$ rpki-client -vvvf rpki-rsync.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/B8108C7FBEA42B59A4B00DB4A2DC111BAB709406.mft File: B8108C7FBEA42B59A4B00DB4A2DC111BAB709406.mft (raw, json) Hash identifier: +BHq5KsmUIE3+fyEYhYpp/O344Br5yrwDgYWHdJC7Ec= Subject key identifier: 3B:0A:D2:D6:51:42:93:F4:9C:03:06:54:6E:8E:2B:B1:FD:E8:6B:6D Authority key identifier: B8:10:8C:7F:BE:A4:2B:59:A4:B0:0D:B4:A2:DC:11:1B:AB:70:94:06 Certificate issuer: /CN=B8108C7FBEA42B59A4B00DB4A2DC111BAB709406 Certificate serial: 48EE845DB4F4959B5A21141AFAFE9CA682AF6A0E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B8108C7FBEA42B59A4B00DB4A2DC111BAB709406.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/B8108C7FBEA42B59A4B00DB4A2DC111BAB709406.mft Manifest number: D5 Signing time: Thu 08 Oct 2026 06:36:22 +0000 Manifest this update: Thu 08 Oct 2026 06:31:22 +0000 Manifest next update: Fri 09 Oct 2026 08:13:22 +0000 Files and hashes: 1: 3130332e3136302e36382e302f32342d3234203d3e203438343635.roa (hash: g5c7Nq+6t4kiF6CKiothKoqaQ8v25zT/n7Wj9Q/sxEQ=) 2: B8108C7FBEA42B59A4B00DB4A2DC111BAB709406.crl (hash: WU2/QJdi3lRZgdIqHlXp7RMGEvT6NQtZFUZ6fogc7bU=) 3: 3130332e3136302e36392e302f32342d3234203d3e20313431363037.roa (hash: 9VWfd5KMgyw5xyqB55UR/HJrZNws4qzcvTj6ecqQ/Qk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/B8108C7FBEA42B59A4B00DB4A2DC111BAB709406.crl rsync://rpki-rsync.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/B8108C7FBEA42B59A4B00DB4A2DC111BAB709406.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B8108C7FBEA42B59A4B00DB4A2DC111BAB709406.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 Oct 2026 08:13:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:ee:84:5d:b4:f4:95:9b:5a:21:14:1a:fa:fe:9c:a6:82:af:6a:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8108C7FBEA42B59A4B00DB4A2DC111BAB709406 Validity Not Before: Oct 8 06:31:22 2026 GMT Not After : Oct 9 08:13:22 2026 GMT Subject: CN=3B0AD2D6514293F49C0306546E8E2BB1FDE86B6D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:02:44:0a:dd:36:d6:bf:f0:42:75:41:13:ed: 70:b8:05:cf:70:bf:61:c0:c3:16:bf:02:ff:a3:e6: cb:03:89:85:63:c6:c8:d2:eb:44:68:24:24:cb:be: 2a:16:b2:97:90:e4:91:45:0c:99:d7:21:df:8d:56: 8d:66:b0:04:7b:1d:9c:81:29:56:79:4a:0f:b1:14: d7:60:9e:06:50:80:d3:3f:d6:f2:56:42:db:05:61: 42:7e:47:fc:9a:7b:01:43:38:d6:08:7a:18:d8:25: 87:ee:ef:ca:c0:55:03:c9:97:5c:e0:e3:77:f5:39: f0:61:34:0b:8f:40:40:8b:4e:4f:0b:f1:fe:6e:84: 4d:2b:33:e8:d2:49:fe:8a:bd:da:61:cb:34:ed:cf: 8c:a4:bc:b0:af:29:3b:e4:da:a6:aa:5f:4f:68:37: 08:2c:a5:71:ba:9f:93:79:6f:e0:9a:fe:86:d5:ef: 5d:60:42:4e:ec:54:d3:c0:49:59:6e:f6:40:06:5b: 19:19:53:ae:66:6a:d7:6f:55:ae:32:08:4e:4d:41: a5:2c:13:e4:a9:38:89:f1:4b:47:f7:d9:cd:f8:e2: d1:6e:fc:11:2d:9e:a9:e4:63:58:7c:10:e5:26:84: 10:55:4b:bf:23:eb:67:21:b1:1d:25:e3:3c:77:04: 77:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:0A:D2:D6:51:42:93:F4:9C:03:06:54:6E:8E:2B:B1:FD:E8:6B:6D X509v3 Authority Key Identifier: keyid:B8:10:8C:7F:BE:A4:2B:59:A4:B0:0D:B4:A2:DC:11:1B:AB:70:94:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/B8108C7FBEA42B59A4B00DB4A2DC111BAB709406.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B8108C7FBEA42B59A4B00DB4A2DC111BAB709406.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/B8108C7FBEA42B59A4B00DB4A2DC111BAB709406.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:7b:a9:26:56:5d:cb:94:9c:c9:83:e7:9c:8d:a9:64:d8:d8: 42:91:d6:bf:3b:e6:31:8d:08:6d:d6:ef:98:d3:98:ba:a4:51: 8f:33:02:27:37:2a:f2:d1:54:ab:94:91:6c:e9:1f:3b:87:e2: 34:a7:96:b6:b0:56:09:25:ac:6c:f8:42:8e:08:2e:00:3d:3c: 0d:da:9c:82:9a:47:2d:f8:2d:d3:e6:68:5d:c5:04:8a:25:83: f8:c1:b6:42:dc:e2:62:c5:e8:c3:b8:78:ae:d6:be:97:40:9d: 85:39:69:4b:66:42:d1:96:74:2a:4e:6c:80:03:3d:5a:e9:61: 74:55:36:76:f3:5e:a0:6a:f1:13:15:20:21:2b:90:2d:06:5a: 71:4e:97:a1:d8:0c:e4:1d:cd:38:2c:8a:2d:3e:bd:9d:2e:04: e2:c2:68:67:66:5e:a9:9e:1b:ad:61:66:bb:33:be:1d:60:d6: 45:51:80:96:74:60:3b:c4:67:a7:3c:ca:0e:80:c9:39:68:0d: 33:f8:15:6b:91:3f:f0:1b:74:5b:0d:1f:fd:be:20:13:53:1f: 76:6e:37:35:39:25:66:6e:14:dc:7c:6f:94:a8:f1:ce:21:1d: 4d:2b:a9:7d:9a:79:3b:9d:61:83:8d:05:9e:b2:a5:75:74:a7: 58:b3:1d:66 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSO6EXbT0lZtaIRQa+v6cpoKvag4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjgxMDhDN0ZCRUE0MkI1OUE0QjAwREI0QTJEQzExMUJB QjcwOTQwNjAeFw0yNjEwMDgwNjMxMjJaFw0yNjEwMDkwODEzMjJaMDMxMTAvBgNV BAMTKDNCMEFEMkQ2NTE0MjkzRjQ5QzAzMDY1NDZFOEUyQkIxRkRFODZCNkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSAkQK3TbWv/BCdUET7XC4Bc9w v2HAwxa/Av+j5ssDiYVjxsjS60RoJCTLvioWspeQ5JFFDJnXId+NVo1msAR7HZyB KVZ5Sg+xFNdgngZQgNM/1vJWQtsFYUJ+R/yaewFDONYIehjYJYfu78rAVQPJl1zg 43f1OfBhNAuPQECLTk8L8f5uhE0rM+jSSf6KvdphyzTtz4ykvLCvKTvk2qaqX09o NwgspXG6n5N5b+Ca/obV711gQk7sVNPASVlu9kAGWxkZU65matdvVa4yCE5NQaUs E+SpOInxS0f32c344tFu/BEtnqnkY1h8EOUmhBBVS78j62chsR0l4zx3BHfnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOwrS1lFCk/ScAwZUbo4rsf3oa20wHwYDVR0j BBgwFoAUuBCMf76kK1mksA20otwRG6twlAYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGFjNzlmYmUtNDc5MC00NmJlLWI5YjItMDM1OWIxYTE4ZTMzLzAvQjgxMDhDN0ZC RUE0MkI1OUE0QjAwREI0QTJEQzExMUJBQjcwOTQwNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CODEwOEM3RkJFQTQyQjU5QTRCMDBEQjRBMkRDMTExQkFCNzA5 NDA2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGFjNzlmYmUtNDc5MC00NmJlLWI5 YjItMDM1OWIxYTE4ZTMzLzAvQjgxMDhDN0ZCRUE0MkI1OUE0QjAwREI0QTJEQzEx MUJBQjcwOTQwNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEp7qSZWXcuUnMmD55yNqWTY2EKR1r875jGN CG3W75jTmLqkUY8zAic3KvLRVKuUkWzpHzuH4jSnlrawVgklrGz4Qo4ILgA9PA3a nIKaRy34LdPmaF3FBIolg/jBtkLc4mLF6MO4eK7WvpdAnYU5aUtmQtGWdCpObIAD PVrpYXRVNnbzXqBq8RMVICErkC0GWnFOl6HYDOQdzTgsii0+vZ0uBOLCaGdmXqme G61hZrszvh1g1kVRgJZ0YDvEZ6c8yg6AyTloDTP4FWuRP/AbdFsNH/2+IBNTH3Zu NzU5JWZuFNx8b5So8c4hHU0rqX2aeTudYYONBZ6ypXV0p1izHWY= -----END CERTIFICATE-----Generated at Thu Oct 8 14:01:22 2026 by rpki-client