$ rpki-client -vvvf rpki-rsync.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/8AA52DB5DB71F638E941254A6B0CE68361DB78A6.mft File: 8AA52DB5DB71F638E941254A6B0CE68361DB78A6.mft (raw, json) Hash identifier: z6d2N4qxK2afLeip0sHGE6rnq/XVSuqP9IxyBtnvpnQ= Subject key identifier: 8F:E0:BA:46:45:3D:78:A8:33:2B:0D:E8:0D:4E:04:F7:DF:B8:67:F4 Authority key identifier: 8A:A5:2D:B5:DB:71:F6:38:E9:41:25:4A:6B:0C:E6:83:61:DB:78:A6 Certificate issuer: /CN=8AA52DB5DB71F638E941254A6B0CE68361DB78A6 Certificate serial: 15CA5A4B5524012F1F6139149B75F0B73FA5603C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8AA52DB5DB71F638E941254A6B0CE68361DB78A6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/8AA52DB5DB71F638E941254A6B0CE68361DB78A6.mft Manifest number: 0101 Signing time: Tue 10 Nov 2026 05:48:08 +0000 Manifest this update: Tue 10 Nov 2026 05:43:08 +0000 Manifest next update: Wed 11 Nov 2026 05:54:08 +0000 Files and hashes: 1: 8AA52DB5DB71F638E941254A6B0CE68361DB78A6.crl (hash: L3mT/JrUqFjCkfK8dmzgp20WG173i6jxlYFn1/vkxr8=) 2: 3130332e3138312e37362e302f32342d3234203d3e20313439333739.roa (hash: WXHF3ztWLcHGSe6MPgiYVl8CmUEe+OPjuifFRIwvCro=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/8AA52DB5DB71F638E941254A6B0CE68361DB78A6.crl rsync://rpki-rsync.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/8AA52DB5DB71F638E941254A6B0CE68361DB78A6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8AA52DB5DB71F638E941254A6B0CE68361DB78A6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Nov 2026 05:54:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:ca:5a:4b:55:24:01:2f:1f:61:39:14:9b:75:f0:b7:3f:a5:60:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8AA52DB5DB71F638E941254A6B0CE68361DB78A6 Validity Not Before: Nov 10 05:43:08 2026 GMT Not After : Nov 11 05:54:08 2026 GMT Subject: CN=8FE0BA46453D78A8332B0DE80D4E04F7DFB867F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ce:d0:a8:dd:6b:b2:5d:bd:63:48:8c:09:04: 93:9e:8d:2c:17:15:a7:cf:2d:81:2a:2b:1e:30:1d: e3:e0:1d:96:2c:02:a9:d4:31:1a:74:b2:8c:18:24: 9b:88:62:0a:8f:7c:7f:91:16:2e:01:4d:d7:05:47: a8:af:b5:c0:63:78:a9:d8:54:7a:ce:44:e3:2b:17: e9:5e:8c:5f:eb:4b:04:65:25:a3:5b:6e:a8:bf:5c: a1:ae:c0:e5:99:57:46:35:c4:13:f1:72:22:e7:66: c9:64:a1:a5:0d:3d:8c:21:69:ce:c6:b1:4d:1e:71: e7:6f:e9:d2:c8:33:ae:b3:ea:58:0c:f3:60:62:02: 24:79:26:c7:d3:01:f1:76:42:8a:79:6b:e2:46:f4: c2:23:6b:de:fb:b8:ff:76:7d:98:c7:f6:2a:2d:1a: b4:a4:18:e7:66:d4:9f:22:23:b9:97:ea:06:9b:9d: 52:d7:f9:eb:a8:6f:84:b3:09:5c:b9:63:47:8b:ba: a3:57:9e:7d:06:02:56:51:bb:93:53:29:99:e5:a8: a7:7e:e0:f1:df:e4:a9:d5:06:e7:b0:b2:27:59:c3: c6:f3:0b:8b:55:b7:81:a6:81:5a:5c:76:b9:1e:ff: e3:f5:6a:b4:9a:14:6a:36:a7:47:a2:c2:c7:da:3d: 08:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:E0:BA:46:45:3D:78:A8:33:2B:0D:E8:0D:4E:04:F7:DF:B8:67:F4 X509v3 Authority Key Identifier: keyid:8A:A5:2D:B5:DB:71:F6:38:E9:41:25:4A:6B:0C:E6:83:61:DB:78:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/8AA52DB5DB71F638E941254A6B0CE68361DB78A6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8AA52DB5DB71F638E941254A6B0CE68361DB78A6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/8AA52DB5DB71F638E941254A6B0CE68361DB78A6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:34:09:a0:3c:5b:01:c1:a8:ff:dd:fc:c4:c6:d3:a5:c9:5e: 63:d0:3f:47:b2:0d:38:76:06:e3:d3:4b:4f:3c:ee:ec:af:31: fa:37:b1:09:2c:29:27:b6:75:e4:74:ca:c7:2a:9f:7c:a7:49: 2a:b7:12:54:99:3f:16:88:39:1e:33:ea:e6:7e:44:4f:50:0c: fd:01:63:93:6b:11:ba:7f:06:af:8d:47:26:92:58:25:32:2e: 54:b5:bc:26:65:50:6f:b9:ea:96:7d:74:58:ac:1d:ad:aa:2b: 92:ef:a4:aa:1a:c8:69:a0:65:f6:04:5e:1d:4f:e4:8a:75:68: d0:3c:24:13:be:6a:fa:fe:e5:40:57:30:e6:61:de:31:b7:9c: 94:2e:61:00:0a:77:a0:38:e0:0d:e3:23:e3:3b:c6:a0:8f:5a: 51:09:14:df:80:a9:e1:4e:5e:28:c2:af:19:2d:10:66:f3:d2: 52:14:9b:b2:8a:ab:3a:78:43:f0:17:fc:44:5c:2e:d5:f7:65: 87:4c:5a:9e:98:7c:88:74:3c:40:59:5e:95:f7:bb:5a:6d:30: 18:06:06:c1:02:5b:eb:39:02:f1:1c:09:87:e5:da:ea:88:69: 1d:97:5c:70:de:c7:b9:75:b3:3b:35:0a:91:af:30:eb:b3:b9: 49:f9:d3:dd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFcpaS1UkAS8fYTkUm3Xwtz+lYDwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEFBNTJEQjVEQjcxRjYzOEU5NDEyNTRBNkIwQ0U2ODM2 MURCNzhBNjAeFw0yNjExMTAwNTQzMDhaFw0yNjExMTEwNTU0MDhaMDMxMTAvBgNV BAMTKDhGRTBCQTQ2NDUzRDc4QTgzMzJCMERFODBENEUwNEY3REZCODY3RjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwztCo3WuyXb1jSIwJBJOejSwX FafPLYEqKx4wHePgHZYsAqnUMRp0sowYJJuIYgqPfH+RFi4BTdcFR6ivtcBjeKnY VHrOROMrF+lejF/rSwRlJaNbbqi/XKGuwOWZV0Y1xBPxciLnZslkoaUNPYwhac7G sU0ecedv6dLIM66z6lgM82BiAiR5JsfTAfF2Qop5a+JG9MIja977uP92fZjH9iot GrSkGOdm1J8iI7mX6gabnVLX+euob4SzCVy5Y0eLuqNXnn0GAlZRu5NTKZnlqKd+ 4PHf5KnVBuewsidZw8bzC4tVt4GmgVpcdrke/+P1arSaFGo2p0eiwsfaPQipAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUj+C6RkU9eKgzKw3oDU4E99+4Z/QwHwYDVR0j BBgwFoAUiqUttdtx9jjpQSVKawzmg2HbeKYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmUxY2JkNzktOGYyNi00YjBlLThiM2ItYWI5ZTk5MzhmY2FlLzAvOEFBNTJEQjVE QjcxRjYzOEU5NDEyNTRBNkIwQ0U2ODM2MURCNzhBNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84QUE1MkRCNURCNzFGNjM4RTk0MTI1NEE2QjBDRTY4MzYxREI3 OEE2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmUxY2JkNzktOGYyNi00YjBlLThi M2ItYWI5ZTk5MzhmY2FlLzAvOEFBNTJEQjVEQjcxRjYzOEU5NDEyNTRBNkIwQ0U2 ODM2MURCNzhBNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEg0CaA8WwHBqP/d/MTG06XJXmPQP0eyDTh2 BuPTS0887uyvMfo3sQksKSe2deR0yscqn3ynSSq3ElSZPxaIOR4z6uZ+RE9QDP0B Y5NrEbp/Bq+NRyaSWCUyLlS1vCZlUG+56pZ9dFisHa2qK5LvpKoayGmgZfYEXh1P 5Ip1aNA8JBO+avr+5UBXMOZh3jG3nJQuYQAKd6A44A3jI+M7xqCPWlEJFN+AqeFO XijCrxktEGbz0lIUm7KKqzp4Q/AX/ERcLtX3ZYdMWp6YfIh0PEBZXpX3u1ptMBgG BsECW+s5AvEcCYfl2uqIaR2XXHDex7l1szs1CpGvMOuzuUn5090= -----END CERTIFICATE-----Generated at Tue Nov 10 18:16:17 2026 by rpki-client