$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5d5af22c-7e3e-40b5-ac50-637772a95c21/0/8FFA8BB9C09DC4CA42C95C817C0FFD95B14C896C.mft File: 8FFA8BB9C09DC4CA42C95C817C0FFD95B14C896C.mft (raw, json) Hash identifier: L4iYAnd2UTy5XOBYDgyybKAG5MI1gTq7OEVcP4fSmE4= Subject key identifier: A0:0B:D9:0D:A2:CF:1B:EC:9B:C3:D4:AB:9E:35:F0:5F:56:04:28:C1 Authority key identifier: 8F:FA:8B:B9:C0:9D:C4:CA:42:C9:5C:81:7C:0F:FD:95:B1:4C:89:6C Certificate issuer: /CN=8FFA8BB9C09DC4CA42C95C817C0FFD95B14C896C Certificate serial: 043EE3331DDD897D932EC7CA209F761CB5EB1F35 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8FFA8BB9C09DC4CA42C95C817C0FFD95B14C896C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5d5af22c-7e3e-40b5-ac50-637772a95c21/0/8FFA8BB9C09DC4CA42C95C817C0FFD95B14C896C.mft Manifest number: E9 Signing time: Sat 24 Oct 2026 07:33:17 +0000 Manifest this update: Sat 24 Oct 2026 07:28:17 +0000 Manifest next update: Sun 25 Oct 2026 07:36:17 +0000 Files and hashes: 1: 3130332e3233362e3133302e302f32342d3234203d3e20313531353435.roa (hash: kAF9XX+k/l/rK1GEr+bjFHX1YeYovpaBVZcUfCaqwVQ=) 2: 3130332e3233362e3133302e302f32332d3233203d3e20313531353435.roa (hash: gHaL9xm6upsCMiwuTIzMiljzjIKdP3tM2s5bdfg68uM=) 3: 8FFA8BB9C09DC4CA42C95C817C0FFD95B14C896C.crl (hash: pe0BwRUHMBIr3WFSSJpUbVZjI3C+Th++hs11dtRlzes=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5d5af22c-7e3e-40b5-ac50-637772a95c21/0/8FFA8BB9C09DC4CA42C95C817C0FFD95B14C896C.crl rsync://rpki-rsync.idnic.net/repo/5d5af22c-7e3e-40b5-ac50-637772a95c21/0/8FFA8BB9C09DC4CA42C95C817C0FFD95B14C896C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8FFA8BB9C09DC4CA42C95C817C0FFD95B14C896C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 07:36:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:3e:e3:33:1d:dd:89:7d:93:2e:c7:ca:20:9f:76:1c:b5:eb:1f:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FFA8BB9C09DC4CA42C95C817C0FFD95B14C896C Validity Not Before: Oct 24 07:28:17 2026 GMT Not After : Oct 25 07:36:17 2026 GMT Subject: CN=A00BD90DA2CF1BEC9BC3D4AB9E35F05F560428C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c8:1c:f3:5e:28:03:06:74:e7:05:01:c2:70: b2:2c:b8:36:63:1b:c4:be:16:59:bf:d0:e7:6e:d5: 7e:48:a8:f9:63:1c:d3:46:34:a7:b3:5a:4d:9f:3e: 1a:39:96:5f:30:9a:5c:88:a2:84:0c:66:f9:10:65: e4:4c:25:2a:bd:28:15:99:b9:75:89:a4:3b:b3:74: 7a:b0:3a:ac:bc:9e:bc:f1:6b:42:9c:e0:0f:a4:ac: e8:aa:9b:be:5e:16:fb:54:df:4e:1e:df:2e:96:bb: a8:5c:87:a0:3c:e2:0f:8d:27:96:90:10:00:07:72: 4c:52:9a:04:c1:3e:da:4f:d7:21:92:4a:15:9e:5b: 59:91:79:c0:41:cf:f4:b7:53:b1:f4:af:7b:f7:8a: c1:74:01:e1:83:95:b9:2a:39:fe:79:82:10:31:08: 12:ed:13:26:a9:3b:a4:7e:11:e5:4e:ca:e1:f0:62: fa:a7:5a:aa:6f:68:08:9a:a2:5f:6a:29:34:63:61: f4:32:e3:84:b8:2e:d6:97:b6:77:13:89:77:6e:0e: 9c:fb:c6:16:32:09:c0:23:20:cd:6e:a6:a8:53:6b: a5:79:64:a6:54:ee:5b:f7:aa:55:a0:90:bb:95:56: 7d:9a:ed:09:b3:93:a9:54:6c:62:f5:b4:56:77:d7: 47:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:0B:D9:0D:A2:CF:1B:EC:9B:C3:D4:AB:9E:35:F0:5F:56:04:28:C1 X509v3 Authority Key Identifier: keyid:8F:FA:8B:B9:C0:9D:C4:CA:42:C9:5C:81:7C:0F:FD:95:B1:4C:89:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5d5af22c-7e3e-40b5-ac50-637772a95c21/0/8FFA8BB9C09DC4CA42C95C817C0FFD95B14C896C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8FFA8BB9C09DC4CA42C95C817C0FFD95B14C896C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5d5af22c-7e3e-40b5-ac50-637772a95c21/0/8FFA8BB9C09DC4CA42C95C817C0FFD95B14C896C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:d8:c3:c6:68:1e:36:a2:16:d7:1c:f6:7e:06:be:9d:60:4c: e5:b6:e3:ef:f7:61:fd:ed:62:73:79:03:78:3b:94:bf:8f:5f: e4:db:d1:d7:62:48:90:19:2c:5d:3a:4a:a9:fd:23:54:2d:21: 9d:0c:57:ad:d3:3e:8f:e4:d2:cc:01:69:d1:ba:3b:f4:d5:5d: ba:12:23:40:18:92:43:51:65:64:6e:9e:73:07:3f:e1:6d:ca: eb:17:7c:9f:27:10:df:9d:33:17:be:55:05:e1:12:36:ad:74: 6c:ea:f6:db:63:43:bc:d8:6d:ec:56:5f:a6:9c:2a:41:e9:43: 56:f7:1d:1f:95:f9:42:ac:6f:f7:c1:05:24:6e:6b:67:9a:7d: cd:2f:b6:9f:62:9d:96:14:30:fa:d5:dc:b5:9f:58:d4:23:dc: 2d:f5:e3:62:de:f3:37:2b:24:82:94:5b:75:e9:d9:ef:fe:ba: 65:61:77:5a:7c:27:64:f4:a0:0a:d8:1a:df:2e:8d:07:98:1c: db:58:ee:20:38:04:05:36:36:00:20:84:13:87:78:47:96:d8: bf:86:58:d7:08:f7:e9:63:0a:61:7c:39:af:9d:7a:c2:36:60: 12:a1:c4:f5:47:d7:a5:ef:89:84:96:8f:d1:47:5a:22:35:b9: 46:95:5a:3a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBD7jMx3diX2TLsfKIJ92HLXrHzUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZGQThCQjlDMDlEQzRDQTQyQzk1QzgxN0MwRkZEOTVC MTRDODk2QzAeFw0yNjEwMjQwNzI4MTdaFw0yNjEwMjUwNzM2MTdaMDMxMTAvBgNV BAMTKEEwMEJEOTBEQTJDRjFCRUM5QkMzRDRBQjlFMzVGMDVGNTYwNDI4QzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5yBzzXigDBnTnBQHCcLIsuDZj G8S+Flm/0Odu1X5IqPljHNNGNKezWk2fPho5ll8wmlyIooQMZvkQZeRMJSq9KBWZ uXWJpDuzdHqwOqy8nrzxa0Kc4A+krOiqm75eFvtU304e3y6Wu6hch6A84g+NJ5aQ EAAHckxSmgTBPtpP1yGSShWeW1mRecBBz/S3U7H0r3v3isF0AeGDlbkqOf55ghAx CBLtEyapO6R+EeVOyuHwYvqnWqpvaAiaol9qKTRjYfQy44S4LtaXtncTiXduDpz7 xhYyCcAjIM1upqhTa6V5ZKZU7lv3qlWgkLuVVn2a7Qmzk6lUbGL1tFZ310fbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoAvZDaLPG+ybw9SrnjXwX1YEKMEwHwYDVR0j BBgwFoAUj/qLucCdxMpCyVyBfA/9lbFMiWwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWQ1YWYyMmMtN2UzZS00MGI1LWFjNTAtNjM3NzcyYTk1YzIxLzAvOEZGQThCQjlD MDlEQzRDQTQyQzk1QzgxN0MwRkZEOTVCMTRDODk2Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84RkZBOEJCOUMwOURDNENBNDJDOTVDODE3QzBGRkQ5NUIxNEM4 OTZDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWQ1YWYyMmMtN2UzZS00MGI1LWFj NTAtNjM3NzcyYTk1YzIxLzAvOEZGQThCQjlDMDlEQzRDQTQyQzk1QzgxN0MwRkZE OTVCMTRDODk2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGLYw8ZoHjaiFtcc9n4Gvp1gTOW24+/3Yf3t YnN5A3g7lL+PX+Tb0ddiSJAZLF06Sqn9I1QtIZ0MV63TPo/k0swBadG6O/TVXboS I0AYkkNRZWRunnMHP+FtyusXfJ8nEN+dMxe+VQXhEjatdGzq9ttjQ7zYbexWX6ac KkHpQ1b3HR+V+UKsb/fBBSRua2eafc0vtp9inZYUMPrV3LWfWNQj3C3142Le8zcr JIKUW3Xp2e/+umVhd1p8J2T0oArYGt8ujQeYHNtY7iA4BAU2NgAghBOHeEeW2L+G WNcI9+ljCmF8Oa+desI2YBKhxPVH16XviYSWj9FHWiI1uUaVWjo= -----END CERTIFICATE-----Generated at Sat Oct 24 20:49:28 2026 by rpki-client