$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8E7D29B8B2E6F2F09B507FC36B3173162A4316E9.mft File: 8E7D29B8B2E6F2F09B507FC36B3173162A4316E9.mft (raw, json) Hash identifier: huN82xqwaBUmISdliDm2EwiCPBtwEclBuwlX7kRd4NY= Subject key identifier: D5:BC:E6:5E:D4:7C:72:7E:57:EE:BA:D1:BD:69:B5:F4:7F:0A:B1:A6 Authority key identifier: 8E:7D:29:B8:B2:E6:F2:F0:9B:50:7F:C3:6B:31:73:16:2A:43:16:E9 Certificate issuer: /CN=8E7D29B8B2E6F2F09B507FC36B3173162A4316E9 Certificate serial: E320538664D67D2027322FB908CA830F90CEB0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8E7D29B8B2E6F2F09B507FC36B3173162A4316E9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8E7D29B8B2E6F2F09B507FC36B3173162A4316E9.mft Manifest number: D5 Signing time: Thu 08 Oct 2026 10:41:13 +0000 Manifest this update: Thu 08 Oct 2026 10:36:13 +0000 Manifest next update: Fri 09 Oct 2026 12:23:13 +0000 Files and hashes: 1: 3130332e3138362e3139352e302f32342d3234203d3e203438343635.roa (hash: r7dovsQ2SZSV7IfPAfAuGK0MlNXhEY5b9y9M8jygZbk=) 2: 3130332e3138362e3139342e302f32332d3233203d3e20313439373132.roa (hash: vEKBFb87szZHK58hOoWh27DXWyqF6KjiEygYywKcCcA=) 3: 3130332e3138362e3139342e302f32332d3234203d3e20313439373132.roa (hash: nhCth3GuuL56/ZX/YpeRjeCAIHYgJ/lFofg+gthNMoU=) 4: 3130332e3138362e3139342e302f32342d3234203d3e20313439373132.roa (hash: FAM0vFS+CEP/k4I2FWb6JASyBXq3gfqT8CiCE9WHTo0=) 5: 8E7D29B8B2E6F2F09B507FC36B3173162A4316E9.crl (hash: /lpyRkHNILEw3vTUDYdt1Ar1jOTnZKdOmx6scMuJAO4=) 6: 3130332e3138362e3139342e302f32342d3234203d3e203438343635.roa (hash: 3gBu5z4wg47/tNqaD7YsE1EFFZZ6JYTR0325QFX63A0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8E7D29B8B2E6F2F09B507FC36B3173162A4316E9.crl rsync://rpki-rsync.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8E7D29B8B2E6F2F09B507FC36B3173162A4316E9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8E7D29B8B2E6F2F09B507FC36B3173162A4316E9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 Oct 2026 11:17:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: e3:20:53:86:64:d6:7d:20:27:32:2f:b9:08:ca:83:0f:90:ce:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E7D29B8B2E6F2F09B507FC36B3173162A4316E9 Validity Not Before: Oct 8 10:36:13 2026 GMT Not After : Oct 9 12:23:13 2026 GMT Subject: CN=D5BCE65ED47C727E57EEBAD1BD69B5F47F0AB1A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:57:94:38:04:99:cd:05:98:5c:a9:3c:af:b1: be:17:57:ae:34:46:3f:38:f6:df:f0:c4:14:bc:19: e9:05:de:c8:c8:19:53:6b:93:44:bf:8b:51:c2:56: 8a:8f:f6:c6:13:18:98:e1:c0:c5:38:96:4c:0a:b9: c8:87:05:35:fd:73:9b:f5:f8:06:74:a8:6f:be:59: f5:c7:1c:3f:8c:a0:12:fe:01:2d:8f:2b:41:31:9b: 9f:9f:c4:b1:72:23:24:58:e2:86:29:10:9d:70:c7: 0f:fb:09:6a:d0:7d:9e:a5:98:41:42:ee:dd:87:67: 02:b1:8a:64:1f:43:f5:66:72:f3:5d:87:6a:d5:72: 46:a7:a8:20:c9:ca:fd:ef:9e:0f:72:f4:18:79:27: e5:43:2d:c1:27:56:91:f1:15:ac:b2:7c:81:82:02: b4:6a:82:65:61:6b:e0:a5:3e:91:08:9b:c8:ce:9b: 6f:b0:01:d9:30:de:72:dd:21:93:bf:4b:ee:49:8b: c1:3d:aa:3d:78:f4:70:34:c2:3d:9d:e7:64:c1:3e: 62:f1:d7:f3:d8:8e:a8:cf:ff:0f:43:e6:43:00:20: 81:ba:95:69:44:c0:4d:ea:3b:68:7c:15:7b:4b:4e: 11:6f:f9:0b:80:a0:9f:60:ec:83:e2:aa:e6:ed:7a: b1:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:BC:E6:5E:D4:7C:72:7E:57:EE:BA:D1:BD:69:B5:F4:7F:0A:B1:A6 X509v3 Authority Key Identifier: keyid:8E:7D:29:B8:B2:E6:F2:F0:9B:50:7F:C3:6B:31:73:16:2A:43:16:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8E7D29B8B2E6F2F09B507FC36B3173162A4316E9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8E7D29B8B2E6F2F09B507FC36B3173162A4316E9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8E7D29B8B2E6F2F09B507FC36B3173162A4316E9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:84:d1:98:71:d1:ae:24:30:ff:65:85:bf:a2:42:5f:f8:82: c8:bb:a2:91:b0:90:68:1f:f7:2b:04:0d:a2:17:ef:b5:fc:42: bb:7c:06:0b:4e:00:7a:b2:2f:c6:1f:cb:7f:55:d1:e2:12:a9: dd:7d:cb:cf:04:70:8a:d8:f9:90:48:c7:a9:65:8e:00:ce:6f: ee:0a:0d:be:38:96:6d:cd:1d:dc:f5:ea:3d:eb:46:fd:85:18: 84:64:18:50:bd:96:eb:fd:33:9a:a2:a3:26:64:13:6c:0f:5d: 39:3c:e0:cd:0c:9c:71:11:53:ba:29:cd:ee:4f:39:5e:5b:c9: 57:1e:c0:e8:cd:53:61:44:e1:94:e9:a3:d2:d2:17:1f:c1:92: a7:73:91:c2:13:01:af:ad:5b:a6:fb:d8:7d:5f:3e:ed:9d:b9: 81:da:54:74:68:08:5a:ea:17:41:cf:1e:97:98:6f:b5:66:90: 0f:7d:a6:99:67:cd:4e:43:b5:e4:ed:19:49:0b:2e:f9:18:a1: 14:ea:df:f9:49:47:13:20:f3:e4:e2:b6:0e:af:fc:75:97:bb: 67:96:27:7d:7a:a6:31:6c:bb:57:e8:34:b3:ce:8d:ba:a2:c5: 53:67:48:0e:69:89:ff:ad:63:35:e3:98:df:69:2e:a7:40:d7: ac:cd:85:15 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAOMgU4Zk1n0gJzIvuQjKgw+QzrAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEU3RDI5QjhCMkU2RjJGMDlCNTA3RkMzNkIzMTczMTYy QTQzMTZFOTAeFw0yNjEwMDgxMDM2MTNaFw0yNjEwMDkxMjIzMTNaMDMxMTAvBgNV BAMTKEQ1QkNFNjVFRDQ3QzcyN0U1N0VFQkFEMUJENjlCNUY0N0YwQUIxQTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZV5Q4BJnNBZhcqTyvsb4XV640 Rj849t/wxBS8GekF3sjIGVNrk0S/i1HCVoqP9sYTGJjhwMU4lkwKuciHBTX9c5v1 +AZ0qG++WfXHHD+MoBL+AS2PK0Exm5+fxLFyIyRY4oYpEJ1wxw/7CWrQfZ6lmEFC 7t2HZwKximQfQ/VmcvNdh2rVckanqCDJyv3vng9y9Bh5J+VDLcEnVpHxFayyfIGC ArRqgmVha+ClPpEIm8jOm2+wAdkw3nLdIZO/S+5Ji8E9qj149HA0wj2d52TBPmLx 1/PYjqjP/w9D5kMAIIG6lWlEwE3qO2h8FXtLThFv+QuAoJ9g7IPiqubterEbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1bzmXtR8cn5X7rrRvWm19H8KsaYwHwYDVR0j BBgwFoAUjn0puLLm8vCbUH/DazFzFipDFukwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTI1MmVhZDMtZGM4Zi00ZDg2LWFmY2YtYTE0MGU1Yjg3NTMyLzAvOEU3RDI5QjhC MkU2RjJGMDlCNTA3RkMzNkIzMTczMTYyQTQzMTZFOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84RTdEMjlCOEIyRTZGMkYwOUI1MDdGQzM2QjMxNzMxNjJBNDMx NkU5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTI1MmVhZDMtZGM4Zi00ZDg2LWFm Y2YtYTE0MGU1Yjg3NTMyLzAvOEU3RDI5QjhCMkU2RjJGMDlCNTA3RkMzNkIzMTcz MTYyQTQzMTZFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAWE0Zhx0a4kMP9lhb+iQl/4gsi7opGwkGgf 9ysEDaIX77X8Qrt8BgtOAHqyL8Yfy39V0eISqd19y88EcIrY+ZBIx6lljgDOb+4K Db44lm3NHdz16j3rRv2FGIRkGFC9luv9M5qioyZkE2wPXTk84M0MnHERU7opze5P OV5byVcewOjNU2FE4ZTpo9LSFx/BkqdzkcITAa+tW6b72H1fPu2duYHaVHRoCFrq F0HPHpeYb7VmkA99pplnzU5DteTtGUkLLvkYoRTq3/lJRxMg8+Titg6v/HWXu2eW J316pjFsu1foNLPOjbqixVNnSA5pif+tYzXjmN9pLqdA16zNhRU= -----END CERTIFICATE-----Generated at Thu Oct 8 14:15:55 2026 by rpki-client