$ rpki-client -vvvf rpki-rsync.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/8FFAA6656CAEB189705F03C7B4148624E4A80597.mft File: 8FFAA6656CAEB189705F03C7B4148624E4A80597.mft (raw, json) Hash identifier: j4LHDGguF/DH21MBHXTWkw/D4nfaPltW1u+/cShytrE= Subject key identifier: 39:E8:E8:B4:60:DF:F0:F2:E4:97:D8:4D:99:46:13:1E:4C:42:AC:4B Authority key identifier: 8F:FA:A6:65:6C:AE:B1:89:70:5F:03:C7:B4:14:86:24:E4:A8:05:97 Certificate issuer: /CN=8FFAA6656CAEB189705F03C7B4148624E4A80597 Certificate serial: 661AA4688356F31141E7A7857D52FD130C550705 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8FFAA6656CAEB189705F03C7B4148624E4A80597.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/8FFAA6656CAEB189705F03C7B4148624E4A80597.mft Manifest number: 0105 Signing time: Sat 14 Nov 2026 16:40:24 +0000 Manifest this update: Sat 14 Nov 2026 16:35:24 +0000 Manifest next update: Sun 15 Nov 2026 19:05:24 +0000 Files and hashes: 1: 3230322e35302e3230312e302f32342d3234203d3e203535363936.roa (hash: 9g/ng/5n6hJoQNhHnUHUl6+xhhnGERFtgslQ205VyPU=) 2: 3230322e35302e3230332e302f32342d3234203d3e203535363936.roa (hash: QgX53d3ZPmwqUeHqTZtdjccW/DQcVacKXuBLz3xuE+Q=) 3: 3230322e35302e3230322e302f32342d3234203d3e203535363936.roa (hash: 5tE3feCM9vyNUB/qpwvXZKU/4/GsAVh0LYhHMntcLoo=) 4: 3230322e35302e3230302e302f32342d3234203d3e203535363936.roa (hash: j7IknYgKj7dl1bu8AJ/aQ/eLpW5VQAB5YDLHEEVUQxU=) 5: 8FFAA6656CAEB189705F03C7B4148624E4A80597.crl (hash: 09NtapIrBO+1WLEBgfoh2oLrcvgDX+N/JAxzt+W1S/M=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/8FFAA6656CAEB189705F03C7B4148624E4A80597.crl rsync://rpki-rsync.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/8FFAA6656CAEB189705F03C7B4148624E4A80597.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8FFAA6656CAEB189705F03C7B4148624E4A80597.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 19:05:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:1a:a4:68:83:56:f3:11:41:e7:a7:85:7d:52:fd:13:0c:55:07:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FFAA6656CAEB189705F03C7B4148624E4A80597 Validity Not Before: Nov 14 16:35:24 2026 GMT Not After : Nov 15 19:05:24 2026 GMT Subject: CN=39E8E8B460DFF0F2E497D84D9946131E4C42AC4B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:a3:d8:58:bf:ef:86:cf:6a:f3:fc:58:7f:32: 99:48:4a:15:25:5c:b1:7e:ab:e1:6d:e3:28:e5:b1: 65:7b:a4:9c:c4:99:80:64:37:b6:8b:28:84:b5:d5: 0c:de:96:be:bb:84:0f:77:66:ef:8a:fd:21:ad:7f: 86:ce:45:60:54:68:ad:8c:ea:ba:4f:ee:2c:0b:ab: a6:9c:4f:f8:38:4f:0e:ee:3d:14:74:9c:7c:93:39: 7e:62:99:8d:3b:27:83:4a:37:da:1b:f3:1c:2d:f0: 42:53:4d:13:9d:41:c8:4e:be:ec:3f:54:42:86:75: c1:c0:6a:84:42:09:31:7a:90:f0:bf:ff:4b:84:eb: 88:59:dc:ec:ec:f8:39:23:e1:4e:cb:b8:05:40:a7: a4:77:b8:30:50:48:3b:98:d8:98:bd:c3:09:2f:58: 8c:e4:f2:47:e5:b5:b8:a4:af:93:31:e9:e2:da:43: d0:57:bb:85:80:52:51:42:f4:1a:11:b9:70:50:ec: 29:f4:2d:76:8f:c3:1f:51:c1:ad:70:74:f7:77:b2: 4c:2b:da:a1:c7:4c:f2:60:82:b1:ab:b8:04:79:ce: c7:ec:a7:50:85:09:21:69:30:5d:aa:cb:82:98:97: 53:f5:0c:1a:e8:4b:72:a3:9c:87:aa:6d:55:2a:27: a1:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:E8:E8:B4:60:DF:F0:F2:E4:97:D8:4D:99:46:13:1E:4C:42:AC:4B X509v3 Authority Key Identifier: keyid:8F:FA:A6:65:6C:AE:B1:89:70:5F:03:C7:B4:14:86:24:E4:A8:05:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/8FFAA6656CAEB189705F03C7B4148624E4A80597.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8FFAA6656CAEB189705F03C7B4148624E4A80597.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/8FFAA6656CAEB189705F03C7B4148624E4A80597.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:68:7e:b6:f9:23:64:5f:21:ce:5c:8b:9c:6d:ba:d7:f5:81: d7:78:74:8d:a2:c8:06:38:e3:e4:60:9a:4c:9f:62:54:bd:83: cf:23:45:0e:43:9b:58:0c:06:a8:ff:04:c1:2e:74:f0:2e:b6: e5:2e:86:83:23:94:f9:89:e6:1e:ee:99:55:73:6b:ca:e5:ea: 26:6a:3a:93:9d:d4:1b:5e:2b:dd:7c:a9:c7:3f:83:6e:a4:8c: 03:25:16:b8:c2:3f:0b:cb:9c:46:50:48:b3:17:dd:83:70:a9: df:a4:04:a9:0f:22:c6:c4:99:c7:72:27:bc:07:7c:ea:44:93: 6c:64:85:cb:d2:b7:a6:73:5f:0b:3a:d6:b6:dc:5f:89:d0:da: 5f:d2:7b:06:33:8f:ff:c9:2a:ba:52:4e:07:e9:ad:4c:5b:a2: 9e:be:aa:e5:8e:ac:30:13:9a:a0:d0:7c:71:df:e5:e0:7a:c8: ae:53:2d:9f:8e:a5:64:c9:89:e7:22:70:a7:84:f7:75:72:79: fd:97:00:0c:88:5d:b5:a5:58:08:f7:c8:ee:92:a8:04:61:05: 64:2f:82:9e:49:bf:57:de:2a:fe:32:4e:ba:1e:30:63:c1:7a: b2:51:88:48:5b:e3:c1:6e:7b:91:4a:5d:aa:75:5e:ca:21:5a: b6:a5:f4:08 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZhqkaINW8xFB56eFfVL9EwxVBwUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZGQUE2NjU2Q0FFQjE4OTcwNUYwM0M3QjQxNDg2MjRF NEE4MDU5NzAeFw0yNjExMTQxNjM1MjRaFw0yNjExMTUxOTA1MjRaMDMxMTAvBgNV BAMTKDM5RThFOEI0NjBERkYwRjJFNDk3RDg0RDk5NDYxMzFFNEM0MkFDNEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeo9hYv++Gz2rz/Fh/MplIShUl XLF+q+Ft4yjlsWV7pJzEmYBkN7aLKIS11Qzelr67hA93Zu+K/SGtf4bORWBUaK2M 6rpP7iwLq6acT/g4Tw7uPRR0nHyTOX5imY07J4NKN9ob8xwt8EJTTROdQchOvuw/ VEKGdcHAaoRCCTF6kPC//0uE64hZ3Ozs+Dkj4U7LuAVAp6R3uDBQSDuY2Ji9wwkv WIzk8kfltbikr5Mx6eLaQ9BXu4WAUlFC9BoRuXBQ7Cn0LXaPwx9Rwa1wdPd3skwr 2qHHTPJggrGruAR5zsfsp1CFCSFpMF2qy4KYl1P1DBroS3KjnIeqbVUqJ6G3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOejotGDf8PLkl9hNmUYTHkxCrEswHwYDVR0j BBgwFoAUj/qmZWyusYlwXwPHtBSGJOSoBZcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTI4ODBkZWUtN2FhMi00YmU0LWJmMzUtY2RiZDExZDc5NTA3LzAvOEZGQUE2NjU2 Q0FFQjE4OTcwNUYwM0M3QjQxNDg2MjRFNEE4MDU5Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84RkZBQTY2NTZDQUVCMTg5NzA1RjAzQzdCNDE0ODYyNEU0QTgw NTk3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTI4ODBkZWUtN2FhMi00YmU0LWJm MzUtY2RiZDExZDc5NTA3LzAvOEZGQUE2NjU2Q0FFQjE4OTcwNUYwM0M3QjQxNDg2 MjRFNEE4MDU5Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADNofrb5I2RfIc5ci5xtutf1gdd4dI2iyAY4 4+RgmkyfYlS9g88jRQ5Dm1gMBqj/BMEudPAutuUuhoMjlPmJ5h7umVVza8rl6iZq OpOd1BteK918qcc/g26kjAMlFrjCPwvLnEZQSLMX3YNwqd+kBKkPIsbEmcdyJ7wH fOpEk2xkhcvSt6ZzXws61rbcX4nQ2l/SewYzj//JKrpSTgfprUxbop6+quWOrDAT mqDQfHHf5eB6yK5TLZ+OpWTJiecicKeE93Vyef2XAAyIXbWlWAj3yO6SqARhBWQv gp5Jv1feKv4yTroeMGPBerJRiEhb48Fue5FKXap1XsohWral9Ag= -----END CERTIFICATE-----Generated at Sun Nov 15 12:13:39 2026 by rpki-client