$ rpki-client -vvf rpki-rsync.idnic.net/repo/43ddb79f-2c37-47af-b95d-15311463b343/0/8E169B5A39E2F8580EE7F6AA4E76D6432700628C.mft File: 8E169B5A39E2F8580EE7F6AA4E76D6432700628C.mft (raw, json) Hash identifier: cDh/hbPyZHzKkTtjII6Ogb0aMxP/tpEoeGu+dzS7/2o= Subject key identifier: 83:8D:94:2E:E9:7F:3C:2A:D4:79:11:1F:76:B2:5B:71:84:0E:AD:18 Authority key identifier: 8E:16:9B:5A:39:E2:F8:58:0E:E7:F6:AA:4E:76:D6:43:27:00:62:8C Certificate issuer: /CN=8E169B5A39E2F8580EE7F6AA4E76D6432700628C Certificate serial: 443191F48EB78BD6545319B9F546847C293DB1FA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8E169B5A39E2F8580EE7F6AA4E76D6432700628C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/43ddb79f-2c37-47af-b95d-15311463b343/0/8E169B5A39E2F8580EE7F6AA4E76D6432700628C.mft Manifest number: 75 Signing time: Tue 28 Jul 2026 15:46:04 +0000 Manifest this update: Tue 28 Jul 2026 15:41:04 +0000 Manifest next update: Wed 29 Jul 2026 18:02:04 +0000 Files and hashes: 1: 8E169B5A39E2F8580EE7F6AA4E76D6432700628C.crl (hash: 2NCYHSCS8ZgwTt3g+hyodvblxH1j4kQeW+QaNbjqYnk=) 2: 3130332e38372e3134382e302f32332d3234203d3e203435333035.roa (hash: 8rzb6rpw7o6SCUVKHKIOOHkEZABIPHqgI7Fv4ouinrQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/43ddb79f-2c37-47af-b95d-15311463b343/0/8E169B5A39E2F8580EE7F6AA4E76D6432700628C.crl rsync://rpki-rsync.idnic.net/repo/43ddb79f-2c37-47af-b95d-15311463b343/0/8E169B5A39E2F8580EE7F6AA4E76D6432700628C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8E169B5A39E2F8580EE7F6AA4E76D6432700628C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 18:02:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:31:91:f4:8e:b7:8b:d6:54:53:19:b9:f5:46:84:7c:29:3d:b1:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E169B5A39E2F8580EE7F6AA4E76D6432700628C Validity Not Before: Jul 28 15:41:04 2026 GMT Not After : Jul 29 18:02:04 2026 GMT Subject: CN=838D942EE97F3C2AD479111F76B25B71840EAD18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:72:68:ff:cb:e6:75:33:70:f6:98:4f:50:d2: 06:47:0d:ae:d0:3b:2e:6f:25:23:28:ee:25:62:97: 51:d2:74:5c:b5:24:fa:e4:46:4b:f1:c0:2a:93:a8: aa:8f:f1:f6:f0:84:55:49:8d:68:3c:41:05:ba:75: e3:c5:12:7d:7f:6b:96:48:13:ee:f8:1b:39:29:af: 62:2d:0c:86:c9:1b:51:8d:5c:03:0f:f5:d4:ef:3a: f6:3f:27:10:12:ef:39:46:3f:65:93:c8:90:fa:36: e7:44:30:40:cc:5a:52:b4:04:88:c3:bf:9b:af:fe: d0:c4:25:9c:ad:9c:1b:61:9e:79:a5:fb:fa:72:20: ef:9c:71:68:0a:d1:54:aa:2c:87:0f:c2:0b:85:73: 82:ca:33:21:77:13:3c:72:be:3a:5d:f4:8d:c5:bf: 99:0f:06:d9:7d:b4:8e:e0:f8:26:e1:38:f1:8b:15: 6a:ab:b2:15:16:8d:73:eb:c3:09:4c:60:46:2c:43: 40:8d:25:f4:b2:ec:74:0a:67:7d:20:15:d0:21:f1: a1:09:5c:b5:83:8f:ca:cb:9f:a7:97:22:65:e3:fa: 8b:24:be:4b:f6:25:1f:7f:7c:f1:f3:60:b3:4a:98: dd:90:d6:de:72:8f:20:58:82:55:17:c0:cc:f5:6a: 8a:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:8D:94:2E:E9:7F:3C:2A:D4:79:11:1F:76:B2:5B:71:84:0E:AD:18 X509v3 Authority Key Identifier: keyid:8E:16:9B:5A:39:E2:F8:58:0E:E7:F6:AA:4E:76:D6:43:27:00:62:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/43ddb79f-2c37-47af-b95d-15311463b343/0/8E169B5A39E2F8580EE7F6AA4E76D6432700628C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8E169B5A39E2F8580EE7F6AA4E76D6432700628C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/43ddb79f-2c37-47af-b95d-15311463b343/0/8E169B5A39E2F8580EE7F6AA4E76D6432700628C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:cc:f3:45:4e:ee:ff:ce:e1:58:0b:fe:77:44:6d:31:27:7c: b6:d2:62:e4:f1:e2:fa:0d:47:ab:0e:80:b8:94:86:1f:de:02: af:5c:cb:23:29:f6:c7:43:24:4b:7d:e7:56:4c:55:27:cd:bd: f4:eb:38:8f:f9:37:6c:dc:ba:7d:85:6c:21:73:eb:6e:53:57: b9:fd:ae:1d:e2:dc:2b:ab:f1:62:b4:39:df:4a:36:3a:04:d9: 95:81:28:00:6b:6d:aa:b4:00:54:67:fb:75:e3:5a:e5:8f:a8: 3d:fe:ee:ab:d5:8d:0b:1b:55:52:f9:39:57:97:84:ae:13:d9: 44:e6:7d:36:a6:f7:73:a1:40:be:0f:79:46:61:3b:b4:7b:c0: ec:ee:bc:c7:b7:30:b8:01:6a:96:9a:3a:63:24:78:06:37:10: 68:26:0e:6b:2f:cc:0a:58:51:92:b4:1e:ad:63:c8:90:d6:3a: 0b:15:47:00:3c:81:50:4f:fc:1c:ef:2f:0f:5e:0b:35:98:e0: 01:37:52:cf:b9:ca:2b:0a:0b:2d:b0:e7:0c:fb:0b:18:38:60: 4a:d8:bc:6f:46:f9:9c:79:e1:8d:f6:7b:79:90:37:6c:50:46: 23:f2:42:b3:af:52:fe:5d:6f:10:cf:6d:e0:11:4c:ec:56:1e: 84:f0:a4:0c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURDGR9I63i9ZUUxm59UaEfCk9sfowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEUxNjlCNUEzOUUyRjg1ODBFRTdGNkFBNEU3NkQ2NDMy NzAwNjI4QzAeFw0yNjA3MjgxNTQxMDRaFw0yNjA3MjkxODAyMDRaMDMxMTAvBgNV BAMTKDgzOEQ5NDJFRTk3RjNDMkFENDc5MTExRjc2QjI1QjcxODQwRUFEMTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCacmj/y+Z1M3D2mE9Q0gZHDa7Q Oy5vJSMo7iVil1HSdFy1JPrkRkvxwCqTqKqP8fbwhFVJjWg8QQW6dePFEn1/a5ZI E+74Gzkpr2ItDIbJG1GNXAMP9dTvOvY/JxAS7zlGP2WTyJD6NudEMEDMWlK0BIjD v5uv/tDEJZytnBthnnml+/pyIO+ccWgK0VSqLIcPwguFc4LKMyF3Ezxyvjpd9I3F v5kPBtl9tI7g+CbhOPGLFWqrshUWjXPrwwlMYEYsQ0CNJfSy7HQKZ30gFdAh8aEJ XLWDj8rLn6eXImXj+oskvkv2JR9/fPHzYLNKmN2Q1t5yjyBYglUXwMz1aoonAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUg42ULul/PCrUeREfdrJbcYQOrRgwHwYDVR0j BBgwFoAUjhabWjni+FgO5/aqTnbWQycAYowwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDNkZGI3OWYtMmMzNy00N2FmLWI5NWQtMTUzMTE0NjNiMzQzLzAvOEUxNjlCNUEz OUUyRjg1ODBFRTdGNkFBNEU3NkQ2NDMyNzAwNjI4Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84RTE2OUI1QTM5RTJGODU4MEVFN0Y2QUE0RTc2RDY0MzI3MDA2 MjhDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDNkZGI3OWYtMmMzNy00N2FmLWI5 NWQtMTUzMTE0NjNiMzQzLzAvOEUxNjlCNUEzOUUyRjg1ODBFRTdGNkFBNEU3NkQ2 NDMyNzAwNjI4Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGbM80VO7v/O4VgL/ndEbTEnfLbSYuTx4voN R6sOgLiUhh/eAq9cyyMp9sdDJEt951ZMVSfNvfTrOI/5N2zcun2FbCFz625TV7n9 rh3i3Cur8WK0Od9KNjoE2ZWBKABrbaq0AFRn+3XjWuWPqD3+7qvVjQsbVVL5OVeX hK4T2UTmfTam93OhQL4PeUZhO7R7wOzuvMe3MLgBapaaOmMkeAY3EGgmDmsvzApY UZK0Hq1jyJDWOgsVRwA8gVBP/BzvLw9eCzWY4AE3Us+5yisKCy2w5wz7Cxg4YErY vG9G+Zx54Y32e3mQN2xQRiPyQrOvUv5dbxDPbeARTOxWHoTwpAw= -----END CERTIFICATE-----Generated at Wed Jul 29 09:06:56 2026 by rpki-client