:76:28:35:6d:e9:6c:71:82:95:b4:e1:f9:cf:20:ce: cc:21:a6:48:75:2d:65:fe:b3:77:dc:d3:97:fa:bd:a9:99:fb: 6a:70:e8:b9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULYPS4jmNcdnnaaEXNL/1q6Dj81gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEUxMzEyNDVFMzhFODQ1QkUyQTIxOEY5OTI4RUFENTMw RkZGRkVBQzAeFw0yNjEwMjUyMjE0MzJaFw0yNjEwMjcwMDEzMzJaMDMxMTAvBgNV BAMTKEI0RkU3MjcwQTVBQzMzOUQ0MzRDQzIxMjNFNkVFMzQ0MjFFMUJBNzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCh4qGCYXmHErvDobyDxr9KIE7u 3jSxdGUtGV8hT+BOLl+H1yn/0J5gW6iMrdQdxot64jH3k4i7SrYHvw87BpOJQdOt okMDM/J0Od1qOkTnlo78WJpcoFD7pfFEH6WqeA/wzNLoGwW6ZXYZs0+9Rb+fgnQi WGBUesyBnK3ce7nTbC06r2qSOVpRBr5ZxWL+S5QQYW65sw/Xv/CaMFuOcp+evMO0 oiJ8bY5M1+QyeKZPZPzliVLTnZSgFcXb9iyUYIsQr7VW74AJ2XwraM4OXlLY1hD8 4amYnqja1nALJwpiM0McwCLjRKGhBRjg09xamJv+YaRwcwN7KKWSwTDLAfz5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtP5ycKWsM51DTMISPm7jRCHhunIwHwYDVR0j BBgwFoAUjhMSReOOhFviohj5ko6tUw///qwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjcyOTA3ZDMtYmUyNC00ZGE4LTk2YmItZjEyMjhmYzk5MjA1LzAvOEUxMzEyNDVF MzhFODQ1QkUyQTIxOEY5OTI4RUFENTMwRkZGRkVBQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84RTEzMTI0NUUzOEU4NDVCRTJBMjE4Rjk5MjhFQUQ1MzBGRkZG RUFDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjcyOTA3ZDMtYmUyNC00ZGE4LTk2 YmItZjEyMjhmYzk5MjA1LzAvOEUxMzEyNDVFMzhFODQ1QkUyQTIxOEY5OTI4RUFE NTMwRkZGRkVBQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK9Z3wA89htXnrNa+WvHERMaqOASl2/utEW/ j5wHsp5zDUpAOPQv/3rY1SPSlb47EtBqctshooX4Fhg1FhWDQ1l7pa37NKJ05EK5 4q+j/0MkAcWFo4rlMZK78Cp0D3tUBGQ5QF0855B9RPF2TX8Bqf1JsJSbPmb32knF dEv6MQ6J+gjlpoA+cLUfOIUVvbsqg70VDUf2wkFo9tn4AMlWabxiS0yIT7OJF7RC 3A3TfDKoDy5DGK42QJNwgPg6XzFmbj2KiQrDIxe7PavbqRCCuJlp7tw7D9P7lQuJ yHYoNW3pbHGClbTh+c8gzswhpkh1LWX+s3fc05f6vamZ+2pw6Lk= -----END CERTIFICATE-----Generated at Mon Oct 26 16:07:59 2026 by rpki-client