$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/A8D60217388DCEE6897BDA5BC6D5190317CEC0EC.mft File: A8D60217388DCEE6897BDA5BC6D5190317CEC0EC.mft (raw, json) Hash identifier: MwxMNHx8nA2ucCWtn4Ztg/+oRslW2wT5wZZ6mknb03g= Subject key identifier: 63:FD:64:70:C7:18:25:64:D4:CF:7C:54:57:68:21:84:3A:CF:03:44 Authority key identifier: A8:D6:02:17:38:8D:CE:E6:89:7B:DA:5B:C6:D5:19:03:17:CE:C0:EC Certificate issuer: /CN=A8D60217388DCEE6897BDA5BC6D5190317CEC0EC Certificate serial: 10F099D087F4AB79472170D80F2FD26490D22C18 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A8D60217388DCEE6897BDA5BC6D5190317CEC0EC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/A8D60217388DCEE6897BDA5BC6D5190317CEC0EC.mft Manifest number: EB Signing time: Sat 24 Oct 2026 13:36:07 +0000 Manifest this update: Sat 24 Oct 2026 13:31:07 +0000 Manifest next update: Sun 25 Oct 2026 15:05:07 +0000 Files and hashes: 1: 3130332e3138362e3230302e302f32342d3234203d3e20313439373231.roa (hash: UJ/To0XTouVSFOn7NWj23fxNZAouQWAqvBpnkIJXRFM=) 2: A8D60217388DCEE6897BDA5BC6D5190317CEC0EC.crl (hash: EtuqQH0kHTzF2EA3zbg2s9tIMPMZh+ILz2r/d7vojXQ=) 3: 3130332e3138362e3230312e302f32342d3234203d3e20313439373231.roa (hash: Zeaoa8MH2HdVHd5TglLIUEl41Yo/QcdVaZotZEH8Cts=) 4: 3130332e3138362e3230302e302f32332d3233203d3e20313439373231.roa (hash: Avv7/9ccLlQ1aIPCfbfxFrVouBultgrgCwZuIM827ow=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/A8D60217388DCEE6897BDA5BC6D5190317CEC0EC.crl rsync://rpki-rsync.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/A8D60217388DCEE6897BDA5BC6D5190317CEC0EC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A8D60217388DCEE6897BDA5BC6D5190317CEC0EC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 15:05:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:f0:99:d0:87:f4:ab:79:47:21:70:d8:0f:2f:d2:64:90:d2:2c:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A8D60217388DCEE6897BDA5BC6D5190317CEC0EC Validity Not Before: Oct 24 13:31:07 2026 GMT Not After : Oct 25 15:05:07 2026 GMT Subject: CN=63FD6470C7182564D4CF7C54576821843ACF0344 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:e3:fa:70:a0:22:1a:7a:83:eb:f2:5a:34:88: c4:e8:96:a3:6f:f0:e2:53:d9:1e:49:f4:89:b5:5f: 97:e5:a8:2b:85:2a:6f:05:49:ff:b6:91:d0:f2:d0: b8:de:19:4b:d3:cf:3d:48:3f:15:2d:52:63:a4:b5: b9:f6:61:b3:8c:5f:07:ba:e0:a1:34:f5:58:75:a5: 80:3b:d8:1d:bc:51:6b:f0:da:d2:07:30:e4:91:1e: f1:f3:c9:52:31:d1:84:59:65:97:3e:5b:6b:27:32: 89:b4:8a:44:35:87:d5:8f:f3:f6:89:dc:6f:aa:b6: 7c:28:4d:88:17:97:e1:bd:02:5f:df:62:a4:f6:d4: d9:bc:1d:3f:34:26:aa:1c:8d:fa:ba:75:46:aa:3f: 82:ea:13:05:98:10:3b:2f:3e:ed:e3:85:eb:87:53: e2:ac:d9:1a:03:4d:fe:41:f4:fa:2a:7d:91:04:23: 15:58:81:35:bb:06:49:d2:8e:63:0d:da:a2:60:21: a8:76:6f:39:34:8d:c1:42:02:55:b6:50:0d:c3:15: 0e:86:7f:72:66:60:d4:23:27:42:f0:8c:b6:91:ec: af:39:a6:e2:aa:65:a4:e6:4c:36:c3:f3:a9:02:d9: 1a:48:80:7c:79:99:4a:f8:16:eb:94:a3:12:d6:8a: 63:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:FD:64:70:C7:18:25:64:D4:CF:7C:54:57:68:21:84:3A:CF:03:44 X509v3 Authority Key Identifier: keyid:A8:D6:02:17:38:8D:CE:E6:89:7B:DA:5B:C6:D5:19:03:17:CE:C0:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/A8D60217388DCEE6897BDA5BC6D5190317CEC0EC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A8D60217388DCEE6897BDA5BC6D5190317CEC0EC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/A8D60217388DCEE6897BDA5BC6D5190317CEC0EC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:36:c1:22:f4:9d:74:47:a9:5a:92:56:d7:ba:1a:f1:fa:6f: ae:cd:60:87:cc:fc:35:2d:ba:c6:df:52:f7:a4:1f:94:6f:04: 3d:3d:4a:72:3e:36:3f:1e:54:60:23:ba:85:78:f7:77:fa:70: 5d:59:45:66:e7:a0:6e:9d:d0:72:38:10:a9:f9:6b:72:ea:11: 44:92:2d:8f:d7:de:a1:10:31:b5:98:b7:a0:c2:10:8f:8b:a4: 31:68:ca:ac:52:4a:28:fc:5f:50:4f:1f:7d:3a:47:2e:ce:19: ad:8d:98:a3:1c:bb:74:43:40:78:44:40:48:41:06:dc:ca:68: e8:7f:3a:14:ca:12:17:f5:8b:6a:14:91:56:11:8c:68:bb:c1: f8:bf:59:da:ff:a2:82:0c:9e:a6:84:97:96:6f:7a:57:97:86: 6a:e1:c8:1e:b0:bc:f5:be:19:bb:5d:60:bd:5d:3d:91:1e:9f: f5:98:68:60:d4:06:97:8e:e0:d0:57:10:ab:e0:f9:09:b5:31: c3:6f:e6:3f:2e:e8:ee:c3:54:2e:7f:b5:ea:4c:e9:49:bb:fe: 58:36:38:23:b9:86:0e:ea:4e:b2:e1:42:6d:8d:03:ec:75:1c: 74:cf:80:78:c8:79:ce:4a:ef:b2:0f:9b:c8:8c:53:ba:3a:12: 0a:db:32:4f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEPCZ0If0q3lHIXDYDy/SZJDSLBgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQThENjAyMTczODhEQ0VFNjg5N0JEQTVCQzZENTE5MDMx N0NFQzBFQzAeFw0yNjEwMjQxMzMxMDdaFw0yNjEwMjUxNTA1MDdaMDMxMTAvBgNV BAMTKDYzRkQ2NDcwQzcxODI1NjRENENGN0M1NDU3NjgyMTg0M0FDRjAzNDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDW4/pwoCIaeoPr8lo0iMTolqNv 8OJT2R5J9Im1X5flqCuFKm8FSf+2kdDy0LjeGUvTzz1IPxUtUmOktbn2YbOMXwe6 4KE09Vh1pYA72B28UWvw2tIHMOSRHvHzyVIx0YRZZZc+W2snMom0ikQ1h9WP8/aJ 3G+qtnwoTYgXl+G9Al/fYqT21Nm8HT80Jqocjfq6dUaqP4LqEwWYEDsvPu3jheuH U+Ks2RoDTf5B9PoqfZEEIxVYgTW7BknSjmMN2qJgIah2bzk0jcFCAlW2UA3DFQ6G f3JmYNQjJ0LwjLaR7K85puKqZaTmTDbD86kC2RpIgHx5mUr4FuuUoxLWimNjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUY/1kcMcYJWTUz3xUV2ghhDrPA0QwHwYDVR0j BBgwFoAUqNYCFziNzuaJe9pbxtUZAxfOwOwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Yzk1NzdjM2MtNjZjZC00MGE0LWFmYzUtNmM2ZjhiNjY0YTUxLzAvQThENjAyMTcz ODhEQ0VFNjg5N0JEQTVCQzZENTE5MDMxN0NFQzBFQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BOEQ2MDIxNzM4OERDRUU2ODk3QkRBNUJDNkQ1MTkwMzE3Q0VD MEVDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzk1NzdjM2MtNjZjZC00MGE0LWFm YzUtNmM2ZjhiNjY0YTUxLzAvQThENjAyMTczODhEQ0VFNjg5N0JEQTVCQzZENTE5 MDMxN0NFQzBFQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC82wSL0nXRHqVqSVte6GvH6b67NYIfM/DUt usbfUvekH5RvBD09SnI+Nj8eVGAjuoV493f6cF1ZRWbnoG6d0HI4EKn5a3LqEUSS LY/X3qEQMbWYt6DCEI+LpDFoyqxSSij8X1BPH306Ry7OGa2NmKMcu3RDQHhEQEhB BtzKaOh/OhTKEhf1i2oUkVYRjGi7wfi/Wdr/ooIMnqaEl5ZveleXhmrhyB6wvPW+ GbtdYL1dPZEen/WYaGDUBpeO4NBXEKvg+Qm1McNv5j8u6O7DVC5/tepM6Um7/lg2 OCO5hg7qTrLhQm2NA+x1HHTPgHjIec5K77IPm8iMU7o6EgrbMk8= -----END CERTIFICATE-----Generated at Sat Oct 24 20:44:08 2026 by rpki-client