$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ea57613b-8b04-4c45-bedf-4ab061d4dcf9/0/163FCF7902CF93C079C25A5BB950177736E3A53E.mft File: 163FCF7902CF93C079C25A5BB950177736E3A53E.mft (raw, json) Hash identifier: 0PIxLlmxWT6Kp4BfMwlsecqi/rMN3EWhiiSLkg/jtg8= Subject key identifier: C9:76:59:1A:01:AE:67:ED:92:BC:E4:3C:C5:6E:5D:C5:5B:1A:85:73 Authority key identifier: 16:3F:CF:79:02:CF:93:C0:79:C2:5A:5B:B9:50:17:77:36:E3:A5:3E Certificate issuer: /CN=163FCF7902CF93C079C25A5BB950177736E3A53E Certificate serial: 2CEA9AB2E47C75AC303622DB2566BD9C16B5E14B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/163FCF7902CF93C079C25A5BB950177736E3A53E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ea57613b-8b04-4c45-bedf-4ab061d4dcf9/0/163FCF7902CF93C079C25A5BB950177736E3A53E.mft Manifest number: C4 Signing time: Thu 24 Sep 2026 18:18:18 +0000 Manifest this update: Thu 24 Sep 2026 18:13:18 +0000 Manifest next update: Fri 25 Sep 2026 19:59:18 +0000 Files and hashes: 1: 3130332e38352e35362e302f32342d3234203d3e20313530353530.roa (hash: 6RKcmzfjeDH4g7wyr++N6VgeRBt/pDFie/Fnes4qIjU=) 2: 3130332e38352e35372e302f32342d3234203d3e20313530353530.roa (hash: W7gmKmZboqX2QA7q8U+p4B9nIs2a1qUtxZ1nMh6XFbg=) 3: 163FCF7902CF93C079C25A5BB950177736E3A53E.crl (hash: CQC2Lskr6o7/33lV7jwMEk4oJKk8yin5vuK5U1uwBFs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ea57613b-8b04-4c45-bedf-4ab061d4dcf9/0/163FCF7902CF93C079C25A5BB950177736E3A53E.crl rsync://rpki-rsync.idnic.net/repo/ea57613b-8b04-4c45-bedf-4ab061d4dcf9/0/163FCF7902CF93C079C25A5BB950177736E3A53E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/163FCF7902CF93C079C25A5BB950177736E3A53E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 19:59:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:ea:9a:b2:e4:7c:75:ac:30:36:22:db:25:66:bd:9c:16:b5:e1:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=163FCF7902CF93C079C25A5BB950177736E3A53E Validity Not Before: Sep 24 18:13:18 2026 GMT Not After : Sep 25 19:59:18 2026 GMT Subject: CN=C976591A01AE67ED92BCE43CC56E5DC55B1A8573 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:e2:92:91:f4:4a:b0:ed:86:74:4b:2b:1d:48: 7e:64:b3:66:36:e4:d6:8a:5f:81:25:ed:a6:75:90: e7:f1:ed:fd:cc:43:11:f4:bc:ce:4a:e7:c5:c7:e7: 83:18:cb:14:1c:dd:40:83:73:bb:65:aa:09:6d:43: ed:c8:8f:89:92:c0:5e:46:e3:1a:c5:8e:93:b9:dd: dc:64:37:87:86:dc:c1:2c:30:1b:e0:80:ec:3a:8e: 73:8c:3b:31:62:55:d0:57:77:8f:66:47:36:26:36: b8:75:a4:c4:c9:0d:6c:a8:28:d2:c6:54:a4:ee:80: 92:4a:17:de:46:e6:ce:7e:40:35:23:12:8b:6b:47: b6:6d:ee:86:4b:75:24:ac:c3:5a:64:84:fa:da:99: e2:47:79:99:be:39:c7:eb:72:72:b9:7f:5e:7f:eb: cb:bb:2f:47:d2:e2:16:c1:7d:1b:24:ec:63:2e:bb: 36:7b:53:ef:32:e8:f9:b5:9c:a9:b0:8a:45:4e:81: e0:c5:8a:8d:ca:fb:7b:06:18:e4:91:85:91:c5:ce: bb:30:d3:95:c5:d0:8e:07:4f:b2:0f:6d:37:86:6e: 95:1e:80:23:fa:31:9f:73:31:3d:64:8a:99:cf:eb: 8d:2e:7e:b0:7c:81:81:8d:d7:de:39:f7:08:af:94: 90:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:76:59:1A:01:AE:67:ED:92:BC:E4:3C:C5:6E:5D:C5:5B:1A:85:73 X509v3 Authority Key Identifier: keyid:16:3F:CF:79:02:CF:93:C0:79:C2:5A:5B:B9:50:17:77:36:E3:A5:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ea57613b-8b04-4c45-bedf-4ab061d4dcf9/0/163FCF7902CF93C079C25A5BB950177736E3A53E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/163FCF7902CF93C079C25A5BB950177736E3A53E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ea57613b-8b04-4c45-bedf-4ab061d4dcf9/0/163FCF7902CF93C079C25A5BB950177736E3A53E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:2a:39:8b:f7:dd:cf:3b:61:ca:7b:04:c2:1e:20:4c:87:01: 7c:be:1e:29:4b:64:47:47:f9:96:44:94:41:04:b2:fe:5e:43: 92:5b:40:09:8a:d6:94:3e:b7:75:53:3c:1e:69:17:60:8e:97: 0e:e9:2e:85:8f:b6:3f:fd:8d:d9:79:57:b9:1a:06:6d:17:46: 0b:98:e0:41:76:c6:46:bb:67:e2:f2:7b:de:a5:dd:77:ef:3a: 30:22:e5:3e:ea:d3:e1:d4:57:96:e0:36:6b:1b:53:c3:80:24: 49:71:1c:c6:da:b4:3c:98:e2:b1:a7:20:d1:7c:fc:77:19:a1: d0:40:32:cb:41:7e:9b:3c:f8:c6:7f:c4:5e:9c:a4:5c:11:0a: 27:28:6f:2c:68:90:89:12:c9:19:c5:33:8e:f9:47:08:88:d4: dd:39:90:c3:45:96:45:dd:b3:ec:88:39:0f:6e:05:8e:a0:ce: f5:d6:f0:3f:3f:54:4d:d1:52:48:c2:df:31:df:bb:4f:77:3f: 80:93:72:df:d5:b9:fe:b8:f2:c3:f8:3d:d3:42:c0:0c:2e:f6: c6:14:0d:0e:d7:fb:00:dd:5f:13:c7:8c:2b:a0:0c:b1:ca:b1: ee:e6:29:67:c8:d6:a4:48:db:d7:d6:3a:dd:38:46:a7:4a:2b: c2:be:22:49 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULOqasuR8dawwNiLbJWa9nBa14UswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTYzRkNGNzkwMkNGOTNDMDc5QzI1QTVCQjk1MDE3Nzcz NkUzQTUzRTAeFw0yNjA5MjQxODEzMThaFw0yNjA5MjUxOTU5MThaMDMxMTAvBgNV BAMTKEM5NzY1OTFBMDFBRTY3RUQ5MkJDRTQzQ0M1NkU1REM1NUIxQTg1NzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCc4pKR9Eqw7YZ0SysdSH5ks2Y2 5NaKX4El7aZ1kOfx7f3MQxH0vM5K58XH54MYyxQc3UCDc7tlqgltQ+3Ij4mSwF5G 4xrFjpO53dxkN4eG3MEsMBvggOw6jnOMOzFiVdBXd49mRzYmNrh1pMTJDWyoKNLG VKTugJJKF95G5s5+QDUjEotrR7Zt7oZLdSSsw1pkhPrameJHeZm+OcfrcnK5f15/ 68u7L0fS4hbBfRsk7GMuuzZ7U+8y6Pm1nKmwikVOgeDFio3K+3sGGOSRhZHFzrsw 05XF0I4HT7IPbTeGbpUegCP6MZ9zMT1kipnP640ufrB8gYGN19459wivlJB7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyXZZGgGuZ+2SvOQ8xW5dxVsahXMwHwYDVR0j BBgwFoAUFj/PeQLPk8B5wlpbuVAXdzbjpT4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWE1NzYxM2ItOGIwNC00YzQ1LWJlZGYtNGFiMDYxZDRkY2Y5LzAvMTYzRkNGNzkw MkNGOTNDMDc5QzI1QTVCQjk1MDE3NzczNkUzQTUzRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xNjNGQ0Y3OTAyQ0Y5M0MwNzlDMjVBNUJCOTUwMTc3NzM2RTNB NTNFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWE1NzYxM2ItOGIwNC00YzQ1LWJl ZGYtNGFiMDYxZDRkY2Y5LzAvMTYzRkNGNzkwMkNGOTNDMDc5QzI1QTVCQjk1MDE3 NzczNkUzQTUzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGoqOYv33c87Ycp7BMIeIEyHAXy+HilLZEdH +ZZElEEEsv5eQ5JbQAmK1pQ+t3VTPB5pF2COlw7pLoWPtj/9jdl5V7kaBm0XRguY 4EF2xka7Z+Lye96l3XfvOjAi5T7q0+HUV5bgNmsbU8OAJElxHMbatDyY4rGnINF8 /HcZodBAMstBfps8+MZ/xF6cpFwRCicobyxokIkSyRnFM475RwiI1N05kMNFlkXd s+yIOQ9uBY6gzvXW8D8/VE3RUkjC3zHfu093P4CTct/Vuf648sP4PdNCwAwu9sYU DQ7X+wDdXxPHjCugDLHKse7mKWfI1qRI29fWOt04RqdKK8K+Ikk= -----END CERTIFICATE-----Generated at Fri Sep 25 05:24:31 2026 by rpki-client