$ rpki-client -vvvf rpki-rsync.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/8EEC1E03B8E52F66A0713DEB14217C87F9EA17A7.mft File: 8EEC1E03B8E52F66A0713DEB14217C87F9EA17A7.mft (raw, json) Hash identifier: 8c/7aancI5bI2BaqfHx52VclC5UoFexBzaim3+E3Z98= Subject key identifier: 0B:56:A0:56:90:79:4B:FB:5C:61:5F:6B:49:36:68:F8:B6:1C:71:17 Authority key identifier: 8E:EC:1E:03:B8:E5:2F:66:A0:71:3D:EB:14:21:7C:87:F9:EA:17:A7 Certificate issuer: /CN=8EEC1E03B8E52F66A0713DEB14217C87F9EA17A7 Certificate serial: 47A161ABE75CB347F2F256211A5E492FC064B80C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8EEC1E03B8E52F66A0713DEB14217C87F9EA17A7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/8EEC1E03B8E52F66A0713DEB14217C87F9EA17A7.mft Manifest number: E9 Signing time: Sat 24 Oct 2026 22:16:56 +0000 Manifest this update: Sat 24 Oct 2026 22:11:56 +0000 Manifest next update: Mon 26 Oct 2026 02:04:56 +0000 Files and hashes: 1: 8EEC1E03B8E52F66A0713DEB14217C87F9EA17A7.crl (hash: 49nyaLnZ16G+fu7fM18voFLsFh5S76EtCyyOOCgVdS0=) 2: 323030313a6466323a373463303a3a2f34382d3438203d3e20313530393830.roa (hash: 71PyqcaPYwvm2e6i8fnxEnvNfxXMokDQ1xxLp0rozYA=) 3: 3130332e37302e3132332e302f32342d3234203d3e20313530393830.roa (hash: PZbtbKk588SOuMSDyRHv/Fg/EjC+9RQB0ZQtHocb618=) 4: 3130332e37302e3132322e302f32342d3234203d3e20313530393830.roa (hash: NdF7z4Axz0mBE/lC0pc0IGrEEOoXFiCSmtcjnukP0y4=) 5: 3130332e37302e3132322e302f32332d3233203d3e20313530393830.roa (hash: HeHfGZB/GAp4q9T9TRaLUnaN9SyHYBb/bDC0hRan7Ak=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/8EEC1E03B8E52F66A0713DEB14217C87F9EA17A7.crl rsync://rpki-rsync.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/8EEC1E03B8E52F66A0713DEB14217C87F9EA17A7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8EEC1E03B8E52F66A0713DEB14217C87F9EA17A7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 02:04:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:a1:61:ab:e7:5c:b3:47:f2:f2:56:21:1a:5e:49:2f:c0:64:b8:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8EEC1E03B8E52F66A0713DEB14217C87F9EA17A7 Validity Not Before: Oct 24 22:11:56 2026 GMT Not After : Oct 26 02:04:56 2026 GMT Subject: CN=0B56A05690794BFB5C615F6B493668F8B61C7117 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:d9:cd:0f:b6:71:a2:36:ef:a1:eb:6e:98:89: c8:10:71:b7:b1:14:3d:c5:4c:e1:7e:18:52:98:f3: 35:d0:8e:9b:9d:d4:e1:ec:5d:87:71:37:bf:13:55: 41:fd:96:fa:70:9a:2f:0e:72:6b:08:60:3b:e2:a8: f0:c1:e3:67:2d:5f:f8:b1:79:37:5d:40:1f:f2:25: 5d:a0:7b:6e:80:c7:90:ed:f2:c3:49:22:67:d5:46: 26:db:96:50:be:63:48:12:78:70:2d:ca:ae:0f:eb: 2a:13:1c:f6:7c:01:d1:b4:e4:f2:0d:c2:00:e8:0c: b6:b6:34:c8:43:ab:54:e2:3f:bb:16:ff:af:de:10: 55:72:8d:e9:8d:7d:3a:c4:16:5f:fd:20:25:9c:d3: 62:b5:28:8c:a5:2c:71:86:2c:bb:79:ec:e9:d1:ba: 19:c6:99:b2:9a:34:c9:9e:93:3e:63:4c:c7:9b:51: 99:a3:72:fa:5f:a8:72:52:63:ce:76:11:1b:6d:66: e6:8a:d4:25:25:83:1a:b3:ab:16:a3:ca:a4:cf:2e: 1a:54:7c:74:be:c0:d5:ee:9b:a9:ca:43:d2:5a:c8: be:3c:90:fa:3a:0c:07:8e:81:78:f8:9f:23:bd:b3: b8:b1:ff:21:8f:67:a4:5d:58:69:8c:17:36:a9:cc: f1:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:56:A0:56:90:79:4B:FB:5C:61:5F:6B:49:36:68:F8:B6:1C:71:17 X509v3 Authority Key Identifier: keyid:8E:EC:1E:03:B8:E5:2F:66:A0:71:3D:EB:14:21:7C:87:F9:EA:17:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/8EEC1E03B8E52F66A0713DEB14217C87F9EA17A7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8EEC1E03B8E52F66A0713DEB14217C87F9EA17A7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/8EEC1E03B8E52F66A0713DEB14217C87F9EA17A7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:2f:2c:ff:1a:9a:92:90:66:1c:19:e4:da:fc:9e:ae:37:e0: d6:18:8f:35:d4:04:c8:e7:4c:4a:c6:96:68:a7:20:42:31:02: 5b:66:ed:c2:de:64:91:c2:bb:67:07:38:57:b3:71:83:a9:37: cc:6b:eb:c8:97:52:60:a6:f7:c5:36:61:b3:76:7a:32:bc:73: 3d:9e:fd:49:d2:91:e7:91:e8:77:b0:c9:4b:d7:38:eb:10:26: 0f:48:89:d4:78:78:cd:0f:ac:cb:64:4d:f8:90:09:11:bc:de: bc:68:ca:d2:a5:e0:a8:cb:f0:9c:a7:db:5b:0e:d9:4b:44:71: a4:2f:7e:2a:40:d4:f7:b5:2c:1f:b7:ae:cd:0a:ab:59:51:ec: 03:86:9b:02:e8:e0:a2:3e:d9:a6:b9:ab:c5:0f:bf:06:8f:e2: 86:ce:e8:d9:d3:a9:04:6f:33:3a:98:29:ba:80:d9:6a:b4:47: 49:63:be:f9:27:a4:6f:10:b1:87:0d:ce:0d:3f:5e:6b:0e:fc: 5a:31:78:4a:f3:31:58:c1:a8:b5:ba:d3:3b:93:6e:18:80:da: 5a:6d:a9:b3:81:6f:ad:57:71:8f:1f:05:ed:07:b1:5b:40:e4: d8:6a:cf:ae:16:4e:77:46:a4:6d:c6:78:a6:57:65:4c:f9:67: 2a:aa:46:29 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUR6Fhq+dcs0fy8lYhGl5JL8BkuAwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEVFQzFFMDNCOEU1MkY2NkEwNzEzREVCMTQyMTdDODdG OUVBMTdBNzAeFw0yNjEwMjQyMjExNTZaFw0yNjEwMjYwMjA0NTZaMDMxMTAvBgNV BAMTKDBCNTZBMDU2OTA3OTRCRkI1QzYxNUY2QjQ5MzY2OEY4QjYxQzcxMTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT2c0PtnGiNu+h626YicgQcbex FD3FTOF+GFKY8zXQjpud1OHsXYdxN78TVUH9lvpwmi8OcmsIYDviqPDB42ctX/ix eTddQB/yJV2ge26Ax5Dt8sNJImfVRibbllC+Y0gSeHAtyq4P6yoTHPZ8AdG05PIN wgDoDLa2NMhDq1TiP7sW/6/eEFVyjemNfTrEFl/9ICWc02K1KIylLHGGLLt57OnR uhnGmbKaNMmekz5jTMebUZmjcvpfqHJSY852ERttZuaK1CUlgxqzqxajyqTPLhpU fHS+wNXum6nKQ9JayL48kPo6DAeOgXj4nyO9s7ix/yGPZ6RdWGmMFzapzPG1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUC1agVpB5S/tcYV9rSTZo+LYccRcwHwYDVR0j BBgwFoAUjuweA7jlL2agcT3rFCF8h/nqF6cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTMyNTA2NjItM2VlZi00YWE5LTllZGUtNTYyOWQ1YjZlYTk1LzAvOEVFQzFFMDNC OEU1MkY2NkEwNzEzREVCMTQyMTdDODdGOUVBMTdBNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84RUVDMUUwM0I4RTUyRjY2QTA3MTNERUIxNDIxN0M4N0Y5RUEx N0E3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTMyNTA2NjItM2VlZi00YWE5LTll ZGUtNTYyOWQ1YjZlYTk1LzAvOEVFQzFFMDNCOEU1MkY2NkEwNzEzREVCMTQyMTdD ODdGOUVBMTdBNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALUvLP8ampKQZhwZ5Nr8nq434NYYjzXUBMjn TErGlminIEIxAltm7cLeZJHCu2cHOFezcYOpN8xr68iXUmCm98U2YbN2ejK8cz2e /UnSkeeR6HewyUvXOOsQJg9IidR4eM0PrMtkTfiQCRG83rxoytKl4KjL8Jyn21sO 2UtEcaQvfipA1Pe1LB+3rs0Kq1lR7AOGmwLo4KI+2aa5q8UPvwaP4obO6NnTqQRv MzqYKbqA2Wq0R0ljvvknpG8QsYcNzg0/XmsO/FoxeErzMVjBqLW60zuTbhiA2lpt qbOBb61XcY8fBe0HsVtA5Nhqz64WTndGpG3GeKZXZUz5ZyqqRik= -----END CERTIFICATE-----Generated at Sun Oct 25 19:52:31 2026 by rpki-client