$ rpki-client -vvvf rpki-rsync.idnic.net/repo/34a23c4e-3932-43bd-8176-f6251ddea842/0/8B43E14BD4588C4904A641356A5D07D628190CAB.mft File: 8B43E14BD4588C4904A641356A5D07D628190CAB.mft (raw, json) Hash identifier: 1+u81ATBewgHkAy+kgGLwPEBsfwYzVE/AJz03BV8oRI= Subject key identifier: 62:39:E1:76:26:F7:28:56:83:A9:33:5B:57:29:1A:16:77:DD:25:A6 Authority key identifier: 8B:43:E1:4B:D4:58:8C:49:04:A6:41:35:6A:5D:07:D6:28:19:0C:AB Certificate issuer: /CN=8B43E14BD4588C4904A641356A5D07D628190CAB Certificate serial: 5ED266F9BEF329FCE0082FBD966E6C5ED39B66EF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8B43E14BD4588C4904A641356A5D07D628190CAB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/34a23c4e-3932-43bd-8176-f6251ddea842/0/8B43E14BD4588C4904A641356A5D07D628190CAB.mft Manifest number: D6 Signing time: Fri 09 Oct 2026 15:36:19 +0000 Manifest this update: Fri 09 Oct 2026 15:31:19 +0000 Manifest next update: Sat 10 Oct 2026 18:55:19 +0000 Files and hashes: 1: 3130332e3137342e33362e302f32332d3234203d3e20313331313131.roa (hash: 0flsrdaSAjsWCJEWyeVcLLzCVtlFqOFqVNzD5e/gcuA=) 2: 8B43E14BD4588C4904A641356A5D07D628190CAB.crl (hash: +QOD1ym0wApoumMYD75coBT35aupwe2ewpH5X9l5qFY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/34a23c4e-3932-43bd-8176-f6251ddea842/0/8B43E14BD4588C4904A641356A5D07D628190CAB.crl rsync://rpki-rsync.idnic.net/repo/34a23c4e-3932-43bd-8176-f6251ddea842/0/8B43E14BD4588C4904A641356A5D07D628190CAB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8B43E14BD4588C4904A641356A5D07D628190CAB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 08:51:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:d2:66:f9:be:f3:29:fc:e0:08:2f:bd:96:6e:6c:5e:d3:9b:66:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B43E14BD4588C4904A641356A5D07D628190CAB Validity Not Before: Oct 9 15:31:19 2026 GMT Not After : Oct 10 18:55:19 2026 GMT Subject: CN=6239E17626F7285683A9335B57291A1677DD25A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:b5:6c:55:88:5b:43:f6:c8:da:83:7c:38:23: 45:9c:ea:46:8c:df:ec:b5:65:3f:16:69:c7:bc:10: f4:ad:23:1a:19:67:72:c8:e1:e7:44:84:4c:4f:1c: fb:79:62:7a:48:4d:1f:c0:09:de:f6:e0:e6:b1:85: 41:6a:89:60:50:2e:c8:30:36:27:ed:e2:19:53:ad: a7:2f:67:20:b2:82:47:5e:71:b7:2b:1c:22:5a:71: 54:9c:63:60:6b:5b:ce:ec:bd:6d:26:e9:ce:41:86: e4:29:b6:ff:21:55:8d:35:d8:0b:f1:aa:10:42:15: b5:22:a0:f9:bf:8b:b3:32:57:f0:7f:a4:50:89:80: 78:bc:51:34:48:0f:36:e9:1b:89:cf:e7:9a:0e:40: a7:88:4e:cc:11:4f:7a:e7:68:c0:45:19:49:9e:e7: a8:06:e2:da:e1:6c:d0:2b:bd:c1:18:fe:31:86:97: d8:5e:13:5d:3f:3c:2d:c1:12:df:c6:1b:11:c5:ed: 86:36:8e:25:40:40:85:3d:81:ac:cc:ac:18:12:4d: 2b:84:db:63:fc:2d:25:63:7a:2a:84:b2:8d:04:2b: ef:6b:2b:fa:35:f7:2f:64:35:f6:76:e7:69:bd:de: ed:7b:40:8e:c0:41:75:86:39:18:fc:0e:d0:44:5a: 46:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:39:E1:76:26:F7:28:56:83:A9:33:5B:57:29:1A:16:77:DD:25:A6 X509v3 Authority Key Identifier: keyid:8B:43:E1:4B:D4:58:8C:49:04:A6:41:35:6A:5D:07:D6:28:19:0C:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/34a23c4e-3932-43bd-8176-f6251ddea842/0/8B43E14BD4588C4904A641356A5D07D628190CAB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8B43E14BD4588C4904A641356A5D07D628190CAB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/34a23c4e-3932-43bd-8176-f6251ddea842/0/8B43E14BD4588C4904A641356A5D07D628190CAB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:9f:d2:19:61:32:da:ec:66:6b:d8:7b:6a:55:2e:1a:cf:6c: 16:82:1a:f6:10:f6:f1:77:72:d3:c6:b1:c0:ef:71:c2:b9:a0: 44:01:a2:0e:26:2f:0e:e6:30:a7:03:75:0e:fd:a9:d9:03:1e: 27:7d:99:6d:44:4c:38:ae:29:bc:68:fb:26:3f:fa:91:31:50: 78:65:82:e0:a5:e6:df:fe:44:b6:0c:70:03:38:3e:13:13:9b: cf:2c:f8:2f:d8:28:de:cf:6f:d9:fd:c6:82:52:9d:9a:0f:ff: bf:0e:be:57:28:d8:fd:b9:ec:64:fd:6a:82:36:e1:f1:2b:5a: b7:fe:bf:29:ec:5c:7b:3c:af:ba:f3:af:26:db:91:67:ef:f5: 58:d0:38:a6:ed:4d:c8:a3:61:db:fa:e9:89:56:46:f6:12:f6: c4:65:40:6e:5c:e7:76:d2:be:2f:27:4b:4f:96:26:dc:cc:bf: fc:b6:a0:9e:ad:d3:d4:01:60:88:15:5c:a1:c7:db:0f:67:4b: 1b:58:33:1d:5c:aa:d9:c5:69:a3:36:07:88:9c:cb:89:af:9e: f0:93:fd:a6:df:62:a3:66:a6:1b:70:85:2d:11:69:e1:ba:65: 30:73:83:ef:d9:fe:d5:7e:66:4d:19:26:cb:65:53:a2:f5:32: c9:f8:80:d5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXtJm+b7zKfzgCC+9lm5sXtObZu8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEI0M0UxNEJENDU4OEM0OTA0QTY0MTM1NkE1RDA3RDYy ODE5MENBQjAeFw0yNjEwMDkxNTMxMTlaFw0yNjEwMTAxODU1MTlaMDMxMTAvBgNV BAMTKDYyMzlFMTc2MjZGNzI4NTY4M0E5MzM1QjU3MjkxQTE2NzdERDI1QTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbtWxViFtD9sjag3w4I0Wc6kaM 3+y1ZT8Wace8EPStIxoZZ3LI4edEhExPHPt5YnpITR/ACd724OaxhUFqiWBQLsgw Nift4hlTracvZyCygkdecbcrHCJacVScY2BrW87svW0m6c5BhuQptv8hVY012Avx qhBCFbUioPm/i7MyV/B/pFCJgHi8UTRIDzbpG4nP55oOQKeITswRT3rnaMBFGUme 56gG4trhbNArvcEY/jGGl9heE10/PC3BEt/GGxHF7YY2jiVAQIU9gazMrBgSTSuE 22P8LSVjeiqEso0EK+9rK/o19y9kNfZ252m93u17QI7AQXWGORj8DtBEWkbHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYjnhdib3KFaDqTNbVykaFnfdJaYwHwYDVR0j BBgwFoAUi0PhS9RYjEkEpkE1al0H1igZDKswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzRhMjNjNGUtMzkzMi00M2JkLTgxNzYtZjYyNTFkZGVhODQyLzAvOEI0M0UxNEJE NDU4OEM0OTA0QTY0MTM1NkE1RDA3RDYyODE5MENBQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84QjQzRTE0QkQ0NTg4QzQ5MDRBNjQxMzU2QTVEMDdENjI4MTkw Q0FCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzRhMjNjNGUtMzkzMi00M2JkLTgx NzYtZjYyNTFkZGVhODQyLzAvOEI0M0UxNEJENDU4OEM0OTA0QTY0MTM1NkE1RDA3 RDYyODE5MENBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABKf0hlhMtrsZmvYe2pVLhrPbBaCGvYQ9vF3 ctPGscDvccK5oEQBog4mLw7mMKcDdQ79qdkDHid9mW1ETDiuKbxo+yY/+pExUHhl guCl5t/+RLYMcAM4PhMTm88s+C/YKN7Pb9n9xoJSnZoP/78Ovlco2P257GT9aoI2 4fErWrf+vynsXHs8r7rzrybbkWfv9VjQOKbtTcijYdv66YlWRvYS9sRlQG5c53bS vi8nS0+WJtzMv/y2oJ6t09QBYIgVXKHH2w9nSxtYMx1cqtnFaaM2B4icy4mvnvCT /abfYqNmphtwhS0RaeG6ZTBzg+/Z/tV+Zk0ZJstlU6L1Msn4gNU= -----END CERTIFICATE-----Generated at Fri Oct 9 22:40:35 2026 by rpki-client