$ rpki-client -vvvf rpki-rsync.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/8CD6FC0255FD1ED17FD82CFA8B66D24A29BA1D8E.mft File: 8CD6FC0255FD1ED17FD82CFA8B66D24A29BA1D8E.mft (raw, json) Hash identifier: hsZ8tETJ48cTHnnskuYN8BcjA+9catZHdaVz7A4ynkA= Subject key identifier: 18:B0:D6:DA:82:98:D2:A9:60:A1:C5:F8:52:F2:27:EA:2C:EB:61:74 Authority key identifier: 8C:D6:FC:02:55:FD:1E:D1:7F:D8:2C:FA:8B:66:D2:4A:29:BA:1D:8E Certificate issuer: /CN=8CD6FC0255FD1ED17FD82CFA8B66D24A29BA1D8E Certificate serial: 3AB78B5BFBF539F03F47D838638D6F91BC6BAD6D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8CD6FC0255FD1ED17FD82CFA8B66D24A29BA1D8E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/8CD6FC0255FD1ED17FD82CFA8B66D24A29BA1D8E.mft Manifest number: 0100 Signing time: Mon 09 Nov 2026 15:04:48 +0000 Manifest this update: Mon 09 Nov 2026 14:59:48 +0000 Manifest next update: Tue 10 Nov 2026 15:29:48 +0000 Files and hashes: 1: 3130332e38372e3139372e302f32342d3234203d3e20313336303837.roa (hash: VvKS0B4ZLReXOTrvcAhygsCJwutg9GJIYxL7J1Tdiis=) 2: 3130332e38372e3139382e302f32342d3234203d3e20313336303837.roa (hash: j+lgNwhd7sTPpzvBZDbz7MtwJzwdtzVrzUiO5CTg4C0=) 3: 3130332e38372e3139392e302f32342d3234203d3e20313336303837.roa (hash: Y4fdfPd8CGZXfJi8zT1Xs61mqy3uc8h/5nYm+/f9TOQ=) 4: 8CD6FC0255FD1ED17FD82CFA8B66D24A29BA1D8E.crl (hash: Ky/to6H4fVwdvNZzAWKv580FU956vptprKFwbQVk/iQ=) 5: 3130332e38372e3139362e302f32342d3234203d3e20313336303837.roa (hash: tUv0W4gMiS1vhejBIsoiDaLo6/xoWf91YpxI7rtj5ao=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/8CD6FC0255FD1ED17FD82CFA8B66D24A29BA1D8E.crl rsync://rpki-rsync.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/8CD6FC0255FD1ED17FD82CFA8B66D24A29BA1D8E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8CD6FC0255FD1ED17FD82CFA8B66D24A29BA1D8E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 08:27:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:b7:8b:5b:fb:f5:39:f0:3f:47:d8:38:63:8d:6f:91:bc:6b:ad:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8CD6FC0255FD1ED17FD82CFA8B66D24A29BA1D8E Validity Not Before: Nov 9 14:59:48 2026 GMT Not After : Nov 10 15:29:48 2026 GMT Subject: CN=18B0D6DA8298D2A960A1C5F852F227EA2CEB6174 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:92:cc:86:58:49:57:5a:7b:4c:9b:9e:30:9c: 55:c8:36:0c:7e:00:32:ce:51:2b:78:43:3a:13:5b: e3:a7:d6:5a:ab:10:ac:b6:1e:60:17:20:28:a8:4f: 48:c6:61:35:46:23:2a:e7:86:bb:8e:00:08:ce:2a: 85:91:ac:ca:0a:21:d2:dc:91:04:65:fe:6b:76:0c: 77:d3:2e:f3:a6:e9:5e:07:93:c1:8c:b0:1b:85:fe: 0e:a9:9d:7b:60:3c:8e:02:d3:6b:9f:16:13:59:a4: d4:44:58:71:67:f5:0e:ae:0b:f2:52:a7:ad:7c:a5: 5f:2a:4c:e5:67:88:10:c6:42:51:74:9e:bc:19:e2: 81:1c:3a:eb:34:c6:bd:d4:22:ad:0b:89:c8:84:f5: 6d:f0:06:44:20:62:fa:7e:d6:e9:9e:e0:93:9b:bf: a0:ba:e0:f4:e3:12:56:67:94:e9:b7:8c:f2:5b:10: 21:c1:99:8f:b6:ba:0f:95:ca:e1:f5:d7:24:47:6b: 10:d7:0c:6f:59:19:dc:98:db:cc:a8:7f:fb:fc:c6: d7:b1:00:66:c6:65:e2:ba:f5:d4:40:4c:48:cf:f4: 9c:46:88:3f:b2:70:fa:52:45:27:67:e1:e7:8e:b9: be:95:66:ff:37:5d:9e:d9:37:1d:c4:64:ec:3e:eb: 79:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:B0:D6:DA:82:98:D2:A9:60:A1:C5:F8:52:F2:27:EA:2C:EB:61:74 X509v3 Authority Key Identifier: keyid:8C:D6:FC:02:55:FD:1E:D1:7F:D8:2C:FA:8B:66:D2:4A:29:BA:1D:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/8CD6FC0255FD1ED17FD82CFA8B66D24A29BA1D8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8CD6FC0255FD1ED17FD82CFA8B66D24A29BA1D8E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/8CD6FC0255FD1ED17FD82CFA8B66D24A29BA1D8E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:a4:a3:1f:7a:0a:a4:fd:70:e6:78:86:2c:84:3a:82:f0:63: 17:c8:05:05:be:6a:83:59:ed:90:dc:22:a0:44:2f:ac:4f:9a: 7c:9f:0f:dc:77:a6:77:0d:4c:e3:3f:86:35:a5:08:c2:ab:f7: 68:ed:67:60:26:10:ed:5e:c7:52:6f:41:31:b3:ad:9d:c6:fd: c3:d6:3d:63:65:01:0e:27:89:94:4b:fc:db:fc:f2:c0:1d:93: 4f:65:9c:68:4a:38:66:16:b3:d7:07:89:37:1f:99:b8:74:d4: e4:41:1e:95:16:fd:4d:c6:a8:9d:d2:f0:4a:17:c6:fd:72:64: 8a:d0:e2:ea:4d:56:bc:58:86:68:96:ef:2c:1b:bd:e4:75:43: 19:aa:f8:ea:e1:57:74:a2:8b:10:4c:a1:0f:36:4a:41:5a:cf: 2c:0e:88:21:73:bb:16:d3:59:f8:12:52:f7:5d:cc:57:7d:ed: 70:9b:b7:73:e6:d6:cb:0d:3b:af:ff:b4:ef:60:ac:33:ee:2d: 3d:17:01:ae:be:93:6d:a0:eb:83:56:de:4b:87:c4:8e:47:42: af:c6:41:1e:41:71:d1:07:2e:61:1e:12:38:8e:11:c4:7a:64: 76:bc:d6:ef:b8:fa:c9:a7:3e:ad:0c:18:4d:ec:2c:01:70:86: 26:33:92:e8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOreLW/v1OfA/R9g4Y41vkbxrrW0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOENENkZDMDI1NUZEMUVEMTdGRDgyQ0ZBOEI2NkQyNEEy OUJBMUQ4RTAeFw0yNjExMDkxNDU5NDhaFw0yNjExMTAxNTI5NDhaMDMxMTAvBgNV BAMTKDE4QjBENkRBODI5OEQyQTk2MEExQzVGODUyRjIyN0VBMkNFQjYxNzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgksyGWElXWntMm54wnFXINgx+ ADLOUSt4QzoTW+On1lqrEKy2HmAXICioT0jGYTVGIyrnhruOAAjOKoWRrMoKIdLc kQRl/mt2DHfTLvOm6V4Hk8GMsBuF/g6pnXtgPI4C02ufFhNZpNREWHFn9Q6uC/JS p618pV8qTOVniBDGQlF0nrwZ4oEcOus0xr3UIq0LiciE9W3wBkQgYvp+1ume4JOb v6C64PTjElZnlOm3jPJbECHBmY+2ug+VyuH11yRHaxDXDG9ZGdyY28yof/v8xtex AGbGZeK69dRATEjP9JxGiD+ycPpSRSdn4eeOub6VZv83XZ7ZNx3EZOw+63njAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGLDW2oKY0qlgocX4UvIn6izrYXQwHwYDVR0j BBgwFoAUjNb8AlX9HtF/2Cz6i2bSSim6HY4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTZlNjNjZDItZmIzYy00MWIyLWI5NmItYWIyMzQ0MjBhMjExLzAvOENENkZDMDI1 NUZEMUVEMTdGRDgyQ0ZBOEI2NkQyNEEyOUJBMUQ4RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84Q0Q2RkMwMjU1RkQxRUQxN0ZEODJDRkE4QjY2RDI0QTI5QkEx RDhFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTZlNjNjZDItZmIzYy00MWIyLWI5 NmItYWIyMzQ0MjBhMjExLzAvOENENkZDMDI1NUZEMUVEMTdGRDgyQ0ZBOEI2NkQy NEEyOUJBMUQ4RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD6kox96CqT9cOZ4hiyEOoLwYxfIBQW+aoNZ 7ZDcIqBEL6xPmnyfD9x3pncNTOM/hjWlCMKr92jtZ2AmEO1ex1JvQTGzrZ3G/cPW PWNlAQ4niZRL/Nv88sAdk09lnGhKOGYWs9cHiTcfmbh01ORBHpUW/U3GqJ3S8EoX xv1yZIrQ4upNVrxYhmiW7ywbveR1Qxmq+OrhV3SiixBMoQ82SkFazywOiCFzuxbT WfgSUvddzFd97XCbt3Pm1ssNO6//tO9grDPuLT0XAa6+k22g64NW3kuHxI5HQq/G QR5BcdEHLmEeEjiOEcR6ZHa81u+4+smnPq0MGE3sLAFwhiYzkug= -----END CERTIFICATE-----Generated at Tue Nov 10 00:09:36 2026 by rpki-client