$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/873409842DEE948D3DE05C618194C87A259E04BF.mft File: 873409842DEE948D3DE05C618194C87A259E04BF.mft (raw, json) Hash identifier: VtPeB/5tNHNbyWilNwOB3NCod+IFblS/nuw8jRF3QF8= Subject key identifier: 10:6F:F8:4D:27:E0:A4:2E:92:0F:AD:F7:25:12:2A:9B:4A:8E:18:1F Authority key identifier: 87:34:09:84:2D:EE:94:8D:3D:E0:5C:61:81:94:C8:7A:25:9E:04:BF Certificate issuer: /CN=873409842DEE948D3DE05C618194C87A259E04BF Certificate serial: 2C5171F13EB98B58609B302D11710FC367F1BC0B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/873409842DEE948D3DE05C618194C87A259E04BF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/873409842DEE948D3DE05C618194C87A259E04BF.mft Manifest number: E3 Signing time: Sun 18 Oct 2026 18:06:52 +0000 Manifest this update: Sun 18 Oct 2026 18:01:52 +0000 Manifest next update: Mon 19 Oct 2026 20:57:52 +0000 Files and hashes: 1: 873409842DEE948D3DE05C618194C87A259E04BF.crl (hash: +TzoCucO5EaHFlmhvgIZOdoSAQyAkewi8WlY/3ag9CA=) 2: 3130332e3135332e3234372e302f32342d3234203d3e20313430343735.roa (hash: OzhJdHffqoSTJ5pFjxmQ04VEvXqHaJWqkM8YRHVnaeQ=) 3: 323430363a346563303a3a2f33322d3332203d3e20313430343735.roa (hash: grkHY3zf57XsShC3GloC/Ysy8CRxkBA2HYvszXntAaM=) 4: 3130332e3135332e3234362e302f32342d3234203d3e20313430343735.roa (hash: M8QTZuDsRpJ1yY06WkCYeFwFPm5+TLSWxZVTx0+FX3U=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/873409842DEE948D3DE05C618194C87A259E04BF.crl rsync://rpki-rsync.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/873409842DEE948D3DE05C618194C87A259E04BF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/873409842DEE948D3DE05C618194C87A259E04BF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Oct 2026 18:59:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:51:71:f1:3e:b9:8b:58:60:9b:30:2d:11:71:0f:c3:67:f1:bc:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=873409842DEE948D3DE05C618194C87A259E04BF Validity Not Before: Oct 18 18:01:52 2026 GMT Not After : Oct 19 20:57:52 2026 GMT Subject: CN=106FF84D27E0A42E920FADF725122A9B4A8E181F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:be:09:68:9a:b0:30:a9:e9:d9:91:a0:a6:97: fd:1a:38:70:b0:fe:1c:4c:5c:4d:1a:be:38:20:7f: a7:3e:cd:52:8f:f3:37:94:98:41:b5:21:8c:4e:6c: ab:fa:0e:84:b8:1c:f4:93:e8:bb:08:e7:68:e8:ee: 18:14:a7:c3:71:f2:46:9c:cc:cc:d9:35:3a:24:2a: fb:2a:66:58:23:ee:86:97:f4:91:b2:36:5b:4d:40: 6e:e0:36:8b:c3:d5:f1:39:42:51:a9:cf:42:15:fb: 66:91:1e:34:c5:ed:ad:10:bd:bc:3a:ed:d3:a3:53: 29:9e:3d:d2:a4:4c:b3:77:6d:ac:e1:db:ca:3c:f8: 8e:d6:e9:f8:e4:43:bf:9d:25:c3:96:ff:b3:53:71: bf:d7:46:30:97:18:b1:57:03:a4:41:8f:ef:cb:d1: 20:0f:9f:b0:49:fa:d4:6f:ef:13:13:6d:dc:2d:cd: 1e:da:3d:a8:ac:26:26:b2:63:29:42:43:38:76:6c: 0f:91:01:87:70:13:d1:04:9e:65:7b:db:90:33:f3: e3:4d:26:a3:44:2d:c5:08:9b:c3:02:db:fc:b6:2f: c8:4a:2b:99:59:b6:49:6b:d3:f2:fb:45:d8:83:33: da:2d:63:4e:95:58:f8:7f:80:95:da:c7:80:7c:61: 12:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:6F:F8:4D:27:E0:A4:2E:92:0F:AD:F7:25:12:2A:9B:4A:8E:18:1F X509v3 Authority Key Identifier: keyid:87:34:09:84:2D:EE:94:8D:3D:E0:5C:61:81:94:C8:7A:25:9E:04:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/873409842DEE948D3DE05C618194C87A259E04BF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/873409842DEE948D3DE05C618194C87A259E04BF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/873409842DEE948D3DE05C618194C87A259E04BF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption dd:22:4e:0b:eb:55:9b:0d:5b:f3:95:2a:22:b6:3e:01:07:35: 51:33:82:d7:e7:e5:8d:a0:09:60:c8:78:cd:b1:ec:e6:55:70: d3:68:53:2a:42:21:ae:bf:c0:e0:17:ba:56:9f:35:cc:71:d3: 14:5d:83:03:7e:2c:8d:98:77:e2:75:9c:08:fa:48:29:7d:1d: 13:7e:79:23:9d:13:de:4b:f0:83:91:d3:3d:8a:a2:c0:aa:1e: d9:7b:db:01:0e:8c:03:c5:a1:7c:3d:b6:6a:12:cd:d3:04:3d: d3:1e:e0:50:92:b2:dc:eb:25:66:71:c6:ef:e2:af:a2:24:5c: 47:dc:0c:63:89:d7:e0:57:8d:ab:8c:9e:d7:b7:19:38:a6:88: 61:fe:69:18:49:6b:f9:2d:54:45:1c:f0:0d:e7:48:1a:58:0b: 7c:79:98:46:b7:53:7d:58:28:fa:92:76:fa:e3:a6:ff:de:3b: c0:01:81:1b:e4:aa:8d:cb:80:ee:41:40:22:19:ba:33:7f:65: 0e:ae:a0:c6:f3:79:cc:16:4a:9d:57:a4:ef:6b:fc:76:2e:02: c2:19:34:98:8f:17:2b:66:ea:30:b9:29:4c:db:02:95:ae:d4: f0:a4:16:c6:61:a8:1f:52:8f:82:27:4b:d4:06:1b:76:4e:1f: 3f:4c:30:e3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULFFx8T65i1hgmzAtEXEPw2fxvAswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODczNDA5ODQyREVFOTQ4RDNERTA1QzYxODE5NEM4N0Ey NTlFMDRCRjAeFw0yNjEwMTgxODAxNTJaFw0yNjEwMTkyMDU3NTJaMDMxMTAvBgNV BAMTKDEwNkZGODREMjdFMEE0MkU5MjBGQURGNzI1MTIyQTlCNEE4RTE4MUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFvglomrAwqenZkaCml/0aOHCw /hxMXE0avjggf6c+zVKP8zeUmEG1IYxObKv6DoS4HPST6LsI52jo7hgUp8Nx8kac zMzZNTokKvsqZlgj7oaX9JGyNltNQG7gNovD1fE5QlGpz0IV+2aRHjTF7a0Qvbw6 7dOjUymePdKkTLN3bazh28o8+I7W6fjkQ7+dJcOW/7NTcb/XRjCXGLFXA6RBj+/L 0SAPn7BJ+tRv7xMTbdwtzR7aPaisJiayYylCQzh2bA+RAYdwE9EEnmV725Az8+NN JqNELcUIm8MC2/y2L8hKK5lZtklr0/L7RdiDM9otY06VWPh/gJXax4B8YRKzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEG/4TSfgpC6SD633JRIqm0qOGB8wHwYDVR0j BBgwFoAUhzQJhC3ulI094FxhgZTIeiWeBL8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGRjZjQwNjctYTY5ZC00OTA4LWJlZTgtYjQ2NTViZGMxNWY4LzAvODczNDA5ODQy REVFOTQ4RDNERTA1QzYxODE5NEM4N0EyNTlFMDRCRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NzM0MDk4NDJERUU5NDhEM0RFMDVDNjE4MTk0Qzg3QTI1OUUw NEJGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGRjZjQwNjctYTY5ZC00OTA4LWJl ZTgtYjQ2NTViZGMxNWY4LzAvODczNDA5ODQyREVFOTQ4RDNERTA1QzYxODE5NEM4 N0EyNTlFMDRCRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAN0iTgvrVZsNW/OVKiK2PgEHNVEzgtfn5Y2g CWDIeM2x7OZVcNNoUypCIa6/wOAXulafNcxx0xRdgwN+LI2Yd+J1nAj6SCl9HRN+ eSOdE95L8IOR0z2KosCqHtl72wEOjAPFoXw9tmoSzdMEPdMe4FCSstzrJWZxxu/i r6IkXEfcDGOJ1+BXjauMnte3GTimiGH+aRhJa/ktVEUc8A3nSBpYC3x5mEa3U31Y KPqSdvrjpv/eO8ABgRvkqo3LgO5BQCIZujN/ZQ6uoMbzecwWSp1XpO9r/HYuAsIZ NJiPFytm6jC5KUzbApWu1PCkFsZhqB9Sj4InS9QGG3ZOHz9MMOM= -----END CERTIFICATE-----Generated at Mon Oct 19 01:43:59 2026 by rpki-client