$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7670ae76-9594-4980-b410-491a6319ff3a/0/E161BF656F0149CB290354E631915A62950E0DF7.mft File: E161BF656F0149CB290354E631915A62950E0DF7.mft (raw, json) Hash identifier: iqo1647AR3v4YjfvvNTBau801izWTgK50Kocb5/uHPY= Subject key identifier: 31:02:D7:26:24:7E:9E:82:5C:E2:A8:39:02:09:88:DE:C1:4C:5F:E9 Authority key identifier: E1:61:BF:65:6F:01:49:CB:29:03:54:E6:31:91:5A:62:95:0E:0D:F7 Certificate issuer: /CN=E161BF656F0149CB290354E631915A62950E0DF7 Certificate serial: 6BECA409C2D0AF9A369C82C6A4F22FE39F7D99D8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/E161BF656F0149CB290354E631915A62950E0DF7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7670ae76-9594-4980-b410-491a6319ff3a/0/E161BF656F0149CB290354E631915A62950E0DF7.mft Manifest number: C9 Signing time: Tue 29 Sep 2026 23:54:22 +0000 Manifest this update: Tue 29 Sep 2026 23:49:22 +0000 Manifest next update: Thu 01 Oct 2026 02:53:22 +0000 Files and hashes: 1: E161BF656F0149CB290354E631915A62950E0DF7.crl (hash: TWOmPNwSw5nQ//xQlaWPFbURD428Uq/zFFkhXfJz1fQ=) 2: 3135372e36362e36372e302f32342d3234203d3e20313532373831.roa (hash: OfxEx4cxbUi1PsgMvuv5XcH2kiZ/xjVPvG8pLlZllKE=) 3: 3135372e36362e36362e302f32342d3234203d3e20313532373831.roa (hash: grf0YK9bJyH/cVnLX3ovqZL+z5fiMqaMnTX+lrSCaV0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7670ae76-9594-4980-b410-491a6319ff3a/0/E161BF656F0149CB290354E631915A62950E0DF7.crl rsync://rpki-rsync.idnic.net/repo/7670ae76-9594-4980-b410-491a6319ff3a/0/E161BF656F0149CB290354E631915A62950E0DF7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/E161BF656F0149CB290354E631915A62950E0DF7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 02:53:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:ec:a4:09:c2:d0:af:9a:36:9c:82:c6:a4:f2:2f:e3:9f:7d:99:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E161BF656F0149CB290354E631915A62950E0DF7 Validity Not Before: Sep 29 23:49:22 2026 GMT Not After : Oct 1 02:53:22 2026 GMT Subject: CN=3102D726247E9E825CE2A839020988DEC14C5FE9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:bf:68:02:21:ed:1c:d0:76:8d:21:61:25:71: ef:bf:80:01:50:ad:c7:ea:75:76:cf:3d:18:ae:2a: a3:ab:b9:9a:ee:70:7c:d9:1c:5b:50:a7:5e:af:df: e2:70:40:2c:1f:16:4c:66:cc:43:3f:62:20:69:4f: 6f:2f:23:da:ce:c9:7f:00:1c:4a:3b:1b:23:91:6a: b6:be:76:ee:8f:ab:98:8e:98:f3:6d:c9:98:79:cc: e6:84:22:cc:45:41:e1:d9:89:30:2b:c7:5f:27:3f: 39:af:36:37:56:89:74:8e:89:31:9b:52:f7:f6:a5: 1b:34:04:18:b8:d0:f7:5c:3c:24:a9:a4:59:14:dc: b9:cd:aa:2e:16:f3:8f:4e:1b:4d:92:07:23:dd:fe: 13:f2:f8:57:28:e7:8c:e5:f5:89:8c:26:44:fb:93: 34:d6:17:08:e1:92:5e:1b:93:38:ff:8b:a2:7a:fb: e7:32:f1:bc:bd:98:e8:9e:25:b8:64:e4:9a:94:80: d1:c4:87:ed:ee:0a:5c:de:6a:82:8a:99:9a:27:1d: 01:82:d3:3a:a8:9f:f0:75:68:5e:5b:12:ac:51:d0: 84:7a:39:f3:8c:e3:e9:c4:e9:be:ba:e1:9e:7c:bc: 58:d9:23:03:b6:01:4a:be:72:6c:41:cb:cf:60:ce: 42:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:02:D7:26:24:7E:9E:82:5C:E2:A8:39:02:09:88:DE:C1:4C:5F:E9 X509v3 Authority Key Identifier: keyid:E1:61:BF:65:6F:01:49:CB:29:03:54:E6:31:91:5A:62:95:0E:0D:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7670ae76-9594-4980-b410-491a6319ff3a/0/E161BF656F0149CB290354E631915A62950E0DF7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/E161BF656F0149CB290354E631915A62950E0DF7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7670ae76-9594-4980-b410-491a6319ff3a/0/E161BF656F0149CB290354E631915A62950E0DF7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:e8:4d:f1:13:57:ca:08:d6:cd:ed:d5:bd:f2:b2:a6:11:0e: 97:a2:6a:0a:21:c9:56:c7:a2:c0:fe:68:52:23:3e:9a:11:e0: d9:e9:eb:b2:1f:59:4a:09:66:27:51:33:6b:35:42:e7:97:ea: 01:5e:a5:43:2e:fb:87:71:cf:44:99:d4:45:17:bc:83:bc:04: af:e9:c3:ec:d5:c0:ef:38:d8:0a:7c:b1:c8:58:ce:4b:a8:fc: 8d:90:b5:a8:06:86:7c:71:1d:fb:9a:eb:8b:14:01:a8:84:90: d3:a4:74:25:72:86:4e:6c:af:b5:52:92:ba:50:05:c1:61:84: 21:f5:2a:b0:82:24:1f:83:c6:02:8e:78:7a:8b:db:9e:af:f2: ad:97:6d:2a:c0:6d:52:33:48:e3:26:bd:3d:53:ac:41:6a:0e: 2f:01:11:8f:4d:9d:83:6d:c3:72:63:09:bd:e3:09:78:0e:ce: f4:6a:51:b7:e3:4d:47:f9:0d:aa:c7:e6:31:23:e0:aa:2f:82: 9c:2a:c4:3c:a3:f0:eb:17:8f:12:7c:c0:a1:6d:ba:30:27:86: 8e:e9:4e:94:fb:9c:f2:ed:ed:b2:8c:06:33:a2:16:72:e7:fa: 3a:07:42:d1:66:7c:b4:49:51:0a:b3:4a:9c:22:8e:38:b7:4a: e9:4c:2d:3f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa+ykCcLQr5o2nILGpPIv4599mdgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTE2MUJGNjU2RjAxNDlDQjI5MDM1NEU2MzE5MTVBNjI5 NTBFMERGNzAeFw0yNjA5MjkyMzQ5MjJaFw0yNjEwMDEwMjUzMjJaMDMxMTAvBgNV BAMTKDMxMDJENzI2MjQ3RTlFODI1Q0UyQTgzOTAyMDk4OERFQzE0QzVGRTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAv2gCIe0c0HaNIWElce+/gAFQ rcfqdXbPPRiuKqOruZrucHzZHFtQp16v3+JwQCwfFkxmzEM/YiBpT28vI9rOyX8A HEo7GyORara+du6Pq5iOmPNtyZh5zOaEIsxFQeHZiTArx18nPzmvNjdWiXSOiTGb Uvf2pRs0BBi40PdcPCSppFkU3LnNqi4W849OG02SByPd/hPy+Fco54zl9YmMJkT7 kzTWFwjhkl4bkzj/i6J6++cy8by9mOieJbhk5JqUgNHEh+3uClzeaoKKmZonHQGC 0zqon/B1aF5bEqxR0IR6OfOM4+nE6b664Z58vFjZIwO2AUq+cmxBy89gzkJlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMQLXJiR+noJc4qg5AgmI3sFMX+kwHwYDVR0j BBgwFoAU4WG/ZW8BScspA1TmMZFaYpUODfcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzY3MGFlNzYtOTU5NC00OTgwLWI0MTAtNDkxYTYzMTlmZjNhLzAvRTE2MUJGNjU2 RjAxNDlDQjI5MDM1NEU2MzE5MTVBNjI5NTBFMERGNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9FMTYxQkY2NTZGMDE0OUNCMjkwMzU0RTYzMTkxNUE2Mjk1MEUw REY3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzY3MGFlNzYtOTU5NC00OTgwLWI0 MTAtNDkxYTYzMTlmZjNhLzAvRTE2MUJGNjU2RjAxNDlDQjI5MDM1NEU2MzE5MTVB NjI5NTBFMERGNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKXoTfETV8oI1s3t1b3ysqYRDpeiagohyVbH osD+aFIjPpoR4Nnp67IfWUoJZidRM2s1QueX6gFepUMu+4dxz0SZ1EUXvIO8BK/p w+zVwO842Ap8schYzkuo/I2QtagGhnxxHfua64sUAaiEkNOkdCVyhk5sr7VSkrpQ BcFhhCH1KrCCJB+DxgKOeHqL256v8q2XbSrAbVIzSOMmvT1TrEFqDi8BEY9NnYNt w3JjCb3jCXgOzvRqUbfjTUf5DarH5jEj4KovgpwqxDyj8OsXjxJ8wKFtujAnho7p TpT7nPLt7bKMBjOiFnLn+joHQtFmfLRJUQqzSpwijji3SulMLT8= -----END CERTIFICATE-----Generated at Wed Sep 30 20:52:20 2026 by rpki-client