$ rpki-client -vvvf rpki-rsync.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/D8435659F33EE1F7005A21C1387F49D353431808.mft File: D8435659F33EE1F7005A21C1387F49D353431808.mft (raw, json) Hash identifier: WWUULpODbrnV6BjGksdlS/nj+2cEF6yJSpbKOffTzgg= Subject key identifier: C7:D2:6F:F8:AF:59:9E:A9:6B:BF:9C:11:4C:3D:4A:E5:22:FE:9F:04 Authority key identifier: D8:43:56:59:F3:3E:E1:F7:00:5A:21:C1:38:7F:49:D3:53:43:18:08 Certificate issuer: /CN=D8435659F33EE1F7005A21C1387F49D353431808 Certificate serial: 55C063FD9E39AD44D3F838B0F577D22C9BEAB4A6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D8435659F33EE1F7005A21C1387F49D353431808.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/D8435659F33EE1F7005A21C1387F49D353431808.mft Manifest number: EE Signing time: Wed 28 Oct 2026 19:29:17 +0000 Manifest this update: Wed 28 Oct 2026 19:24:17 +0000 Manifest next update: Thu 29 Oct 2026 21:43:17 +0000 Files and hashes: 1: 323430323a653330303a3a2f33322d3438203d3e20313331373036.roa (hash: nwbiSYQUIY7u5484W08oCWpHX2RPW6F76Z3A6cL7rsY=) 2: 3132312e3130312e3132382e302f32312d3234203d3e20313331373036.roa (hash: DR008bVSYXJm82RMo+BhRQvkIWKNDedVtmRpjzWrQic=) 3: 3130332e3234372e31342e302f32332d3234203d3e20313331373036.roa (hash: blqaAQUh+/Ci23PSpz6kWjhOXoOQ7V7lhdmAJgQyDKE=) 4: 3130332e3234372e31322e302f32342d3234203d3e203535363935.roa (hash: ATVTOuHtUSrfebW1xU18JBrcd7qLtJdgSsLLVk33uGM=) 5: D8435659F33EE1F7005A21C1387F49D353431808.crl (hash: 49t3KnJpAEi5rSXdan+sie7S/oBBT68IGd4r172B0VM=) 6: 3130332e3234372e31332e302f32342d3234203d3e20313331373036.roa (hash: z4cKVwkKHopCzCusKw3/HTDbOMxbEcb0WxL0/PEi5qo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/D8435659F33EE1F7005A21C1387F49D353431808.crl rsync://rpki-rsync.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/D8435659F33EE1F7005A21C1387F49D353431808.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D8435659F33EE1F7005A21C1387F49D353431808.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 29 Oct 2026 21:43:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:c0:63:fd:9e:39:ad:44:d3:f8:38:b0:f5:77:d2:2c:9b:ea:b4:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D8435659F33EE1F7005A21C1387F49D353431808 Validity Not Before: Oct 28 19:24:17 2026 GMT Not After : Oct 29 21:43:17 2026 GMT Subject: CN=C7D26FF8AF599EA96BBF9C114C3D4AE522FE9F04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:17:b4:8f:ce:10:d8:5f:eb:f9:26:7a:00:e6: 7b:52:15:f5:94:58:47:06:49:24:00:6f:21:ed:2c: 1e:7b:07:8e:71:61:d9:ad:e6:9a:76:8e:b7:fd:07: cc:51:4c:97:1b:2c:f9:1d:38:60:cf:6e:e4:79:e0: e3:0a:03:25:10:24:00:e9:1c:e8:2c:7c:bf:f0:26: ad:6d:7c:e0:26:fa:7f:36:b9:28:a5:1f:28:11:b2: a7:57:4d:b4:77:6e:f0:f1:e7:5d:f1:18:1e:2e:ef: 96:bf:74:26:65:c1:29:58:00:f0:f6:93:75:7b:47: 3f:c6:a8:01:32:2a:7c:5e:08:14:7f:6c:4b:82:69: 45:eb:ec:20:71:ce:ef:47:7e:5f:ce:fb:61:60:a2: 1d:f4:11:99:ba:04:a9:98:23:da:99:27:70:04:4f: 45:46:7f:f1:ae:fd:59:66:a4:54:43:cf:3d:40:04: d4:32:54:d2:e4:41:54:0f:0d:28:fe:ce:60:19:98: 11:a0:e1:75:1b:95:7f:5b:21:10:69:07:65:a7:ce: 41:92:f2:86:36:b4:d0:52:fe:fe:e6:63:96:03:89: 75:3c:af:96:5d:ba:39:dc:61:3d:e8:ba:04:23:e6: b7:5d:bf:66:57:8d:a8:13:61:51:79:4d:93:06:0b: a2:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:D2:6F:F8:AF:59:9E:A9:6B:BF:9C:11:4C:3D:4A:E5:22:FE:9F:04 X509v3 Authority Key Identifier: keyid:D8:43:56:59:F3:3E:E1:F7:00:5A:21:C1:38:7F:49:D3:53:43:18:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/D8435659F33EE1F7005A21C1387F49D353431808.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D8435659F33EE1F7005A21C1387F49D353431808.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/D8435659F33EE1F7005A21C1387F49D353431808.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:7d:4d:79:14:a9:a4:51:d0:4d:bf:0e:59:4b:17:e4:6b:40: ef:0c:73:b5:d4:3b:20:eb:e9:f2:ab:f1:fc:7e:ad:40:f1:87: 89:04:75:2a:31:4e:86:a0:fa:2a:99:83:af:4b:bc:21:d3:37: 3f:52:cb:2b:55:59:57:30:17:8b:23:bd:9a:e6:bd:b9:4d:1f: a4:25:dd:9b:65:c1:7b:ba:8e:f9:ed:38:50:b4:60:7a:1d:20: 67:65:54:ea:a2:d5:4c:90:32:86:37:3d:c5:46:0a:5b:19:bd: 23:8f:8b:37:01:28:bb:fd:49:0b:3c:f6:57:fc:63:3d:c9:17: 06:45:6b:4b:30:27:d1:2e:83:a4:35:09:c4:59:98:80:fb:2c: 16:41:71:9c:79:b1:b2:54:35:58:75:c3:37:a0:c1:4a:68:f5: 75:d6:77:ad:f3:df:47:a1:fd:94:3a:35:ae:01:f2:dc:a3:5e: 98:9a:5a:18:ef:e2:ba:3c:64:3f:ef:68:67:05:7e:a8:13:c8: 79:ba:57:cb:9c:bd:13:a6:ef:01:3e:b3:fb:88:a0:fe:fb:83: b1:43:4c:9a:ed:b8:02:5d:19:f5:62:0c:ae:fa:45:cc:b2:0e: 9a:84:80:6e:ac:42:a2:32:14:ed:af:97:fa:5c:74:49:93:c9: 35:de:67:fd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVcBj/Z45rUTT+Diw9XfSLJvqtKYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDg0MzU2NTlGMzNFRTFGNzAwNUEyMUMxMzg3RjQ5RDM1 MzQzMTgwODAeFw0yNjEwMjgxOTI0MTdaFw0yNjEwMjkyMTQzMTdaMDMxMTAvBgNV BAMTKEM3RDI2RkY4QUY1OTlFQTk2QkJGOUMxMTRDM0Q0QUU1MjJGRTlGMDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtF7SPzhDYX+v5JnoA5ntSFfWU WEcGSSQAbyHtLB57B45xYdmt5pp2jrf9B8xRTJcbLPkdOGDPbuR54OMKAyUQJADp HOgsfL/wJq1tfOAm+n82uSilHygRsqdXTbR3bvDx513xGB4u75a/dCZlwSlYAPD2 k3V7Rz/GqAEyKnxeCBR/bEuCaUXr7CBxzu9Hfl/O+2Fgoh30EZm6BKmYI9qZJ3AE T0VGf/Gu/VlmpFRDzz1ABNQyVNLkQVQPDSj+zmAZmBGg4XUblX9bIRBpB2WnzkGS 8oY2tNBS/v7mY5YDiXU8r5ZdujncYT3ougQj5rddv2ZXjagTYVF5TZMGC6JbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUx9Jv+K9Znqlrv5wRTD1K5SL+nwQwHwYDVR0j BBgwFoAU2ENWWfM+4fcAWiHBOH9J01NDGAgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTI3YTZmMzQtMWI2ZS00ZTkyLWIyZDItMGI5MzAxYTY2NmE1LzAvRDg0MzU2NTlG MzNFRTFGNzAwNUEyMUMxMzg3RjQ5RDM1MzQzMTgwOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EODQzNTY1OUYzM0VFMUY3MDA1QTIxQzEzODdGNDlEMzUzNDMx ODA4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTI3YTZmMzQtMWI2ZS00ZTkyLWIy ZDItMGI5MzAxYTY2NmE1LzAvRDg0MzU2NTlGMzNFRTFGNzAwNUEyMUMxMzg3RjQ5 RDM1MzQzMTgwOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI19TXkUqaRR0E2/DllLF+RrQO8Mc7XUOyDr 6fKr8fx+rUDxh4kEdSoxToag+iqZg69LvCHTNz9SyytVWVcwF4sjvZrmvblNH6Ql 3ZtlwXu6jvntOFC0YHodIGdlVOqi1UyQMoY3PcVGClsZvSOPizcBKLv9SQs89lf8 Yz3JFwZFa0swJ9Eug6Q1CcRZmID7LBZBcZx5sbJUNVh1wzegwUpo9XXWd63z30eh /ZQ6Na4B8tyjXpiaWhjv4ro8ZD/vaGcFfqgTyHm6V8ucvROm7wE+s/uIoP77g7FD TJrtuAJdGfViDK76RcyyDpqEgG6sQqIyFO2vl/pcdEmTyTXeZ/0= -----END CERTIFICATE-----Generated at Thu Oct 29 03:38:38 2026 by rpki-client