$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/C8A277B3DEC8C0F0AA4C1FA542E819366C4EDC32.mft File: C8A277B3DEC8C0F0AA4C1FA542E819366C4EDC32.mft (raw, json) Hash identifier: 6LgD/wj20aoMxrL2ut+9bI5tlDua5XEqbpmtF9gnNRw= Subject key identifier: EB:7B:1F:D9:07:A1:C6:C8:D2:28:DF:FC:F4:C2:4C:6B:BB:22:4B:64 Authority key identifier: C8:A2:77:B3:DE:C8:C0:F0:AA:4C:1F:A5:42:E8:19:36:6C:4E:DC:32 Certificate issuer: /CN=C8A277B3DEC8C0F0AA4C1FA542E819366C4EDC32 Certificate serial: 775ABE4C800803CF8D2CD37698708B6406959378 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C8A277B3DEC8C0F0AA4C1FA542E819366C4EDC32.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/C8A277B3DEC8C0F0AA4C1FA542E819366C4EDC32.mft Manifest number: 0107 Signing time: Sun 15 Nov 2026 05:36:07 +0000 Manifest this update: Sun 15 Nov 2026 05:31:07 +0000 Manifest next update: Mon 16 Nov 2026 07:54:07 +0000 Files and hashes: 1: C8A277B3DEC8C0F0AA4C1FA542E819366C4EDC32.crl (hash: k439YmiBoMcSkEqsJ0knhEccKiAT5lYno06d+EpLfVQ=) 2: 3130332e3232342e37362e302f32342d3234203d3e203536323535.roa (hash: qW0AGce8XtjjXQ3Aq1xPuwzcIhd6zyH7ybAi9hoWtzA=) 3: 3130332e3232342e37372e302f32342d3234203d3e203536323535.roa (hash: W+SevG4xTFDq1sgkDkONqUQc3ucQK2u8ntiRI2DImrc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/C8A277B3DEC8C0F0AA4C1FA542E819366C4EDC32.crl rsync://rpki-rsync.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/C8A277B3DEC8C0F0AA4C1FA542E819366C4EDC32.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C8A277B3DEC8C0F0AA4C1FA542E819366C4EDC32.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 07:54:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:5a:be:4c:80:08:03:cf:8d:2c:d3:76:98:70:8b:64:06:95:93:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C8A277B3DEC8C0F0AA4C1FA542E819366C4EDC32 Validity Not Before: Nov 15 05:31:07 2026 GMT Not After : Nov 16 07:54:07 2026 GMT Subject: CN=EB7B1FD907A1C6C8D228DFFCF4C24C6BBB224B64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:1f:c0:ed:cb:5d:eb:ec:ce:15:f8:5c:73:66: 0b:30:41:1e:62:92:f6:86:12:d0:49:39:0b:7e:db: 98:77:89:00:12:32:68:36:e3:a8:25:c1:b6:79:81: 9b:dc:b8:f4:44:b6:12:e4:1c:ee:4b:cb:da:aa:ed: 87:e6:94:25:5f:e5:6d:0c:df:d0:9d:18:b7:53:73: 50:55:be:54:f6:00:51:22:09:06:20:e0:c4:4e:fc: ef:7d:77:4c:7d:b0:65:a6:cd:b3:e6:c4:23:7f:9b: f2:cb:5c:6b:4a:4a:74:76:bb:f1:ff:d8:ea:0c:03: 68:af:a9:ed:de:9e:4a:3e:23:c3:5e:85:eb:f5:82: 5e:be:5e:cc:ee:7a:b0:8f:ca:4c:0f:be:b9:68:75: 76:c5:6b:19:16:1e:3b:84:b2:ce:77:b6:f1:0b:2e: 35:e3:3c:9a:61:c9:3e:cf:68:36:20:a2:06:a2:5a: 91:9e:bd:5a:54:6a:34:ce:30:2b:23:11:96:84:38: 36:3e:34:c4:78:f9:e5:dd:3c:9f:dc:44:7e:64:f5: 97:a5:09:fd:ed:e4:33:75:fa:37:9f:b7:d6:02:05: 6b:cd:19:28:8d:df:62:f5:9b:ec:39:32:70:1a:8d: e4:b5:8b:c2:7c:29:87:c2:6f:ce:93:ff:4d:c8:df: 7f:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:7B:1F:D9:07:A1:C6:C8:D2:28:DF:FC:F4:C2:4C:6B:BB:22:4B:64 X509v3 Authority Key Identifier: keyid:C8:A2:77:B3:DE:C8:C0:F0:AA:4C:1F:A5:42:E8:19:36:6C:4E:DC:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/C8A277B3DEC8C0F0AA4C1FA542E819366C4EDC32.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C8A277B3DEC8C0F0AA4C1FA542E819366C4EDC32.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/C8A277B3DEC8C0F0AA4C1FA542E819366C4EDC32.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:46:58:3a:ea:87:02:a8:79:8e:55:d9:2c:3e:48:72:67:5c: 3c:32:75:46:bb:66:c5:93:e9:aa:6a:41:2d:b6:b9:71:5c:d4: b3:17:3a:5a:87:6f:2f:25:a8:0e:3e:73:ff:b2:55:d7:c1:4c: 72:e1:86:50:d8:b8:ac:65:e0:20:a6:71:bd:70:95:e7:ec:a1: 7e:4f:f0:76:db:57:ff:f2:76:3d:29:fd:6f:05:3d:17:f4:14: f5:33:29:66:df:79:b3:a5:e5:6f:59:02:95:a3:5a:5c:7a:2c: 6d:f9:d6:c8:ae:4f:57:e7:68:44:7f:0e:92:4e:0b:36:c5:9f: 22:70:1b:a7:22:bd:c6:96:71:84:4b:1d:ad:36:92:8f:22:4b: b8:a0:7e:63:a1:1f:d3:f3:e8:f1:48:4f:b0:63:6c:d7:de:19: 6b:3b:63:32:39:4c:d0:ad:5d:7c:85:ec:35:fb:04:7c:43:87: 53:7a:32:bb:ff:5b:ca:e3:33:6f:c2:77:c4:be:02:13:46:7a: 4f:99:49:0a:78:aa:dc:69:b0:8e:71:32:03:7f:d2:19:d3:91: 55:b1:50:37:40:9c:04:18:5b:9e:66:89:cc:ca:97:5d:84:4d: a5:17:da:fc:6e:2a:31:e2:60:b0:7e:e3:57:ce:9c:89:ca:9e: 2e:f3:34:6c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd1q+TIAIA8+NLNN2mHCLZAaVk3gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzhBMjc3QjNERUM4QzBGMEFBNEMxRkE1NDJFODE5MzY2 QzRFREMzMjAeFw0yNjExMTUwNTMxMDdaFw0yNjExMTYwNzU0MDdaMDMxMTAvBgNV BAMTKEVCN0IxRkQ5MDdBMUM2QzhEMjI4REZGQ0Y0QzI0QzZCQkIyMjRCNjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkH8Dty13r7M4V+FxzZgswQR5i kvaGEtBJOQt+25h3iQASMmg246glwbZ5gZvcuPREthLkHO5Ly9qq7YfmlCVf5W0M 39CdGLdTc1BVvlT2AFEiCQYg4MRO/O99d0x9sGWmzbPmxCN/m/LLXGtKSnR2u/H/ 2OoMA2ivqe3enko+I8Nehev1gl6+XszuerCPykwPvrlodXbFaxkWHjuEss53tvEL LjXjPJphyT7PaDYgogaiWpGevVpUajTOMCsjEZaEODY+NMR4+eXdPJ/cRH5k9Zel Cf3t5DN1+jeft9YCBWvNGSiN32L1m+w5MnAajeS1i8J8KYfCb86T/03I33+9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU63sf2QehxsjSKN/89MJMa7siS2QwHwYDVR0j BBgwFoAUyKJ3s97IwPCqTB+lQugZNmxO3DIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODIyNmIzZTEtZDdmNi00NjVlLTgzMDItN2Q1MmY1YzM0MGZmLzAvQzhBMjc3QjNE RUM4QzBGMEFBNEMxRkE1NDJFODE5MzY2QzRFREMzMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DOEEyNzdCM0RFQzhDMEYwQUE0QzFGQTU0MkU4MTkzNjZDNEVE QzMyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODIyNmIzZTEtZDdmNi00NjVlLTgz MDItN2Q1MmY1YzM0MGZmLzAvQzhBMjc3QjNERUM4QzBGMEFBNEMxRkE1NDJFODE5 MzY2QzRFREMzMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA5GWDrqhwKoeY5V2Sw+SHJnXDwydUa7ZsWT 6apqQS22uXFc1LMXOlqHby8lqA4+c/+yVdfBTHLhhlDYuKxl4CCmcb1wlefsoX5P 8HbbV//ydj0p/W8FPRf0FPUzKWbfebOl5W9ZApWjWlx6LG351siuT1fnaER/DpJO CzbFnyJwG6civcaWcYRLHa02ko8iS7igfmOhH9Pz6PFIT7BjbNfeGWs7YzI5TNCt XXyF7DX7BHxDh1N6Mrv/W8rjM2/Cd8S+AhNGek+ZSQp4qtxpsI5xMgN/0hnTkVWx UDdAnAQYW55miczKl12ETaUX2vxuKjHiYLB+41fOnInKni7zNGw= -----END CERTIFICATE-----Generated at Sun Nov 15 21:25:38 2026 by rpki-client