$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/8F165EEEE0E2AF2A9C1BD801E8BC788FF3890004.mft File: 8F165EEEE0E2AF2A9C1BD801E8BC788FF3890004.mft (raw, json) Hash identifier: DmUVbIbJDD3KOlV9tEPfcCEw+LimNYI7AEERRyjP5OM= Subject key identifier: D5:65:42:14:66:2B:62:B2:B1:EA:C1:61:90:90:1F:5E:31:3D:99:E0 Authority key identifier: 8F:16:5E:EE:E0:E2:AF:2A:9C:1B:D8:01:E8:BC:78:8F:F3:89:00:04 Certificate issuer: /CN=8F165EEEE0E2AF2A9C1BD801E8BC788FF3890004 Certificate serial: 7AF1C9DAC3E67F27A374024720E763248F1807CC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8F165EEEE0E2AF2A9C1BD801E8BC788FF3890004.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/8F165EEEE0E2AF2A9C1BD801E8BC788FF3890004.mft Manifest number: C0 Signing time: Mon 21 Sep 2026 15:10:24 +0000 Manifest this update: Mon 21 Sep 2026 15:05:24 +0000 Manifest next update: Tue 22 Sep 2026 15:10:24 +0000 Files and hashes: 1: 8F165EEEE0E2AF2A9C1BD801E8BC788FF3890004.crl (hash: QcSVjEvguWPyFbFx+NeAnYG4BAlKsu0TBkgVudR0Fl8=) 2: 3130332e3136342e3233302e302f32332d3233203d3e20313431393133.roa (hash: iTeV8kWltCgG9BRtF/fXrU7ElxilAoEcwTni/bbcKq0=) 3: 3130332e3136342e3233302e302f32342d3234203d3e20313431393133.roa (hash: xcERPOeoIobD9EzffmgTdyjXFyN28upEkhuU+5L4nbA=) 4: 3130332e3136342e3233312e302f32342d3234203d3e20313431393133.roa (hash: 9jcglfq+TMOFbLOOgZj115GfLSh0l6ePRTI2eN2m36U=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/8F165EEEE0E2AF2A9C1BD801E8BC788FF3890004.crl rsync://rpki-rsync.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/8F165EEEE0E2AF2A9C1BD801E8BC788FF3890004.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8F165EEEE0E2AF2A9C1BD801E8BC788FF3890004.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 15:10:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:f1:c9:da:c3:e6:7f:27:a3:74:02:47:20:e7:63:24:8f:18:07:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F165EEEE0E2AF2A9C1BD801E8BC788FF3890004 Validity Not Before: Sep 21 15:05:24 2026 GMT Not After : Sep 22 15:10:24 2026 GMT Subject: CN=D5654214662B62B2B1EAC16190901F5E313D99E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:79:f1:7e:06:de:2a:a9:15:10:47:50:43:8f: 62:0b:2c:be:ee:c2:d1:1c:93:92:f6:95:e9:a2:0f: d2:ff:26:7a:04:6b:5c:7d:a4:05:b9:4a:43:8d:9f: fb:64:31:5b:fa:47:d3:40:94:65:5b:c1:31:ea:47: 1c:da:73:1d:75:03:ca:44:bc:98:6e:47:66:a0:80: b9:ed:5e:0b:be:84:f9:49:21:a0:f8:dd:eb:10:3a: 72:03:80:4b:11:f8:54:09:62:9d:da:9d:9e:75:47: b7:b2:69:76:98:59:cd:61:6d:ad:7d:20:4b:96:14: 5d:17:9b:b1:4c:c0:6d:4d:a8:e5:58:8d:2a:31:3d: 96:93:eb:34:a8:1c:85:d9:12:04:0b:c4:fa:6c:3a: 1a:fe:62:c3:e0:ef:f1:3b:b6:2a:13:69:2a:61:e3: 16:ee:ea:ba:44:43:cb:7f:96:13:7a:44:7d:95:0f: 50:e0:8c:d6:46:d4:2d:f5:74:cf:55:95:16:ca:0e: 0f:c7:46:ce:dc:16:70:53:cd:e5:03:08:2f:e9:59: 97:b4:e6:45:14:0c:52:f0:8e:30:1b:39:e2:a0:e0: 9b:93:9f:14:59:7b:ed:a2:15:a2:7e:6d:fb:b0:1c: 4c:5f:7e:36:09:f1:f7:f3:f3:4d:99:7f:1c:83:46: 11:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:65:42:14:66:2B:62:B2:B1:EA:C1:61:90:90:1F:5E:31:3D:99:E0 X509v3 Authority Key Identifier: keyid:8F:16:5E:EE:E0:E2:AF:2A:9C:1B:D8:01:E8:BC:78:8F:F3:89:00:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/8F165EEEE0E2AF2A9C1BD801E8BC788FF3890004.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8F165EEEE0E2AF2A9C1BD801E8BC788FF3890004.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/8F165EEEE0E2AF2A9C1BD801E8BC788FF3890004.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:62:89:c2:22:73:24:6a:1e:d9:1f:20:78:38:d1:78:c5:de: f1:ac:0d:7e:9c:ba:6c:fc:61:04:f3:a7:e4:94:27:18:d6:03: 21:96:bb:47:9a:c7:93:11:e1:01:31:e6:aa:fc:3c:8c:cf:30: 93:4e:41:57:49:7b:9d:22:4d:5d:0f:66:c2:8f:68:9a:ec:82: d7:95:26:80:11:04:db:32:ba:fe:f1:6a:a7:b2:0c:b1:b8:36: aa:36:c5:aa:9f:f3:2b:cd:e5:4a:ee:74:c1:50:fc:6e:17:8c: f2:7e:13:62:4b:74:5b:80:cb:da:eb:ce:23:2c:45:50:99:14: 94:d1:d7:25:e1:5c:0f:2b:e1:81:67:77:2f:7b:8e:01:b6:b9: 2c:89:f3:9f:31:2e:e1:c1:89:8a:94:23:30:7b:e3:7a:33:e5: e1:d8:25:60:df:59:09:70:08:aa:4b:c8:87:34:14:fd:32:14: 8c:fc:ca:18:47:cd:88:66:93:c2:f1:60:16:ad:0e:7c:af:53: 21:eb:df:5a:9f:3a:7e:80:ab:f5:b8:3e:85:72:ee:92:2a:3e: a9:60:3e:04:98:a0:2f:0a:3a:52:a9:e2:bb:87:6d:f1:db:5f: 3d:99:cf:a5:72:4f:7f:2e:46:ff:ef:f1:e2:a6:f0:1a:cc:4f: 21:e0:a1:b1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUevHJ2sPmfyejdAJHIOdjJI8YB8wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEYxNjVFRUVFMEUyQUYyQTlDMUJEODAxRThCQzc4OEZG Mzg5MDAwNDAeFw0yNjA5MjExNTA1MjRaFw0yNjA5MjIxNTEwMjRaMDMxMTAvBgNV BAMTKEQ1NjU0MjE0NjYyQjYyQjJCMUVBQzE2MTkwOTAxRjVFMzEzRDk5RTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD2efF+Bt4qqRUQR1BDj2ILLL7u wtEck5L2lemiD9L/JnoEa1x9pAW5SkONn/tkMVv6R9NAlGVbwTHqRxzacx11A8pE vJhuR2aggLntXgu+hPlJIaD43esQOnIDgEsR+FQJYp3anZ51R7eyaXaYWc1hba19 IEuWFF0Xm7FMwG1NqOVYjSoxPZaT6zSoHIXZEgQLxPpsOhr+YsPg7/E7tioTaSph 4xbu6rpEQ8t/lhN6RH2VD1DgjNZG1C31dM9VlRbKDg/HRs7cFnBTzeUDCC/pWZe0 5kUUDFLwjjAbOeKg4JuTnxRZe+2iFaJ+bfuwHExffjYJ8ffz802ZfxyDRhGnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1WVCFGYrYrKx6sFhkJAfXjE9meAwHwYDVR0j BBgwFoAUjxZe7uDiryqcG9gB6Lx4j/OJAAQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWExNzk0YWEtMzI5MS00ODNiLWFjMGItN2JjN2IxYTY3Y2M2LzAvOEYxNjVFRUVF MEUyQUYyQTlDMUJEODAxRThCQzc4OEZGMzg5MDAwNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84RjE2NUVFRUUwRTJBRjJBOUMxQkQ4MDFFOEJDNzg4RkYzODkw MDA0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWExNzk0YWEtMzI5MS00ODNiLWFj MGItN2JjN2IxYTY3Y2M2LzAvOEYxNjVFRUVFMEUyQUYyQTlDMUJEODAxRThCQzc4 OEZGMzg5MDAwNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAChiicIicyRqHtkfIHg40XjF3vGsDX6cumz8 YQTzp+SUJxjWAyGWu0eax5MR4QEx5qr8PIzPMJNOQVdJe50iTV0PZsKPaJrsgteV JoARBNsyuv7xaqeyDLG4Nqo2xaqf8yvN5UrudMFQ/G4XjPJ+E2JLdFuAy9rrziMs RVCZFJTR1yXhXA8r4YFndy97jgG2uSyJ858xLuHBiYqUIzB743oz5eHYJWDfWQlw CKpLyIc0FP0yFIz8yhhHzYhmk8LxYBatDnyvUyHr31qfOn6Aq/W4PoVy7pIqPqlg PgSYoC8KOlKp4ruHbfHbXz2Zz6VyT38uRv/v8eKm8BrMTyHgobE= -----END CERTIFICATE-----Generated at Tue Sep 22 03:06:24 2026 by rpki-client