$ rpki-client -vvvf rpki-rsync.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/108BD2ED0D3114613C2725256398C38B9DBAD520.mft File: 108BD2ED0D3114613C2725256398C38B9DBAD520.mft (raw, json) Hash identifier: 6alMcphYfQ+fAhthU7pwjt1E3FfGCRUig4nwsC/iwvU= Subject key identifier: D8:A0:33:12:9B:18:35:E3:45:B1:BF:A8:48:1C:EA:EF:6D:35:A2:5C Authority key identifier: 10:8B:D2:ED:0D:31:14:61:3C:27:25:25:63:98:C3:8B:9D:BA:D5:20 Certificate issuer: /CN=108BD2ED0D3114613C2725256398C38B9DBAD520 Certificate serial: 17F34B32B76366DA1FB2A95849FCC7C850482A0B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/108BD2ED0D3114613C2725256398C38B9DBAD520.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/108BD2ED0D3114613C2725256398C38B9DBAD520.mft Manifest number: DA Signing time: Mon 12 Oct 2026 10:04:03 +0000 Manifest this update: Mon 12 Oct 2026 09:59:03 +0000 Manifest next update: Tue 13 Oct 2026 11:38:03 +0000 Files and hashes: 1: 3131392e31302e3137382e302f32332d3233203d3e203234353330.roa (hash: PwM3oQKmuXyEeAOnaDonlOle/IcF5DW+Zh/RIO3hM04=) 2: 323430313a643934303a3a2f33322d3332203d3e203234353330.roa (hash: GNdi5uU7mmpbww293clFlNy9lTQ5KrlF2tYcTj15jTw=) 3: 3131392e31302e3138312e302f32342d3234203d3e203234353330.roa (hash: ybxkb0B+hs5pt/EvlpkTwH/9ZJ1gNWd/AVaEY/3TjMw=) 4: 323430313a643934303a653066663a3a2f34382d3438203d3e203234353330.roa (hash: 3AOdmgKzkbZxwPp2bCxMQYnSsnvXDmSvwUIaP+cc8u8=) 5: 3131392e31302e3138302e302f32322d3232203d3e203234353330.roa (hash: QQz19AU/3ag6WIvOpz+6vMYYG0ifu3LuEG3RYnhZW1o=) 6: 3131392e31302e3138302e302f32332d3233203d3e203234353330.roa (hash: J3mFc+blOdqx9rOGug3IYw5ONv5fbpx/wInrtP6ubZ8=) 7: 3131392e31302e3138322e302f32332d3233203d3e203234353330.roa (hash: P1NOd8bnXDoe1Us3SAeiUo7ByuV/RRZY5l/EMzT/C1k=) 8: 3131392e31302e3137362e302f32312d3234203d3e203234353330.roa (hash: CprlVpIAhuZZ+TvberfWR+fBEc8FklJHg5e3Yj9s2YM=) 9: 108BD2ED0D3114613C2725256398C38B9DBAD520.crl (hash: JakjY6FLjtTFcihwDvPk29uLjq/K+ChHOTyEdoJ9XZ0=) 10: 3131392e31302e3137392e302f32342d3234203d3e203234353330.roa (hash: 4xOrTa7LOQthmjAbRy6Dje8YDXSs3QUpwJ2MSJFD6BE=) 11: 3131392e31302e3137362e302f32342d3234203d3e203234353330.roa (hash: jhVYi1rtAR5MxAuCXQ51AbZzQNRaKl8p9WMw+ffrY1g=) 12: 3131392e31302e3138302e302f32342d3234203d3e203234353330.roa (hash: 0ou1MA6qNBtVm99WbTegwqF+NpmPqc1Ktrk0OHI11U4=) 13: 3131392e31302e3137372e302f32342d3234203d3e203234353330.roa (hash: HA8oysbBANlVY/UvbExuOyGu423Ies7m420JK3DCo1o=) 14: 3131392e31302e3138322e302f32342d3234203d3e203234353330.roa (hash: QDeYOiv+3vHs+MEBjUuMwoTIYLRTIqwHuQD6t1530Iw=) 15: 3131392e31302e3138332e302f32342d3234203d3e203234353330.roa (hash: DRkP4Rbo/CCQujXep36UcLsFucXNff21TtbLk7RG9SM=) 16: 3131392e31302e3137382e302f32342d3234203d3e203234353330.roa (hash: GxTOWueUzacQJLW8/Lw/u7dSqU8jy6t+nHDrIvlJlj4=) 17: 3131392e31302e3137362e302f32312d3231203d3e203234353330.roa (hash: M2e4yYR/RlmXdndzlSbI4SF0SK1f8bM5s0bETw7ewlU=) 18: 3131392e31302e3137362e302f32332d3233203d3e203234353330.roa (hash: 0NwKpcPERLvBE69Wt/igLsf2q1CoJnvxAbw3+CiCst8=) 19: 3131392e31302e3137362e302f32322d3232203d3e203234353330.roa (hash: lhKQdAX20mlvRL5BGbA0faxy+2IyoM1d90NTGWc0wAA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/108BD2ED0D3114613C2725256398C38B9DBAD520.crl rsync://rpki-rsync.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/108BD2ED0D3114613C2725256398C38B9DBAD520.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/108BD2ED0D3114613C2725256398C38B9DBAD520.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 08:55:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:f3:4b:32:b7:63:66:da:1f:b2:a9:58:49:fc:c7:c8:50:48:2a:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=108BD2ED0D3114613C2725256398C38B9DBAD520 Validity Not Before: Oct 12 09:59:03 2026 GMT Not After : Oct 13 11:38:03 2026 GMT Subject: CN=D8A033129B1835E345B1BFA8481CEAEF6D35A25C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:36:a3:76:bb:1b:aa:32:41:4d:0a:03:7a:fb: b5:d5:de:f5:7b:a1:32:d6:1f:00:46:bd:ea:74:e4: 7a:2c:e5:4e:d0:59:35:f3:7d:fb:62:a2:8f:a6:7a: a8:d1:ee:d1:87:3f:db:72:ff:10:03:f9:81:4f:b7: f5:b3:3f:a4:c3:79:2f:57:e1:19:86:89:dc:a4:df: 54:ae:17:1f:ba:04:37:fe:20:c6:1f:92:df:1d:7b: 23:ff:89:b8:db:a8:3f:24:54:a5:98:61:70:dd:cc: 64:63:53:c5:a1:3e:da:41:47:98:b6:b4:46:79:96: 22:ac:24:8a:60:42:67:2e:fa:d3:a7:0e:93:75:b7: 80:bd:85:e4:a3:68:39:f7:67:47:b0:5d:9b:40:14: fe:f8:d5:22:80:51:5a:d9:1b:76:6a:2f:ab:5d:ce: 77:17:cd:a5:58:a6:c6:66:09:46:4f:25:91:45:8e: ef:55:79:54:bc:0b:20:d7:59:52:d6:ed:5c:e5:78: c3:01:84:ac:38:a9:32:d5:e2:be:60:ec:31:47:95: 37:e5:f2:93:89:3d:0e:e1:01:2a:49:5e:e0:b1:9e: 7e:09:da:e2:ec:ab:fd:75:de:67:c2:20:e2:12:03: 44:42:1e:cf:85:98:fb:68:77:e3:67:4a:7a:52:75: 21:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:A0:33:12:9B:18:35:E3:45:B1:BF:A8:48:1C:EA:EF:6D:35:A2:5C X509v3 Authority Key Identifier: keyid:10:8B:D2:ED:0D:31:14:61:3C:27:25:25:63:98:C3:8B:9D:BA:D5:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/108BD2ED0D3114613C2725256398C38B9DBAD520.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/108BD2ED0D3114613C2725256398C38B9DBAD520.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/108BD2ED0D3114613C2725256398C38B9DBAD520.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:20:88:2f:70:d5:dd:fd:3a:1d:29:a9:cb:7c:3d:c2:d0:bb: 7c:f2:f5:41:32:09:05:46:0f:68:8c:1b:a3:43:04:18:17:af: c8:32:ff:32:29:b5:c4:d7:ed:01:6f:74:32:d8:c1:bb:b9:f8: 0f:46:30:72:4a:60:2a:21:fb:25:62:8d:9c:2e:84:d5:ee:b8: 26:d5:e5:b5:d1:8c:90:08:a1:bc:53:9b:b8:d0:74:55:bb:b7: 7e:d1:95:61:bb:c8:0b:9f:78:f6:12:e3:f4:d3:77:42:d7:2f: 02:69:63:96:d1:13:ef:1e:0f:86:b1:82:9d:d5:bf:bf:f9:19: 4d:ab:a7:21:40:b2:e1:2f:4d:42:8f:04:ea:86:28:34:10:51: 3b:bc:95:16:ff:90:99:c1:da:f6:a0:11:0b:93:88:01:e3:2e: 9f:2a:12:83:fc:77:a3:44:ce:c3:a2:6f:cb:48:7d:bd:18:61: 4c:52:d4:f1:70:63:94:cf:e5:fa:08:a8:d0:d3:3e:1f:b1:70: 5a:f0:57:8e:1b:9a:d6:b1:34:33:c3:58:e2:65:6a:cd:ce:da: 3e:8c:1f:be:d9:57:22:2e:f4:03:ec:4d:47:3c:64:37:ff:a2: bd:63:56:3e:f4:41:62:3a:16:12:cc:f9:f3:bb:a6:b9:a7:fa: b0:7e:17:de -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF/NLMrdjZtofsqlYSfzHyFBIKgswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTA4QkQyRUQwRDMxMTQ2MTNDMjcyNTI1NjM5OEMzOEI5 REJBRDUyMDAeFw0yNjEwMTIwOTU5MDNaFw0yNjEwMTMxMTM4MDNaMDMxMTAvBgNV BAMTKEQ4QTAzMzEyOUIxODM1RTM0NUIxQkZBODQ4MUNFQUVGNkQzNUEyNUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqNqN2uxuqMkFNCgN6+7XV3vV7 oTLWHwBGvep05Hos5U7QWTXzfftioo+meqjR7tGHP9ty/xAD+YFPt/WzP6TDeS9X 4RmGidyk31SuFx+6BDf+IMYfkt8deyP/ibjbqD8kVKWYYXDdzGRjU8WhPtpBR5i2 tEZ5liKsJIpgQmcu+tOnDpN1t4C9heSjaDn3Z0ewXZtAFP741SKAUVrZG3ZqL6td zncXzaVYpsZmCUZPJZFFju9VeVS8CyDXWVLW7VzleMMBhKw4qTLV4r5g7DFHlTfl 8pOJPQ7hASpJXuCxnn4J2uLsq/113mfCIOISA0RCHs+FmPtod+NnSnpSdSENAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2KAzEpsYNeNFsb+oSBzq7201olwwHwYDVR0j BBgwFoAUEIvS7Q0xFGE8JyUlY5jDi5261SAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDQyMzQ0YmUtZjlmYi00NjM0LTkyZDYtODk0ZGQ1MzhjYWRmLzAvMTA4QkQyRUQw RDMxMTQ2MTNDMjcyNTI1NjM5OEMzOEI5REJBRDUyMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xMDhCRDJFRDBEMzExNDYxM0MyNzI1MjU2Mzk4QzM4QjlEQkFE NTIwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDQyMzQ0YmUtZjlmYi00NjM0LTky ZDYtODk0ZGQ1MzhjYWRmLzAvMTA4QkQyRUQwRDMxMTQ2MTNDMjcyNTI1NjM5OEMz OEI5REJBRDUyMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFQgiC9w1d39Oh0pqct8PcLQu3zy9UEyCQVG D2iMG6NDBBgXr8gy/zIptcTX7QFvdDLYwbu5+A9GMHJKYCoh+yVijZwuhNXuuCbV 5bXRjJAIobxTm7jQdFW7t37RlWG7yAufePYS4/TTd0LXLwJpY5bRE+8eD4axgp3V v7/5GU2rpyFAsuEvTUKPBOqGKDQQUTu8lRb/kJnB2vagEQuTiAHjLp8qEoP8d6NE zsOib8tIfb0YYUxS1PFwY5TP5foIqNDTPh+xcFrwV44bmtaxNDPDWOJlas3O2j6M H77ZVyIu9APsTUc8ZDf/or1jVj70QWI6FhLM+fO7prmn+rB+F94= -----END CERTIFICATE-----Generated at Tue Oct 13 00:58:25 2026 by rpki-client