$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e1f29aba-6d7c-4435-953c-604988731596/0/8FC6CD0E7EE13FAE7EB8F74CBF3D398EE34F03BB.mft File: 8FC6CD0E7EE13FAE7EB8F74CBF3D398EE34F03BB.mft (raw, json) Hash identifier: Jkd961N6vRebCrAuiclQZSL9s8psppJeRE3FZ6jgiD4= Subject key identifier: 2D:C8:A8:77:7A:98:14:BD:2D:AD:D9:5E:6F:1C:B0:23:4B:4F:AF:B4 Authority key identifier: 8F:C6:CD:0E:7E:E1:3F:AE:7E:B8:F7:4C:BF:3D:39:8E:E3:4F:03:BB Certificate issuer: /CN=8FC6CD0E7EE13FAE7EB8F74CBF3D398EE34F03BB Certificate serial: 49CA3D22693718F3255DEFF537EA3F9C092EEC0E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8FC6CD0E7EE13FAE7EB8F74CBF3D398EE34F03BB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e1f29aba-6d7c-4435-953c-604988731596/0/8FC6CD0E7EE13FAE7EB8F74CBF3D398EE34F03BB.mft Manifest number: ED Signing time: Sun 25 Oct 2026 17:28:29 +0000 Manifest this update: Sun 25 Oct 2026 17:23:29 +0000 Manifest next update: Mon 26 Oct 2026 20:39:29 +0000 Files and hashes: 1: 8FC6CD0E7EE13FAE7EB8F74CBF3D398EE34F03BB.crl (hash: d102DDFE9F6vrgpz+6fvoWUY8KLOTZkucscVKfGuHJY=) 2: 3130332e3136322e37322e302f32342d3234203d3e20313431363436.roa (hash: 3eBDLV5ffWUDrJGtZH95s4QphGUZB6+B7Vc+acd6df4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e1f29aba-6d7c-4435-953c-604988731596/0/8FC6CD0E7EE13FAE7EB8F74CBF3D398EE34F03BB.crl rsync://rpki-rsync.idnic.net/repo/e1f29aba-6d7c-4435-953c-604988731596/0/8FC6CD0E7EE13FAE7EB8F74CBF3D398EE34F03BB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8FC6CD0E7EE13FAE7EB8F74CBF3D398EE34F03BB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 12:34:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:ca:3d:22:69:37:18:f3:25:5d:ef:f5:37:ea:3f:9c:09:2e:ec:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FC6CD0E7EE13FAE7EB8F74CBF3D398EE34F03BB Validity Not Before: Oct 25 17:23:29 2026 GMT Not After : Oct 26 20:39:29 2026 GMT Subject: CN=2DC8A8777A9814BD2DADD95E6F1CB0234B4FAFB4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:df:d5:79:47:b4:f0:b4:e2:49:22:90:68:0e: 92:ea:de:d6:a6:a3:39:44:ea:df:75:c9:2d:80:84: 04:1a:20:b0:0f:5e:a5:7c:e3:13:49:a2:6a:0b:ab: 26:8f:52:d6:2f:30:a2:0f:70:3a:ad:00:0b:02:d7: 36:27:b6:c0:30:05:0e:16:73:e1:ce:93:3a:96:c2: e2:f3:dc:f6:09:1b:43:d4:6e:7c:d3:ca:d9:4e:80: 64:1b:f4:c8:10:92:c9:ee:c5:6b:82:c8:8b:fc:e6: c0:c2:ee:be:c4:72:da:90:0e:db:15:1f:11:13:9f: 99:8a:6e:b0:36:b2:a5:17:6b:01:9f:19:fd:bd:1e: ef:ae:24:55:0c:c3:c3:85:48:ab:93:e3:53:70:29: 0b:47:93:30:b1:8a:01:b0:f0:12:0f:f0:cb:12:83: e6:3b:8b:15:7c:53:9d:38:a0:70:a7:6a:9a:52:b1: 3d:5a:71:61:c5:9d:78:98:6d:89:2c:c5:b1:0f:76: 98:f6:6c:41:4b:10:49:72:86:98:30:b6:43:81:59: 95:dc:bf:69:ba:97:9e:98:30:c0:22:bd:66:49:04: 45:a6:1b:1d:dd:f4:ad:37:4c:98:75:a2:ea:12:c0: 29:fe:e4:e0:a9:cd:91:53:6c:af:9a:74:4b:43:ea: ab:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:C8:A8:77:7A:98:14:BD:2D:AD:D9:5E:6F:1C:B0:23:4B:4F:AF:B4 X509v3 Authority Key Identifier: keyid:8F:C6:CD:0E:7E:E1:3F:AE:7E:B8:F7:4C:BF:3D:39:8E:E3:4F:03:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e1f29aba-6d7c-4435-953c-604988731596/0/8FC6CD0E7EE13FAE7EB8F74CBF3D398EE34F03BB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8FC6CD0E7EE13FAE7EB8F74CBF3D398EE34F03BB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e1f29aba-6d7c-4435-953c-604988731596/0/8FC6CD0E7EE13FAE7EB8F74CBF3D398EE34F03BB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:12:d9:ac:be:d9:d2:48:fd:9c:e7:10:8d:41:bd:60:2a:59: fc:81:7e:6f:fa:df:b2:81:20:39:21:9f:57:b7:21:8e:59:23: 7d:22:e7:33:05:38:02:91:8d:cc:87:e9:8a:9a:f3:c5:58:33: 50:f0:5b:f8:a6:e1:86:95:3d:09:e9:ba:e3:f5:1c:1e:e0:88: 33:43:9e:06:82:c9:cc:2f:14:fd:19:30:63:52:80:9d:34:a6: 88:72:3b:c1:88:60:49:5d:05:8b:5e:79:7c:6e:53:fa:fd:eb: c8:94:3f:e8:d1:39:5e:88:e3:bd:4b:9b:d8:38:24:d9:b5:b4: 69:f7:8e:bf:a4:ac:e6:39:01:97:ae:23:f1:37:3e:05:8b:22: 10:6f:6d:a1:93:8c:1e:a7:03:73:ef:dc:29:b6:b8:cd:4e:24: b8:35:61:39:de:63:8d:82:31:38:59:e2:95:26:45:41:ae:2e: 2c:6e:96:c3:58:ce:30:b6:6a:45:01:57:2e:f3:3c:bd:a4:d8: d8:ba:f0:36:0e:df:8f:59:ea:e5:d6:c0:af:13:75:a0:35:b6: cb:c2:32:0b:db:f1:a2:2d:af:f0:da:d1:af:29:09:75:5d:5a: 1c:bd:cc:b6:e8:c7:c0:8e:2d:6e:9b:0c:3f:af:18:e6:3d:d3: 8f:1d:e2:b7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSco9Imk3GPMlXe/1N+o/nAku7A4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZDNkNEMEU3RUUxM0ZBRTdFQjhGNzRDQkYzRDM5OEVF MzRGMDNCQjAeFw0yNjEwMjUxNzIzMjlaFw0yNjEwMjYyMDM5MjlaMDMxMTAvBgNV BAMTKDJEQzhBODc3N0E5ODE0QkQyREFERDk1RTZGMUNCMDIzNEI0RkFGQjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDv39V5R7TwtOJJIpBoDpLq3tam ozlE6t91yS2AhAQaILAPXqV84xNJomoLqyaPUtYvMKIPcDqtAAsC1zYntsAwBQ4W c+HOkzqWwuLz3PYJG0PUbnzTytlOgGQb9MgQksnuxWuCyIv85sDC7r7EctqQDtsV HxETn5mKbrA2sqUXawGfGf29Hu+uJFUMw8OFSKuT41NwKQtHkzCxigGw8BIP8MsS g+Y7ixV8U504oHCnappSsT1acWHFnXiYbYksxbEPdpj2bEFLEElyhpgwtkOBWZXc v2m6l56YMMAivWZJBEWmGx3d9K03TJh1ouoSwCn+5OCpzZFTbK+adEtD6qvtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULciod3qYFL0trdlebxywI0tPr7QwHwYDVR0j BBgwFoAUj8bNDn7hP65+uPdMvz05juNPA7swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTFmMjlhYmEtNmQ3Yy00NDM1LTk1M2MtNjA0OTg4NzMxNTk2LzAvOEZDNkNEMEU3 RUUxM0ZBRTdFQjhGNzRDQkYzRDM5OEVFMzRGMDNCQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84RkM2Q0QwRTdFRTEzRkFFN0VCOEY3NENCRjNEMzk4RUUzNEYw M0JCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTFmMjlhYmEtNmQ3Yy00NDM1LTk1 M2MtNjA0OTg4NzMxNTk2LzAvOEZDNkNEMEU3RUUxM0ZBRTdFQjhGNzRDQkYzRDM5 OEVFMzRGMDNCQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABkS2ay+2dJI/ZznEI1BvWAqWfyBfm/637KB IDkhn1e3IY5ZI30i5zMFOAKRjcyH6Yqa88VYM1DwW/im4YaVPQnpuuP1HB7giDND ngaCycwvFP0ZMGNSgJ00pohyO8GIYEldBYteeXxuU/r968iUP+jROV6I471Lm9g4 JNm1tGn3jr+krOY5AZeuI/E3PgWLIhBvbaGTjB6nA3Pv3Cm2uM1OJLg1YTneY42C MThZ4pUmRUGuLixulsNYzjC2akUBVy7zPL2k2Ni68DYO349Z6uXWwK8TdaA1tsvC Mgvb8aItr/Da0a8pCXVdWhy9zLbox8COLW6bDD+vGOY9048d4rc= -----END CERTIFICATE-----Generated at Mon Oct 26 04:03:52 2026 by rpki-client