$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3ce68b50-0e9e-4ae6-8253-5bc2cd121373/0/8A7F3EF85CF3AFD726ACA31F35E709D8EFF0C13C.mft File: 8A7F3EF85CF3AFD726ACA31F35E709D8EFF0C13C.mft (raw, json) Hash identifier: bRziUwiqWNJN9+YN7ausQjBH1XNf2EnsFEkaNw2fhq4= Subject key identifier: C7:C7:A6:1F:77:B0:34:21:CF:3C:AA:5E:E4:CC:26:C6:F9:D6:92:F0 Authority key identifier: 8A:7F:3E:F8:5C:F3:AF:D7:26:AC:A3:1F:35:E7:09:D8:EF:F0:C1:3C Certificate issuer: /CN=8A7F3EF85CF3AFD726ACA31F35E709D8EFF0C13C Certificate serial: 49A0E8A17328C3B20E0A4C471DDEC29BBA8ABBE8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8A7F3EF85CF3AFD726ACA31F35E709D8EFF0C13C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3ce68b50-0e9e-4ae6-8253-5bc2cd121373/0/8A7F3EF85CF3AFD726ACA31F35E709D8EFF0C13C.mft Manifest number: 0102 Signing time: Tue 10 Nov 2026 17:23:00 +0000 Manifest this update: Tue 10 Nov 2026 17:18:00 +0000 Manifest next update: Wed 11 Nov 2026 19:38:00 +0000 Files and hashes: 1: 8A7F3EF85CF3AFD726ACA31F35E709D8EFF0C13C.crl (hash: HEQBEScdD5iVp815maN+FQi0Y4VcaINWrQC1RuYFcY4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3ce68b50-0e9e-4ae6-8253-5bc2cd121373/0/8A7F3EF85CF3AFD726ACA31F35E709D8EFF0C13C.crl rsync://rpki-rsync.idnic.net/repo/3ce68b50-0e9e-4ae6-8253-5bc2cd121373/0/8A7F3EF85CF3AFD726ACA31F35E709D8EFF0C13C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8A7F3EF85CF3AFD726ACA31F35E709D8EFF0C13C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Nov 2026 08:21:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:a0:e8:a1:73:28:c3:b2:0e:0a:4c:47:1d:de:c2:9b:ba:8a:bb:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8A7F3EF85CF3AFD726ACA31F35E709D8EFF0C13C Validity Not Before: Nov 10 17:18:00 2026 GMT Not After : Nov 11 19:38:00 2026 GMT Subject: CN=C7C7A61F77B03421CF3CAA5EE4CC26C6F9D692F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ff:c6:0c:52:af:9e:67:8d:80:58:f3:7e:ce: 79:fb:aa:46:b0:5f:03:c8:0e:83:5b:8b:db:d7:13: 71:e2:0c:b9:b9:23:eb:1c:44:e3:43:78:dd:fc:4d: 8d:ac:09:c3:76:d1:dc:e0:b2:e3:2d:79:70:6f:c5: e4:b5:bf:4b:39:5f:f8:9b:48:bd:b2:9f:10:6d:7b: 25:98:6f:5d:b8:d3:38:1e:9f:f3:9c:ed:12:8a:6a: 04:af:a0:73:6c:24:ac:c4:54:8b:a6:25:ec:f1:ee: 74:5a:9b:04:14:0c:c1:92:0d:e9:68:f3:e1:64:4f: 89:63:80:e3:11:1c:77:34:9e:80:09:2e:a2:a8:8a: f3:7e:fd:5a:8d:2c:32:38:0b:53:be:dd:5d:b7:22: 1e:63:5d:f5:a9:c0:9a:2b:61:5c:6e:eb:69:ea:bf: a3:06:27:ac:2c:30:31:ea:f0:97:6d:41:7a:3d:90: 33:75:04:5f:61:e8:aa:74:5b:03:7d:24:65:89:15: cb:59:4a:eb:da:6e:e9:ec:85:6b:d9:d3:ce:85:be: f9:bd:eb:85:ba:f5:7e:7c:1f:f9:da:7a:9f:fc:42: f8:4c:70:64:d3:83:0e:88:3c:fa:39:2e:44:43:b4: e6:ad:ee:ab:b9:df:e8:d4:9a:4e:1b:99:d2:c9:8f: 50:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:C7:A6:1F:77:B0:34:21:CF:3C:AA:5E:E4:CC:26:C6:F9:D6:92:F0 X509v3 Authority Key Identifier: keyid:8A:7F:3E:F8:5C:F3:AF:D7:26:AC:A3:1F:35:E7:09:D8:EF:F0:C1:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3ce68b50-0e9e-4ae6-8253-5bc2cd121373/0/8A7F3EF85CF3AFD726ACA31F35E709D8EFF0C13C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8A7F3EF85CF3AFD726ACA31F35E709D8EFF0C13C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3ce68b50-0e9e-4ae6-8253-5bc2cd121373/0/8A7F3EF85CF3AFD726ACA31F35E709D8EFF0C13C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:f5:ed:58:b9:da:d7:56:5b:ac:cf:ba:49:86:3d:0f:8b:77: 5b:d5:5c:2d:80:56:2b:a0:02:1b:d5:30:f1:b4:68:60:00:a3: 35:04:3f:9a:50:c2:8d:0a:2c:3f:4d:ae:09:da:3c:52:2c:38: 0f:29:86:e3:00:00:a5:90:ff:d5:8b:92:cd:c7:cd:00:65:c8: b2:7a:f0:31:67:c7:de:28:55:fc:1d:e0:c6:ac:3c:95:c7:a4: 15:b7:a1:ec:72:b4:c3:99:99:80:31:de:b0:e2:f6:29:95:70: 6e:27:ef:f6:ff:70:36:21:77:f2:d7:45:17:81:8a:3e:14:ed: 2a:99:fd:d0:78:e9:d7:e9:93:91:63:89:da:b7:f5:b0:e8:4e: da:47:2e:aa:8c:da:bc:16:39:e1:71:a2:e7:4d:4b:e5:2e:cf: 23:89:57:5f:35:4f:9f:5d:a0:4d:b6:cd:a5:cd:79:9e:76:cd: 06:83:aa:79:81:d7:d5:51:21:ab:8a:20:2e:5d:c4:38:3a:a3: c7:06:ac:a1:a4:72:ed:12:be:2e:4a:ca:5e:92:39:8f:18:c6: a6:1e:73:ab:e5:6b:4a:3c:85:ce:59:6a:ff:f6:9f:c2:31:a3: b3:29:34:9f:7f:6f:07:3a:06:c3:d9:73:36:14:51:f6:09:44: 83:f8:df:6b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSaDooXMow7IOCkxHHd7Cm7qKu+gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEE3RjNFRjg1Q0YzQUZENzI2QUNBMzFGMzVFNzA5RDhF RkYwQzEzQzAeFw0yNjExMTAxNzE4MDBaFw0yNjExMTExOTM4MDBaMDMxMTAvBgNV BAMTKEM3QzdBNjFGNzdCMDM0MjFDRjNDQUE1RUU0Q0MyNkM2RjlENjkyRjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ/8YMUq+eZ42AWPN+znn7qkaw XwPIDoNbi9vXE3HiDLm5I+scRONDeN38TY2sCcN20dzgsuMteXBvxeS1v0s5X/ib SL2ynxBteyWYb1240zgen/Oc7RKKagSvoHNsJKzEVIumJezx7nRamwQUDMGSDelo 8+FkT4ljgOMRHHc0noAJLqKoivN+/VqNLDI4C1O+3V23Ih5jXfWpwJorYVxu62nq v6MGJ6wsMDHq8JdtQXo9kDN1BF9h6Kp0WwN9JGWJFctZSuvabunshWvZ086Fvvm9 64W69X58H/naep/8QvhMcGTTgw6IPPo5LkRDtOat7qu53+jUmk4bmdLJj1DRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUx8emH3ewNCHPPKpe5MwmxvnWkvAwHwYDVR0j BBgwFoAUin8++Fzzr9cmrKMfNecJ2O/wwTwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2NlNjhiNTAtMGU5ZS00YWU2LTgyNTMtNWJjMmNkMTIxMzczLzAvOEE3RjNFRjg1 Q0YzQUZENzI2QUNBMzFGMzVFNzA5RDhFRkYwQzEzQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84QTdGM0VGODVDRjNBRkQ3MjZBQ0EzMUYzNUU3MDlEOEVGRjBD MTNDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2NlNjhiNTAtMGU5ZS00YWU2LTgy NTMtNWJjMmNkMTIxMzczLzAvOEE3RjNFRjg1Q0YzQUZENzI2QUNBMzFGMzVFNzA5 RDhFRkYwQzEzQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAH17Vi52tdWW6zPukmGPQ+Ld1vVXC2AViug AhvVMPG0aGAAozUEP5pQwo0KLD9NrgnaPFIsOA8phuMAAKWQ/9WLks3HzQBlyLJ6 8DFnx94oVfwd4MasPJXHpBW3oexytMOZmYAx3rDi9imVcG4n7/b/cDYhd/LXRReB ij4U7SqZ/dB46dfpk5Fjidq39bDoTtpHLqqM2rwWOeFxoudNS+UuzyOJV181T59d oE22zaXNeZ52zQaDqnmB19VRIauKIC5dxDg6o8cGrKGkcu0Svi5Kyl6SOY8YxqYe c6vla0o8hc5Zav/2n8Ixo7MpNJ9/bwc6BsPZczYUUfYJRIP432s= -----END CERTIFICATE-----Generated at Tue Nov 10 20:52:32 2026 by rpki-client