$ rpki-client -vvf rpki-rsync.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/8F165EEEE0E2AF2A9C1BD801E8BC788FF3890004.mft File: 8F165EEEE0E2AF2A9C1BD801E8BC788FF3890004.mft (raw, json) Hash identifier: q+2OTsMCLJRVIyq7PzDePKiuvWjx0i5QyK+aSFXB4ng= Subject key identifier: 50:B7:85:F0:D8:38:3A:A0:F5:AC:26:8E:65:3F:33:EA:D7:C9:43:CF Authority key identifier: 8F:16:5E:EE:E0:E2:AF:2A:9C:1B:D8:01:E8:BC:78:8F:F3:89:00:04 Certificate issuer: /CN=8F165EEEE0E2AF2A9C1BD801E8BC788FF3890004 Certificate serial: 5561FAE11C65AC18EFCDE34FAD5674B3AE11BE64 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8F165EEEE0E2AF2A9C1BD801E8BC788FF3890004.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/8F165EEEE0E2AF2A9C1BD801E8BC788FF3890004.mft Manifest number: 71 Signing time: Fri 24 Jul 2026 06:17:05 +0000 Manifest this update: Fri 24 Jul 2026 06:12:05 +0000 Manifest next update: Sat 25 Jul 2026 07:22:05 +0000 Files and hashes: 1: 8F165EEEE0E2AF2A9C1BD801E8BC788FF3890004.crl (hash: 5YcOfqFWLJNM+CzxMSCnXBweTKC38NQwA6xOcll5gR0=) 2: 3130332e3136342e3233302e302f32342d3234203d3e20313431393133.roa (hash: xcERPOeoIobD9EzffmgTdyjXFyN28upEkhuU+5L4nbA=) 3: 3130332e3136342e3233302e302f32332d3233203d3e20313431393133.roa (hash: iTeV8kWltCgG9BRtF/fXrU7ElxilAoEcwTni/bbcKq0=) 4: 3130332e3136342e3233312e302f32342d3234203d3e20313431393133.roa (hash: 9jcglfq+TMOFbLOOgZj115GfLSh0l6ePRTI2eN2m36U=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/8F165EEEE0E2AF2A9C1BD801E8BC788FF3890004.crl rsync://rpki-rsync.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/8F165EEEE0E2AF2A9C1BD801E8BC788FF3890004.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8F165EEEE0E2AF2A9C1BD801E8BC788FF3890004.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 07:07:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:61:fa:e1:1c:65:ac:18:ef:cd:e3:4f:ad:56:74:b3:ae:11:be:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F165EEEE0E2AF2A9C1BD801E8BC788FF3890004 Validity Not Before: Jul 24 06:12:05 2026 GMT Not After : Jul 25 07:22:05 2026 GMT Subject: CN=50B785F0D8383AA0F5AC268E653F33EAD7C943CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:72:74:b2:40:d2:80:aa:94:f9:3e:a6:fe:64: b9:52:7f:a4:85:f1:3b:a9:51:dd:ec:cf:41:8c:99: 4d:fa:fa:7a:8f:17:1e:e2:6c:2a:bb:af:ac:15:e8: 21:7f:90:9f:70:e1:2e:1c:eb:b2:95:f4:93:ad:c8: d3:e3:c9:01:d8:f1:c7:6c:9c:4e:31:99:dd:19:8a: 46:e6:c2:4b:0a:1d:a5:a4:74:b1:6d:a0:b1:4f:8d: a4:f0:97:ca:55:66:26:99:4e:f2:ab:0e:5f:c8:51: 0b:28:ec:1a:d1:05:2f:3a:ae:c2:c4:28:e6:49:66: d5:af:ac:da:1b:f2:59:ca:ee:f5:8b:7d:de:09:a6: a6:30:ec:88:ad:c2:5a:40:1f:e2:b3:a4:dc:16:6d: 18:e7:90:eb:69:bf:e4:40:a6:51:41:0a:65:25:af: 97:3c:bb:5c:2a:e4:8b:b1:df:a5:78:7f:57:c8:cd: bd:4e:15:95:76:56:46:50:bf:14:b7:15:d8:76:10: e7:47:35:5c:26:b4:71:09:f4:dd:3a:73:48:b2:91: 5b:91:dd:78:eb:a4:29:d7:20:bc:20:99:c7:23:35: 2e:34:62:e1:91:e6:a0:36:9d:e8:7c:98:ad:b8:db: 49:e0:66:d3:ec:50:9d:8b:40:73:24:58:fa:97:43: ff:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:B7:85:F0:D8:38:3A:A0:F5:AC:26:8E:65:3F:33:EA:D7:C9:43:CF X509v3 Authority Key Identifier: keyid:8F:16:5E:EE:E0:E2:AF:2A:9C:1B:D8:01:E8:BC:78:8F:F3:89:00:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/8F165EEEE0E2AF2A9C1BD801E8BC788FF3890004.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8F165EEEE0E2AF2A9C1BD801E8BC788FF3890004.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/8F165EEEE0E2AF2A9C1BD801E8BC788FF3890004.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:21:d2:b5:ce:4b:03:f9:71:34:29:e9:f4:bf:b8:40:3f:df: 7f:4f:e5:64:4d:22:b5:65:a1:45:c4:45:03:55:78:4f:34:c7: 5a:06:b9:3b:bc:79:09:5c:9d:25:1a:62:fd:11:5f:12:f4:23: 57:25:70:f6:bf:cd:47:89:6a:ca:65:d2:3a:65:01:c7:f0:38: b0:21:4e:b4:92:8f:8e:f5:5f:31:2e:d7:2c:73:91:a4:f2:9d: f9:c4:c4:3a:d8:ee:0c:ac:59:35:bd:8a:7e:05:82:b4:b3:86: fc:7e:d7:8e:2e:1a:6c:2c:42:f4:e6:4c:c4:39:aa:45:f9:d3: 03:7d:11:0e:59:9b:17:b9:59:38:15:15:c8:46:b9:31:76:08: cf:63:58:03:ef:d8:3f:6f:e6:fa:1b:5b:49:43:a7:b6:d9:6a: 6b:ce:35:1f:f2:dd:b8:ae:4c:4a:fc:7a:82:1c:d1:8b:d1:3e: 7e:93:43:0b:d6:57:7f:29:8b:1e:88:6b:e3:d8:e2:01:47:3b: 67:00:eb:55:38:23:d1:48:af:4a:ef:89:7f:c8:dd:c4:a4:44: 02:ed:82:1b:8c:6c:74:53:93:a3:13:90:77:51:de:e9:79:b6: a2:a8:ff:f1:47:28:af:53:2f:a7:b8:77:4f:54:98:84:93:b4: 7a:17:ad:45 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVWH64RxlrBjvzeNPrVZ0s64RvmQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEYxNjVFRUVFMEUyQUYyQTlDMUJEODAxRThCQzc4OEZG Mzg5MDAwNDAeFw0yNjA3MjQwNjEyMDVaFw0yNjA3MjUwNzIyMDVaMDMxMTAvBgNV BAMTKDUwQjc4NUYwRDgzODNBQTBGNUFDMjY4RTY1M0YzM0VBRDdDOTQzQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdcnSyQNKAqpT5Pqb+ZLlSf6SF 8TupUd3sz0GMmU36+nqPFx7ibCq7r6wV6CF/kJ9w4S4c67KV9JOtyNPjyQHY8cds nE4xmd0ZikbmwksKHaWkdLFtoLFPjaTwl8pVZiaZTvKrDl/IUQso7BrRBS86rsLE KOZJZtWvrNob8lnK7vWLfd4JpqYw7IitwlpAH+KzpNwWbRjnkOtpv+RAplFBCmUl r5c8u1wq5Iux36V4f1fIzb1OFZV2VkZQvxS3Fdh2EOdHNVwmtHEJ9N06c0iykVuR 3XjrpCnXILwgmccjNS40YuGR5qA2neh8mK2420ngZtPsUJ2LQHMkWPqXQ//JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUULeF8Ng4OqD1rCaOZT8z6tfJQ88wHwYDVR0j BBgwFoAUjxZe7uDiryqcG9gB6Lx4j/OJAAQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWExNzk0YWEtMzI5MS00ODNiLWFjMGItN2JjN2IxYTY3Y2M2LzAvOEYxNjVFRUVF MEUyQUYyQTlDMUJEODAxRThCQzc4OEZGMzg5MDAwNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84RjE2NUVFRUUwRTJBRjJBOUMxQkQ4MDFFOEJDNzg4RkYzODkw MDA0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWExNzk0YWEtMzI5MS00ODNiLWFj MGItN2JjN2IxYTY3Y2M2LzAvOEYxNjVFRUVFMEUyQUYyQTlDMUJEODAxRThCQzc4 OEZGMzg5MDAwNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFQh0rXOSwP5cTQp6fS/uEA/339P5WRNIrVl oUXERQNVeE80x1oGuTu8eQlcnSUaYv0RXxL0I1clcPa/zUeJaspl0jplAcfwOLAh TrSSj471XzEu1yxzkaTynfnExDrY7gysWTW9in4FgrSzhvx+144uGmwsQvTmTMQ5 qkX50wN9EQ5Zmxe5WTgVFchGuTF2CM9jWAPv2D9v5vobW0lDp7bZamvONR/y3biu TEr8eoIc0YvRPn6TQwvWV38pix6Ia+PY4gFHO2cA61U4I9FIr0rviX/I3cSkRALt ghuMbHRTk6MTkHdR3ul5tqKo//FHKK9TL6e4d09UmISTtHoXrUU= -----END CERTIFICATE-----Generated at Fri Jul 24 10:01:52 2026 by rpki-client