$ rpki-client -vvvf rpki-rsync.idnic.net/repo/43ddb79f-2c37-47af-b95d-15311463b343/0/8E169B5A39E2F8580EE7F6AA4E76D6432700628C.mft File: 8E169B5A39E2F8580EE7F6AA4E76D6432700628C.mft (raw, json) Hash identifier: tsW6ZOCpI71SXoQ7EiRAzmDdiCEXaMgGZNwZdk4+KOo= Subject key identifier: 4F:16:E6:62:E8:D2:A6:EC:33:86:1D:65:47:38:20:FC:C0:9F:9D:51 Authority key identifier: 8E:16:9B:5A:39:E2:F8:58:0E:E7:F6:AA:4E:76:D6:43:27:00:62:8C Certificate issuer: /CN=8E169B5A39E2F8580EE7F6AA4E76D6432700628C Certificate serial: 71B13240F4712A86F48666DB12A22CB6DE573D8D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8E169B5A39E2F8580EE7F6AA4E76D6432700628C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/43ddb79f-2c37-47af-b95d-15311463b343/0/8E169B5A39E2F8580EE7F6AA4E76D6432700628C.mft Manifest number: BD Signing time: Sun 20 Sep 2026 14:14:27 +0000 Manifest this update: Sun 20 Sep 2026 14:09:27 +0000 Manifest next update: Mon 21 Sep 2026 16:28:27 +0000 Files and hashes: 1: 8E169B5A39E2F8580EE7F6AA4E76D6432700628C.crl (hash: tjP2inke+Vn+dpN4iMGt/qa9dIljEZR3sxMAIzvwSK4=) 2: 3130332e38372e3134382e302f32332d3234203d3e203435333035.roa (hash: 8rzb6rpw7o6SCUVKHKIOOHkEZABIPHqgI7Fv4ouinrQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/43ddb79f-2c37-47af-b95d-15311463b343/0/8E169B5A39E2F8580EE7F6AA4E76D6432700628C.crl rsync://rpki-rsync.idnic.net/repo/43ddb79f-2c37-47af-b95d-15311463b343/0/8E169B5A39E2F8580EE7F6AA4E76D6432700628C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8E169B5A39E2F8580EE7F6AA4E76D6432700628C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 16:28:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:b1:32:40:f4:71:2a:86:f4:86:66:db:12:a2:2c:b6:de:57:3d:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E169B5A39E2F8580EE7F6AA4E76D6432700628C Validity Not Before: Sep 20 14:09:27 2026 GMT Not After : Sep 21 16:28:27 2026 GMT Subject: CN=4F16E662E8D2A6EC33861D65473820FCC09F9D51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:28:ff:85:e5:8a:b2:b8:94:33:6c:96:af:48: 8e:88:bb:02:3b:b4:a9:f1:89:09:fb:4d:66:9c:41: f9:28:a1:29:f0:90:c5:aa:19:7b:51:f3:fe:fc:28: d4:83:27:20:b0:fa:fb:b5:fd:83:68:1e:e0:0f:41: 42:90:4c:22:40:76:8e:7e:b0:83:36:3b:d1:b9:db: 72:61:76:21:ca:d9:da:29:57:f0:66:b3:d8:54:40: a5:c2:d5:54:07:ed:7f:67:09:15:f2:aa:9d:da:fa: f2:c3:e6:27:60:d0:0c:c9:02:46:07:17:41:e7:58: 34:c3:c3:79:18:46:21:3c:c7:7f:8d:6c:4a:5f:d0: 2a:8b:28:22:e0:d0:7f:a1:fa:8b:f0:d2:8e:89:13: 33:cc:e8:0f:fe:02:32:be:f0:55:82:42:0b:f0:2a: 55:62:91:5c:e5:7f:24:0a:b6:00:01:93:45:46:7e: 3b:f6:f8:ee:80:46:4f:d9:c9:68:e1:72:10:ba:6e: 55:e0:f0:b8:5b:9b:2c:e0:02:22:8f:95:c6:ed:bc: 27:0e:95:2a:e9:e2:a9:1e:b3:2c:6c:7d:d9:99:88: 5a:17:e1:02:64:18:67:81:55:f8:a4:c1:b0:22:f8: 92:b7:16:09:67:f7:91:39:4c:10:92:4b:21:94:99: fe:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:16:E6:62:E8:D2:A6:EC:33:86:1D:65:47:38:20:FC:C0:9F:9D:51 X509v3 Authority Key Identifier: keyid:8E:16:9B:5A:39:E2:F8:58:0E:E7:F6:AA:4E:76:D6:43:27:00:62:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/43ddb79f-2c37-47af-b95d-15311463b343/0/8E169B5A39E2F8580EE7F6AA4E76D6432700628C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8E169B5A39E2F8580EE7F6AA4E76D6432700628C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/43ddb79f-2c37-47af-b95d-15311463b343/0/8E169B5A39E2F8580EE7F6AA4E76D6432700628C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:71:58:5d:95:1f:51:e8:32:f3:1f:ed:e0:57:66:6b:41:f8: 14:2a:53:cf:f7:5d:84:e4:8f:97:e0:a0:02:4d:35:87:8f:ab: 91:a1:98:57:7c:69:97:ad:c6:93:5c:48:c0:7e:e4:00:9c:62: bd:12:a3:0a:1b:97:bf:63:4c:3f:de:29:91:f6:54:8a:0e:c9: d8:f9:22:b9:f3:63:8a:74:0c:07:02:43:56:a5:61:17:23:c1: 27:f3:32:3a:4d:e6:4b:03:3b:2b:23:a1:66:2f:96:e1:84:3e: 3f:51:a4:c0:62:27:48:29:4f:dd:7a:02:98:f8:1c:e1:a1:3d: e7:8c:52:bc:95:94:ce:2b:9d:b8:d8:7b:06:46:53:13:a8:c9: 33:77:e9:0c:25:ae:0e:06:2c:a5:77:2a:ed:f1:31:ca:11:78: 00:33:92:fb:ab:7d:cd:44:64:cd:d4:d7:b1:da:be:12:44:6d: 0c:43:4f:c5:d1:6b:c0:b8:2b:83:7d:ad:fb:c8:ae:79:e1:d1: 56:40:4b:c0:9d:bd:34:f4:3f:02:4e:25:34:f2:9e:67:2e:76: 29:4e:35:92:aa:da:35:b2:f2:2f:83:7f:3c:a6:74:ed:3f:ab: 4f:af:b2:79:74:a1:45:51:52:0c:e7:8e:a4:f2:2c:71:5f:a5: e8:b8:ad:8c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcbEyQPRxKob0hmbbEqIstt5XPY0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEUxNjlCNUEzOUUyRjg1ODBFRTdGNkFBNEU3NkQ2NDMy NzAwNjI4QzAeFw0yNjA5MjAxNDA5MjdaFw0yNjA5MjExNjI4MjdaMDMxMTAvBgNV BAMTKDRGMTZFNjYyRThEMkE2RUMzMzg2MUQ2NTQ3MzgyMEZDQzA5RjlENTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMKP+F5YqyuJQzbJavSI6IuwI7 tKnxiQn7TWacQfkooSnwkMWqGXtR8/78KNSDJyCw+vu1/YNoHuAPQUKQTCJAdo5+ sIM2O9G523JhdiHK2dopV/Bms9hUQKXC1VQH7X9nCRXyqp3a+vLD5idg0AzJAkYH F0HnWDTDw3kYRiE8x3+NbEpf0CqLKCLg0H+h+ovw0o6JEzPM6A/+AjK+8FWCQgvw KlVikVzlfyQKtgABk0VGfjv2+O6ARk/ZyWjhchC6blXg8LhbmyzgAiKPlcbtvCcO lSrp4qkesyxsfdmZiFoX4QJkGGeBVfikwbAi+JK3Fgln95E5TBCSSyGUmf4hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTxbmYujSpuwzhh1lRzgg/MCfnVEwHwYDVR0j BBgwFoAUjhabWjni+FgO5/aqTnbWQycAYowwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDNkZGI3OWYtMmMzNy00N2FmLWI5NWQtMTUzMTE0NjNiMzQzLzAvOEUxNjlCNUEz OUUyRjg1ODBFRTdGNkFBNEU3NkQ2NDMyNzAwNjI4Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84RTE2OUI1QTM5RTJGODU4MEVFN0Y2QUE0RTc2RDY0MzI3MDA2 MjhDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDNkZGI3OWYtMmMzNy00N2FmLWI5 NWQtMTUzMTE0NjNiMzQzLzAvOEUxNjlCNUEzOUUyRjg1ODBFRTdGNkFBNEU3NkQ2 NDMyNzAwNjI4Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJVxWF2VH1HoMvMf7eBXZmtB+BQqU8/3XYTk j5fgoAJNNYePq5GhmFd8aZetxpNcSMB+5ACcYr0Sowobl79jTD/eKZH2VIoOydj5 IrnzY4p0DAcCQ1alYRcjwSfzMjpN5ksDOysjoWYvluGEPj9RpMBiJ0gpT916Apj4 HOGhPeeMUryVlM4rnbjYewZGUxOoyTN36Qwlrg4GLKV3Ku3xMcoReAAzkvurfc1E ZM3U17HavhJEbQxDT8XRa8C4K4N9rfvIrnnh0VZAS8CdvTT0PwJOJTTynmcudilO NZKq2jWy8i+DfzymdO0/q0+vsnl0oUVRUgznjqTyLHFfpei4rYw= -----END CERTIFICATE-----Generated at Mon Sep 21 09:33:17 2026 by rpki-client