$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/8F165EEEE0E2AF2A9C1BD801E8BC788FF3890004.mft File: 8F165EEEE0E2AF2A9C1BD801E8BC788FF3890004.mft (raw, json) Hash identifier: sXFF5T7KaVRYraO7QKn845qgCIn0PokSRm5fO3MeaEo= Subject key identifier: 7E:93:39:77:02:02:11:83:CE:F7:DD:C3:6C:A6:04:D0:A8:97:D8:27 Authority key identifier: 8F:16:5E:EE:E0:E2:AF:2A:9C:1B:D8:01:E8:BC:78:8F:F3:89:00:04 Certificate issuer: /CN=8F165EEEE0E2AF2A9C1BD801E8BC788FF3890004 Certificate serial: 6F5BB7EC28B41B46A591E61F7D5B9816F91361CB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8F165EEEE0E2AF2A9C1BD801E8BC788FF3890004.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/8F165EEEE0E2AF2A9C1BD801E8BC788FF3890004.mft Manifest number: C2 Signing time: Wed 23 Sep 2026 02:44:32 +0000 Manifest this update: Wed 23 Sep 2026 02:39:32 +0000 Manifest next update: Thu 24 Sep 2026 04:29:32 +0000 Files and hashes: 1: 8F165EEEE0E2AF2A9C1BD801E8BC788FF3890004.crl (hash: yIGTF9M5ETZ6B3uAcZcn9sU0a/aW8zMQujTKhOHZQpk=) 2: 3130332e3136342e3233312e302f32342d3234203d3e20313431393133.roa (hash: 9jcglfq+TMOFbLOOgZj115GfLSh0l6ePRTI2eN2m36U=) 3: 3130332e3136342e3233302e302f32342d3234203d3e20313431393133.roa (hash: xcERPOeoIobD9EzffmgTdyjXFyN28upEkhuU+5L4nbA=) 4: 3130332e3136342e3233302e302f32332d3233203d3e20313431393133.roa (hash: iTeV8kWltCgG9BRtF/fXrU7ElxilAoEcwTni/bbcKq0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/8F165EEEE0E2AF2A9C1BD801E8BC788FF3890004.crl rsync://rpki-rsync.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/8F165EEEE0E2AF2A9C1BD801E8BC788FF3890004.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8F165EEEE0E2AF2A9C1BD801E8BC788FF3890004.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 04:29:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:5b:b7:ec:28:b4:1b:46:a5:91:e6:1f:7d:5b:98:16:f9:13:61:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F165EEEE0E2AF2A9C1BD801E8BC788FF3890004 Validity Not Before: Sep 23 02:39:32 2026 GMT Not After : Sep 24 04:29:32 2026 GMT Subject: CN=7E93397702021183CEF7DDC36CA604D0A897D827 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ad:6e:f5:cc:f0:2e:65:a1:c9:6f:44:ae:0f: 84:65:40:47:87:ad:0b:5c:8c:eb:3b:5e:5e:cb:13: ff:76:4f:0d:e3:21:a0:07:9d:1d:a7:b7:4f:e7:c1: 76:4e:ba:a2:09:f4:ab:be:00:b7:82:ad:3c:a9:f4: 1f:2e:7a:b5:ef:1f:08:3a:26:58:d2:ea:6c:58:29: ab:5c:26:59:76:76:40:d5:5a:c7:58:5d:85:f2:8b: 2b:93:eb:14:97:5c:4a:ea:0e:ec:ce:29:1f:86:08: 17:ba:40:8e:e2:52:a0:dd:6e:c6:54:1b:33:29:9d: 47:63:f4:de:0c:24:0a:c1:cf:b3:f8:97:4b:ab:fa: 37:88:7b:8c:1a:93:7a:0f:63:40:7d:54:b7:4e:f9: 01:77:59:aa:f2:cd:f8:9d:50:61:ef:ff:5e:3c:9a: 42:50:ba:20:ae:93:da:b3:a8:72:28:00:e7:c1:62: f8:4c:7a:72:6e:e5:5e:21:7e:33:2a:58:18:5f:d0: e0:b7:92:62:be:c7:ac:01:8f:df:ec:3a:c7:fc:f2: 4a:da:68:b7:19:5a:e4:d7:5f:87:30:4f:a6:d9:17: 51:a8:36:86:bd:e3:d3:bc:33:10:3a:cc:22:2e:8e: 63:f4:25:64:52:e5:a9:8c:29:60:c0:3b:20:d9:fb: f2:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:93:39:77:02:02:11:83:CE:F7:DD:C3:6C:A6:04:D0:A8:97:D8:27 X509v3 Authority Key Identifier: keyid:8F:16:5E:EE:E0:E2:AF:2A:9C:1B:D8:01:E8:BC:78:8F:F3:89:00:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/8F165EEEE0E2AF2A9C1BD801E8BC788FF3890004.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8F165EEEE0E2AF2A9C1BD801E8BC788FF3890004.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/8F165EEEE0E2AF2A9C1BD801E8BC788FF3890004.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:30:ca:0e:28:41:b1:93:e6:b7:81:72:2c:61:0b:3e:3f:c1: e7:31:96:c8:bb:8e:c8:50:de:5c:69:bd:f2:d2:19:03:1f:ea: 0d:25:3b:4e:28:c3:e2:1e:a3:0b:ba:92:4c:61:e0:c2:74:d0: 72:51:e0:4f:ef:ce:f6:c1:9c:0c:18:81:a1:a9:18:1c:9b:51: 96:72:c0:52:7f:6c:f7:ea:02:0d:1f:d6:f9:b8:a1:0f:d2:9d: f1:ef:69:b6:07:e2:6c:f3:49:8b:65:dc:75:a4:92:99:1e:4b: 56:7b:08:40:79:2b:dd:08:07:29:b6:7e:13:e7:62:69:b9:20: 2e:e4:0f:ec:ed:8c:97:b4:12:d3:26:80:19:62:0b:86:6b:6e: 30:d2:91:3e:56:3c:55:9b:84:54:ad:9a:04:e8:06:66:99:e2: 0d:6e:e4:30:2b:4a:75:81:9b:55:8b:95:20:e9:e6:80:18:d5: 7a:4d:0f:33:c1:40:0d:96:f6:26:21:44:41:a7:a1:6a:77:d9: 39:7e:f3:91:9c:e2:f6:10:fa:f0:c5:14:00:8d:a1:2a:81:d0: 03:b3:b3:13:31:00:5d:45:a1:4c:bb:79:70:24:d3:7c:e1:d3: 08:5d:04:4b:b2:0a:ce:97:8a:bf:0a:0b:fe:61:90:3d:e6:63: 73:8e:63:83 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb1u37Ci0G0alkeYffVuYFvkTYcswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEYxNjVFRUVFMEUyQUYyQTlDMUJEODAxRThCQzc4OEZG Mzg5MDAwNDAeFw0yNjA5MjMwMjM5MzJaFw0yNjA5MjQwNDI5MzJaMDMxMTAvBgNV BAMTKDdFOTMzOTc3MDIwMjExODNDRUY3RERDMzZDQTYwNEQwQTg5N0Q4MjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8rW71zPAuZaHJb0SuD4RlQEeH rQtcjOs7Xl7LE/92Tw3jIaAHnR2nt0/nwXZOuqIJ9Ku+ALeCrTyp9B8uerXvHwg6 JljS6mxYKatcJll2dkDVWsdYXYXyiyuT6xSXXErqDuzOKR+GCBe6QI7iUqDdbsZU GzMpnUdj9N4MJArBz7P4l0ur+jeIe4wak3oPY0B9VLdO+QF3WaryzfidUGHv/148 mkJQuiCuk9qzqHIoAOfBYvhMenJu5V4hfjMqWBhf0OC3kmK+x6wBj9/sOsf88kra aLcZWuTXX4cwT6bZF1GoNoa949O8MxA6zCIujmP0JWRS5amMKWDAOyDZ+/JXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfpM5dwICEYPO993DbKYE0KiX2CcwHwYDVR0j BBgwFoAUjxZe7uDiryqcG9gB6Lx4j/OJAAQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWExNzk0YWEtMzI5MS00ODNiLWFjMGItN2JjN2IxYTY3Y2M2LzAvOEYxNjVFRUVF MEUyQUYyQTlDMUJEODAxRThCQzc4OEZGMzg5MDAwNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84RjE2NUVFRUUwRTJBRjJBOUMxQkQ4MDFFOEJDNzg4RkYzODkw MDA0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWExNzk0YWEtMzI5MS00ODNiLWFj MGItN2JjN2IxYTY3Y2M2LzAvOEYxNjVFRUVFMEUyQUYyQTlDMUJEODAxRThCQzc4 OEZGMzg5MDAwNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAIwyg4oQbGT5reBcixhCz4/wecxlsi7jshQ 3lxpvfLSGQMf6g0lO04ow+Ieowu6kkxh4MJ00HJR4E/vzvbBnAwYgaGpGBybUZZy wFJ/bPfqAg0f1vm4oQ/SnfHvabYH4mzzSYtl3HWkkpkeS1Z7CEB5K90IBym2fhPn Ymm5IC7kD+ztjJe0EtMmgBliC4ZrbjDSkT5WPFWbhFStmgToBmaZ4g1u5DArSnWB m1WLlSDp5oAY1XpNDzPBQA2W9iYhREGnoWp32Tl+85Gc4vYQ+vDFFACNoSqB0AOz sxMxAF1FoUy7eXAk03zh0whdBEuyCs6Xir8KC/5hkD3mY3OOY4M= -----END CERTIFICATE-----Generated at Wed Sep 23 15:33:56 2026 by rpki-client