$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/8BE5D6878B464D9FA654023C63F4762E67599164.mft File: 8BE5D6878B464D9FA654023C63F4762E67599164.mft (raw, json) Hash identifier: hWXV9cpEd5FCkY0Y3taTdGTZHVpXj8LIk6XNbw5qMCQ= Subject key identifier: D9:AC:C7:20:AB:60:73:53:26:37:DA:18:78:03:FC:05:F9:51:B2:34 Authority key identifier: 8B:E5:D6:87:8B:46:4D:9F:A6:54:02:3C:63:F4:76:2E:67:59:91:64 Certificate issuer: /CN=8BE5D6878B464D9FA654023C63F4762E67599164 Certificate serial: 52A20AB94924021D2A915E31BA4F72F7DB39079E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8BE5D6878B464D9FA654023C63F4762E67599164.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/8BE5D6878B464D9FA654023C63F4762E67599164.mft Manifest number: E2 Signing time: Mon 19 Oct 2026 08:30:09 +0000 Manifest this update: Mon 19 Oct 2026 08:25:09 +0000 Manifest next update: Tue 20 Oct 2026 11:18:09 +0000 Files and hashes: 1: 8BE5D6878B464D9FA654023C63F4762E67599164.crl (hash: vVWh2uc8105Ox77PuFDZ1gk61hQ5yVJyDH/WwT9N5lU=) 2: 3130332e3138372e38362e302f32332d3234203d3e20313439373138.roa (hash: j1q7Tjwd0n3nZPl8Mige83XpdVNq8A8OBRmyY8xB6w0=) 3: 3130332e3138372e38372e302f32342d3234203d3e20313439373138.roa (hash: gsCaOX96MCEfxecmW7euDwqW3eYjaAOY81K1Ab8R/sk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/8BE5D6878B464D9FA654023C63F4762E67599164.crl rsync://rpki-rsync.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/8BE5D6878B464D9FA654023C63F4762E67599164.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8BE5D6878B464D9FA654023C63F4762E67599164.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 Oct 2026 11:18:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:a2:0a:b9:49:24:02:1d:2a:91:5e:31:ba:4f:72:f7:db:39:07:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BE5D6878B464D9FA654023C63F4762E67599164 Validity Not Before: Oct 19 08:25:09 2026 GMT Not After : Oct 20 11:18:09 2026 GMT Subject: CN=D9ACC720AB6073532637DA187803FC05F951B234 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:43:27:d1:a6:7a:75:9a:22:bc:70:14:bd:ef: 36:a1:01:b6:9d:63:f2:28:6e:f0:1c:c5:7c:07:d4: 68:70:d5:87:98:d8:32:be:af:08:46:9f:10:5e:75: 12:7f:f7:4b:6f:11:b5:24:31:75:cb:e0:dd:83:d3: 19:34:0f:d0:a3:49:07:53:40:b6:7e:e4:a3:1c:e1: 05:7a:08:f1:0a:3c:4d:1d:bf:6c:61:5b:0a:2e:f8: c8:dd:9a:df:5b:19:74:52:b1:7d:b1:fc:82:d7:f1: 04:d1:71:f5:18:d5:09:c3:41:35:99:56:14:5e:2a: 8f:64:15:16:ac:a4:2c:c0:2b:75:12:3c:76:63:95: ab:a2:e9:f5:25:01:12:22:94:05:c3:92:22:c9:56: f6:d7:7d:f9:e1:6b:9e:c3:1f:dd:5f:8a:bc:c7:3a: f7:eb:2d:33:07:43:b4:d5:54:9e:f2:cb:ef:41:e4: db:07:6c:f9:9c:87:fb:1f:6e:ba:33:29:e6:fd:f8: 1b:25:07:70:22:12:ed:83:f3:4e:c9:96:f5:07:f0: 21:8b:a8:28:fb:69:1c:08:e7:de:27:04:b4:0d:37: ec:40:da:dc:6d:71:f5:c8:d6:a2:93:1f:4b:ec:91: 06:b5:6a:c5:c5:d4:2a:f9:30:35:fc:cb:f5:9b:86: 99:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:AC:C7:20:AB:60:73:53:26:37:DA:18:78:03:FC:05:F9:51:B2:34 X509v3 Authority Key Identifier: keyid:8B:E5:D6:87:8B:46:4D:9F:A6:54:02:3C:63:F4:76:2E:67:59:91:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/8BE5D6878B464D9FA654023C63F4762E67599164.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8BE5D6878B464D9FA654023C63F4762E67599164.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7b7ef515-8564-41e8-9d20-2d33d45ccbd6/0/8BE5D6878B464D9FA654023C63F4762E67599164.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:5a:19:97:43:18:48:41:1a:d5:e2:de:19:c7:f6:e5:f3:b3: 0e:e3:cd:c3:bb:b0:f3:0e:f3:8c:29:13:3c:8b:73:8e:6d:2f: e9:20:74:0a:0c:71:fe:fb:96:f1:db:35:3e:38:c8:89:e5:90: 92:2a:79:bc:76:cc:49:98:25:e8:8e:4f:6a:69:68:aa:ea:1d: 62:e1:80:c9:5b:5b:57:27:47:95:db:bc:e1:ff:fa:9c:3c:ea: 1e:7e:88:5f:9b:36:a6:e1:75:82:b6:5c:4a:60:03:60:38:21: 0e:38:5f:c2:52:f9:b6:46:09:cc:69:c2:2b:ca:95:d8:77:37: c1:f3:fe:ed:8d:a5:0c:fb:d7:55:c4:10:3e:49:26:57:b1:ca: a6:22:dd:a5:e9:eb:f0:a2:ca:67:01:fe:42:13:03:29:1f:b7: 7c:8b:b7:81:a3:f9:04:f2:3f:f7:15:dc:18:5b:95:cb:95:16: 83:0a:00:8d:43:0c:94:7c:24:67:34:7c:74:19:51:96:c0:6f: 55:89:73:35:ff:2b:75:a2:d2:db:61:fb:ac:b4:74:6d:83:ca: d0:7c:80:26:2c:bd:3d:6d:a7:c7:9c:79:8d:9e:ee:af:b5:99: 94:18:45:0d:e5:88:e9:98:98:93:f6:a5:19:a7:b2:97:46:26: 43:91:d8:8c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUqIKuUkkAh0qkV4xuk9y99s5B54wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJFNUQ2ODc4QjQ2NEQ5RkE2NTQwMjNDNjNGNDc2MkU2 NzU5OTE2NDAeFw0yNjEwMTkwODI1MDlaFw0yNjEwMjAxMTE4MDlaMDMxMTAvBgNV BAMTKEQ5QUNDNzIwQUI2MDczNTMyNjM3REExODc4MDNGQzA1Rjk1MUIyMzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPQyfRpnp1miK8cBS97zahAbad Y/IobvAcxXwH1Ghw1YeY2DK+rwhGnxBedRJ/90tvEbUkMXXL4N2D0xk0D9CjSQdT QLZ+5KMc4QV6CPEKPE0dv2xhWwou+Mjdmt9bGXRSsX2x/ILX8QTRcfUY1QnDQTWZ VhReKo9kFRaspCzAK3USPHZjlaui6fUlARIilAXDkiLJVvbXffnha57DH91firzH OvfrLTMHQ7TVVJ7yy+9B5NsHbPmch/sfbrozKeb9+BslB3AiEu2D807JlvUH8CGL qCj7aRwI594nBLQNN+xA2txtcfXI1qKTH0vskQa1asXF1Cr5MDX8y/WbhpmzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2azHIKtgc1MmN9oYeAP8BflRsjQwHwYDVR0j BBgwFoAUi+XWh4tGTZ+mVAI8Y/R2LmdZkWQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2I3ZWY1MTUtODU2NC00MWU4LTlkMjAtMmQzM2Q0NWNjYmQ2LzAvOEJFNUQ2ODc4 QjQ2NEQ5RkE2NTQwMjNDNjNGNDc2MkU2NzU5OTE2NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84QkU1RDY4NzhCNDY0RDlGQTY1NDAyM0M2M0Y0NzYyRTY3NTk5 MTY0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2I3ZWY1MTUtODU2NC00MWU4LTlk MjAtMmQzM2Q0NWNjYmQ2LzAvOEJFNUQ2ODc4QjQ2NEQ5RkE2NTQwMjNDNjNGNDc2 MkU2NzU5OTE2NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE5aGZdDGEhBGtXi3hnH9uXzsw7jzcO7sPMO 84wpEzyLc45tL+kgdAoMcf77lvHbNT44yInlkJIqebx2zEmYJeiOT2ppaKrqHWLh gMlbW1cnR5XbvOH/+pw86h5+iF+bNqbhdYK2XEpgA2A4IQ44X8JS+bZGCcxpwivK ldh3N8Hz/u2NpQz711XEED5JJlexyqYi3aXp6/CiymcB/kITAykft3yLt4Gj+QTy P/cV3BhblcuVFoMKAI1DDJR8JGc0fHQZUZbAb1WJczX/K3Wi0tth+6y0dG2DytB8 gCYsvT1tp8eceY2e7q+1mZQYRQ3liOmYmJP2pRmnspdGJkOR2Iw= -----END CERTIFICATE-----Generated at Mon Oct 19 21:56:33 2026 by rpki-client