$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/8F165EEEE0E2AF2A9C1BD801E8BC788FF3890004.mft File: 8F165EEEE0E2AF2A9C1BD801E8BC788FF3890004.mft (raw, json) Hash identifier: 3OHwqWwj/1wLhzjK95N7Ohtfyn0khbCbZ9Kgy6JL6UA= Subject key identifier: 7A:4B:59:7B:87:D2:0D:A4:9E:32:BA:5C:5B:70:93:C3:D0:B6:23:B8 Authority key identifier: 8F:16:5E:EE:E0:E2:AF:2A:9C:1B:D8:01:E8:BC:78:8F:F3:89:00:04 Certificate issuer: /CN=8F165EEEE0E2AF2A9C1BD801E8BC788FF3890004 Certificate serial: 204D1757F9D9732EF30341E4D587BB18018C0CFD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8F165EEEE0E2AF2A9C1BD801E8BC788FF3890004.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/8F165EEEE0E2AF2A9C1BD801E8BC788FF3890004.mft Manifest number: C4 Signing time: Thu 24 Sep 2026 14:38:57 +0000 Manifest this update: Thu 24 Sep 2026 14:33:57 +0000 Manifest next update: Fri 25 Sep 2026 15:39:57 +0000 Files and hashes: 1: 3130332e3136342e3233302e302f32342d3234203d3e20313431393133.roa (hash: xcERPOeoIobD9EzffmgTdyjXFyN28upEkhuU+5L4nbA=) 2: 8F165EEEE0E2AF2A9C1BD801E8BC788FF3890004.crl (hash: 93PAc6c3z57GF8XDWgbyJl42aRRI/YLHvooKJmncpAI=) 3: 3130332e3136342e3233302e302f32332d3233203d3e20313431393133.roa (hash: iTeV8kWltCgG9BRtF/fXrU7ElxilAoEcwTni/bbcKq0=) 4: 3130332e3136342e3233312e302f32342d3234203d3e20313431393133.roa (hash: 9jcglfq+TMOFbLOOgZj115GfLSh0l6ePRTI2eN2m36U=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/8F165EEEE0E2AF2A9C1BD801E8BC788FF3890004.crl rsync://rpki-rsync.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/8F165EEEE0E2AF2A9C1BD801E8BC788FF3890004.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8F165EEEE0E2AF2A9C1BD801E8BC788FF3890004.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:4d:17:57:f9:d9:73:2e:f3:03:41:e4:d5:87:bb:18:01:8c:0c:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F165EEEE0E2AF2A9C1BD801E8BC788FF3890004 Validity Not Before: Sep 24 14:33:57 2026 GMT Not After : Sep 25 15:39:57 2026 GMT Subject: CN=7A4B597B87D20DA49E32BA5C5B7093C3D0B623B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:0a:71:27:fa:a0:69:69:fd:05:17:27:a9:60: f2:08:8f:2e:57:42:f6:8c:b0:2e:71:e8:95:79:a7: bd:d3:9f:64:7b:11:6c:2b:ec:9a:a8:d2:fe:01:90: d0:7d:6e:19:50:47:63:81:00:3a:4d:42:ef:54:fa: 0f:90:bc:5a:b5:2d:47:88:f5:4d:ac:57:8d:2e:92: 41:be:b4:29:85:4c:e0:8c:0d:a4:15:08:68:ea:e5: 0c:d8:49:a9:e8:1f:27:4b:d9:f8:8c:6e:c5:0a:aa: 0b:b3:34:2c:09:9c:cd:4d:84:fb:70:bb:2c:ef:3a: ef:9a:e2:99:d3:35:86:f1:b7:73:ac:aa:28:92:f7: 7f:99:35:c9:6d:75:7a:28:78:1f:fc:a7:0a:1f:c8: 16:61:08:52:5a:92:78:96:5d:9d:6e:7b:0f:46:ca: 9f:5f:bc:50:35:c6:cc:86:98:35:ea:79:4f:0c:04: 7e:22:fc:98:ed:20:79:8c:53:49:8f:14:57:61:54: ba:67:11:07:b8:9b:70:0b:60:bb:32:c9:ec:65:93: 66:ca:6e:17:53:30:1a:b7:1a:fc:bd:54:a3:ac:74: 8e:0d:a7:18:e0:9a:38:8d:a5:a3:93:be:88:b7:ff: 8d:db:fd:5d:69:50:b0:c5:33:4b:b8:8a:ce:21:33: 0a:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:4B:59:7B:87:D2:0D:A4:9E:32:BA:5C:5B:70:93:C3:D0:B6:23:B8 X509v3 Authority Key Identifier: keyid:8F:16:5E:EE:E0:E2:AF:2A:9C:1B:D8:01:E8:BC:78:8F:F3:89:00:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/8F165EEEE0E2AF2A9C1BD801E8BC788FF3890004.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8F165EEEE0E2AF2A9C1BD801E8BC788FF3890004.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/8F165EEEE0E2AF2A9C1BD801E8BC788FF3890004.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:7a:78:a1:fe:5b:b9:0c:d2:12:eb:67:9c:d8:89:f1:7d:03: 94:59:83:3d:b8:02:73:49:9c:44:70:d8:1a:a4:0b:3c:af:0c: 5a:53:68:84:fe:55:3c:c5:74:bf:21:9f:ec:d1:26:94:f9:ef: 16:9c:0f:ce:2c:cd:d7:85:2e:39:52:e3:56:44:7e:5c:ea:df: ea:a6:4d:6e:61:23:3a:f4:c5:7e:30:08:43:ec:f3:e8:75:d5: f9:52:30:b1:73:6b:fa:4c:39:fa:95:6e:c3:62:bf:48:55:be: 72:e3:1b:a1:d9:89:59:60:bd:33:49:e1:db:9b:53:0d:84:d2: c7:2a:fa:f5:99:f5:2e:6e:96:3e:83:1b:c9:a6:bf:75:55:88: 9f:f6:57:a9:7f:6b:5b:6d:25:6e:de:ee:c8:8f:dd:77:72:77: 7c:74:2a:bc:38:e7:05:cb:32:11:c6:52:be:8e:97:36:fb:8b: 1d:46:47:f1:bc:8e:54:d4:b1:c4:51:5d:39:b8:65:23:99:c7: d7:9b:4d:d6:8f:30:ae:b6:81:d6:f8:99:07:2a:fd:ac:7d:cd: c7:31:1d:a7:7a:cd:94:45:6c:bf:19:dd:1f:92:f3:1f:a5:5a: 84:e8:70:77:d4:63:be:0f:7f:e7:7f:13:54:b2:06:af:27:20: a0:1f:f2:d8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIE0XV/nZcy7zA0Hk1Ye7GAGMDP0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEYxNjVFRUVFMEUyQUYyQTlDMUJEODAxRThCQzc4OEZG Mzg5MDAwNDAeFw0yNjA5MjQxNDMzNTdaFw0yNjA5MjUxNTM5NTdaMDMxMTAvBgNV BAMTKDdBNEI1OTdCODdEMjBEQTQ5RTMyQkE1QzVCNzA5M0MzRDBCNjIzQjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxCnEn+qBpaf0FFyepYPIIjy5X QvaMsC5x6JV5p73Tn2R7EWwr7Jqo0v4BkNB9bhlQR2OBADpNQu9U+g+QvFq1LUeI 9U2sV40ukkG+tCmFTOCMDaQVCGjq5QzYSanoHydL2fiMbsUKqguzNCwJnM1NhPtw uyzvOu+a4pnTNYbxt3OsqiiS93+ZNcltdXooeB/8pwofyBZhCFJakniWXZ1uew9G yp9fvFA1xsyGmDXqeU8MBH4i/JjtIHmMU0mPFFdhVLpnEQe4m3ALYLsyyexlk2bK bhdTMBq3Gvy9VKOsdI4NpxjgmjiNpaOTvoi3/43b/V1pULDFM0u4is4hMwp5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUektZe4fSDaSeMrpcW3CTw9C2I7gwHwYDVR0j BBgwFoAUjxZe7uDiryqcG9gB6Lx4j/OJAAQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWExNzk0YWEtMzI5MS00ODNiLWFjMGItN2JjN2IxYTY3Y2M2LzAvOEYxNjVFRUVF MEUyQUYyQTlDMUJEODAxRThCQzc4OEZGMzg5MDAwNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84RjE2NUVFRUUwRTJBRjJBOUMxQkQ4MDFFOEJDNzg4RkYzODkw MDA0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWExNzk0YWEtMzI5MS00ODNiLWFj MGItN2JjN2IxYTY3Y2M2LzAvOEYxNjVFRUVFMEUyQUYyQTlDMUJEODAxRThCQzc4 OEZGMzg5MDAwNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIJ6eKH+W7kM0hLrZ5zYifF9A5RZgz24AnNJ nERw2BqkCzyvDFpTaIT+VTzFdL8hn+zRJpT57xacD84szdeFLjlS41ZEflzq3+qm TW5hIzr0xX4wCEPs8+h11flSMLFza/pMOfqVbsNiv0hVvnLjG6HZiVlgvTNJ4dub Uw2E0scq+vWZ9S5ulj6DG8mmv3VViJ/2V6l/a1ttJW7e7siP3Xdyd3x0Krw45wXL MhHGUr6Olzb7ix1GR/G8jlTUscRRXTm4ZSOZx9ebTdaPMK62gdb4mQcq/ax9zccx Had6zZRFbL8Z3R+S8x+lWoTocHfUY74Pf+d/E1SyBq8nIKAf8tg= -----END CERTIFICATE-----Generated at Thu Sep 24 22:35:06 2026 by rpki-client