$ rpki-client -vvvf rpki-rsync.idnic.net/repo/43ddb79f-2c37-47af-b95d-15311463b343/0/8E169B5A39E2F8580EE7F6AA4E76D6432700628C.mft File: 8E169B5A39E2F8580EE7F6AA4E76D6432700628C.mft (raw, json) Hash identifier: kiMXsp38U8FDGzset029AqJMo9glRPOfzyAR7dcjGU8= Subject key identifier: 7C:30:96:9E:D5:CB:DA:1E:D5:2F:F7:49:4A:D6:CF:81:17:A2:F2:7F Authority key identifier: 8E:16:9B:5A:39:E2:F8:58:0E:E7:F6:AA:4E:76:D6:43:27:00:62:8C Certificate issuer: /CN=8E169B5A39E2F8580EE7F6AA4E76D6432700628C Certificate serial: 3BB77EC615817399E39F0430D9BAC1A4B87B8B99 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8E169B5A39E2F8580EE7F6AA4E76D6432700628C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/43ddb79f-2c37-47af-b95d-15311463b343/0/8E169B5A39E2F8580EE7F6AA4E76D6432700628C.mft Manifest number: C3 Signing time: Fri 25 Sep 2026 00:45:57 +0000 Manifest this update: Fri 25 Sep 2026 00:40:57 +0000 Manifest next update: Sat 26 Sep 2026 00:50:57 +0000 Files and hashes: 1: 8E169B5A39E2F8580EE7F6AA4E76D6432700628C.crl (hash: nEZcVjAXLszwqUEqrEQdmKP/zeA8Y3beweSvetQZy/Y=) 2: 3130332e38372e3134382e302f32332d3234203d3e203435333035.roa (hash: 8rzb6rpw7o6SCUVKHKIOOHkEZABIPHqgI7Fv4ouinrQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/43ddb79f-2c37-47af-b95d-15311463b343/0/8E169B5A39E2F8580EE7F6AA4E76D6432700628C.crl rsync://rpki-rsync.idnic.net/repo/43ddb79f-2c37-47af-b95d-15311463b343/0/8E169B5A39E2F8580EE7F6AA4E76D6432700628C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8E169B5A39E2F8580EE7F6AA4E76D6432700628C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 00:50:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:b7:7e:c6:15:81:73:99:e3:9f:04:30:d9:ba:c1:a4:b8:7b:8b:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E169B5A39E2F8580EE7F6AA4E76D6432700628C Validity Not Before: Sep 25 00:40:57 2026 GMT Not After : Sep 26 00:50:57 2026 GMT Subject: CN=7C30969ED5CBDA1ED52FF7494AD6CF8117A2F27F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:fa:78:d6:7e:0c:8b:5f:0e:2c:81:1f:91:26: 30:b7:12:ca:6a:42:90:67:42:0c:f6:6a:16:60:ad: 11:28:15:e2:a5:3a:e2:7e:14:0a:c3:ab:f1:8c:d3: 03:b7:35:88:fe:2e:c9:da:73:ff:72:c8:05:2b:3c: dd:60:aa:3e:76:21:04:82:94:2b:d1:41:40:44:d3: 64:6f:57:32:93:f5:4f:ba:ed:1f:da:9d:d0:55:5f: fa:4b:0c:30:74:9a:e4:0f:8b:d6:9f:96:67:dd:e1: c6:d9:8f:dc:a1:34:39:2d:f2:13:ce:b7:7b:ec:df: c5:58:55:60:8e:eb:1b:6b:51:48:c8:99:75:c4:85: 06:1d:19:97:48:5d:ac:38:eb:43:88:dc:69:e1:7d: c4:2f:ab:2a:cc:8b:d1:c2:2b:c5:35:7c:79:ab:60: d5:93:b2:99:1e:28:db:27:de:3c:bd:d3:53:f9:c3: d5:36:6f:f0:d7:9c:67:83:b6:f9:b7:56:db:aa:69: 80:3a:d5:0c:0c:91:f3:54:5a:47:3b:03:b8:aa:4f: 4c:5e:78:9e:00:2a:94:e5:50:fe:f4:0e:78:8a:85: 27:c8:be:22:ae:b4:be:d1:18:66:39:2c:fe:87:53: 09:82:44:a5:e8:b1:d3:30:ed:14:af:8a:b7:e3:34: 10:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:30:96:9E:D5:CB:DA:1E:D5:2F:F7:49:4A:D6:CF:81:17:A2:F2:7F X509v3 Authority Key Identifier: keyid:8E:16:9B:5A:39:E2:F8:58:0E:E7:F6:AA:4E:76:D6:43:27:00:62:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/43ddb79f-2c37-47af-b95d-15311463b343/0/8E169B5A39E2F8580EE7F6AA4E76D6432700628C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8E169B5A39E2F8580EE7F6AA4E76D6432700628C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/43ddb79f-2c37-47af-b95d-15311463b343/0/8E169B5A39E2F8580EE7F6AA4E76D6432700628C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:3e:b1:36:db:c4:ad:8f:95:c1:27:6f:d7:c1:a5:9d:2c:11: 15:89:12:2b:22:f6:33:c0:09:9e:df:4c:f3:37:e3:41:8e:3b: 0b:51:65:19:ad:d9:d2:2e:2c:3f:16:d2:26:b5:7d:f1:f5:92: 83:3e:8d:4d:a9:6f:2f:d2:4d:bf:7b:bf:41:09:43:23:c3:38: 56:6d:e5:95:04:81:e5:5d:5c:e2:49:aa:9b:2f:e8:bd:7f:56: 48:f6:08:f9:c3:d1:cc:87:88:17:75:71:a6:27:bd:b5:04:9d: 9e:7b:ef:29:47:e2:45:c6:bc:d4:cd:70:9e:ea:a2:61:58:25: 17:fd:68:ed:48:35:53:c2:3f:e1:3c:c5:ae:43:2e:49:18:3b: 44:4d:1e:29:3f:3b:f8:dc:21:9c:02:5f:4d:d3:4f:27:4b:19: e0:c3:a0:d1:66:0f:d0:03:fc:8f:b7:dc:fa:49:2d:fe:2e:67: cf:b3:c9:bc:86:14:55:49:a4:45:0f:4f:f2:1f:3f:fc:b8:df: b0:5b:0f:9c:86:0c:19:27:9f:c4:42:b1:7a:75:6f:03:c3:16: 47:ab:1f:bb:9a:b7:48:b4:43:e5:96:15:e7:3d:31:a1:5b:a8: 23:8d:5f:44:61:88:99:72:8e:e1:18:df:9e:08:37:f0:60:e8: 1b:a8:85:24 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO7d+xhWBc5njnwQw2brBpLh7i5kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEUxNjlCNUEzOUUyRjg1ODBFRTdGNkFBNEU3NkQ2NDMy NzAwNjI4QzAeFw0yNjA5MjUwMDQwNTdaFw0yNjA5MjYwMDUwNTdaMDMxMTAvBgNV BAMTKDdDMzA5NjlFRDVDQkRBMUVENTJGRjc0OTRBRDZDRjgxMTdBMkYyN0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw+njWfgyLXw4sgR+RJjC3Espq QpBnQgz2ahZgrREoFeKlOuJ+FArDq/GM0wO3NYj+Lsnac/9yyAUrPN1gqj52IQSC lCvRQUBE02RvVzKT9U+67R/andBVX/pLDDB0muQPi9aflmfd4cbZj9yhNDkt8hPO t3vs38VYVWCO6xtrUUjImXXEhQYdGZdIXaw460OI3GnhfcQvqyrMi9HCK8U1fHmr YNWTspkeKNsn3jy901P5w9U2b/DXnGeDtvm3VtuqaYA61QwMkfNUWkc7A7iqT0xe eJ4AKpTlUP70DniKhSfIviKutL7RGGY5LP6HUwmCRKXosdMw7RSvirfjNBB5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfDCWntXL2h7VL/dJStbPgRei8n8wHwYDVR0j BBgwFoAUjhabWjni+FgO5/aqTnbWQycAYowwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDNkZGI3OWYtMmMzNy00N2FmLWI5NWQtMTUzMTE0NjNiMzQzLzAvOEUxNjlCNUEz OUUyRjg1ODBFRTdGNkFBNEU3NkQ2NDMyNzAwNjI4Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84RTE2OUI1QTM5RTJGODU4MEVFN0Y2QUE0RTc2RDY0MzI3MDA2 MjhDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDNkZGI3OWYtMmMzNy00N2FmLWI5 NWQtMTUzMTE0NjNiMzQzLzAvOEUxNjlCNUEzOUUyRjg1ODBFRTdGNkFBNEU3NkQ2 NDMyNzAwNjI4Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIw+sTbbxK2PlcEnb9fBpZ0sERWJEisi9jPA CZ7fTPM340GOOwtRZRmt2dIuLD8W0ia1ffH1koM+jU2pby/STb97v0EJQyPDOFZt 5ZUEgeVdXOJJqpsv6L1/Vkj2CPnD0cyHiBd1caYnvbUEnZ577ylH4kXGvNTNcJ7q omFYJRf9aO1INVPCP+E8xa5DLkkYO0RNHik/O/jcIZwCX03TTydLGeDDoNFmD9AD /I+33PpJLf4uZ8+zybyGFFVJpEUPT/IfP/y437BbD5yGDBknn8RCsXp1bwPDFker H7uat0i0Q+WWFec9MaFbqCONX0RhiJlyjuEY354IN/Bg6BuohSQ= -----END CERTIFICATE-----Generated at Fri Sep 25 13:05:44 2026 by rpki-client