$ rpki-client -vvf rpki-rsync.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/8F165EEEE0E2AF2A9C1BD801E8BC788FF3890004.mft File: 8F165EEEE0E2AF2A9C1BD801E8BC788FF3890004.mft (raw, json) Hash identifier: O5NYQdbZpn3+n/6hEOX2JAHGY1fByunARlCySU3iVvU= Subject key identifier: 19:6B:67:40:83:AC:03:FD:E4:93:FB:FE:EA:16:EE:DD:D6:23:97:E2 Authority key identifier: 8F:16:5E:EE:E0:E2:AF:2A:9C:1B:D8:01:E8:BC:78:8F:F3:89:00:04 Certificate issuer: /CN=8F165EEEE0E2AF2A9C1BD801E8BC788FF3890004 Certificate serial: 7DC0F06B72580FC09EF5BC367D1DCF8EEF97988D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8F165EEEE0E2AF2A9C1BD801E8BC788FF3890004.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/8F165EEEE0E2AF2A9C1BD801E8BC788FF3890004.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 02:51:14 +0000 Manifest this update: Wed 17 Jun 2026 02:46:14 +0000 Manifest next update: Thu 18 Jun 2026 03:43:14 +0000 Files and hashes: 1: 3130332e3136342e3233312e302f32342d3234203d3e20313431393133.roa (hash: 9jcglfq+TMOFbLOOgZj115GfLSh0l6ePRTI2eN2m36U=) 2: 3130332e3136342e3233302e302f32332d3233203d3e20313431393133.roa (hash: iTeV8kWltCgG9BRtF/fXrU7ElxilAoEcwTni/bbcKq0=) 3: 8F165EEEE0E2AF2A9C1BD801E8BC788FF3890004.crl (hash: KjbmqOSYuI6NfiWhcKO3VGQlLDpCq37CpojWwm2lWbU=) 4: 3130332e3136342e3233302e302f32342d3234203d3e20313431393133.roa (hash: xcERPOeoIobD9EzffmgTdyjXFyN28upEkhuU+5L4nbA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/8F165EEEE0E2AF2A9C1BD801E8BC788FF3890004.crl rsync://rpki-rsync.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/8F165EEEE0E2AF2A9C1BD801E8BC788FF3890004.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8F165EEEE0E2AF2A9C1BD801E8BC788FF3890004.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:c0:f0:6b:72:58:0f:c0:9e:f5:bc:36:7d:1d:cf:8e:ef:97:98:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F165EEEE0E2AF2A9C1BD801E8BC788FF3890004 Validity Not Before: Jun 17 02:46:14 2026 GMT Not After : Jun 18 03:43:14 2026 GMT Subject: CN=196B674083AC03FDE493FBFEEA16EEDDD62397E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:f1:30:4d:61:0e:5d:e5:05:39:69:50:3f:d5: 48:4d:40:d2:98:de:fb:ef:fa:6a:7a:a4:37:5f:f1: 7d:82:ab:13:92:e8:da:1e:fc:90:3a:e4:64:a3:6d: 05:98:04:56:67:c1:68:6c:92:af:3b:ae:69:37:73: 92:b5:6d:89:18:99:8d:9b:fe:76:83:e6:c4:35:8d: 4c:95:c1:47:60:ce:6e:75:1f:3a:bb:b2:16:57:f7: e8:3d:af:ec:87:c3:ad:c4:55:56:22:dc:74:de:08: ca:cc:ea:e8:5e:9b:0b:23:4d:5e:ac:86:77:08:e8: ce:4c:a9:31:94:dc:5b:e8:a0:11:5c:e3:4f:90:06: d5:d1:92:6c:c0:59:23:b4:64:e6:e9:98:72:2b:1e: da:7c:50:f5:1f:d6:5c:56:1a:3e:6f:47:4d:fa:3a: db:21:6b:4b:ae:bd:8b:d7:91:a6:db:01:e1:bc:4d: 85:9d:85:1b:74:24:16:c6:64:55:de:b0:38:10:c9: 64:bc:c3:e8:d5:fe:86:37:7c:61:8d:c1:d9:3a:85: 85:af:f2:93:31:56:b0:1f:b2:f8:52:ac:17:16:c8: 14:c6:93:2c:40:ed:ea:11:4c:ec:ef:39:41:07:dd: b8:ad:b4:c1:0f:78:78:cc:e7:d9:92:05:1c:c4:d9: e6:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:6B:67:40:83:AC:03:FD:E4:93:FB:FE:EA:16:EE:DD:D6:23:97:E2 X509v3 Authority Key Identifier: keyid:8F:16:5E:EE:E0:E2:AF:2A:9C:1B:D8:01:E8:BC:78:8F:F3:89:00:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/8F165EEEE0E2AF2A9C1BD801E8BC788FF3890004.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8F165EEEE0E2AF2A9C1BD801E8BC788FF3890004.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/8F165EEEE0E2AF2A9C1BD801E8BC788FF3890004.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:cb:c9:44:54:ff:8f:75:6a:4b:97:99:64:e8:49:cd:8b:e6: c3:9d:2f:52:73:27:40:4b:39:44:9d:3d:58:bf:f0:77:aa:ac: 47:cc:91:31:af:9e:f8:e6:87:4e:0e:a1:dc:b0:7c:a7:18:21: d4:16:20:5c:4b:83:c5:19:3f:1d:55:3a:78:cf:36:f5:f7:e2: 07:d7:08:9e:d2:5f:3a:9b:0b:69:d1:33:46:5e:30:b3:7c:19: 75:06:e8:78:24:8b:c9:05:52:b8:b7:44:62:55:ee:e7:e1:16: 46:c4:3e:37:eb:c6:0b:67:be:df:6b:71:1e:0c:62:2c:2d:1b: d4:45:61:8e:62:6c:ed:5d:f8:87:a7:72:7b:4b:ea:3b:78:15: 2e:1a:e6:2c:ad:8b:e8:92:85:7a:2d:52:96:3c:e2:44:cb:9b: f3:a7:de:d4:bd:98:9c:12:e4:91:95:1f:ac:a5:89:c4:aa:78: 4f:3e:a2:54:b7:dc:14:10:4b:74:56:5c:25:0c:04:ef:e8:71: 53:e7:03:3a:27:e3:86:24:4c:6a:29:e6:5e:cb:e1:4a:b1:f3: c0:7b:29:2a:1f:41:63:41:2b:97:44:e9:53:70:c3:72:71:1d: e6:0b:80:0a:e8:39:aa:75:bd:41:47:05:92:2a:76:83:53:83: a0:14:d1:71 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfcDwa3JYD8Ce9bw2fR3Pju+XmI0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEYxNjVFRUVFMEUyQUYyQTlDMUJEODAxRThCQzc4OEZG Mzg5MDAwNDAeFw0yNjA2MTcwMjQ2MTRaFw0yNjA2MTgwMzQzMTRaMDMxMTAvBgNV BAMTKDE5NkI2NzQwODNBQzAzRkRFNDkzRkJGRUVBMTZFRURERDYyMzk3RTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCf8TBNYQ5d5QU5aVA/1UhNQNKY 3vvv+mp6pDdf8X2CqxOS6Noe/JA65GSjbQWYBFZnwWhskq87rmk3c5K1bYkYmY2b /naD5sQ1jUyVwUdgzm51Hzq7shZX9+g9r+yHw63EVVYi3HTeCMrM6uhemwsjTV6s hncI6M5MqTGU3FvooBFc40+QBtXRkmzAWSO0ZObpmHIrHtp8UPUf1lxWGj5vR036 Otsha0uuvYvXkabbAeG8TYWdhRt0JBbGZFXesDgQyWS8w+jV/oY3fGGNwdk6hYWv 8pMxVrAfsvhSrBcWyBTGkyxA7eoRTOzvOUEH3bittMEPeHjM59mSBRzE2eb1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGWtnQIOsA/3kk/v+6hbu3dYjl+IwHwYDVR0j BBgwFoAUjxZe7uDiryqcG9gB6Lx4j/OJAAQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWExNzk0YWEtMzI5MS00ODNiLWFjMGItN2JjN2IxYTY3Y2M2LzAvOEYxNjVFRUVF MEUyQUYyQTlDMUJEODAxRThCQzc4OEZGMzg5MDAwNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84RjE2NUVFRUUwRTJBRjJBOUMxQkQ4MDFFOEJDNzg4RkYzODkw MDA0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWExNzk0YWEtMzI5MS00ODNiLWFj MGItN2JjN2IxYTY3Y2M2LzAvOEYxNjVFRUVFMEUyQUYyQTlDMUJEODAxRThCQzc4 OEZGMzg5MDAwNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHbLyURU/491akuXmWToSc2L5sOdL1JzJ0BL OUSdPVi/8HeqrEfMkTGvnvjmh04OodywfKcYIdQWIFxLg8UZPx1VOnjPNvX34gfX CJ7SXzqbC2nRM0ZeMLN8GXUG6Hgki8kFUri3RGJV7ufhFkbEPjfrxgtnvt9rcR4M YiwtG9RFYY5ibO1d+IencntL6jt4FS4a5iyti+iShXotUpY84kTLm/On3tS9mJwS 5JGVH6ylicSqeE8+olS33BQQS3RWXCUMBO/ocVPnAzon44YkTGop5l7L4Uqx88B7 KSofQWNBK5dE6VNww3JxHeYLgAroOap1vUFHBZIqdoNTg6AU0XE= -----END CERTIFICATE-----Generated at Wed Jun 17 10:02:25 2026 by rpki-client