$ rpki-client -vvvf rpki-rsync.idnic.net/repo/357fb17e-9d58-4d51-846e-0a84c8699142/0/8F6B228755F970273B8D779247A1AE56FE0C9587.mft File: 8F6B228755F970273B8D779247A1AE56FE0C9587.mft (raw, json) Hash identifier: 951lseomxAdNblt3uS/9//AJP67BybtgX4nolaXfSJw= Subject key identifier: 68:98:2D:F6:30:7E:76:93:67:4E:C9:17:7D:6C:EC:57:13:90:59:54 Authority key identifier: 8F:6B:22:87:55:F9:70:27:3B:8D:77:92:47:A1:AE:56:FE:0C:95:87 Certificate issuer: /CN=8F6B228755F970273B8D779247A1AE56FE0C9587 Certificate serial: 1D6AFEDF707C8628B49F9D226849673A23F44D94 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8F6B228755F970273B8D779247A1AE56FE0C9587.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/357fb17e-9d58-4d51-846e-0a84c8699142/0/8F6B228755F970273B8D779247A1AE56FE0C9587.mft Manifest number: EA Signing time: Sat 24 Oct 2026 23:59:05 +0000 Manifest this update: Sat 24 Oct 2026 23:54:05 +0000 Manifest next update: Mon 26 Oct 2026 02:14:05 +0000 Files and hashes: 1: 8F6B228755F970273B8D779247A1AE56FE0C9587.crl (hash: NaB9gXiAe8Wbcca4wMdRHZqNf9ryngI5hx8eqG/3s9g=) 2: 3130332e3235352e39382e302f32342d3234203d3e20313531353533.roa (hash: Xy8vvuZlhVSnjTAKWEI2yBt5W17a07XY3wxdN0sfnOc=) 3: 3130332e3235352e39392e302f32342d3234203d3e20313531353533.roa (hash: ZGy+loCXTZu4lKXZ9Xy1tyQd/a/a5ZNJkzDyvD+H2Qo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/357fb17e-9d58-4d51-846e-0a84c8699142/0/8F6B228755F970273B8D779247A1AE56FE0C9587.crl rsync://rpki-rsync.idnic.net/repo/357fb17e-9d58-4d51-846e-0a84c8699142/0/8F6B228755F970273B8D779247A1AE56FE0C9587.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8F6B228755F970273B8D779247A1AE56FE0C9587.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 02:14:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:6a:fe:df:70:7c:86:28:b4:9f:9d:22:68:49:67:3a:23:f4:4d:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F6B228755F970273B8D779247A1AE56FE0C9587 Validity Not Before: Oct 24 23:54:05 2026 GMT Not After : Oct 26 02:14:05 2026 GMT Subject: CN=68982DF6307E7693674EC9177D6CEC5713905954 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:7b:26:49:fe:a7:01:6f:39:b8:33:a6:9c:54: c1:43:0f:f8:57:e5:03:9a:9f:83:96:99:55:17:37: 6c:cc:76:6d:47:3c:d8:fd:83:17:5b:f5:26:31:ed: 0f:f4:7f:f1:7c:35:5c:29:53:48:14:ce:97:3d:ba: 8d:7f:db:39:04:78:50:ff:df:25:fb:de:7e:0d:88: b6:36:a6:48:7a:ca:e5:00:c8:7e:34:25:b9:6e:1a: 47:a0:46:f4:94:cd:e9:82:f4:c0:dd:95:16:09:7c: f7:a5:be:8f:2d:27:2a:44:e7:52:6c:08:eb:92:a3: 8d:e5:ac:8d:e9:38:15:d6:95:7d:8e:3d:48:9c:18: 7c:e4:b6:4b:6d:cb:bb:dc:5f:3c:95:a5:7f:3b:a2: bd:da:34:7a:d1:9d:b3:8e:fd:70:3d:f6:09:b2:5b: 2d:ef:5e:7a:80:b8:12:bd:4c:d5:a5:c2:83:ad:e1: 81:95:47:43:90:d6:f8:bd:e1:5a:64:3d:87:4d:06: cd:2d:43:d8:6a:78:a7:d8:f0:be:3e:81:89:82:ab: e8:82:29:28:20:60:2a:ac:6b:aa:6a:a1:50:d7:92: 2a:45:31:b1:fd:a4:41:cb:7f:0a:a7:d9:1a:00:f4: bb:8d:4e:ab:d5:bb:a1:d1:97:99:a8:d1:d0:f5:31: 17:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:98:2D:F6:30:7E:76:93:67:4E:C9:17:7D:6C:EC:57:13:90:59:54 X509v3 Authority Key Identifier: keyid:8F:6B:22:87:55:F9:70:27:3B:8D:77:92:47:A1:AE:56:FE:0C:95:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/357fb17e-9d58-4d51-846e-0a84c8699142/0/8F6B228755F970273B8D779247A1AE56FE0C9587.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8F6B228755F970273B8D779247A1AE56FE0C9587.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/357fb17e-9d58-4d51-846e-0a84c8699142/0/8F6B228755F970273B8D779247A1AE56FE0C9587.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:4b:34:12:4f:24:5d:37:9c:83:0f:36:1d:9a:3b:c6:c6:1a: a3:f5:05:57:73:2b:83:07:f9:6c:8a:04:99:d4:65:fe:08:82: cd:65:bd:77:c2:5d:86:a8:fe:ce:22:39:63:58:13:ce:7e:53: c0:de:f9:2e:4b:44:bc:51:94:33:66:dd:19:d7:39:59:74:e9: 11:bd:43:42:12:5f:62:32:0a:dd:d4:ec:8f:ac:1b:0a:f4:4a: 7f:35:b7:8c:62:d5:af:49:b6:54:4a:03:2c:4f:89:fd:12:c7: 22:9b:fe:4a:9e:0e:e9:14:d6:a8:d2:30:3d:d6:a1:f6:fb:62: 80:ad:b5:c7:54:33:b0:3b:05:62:f9:66:cd:27:46:14:2b:f5: 7b:e9:f3:65:e7:74:32:b8:91:7d:84:b1:74:46:4e:f4:b5:0b: ac:e1:e3:ff:b6:cf:e7:ea:56:75:c7:de:e0:94:50:80:39:bb: 8a:46:25:04:6b:e5:4d:72:02:b2:b1:34:9e:0c:8a:8d:28:8e: 97:49:f8:d4:74:79:fe:86:ce:f4:05:2e:20:f7:74:53:cb:10: 19:02:47:7b:4e:c6:55:ee:b5:59:25:29:75:19:cd:43:f3:f4: 0f:9f:cf:d6:bf:ec:ab:05:6e:15:fc:ed:32:00:3f:30:eb:93: 7f:e0:1d:f0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHWr+33B8hii0n50iaElnOiP0TZQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEY2QjIyODc1NUY5NzAyNzNCOEQ3NzkyNDdBMUFFNTZG RTBDOTU4NzAeFw0yNjEwMjQyMzU0MDVaFw0yNjEwMjYwMjE0MDVaMDMxMTAvBgNV BAMTKDY4OTgyREY2MzA3RTc2OTM2NzRFQzkxNzdENkNFQzU3MTM5MDU5NTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCteyZJ/qcBbzm4M6acVMFDD/hX 5QOan4OWmVUXN2zMdm1HPNj9gxdb9SYx7Q/0f/F8NVwpU0gUzpc9uo1/2zkEeFD/ 3yX73n4NiLY2pkh6yuUAyH40JbluGkegRvSUzemC9MDdlRYJfPelvo8tJypE51Js COuSo43lrI3pOBXWlX2OPUicGHzktktty7vcXzyVpX87or3aNHrRnbOO/XA99gmy Wy3vXnqAuBK9TNWlwoOt4YGVR0OQ1vi94VpkPYdNBs0tQ9hqeKfY8L4+gYmCq+iC KSggYCqsa6pqoVDXkipFMbH9pEHLfwqn2RoA9LuNTqvVu6HRl5mo0dD1MRd3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaJgt9jB+dpNnTskXfWzsVxOQWVQwHwYDVR0j BBgwFoAUj2sih1X5cCc7jXeSR6GuVv4MlYcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzU3ZmIxN2UtOWQ1OC00ZDUxLTg0NmUtMGE4NGM4Njk5MTQyLzAvOEY2QjIyODc1 NUY5NzAyNzNCOEQ3NzkyNDdBMUFFNTZGRTBDOTU4Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84RjZCMjI4NzU1Rjk3MDI3M0I4RDc3OTI0N0ExQUU1NkZFMEM5 NTg3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzU3ZmIxN2UtOWQ1OC00ZDUxLTg0 NmUtMGE4NGM4Njk5MTQyLzAvOEY2QjIyODc1NUY5NzAyNzNCOEQ3NzkyNDdBMUFF NTZGRTBDOTU4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEFLNBJPJF03nIMPNh2aO8bGGqP1BVdzK4MH +WyKBJnUZf4Igs1lvXfCXYao/s4iOWNYE85+U8De+S5LRLxRlDNm3RnXOVl06RG9 Q0ISX2IyCt3U7I+sGwr0Sn81t4xi1a9JtlRKAyxPif0SxyKb/kqeDukU1qjSMD3W ofb7YoCttcdUM7A7BWL5Zs0nRhQr9Xvp82XndDK4kX2EsXRGTvS1C6zh4/+2z+fq VnXH3uCUUIA5u4pGJQRr5U1yArKxNJ4Mio0ojpdJ+NR0ef6GzvQFLiD3dFPLEBkC R3tOxlXutVklKXUZzUPz9A+fz9a/7KsFbhX87TIAPzDrk3/gHfA= -----END CERTIFICATE-----Generated at Sun Oct 25 14:34:42 2026 by rpki-client