$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b11ca620-dace-4a9f-b8e8-a3a2e581500e/0/D8A963CE57E99B1ABE162A8452D9E4D368BB012A.mft File: D8A963CE57E99B1ABE162A8452D9E4D368BB012A.mft (raw, json) Hash identifier: CrO4fwBDtaTuupReYHM87e5IiBTnrMqrzPnKxmUyDpE= Subject key identifier: 22:85:FB:E5:53:BD:E4:0C:DF:F0:C3:4E:71:B2:53:02:F4:2E:87:2A Authority key identifier: D8:A9:63:CE:57:E9:9B:1A:BE:16:2A:84:52:D9:E4:D3:68:BB:01:2A Certificate issuer: /CN=D8A963CE57E99B1ABE162A8452D9E4D368BB012A Certificate serial: 535088093622F5CA9890F9ED845F33F3DA205725 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D8A963CE57E99B1ABE162A8452D9E4D368BB012A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b11ca620-dace-4a9f-b8e8-a3a2e581500e/0/D8A963CE57E99B1ABE162A8452D9E4D368BB012A.mft Manifest number: EA Signing time: Sat 24 Oct 2026 07:12:49 +0000 Manifest this update: Sat 24 Oct 2026 07:07:49 +0000 Manifest next update: Sun 25 Oct 2026 10:40:49 +0000 Files and hashes: 1: 3130332e3136392e3233382e302f32342d3234203d3e20313338383831.roa (hash: Jx05B7mkwgYoEihHJr1Mblw6Kt55kFXhZ9MUCvCt+Go=) 2: D8A963CE57E99B1ABE162A8452D9E4D368BB012A.crl (hash: IieOsLG5pSAzYGQpxvZYOmi2oFQ01BDnCmQHz0h6iD8=) 3: 3130332e3136392e3233382e302f32332d3233203d3e20313338383831.roa (hash: 6VIXf9PufTTIF0jlFfBvIGu6EFZnq37iO9mrrQ1/lbk=) 4: 3130332e3136392e3233392e302f32342d3234203d3e20313338383831.roa (hash: B7a7PzCNzeD/tq1cXAKoZlfFY/BQzoD5xWVoqKq0SF0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b11ca620-dace-4a9f-b8e8-a3a2e581500e/0/D8A963CE57E99B1ABE162A8452D9E4D368BB012A.crl rsync://rpki-rsync.idnic.net/repo/b11ca620-dace-4a9f-b8e8-a3a2e581500e/0/D8A963CE57E99B1ABE162A8452D9E4D368BB012A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D8A963CE57E99B1ABE162A8452D9E4D368BB012A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 03:03:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:50:88:09:36:22:f5:ca:98:90:f9:ed:84:5f:33:f3:da:20:57:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D8A963CE57E99B1ABE162A8452D9E4D368BB012A Validity Not Before: Oct 24 07:07:49 2026 GMT Not After : Oct 25 10:40:49 2026 GMT Subject: CN=2285FBE553BDE40CDFF0C34E71B25302F42E872A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:c6:8a:ae:22:71:69:e3:29:82:da:f9:e0:80: 49:f9:8f:8b:09:58:b0:2f:4a:9e:39:1d:48:bc:2e: ff:92:3e:5e:31:ad:cc:cd:a4:cc:99:58:15:f9:16: 3c:8b:10:be:c0:98:64:4e:33:2a:3d:d3:f5:10:b6: 0a:b2:84:38:8b:36:33:f7:29:48:48:45:ed:77:5f: 7d:d8:b9:52:1b:64:dd:58:41:6d:0a:84:ec:fe:0f: 46:51:05:c2:b2:59:c4:2d:96:2d:63:9d:94:1e:c1: 78:5b:cd:c8:38:d8:30:4c:1c:ee:7b:0a:c2:58:b9: f7:22:5b:9b:87:92:80:1c:55:81:df:a7:47:18:73: 4c:cf:45:0b:a2:ee:fe:93:07:85:b2:98:2a:c5:29: b9:f2:bb:20:31:b2:aa:38:f6:7e:0a:18:e2:e1:37: a0:7c:39:97:14:7f:fd:17:d2:1a:33:57:7d:a3:f1: 5d:50:74:4a:36:1e:9f:50:38:c7:b8:dd:4c:55:9d: fb:5d:13:38:ed:3f:fa:48:f8:3a:8b:d6:72:2e:63: 7f:44:30:4f:07:04:3b:ab:c2:a4:e0:12:29:03:8e: 7b:a0:b2:ba:72:3a:f0:fe:11:ff:b3:97:46:c5:a5: fd:f9:28:4a:d5:84:46:d5:cb:e3:70:15:d0:b9:2b: 48:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:85:FB:E5:53:BD:E4:0C:DF:F0:C3:4E:71:B2:53:02:F4:2E:87:2A X509v3 Authority Key Identifier: keyid:D8:A9:63:CE:57:E9:9B:1A:BE:16:2A:84:52:D9:E4:D3:68:BB:01:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b11ca620-dace-4a9f-b8e8-a3a2e581500e/0/D8A963CE57E99B1ABE162A8452D9E4D368BB012A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D8A963CE57E99B1ABE162A8452D9E4D368BB012A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b11ca620-dace-4a9f-b8e8-a3a2e581500e/0/D8A963CE57E99B1ABE162A8452D9E4D368BB012A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:30:8f:23:f6:27:f8:3a:18:c4:64:73:59:bc:e5:ce:37:c4: bb:07:08:cf:b0:90:20:1e:4f:47:95:98:10:a8:83:ed:01:03: a3:11:e6:5f:c3:aa:0f:a4:02:07:7b:11:86:c0:74:81:1a:d3: 23:7b:dd:87:56:8e:c6:97:d3:45:9e:ee:bf:66:78:85:ee:d4: 65:d4:18:1d:58:9d:e7:55:d0:4b:fb:41:74:be:a1:15:68:61: 75:79:18:59:d9:b2:37:10:2f:27:13:b2:50:97:14:68:65:86: 0a:42:f3:ce:e1:2c:bc:92:e6:cb:94:6e:ff:61:86:cf:38:34: 68:81:6b:bb:88:91:52:f9:a4:20:b7:9d:f0:35:d9:82:f4:85: 96:16:51:51:a6:90:4b:2d:0d:56:6b:0c:b5:89:29:dd:22:3d: d5:f6:8d:44:e8:5f:0f:a4:ef:b0:ea:7a:03:c1:74:d7:e9:09: 0d:1b:62:a2:76:80:39:bc:ec:7c:67:1b:8e:6a:a1:7f:05:31: f9:6f:e9:f6:f7:28:fd:b5:b3:4e:57:65:34:65:e2:77:31:94: c3:eb:1d:d0:31:3e:7b:cb:e3:a2:39:1e:b8:f0:23:2c:e1:2a: b5:1d:4e:11:46:1f:05:fb:9e:91:1b:b1:88:1c:c0:5d:c0:0c: e6:31:2a:a1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU1CICTYi9cqYkPnthF8z89ogVyUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDhBOTYzQ0U1N0U5OUIxQUJFMTYyQTg0NTJEOUU0RDM2 OEJCMDEyQTAeFw0yNjEwMjQwNzA3NDlaFw0yNjEwMjUxMDQwNDlaMDMxMTAvBgNV BAMTKDIyODVGQkU1NTNCREU0MENERkYwQzM0RTcxQjI1MzAyRjQyRTg3MkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4xoquInFp4ymC2vnggEn5j4sJ WLAvSp45HUi8Lv+SPl4xrczNpMyZWBX5FjyLEL7AmGROMyo90/UQtgqyhDiLNjP3 KUhIRe13X33YuVIbZN1YQW0KhOz+D0ZRBcKyWcQtli1jnZQewXhbzcg42DBMHO57 CsJYufciW5uHkoAcVYHfp0cYc0zPRQui7v6TB4WymCrFKbnyuyAxsqo49n4KGOLh N6B8OZcUf/0X0hozV32j8V1QdEo2Hp9QOMe43UxVnftdEzjtP/pI+DqL1nIuY39E ME8HBDurwqTgEikDjnugsrpyOvD+Ef+zl0bFpf35KErVhEbVy+NwFdC5K0hFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIoX75VO95Azf8MNOcbJTAvQuhyowHwYDVR0j BBgwFoAU2Kljzlfpmxq+FiqEUtnk02i7ASowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjExY2E2MjAtZGFjZS00YTlmLWI4ZTgtYTNhMmU1ODE1MDBlLzAvRDhBOTYzQ0U1 N0U5OUIxQUJFMTYyQTg0NTJEOUU0RDM2OEJCMDEyQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EOEE5NjNDRTU3RTk5QjFBQkUxNjJBODQ1MkQ5RTREMzY4QkIw MTJBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjExY2E2MjAtZGFjZS00YTlmLWI4 ZTgtYTNhMmU1ODE1MDBlLzAvRDhBOTYzQ0U1N0U5OUIxQUJFMTYyQTg0NTJEOUU0 RDM2OEJCMDEyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHkwjyP2J/g6GMRkc1m85c43xLsHCM+wkCAe T0eVmBCog+0BA6MR5l/Dqg+kAgd7EYbAdIEa0yN73YdWjsaX00We7r9meIXu1GXU GB1YnedV0Ev7QXS+oRVoYXV5GFnZsjcQLycTslCXFGhlhgpC887hLLyS5suUbv9h hs84NGiBa7uIkVL5pCC3nfA12YL0hZYWUVGmkEstDVZrDLWJKd0iPdX2jUToXw+k 77DqegPBdNfpCQ0bYqJ2gDm87HxnG45qoX8FMflv6fb3KP21s05XZTRl4ncxlMPr HdAxPnvL46I5HrjwIyzhKrUdThFGHwX7npEbsYgcwF3ADOYxKqE= -----END CERTIFICATE-----Generated at Sat Oct 24 22:34:45 2026 by rpki-client