$ rpki-client -vvvf rpki-rsync.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/8AA52DB5DB71F638E941254A6B0CE68361DB78A6.mft File: 8AA52DB5DB71F638E941254A6B0CE68361DB78A6.mft (raw, json) Hash identifier: CD3xC5OXEeheG8ah2Gle2eTzTJFGr/4grlD/ZdARAcI= Subject key identifier: 30:A3:03:94:51:02:DA:26:1C:B1:80:13:11:93:22:4E:15:92:55:39 Authority key identifier: 8A:A5:2D:B5:DB:71:F6:38:E9:41:25:4A:6B:0C:E6:83:61:DB:78:A6 Certificate issuer: /CN=8AA52DB5DB71F638E941254A6B0CE68361DB78A6 Certificate serial: 6B4DE1D2FD4C583E0B144FE0C628D15C81A7C0B8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8AA52DB5DB71F638E941254A6B0CE68361DB78A6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/8AA52DB5DB71F638E941254A6B0CE68361DB78A6.mft Manifest number: 0108 Signing time: Sun 15 Nov 2026 08:40:03 +0000 Manifest this update: Sun 15 Nov 2026 08:35:03 +0000 Manifest next update: Mon 16 Nov 2026 08:48:03 +0000 Files and hashes: 1: 8AA52DB5DB71F638E941254A6B0CE68361DB78A6.crl (hash: 1LamNITFsxIYhHMlQyq+/jMWXriQyJhusy1QyVucICg=) 2: 3130332e3138312e37362e302f32342d3234203d3e20313439333739.roa (hash: WXHF3ztWLcHGSe6MPgiYVl8CmUEe+OPjuifFRIwvCro=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/8AA52DB5DB71F638E941254A6B0CE68361DB78A6.crl rsync://rpki-rsync.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/8AA52DB5DB71F638E941254A6B0CE68361DB78A6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8AA52DB5DB71F638E941254A6B0CE68361DB78A6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 08:48:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:4d:e1:d2:fd:4c:58:3e:0b:14:4f:e0:c6:28:d1:5c:81:a7:c0:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8AA52DB5DB71F638E941254A6B0CE68361DB78A6 Validity Not Before: Nov 15 08:35:03 2026 GMT Not After : Nov 16 08:48:03 2026 GMT Subject: CN=30A303945102DA261CB180131193224E15925539 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d1:c8:72:22:8f:a2:39:6c:a7:a8:41:6b:a5: 09:c7:ee:69:3b:00:6d:9d:3e:38:33:ba:b0:e6:e0: 5b:d1:ce:89:19:39:c1:2c:c7:cf:84:6c:3e:97:9e: bd:ff:ae:54:63:b0:6b:af:dd:b9:d2:87:f6:d6:7d: e0:7f:45:c7:c9:28:8d:ba:b2:bb:14:ba:e2:de:31: 4a:34:90:57:3e:cd:c4:f9:81:2a:a7:55:bf:36:0e: 8a:19:89:83:61:b8:f1:f2:ea:a2:dc:ed:4d:34:58: b0:d1:b7:13:5d:44:0c:19:48:1c:4c:15:88:62:4b: 6c:86:93:9d:8c:d5:01:1c:32:fb:71:10:c3:72:2b: 7b:ff:5c:77:45:6c:01:44:73:27:95:77:09:20:22: 62:6e:d3:f7:68:e5:26:23:0c:35:80:e6:79:8a:25: 01:b7:2d:50:d7:78:1c:6e:6a:fb:4e:d3:0f:1a:5d: 29:45:5c:b1:62:f8:c1:ae:28:85:6d:95:53:dc:f3: 63:3c:24:61:88:90:6a:66:3e:de:ee:de:58:e3:16: a5:52:b5:11:c8:21:94:f4:cb:dd:76:b4:7a:c1:bc: 07:89:65:ee:53:f2:c2:cf:4a:41:96:ca:4b:55:b7: de:a7:48:5c:dd:e9:f8:37:8a:7b:55:b6:e6:aa:5f: 2a:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:A3:03:94:51:02:DA:26:1C:B1:80:13:11:93:22:4E:15:92:55:39 X509v3 Authority Key Identifier: keyid:8A:A5:2D:B5:DB:71:F6:38:E9:41:25:4A:6B:0C:E6:83:61:DB:78:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/8AA52DB5DB71F638E941254A6B0CE68361DB78A6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8AA52DB5DB71F638E941254A6B0CE68361DB78A6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/8AA52DB5DB71F638E941254A6B0CE68361DB78A6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:fa:91:f9:f6:78:c3:3b:a5:df:3a:da:d6:08:37:de:21:ab: af:96:4c:ae:f8:94:e5:f3:2a:56:00:a7:27:9b:b1:e8:37:d6: 10:c2:63:e5:53:d8:ed:de:22:2e:53:6c:ff:5d:1d:b9:00:2b: 0e:18:35:c9:8d:8a:f5:70:3d:36:1c:4d:33:83:f0:6c:95:c5: f1:6a:47:40:5d:90:fe:39:53:c3:5c:d1:5a:fb:9e:24:38:b8: ed:b3:57:41:d1:51:19:ac:42:26:11:09:f1:99:ee:01:63:e3: 82:38:3e:0b:9e:21:96:11:99:05:5d:40:a7:77:40:46:ad:ff: d4:ca:61:61:e4:87:df:7b:7c:c0:7d:f4:53:63:7a:6e:27:d0: 6e:1b:a0:5d:ea:d5:c0:d6:db:95:84:9e:7b:f6:3c:d8:24:f2: 6a:7e:94:91:45:07:2a:b5:92:af:52:a7:b4:e1:24:27:98:e2: fd:3b:53:e6:9d:ab:30:46:07:a2:d2:c6:e6:6b:8a:47:d4:43: ae:4b:48:8e:c2:08:8d:68:cd:3d:85:a1:01:45:5c:ea:a9:be: d4:27:55:5b:63:29:d3:29:f3:5c:5b:e5:fa:50:86:7f:d6:8e: 85:e3:74:52:14:8d:f7:6b:33:7a:c8:41:28:19:db:e4:c0:71: 58:45:c0:56 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa03h0v1MWD4LFE/gxijRXIGnwLgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEFBNTJEQjVEQjcxRjYzOEU5NDEyNTRBNkIwQ0U2ODM2 MURCNzhBNjAeFw0yNjExMTUwODM1MDNaFw0yNjExMTYwODQ4MDNaMDMxMTAvBgNV BAMTKDMwQTMwMzk0NTEwMkRBMjYxQ0IxODAxMzExOTMyMjRFMTU5MjU1MzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC20chyIo+iOWynqEFrpQnH7mk7 AG2dPjgzurDm4FvRzokZOcEsx8+EbD6Xnr3/rlRjsGuv3bnSh/bWfeB/RcfJKI26 srsUuuLeMUo0kFc+zcT5gSqnVb82DooZiYNhuPHy6qLc7U00WLDRtxNdRAwZSBxM FYhiS2yGk52M1QEcMvtxEMNyK3v/XHdFbAFEcyeVdwkgImJu0/do5SYjDDWA5nmK JQG3LVDXeBxuavtO0w8aXSlFXLFi+MGuKIVtlVPc82M8JGGIkGpmPt7u3ljjFqVS tRHIIZT0y912tHrBvAeJZe5T8sLPSkGWyktVt96nSFzd6fg3intVtuaqXyqPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMKMDlFEC2iYcsYATEZMiThWSVTkwHwYDVR0j BBgwFoAUiqUttdtx9jjpQSVKawzmg2HbeKYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZmUxY2JkNzktOGYyNi00YjBlLThiM2ItYWI5ZTk5MzhmY2FlLzAvOEFBNTJEQjVE QjcxRjYzOEU5NDEyNTRBNkIwQ0U2ODM2MURCNzhBNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84QUE1MkRCNURCNzFGNjM4RTk0MTI1NEE2QjBDRTY4MzYxREI3 OEE2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZmUxY2JkNzktOGYyNi00YjBlLThi M2ItYWI5ZTk5MzhmY2FlLzAvOEFBNTJEQjVEQjcxRjYzOEU5NDEyNTRBNkIwQ0U2 ODM2MURCNzhBNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHT6kfn2eMM7pd862tYIN94hq6+WTK74lOXz KlYApyebseg31hDCY+VT2O3eIi5TbP9dHbkAKw4YNcmNivVwPTYcTTOD8GyVxfFq R0BdkP45U8Nc0Vr7niQ4uO2zV0HRURmsQiYRCfGZ7gFj44I4PgueIZYRmQVdQKd3 QEat/9TKYWHkh997fMB99FNjem4n0G4boF3q1cDW25WEnnv2PNgk8mp+lJFFByq1 kq9Sp7ThJCeY4v07U+adqzBGB6LSxuZrikfUQ65LSI7CCI1ozT2FoQFFXOqpvtQn VVtjKdMp81xb5fpQhn/WjoXjdFIUjfdrM3rIQSgZ2+TAcVhFwFY= -----END CERTIFICATE-----Generated at Sun Nov 15 16:46:10 2026 by rpki-client