$ rpki-client -vvvf rpki-rsync.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C8C1A31E42E799E9EDC0FAB813163052945845AC.mft File: C8C1A31E42E799E9EDC0FAB813163052945845AC.mft (raw, json) Hash identifier: Jn6BJLq8yNbRV/pTtnZdVq+A2LOSOVRhQJRfX9NLdoA= Subject key identifier: A2:5E:C3:8E:0E:BA:B1:04:B1:40:4F:74:1C:E6:AE:47:29:7B:EA:6C Authority key identifier: C8:C1:A3:1E:42:E7:99:E9:ED:C0:FA:B8:13:16:30:52:94:58:45:AC Certificate issuer: /CN=C8C1A31E42E799E9EDC0FAB813163052945845AC Certificate serial: 4F2459F3AF22BA81D07A9D0775F9A7E88EC843DE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C8C1A31E42E799E9EDC0FAB813163052945845AC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C8C1A31E42E799E9EDC0FAB813163052945845AC.mft Manifest number: EE Signing time: Mon 26 Oct 2026 10:09:46 +0000 Manifest this update: Mon 26 Oct 2026 10:04:46 +0000 Manifest next update: Tue 27 Oct 2026 14:07:46 +0000 Files and hashes: 1: 3130332e3135322e39322e302f32332d3234203d3e20313338383630.roa (hash: UWH9gD1/4ElZU52MCqktUtjxRojq4daDEIdWkUnok2k=) 2: 323430373a373263303a3a2f33322d3332203d3e203538383230.roa (hash: QTf5TvW/sGJCtiqjYOWSFSyqMXy6xLfUyzA5Wf2VFMo=) 3: C8C1A31E42E799E9EDC0FAB813163052945845AC.crl (hash: KaCYyKS1qs+wnpFlWvoZQjdiQ3jHT0JLIG1ShmC0VNc=) 4: 323430373a373263303a3a2f33322d3438203d3e203538383230.roa (hash: FEgS5ex34lgarvKtqbdAVQc0toy/dLHosJymf/4jCzU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C8C1A31E42E799E9EDC0FAB813163052945845AC.crl rsync://rpki-rsync.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C8C1A31E42E799E9EDC0FAB813163052945845AC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C8C1A31E42E799E9EDC0FAB813163052945845AC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Oct 2026 12:57:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:24:59:f3:af:22:ba:81:d0:7a:9d:07:75:f9:a7:e8:8e:c8:43:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C8C1A31E42E799E9EDC0FAB813163052945845AC Validity Not Before: Oct 26 10:04:46 2026 GMT Not After : Oct 27 14:07:46 2026 GMT Subject: CN=A25EC38E0EBAB104B1404F741CE6AE47297BEA6C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:23:33:62:39:9e:70:ca:d3:c4:4f:85:b4:f3: ba:93:88:b5:10:01:19:7e:6d:aa:fb:a6:09:f8:33: b7:19:93:88:c8:9c:ef:51:7c:ca:27:c3:03:a3:12: 7c:d6:b3:2b:08:b3:ea:c8:93:e1:d9:a6:7f:0f:f3: a4:fe:46:5d:26:ed:02:6c:01:04:1e:e5:a5:a7:8a: d9:eb:d2:0f:1b:1c:eb:ab:3a:9e:84:76:c1:0b:ae: ae:24:b2:d2:f3:91:c1:2e:b1:51:06:1a:21:b9:53: a0:f5:2a:e0:58:89:08:3e:02:3f:c9:62:86:6b:b3: ad:54:60:83:e3:b3:29:4c:bb:5a:47:d3:a6:04:d9: be:e2:46:28:6f:80:2a:6e:35:1f:c7:6b:e2:46:a7: 88:f4:7e:86:41:1d:c7:b9:93:03:df:1a:c3:51:ad: f1:83:db:32:7e:0d:5c:33:4f:36:9e:46:e5:32:13: 74:2f:85:86:19:b8:b2:e0:83:37:73:8a:93:fa:42: da:2e:00:f7:db:24:4c:64:60:bd:c3:88:53:b8:61: 54:24:2f:21:2d:31:2f:d0:6f:18:9e:82:12:7b:86: 81:81:ca:50:cf:3a:16:e6:22:0b:9d:25:a0:fc:3a: d9:c9:e9:58:b1:55:86:98:49:65:0b:02:67:63:95: 44:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:5E:C3:8E:0E:BA:B1:04:B1:40:4F:74:1C:E6:AE:47:29:7B:EA:6C X509v3 Authority Key Identifier: keyid:C8:C1:A3:1E:42:E7:99:E9:ED:C0:FA:B8:13:16:30:52:94:58:45:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C8C1A31E42E799E9EDC0FAB813163052945845AC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C8C1A31E42E799E9EDC0FAB813163052945845AC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C8C1A31E42E799E9EDC0FAB813163052945845AC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:68:1e:00:1c:a5:ec:58:05:f2:1b:49:fc:0d:7d:0c:89:b5: bc:16:38:4c:00:fd:4e:89:5b:e4:be:8e:c1:5f:dd:49:a1:c6: 90:69:d5:a0:e2:8b:a5:49:4b:32:95:5e:c2:b6:3d:03:b1:e0: 94:6a:8f:88:b8:91:32:f4:5e:cf:cb:44:61:ac:ab:0b:d8:d2: 43:d7:cc:04:37:de:a6:ef:7d:ac:40:0a:30:87:cc:b3:a8:d5: fa:52:45:9d:10:a2:99:a5:94:47:4b:6a:28:21:65:cf:90:fa: a3:2f:fe:82:ee:a6:8f:d8:47:09:89:1a:88:16:e5:d6:70:f3: 6b:cb:c8:52:e2:0e:da:73:af:79:87:c3:97:d4:15:f1:9d:85: 72:b9:b0:b2:59:38:c8:71:d5:7f:b2:66:53:34:c1:6f:67:52: 7c:77:ac:7a:19:30:1f:cd:74:7f:37:ef:78:71:f0:1a:88:3d: dd:2f:eb:10:f4:a2:db:24:62:e5:69:9f:46:c3:5f:8a:76:67: c1:cc:52:42:e3:86:b4:ee:59:2b:3e:bd:dc:bf:9a:d1:53:3c: 29:17:95:72:5a:73:82:12:ff:d0:4a:a6:d2:26:0c:1d:68:b8: 2c:ff:4e:6d:0b:f1:01:f0:e1:18:64:15:bd:36:60:d5:4a:99: 91:16:52:ff -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTyRZ868iuoHQep0Hdfmn6I7IQ94wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzhDMUEzMUU0MkU3OTlFOUVEQzBGQUI4MTMxNjMwNTI5 NDU4NDVBQzAeFw0yNjEwMjYxMDA0NDZaFw0yNjEwMjcxNDA3NDZaMDMxMTAvBgNV BAMTKEEyNUVDMzhFMEVCQUIxMDRCMTQwNEY3NDFDRTZBRTQ3Mjk3QkVBNkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFIzNiOZ5wytPET4W087qTiLUQ ARl+bar7pgn4M7cZk4jInO9RfMonwwOjEnzWsysIs+rIk+HZpn8P86T+Rl0m7QJs AQQe5aWnitnr0g8bHOurOp6EdsELrq4kstLzkcEusVEGGiG5U6D1KuBYiQg+Aj/J YoZrs61UYIPjsylMu1pH06YE2b7iRihvgCpuNR/Ha+JGp4j0foZBHce5kwPfGsNR rfGD2zJ+DVwzTzaeRuUyE3QvhYYZuLLggzdzipP6QtouAPfbJExkYL3DiFO4YVQk LyEtMS/QbxieghJ7hoGBylDPOhbmIgudJaD8OtnJ6VixVYaYSWULAmdjlUQZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUol7Djg66sQSxQE90HOauRyl76mwwHwYDVR0j BBgwFoAUyMGjHkLnmentwPq4ExYwUpRYRawwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzhjOWMyNTItZjdjYS00ZGQ1LTg4ZjYtMjJhZGRjODkzNGIzLzAvQzhDMUEzMUU0 MkU3OTlFOUVEQzBGQUI4MTMxNjMwNTI5NDU4NDVBQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DOEMxQTMxRTQyRTc5OUU5RURDMEZBQjgxMzE2MzA1Mjk0NTg0 NUFDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzhjOWMyNTItZjdjYS00ZGQ1LTg4 ZjYtMjJhZGRjODkzNGIzLzAvQzhDMUEzMUU0MkU3OTlFOUVEQzBGQUI4MTMxNjMw NTI5NDU4NDVBQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJloHgAcpexYBfIbSfwNfQyJtbwWOEwA/U6J W+S+jsFf3UmhxpBp1aDii6VJSzKVXsK2PQOx4JRqj4i4kTL0Xs/LRGGsqwvY0kPX zAQ33qbvfaxACjCHzLOo1fpSRZ0QopmllEdLaighZc+Q+qMv/oLupo/YRwmJGogW 5dZw82vLyFLiDtpzr3mHw5fUFfGdhXK5sLJZOMhx1X+yZlM0wW9nUnx3rHoZMB/N dH8373hx8BqIPd0v6xD0otskYuVpn0bDX4p2Z8HMUkLjhrTuWSs+vdy/mtFTPCkX lXJac4IS/9BKptImDB1ouCz/Tm0L8QHw4RhkFb02YNVKmZEWUv8= -----END CERTIFICATE-----Generated at Tue Oct 27 00:12:34 2026 by rpki-client