$ rpki-client -vvvf rpki-rsync.idnic.net/repo/86f4d4f1-b36c-4a46-8844-4e6c7a3c97d9/0/A8D211A540A0A57C5D6ACB5032091B1A80BA458A.mft File: A8D211A540A0A57C5D6ACB5032091B1A80BA458A.mft (raw, json) Hash identifier: RAe3gZwgiuePRAJkH05m08EYZ/XniN09aujU8LgNJPA= Subject key identifier: 61:B1:D7:A1:FC:D7:FA:F2:DB:4C:FE:47:06:EF:0E:0D:F9:79:67:20 Authority key identifier: A8:D2:11:A5:40:A0:A5:7C:5D:6A:CB:50:32:09:1B:1A:80:BA:45:8A Certificate issuer: /CN=A8D211A540A0A57C5D6ACB5032091B1A80BA458A Certificate serial: 7D1D5E99195A16E09B3FB5BC4E47D940E38FA2B3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A8D211A540A0A57C5D6ACB5032091B1A80BA458A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/86f4d4f1-b36c-4a46-8844-4e6c7a3c97d9/0/A8D211A540A0A57C5D6ACB5032091B1A80BA458A.mft Manifest number: EB Signing time: Sat 24 Oct 2026 18:06:43 +0000 Manifest this update: Sat 24 Oct 2026 18:01:43 +0000 Manifest next update: Sun 25 Oct 2026 19:02:43 +0000 Files and hashes: 1: 3130332e37302e31362e302f32322d3232203d3e20313335343632.roa (hash: Tf1EVsRaCkdXitEPeo2GAGcjlLdYQ1D5kk2M9WCpy3U=) 2: 3130332e37302e31392e302f32342d3234203d3e20313335343632.roa (hash: 7evCo+jZlUXwDGTBsCsQhDg2DWHBDqS4cWsJw91trY0=) 3: 3130332e37302e31362e302f32342d3234203d3e20313335343632.roa (hash: SJ+P4+oX8hijYzZ9qA/WaUDV4gideRVgm7o6icDoWoM=) 4: A8D211A540A0A57C5D6ACB5032091B1A80BA458A.crl (hash: 0dUbd3EldkG1vMO0Rf2pm8fZrk7Vaq6yhTw1RQ4hEu0=) 5: 3130332e37302e31372e302f32342d3234203d3e20313335343632.roa (hash: lI29Pn9PS61mVywxJrefD11DZjjtEbyEF7MkqWi1LZ4=) 6: 3130332e37302e31382e302f32342d3234203d3e20313335343632.roa (hash: m9ehKEyZKrnBxPUxglJU8vra1GpJJTUpkzpv7UpDmeA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/86f4d4f1-b36c-4a46-8844-4e6c7a3c97d9/0/A8D211A540A0A57C5D6ACB5032091B1A80BA458A.crl rsync://rpki-rsync.idnic.net/repo/86f4d4f1-b36c-4a46-8844-4e6c7a3c97d9/0/A8D211A540A0A57C5D6ACB5032091B1A80BA458A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A8D211A540A0A57C5D6ACB5032091B1A80BA458A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 19:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:1d:5e:99:19:5a:16:e0:9b:3f:b5:bc:4e:47:d9:40:e3:8f:a2:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A8D211A540A0A57C5D6ACB5032091B1A80BA458A Validity Not Before: Oct 24 18:01:43 2026 GMT Not After : Oct 25 19:02:43 2026 GMT Subject: CN=61B1D7A1FCD7FAF2DB4CFE4706EF0E0DF9796720 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:16:1f:4b:9a:14:97:29:d0:04:88:9a:9d:d2: 12:09:79:da:51:fb:7d:c9:9f:b1:29:1c:5a:d5:83: e3:7a:7c:0f:9b:34:09:bc:9e:a3:00:c7:ae:a3:5b: 81:d8:65:ad:f1:37:da:2f:e8:ec:e5:a0:78:33:38: 60:6e:67:dd:29:2d:fb:b5:e5:b0:9d:63:17:03:9e: 15:a8:78:76:e2:42:fd:0d:71:e2:4a:b7:c2:f1:0e: 8e:ae:2d:13:0f:74:e3:70:3b:4e:e8:28:c1:f2:82: 55:1c:6b:f7:14:50:c3:c6:7c:c2:68:0d:b0:fa:b2: 8d:91:ac:57:08:bc:8f:dd:12:9f:3e:89:e1:23:7a: f1:28:b0:a0:28:0e:d7:f4:df:a0:13:10:df:34:37: bb:ce:30:3d:d6:f8:0b:be:95:be:51:53:93:e1:7e: f4:52:95:55:50:49:31:bd:96:c8:86:e0:77:41:e8: 57:6a:d6:d2:e8:56:64:84:1f:13:2f:d5:aa:8c:56: 87:36:0a:6d:29:03:54:6a:3d:b6:17:cb:9c:1f:17: 1b:c0:2f:e4:5b:3e:1f:63:3b:31:6b:a0:e2:d7:c0: be:2e:d9:3f:d1:43:04:aa:fc:e1:fa:4a:c2:c5:ec: 61:19:d7:90:4d:7d:af:d2:f7:04:98:69:99:7a:a7: 87:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:B1:D7:A1:FC:D7:FA:F2:DB:4C:FE:47:06:EF:0E:0D:F9:79:67:20 X509v3 Authority Key Identifier: keyid:A8:D2:11:A5:40:A0:A5:7C:5D:6A:CB:50:32:09:1B:1A:80:BA:45:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/86f4d4f1-b36c-4a46-8844-4e6c7a3c97d9/0/A8D211A540A0A57C5D6ACB5032091B1A80BA458A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A8D211A540A0A57C5D6ACB5032091B1A80BA458A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/86f4d4f1-b36c-4a46-8844-4e6c7a3c97d9/0/A8D211A540A0A57C5D6ACB5032091B1A80BA458A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:a1:b3:0c:5b:9f:b9:50:1d:2f:f1:72:fb:c6:fc:1f:f6:88: 1c:f8:46:d1:c0:b7:93:0b:ac:44:58:ff:40:37:2a:a5:50:0f: 68:04:dc:02:2c:a1:f5:00:85:1f:b1:eb:bc:85:e8:b0:bb:fd: e6:65:87:10:df:a7:f4:6e:cb:6a:44:e2:72:a3:98:22:52:a7: 7a:ac:87:2c:48:4b:77:9f:57:48:47:f4:b5:12:36:04:15:73: 7c:13:a1:af:5f:70:9e:33:aa:e7:fb:ab:93:c2:23:8a:32:a3: d9:55:13:db:16:42:84:cf:d4:62:39:17:4b:d0:44:5d:e9:54: d2:34:ab:64:b4:18:a0:03:ca:a6:92:f7:e6:03:4f:85:e7:44: 7f:cd:74:38:ba:8a:70:08:60:90:9a:00:0d:82:02:b2:cf:8c: 60:f6:0e:3b:6d:66:9f:67:64:7d:00:5e:ab:92:c7:d1:c7:6c: dd:65:49:ee:e0:1d:4a:8e:e1:ab:92:ad:19:20:b2:21:5c:ea: 07:3e:b3:c9:c6:4f:96:99:97:b9:ad:1c:10:0e:e3:2e:c4:d5: 08:26:67:c0:00:dc:fa:13:32:0e:78:61:33:0c:89:be:a9:21: 49:5d:94:9f:b7:69:73:2d:9f:a5:a8:71:fc:5a:6c:7e:81:06: 4f:d7:c1:02 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfR1emRlaFuCbP7W8TkfZQOOPorMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQThEMjExQTU0MEEwQTU3QzVENkFDQjUwMzIwOTFCMUE4 MEJBNDU4QTAeFw0yNjEwMjQxODAxNDNaFw0yNjEwMjUxOTAyNDNaMDMxMTAvBgNV BAMTKDYxQjFEN0ExRkNEN0ZBRjJEQjRDRkU0NzA2RUYwRTBERjk3OTY3MjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7Fh9LmhSXKdAEiJqd0hIJedpR +33Jn7EpHFrVg+N6fA+bNAm8nqMAx66jW4HYZa3xN9ov6OzloHgzOGBuZ90pLfu1 5bCdYxcDnhWoeHbiQv0NceJKt8LxDo6uLRMPdONwO07oKMHyglUca/cUUMPGfMJo DbD6so2RrFcIvI/dEp8+ieEjevEosKAoDtf036ATEN80N7vOMD3W+Au+lb5RU5Ph fvRSlVVQSTG9lsiG4HdB6Fdq1tLoVmSEHxMv1aqMVoc2Cm0pA1RqPbYXy5wfFxvA L+RbPh9jOzFroOLXwL4u2T/RQwSq/OH6SsLF7GEZ15BNfa/S9wSYaZl6p4cVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYbHXofzX+vLbTP5HBu8ODfl5ZyAwHwYDVR0j BBgwFoAUqNIRpUCgpXxdastQMgkbGoC6RYowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODZmNGQ0ZjEtYjM2Yy00YTQ2LTg4NDQtNGU2YzdhM2M5N2Q5LzAvQThEMjExQTU0 MEEwQTU3QzVENkFDQjUwMzIwOTFCMUE4MEJBNDU4QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BOEQyMTFBNTQwQTBBNTdDNUQ2QUNCNTAzMjA5MUIxQTgwQkE0 NThBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODZmNGQ0ZjEtYjM2Yy00YTQ2LTg4 NDQtNGU2YzdhM2M5N2Q5LzAvQThEMjExQTU0MEEwQTU3QzVENkFDQjUwMzIwOTFC MUE4MEJBNDU4QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABWhswxbn7lQHS/xcvvG/B/2iBz4RtHAt5ML rERY/0A3KqVQD2gE3AIsofUAhR+x67yF6LC7/eZlhxDfp/Ruy2pE4nKjmCJSp3qs hyxIS3efV0hH9LUSNgQVc3wToa9fcJ4zquf7q5PCI4oyo9lVE9sWQoTP1GI5F0vQ RF3pVNI0q2S0GKADyqaS9+YDT4XnRH/NdDi6inAIYJCaAA2CArLPjGD2DjttZp9n ZH0AXquSx9HHbN1lSe7gHUqO4auSrRkgsiFc6gc+s8nGT5aZl7mtHBAO4y7E1Qgm Z8AA3PoTMg54YTMMib6pIUldlJ+3aXMtn6WocfxabH6BBk/XwQI= -----END CERTIFICATE-----Generated at Sun Oct 25 05:11:43 2026 by rpki-client