$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1bae58ac-5917-4069-9a6c-83dc1ba32126/0/E8F23942C871B1A23D50AA7027A74ABDC7172EA3.mft File: E8F23942C871B1A23D50AA7027A74ABDC7172EA3.mft (raw, json) Hash identifier: 996TdF+4Pe8fxrgnO/QXpBi3X33O31AUelnuQZYZAII= Subject key identifier: 40:13:D9:63:74:25:69:D4:4E:01:A5:67:6B:E5:8D:6F:9D:FF:0C:39 Authority key identifier: E8:F2:39:42:C8:71:B1:A2:3D:50:AA:70:27:A7:4A:BD:C7:17:2E:A3 Certificate issuer: /CN=E8F23942C871B1A23D50AA7027A74ABDC7172EA3 Certificate serial: 487D8A4F61FE0EF939AD4DF7155DE0B8BFEDA193 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E8F23942C871B1A23D50AA7027A74ABDC7172EA3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1bae58ac-5917-4069-9a6c-83dc1ba32126/0/E8F23942C871B1A23D50AA7027A74ABDC7172EA3.mft Manifest number: D7 Signing time: Sat 10 Oct 2026 06:29:31 +0000 Manifest this update: Sat 10 Oct 2026 06:24:31 +0000 Manifest next update: Sun 11 Oct 2026 06:42:31 +0000 Files and hashes: 1: 3130332e3234362e3130372e302f32342d3234203d3e20313331373738.roa (hash: hL7QfKjtDKqwKchVRtqitw7xLrTQDNQicxI0MMMupQI=) 2: 323030313a6466303a3232393a3a2f34382d3438203d3e20313331373738.roa (hash: /GUQyhQCCG48GVOr5PjkMlvyumHtwdaSkLWzQJVBKPU=) 3: E8F23942C871B1A23D50AA7027A74ABDC7172EA3.crl (hash: FPuzD1X0bEl3gixLa9Qss+PldkTpUCFtUd1gtdx/GuU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1bae58ac-5917-4069-9a6c-83dc1ba32126/0/E8F23942C871B1A23D50AA7027A74ABDC7172EA3.crl rsync://rpki-rsync.idnic.net/repo/1bae58ac-5917-4069-9a6c-83dc1ba32126/0/E8F23942C871B1A23D50AA7027A74ABDC7172EA3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E8F23942C871B1A23D50AA7027A74ABDC7172EA3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 Oct 2026 04:21:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:7d:8a:4f:61:fe:0e:f9:39:ad:4d:f7:15:5d:e0:b8:bf:ed:a1:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E8F23942C871B1A23D50AA7027A74ABDC7172EA3 Validity Not Before: Oct 10 06:24:31 2026 GMT Not After : Oct 11 06:42:31 2026 GMT Subject: CN=4013D963742569D44E01A5676BE58D6F9DFF0C39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:59:de:91:4f:47:50:96:e6:f6:cc:8c:9b:74: 27:9a:d1:f6:e6:a7:fc:d7:1c:28:c0:cd:00:6c:5d: a5:7d:f9:6a:32:04:c2:26:29:ee:3f:1e:1f:dc:d0: c5:ee:95:ad:50:47:ee:65:56:eb:f7:c5:1a:f0:3e: a5:4a:d7:fd:ad:f6:75:91:27:e3:f6:f8:a9:af:a8: b4:d8:dd:4e:24:93:b9:31:fe:72:e1:bc:d2:c8:d4: 5a:05:29:ab:a6:4a:5d:7b:1a:d3:40:85:2e:50:59: 08:18:3a:9f:5b:ff:28:af:0e:d4:e4:8b:47:bd:de: 2e:9a:ed:3b:d1:58:b4:79:d3:ef:ec:bd:b0:dc:86: 93:2a:5d:8d:8d:28:5d:00:b1:c8:43:2c:52:71:32: 69:d8:86:63:59:1b:35:93:10:b4:fb:11:7d:26:cc: f5:b6:ad:54:42:93:6e:7a:75:63:3c:0a:26:2a:6b: 5a:23:10:77:2b:9a:f7:b3:0d:ef:29:f2:d7:f5:a6: dd:27:06:55:6e:e4:c4:7d:d0:1f:6a:4c:27:8f:26: 52:18:ab:42:52:f7:79:e5:60:c7:c8:e1:47:d3:c0: b9:e1:75:24:1d:5f:7c:17:30:0b:3e:5f:fa:69:03: e8:59:61:de:83:6e:8c:8b:e4:ad:cc:e7:af:91:38: 85:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:13:D9:63:74:25:69:D4:4E:01:A5:67:6B:E5:8D:6F:9D:FF:0C:39 X509v3 Authority Key Identifier: keyid:E8:F2:39:42:C8:71:B1:A2:3D:50:AA:70:27:A7:4A:BD:C7:17:2E:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1bae58ac-5917-4069-9a6c-83dc1ba32126/0/E8F23942C871B1A23D50AA7027A74ABDC7172EA3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E8F23942C871B1A23D50AA7027A74ABDC7172EA3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1bae58ac-5917-4069-9a6c-83dc1ba32126/0/E8F23942C871B1A23D50AA7027A74ABDC7172EA3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:f0:1b:d5:39:4b:56:80:99:1a:dd:8a:6b:2f:6c:83:04:31: 5e:d8:89:dd:de:92:d1:ef:03:50:64:4b:ff:cb:ca:97:8b:81: b0:fb:47:0c:da:37:25:c3:03:10:34:ed:ec:5c:28:87:15:39: b8:05:0b:5b:7e:30:8f:41:8c:32:7a:c6:52:13:8c:c1:7c:52: 08:45:54:c5:69:df:4b:b0:67:90:6b:ae:9a:3d:59:c6:10:6c: a4:e0:76:bd:72:1d:d4:89:e5:1a:33:72:07:e9:6b:14:d7:6b: 59:48:ff:6e:37:62:8a:10:57:a0:84:3f:bf:e1:ad:3f:31:9a: 10:80:93:8d:69:71:dc:bd:6f:da:17:f0:bd:8b:f3:13:46:a4: 8c:42:f5:38:be:34:c7:04:e1:89:95:cb:6f:39:d7:61:9c:a0: 9f:88:d6:95:62:da:f0:08:9f:f4:83:79:a7:45:e1:2b:33:64: 13:3d:40:e1:58:54:f1:14:75:16:7f:0c:03:53:2f:bd:54:43: 0a:fd:17:d5:7f:50:86:08:fb:81:68:84:1c:b7:06:14:e7:dc: 3e:c8:99:6b:25:fc:e1:7a:9a:2f:d7:15:0b:54:08:0a:8f:33: b3:d9:ca:21:3a:5b:a2:aa:6f:e0:6c:32:0f:78:63:8a:3d:00: 2f:a7:10:46 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSH2KT2H+Dvk5rU33FV3guL/toZMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRThGMjM5NDJDODcxQjFBMjNENTBBQTcwMjdBNzRBQkRD NzE3MkVBMzAeFw0yNjEwMTAwNjI0MzFaFw0yNjEwMTEwNjQyMzFaMDMxMTAvBgNV BAMTKDQwMTNEOTYzNzQyNTY5RDQ0RTAxQTU2NzZCRTU4RDZGOURGRjBDMzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0Wd6RT0dQlub2zIybdCea0fbm p/zXHCjAzQBsXaV9+WoyBMImKe4/Hh/c0MXula1QR+5lVuv3xRrwPqVK1/2t9nWR J+P2+KmvqLTY3U4kk7kx/nLhvNLI1FoFKaumSl17GtNAhS5QWQgYOp9b/yivDtTk i0e93i6a7TvRWLR50+/svbDchpMqXY2NKF0AschDLFJxMmnYhmNZGzWTELT7EX0m zPW2rVRCk256dWM8CiYqa1ojEHcrmvezDe8p8tf1pt0nBlVu5MR90B9qTCePJlIY q0JS93nlYMfI4UfTwLnhdSQdX3wXMAs+X/ppA+hZYd6DboyL5K3M56+ROIX3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQBPZY3QladROAaVna+WNb53/DDkwHwYDVR0j BBgwFoAU6PI5QshxsaI9UKpwJ6dKvccXLqMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWJhZTU4YWMtNTkxNy00MDY5LTlhNmMtODNkYzFiYTMyMTI2LzAvRThGMjM5NDJD ODcxQjFBMjNENTBBQTcwMjdBNzRBQkRDNzE3MkVBMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FOEYyMzk0MkM4NzFCMUEyM0Q1MEFBNzAyN0E3NEFCREM3MTcy RUEzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWJhZTU4YWMtNTkxNy00MDY5LTlh NmMtODNkYzFiYTMyMTI2LzAvRThGMjM5NDJDODcxQjFBMjNENTBBQTcwMjdBNzRB QkRDNzE3MkVBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHrwG9U5S1aAmRrdimsvbIMEMV7Yid3ektHv A1BkS//LypeLgbD7RwzaNyXDAxA07excKIcVObgFC1t+MI9BjDJ6xlITjMF8UghF VMVp30uwZ5Brrpo9WcYQbKTgdr1yHdSJ5RozcgfpaxTXa1lI/243YooQV6CEP7/h rT8xmhCAk41pcdy9b9oX8L2L8xNGpIxC9Ti+NMcE4YmVy28512GcoJ+I1pVi2vAI n/SDeadF4SszZBM9QOFYVPEUdRZ/DANTL71UQwr9F9V/UIYI+4FohBy3BhTn3D7I mWsl/OF6mi/XFQtUCAqPM7PZyiE6W6Kqb+BsMg94Y4o9AC+nEEY= -----END CERTIFICATE-----Generated at Sat Oct 10 10:35:15 2026 by rpki-client