$ rpki-client -vvf rpki-rsync.idnic.net/repo/43ddb79f-2c37-47af-b95d-15311463b343/0/8E169B5A39E2F8580EE7F6AA4E76D6432700628C.mft File: 8E169B5A39E2F8580EE7F6AA4E76D6432700628C.mft (raw, json) Hash identifier: XZQtCPNCMcJJRfrXWP3afMTIFRWVf+DSmgilWFQEiqc= Subject key identifier: 74:53:7A:54:42:32:AB:32:59:A8:BC:12:F6:DA:5F:93:DC:9B:BB:56 Authority key identifier: 8E:16:9B:5A:39:E2:F8:58:0E:E7:F6:AA:4E:76:D6:43:27:00:62:8C Certificate issuer: /CN=8E169B5A39E2F8580EE7F6AA4E76D6432700628C Certificate serial: 58D8317BCDCAD84653C14EE2901E5F5BEEC3B2FC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8E169B5A39E2F8580EE7F6AA4E76D6432700628C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/43ddb79f-2c37-47af-b95d-15311463b343/0/8E169B5A39E2F8580EE7F6AA4E76D6432700628C.mft Manifest number: 0F Signing time: Tue 12 May 2026 15:09:44 +0000 Manifest this update: Tue 12 May 2026 15:04:44 +0000 Manifest next update: Wed 13 May 2026 18:23:44 +0000 Files and hashes: 1: 8E169B5A39E2F8580EE7F6AA4E76D6432700628C.crl (hash: Mz0BiUFJOdsg68XT1ZX8YQ6AmrQ/8RnjednJx6uKs7o=) 2: 3130332e38372e3134382e302f32332d3234203d3e203435333035.roa (hash: 8rzb6rpw7o6SCUVKHKIOOHkEZABIPHqgI7Fv4ouinrQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/43ddb79f-2c37-47af-b95d-15311463b343/0/8E169B5A39E2F8580EE7F6AA4E76D6432700628C.crl rsync://rpki-rsync.idnic.net/repo/43ddb79f-2c37-47af-b95d-15311463b343/0/8E169B5A39E2F8580EE7F6AA4E76D6432700628C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8E169B5A39E2F8580EE7F6AA4E76D6432700628C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 18:23:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:d8:31:7b:cd:ca:d8:46:53:c1:4e:e2:90:1e:5f:5b:ee:c3:b2:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E169B5A39E2F8580EE7F6AA4E76D6432700628C Validity Not Before: May 12 15:04:44 2026 GMT Not After : May 13 18:23:44 2026 GMT Subject: CN=74537A544232AB3259A8BC12F6DA5F93DC9BBB56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:4f:8c:0a:af:e0:9f:6b:ae:33:52:0a:2d:ab: 62:e9:cb:91:bd:ef:11:cf:91:dc:d1:74:e3:92:7f: b8:8b:f8:16:2e:21:93:84:62:bb:2a:46:53:13:bf: 7d:ae:42:3f:92:a2:56:39:db:79:46:47:5f:8e:4b: 09:07:3e:6e:f8:00:7f:9d:c7:02:ee:60:95:e6:9c: 41:ca:d2:62:95:04:d3:a0:65:95:ad:78:4b:53:4c: b8:d3:d2:a4:c3:60:ec:d8:b5:41:80:c0:e5:de:93: a9:2f:ff:21:bf:91:dd:08:0e:69:76:8f:43:a2:ed: 61:4d:d8:79:ef:a5:a3:6e:79:e4:e9:ba:96:40:03: 91:35:5a:04:e5:dc:79:cd:78:6a:c1:90:62:d4:96: 6f:be:8c:79:31:94:2e:0e:6e:7b:18:ef:10:c7:11: 66:50:06:bb:92:1b:30:1b:9d:a4:42:18:64:78:a5: 39:73:4b:27:88:ac:f9:7e:d4:ee:b9:ad:82:c6:dd: 5d:59:a1:01:2c:c8:7c:9c:7b:03:14:26:ba:c8:a6: ff:77:63:5f:25:22:fb:15:8c:24:ba:6e:c6:b9:97: 3d:2f:0e:6d:fa:51:df:40:9d:cf:12:56:58:e1:d6: fc:ae:15:fe:92:2a:11:5e:52:7c:7e:7e:0c:9e:80: eb:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:53:7A:54:42:32:AB:32:59:A8:BC:12:F6:DA:5F:93:DC:9B:BB:56 X509v3 Authority Key Identifier: keyid:8E:16:9B:5A:39:E2:F8:58:0E:E7:F6:AA:4E:76:D6:43:27:00:62:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/43ddb79f-2c37-47af-b95d-15311463b343/0/8E169B5A39E2F8580EE7F6AA4E76D6432700628C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8E169B5A39E2F8580EE7F6AA4E76D6432700628C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/43ddb79f-2c37-47af-b95d-15311463b343/0/8E169B5A39E2F8580EE7F6AA4E76D6432700628C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:9f:cf:87:f1:bd:5f:2d:41:a3:7e:9d:b1:c6:cb:39:66:e3: 61:30:d9:4a:ac:39:20:43:db:18:d1:98:d0:4c:00:91:a7:08: c8:a3:1d:6e:09:75:f4:a6:3e:16:ed:ec:d4:4d:c2:d2:65:f5: ce:61:e6:7a:47:ae:dd:4c:23:a0:53:91:1e:d7:c7:9b:8e:19: a5:5a:99:ef:a8:81:a9:d1:c3:b1:c2:6c:2a:aa:b3:b7:9c:22: f9:90:94:b7:ce:c2:5f:6e:d9:30:7e:84:34:bc:95:7d:f8:b1: 8d:6c:83:2f:7d:29:b4:12:5e:72:62:71:0e:23:9f:33:9f:ed: 22:cb:96:79:75:18:6e:93:cc:5d:de:78:a6:8f:d7:2c:c1:87: 63:c9:9d:06:2f:89:4e:30:90:07:fb:ec:e2:a6:5c:38:25:f5: 3f:af:5e:16:51:86:de:a7:a9:2b:80:a7:57:90:17:47:26:40: d6:2d:99:27:50:0e:68:68:51:7f:7f:cb:63:55:cb:fa:47:d8: ca:8a:3a:a4:c4:d9:2f:46:2e:0b:2b:df:2f:cd:01:a7:ef:30: 9b:38:be:ca:97:97:ba:9d:7d:23:cc:41:b7:01:b1:a0:27:16: 06:a2:18:2e:34:d2:f2:b8:33:df:fa:36:8f:39:33:ff:cd:ce: ca:70:f0:d4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWNgxe83K2EZTwU7ikB5fW+7DsvwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEUxNjlCNUEzOUUyRjg1ODBFRTdGNkFBNEU3NkQ2NDMy NzAwNjI4QzAeFw0yNjA1MTIxNTA0NDRaFw0yNjA1MTMxODIzNDRaMDMxMTAvBgNV BAMTKDc0NTM3QTU0NDIzMkFCMzI1OUE4QkMxMkY2REE1RjkzREM5QkJCNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxT4wKr+Cfa64zUgotq2Lpy5G9 7xHPkdzRdOOSf7iL+BYuIZOEYrsqRlMTv32uQj+SolY523lGR1+OSwkHPm74AH+d xwLuYJXmnEHK0mKVBNOgZZWteEtTTLjT0qTDYOzYtUGAwOXek6kv/yG/kd0IDml2 j0Oi7WFN2HnvpaNueeTpupZAA5E1WgTl3HnNeGrBkGLUlm++jHkxlC4ObnsY7xDH EWZQBruSGzAbnaRCGGR4pTlzSyeIrPl+1O65rYLG3V1ZoQEsyHycewMUJrrIpv93 Y18lIvsVjCS6bsa5lz0vDm36Ud9Anc8SVljh1vyuFf6SKhFeUnx+fgyegOt3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdFN6VEIyqzJZqLwS9tpfk9ybu1YwHwYDVR0j BBgwFoAUjhabWjni+FgO5/aqTnbWQycAYowwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDNkZGI3OWYtMmMzNy00N2FmLWI5NWQtMTUzMTE0NjNiMzQzLzAvOEUxNjlCNUEz OUUyRjg1ODBFRTdGNkFBNEU3NkQ2NDMyNzAwNjI4Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84RTE2OUI1QTM5RTJGODU4MEVFN0Y2QUE0RTc2RDY0MzI3MDA2 MjhDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDNkZGI3OWYtMmMzNy00N2FmLWI5 NWQtMTUzMTE0NjNiMzQzLzAvOEUxNjlCNUEzOUUyRjg1ODBFRTdGNkFBNEU3NkQ2 NDMyNzAwNjI4Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAGfz4fxvV8tQaN+nbHGyzlm42Ew2UqsOSBD 2xjRmNBMAJGnCMijHW4JdfSmPhbt7NRNwtJl9c5h5npHrt1MI6BTkR7Xx5uOGaVa me+oganRw7HCbCqqs7ecIvmQlLfOwl9u2TB+hDS8lX34sY1sgy99KbQSXnJicQ4j nzOf7SLLlnl1GG6TzF3eeKaP1yzBh2PJnQYviU4wkAf77OKmXDgl9T+vXhZRht6n qSuAp1eQF0cmQNYtmSdQDmhoUX9/y2NVy/pH2MqKOqTE2S9GLgsr3y/NAafvMJs4 vsqXl7qdfSPMQbcBsaAnFgaiGC400vK4M9/6No85M//Nzspw8NQ= -----END CERTIFICATE-----Generated at Wed May 13 04:00:09 2026 by rpki-client