$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3cc5605d-f17a-4010-9253-210c64f148bd/0/8B57121B495DA86939D79B7BA261CF6D38C999CF.mft File: 8B57121B495DA86939D79B7BA261CF6D38C999CF.mft (raw, json) Hash identifier: Rq3TGVKvcPqEIstfh6zDZdcqO3Qb2ovhfQmumm0Y0Oo= Subject key identifier: 1B:1F:45:FE:89:DE:30:3F:45:DA:77:C8:81:C8:2F:07:98:B1:15:7B Authority key identifier: 8B:57:12:1B:49:5D:A8:69:39:D7:9B:7B:A2:61:CF:6D:38:C9:99:CF Certificate issuer: /CN=8B57121B495DA86939D79B7BA261CF6D38C999CF Certificate serial: 6CDA1C5CD7B438197C13341479DBBF2150F1AE3F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8B57121B495DA86939D79B7BA261CF6D38C999CF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3cc5605d-f17a-4010-9253-210c64f148bd/0/8B57121B495DA86939D79B7BA261CF6D38C999CF.mft Manifest number: D9 Signing time: Mon 12 Oct 2026 01:49:23 +0000 Manifest this update: Mon 12 Oct 2026 01:44:23 +0000 Manifest next update: Tue 13 Oct 2026 04:26:23 +0000 Files and hashes: 1: 8B57121B495DA86939D79B7BA261CF6D38C999CF.crl (hash: kWQ748gdTVC8ODuvpMoTvnf0KPEyXtPl41rLhJF//04=) 2: 3130332e3138332e362e302f32332d3234203d3e20313439343037.roa (hash: w+XxfdGQbvXdRZjpGQCwUdlhFyEQmevCuv9dcfZGuKE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3cc5605d-f17a-4010-9253-210c64f148bd/0/8B57121B495DA86939D79B7BA261CF6D38C999CF.crl rsync://rpki-rsync.idnic.net/repo/3cc5605d-f17a-4010-9253-210c64f148bd/0/8B57121B495DA86939D79B7BA261CF6D38C999CF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8B57121B495DA86939D79B7BA261CF6D38C999CF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 04:26:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:da:1c:5c:d7:b4:38:19:7c:13:34:14:79:db:bf:21:50:f1:ae:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B57121B495DA86939D79B7BA261CF6D38C999CF Validity Not Before: Oct 12 01:44:23 2026 GMT Not After : Oct 13 04:26:23 2026 GMT Subject: CN=1B1F45FE89DE303F45DA77C881C82F0798B1157B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:69:8f:e3:ce:bb:2a:4a:ea:89:c8:c9:27:41: fa:15:26:22:df:e3:96:c7:48:34:0b:46:42:1c:42: 58:03:1f:ad:71:2b:f4:9a:37:f2:64:3d:8d:09:6d: 70:0e:b0:74:d7:a8:a1:81:9b:d7:88:93:d0:14:34: 93:e8:cb:0e:3b:b0:13:01:55:26:da:5c:4f:a6:36: 5d:93:64:d0:df:20:cf:71:d4:22:f1:8b:c4:ad:ed: cc:80:27:55:09:2d:a8:9c:16:6a:df:f4:0e:b9:23: 81:8b:20:a0:de:79:fe:2c:bb:ec:e1:ab:be:e7:d9: 38:a1:64:82:dc:2c:c2:69:40:fe:7f:f2:d9:ff:fc: d6:dc:50:b4:83:01:f2:ae:8c:2d:a6:ce:ca:78:26: 57:7e:38:77:51:0f:d3:81:cb:fc:3d:62:c8:a1:bc: f2:d0:3b:67:43:8b:a9:4d:8b:ed:1f:26:ec:a7:b9: 90:20:59:50:b7:31:f2:bb:af:b1:7f:f7:db:db:0b: 11:53:d5:e5:b8:82:44:a8:85:d9:e7:c4:c9:64:1e: 36:c4:69:9a:d8:f4:89:a9:5e:c6:8e:9b:03:f6:1f: 5a:4b:70:4c:6b:e6:f5:2e:65:aa:e1:7c:5e:9e:e3: 1f:22:da:61:56:f6:fd:e2:6e:38:eb:ad:fa:de:d9: d6:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:1F:45:FE:89:DE:30:3F:45:DA:77:C8:81:C8:2F:07:98:B1:15:7B X509v3 Authority Key Identifier: keyid:8B:57:12:1B:49:5D:A8:69:39:D7:9B:7B:A2:61:CF:6D:38:C9:99:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3cc5605d-f17a-4010-9253-210c64f148bd/0/8B57121B495DA86939D79B7BA261CF6D38C999CF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8B57121B495DA86939D79B7BA261CF6D38C999CF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3cc5605d-f17a-4010-9253-210c64f148bd/0/8B57121B495DA86939D79B7BA261CF6D38C999CF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:6e:d2:d4:0e:f0:8b:85:e4:9e:83:5d:f4:b2:9d:57:4b:55: c0:ce:36:33:d9:5a:43:a0:9c:48:6a:32:f8:29:5a:c3:d2:1f: ac:96:3b:06:23:09:f9:23:28:00:bb:3c:13:fe:14:bd:da:2a: 44:9c:c2:80:48:96:0a:96:b2:3b:8e:af:8d:d2:66:b5:f8:a2: 4c:3a:83:5f:08:f1:fe:39:23:01:9d:85:85:cf:8b:71:26:fe: 93:c1:d5:6f:11:ef:5c:63:06:b3:08:dc:b5:92:70:3e:69:5e: de:0e:0a:65:12:42:25:1f:47:27:92:4b:3c:f5:c1:5d:4b:71: 93:ea:d6:9a:9d:87:7c:53:5b:3c:24:af:02:a5:2e:45:3d:5b: 96:9a:1b:ae:ad:48:af:47:27:54:d0:95:c6:bf:e5:46:6c:91: 95:0c:6f:ae:b5:f9:cb:ae:53:e3:64:03:b7:41:c8:67:23:09: 60:15:67:e4:89:ed:2f:ee:6f:e6:4a:f0:57:c1:49:f2:b9:34: a2:08:91:eb:99:68:47:4d:45:dc:52:18:ff:e1:30:8f:9e:6b: fb:f7:e3:3c:15:9f:46:0e:48:42:32:54:f3:aa:51:de:63:91: 40:ba:15:4a:1f:a1:8e:0d:86:bc:54:8c:55:16:61:c9:33:76: 2d:6f:70:15 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbNocXNe0OBl8EzQUedu/IVDxrj8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEI1NzEyMUI0OTVEQTg2OTM5RDc5QjdCQTI2MUNGNkQz OEM5OTlDRjAeFw0yNjEwMTIwMTQ0MjNaFw0yNjEwMTMwNDI2MjNaMDMxMTAvBgNV BAMTKDFCMUY0NUZFODlERTMwM0Y0NURBNzdDODgxQzgyRjA3OThCMTE1N0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChaY/jzrsqSuqJyMknQfoVJiLf 45bHSDQLRkIcQlgDH61xK/SaN/JkPY0JbXAOsHTXqKGBm9eIk9AUNJPoyw47sBMB VSbaXE+mNl2TZNDfIM9x1CLxi8St7cyAJ1UJLaicFmrf9A65I4GLIKDeef4su+zh q77n2TihZILcLMJpQP5/8tn//NbcULSDAfKujC2mzsp4Jld+OHdRD9OBy/w9Ysih vPLQO2dDi6lNi+0fJuynuZAgWVC3MfK7r7F/99vbCxFT1eW4gkSohdnnxMlkHjbE aZrY9ImpXsaOmwP2H1pLcExr5vUuZarhfF6e4x8i2mFW9v3ibjjrrfre2da5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGx9F/oneMD9F2nfIgcgvB5ixFXswHwYDVR0j BBgwFoAUi1cSG0ldqGk515t7omHPbTjJmc8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2NjNTYwNWQtZjE3YS00MDEwLTkyNTMtMjEwYzY0ZjE0OGJkLzAvOEI1NzEyMUI0 OTVEQTg2OTM5RDc5QjdCQTI2MUNGNkQzOEM5OTlDRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84QjU3MTIxQjQ5NURBODY5MzlENzlCN0JBMjYxQ0Y2RDM4Qzk5 OUNGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2NjNTYwNWQtZjE3YS00MDEwLTky NTMtMjEwYzY0ZjE0OGJkLzAvOEI1NzEyMUI0OTVEQTg2OTM5RDc5QjdCQTI2MUNG NkQzOEM5OTlDRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHBu0tQO8IuF5J6DXfSynVdLVcDONjPZWkOg nEhqMvgpWsPSH6yWOwYjCfkjKAC7PBP+FL3aKkScwoBIlgqWsjuOr43SZrX4okw6 g18I8f45IwGdhYXPi3Em/pPB1W8R71xjBrMI3LWScD5pXt4OCmUSQiUfRyeSSzz1 wV1LcZPq1pqdh3xTWzwkrwKlLkU9W5aaG66tSK9HJ1TQlca/5UZskZUMb661+cuu U+NkA7dByGcjCWAVZ+SJ7S/ub+ZK8FfBSfK5NKIIkeuZaEdNRdxSGP/hMI+ea/v3 4zwVn0YOSEIyVPOqUd5jkUC6FUofoY4NhrxUjFUWYckzdi1vcBU= -----END CERTIFICATE-----Generated at Mon Oct 12 15:20:27 2026 by rpki-client