$ rpki-client -vvf rpki-rsync.idnic.net/repo/7670ae76-9594-4980-b410-491a6319ff3a/0/E161BF656F0149CB290354E631915A62950E0DF7.mft File: E161BF656F0149CB290354E631915A62950E0DF7.mft (raw, json) Hash identifier: VEVihAb97thTIa1epDiUKOPlmF9p3h0gbodo8EENLl4= Subject key identifier: 8F:F8:12:74:91:F9:7A:06:E7:63:58:15:20:46:76:72:E8:E4:17:DC Authority key identifier: E1:61:BF:65:6F:01:49:CB:29:03:54:E6:31:91:5A:62:95:0E:0D:F7 Certificate issuer: /CN=E161BF656F0149CB290354E631915A62950E0DF7 Certificate serial: 0206C12157B0B85BA239474B5472BD0588F5885A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/E161BF656F0149CB290354E631915A62950E0DF7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7670ae76-9594-4980-b410-491a6319ff3a/0/E161BF656F0149CB290354E631915A62950E0DF7.mft Manifest number: 6F Signing time: Fri 24 Jul 2026 04:09:31 +0000 Manifest this update: Fri 24 Jul 2026 04:04:31 +0000 Manifest next update: Sat 25 Jul 2026 05:11:31 +0000 Files and hashes: 1: 3135372e36362e36372e302f32342d3234203d3e20313532373831.roa (hash: OfxEx4cxbUi1PsgMvuv5XcH2kiZ/xjVPvG8pLlZllKE=) 2: 3135372e36362e36362e302f32342d3234203d3e20313532373831.roa (hash: grf0YK9bJyH/cVnLX3ovqZL+z5fiMqaMnTX+lrSCaV0=) 3: E161BF656F0149CB290354E631915A62950E0DF7.crl (hash: xyOZ81PZJOGr5fM3nGDn8m0bqgyj7UvIgRfrNqvsifs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7670ae76-9594-4980-b410-491a6319ff3a/0/E161BF656F0149CB290354E631915A62950E0DF7.crl rsync://rpki-rsync.idnic.net/repo/7670ae76-9594-4980-b410-491a6319ff3a/0/E161BF656F0149CB290354E631915A62950E0DF7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/E161BF656F0149CB290354E631915A62950E0DF7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 05:11:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:06:c1:21:57:b0:b8:5b:a2:39:47:4b:54:72:bd:05:88:f5:88:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E161BF656F0149CB290354E631915A62950E0DF7 Validity Not Before: Jul 24 04:04:31 2026 GMT Not After : Jul 25 05:11:31 2026 GMT Subject: CN=8FF8127491F97A06E763581520467672E8E417DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:9a:c5:16:9a:3e:99:b1:1e:99:9a:89:87:21: a6:89:5e:8a:c6:a9:f0:db:1f:59:a3:83:b3:6d:c7: 60:62:43:46:80:0b:49:9b:62:a6:2b:c9:e8:a0:95: 75:fb:01:06:ea:7d:40:12:42:84:67:f8:cc:b0:ec: da:f4:8c:21:ac:b4:4c:1c:0a:50:bb:36:f2:06:38: 33:51:5e:21:1f:7d:8d:fa:37:22:06:65:67:6a:36: ee:86:c2:18:01:1b:02:90:4c:18:9d:45:fb:d8:33: 54:fa:bd:75:7b:18:1c:74:fd:f8:33:be:a4:4c:29: 5d:02:b1:11:7b:8e:6b:8a:e3:8a:05:c0:e8:d4:9b: 3b:3a:b5:9a:64:d5:92:64:17:c6:5a:a8:e8:dc:a8: b3:22:1d:d3:a1:a6:74:ac:09:2a:56:d7:c1:02:75: 55:1f:80:20:6a:d1:8f:5c:15:ce:57:00:34:99:79: ca:41:cf:c1:a8:88:06:9b:f5:32:79:29:d6:49:60: db:71:ff:6e:f0:1a:09:95:0f:97:ae:61:ae:54:93: db:8b:72:1d:a4:5f:d8:75:08:71:f9:dd:c6:59:f1: e1:6c:1d:54:8a:62:b0:f9:2a:73:6e:1f:c8:32:a6: 47:51:62:d0:4b:f8:fa:e8:d7:26:ae:43:af:3d:6d: aa:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:F8:12:74:91:F9:7A:06:E7:63:58:15:20:46:76:72:E8:E4:17:DC X509v3 Authority Key Identifier: keyid:E1:61:BF:65:6F:01:49:CB:29:03:54:E6:31:91:5A:62:95:0E:0D:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7670ae76-9594-4980-b410-491a6319ff3a/0/E161BF656F0149CB290354E631915A62950E0DF7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/E161BF656F0149CB290354E631915A62950E0DF7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7670ae76-9594-4980-b410-491a6319ff3a/0/E161BF656F0149CB290354E631915A62950E0DF7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:a8:13:ae:dc:56:f2:26:61:75:38:0c:13:04:49:cb:ec:db: 40:f9:61:1d:1b:2e:6d:f2:45:bf:85:02:51:e4:1f:5d:82:73: 02:8a:37:30:37:70:62:1d:62:2a:47:f8:93:b3:b0:0a:62:ae: b9:70:2f:c4:5e:27:76:d8:a3:48:56:71:04:67:cc:9e:b1:ee: 5d:c0:d5:45:58:2e:b2:a5:7d:0b:a3:d6:15:91:fb:c6:90:99: 63:52:54:f7:95:8b:41:b1:8f:63:5d:64:85:26:62:d7:50:39: 68:ba:9a:d6:78:54:9b:3f:9f:6d:17:a9:12:8d:e8:d3:c5:05: 3d:96:51:66:40:d8:f9:ab:3d:ac:4a:50:a2:87:46:13:cf:a3: 3e:c3:0f:33:5f:44:25:0f:dd:3f:d2:4f:11:98:54:37:8b:af: 61:be:ff:23:83:20:67:d1:c5:4a:fa:78:2c:02:0f:91:8d:59: 79:85:0d:d1:27:2b:6f:06:b4:fe:f4:86:c0:bf:12:1e:43:76: b5:4c:26:6d:e3:93:4a:11:9f:3d:8c:83:2b:66:92:20:52:aa: 45:b9:06:b6:7c:ca:ca:1c:f8:45:ce:50:1a:d4:2e:c4:c7:97: f6:98:0d:93:94:2d:88:f3:de:b0:c6:46:04:9d:c9:48:7e:b1: 93:a6:33:df -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAgbBIVewuFuiOUdLVHK9BYj1iFowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTE2MUJGNjU2RjAxNDlDQjI5MDM1NEU2MzE5MTVBNjI5 NTBFMERGNzAeFw0yNjA3MjQwNDA0MzFaFw0yNjA3MjUwNTExMzFaMDMxMTAvBgNV BAMTKDhGRjgxMjc0OTFGOTdBMDZFNzYzNTgxNTIwNDY3NjcyRThFNDE3REMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWmsUWmj6ZsR6ZmomHIaaJXorG qfDbH1mjg7Ntx2BiQ0aAC0mbYqYryeiglXX7AQbqfUASQoRn+Myw7Nr0jCGstEwc ClC7NvIGODNRXiEffY36NyIGZWdqNu6GwhgBGwKQTBidRfvYM1T6vXV7GBx0/fgz vqRMKV0CsRF7jmuK44oFwOjUmzs6tZpk1ZJkF8ZaqOjcqLMiHdOhpnSsCSpW18EC dVUfgCBq0Y9cFc5XADSZecpBz8GoiAab9TJ5KdZJYNtx/27wGgmVD5euYa5Uk9uL ch2kX9h1CHH53cZZ8eFsHVSKYrD5KnNuH8gypkdRYtBL+Pro1yauQ689baqrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUj/gSdJH5egbnY1gVIEZ2cujkF9wwHwYDVR0j BBgwFoAU4WG/ZW8BScspA1TmMZFaYpUODfcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzY3MGFlNzYtOTU5NC00OTgwLWI0MTAtNDkxYTYzMTlmZjNhLzAvRTE2MUJGNjU2 RjAxNDlDQjI5MDM1NEU2MzE5MTVBNjI5NTBFMERGNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9FMTYxQkY2NTZGMDE0OUNCMjkwMzU0RTYzMTkxNUE2Mjk1MEUw REY3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzY3MGFlNzYtOTU5NC00OTgwLWI0 MTAtNDkxYTYzMTlmZjNhLzAvRTE2MUJGNjU2RjAxNDlDQjI5MDM1NEU2MzE5MTVB NjI5NTBFMERGNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEOoE67cVvImYXU4DBMEScvs20D5YR0bLm3y Rb+FAlHkH12CcwKKNzA3cGIdYipH+JOzsApirrlwL8ReJ3bYo0hWcQRnzJ6x7l3A 1UVYLrKlfQuj1hWR+8aQmWNSVPeVi0Gxj2NdZIUmYtdQOWi6mtZ4VJs/n20XqRKN 6NPFBT2WUWZA2PmrPaxKUKKHRhPPoz7DDzNfRCUP3T/STxGYVDeLr2G+/yODIGfR xUr6eCwCD5GNWXmFDdEnK28GtP70hsC/Eh5DdrVMJm3jk0oRnz2MgytmkiBSqkW5 BrZ8ysoc+EXOUBrULsTHl/aYDZOULYjz3rDGRgSdyUh+sZOmM98= -----END CERTIFICATE-----Generated at Fri Jul 24 19:52:37 2026 by rpki-client