$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3cc5605d-f17a-4010-9253-210c64f148bd/0/8B57121B495DA86939D79B7BA261CF6D38C999CF.mft File: 8B57121B495DA86939D79B7BA261CF6D38C999CF.mft (raw, json) Hash identifier: F4dY4xLdG3BNz2cpUSJIJzV5OjlT6f1paI3vQQ/hDRo= Subject key identifier: 06:43:8D:40:D5:AC:49:65:FC:0D:F0:74:6F:28:05:BA:01:A7:84:D4 Authority key identifier: 8B:57:12:1B:49:5D:A8:69:39:D7:9B:7B:A2:61:CF:6D:38:C9:99:CF Certificate issuer: /CN=8B57121B495DA86939D79B7BA261CF6D38C999CF Certificate serial: 7A3E44485B445A69BF9FE5C7F142870A35CB147B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8B57121B495DA86939D79B7BA261CF6D38C999CF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3cc5605d-f17a-4010-9253-210c64f148bd/0/8B57121B495DA86939D79B7BA261CF6D38C999CF.mft Manifest number: EC Signing time: Mon 26 Oct 2026 12:53:32 +0000 Manifest this update: Mon 26 Oct 2026 12:48:32 +0000 Manifest next update: Tue 27 Oct 2026 13:07:32 +0000 Files and hashes: 1: 8B57121B495DA86939D79B7BA261CF6D38C999CF.crl (hash: o2ciIHjEhtnC6zrvSdEoUosy1j9SZQBV67zaEnS0ItY=) 2: 3130332e3138332e362e302f32332d3234203d3e20313439343037.roa (hash: w+XxfdGQbvXdRZjpGQCwUdlhFyEQmevCuv9dcfZGuKE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3cc5605d-f17a-4010-9253-210c64f148bd/0/8B57121B495DA86939D79B7BA261CF6D38C999CF.crl rsync://rpki-rsync.idnic.net/repo/3cc5605d-f17a-4010-9253-210c64f148bd/0/8B57121B495DA86939D79B7BA261CF6D38C999CF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8B57121B495DA86939D79B7BA261CF6D38C999CF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Oct 2026 12:57:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:3e:44:48:5b:44:5a:69:bf:9f:e5:c7:f1:42:87:0a:35:cb:14:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B57121B495DA86939D79B7BA261CF6D38C999CF Validity Not Before: Oct 26 12:48:32 2026 GMT Not After : Oct 27 13:07:32 2026 GMT Subject: CN=06438D40D5AC4965FC0DF0746F2805BA01A784D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:2d:60:0a:93:c0:63:33:ee:7a:83:14:b1:78: 64:3b:96:ac:e7:cf:6f:80:08:56:24:e2:b1:f3:d9: 83:09:5f:e7:11:13:2d:f4:cd:75:13:e3:85:e3:e4: ec:e3:7b:c5:ed:88:b3:5a:dd:c0:3e:a0:a7:3d:93: 22:5c:f5:a4:9a:e7:ee:94:83:aa:98:44:70:7a:a2: 30:71:0b:4d:aa:15:f8:71:a9:3a:c1:dc:65:67:d7: f7:f7:c3:71:9d:f2:e8:4f:69:2b:cb:5c:75:b0:51: 9b:0a:4b:5c:d2:c4:34:27:ed:44:46:fe:af:51:e2: 3c:a1:63:3c:e5:94:e9:04:7b:40:bf:22:44:5a:e9: 48:04:af:7a:d1:79:6f:34:2f:da:10:d3:6b:09:79: 86:15:94:95:49:98:72:9d:d1:a7:aa:1d:05:76:5d: 04:c6:91:bf:07:b6:c0:0f:e6:39:53:7c:a0:d8:46: e1:42:93:dc:66:74:34:f1:b2:a7:e6:c4:7e:65:ba: 39:62:c5:29:ce:b3:9c:16:58:d8:3d:e6:9f:89:ff: f8:de:97:7e:ac:5f:34:85:b1:db:71:84:7b:e5:8d: 40:b1:a5:dd:72:0f:d9:1e:c6:d6:cf:a5:e7:f5:e8: 71:ad:e0:d0:7e:29:c8:ba:49:fa:0a:64:01:90:17: 5b:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:43:8D:40:D5:AC:49:65:FC:0D:F0:74:6F:28:05:BA:01:A7:84:D4 X509v3 Authority Key Identifier: keyid:8B:57:12:1B:49:5D:A8:69:39:D7:9B:7B:A2:61:CF:6D:38:C9:99:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3cc5605d-f17a-4010-9253-210c64f148bd/0/8B57121B495DA86939D79B7BA261CF6D38C999CF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8B57121B495DA86939D79B7BA261CF6D38C999CF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3cc5605d-f17a-4010-9253-210c64f148bd/0/8B57121B495DA86939D79B7BA261CF6D38C999CF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:42:86:cd:90:63:de:af:8c:e3:c6:c9:24:11:2d:e8:33:56: 85:0b:70:e7:f6:b9:6f:12:da:d9:b8:2b:a5:fd:1c:7e:69:c7: 87:93:35:f3:7c:9c:4d:84:f8:0e:94:64:c3:97:f5:e2:e6:25: 76:9e:ef:36:83:51:25:6e:d3:26:82:d6:26:02:04:b3:b4:f0: dc:44:40:36:fa:7a:a4:92:3c:92:b4:81:ac:71:f3:99:a7:7d: da:44:86:cc:45:c6:27:a3:11:2b:4d:03:cc:1c:4d:7f:b3:c2: b6:6d:81:47:9e:5f:17:80:43:eb:d9:7d:c7:6e:43:07:a9:95: 59:2d:c6:d7:40:60:b7:e7:64:a5:47:32:7c:29:a2:e9:c6:29: cd:59:83:6f:24:fb:71:c6:b3:7a:33:ca:1b:d5:d7:83:6e:6c: 36:99:2f:84:b2:13:cd:2b:d8:dd:06:63:3a:13:75:b4:74:53: 29:f9:1a:4a:1d:4b:c7:ef:54:88:a4:b4:fb:fc:79:2e:c3:49: 5b:4a:b8:8d:5a:65:bd:6e:76:29:7f:50:a2:db:04:3a:0d:b0: 3e:49:7b:37:8e:81:2f:1b:35:b5:8e:b9:3b:70:f5:92:8a:d8: 73:b7:ee:bb:0a:37:f9:05:fc:07:b1:3c:8f:01:09:0a:d5:f1: 49:bd:04:32 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUej5ESFtEWmm/n+XH8UKHCjXLFHswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEI1NzEyMUI0OTVEQTg2OTM5RDc5QjdCQTI2MUNGNkQz OEM5OTlDRjAeFw0yNjEwMjYxMjQ4MzJaFw0yNjEwMjcxMzA3MzJaMDMxMTAvBgNV BAMTKDA2NDM4RDQwRDVBQzQ5NjVGQzBERjA3NDZGMjgwNUJBMDFBNzg0RDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMLWAKk8BjM+56gxSxeGQ7lqzn z2+ACFYk4rHz2YMJX+cREy30zXUT44Xj5Ozje8XtiLNa3cA+oKc9kyJc9aSa5+6U g6qYRHB6ojBxC02qFfhxqTrB3GVn1/f3w3Gd8uhPaSvLXHWwUZsKS1zSxDQn7URG /q9R4jyhYzzllOkEe0C/IkRa6UgEr3rReW80L9oQ02sJeYYVlJVJmHKd0aeqHQV2 XQTGkb8HtsAP5jlTfKDYRuFCk9xmdDTxsqfmxH5lujlixSnOs5wWWNg95p+J//je l36sXzSFsdtxhHvljUCxpd1yD9kextbPpef16HGt4NB+Kci6SfoKZAGQF1sFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBkONQNWsSWX8DfB0bygFugGnhNQwHwYDVR0j BBgwFoAUi1cSG0ldqGk515t7omHPbTjJmc8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2NjNTYwNWQtZjE3YS00MDEwLTkyNTMtMjEwYzY0ZjE0OGJkLzAvOEI1NzEyMUI0 OTVEQTg2OTM5RDc5QjdCQTI2MUNGNkQzOEM5OTlDRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84QjU3MTIxQjQ5NURBODY5MzlENzlCN0JBMjYxQ0Y2RDM4Qzk5 OUNGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2NjNTYwNWQtZjE3YS00MDEwLTky NTMtMjEwYzY0ZjE0OGJkLzAvOEI1NzEyMUI0OTVEQTg2OTM5RDc5QjdCQTI2MUNG NkQzOEM5OTlDRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGtChs2QY96vjOPGySQRLegzVoULcOf2uW8S 2tm4K6X9HH5px4eTNfN8nE2E+A6UZMOX9eLmJXae7zaDUSVu0yaC1iYCBLO08NxE QDb6eqSSPJK0gaxx85mnfdpEhsxFxiejEStNA8wcTX+zwrZtgUeeXxeAQ+vZfcdu QweplVktxtdAYLfnZKVHMnwpounGKc1Zg28k+3HGs3ozyhvV14NubDaZL4SyE80r 2N0GYzoTdbR0Uyn5GkodS8fvVIiktPv8eS7DSVtKuI1aZb1udil/UKLbBDoNsD5J ezeOgS8bNbWOuTtw9ZKK2HO37rsKN/kF/AexPI8BCQrV8Um9BDI= -----END CERTIFICATE-----Generated at Tue Oct 27 06:11:07 2026 by rpki-client