$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/8F1F52C63BB87484D4C5E9D8551AE767566D0060.mft File: 8F1F52C63BB87484D4C5E9D8551AE767566D0060.mft (raw, json) Hash identifier: idemnBxcqzQgpdUxOfzGMhaWVT5+pkb4yhG2DOqHq+M= Subject key identifier: B1:D4:4C:91:92:14:E8:57:9A:81:D8:DF:A7:FB:6A:44:41:7B:4F:AC Authority key identifier: 8F:1F:52:C6:3B:B8:74:84:D4:C5:E9:D8:55:1A:E7:67:56:6D:00:60 Certificate issuer: /CN=8F1F52C63BB87484D4C5E9D8551AE767566D0060 Certificate serial: 3B01A3B89C4166691B86AB78ECE3D28D80892366 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8F1F52C63BB87484D4C5E9D8551AE767566D0060.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/8F1F52C63BB87484D4C5E9D8551AE767566D0060.mft Manifest number: 0107 Signing time: Sun 15 Nov 2026 08:55:17 +0000 Manifest this update: Sun 15 Nov 2026 08:50:17 +0000 Manifest next update: Mon 16 Nov 2026 09:09:17 +0000 Files and hashes: 1: 8F1F52C63BB87484D4C5E9D8551AE767566D0060.crl (hash: Y83B15KcsBJqKovcsYvjqWMFrSq06U1MVCBTe8RJzg0=) 2: 3130332e3137312e31382e302f32342d3234203d3e20313336303532.roa (hash: 5uR0k9um/4xZDeF/1OtaEeN9gAbE1nIuTIkh38U5XcA=) 3: 3130332e3137312e31392e302f32342d3234203d3e20313338363038.roa (hash: +9zDigXxWl0KHwFSHRJ8vK8jloGtZKIEVRmfMrusxTQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/8F1F52C63BB87484D4C5E9D8551AE767566D0060.crl rsync://rpki-rsync.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/8F1F52C63BB87484D4C5E9D8551AE767566D0060.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8F1F52C63BB87484D4C5E9D8551AE767566D0060.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 09:09:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:01:a3:b8:9c:41:66:69:1b:86:ab:78:ec:e3:d2:8d:80:89:23:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F1F52C63BB87484D4C5E9D8551AE767566D0060 Validity Not Before: Nov 15 08:50:17 2026 GMT Not After : Nov 16 09:09:17 2026 GMT Subject: CN=B1D44C919214E8579A81D8DFA7FB6A44417B4FAC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:e0:3c:4c:d2:57:cd:00:10:03:e4:33:27:89: 08:4d:e4:47:33:95:a9:ff:53:e6:65:10:92:76:ce: f2:22:7e:0c:1e:a0:c2:94:b4:5d:af:7c:8a:80:46: 59:a6:b7:a1:f5:33:df:a3:86:8c:18:26:3b:b3:ab: b7:76:fc:15:24:05:20:64:78:0d:e0:84:c7:7d:73: 4a:50:29:26:0b:08:91:41:a7:62:b3:4d:81:49:2b: e5:e8:a5:6c:5f:52:6d:82:7a:e0:6c:0c:d8:10:c3: 97:58:ff:53:c6:14:60:7c:ba:41:c7:56:b8:ea:e7: e9:01:f8:e1:d9:bc:7b:2a:3e:3b:f0:2b:7a:e4:d2: f6:c6:f7:be:c2:d5:4a:a3:cc:a0:82:4d:2f:19:b3: 5a:35:cd:66:e8:3a:59:b7:f5:a8:db:92:0c:7d:51: d5:36:31:88:76:f4:71:37:4b:34:4c:dd:5b:d6:79: b0:20:21:7a:cc:52:28:98:17:f7:68:ef:76:92:7a: c7:e1:8d:3b:48:df:ed:f2:84:79:52:f6:89:3f:80: be:ec:c2:ed:17:56:cc:3e:00:5e:dd:3c:da:bb:e4: a1:e3:d6:2a:4a:cd:a0:0f:38:c3:9a:12:ef:82:1d: 5c:3d:4b:95:58:f5:3a:4c:a8:e7:f5:e1:06:9a:09: 68:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:D4:4C:91:92:14:E8:57:9A:81:D8:DF:A7:FB:6A:44:41:7B:4F:AC X509v3 Authority Key Identifier: keyid:8F:1F:52:C6:3B:B8:74:84:D4:C5:E9:D8:55:1A:E7:67:56:6D:00:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/8F1F52C63BB87484D4C5E9D8551AE767566D0060.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8F1F52C63BB87484D4C5E9D8551AE767566D0060.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/8F1F52C63BB87484D4C5E9D8551AE767566D0060.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:d6:e5:4a:ae:ac:39:0c:ed:31:dc:37:f5:30:5c:fe:69:52: f1:20:3a:d1:a7:4c:c1:4e:58:9a:da:17:e6:8e:0d:16:91:b9: 10:30:51:98:91:a2:51:7a:04:e2:36:3e:fc:76:5b:da:58:88: c6:b4:68:c6:ca:7e:ac:60:de:5c:ba:03:49:37:94:ea:16:67: ab:52:ca:3d:d6:70:54:f4:49:b7:34:84:a1:61:f0:ee:fc:4d: a4:41:58:28:c1:4c:14:47:d4:0e:87:5b:37:bb:8e:9e:9a:ab: 35:2c:93:d3:23:7e:46:24:e7:d1:48:28:b3:e7:8c:b2:77:d3: 52:ab:a5:31:12:e1:df:9f:df:9c:19:46:c0:10:fb:3a:70:ee: cd:00:71:81:ed:a7:65:25:b5:1d:a8:eb:e3:e5:64:0e:bf:ca: 40:94:34:36:21:a8:ad:6f:d7:9c:ce:ee:7b:55:82:5b:71:e7: 1b:5c:85:5a:05:d6:33:90:90:c4:74:e0:77:8c:11:b9:c0:df: ec:f2:16:71:47:42:7f:6a:10:62:16:51:9d:b5:5d:0a:27:bf: ef:cf:24:71:82:f3:34:46:d3:81:1a:30:fd:ad:c7:63:df:0e: 0e:1d:27:71:a4:50:2d:06:59:8e:a2:e7:63:83:45:05:03:7a: 71:a9:c5:86 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOwGjuJxBZmkbhqt47OPSjYCJI2YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEYxRjUyQzYzQkI4NzQ4NEQ0QzVFOUQ4NTUxQUU3Njc1 NjZEMDA2MDAeFw0yNjExMTUwODUwMTdaFw0yNjExMTYwOTA5MTdaMDMxMTAvBgNV BAMTKEIxRDQ0QzkxOTIxNEU4NTc5QTgxRDhERkE3RkI2QTQ0NDE3QjRGQUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF4DxM0lfNABAD5DMniQhN5Ecz lan/U+ZlEJJ2zvIifgweoMKUtF2vfIqARlmmt6H1M9+jhowYJjuzq7d2/BUkBSBk eA3ghMd9c0pQKSYLCJFBp2KzTYFJK+XopWxfUm2CeuBsDNgQw5dY/1PGFGB8ukHH Vrjq5+kB+OHZvHsqPjvwK3rk0vbG977C1UqjzKCCTS8Zs1o1zWboOlm39ajbkgx9 UdU2MYh29HE3SzRM3VvWebAgIXrMUiiYF/do73aSesfhjTtI3+3yhHlS9ok/gL7s wu0XVsw+AF7dPNq75KHj1ipKzaAPOMOaEu+CHVw9S5VY9TpMqOf14QaaCWiXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsdRMkZIU6Feagdjfp/tqREF7T6wwHwYDVR0j BBgwFoAUjx9Sxju4dITUxenYVRrnZ1ZtAGAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWE4ZjY5ZjctOTMzMi00Y2Q0LWIzZTUtY2M2YzQ3NzJjZjczLzAvOEYxRjUyQzYz QkI4NzQ4NEQ0QzVFOUQ4NTUxQUU3Njc1NjZEMDA2MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84RjFGNTJDNjNCQjg3NDg0RDRDNUU5RDg1NTFBRTc2NzU2NkQw MDYwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWE4ZjY5ZjctOTMzMi00Y2Q0LWIz ZTUtY2M2YzQ3NzJjZjczLzAvOEYxRjUyQzYzQkI4NzQ4NEQ0QzVFOUQ4NTUxQUU3 Njc1NjZEMDA2MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABnW5UqurDkM7THcN/UwXP5pUvEgOtGnTMFO WJraF+aODRaRuRAwUZiRolF6BOI2Pvx2W9pYiMa0aMbKfqxg3ly6A0k3lOoWZ6tS yj3WcFT0Sbc0hKFh8O78TaRBWCjBTBRH1A6HWze7jp6aqzUsk9MjfkYk59FIKLPn jLJ301KrpTES4d+f35wZRsAQ+zpw7s0AcYHtp2UltR2o6+PlZA6/ykCUNDYhqK1v 15zO7ntVgltx5xtchVoF1jOQkMR04HeMEbnA3+zyFnFHQn9qEGIWUZ21XQonv+/P JHGC8zRG04EaMP2tx2PfDg4dJ3GkUC0GWY6i52ODRQUDenGpxYY= -----END CERTIFICATE-----Generated at Sun Nov 15 16:08:01 2026 by rpki-client