$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/8D7E0574648D2E037D2147F409FC002E56E42A23.mft File: 8D7E0574648D2E037D2147F409FC002E56E42A23.mft (raw, json) Hash identifier: T5se+/AFhiIgiA9ZJLkg5Ry2bGSCKryi30DMnhQdarg= Subject key identifier: 65:65:7E:F6:ED:D4:22:C0:CA:40:25:96:69:A9:F3:50:29:ED:2B:A2 Authority key identifier: 8D:7E:05:74:64:8D:2E:03:7D:21:47:F4:09:FC:00:2E:56:E4:2A:23 Certificate issuer: /CN=8D7E0574648D2E037D2147F409FC002E56E42A23 Certificate serial: 2DC51158B5773CA879DB022F7E336C1CD52E479F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8D7E0574648D2E037D2147F409FC002E56E42A23.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/8D7E0574648D2E037D2147F409FC002E56E42A23.mft Manifest number: E9 Signing time: Sat 24 Oct 2026 14:37:24 +0000 Manifest this update: Sat 24 Oct 2026 14:32:24 +0000 Manifest next update: Sun 25 Oct 2026 16:13:24 +0000 Files and hashes: 1: 8D7E0574648D2E037D2147F409FC002E56E42A23.crl (hash: JveHic/2u0dE5flA2aa6mZN863mRy6gspMrmeLXKLQ4=) 2: 3130332e3139312e35322e302f32332d3234203d3e2034383030.roa (hash: Wh9jPiaMLmpVJg4WJmhSTDv7ObmHyLTAXzkGZmow5b0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/8D7E0574648D2E037D2147F409FC002E56E42A23.crl rsync://rpki-rsync.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/8D7E0574648D2E037D2147F409FC002E56E42A23.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8D7E0574648D2E037D2147F409FC002E56E42A23.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 16:13:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:c5:11:58:b5:77:3c:a8:79:db:02:2f:7e:33:6c:1c:d5:2e:47:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D7E0574648D2E037D2147F409FC002E56E42A23 Validity Not Before: Oct 24 14:32:24 2026 GMT Not After : Oct 25 16:13:24 2026 GMT Subject: CN=65657EF6EDD422C0CA40259669A9F35029ED2BA2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:17:94:09:1e:c1:bc:f4:a7:9e:45:e4:75:d5: e6:95:c8:90:9e:08:c8:64:1f:50:a3:1e:d7:ec:cf: 0d:90:11:ae:4f:1e:0a:15:45:5e:17:ef:8e:e3:40: 84:4d:a2:0a:42:b1:d3:08:5a:8b:e2:37:29:50:bc: 8d:cb:82:96:9c:a0:ac:f3:52:7b:96:fe:82:f3:34: 1d:40:57:68:a8:30:64:8e:58:f3:e7:36:93:63:1d: a5:4d:3e:4b:70:f5:58:21:45:83:e9:b0:d7:1d:5a: fa:de:22:0c:f4:21:bf:cc:e6:51:be:c8:ee:5b:11: 2c:ad:24:75:0b:2b:39:4d:a0:bc:94:c3:e4:74:6a: 76:1e:3b:19:c6:9d:c9:7f:22:0a:f5:14:ae:d3:69: 82:10:4a:77:30:fe:2f:e3:4d:bc:46:75:47:8a:fb: 4a:1f:74:30:03:a6:a8:9a:a5:0b:81:bb:0e:21:b4: 9f:e9:b9:20:be:fd:ca:87:d0:dd:e5:4c:97:9b:a8: ab:c5:30:70:d3:12:40:8b:30:68:aa:95:1c:e3:53: b5:e5:3e:75:f8:eb:6f:fd:49:4b:cb:13:e3:aa:8f: 02:e1:c0:92:09:80:6b:d6:4a:95:24:0f:66:ff:0f: 56:13:d0:63:8d:37:dd:43:fa:5c:21:6e:7b:f9:53: 2d:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:65:7E:F6:ED:D4:22:C0:CA:40:25:96:69:A9:F3:50:29:ED:2B:A2 X509v3 Authority Key Identifier: keyid:8D:7E:05:74:64:8D:2E:03:7D:21:47:F4:09:FC:00:2E:56:E4:2A:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/8D7E0574648D2E037D2147F409FC002E56E42A23.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8D7E0574648D2E037D2147F409FC002E56E42A23.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/8D7E0574648D2E037D2147F409FC002E56E42A23.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:6d:50:52:92:b5:60:cc:d1:a7:13:7b:af:af:57:d6:57:b4: ba:40:fc:46:ac:c8:54:6f:1f:b6:0c:f9:37:80:c1:ed:ee:68: fe:cd:0c:62:cf:64:19:a1:bd:61:d2:f0:02:ff:94:3c:ea:6c: ab:1f:27:f8:ec:3d:d9:c3:f9:35:df:b1:86:4c:fa:05:85:2a: 0b:87:c3:93:e4:49:9d:80:f8:9d:07:30:c3:c6:d3:17:57:16: 9d:8d:3f:b7:99:cf:a2:37:bc:e1:df:7d:b3:47:d4:67:8c:79: c7:61:00:98:fa:7e:d9:0c:73:15:6b:93:a8:4f:2b:1f:21:9e: 86:17:0a:20:60:f1:48:bf:2c:b9:9d:67:60:3e:90:89:51:a3: 26:fb:9a:59:c9:89:6e:fd:9d:c0:4e:b3:65:ea:a8:4a:ee:4b: 62:74:01:92:0d:fc:7a:95:c3:e2:19:30:fb:44:1f:7a:3d:6b: 54:84:6a:2f:e6:c3:a3:10:8a:a9:34:d3:c2:d8:c7:74:9a:2f: 58:66:63:8b:8c:d0:b4:53:5f:15:71:e5:93:e0:fb:f6:eb:29: dd:2e:f9:39:92:9d:26:b6:60:6d:1c:b7:b4:98:28:f6:c3:25: 64:72:0b:4e:e5:d4:c4:a4:d9:46:d5:3f:aa:f2:f2:cb:cc:6a: 41:76:74:c0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULcURWLV3PKh52wIvfjNsHNUuR58wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEQ3RTA1NzQ2NDhEMkUwMzdEMjE0N0Y0MDlGQzAwMkU1 NkU0MkEyMzAeFw0yNjEwMjQxNDMyMjRaFw0yNjEwMjUxNjEzMjRaMDMxMTAvBgNV BAMTKDY1NjU3RUY2RURENDIyQzBDQTQwMjU5NjY5QTlGMzUwMjlFRDJCQTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQF5QJHsG89KeeReR11eaVyJCe CMhkH1CjHtfszw2QEa5PHgoVRV4X747jQIRNogpCsdMIWoviNylQvI3LgpacoKzz UnuW/oLzNB1AV2ioMGSOWPPnNpNjHaVNPktw9VghRYPpsNcdWvreIgz0Ib/M5lG+ yO5bESytJHULKzlNoLyUw+R0anYeOxnGncl/Igr1FK7TaYIQSncw/i/jTbxGdUeK +0ofdDADpqiapQuBuw4htJ/puSC+/cqH0N3lTJebqKvFMHDTEkCLMGiqlRzjU7Xl PnX462/9SUvLE+OqjwLhwJIJgGvWSpUkD2b/D1YT0GONN91D+lwhbnv5Uy1/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZWV+9u3UIsDKQCWWaanzUCntK6IwHwYDVR0j BBgwFoAUjX4FdGSNLgN9IUf0CfwALlbkKiMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDlhZmQzMTUtZjQ3Zi00ZjZhLWI4YjUtNDVhMjI4MGJiYzg1LzAvOEQ3RTA1NzQ2 NDhEMkUwMzdEMjE0N0Y0MDlGQzAwMkU1NkU0MkEyMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84RDdFMDU3NDY0OEQyRTAzN0QyMTQ3RjQwOUZDMDAyRTU2RTQy QTIzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDlhZmQzMTUtZjQ3Zi00ZjZhLWI4 YjUtNDVhMjI4MGJiYzg1LzAvOEQ3RTA1NzQ2NDhEMkUwMzdEMjE0N0Y0MDlGQzAw MkU1NkU0MkEyMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJFtUFKStWDM0acTe6+vV9ZXtLpA/EasyFRv H7YM+TeAwe3uaP7NDGLPZBmhvWHS8AL/lDzqbKsfJ/jsPdnD+TXfsYZM+gWFKguH w5PkSZ2A+J0HMMPG0xdXFp2NP7eZz6I3vOHffbNH1GeMecdhAJj6ftkMcxVrk6hP Kx8hnoYXCiBg8Ui/LLmdZ2A+kIlRoyb7mlnJiW79ncBOs2XqqEruS2J0AZIN/HqV w+IZMPtEH3o9a1SEai/mw6MQiqk008LYx3SaL1hmY4uM0LRTXxVx5ZPg+/brKd0u +TmSnSa2YG0ct7SYKPbDJWRyC07l1MSk2UbVP6ry8svMakF2dMA= -----END CERTIFICATE-----Generated at Sun Oct 25 01:10:58 2026 by rpki-client