$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a5481606-d5fd-4196-abcd-58e6c76243c5/0/8577702D614C8CB829CA2CC51C2B3374AC66A40E.mft File: 8577702D614C8CB829CA2CC51C2B3374AC66A40E.mft (raw, json) Hash identifier: HWSFccPr3g5nqu5rPrmuYFE/rHYZZj52Z/w/kvj402Y= Subject key identifier: 0D:28:BC:23:D2:6C:C0:54:C9:B9:5D:6C:16:F5:84:A8:02:91:33:7A Authority key identifier: 85:77:70:2D:61:4C:8C:B8:29:CA:2C:C5:1C:2B:33:74:AC:66:A4:0E Certificate issuer: /CN=8577702D614C8CB829CA2CC51C2B3374AC66A40E Certificate serial: 048E9CDCAC691D8C32B6E1A7380F354EAC180E36 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/8577702D614C8CB829CA2CC51C2B3374AC66A40E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a5481606-d5fd-4196-abcd-58e6c76243c5/0/8577702D614C8CB829CA2CC51C2B3374AC66A40E.mft Manifest number: 0105 Signing time: Sat 14 Nov 2026 22:42:39 +0000 Manifest this update: Sat 14 Nov 2026 22:37:39 +0000 Manifest next update: Mon 16 Nov 2026 01:55:39 +0000 Files and hashes: 1: 8577702D614C8CB829CA2CC51C2B3374AC66A40E.crl (hash: nHxFP9rd1FfXvLy+npoPUzw09jMbB71NivYbJLay9o0=) 2: 3135372e36362e3137302e302f32332d3233203d3e20313532373737.roa (hash: b9vSoEj12pKvRl6GFlwGqwDqlYjOzNMwdmXHDB/QoPA=) 3: 3135372e36362e3137312e302f32342d3234203d3e20313532373737.roa (hash: uYXVOfIT7P6Dr33KoZiS4hHMvBugVDHDvO0rydITSy0=) 4: 3135372e36362e3137302e302f32342d3234203d3e20313532373737.roa (hash: ymv/QzmelT0mY8Z1NXChI2j7830jRvZf9HvAHfEuKp0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a5481606-d5fd-4196-abcd-58e6c76243c5/0/8577702D614C8CB829CA2CC51C2B3374AC66A40E.crl rsync://rpki-rsync.idnic.net/repo/a5481606-d5fd-4196-abcd-58e6c76243c5/0/8577702D614C8CB829CA2CC51C2B3374AC66A40E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/8577702D614C8CB829CA2CC51C2B3374AC66A40E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 01:55:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:8e:9c:dc:ac:69:1d:8c:32:b6:e1:a7:38:0f:35:4e:ac:18:0e:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8577702D614C8CB829CA2CC51C2B3374AC66A40E Validity Not Before: Nov 14 22:37:39 2026 GMT Not After : Nov 16 01:55:39 2026 GMT Subject: CN=0D28BC23D26CC054C9B95D6C16F584A80291337A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:77:28:c0:9d:30:c4:5c:15:46:fb:21:f2:d4: d4:f4:ac:95:d5:3c:11:45:79:6a:96:79:54:65:a0: 43:d9:19:3d:8b:c1:2c:35:c1:ed:24:f8:f6:2a:af: 35:a0:b5:d4:fd:e7:41:e9:74:2c:de:5a:08:ec:0d: 02:a1:2c:21:ba:c0:7d:bb:8f:25:69:ee:14:a0:d1: ef:14:70:e3:d9:ac:56:cb:0e:6e:6f:07:c5:62:39: a3:24:27:ab:7c:70:2c:6a:7f:61:61:03:7f:92:f3: db:c3:44:b0:a3:b3:10:ea:40:8a:72:45:24:68:b2: b9:cc:7c:9c:db:e0:0c:1b:7e:8d:86:0f:95:39:44: b0:e8:4f:fd:e9:b6:4f:35:32:56:f6:a5:c0:e9:4f: 11:86:0d:fc:13:7a:47:59:1b:b6:54:9a:81:b8:53: dd:54:61:d5:2b:fd:c5:e1:25:e8:2c:a2:17:d7:7c: 3d:06:95:fc:fd:71:a1:95:15:7f:f8:66:93:02:59: 27:56:f1:4e:b5:f6:b0:b4:ef:0d:89:b3:64:31:31: 2e:f7:cf:70:09:17:f0:5e:62:1c:bc:5d:63:24:b7: af:30:41:9e:4c:1e:15:b1:b4:13:3d:c5:c5:88:92: ca:c0:74:32:68:e3:72:08:c2:16:07:e3:62:68:cc: 4b:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:28:BC:23:D2:6C:C0:54:C9:B9:5D:6C:16:F5:84:A8:02:91:33:7A X509v3 Authority Key Identifier: keyid:85:77:70:2D:61:4C:8C:B8:29:CA:2C:C5:1C:2B:33:74:AC:66:A4:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a5481606-d5fd-4196-abcd-58e6c76243c5/0/8577702D614C8CB829CA2CC51C2B3374AC66A40E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/8577702D614C8CB829CA2CC51C2B3374AC66A40E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a5481606-d5fd-4196-abcd-58e6c76243c5/0/8577702D614C8CB829CA2CC51C2B3374AC66A40E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:d9:59:e5:cc:03:f8:c4:6b:b9:52:69:90:29:f7:57:17:53: 57:34:24:6f:ea:8e:15:fe:ad:56:6b:29:fe:f0:2e:bc:a5:f8: f3:01:c1:df:da:aa:88:ed:0d:ff:47:2a:9e:3c:bc:43:9a:c9: 54:2b:d0:10:83:d2:51:c3:85:ba:cf:59:3a:1d:ae:22:6e:07: 4a:9d:9a:d5:86:26:e9:98:83:67:29:18:e0:29:c1:ec:f7:ff: d6:5f:f9:ec:3f:2e:73:32:50:11:47:51:d4:00:39:00:eb:a0: a3:b7:c1:a8:05:2d:6a:5c:d3:b7:7d:e3:85:60:8a:ae:5e:24: 4a:e0:f1:28:d5:2e:78:39:b1:46:ec:5e:b8:f1:3f:9a:2c:42: 2b:87:1c:43:1e:68:a8:b6:f0:ed:83:9f:08:b5:6b:38:62:92: 5d:4a:56:f0:fa:15:35:a2:97:b7:1c:01:0d:83:ae:00:d8:69: 46:1d:9f:18:d6:93:8c:05:f5:ca:87:49:34:38:b3:af:d6:e0: 23:20:ff:98:c9:37:01:37:92:76:3a:50:bc:1b:7a:48:6e:21: 9d:70:f7:de:fa:71:15:a0:6c:a1:bb:aa:af:ed:94:21:b7:14: 3c:51:b3:49:2f:45:53:37:e8:1b:41:f1:50:6d:8c:54:4f:3f: e4:2b:81:29 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBI6c3KxpHYwytuGnOA81TqwYDjYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODU3NzcwMkQ2MTRDOENCODI5Q0EyQ0M1MUMyQjMzNzRB QzY2QTQwRTAeFw0yNjExMTQyMjM3MzlaFw0yNjExMTYwMTU1MzlaMDMxMTAvBgNV BAMTKDBEMjhCQzIzRDI2Q0MwNTRDOUI5NUQ2QzE2RjU4NEE4MDI5MTMzN0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXdyjAnTDEXBVG+yHy1NT0rJXV PBFFeWqWeVRloEPZGT2LwSw1we0k+PYqrzWgtdT950HpdCzeWgjsDQKhLCG6wH27 jyVp7hSg0e8UcOPZrFbLDm5vB8ViOaMkJ6t8cCxqf2FhA3+S89vDRLCjsxDqQIpy RSRosrnMfJzb4Awbfo2GD5U5RLDoT/3ptk81Mlb2pcDpTxGGDfwTekdZG7ZUmoG4 U91UYdUr/cXhJegsohfXfD0Glfz9caGVFX/4ZpMCWSdW8U619rC07w2Js2QxMS73 z3AJF/BeYhy8XWMkt68wQZ5MHhWxtBM9xcWIksrAdDJo43IIwhYH42JozEsVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDSi8I9JswFTJuV1sFvWEqAKRM3owHwYDVR0j BBgwFoAUhXdwLWFMjLgpyizFHCszdKxmpA4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTU0ODE2MDYtZDVmZC00MTk2LWFiY2QtNThlNmM3NjI0M2M1LzAvODU3NzcwMkQ2 MTRDOENCODI5Q0EyQ0M1MUMyQjMzNzRBQzY2QTQwRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC84NTc3NzAyRDYxNEM4Q0I4MjlDQTJDQzUxQzJCMzM3NEFDNjZB NDBFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTU0ODE2MDYtZDVmZC00MTk2LWFi Y2QtNThlNmM3NjI0M2M1LzAvODU3NzcwMkQ2MTRDOENCODI5Q0EyQ0M1MUMyQjMz NzRBQzY2QTQwRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHvZWeXMA/jEa7lSaZAp91cXU1c0JG/qjhX+ rVZrKf7wLryl+PMBwd/aqojtDf9HKp48vEOayVQr0BCD0lHDhbrPWTodriJuB0qd mtWGJumYg2cpGOApwez3/9Zf+ew/LnMyUBFHUdQAOQDroKO3wagFLWpc07d944Vg iq5eJErg8SjVLng5sUbsXrjxP5osQiuHHEMeaKi28O2Dnwi1azhikl1KVvD6FTWi l7ccAQ2DrgDYaUYdnxjWk4wF9cqHSTQ4s6/W4CMg/5jJNwE3knY6ULwbekhuIZ1w 9976cRWgbKG7qq/tlCG3FDxRs0kvRVM36BtB8VBtjFRPP+QrgSk= -----END CERTIFICATE-----Generated at Sun Nov 15 10:28:46 2026 by rpki-client