$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b724e45b-254b-4feb-bf8e-7bf120912af7/0/8DD710534DF68AAB08361EE28306B8FDEE71D144.mft File: 8DD710534DF68AAB08361EE28306B8FDEE71D144.mft (raw, json) Hash identifier: SnvWfyb4rA2fAgw8PpqkFSNOeyppwNGj0e7dgD85pf0= Subject key identifier: 36:B8:77:22:4D:04:EF:1C:37:62:75:46:2A:18:38:10:91:76:12:39 Authority key identifier: 8D:D7:10:53:4D:F6:8A:AB:08:36:1E:E2:83:06:B8:FD:EE:71:D1:44 Certificate issuer: /CN=8DD710534DF68AAB08361EE28306B8FDEE71D144 Certificate serial: 0C1E45BDA00FCF73B48CBCA0886F79585D53264B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8DD710534DF68AAB08361EE28306B8FDEE71D144.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b724e45b-254b-4feb-bf8e-7bf120912af7/0/8DD710534DF68AAB08361EE28306B8FDEE71D144.mft Manifest number: 0101 Signing time: Tue 10 Nov 2026 03:40:15 +0000 Manifest this update: Tue 10 Nov 2026 03:35:15 +0000 Manifest next update: Wed 11 Nov 2026 07:00:15 +0000 Files and hashes: 1: 8DD710534DF68AAB08361EE28306B8FDEE71D144.crl (hash: agAK/FOFpvTEMgiEP1wtyysmRKoSbs9DuErWU0B6HTo=) 2: 3130332e3135382e3130332e302f32342d3234203d3e203435333137.roa (hash: mt9y4ArG2gRgvhKLs+xygsf6wYJsNzK3vkSOg2Yasms=) 3: 3130332e3135382e3130322e302f32342d3234203d3e20313431313239.roa (hash: OzarGbzrKygn581G2dCLdzA7C4q7lKqki8T+O4VVozc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b724e45b-254b-4feb-bf8e-7bf120912af7/0/8DD710534DF68AAB08361EE28306B8FDEE71D144.crl rsync://rpki-rsync.idnic.net/repo/b724e45b-254b-4feb-bf8e-7bf120912af7/0/8DD710534DF68AAB08361EE28306B8FDEE71D144.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8DD710534DF68AAB08361EE28306B8FDEE71D144.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Nov 2026 07:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:1e:45:bd:a0:0f:cf:73:b4:8c:bc:a0:88:6f:79:58:5d:53:26:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8DD710534DF68AAB08361EE28306B8FDEE71D144 Validity Not Before: Nov 10 03:35:15 2026 GMT Not After : Nov 11 07:00:15 2026 GMT Subject: CN=36B877224D04EF1C376275462A18381091761239 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:df:d0:fc:7e:14:24:06:09:43:d3:82:74:92: 79:44:86:e4:77:dd:db:03:9d:9f:a5:51:e5:ec:7d: 3b:1e:ce:af:d7:3e:71:10:91:58:be:59:73:60:e0: f4:05:4a:52:ff:5c:86:c2:9f:cd:fb:19:37:dd:82: ec:55:cd:68:22:7e:e3:9d:a5:13:dc:77:3a:25:ac: 1f:a3:0e:f3:fe:d6:38:13:7e:80:1b:39:fb:55:7b: 14:b3:b9:6f:35:62:8e:ef:00:ab:27:90:52:47:39: 25:56:c9:15:47:8f:f7:9c:de:c6:72:1a:b5:a2:7f: 25:93:c7:be:15:3b:78:07:c5:d7:b3:7f:a1:2c:b2: ca:a0:ed:23:11:81:df:e2:e5:72:00:5b:e5:f8:4a: 3a:12:5c:6e:73:23:27:a1:32:ad:4f:dd:bb:19:00: 40:42:e8:ef:e9:63:6c:32:a7:94:2d:8c:34:70:b9: 5e:df:06:3b:61:04:fc:e3:83:a9:17:be:05:53:c3: 8a:bd:32:7c:c8:29:69:f5:96:db:ad:a0:73:53:7a: 1f:3d:c6:0f:c8:49:63:5b:c2:01:69:4e:ef:16:33: e9:92:79:5e:a6:34:5b:89:2e:e5:61:4c:44:f3:6c: 04:7a:5a:1b:49:11:04:a7:0d:3d:78:ff:c0:7f:75: 71:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:B8:77:22:4D:04:EF:1C:37:62:75:46:2A:18:38:10:91:76:12:39 X509v3 Authority Key Identifier: keyid:8D:D7:10:53:4D:F6:8A:AB:08:36:1E:E2:83:06:B8:FD:EE:71:D1:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b724e45b-254b-4feb-bf8e-7bf120912af7/0/8DD710534DF68AAB08361EE28306B8FDEE71D144.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8DD710534DF68AAB08361EE28306B8FDEE71D144.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b724e45b-254b-4feb-bf8e-7bf120912af7/0/8DD710534DF68AAB08361EE28306B8FDEE71D144.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:03:4b:18:bd:7c:25:37:a0:ac:f4:34:10:b1:13:f2:da:d8: 3c:08:8f:53:5f:35:c3:50:b8:c5:8b:40:7d:74:f6:12:c1:b6: 5c:f5:ee:7c:3d:97:9f:42:47:34:00:39:48:56:c7:16:b5:6a: ef:9d:9a:fd:c8:1e:5d:ce:4a:ad:b4:06:9e:dd:ba:5d:4c:bd: d4:56:f1:5a:07:96:1b:c9:7c:9d:5d:ad:ec:5d:97:d3:65:0a: 1f:1a:27:59:10:29:c7:75:8e:e8:96:a8:ae:33:91:df:4d:58: 75:14:61:d6:91:b6:b0:82:66:8b:db:48:84:ac:ac:23:8f:1f: 5e:11:03:b3:2a:fc:04:44:95:ba:6c:d1:7f:30:a4:c1:47:fb: 68:8e:89:55:24:13:2c:aa:96:84:5e:0f:0b:45:db:0b:6b:c7: 10:b4:de:d2:48:c1:47:1a:ed:d6:21:5d:4d:df:9f:a8:f4:30: 59:ed:61:cf:f5:c7:86:3b:09:76:54:66:3b:22:eb:09:55:b8: 51:08:e8:cd:cb:cf:39:4f:8b:30:36:78:f6:c0:41:9f:09:b6: 2b:e6:5b:73:35:fb:7b:8e:65:66:6a:9c:e5:10:68:24:d6:83: 14:4a:e9:ff:d0:e6:c6:41:61:5a:ee:d3:f6:83:84:8f:ad:ce: 95:2b:d9:62 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDB5FvaAPz3O0jLygiG95WF1TJkswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOERENzEwNTM0REY2OEFBQjA4MzYxRUUyODMwNkI4RkRF RTcxRDE0NDAeFw0yNjExMTAwMzM1MTVaFw0yNjExMTEwNzAwMTVaMDMxMTAvBgNV BAMTKDM2Qjg3NzIyNEQwNEVGMUMzNzYyNzU0NjJBMTgzODEwOTE3NjEyMzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDY39D8fhQkBglD04J0knlEhuR3 3dsDnZ+lUeXsfTsezq/XPnEQkVi+WXNg4PQFSlL/XIbCn837GTfdguxVzWgifuOd pRPcdzolrB+jDvP+1jgTfoAbOftVexSzuW81Yo7vAKsnkFJHOSVWyRVHj/ec3sZy GrWifyWTx74VO3gHxdezf6Esssqg7SMRgd/i5XIAW+X4SjoSXG5zIyehMq1P3bsZ AEBC6O/pY2wyp5QtjDRwuV7fBjthBPzjg6kXvgVTw4q9MnzIKWn1ltutoHNTeh89 xg/ISWNbwgFpTu8WM+mSeV6mNFuJLuVhTETzbAR6WhtJEQSnDT14/8B/dXELAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNrh3Ik0E7xw3YnVGKhg4EJF2EjkwHwYDVR0j BBgwFoAUjdcQU032iqsINh7igwa4/e5x0UQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjcyNGU0NWItMjU0Yi00ZmViLWJmOGUtN2JmMTIwOTEyYWY3LzAvOERENzEwNTM0 REY2OEFBQjA4MzYxRUUyODMwNkI4RkRFRTcxRDE0NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84REQ3MTA1MzRERjY4QUFCMDgzNjFFRTI4MzA2QjhGREVFNzFE MTQ0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjcyNGU0NWItMjU0Yi00ZmViLWJm OGUtN2JmMTIwOTEyYWY3LzAvOERENzEwNTM0REY2OEFBQjA4MzYxRUUyODMwNkI4 RkRFRTcxRDE0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAoDSxi9fCU3oKz0NBCxE/La2DwIj1NfNcNQ uMWLQH109hLBtlz17nw9l59CRzQAOUhWxxa1au+dmv3IHl3OSq20Bp7dul1MvdRW 8VoHlhvJfJ1drexdl9NlCh8aJ1kQKcd1juiWqK4zkd9NWHUUYdaRtrCCZovbSISs rCOPH14RA7Mq/ARElbps0X8wpMFH+2iOiVUkEyyqloReDwtF2wtrxxC03tJIwUca 7dYhXU3fn6j0MFntYc/1x4Y7CXZUZjsi6wlVuFEI6M3LzzlPizA2ePbAQZ8Jtivm W3M1+3uOZWZqnOUQaCTWgxRK6f/Q5sZBYVru0/aDhI+tzpUr2WI= -----END CERTIFICATE-----Generated at Tue Nov 10 17:52:46 2026 by rpki-client