$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e328aac3-0094-421f-a201-24d820e2ab3d/0/8FB017F8558B134E65670C5E56417CAA2FC460F1.mft File: 8FB017F8558B134E65670C5E56417CAA2FC460F1.mft (raw, json) Hash identifier: nh53qmooOzsub+oZpP8knjVdR8IqJSksO3HGJkkAjQs= Subject key identifier: D5:F6:D2:93:06:C2:55:0B:24:65:5C:AE:7B:6A:6F:EF:45:45:AF:F6 Authority key identifier: 8F:B0:17:F8:55:8B:13:4E:65:67:0C:5E:56:41:7C:AA:2F:C4:60:F1 Certificate issuer: /CN=8FB017F8558B134E65670C5E56417CAA2FC460F1 Certificate serial: 3AE72033EFA0D82658226D301FA1AD17A0723B4F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8FB017F8558B134E65670C5E56417CAA2FC460F1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e328aac3-0094-421f-a201-24d820e2ab3d/0/8FB017F8558B134E65670C5E56417CAA2FC460F1.mft Manifest number: EA Signing time: Sun 25 Oct 2026 17:13:10 +0000 Manifest this update: Sun 25 Oct 2026 17:08:10 +0000 Manifest next update: Mon 26 Oct 2026 21:09:10 +0000 Files and hashes: 1: 8FB017F8558B134E65670C5E56417CAA2FC460F1.crl (hash: bW+I5xN3e7X+PIsTUgDcCsdTjpHVPBAfFnK5LpmIIp8=) 2: 3130332e3134312e3233342e302f32342d3234203d3e20313339333634.roa (hash: DZWl5mWmmx3C6HZfgC0P5GgRxbzQDenyir2DbhS+/vY=) 3: 3130332e3136392e3230302e302f32342d3234203d3e20313339333634.roa (hash: toXJPhNtOXf98GJBbdqi9mllMSbcAgrmezktdUtueZ4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e328aac3-0094-421f-a201-24d820e2ab3d/0/8FB017F8558B134E65670C5E56417CAA2FC460F1.crl rsync://rpki-rsync.idnic.net/repo/e328aac3-0094-421f-a201-24d820e2ab3d/0/8FB017F8558B134E65670C5E56417CAA2FC460F1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8FB017F8558B134E65670C5E56417CAA2FC460F1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 12:34:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:e7:20:33:ef:a0:d8:26:58:22:6d:30:1f:a1:ad:17:a0:72:3b:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FB017F8558B134E65670C5E56417CAA2FC460F1 Validity Not Before: Oct 25 17:08:10 2026 GMT Not After : Oct 26 21:09:10 2026 GMT Subject: CN=D5F6D29306C2550B24655CAE7B6A6FEF4545AFF6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:f0:a9:56:4d:13:13:49:bf:81:6b:32:9e:07: 02:a3:11:82:8f:83:b6:30:6a:38:6a:7d:26:2f:f1: 24:88:40:16:df:77:c6:60:c1:ca:18:e5:e4:8b:e3: eb:f8:6c:c3:10:60:70:79:2c:6d:50:a7:a8:bf:4e: 7c:d8:84:62:39:2e:c9:26:cb:24:9d:ff:13:a6:b9: d7:6e:da:a0:d4:af:cf:0a:9a:f0:1c:19:28:fa:fb: eb:68:ef:98:0d:2d:d8:4e:30:f2:3c:1d:62:b7:d1: ea:8b:6b:2b:b4:2f:7c:77:bb:66:9a:4c:36:68:80: be:13:2f:f8:38:d9:00:82:32:7a:67:31:c7:2a:a8: ca:ed:e2:ff:1b:bf:a6:e3:75:32:c8:88:69:ef:a9: 3c:ac:f9:d1:b1:91:83:c8:2f:9c:9e:0e:4d:bd:41: f9:53:41:fe:28:35:fe:00:8a:69:2d:5e:d4:a5:34: de:cf:e3:e0:52:b7:ec:f9:2b:a0:f0:b5:cf:ec:4d: 7e:43:ca:a4:f0:62:26:46:79:2c:15:a1:17:52:d0: 8f:a3:20:fa:01:18:10:2f:f2:e9:f4:b2:7c:f1:f7: 77:a4:57:68:17:f2:d5:e3:28:cd:b6:97:0e:24:db: 0b:b0:86:ee:e0:4c:39:11:5a:c6:08:31:ce:23:02: 54:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:F6:D2:93:06:C2:55:0B:24:65:5C:AE:7B:6A:6F:EF:45:45:AF:F6 X509v3 Authority Key Identifier: keyid:8F:B0:17:F8:55:8B:13:4E:65:67:0C:5E:56:41:7C:AA:2F:C4:60:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e328aac3-0094-421f-a201-24d820e2ab3d/0/8FB017F8558B134E65670C5E56417CAA2FC460F1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8FB017F8558B134E65670C5E56417CAA2FC460F1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e328aac3-0094-421f-a201-24d820e2ab3d/0/8FB017F8558B134E65670C5E56417CAA2FC460F1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:0e:93:32:0f:e6:73:67:dd:ea:58:4e:da:5c:4c:7d:15:c1: d1:55:b9:1e:24:ce:48:d1:e9:dc:78:c1:8e:7e:63:94:d7:c1: 4e:bb:84:d0:bd:1a:8f:39:5e:60:9c:0a:1a:a4:25:52:da:fd: 1b:89:e6:46:77:fb:b3:b9:d6:ae:02:2b:2e:3a:e6:be:cf:99: 87:32:8d:3c:27:04:aa:3d:bc:44:ba:82:c9:dc:36:3d:58:42: 38:3c:c6:96:17:76:4b:e9:42:cc:fb:e4:e6:e6:59:93:33:c2: 3e:d7:b6:9e:2a:d3:d6:d7:86:d7:57:cf:11:32:43:0c:cf:3e: 85:cf:17:ba:48:05:3a:9f:47:df:de:d9:13:86:7b:29:3e:70: 36:5b:54:3a:af:75:1c:4c:86:c0:cd:56:d6:85:82:97:90:1c: 61:c6:e5:79:7d:f5:22:be:19:47:ea:cb:7c:01:72:d4:86:ab: 72:0e:e9:11:df:a6:69:d7:8d:a3:92:52:52:20:8e:9c:74:b2: 09:16:46:b8:ba:e1:40:e3:dc:db:09:83:72:54:96:f4:8e:40: 4d:96:7b:bb:9c:f6:f9:5e:8a:8e:da:41:53:28:e7:0d:9f:b3: df:7f:3f:fe:59:51:90:d4:3f:77:e1:bc:98:01:8f:dd:80:af: 76:be:60:6b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOucgM++g2CZYIm0wH6GtF6ByO08wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZCMDE3Rjg1NThCMTM0RTY1NjcwQzVFNTY0MTdDQUEy RkM0NjBGMTAeFw0yNjEwMjUxNzA4MTBaFw0yNjEwMjYyMTA5MTBaMDMxMTAvBgNV BAMTKEQ1RjZEMjkzMDZDMjU1MEIyNDY1NUNBRTdCNkE2RkVGNDU0NUFGRjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm8KlWTRMTSb+BazKeBwKjEYKP g7YwajhqfSYv8SSIQBbfd8ZgwcoY5eSL4+v4bMMQYHB5LG1Qp6i/TnzYhGI5Lskm yySd/xOmuddu2qDUr88KmvAcGSj6++to75gNLdhOMPI8HWK30eqLayu0L3x3u2aa TDZogL4TL/g42QCCMnpnMccqqMrt4v8bv6bjdTLIiGnvqTys+dGxkYPIL5yeDk29 QflTQf4oNf4AimktXtSlNN7P4+BSt+z5K6Dwtc/sTX5DyqTwYiZGeSwVoRdS0I+j IPoBGBAv8un0snzx93ekV2gX8tXjKM22lw4k2wuwhu7gTDkRWsYIMc4jAlRRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1fbSkwbCVQskZVyue2pv70VFr/YwHwYDVR0j BBgwFoAUj7AX+FWLE05lZwxeVkF8qi/EYPEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTMyOGFhYzMtMDA5NC00MjFmLWEyMDEtMjRkODIwZTJhYjNkLzAvOEZCMDE3Rjg1 NThCMTM0RTY1NjcwQzVFNTY0MTdDQUEyRkM0NjBGMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84RkIwMTdGODU1OEIxMzRFNjU2NzBDNUU1NjQxN0NBQTJGQzQ2 MEYxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTMyOGFhYzMtMDA5NC00MjFmLWEy MDEtMjRkODIwZTJhYjNkLzAvOEZCMDE3Rjg1NThCMTM0RTY1NjcwQzVFNTY0MTdD QUEyRkM0NjBGMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKQOkzIP5nNn3epYTtpcTH0VwdFVuR4kzkjR 6dx4wY5+Y5TXwU67hNC9Go85XmCcChqkJVLa/RuJ5kZ3+7O51q4CKy465r7PmYcy jTwnBKo9vES6gsncNj1YQjg8xpYXdkvpQsz75ObmWZMzwj7Xtp4q09bXhtdXzxEy QwzPPoXPF7pIBTqfR9/e2ROGeyk+cDZbVDqvdRxMhsDNVtaFgpeQHGHG5Xl99SK+ GUfqy3wBctSGq3IO6RHfpmnXjaOSUlIgjpx0sgkWRri64UDj3NsJg3JUlvSOQE2W e7uc9vleio7aQVMo5w2fs99/P/5ZUZDUP3fhvJgBj92Ar3a+YGs= -----END CERTIFICATE-----Generated at Mon Oct 26 05:49:38 2026 by rpki-client