$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e328aac3-0094-421f-a201-24d820e2ab3d/0/8FB017F8558B134E65670C5E56417CAA2FC460F1.mft File: 8FB017F8558B134E65670C5E56417CAA2FC460F1.mft (raw, json) Hash identifier: WkXTuFdw4MnxBegmyUGib9P15HNmPR+9Ookj56hZZA4= Subject key identifier: BB:EB:CC:61:21:17:28:C6:FB:09:6E:34:D7:F3:C5:57:EE:0D:10:18 Authority key identifier: 8F:B0:17:F8:55:8B:13:4E:65:67:0C:5E:56:41:7C:AA:2F:C4:60:F1 Certificate issuer: /CN=8FB017F8558B134E65670C5E56417CAA2FC460F1 Certificate serial: 3FD51C535447A21EA20F8C7C6FB5B036AEF737FF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8FB017F8558B134E65670C5E56417CAA2FC460F1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e328aac3-0094-421f-a201-24d820e2ab3d/0/8FB017F8558B134E65670C5E56417CAA2FC460F1.mft Manifest number: E9 Signing time: Sat 24 Oct 2026 23:59:10 +0000 Manifest this update: Sat 24 Oct 2026 23:54:10 +0000 Manifest next update: Mon 26 Oct 2026 01:08:10 +0000 Files and hashes: 1: 8FB017F8558B134E65670C5E56417CAA2FC460F1.crl (hash: NGW3Jt6Z9YLA95Da5qv/8epz/QMScucnBmm6B0AT03o=) 2: 3130332e3136392e3230302e302f32342d3234203d3e20313339333634.roa (hash: toXJPhNtOXf98GJBbdqi9mllMSbcAgrmezktdUtueZ4=) 3: 3130332e3134312e3233342e302f32342d3234203d3e20313339333634.roa (hash: DZWl5mWmmx3C6HZfgC0P5GgRxbzQDenyir2DbhS+/vY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e328aac3-0094-421f-a201-24d820e2ab3d/0/8FB017F8558B134E65670C5E56417CAA2FC460F1.crl rsync://rpki-rsync.idnic.net/repo/e328aac3-0094-421f-a201-24d820e2ab3d/0/8FB017F8558B134E65670C5E56417CAA2FC460F1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8FB017F8558B134E65670C5E56417CAA2FC460F1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 19:21:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:d5:1c:53:54:47:a2:1e:a2:0f:8c:7c:6f:b5:b0:36:ae:f7:37:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FB017F8558B134E65670C5E56417CAA2FC460F1 Validity Not Before: Oct 24 23:54:10 2026 GMT Not After : Oct 26 01:08:10 2026 GMT Subject: CN=BBEBCC61211728C6FB096E34D7F3C557EE0D1018 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:92:88:9c:a8:2e:4a:d7:5f:2d:12:b7:b5:14: e8:f1:81:20:76:ae:04:70:4e:6b:9b:fb:d1:7b:63: c5:25:9f:47:e9:30:4f:d9:61:1e:4f:0d:67:ec:3d: 21:e9:e6:22:70:cd:7f:dd:94:fd:b4:66:77:3a:53: 8e:be:03:79:45:fa:03:96:04:30:d3:ae:ee:9b:d7: d6:4e:36:6b:1c:df:21:c2:28:b0:d0:df:40:79:47: 4d:22:03:25:8e:b9:1c:a6:42:a5:ef:a3:3b:15:69: ae:53:f7:b2:4e:19:de:62:3b:9e:1f:14:c4:6a:90: 81:78:7b:92:81:f3:23:8d:00:43:81:60:cb:69:4c: a9:94:ca:e6:de:a9:4d:5a:9f:1a:37:21:cb:e0:79: ab:3f:0c:36:82:e0:5b:d8:2f:93:63:aa:1a:98:fc: 38:ae:ca:94:11:f4:14:bf:c2:a1:9f:89:f2:9c:22: 88:83:86:ef:3c:e5:89:a8:be:b0:3d:6e:f7:9e:be: 59:92:64:a6:66:cf:48:f8:ac:2f:45:c9:9e:dd:d8: 2d:48:a7:64:ca:c4:09:ad:da:71:a6:ca:bf:e4:c9: 32:f8:4e:38:b6:1f:1d:f1:b8:c7:d8:43:5b:4d:89: 77:c1:2d:ef:2f:a3:9a:82:c1:96:40:2f:8b:13:12: 35:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:EB:CC:61:21:17:28:C6:FB:09:6E:34:D7:F3:C5:57:EE:0D:10:18 X509v3 Authority Key Identifier: keyid:8F:B0:17:F8:55:8B:13:4E:65:67:0C:5E:56:41:7C:AA:2F:C4:60:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e328aac3-0094-421f-a201-24d820e2ab3d/0/8FB017F8558B134E65670C5E56417CAA2FC460F1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8FB017F8558B134E65670C5E56417CAA2FC460F1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e328aac3-0094-421f-a201-24d820e2ab3d/0/8FB017F8558B134E65670C5E56417CAA2FC460F1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:d8:3a:91:fd:f1:7d:49:e8:f5:77:0f:a2:66:19:1f:89:0b: 8f:87:c0:c8:0f:fc:f0:95:f6:d8:71:94:5f:4a:29:b7:06:ac: 6f:5a:16:b4:22:a1:a8:fc:93:dd:1b:66:92:1b:6e:6e:86:7f: b6:84:0d:1e:57:49:6e:61:e6:e3:4c:be:7c:17:87:88:e8:f4: f8:6f:d0:55:dc:3f:10:08:b8:22:3f:a1:2e:bd:87:41:72:95: 7e:49:b6:3a:a6:15:8f:b7:26:42:35:be:fd:57:f7:70:aa:1b: 27:fa:8d:55:92:6f:a3:68:e5:60:cb:a6:02:fa:34:6b:b9:4e: eb:c7:f0:cd:3d:fc:a2:74:58:a8:84:13:5d:b0:f0:28:bb:91: b4:9d:22:6e:34:0f:90:50:b8:b6:6a:e5:1c:37:31:5f:e0:8c: a9:ec:f2:77:60:66:ab:a1:f3:6e:71:1d:4e:d5:6e:cc:74:55: 43:f4:c4:b5:53:f9:ea:2d:f2:e9:51:68:e1:37:03:c0:85:47: dc:cc:13:0d:ed:12:35:b4:16:be:81:40:b3:1f:0f:83:79:29: 12:19:e4:b8:4c:3e:99:5b:f0:14:cc:a6:8b:c9:1f:ed:0c:dd: ed:a1:23:c5:3b:61:9c:07:ce:3b:1b:4c:7f:cf:10:cc:7a:9a: f9:c3:50:51 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP9UcU1RHoh6iD4x8b7WwNq73N/8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZCMDE3Rjg1NThCMTM0RTY1NjcwQzVFNTY0MTdDQUEy RkM0NjBGMTAeFw0yNjEwMjQyMzU0MTBaFw0yNjEwMjYwMTA4MTBaMDMxMTAvBgNV BAMTKEJCRUJDQzYxMjExNzI4QzZGQjA5NkUzNEQ3RjNDNTU3RUUwRDEwMTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkkoicqC5K118tEre1FOjxgSB2 rgRwTmub+9F7Y8Uln0fpME/ZYR5PDWfsPSHp5iJwzX/dlP20Znc6U46+A3lF+gOW BDDTru6b19ZONmsc3yHCKLDQ30B5R00iAyWOuRymQqXvozsVaa5T97JOGd5iO54f FMRqkIF4e5KB8yONAEOBYMtpTKmUyubeqU1anxo3Icvgeas/DDaC4FvYL5NjqhqY /DiuypQR9BS/wqGfifKcIoiDhu885YmovrA9bveevlmSZKZmz0j4rC9FyZ7d2C1I p2TKxAmt2nGmyr/kyTL4Tji2Hx3xuMfYQ1tNiXfBLe8vo5qCwZZAL4sTEjWJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUu+vMYSEXKMb7CW401/PFV+4NEBgwHwYDVR0j BBgwFoAUj7AX+FWLE05lZwxeVkF8qi/EYPEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTMyOGFhYzMtMDA5NC00MjFmLWEyMDEtMjRkODIwZTJhYjNkLzAvOEZCMDE3Rjg1 NThCMTM0RTY1NjcwQzVFNTY0MTdDQUEyRkM0NjBGMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84RkIwMTdGODU1OEIxMzRFNjU2NzBDNUU1NjQxN0NBQTJGQzQ2 MEYxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTMyOGFhYzMtMDA5NC00MjFmLWEy MDEtMjRkODIwZTJhYjNkLzAvOEZCMDE3Rjg1NThCMTM0RTY1NjcwQzVFNTY0MTdD QUEyRkM0NjBGMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGTYOpH98X1J6PV3D6JmGR+JC4+HwMgP/PCV 9thxlF9KKbcGrG9aFrQioaj8k90bZpIbbm6Gf7aEDR5XSW5h5uNMvnwXh4jo9Phv 0FXcPxAIuCI/oS69h0FylX5JtjqmFY+3JkI1vv1X93CqGyf6jVWSb6No5WDLpgL6 NGu5TuvH8M09/KJ0WKiEE12w8Ci7kbSdIm40D5BQuLZq5Rw3MV/gjKns8ndgZquh 825xHU7Vbsx0VUP0xLVT+eot8ulRaOE3A8CFR9zMEw3tEjW0Fr6BQLMfD4N5KRIZ 5LhMPplb8BTMpovJH+0M3e2hI8U7YZwHzjsbTH/PEMx6mvnDUFE= -----END CERTIFICATE-----Generated at Sun Oct 25 12:30:26 2026 by rpki-client