$ rpki-client -vvvf rpki-rsync.idnic.net/repo/89a40089-6041-45ed-8e44-a997c8acf480/0/8B0CF87F2349FC8787EF52E3B0AD80E141E2BE1C.mft File: 8B0CF87F2349FC8787EF52E3B0AD80E141E2BE1C.mft (raw, json) Hash identifier: XuB2SXWvVk6hbqWIEtwO0ECum8Bvwtjmqp8AMkGzZ5k= Subject key identifier: 96:F9:20:B4:1A:4F:F0:FD:82:4D:4E:6D:47:A5:83:91:C2:6C:2B:BE Authority key identifier: 8B:0C:F8:7F:23:49:FC:87:87:EF:52:E3:B0:AD:80:E1:41:E2:BE:1C Certificate issuer: /CN=8B0CF87F2349FC8787EF52E3B0AD80E141E2BE1C Certificate serial: 4322B21D2C6AF68C6A316297E67F421FA489FF70 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8B0CF87F2349FC8787EF52E3B0AD80E141E2BE1C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/89a40089-6041-45ed-8e44-a997c8acf480/0/8B0CF87F2349FC8787EF52E3B0AD80E141E2BE1C.mft Manifest number: 0109 Signing time: Sun 15 Nov 2026 06:16:57 +0000 Manifest this update: Sun 15 Nov 2026 06:11:57 +0000 Manifest next update: Mon 16 Nov 2026 07:41:57 +0000 Files and hashes: 1: 8B0CF87F2349FC8787EF52E3B0AD80E141E2BE1C.crl (hash: j6p824/QKvSoUl+OxdOFYjUejb5HEu3DZwTPkg5p7w0=) 2: 3130332e3132362e3233332e302f32342d3234203d3e20313530393738.roa (hash: feHp+VgvlrJlDWnbvgKdK3q5FY7GJ/3YIOlQqsX2zUs=) 3: 3130332e3132362e3233322e302f32342d3234203d3e20313530393738.roa (hash: A0fye72fVewvJEctRltf+2Pc+fB290Pn79WveiWFgaQ=) 4: 3130332e3132362e3233322e302f32332d3233203d3e20313530393738.roa (hash: 8luvuUZe/inH3n4D6OyQwwD6mGHctkX0bejCwUaYOvA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/89a40089-6041-45ed-8e44-a997c8acf480/0/8B0CF87F2349FC8787EF52E3B0AD80E141E2BE1C.crl rsync://rpki-rsync.idnic.net/repo/89a40089-6041-45ed-8e44-a997c8acf480/0/8B0CF87F2349FC8787EF52E3B0AD80E141E2BE1C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8B0CF87F2349FC8787EF52E3B0AD80E141E2BE1C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 07:41:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:22:b2:1d:2c:6a:f6:8c:6a:31:62:97:e6:7f:42:1f:a4:89:ff:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B0CF87F2349FC8787EF52E3B0AD80E141E2BE1C Validity Not Before: Nov 15 06:11:57 2026 GMT Not After : Nov 16 07:41:57 2026 GMT Subject: CN=96F920B41A4FF0FD824D4E6D47A58391C26C2BBE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:4b:be:90:d6:ea:ff:2a:f2:01:c1:30:bb:86: 9b:a6:9f:e5:ac:d4:99:d9:48:2f:0f:f2:fa:cc:0b: 20:2e:43:8b:56:2f:4c:09:ec:0c:a5:4b:cd:2a:55: 80:aa:10:f3:76:99:ad:3e:29:95:7e:27:67:6b:08: e0:9b:57:00:31:a6:da:d3:5d:d1:49:36:a8:a8:7b: a0:25:c3:02:a5:c5:ba:39:15:96:e8:cb:cd:b2:6a: 8d:50:3b:68:55:1f:a7:47:79:36:a5:4b:cb:b0:1a: ab:31:c4:3f:30:b6:8b:61:33:fd:e9:05:d9:ff:55: 62:ae:64:de:fe:8e:54:2e:25:bd:0a:62:9b:71:fa: 2a:05:58:78:66:be:5e:23:58:ba:51:b3:55:05:d6: 89:e9:54:66:50:ca:dd:2b:07:90:94:67:b5:db:62: 80:15:49:14:2f:3d:b1:ca:0e:4f:b1:f0:d6:8d:01: 21:0d:49:b6:40:ae:dc:84:c7:1b:99:b4:05:c5:8c: 09:b2:49:d2:c2:f0:3b:0b:61:01:78:2e:ae:30:13: 80:f5:68:08:16:65:6e:d4:e8:4d:5a:93:01:34:29: b1:de:f1:92:dd:75:e8:24:43:21:5d:03:1d:e0:11: bf:32:64:23:cf:6e:f4:4d:70:66:28:6a:44:36:93: b9:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:F9:20:B4:1A:4F:F0:FD:82:4D:4E:6D:47:A5:83:91:C2:6C:2B:BE X509v3 Authority Key Identifier: keyid:8B:0C:F8:7F:23:49:FC:87:87:EF:52:E3:B0:AD:80:E1:41:E2:BE:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/89a40089-6041-45ed-8e44-a997c8acf480/0/8B0CF87F2349FC8787EF52E3B0AD80E141E2BE1C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8B0CF87F2349FC8787EF52E3B0AD80E141E2BE1C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/89a40089-6041-45ed-8e44-a997c8acf480/0/8B0CF87F2349FC8787EF52E3B0AD80E141E2BE1C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:f3:71:97:12:72:4a:38:7f:3f:8a:2e:59:58:4f:43:3f:45: e0:93:68:62:ff:34:21:f7:68:b4:f3:bf:2c:f2:0e:5e:22:c2: ce:d9:98:41:b1:6a:7e:73:88:b4:a4:60:43:28:0d:df:a6:49: 75:a0:25:5d:41:c5:54:1c:a1:16:6c:7d:6d:c3:f6:3b:dc:63: 17:b0:3f:d9:1b:fb:f7:e1:c0:39:99:c2:c0:4e:16:de:9c:2e: 64:44:b2:7a:0c:c1:08:f2:80:0d:fa:28:c3:3e:e1:bd:09:de: 97:58:bc:28:68:03:76:3f:37:5d:bf:15:8b:6e:96:10:10:97: 1c:4d:22:69:17:78:40:94:f1:1a:78:2a:28:dd:ac:de:da:82: 76:a1:fd:29:95:03:7c:15:c9:a6:a9:67:8e:cb:9a:b0:91:fb: b5:85:87:01:27:94:b6:aa:26:44:51:6c:55:04:62:3d:52:69: ab:15:dd:9a:8d:e6:24:a6:3f:1b:c8:db:84:7e:6c:f1:b5:27: fe:ba:cd:43:68:a0:ec:0e:24:54:b5:b6:06:69:11:b1:79:5e: 43:d0:b0:a1:c5:7d:b8:3c:4f:ef:dc:ac:64:5e:5b:16:bd:25: 13:bc:54:b1:2c:a8:99:57:02:67:71:57:05:22:d2:a3:54:0b: 0c:f7:43:20 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQyKyHSxq9oxqMWKX5n9CH6SJ/3AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEIwQ0Y4N0YyMzQ5RkM4Nzg3RUY1MkUzQjBBRDgwRTE0 MUUyQkUxQzAeFw0yNjExMTUwNjExNTdaFw0yNjExMTYwNzQxNTdaMDMxMTAvBgNV BAMTKDk2RjkyMEI0MUE0RkYwRkQ4MjRENEU2RDQ3QTU4MzkxQzI2QzJCQkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNS76Q1ur/KvIBwTC7hpumn+Ws 1JnZSC8P8vrMCyAuQ4tWL0wJ7AylS80qVYCqEPN2ma0+KZV+J2drCOCbVwAxptrT XdFJNqioe6AlwwKlxbo5FZboy82yao1QO2hVH6dHeTalS8uwGqsxxD8wtothM/3p Bdn/VWKuZN7+jlQuJb0KYptx+ioFWHhmvl4jWLpRs1UF1onpVGZQyt0rB5CUZ7Xb YoAVSRQvPbHKDk+x8NaNASENSbZArtyExxuZtAXFjAmySdLC8DsLYQF4Lq4wE4D1 aAgWZW7U6E1akwE0KbHe8ZLddegkQyFdAx3gEb8yZCPPbvRNcGYoakQ2k7nTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlvkgtBpP8P2CTU5tR6WDkcJsK74wHwYDVR0j BBgwFoAUiwz4fyNJ/IeH71LjsK2A4UHivhwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODlhNDAwODktNjA0MS00NWVkLThlNDQtYTk5N2M4YWNmNDgwLzAvOEIwQ0Y4N0Yy MzQ5RkM4Nzg3RUY1MkUzQjBBRDgwRTE0MUUyQkUxQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84QjBDRjg3RjIzNDlGQzg3ODdFRjUyRTNCMEFEODBFMTQxRTJC RTFDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODlhNDAwODktNjA0MS00NWVkLThl NDQtYTk5N2M4YWNmNDgwLzAvOEIwQ0Y4N0YyMzQ5RkM4Nzg3RUY1MkUzQjBBRDgw RTE0MUUyQkUxQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHXzcZcScko4fz+KLllYT0M/ReCTaGL/NCH3 aLTzvyzyDl4iws7ZmEGxan5ziLSkYEMoDd+mSXWgJV1BxVQcoRZsfW3D9jvcYxew P9kb+/fhwDmZwsBOFt6cLmREsnoMwQjygA36KMM+4b0J3pdYvChoA3Y/N12/FYtu lhAQlxxNImkXeECU8Rp4KijdrN7agnah/SmVA3wVyaapZ47LmrCR+7WFhwEnlLaq JkRRbFUEYj1SaasV3ZqN5iSmPxvI24R+bPG1J/66zUNooOwOJFS1tgZpEbF5XkPQ sKHFfbg8T+/crGReWxa9JRO8VLEsqJlXAmdxVwUi0qNUCwz3QyA= -----END CERTIFICATE-----Generated at Sun Nov 15 20:55:19 2026 by rpki-client