$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ad87beed-6330-4f33-9105-87722cdf2dd0/0/8703BB6F1EBC7AE2FE80DCB9295BC8682990B4B2.mft File: 8703BB6F1EBC7AE2FE80DCB9295BC8682990B4B2.mft (raw, json) Hash identifier: 5SXZzLJBmTXLJSp0QnDnh3ikVc8gCvR2wrWDzHqAz/g= Subject key identifier: E4:24:6F:4A:62:CE:00:9B:B1:AA:E7:E8:AD:50:CB:B4:35:01:A5:A0 Authority key identifier: 87:03:BB:6F:1E:BC:7A:E2:FE:80:DC:B9:29:5B:C8:68:29:90:B4:B2 Certificate issuer: /CN=8703BB6F1EBC7AE2FE80DCB9295BC8682990B4B2 Certificate serial: 4083497FCE6D9564B2F23D62BE5879C04E16F555 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8703BB6F1EBC7AE2FE80DCB9295BC8682990B4B2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ad87beed-6330-4f33-9105-87722cdf2dd0/0/8703BB6F1EBC7AE2FE80DCB9295BC8682990B4B2.mft Manifest number: D5 Signing time: Thu 08 Oct 2026 18:34:53 +0000 Manifest this update: Thu 08 Oct 2026 18:29:53 +0000 Manifest next update: Fri 09 Oct 2026 21:04:53 +0000 Files and hashes: 1: 3130332e3136342e3137302e302f32332d3234203d3e203137393935.roa (hash: TG9ZchK6MwAHkiaJ/8wY22oJErP/aDt3mOhVppYOUpA=) 2: 8703BB6F1EBC7AE2FE80DCB9295BC8682990B4B2.crl (hash: Xyd+t3LVt1eNGW1KOZ41WPE/9mXUkM71b72ffA3ArdI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ad87beed-6330-4f33-9105-87722cdf2dd0/0/8703BB6F1EBC7AE2FE80DCB9295BC8682990B4B2.crl rsync://rpki-rsync.idnic.net/repo/ad87beed-6330-4f33-9105-87722cdf2dd0/0/8703BB6F1EBC7AE2FE80DCB9295BC8682990B4B2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8703BB6F1EBC7AE2FE80DCB9295BC8682990B4B2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 Oct 2026 11:17:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:83:49:7f:ce:6d:95:64:b2:f2:3d:62:be:58:79:c0:4e:16:f5:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8703BB6F1EBC7AE2FE80DCB9295BC8682990B4B2 Validity Not Before: Oct 8 18:29:53 2026 GMT Not After : Oct 9 21:04:53 2026 GMT Subject: CN=E4246F4A62CE009BB1AAE7E8AD50CBB43501A5A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:ab:f3:ea:d3:55:3d:d9:ab:53:2b:2e:52:e5: 8d:24:36:e9:03:93:5e:f3:80:3d:41:01:2e:d4:5f: ba:ab:0c:03:2d:6a:be:6d:e4:7a:83:1a:d4:32:75: 52:67:ef:16:ef:a1:f6:83:5a:5a:ee:e2:85:83:b5: 03:bf:d1:71:a2:64:cc:0b:48:0c:37:95:9e:ab:d7: 08:8e:2b:1e:2d:2b:ab:9f:f7:73:86:76:b9:0f:26: 04:ae:60:ca:6d:74:39:10:96:b8:0b:1d:b1:65:a5: 14:4c:ea:40:88:85:00:0d:ea:56:90:d3:2b:e7:ad: 78:4a:72:f6:99:ca:32:29:71:60:66:26:90:53:bd: e4:82:db:d9:b9:d1:df:0d:c4:18:6a:40:2f:43:49: d4:f1:99:ba:0f:6d:7b:6b:65:f0:d3:29:65:3e:cf: d3:ff:0b:19:6a:04:67:b0:b9:5f:b6:39:9d:6d:97: 70:25:06:ce:66:ca:de:c4:33:38:21:e7:1e:a9:6e: a4:7c:9d:81:89:66:d5:9f:e5:1a:4e:14:88:6b:37: c1:af:d8:7a:35:6e:05:c2:81:f6:ca:84:a9:1f:79: 12:51:14:de:ff:47:98:26:33:ac:b2:1c:a9:c2:b3: ca:52:ce:04:22:a8:9c:00:a9:51:65:50:9d:e7:07: 07:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:24:6F:4A:62:CE:00:9B:B1:AA:E7:E8:AD:50:CB:B4:35:01:A5:A0 X509v3 Authority Key Identifier: keyid:87:03:BB:6F:1E:BC:7A:E2:FE:80:DC:B9:29:5B:C8:68:29:90:B4:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ad87beed-6330-4f33-9105-87722cdf2dd0/0/8703BB6F1EBC7AE2FE80DCB9295BC8682990B4B2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8703BB6F1EBC7AE2FE80DCB9295BC8682990B4B2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ad87beed-6330-4f33-9105-87722cdf2dd0/0/8703BB6F1EBC7AE2FE80DCB9295BC8682990B4B2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:2a:44:80:ab:5a:71:e2:dd:b3:7e:19:00:9d:7f:50:42:42: e8:68:3c:5c:83:82:0e:c9:c6:a2:51:b3:9b:ba:9b:a9:52:cd: b1:9b:45:70:d1:8c:f6:b6:ff:69:09:96:9a:ad:bc:84:1b:99: 37:7f:4a:cb:db:f2:0a:80:f7:de:de:9e:d8:9e:d2:f4:71:9c: d0:38:dd:34:2f:a8:e9:e0:f7:6a:17:7c:49:eb:ae:a1:83:fd: 40:f7:e3:f8:48:7e:2e:f3:d7:91:eb:c1:b3:88:d9:52:3f:f2: 14:0f:39:d7:c3:60:0a:66:b2:2b:07:4f:b8:24:ef:50:5a:2b: 43:c2:de:b0:7b:4b:72:5e:37:37:00:ea:1b:e1:51:18:75:66: df:64:b1:03:f2:4a:e4:62:d4:a0:7b:59:25:58:1f:a9:49:c3: f1:11:44:b9:d3:87:e7:a3:7e:9e:cf:0a:02:ce:7c:ec:ff:0f: 96:bd:37:8b:8a:a3:59:78:0c:ee:90:d6:d2:11:0c:8d:e6:21: 40:40:2b:a1:ec:83:f7:ec:f9:6f:fa:e2:87:2b:f8:b8:5b:d4: 74:60:45:73:b5:5d:f6:f4:2c:c3:7f:e7:4d:23:bc:b2:a9:9d: ba:ba:ca:ed:b5:4d:fe:90:2f:07:2d:6f:7a:c0:33:79:be:d7: e7:bc:a6:c9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQINJf85tlWSy8j1ivlh5wE4W9VUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODcwM0JCNkYxRUJDN0FFMkZFODBEQ0I5Mjk1QkM4Njgy OTkwQjRCMjAeFw0yNjEwMDgxODI5NTNaFw0yNjEwMDkyMTA0NTNaMDMxMTAvBgNV BAMTKEU0MjQ2RjRBNjJDRTAwOUJCMUFBRTdFOEFENTBDQkI0MzUwMUE1QTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXq/Pq01U92atTKy5S5Y0kNukD k17zgD1BAS7UX7qrDAMtar5t5HqDGtQydVJn7xbvofaDWlru4oWDtQO/0XGiZMwL SAw3lZ6r1wiOKx4tK6uf93OGdrkPJgSuYMptdDkQlrgLHbFlpRRM6kCIhQAN6laQ 0yvnrXhKcvaZyjIpcWBmJpBTveSC29m50d8NxBhqQC9DSdTxmboPbXtrZfDTKWU+ z9P/CxlqBGewuV+2OZ1tl3AlBs5myt7EMzgh5x6pbqR8nYGJZtWf5RpOFIhrN8Gv 2Ho1bgXCgfbKhKkfeRJRFN7/R5gmM6yyHKnCs8pSzgQiqJwAqVFlUJ3nBwdnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5CRvSmLOAJuxquforVDLtDUBpaAwHwYDVR0j BBgwFoAUhwO7bx68euL+gNy5KVvIaCmQtLIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWQ4N2JlZWQtNjMzMC00ZjMzLTkxMDUtODc3MjJjZGYyZGQwLzAvODcwM0JCNkYx RUJDN0FFMkZFODBEQ0I5Mjk1QkM4NjgyOTkwQjRCMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NzAzQkI2RjFFQkM3QUUyRkU4MERDQjkyOTVCQzg2ODI5OTBC NEIyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWQ4N2JlZWQtNjMzMC00ZjMzLTkx MDUtODc3MjJjZGYyZGQwLzAvODcwM0JCNkYxRUJDN0FFMkZFODBEQ0I5Mjk1QkM4 NjgyOTkwQjRCMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF0qRICrWnHi3bN+GQCdf1BCQuhoPFyDgg7J xqJRs5u6m6lSzbGbRXDRjPa2/2kJlpqtvIQbmTd/Ssvb8gqA997entie0vRxnNA4 3TQvqOng92oXfEnrrqGD/UD34/hIfi7z15HrwbOI2VI/8hQPOdfDYApmsisHT7gk 71BaK0PC3rB7S3JeNzcA6hvhURh1Zt9ksQPySuRi1KB7WSVYH6lJw/ERRLnTh+ej fp7PCgLOfOz/D5a9N4uKo1l4DO6Q1tIRDI3mIUBAK6Hsg/fs+W/64ocr+Lhb1HRg RXO1Xfb0LMN/500jvLKpnbq6yu21Tf6QLwctb3rAM3m+1+e8psk= -----END CERTIFICATE-----Generated at Fri Oct 9 00:42:17 2026 by rpki-client