$ rpki-client -vvf rpki-rsync.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/8F165EEEE0E2AF2A9C1BD801E8BC788FF3890004.mft File: 8F165EEEE0E2AF2A9C1BD801E8BC788FF3890004.mft (raw, json) Hash identifier: i1OPxF0cx51RNWocgAODXS50JMF6DFgymezlSavpCog= Subject key identifier: 63:22:AA:6B:06:F5:70:04:13:9F:28:76:E4:5D:97:A7:84:6A:8E:95 Authority key identifier: 8F:16:5E:EE:E0:E2:AF:2A:9C:1B:D8:01:E8:BC:78:8F:F3:89:00:04 Certificate issuer: /CN=8F165EEEE0E2AF2A9C1BD801E8BC788FF3890004 Certificate serial: 1671061B7ED5EE0262D0E9DD296AAE181FD8C986 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8F165EEEE0E2AF2A9C1BD801E8BC788FF3890004.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/8F165EEEE0E2AF2A9C1BD801E8BC788FF3890004.mft Manifest number: 0F Signing time: Tue 12 May 2026 23:37:45 +0000 Manifest this update: Tue 12 May 2026 23:32:45 +0000 Manifest next update: Thu 14 May 2026 01:22:45 +0000 Files and hashes: 1: 8F165EEEE0E2AF2A9C1BD801E8BC788FF3890004.crl (hash: GyLYF+fufooJTm4yduy6A+VSoDFypaiznDO8q2Aj3FY=) 2: 3130332e3136342e3233302e302f32342d3234203d3e20313431393133.roa (hash: xcERPOeoIobD9EzffmgTdyjXFyN28upEkhuU+5L4nbA=) 3: 3130332e3136342e3233312e302f32342d3234203d3e20313431393133.roa (hash: 9jcglfq+TMOFbLOOgZj115GfLSh0l6ePRTI2eN2m36U=) 4: 3130332e3136342e3233302e302f32332d3233203d3e20313431393133.roa (hash: iTeV8kWltCgG9BRtF/fXrU7ElxilAoEcwTni/bbcKq0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/8F165EEEE0E2AF2A9C1BD801E8BC788FF3890004.crl rsync://rpki-rsync.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/8F165EEEE0E2AF2A9C1BD801E8BC788FF3890004.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8F165EEEE0E2AF2A9C1BD801E8BC788FF3890004.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:71:06:1b:7e:d5:ee:02:62:d0:e9:dd:29:6a:ae:18:1f:d8:c9:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F165EEEE0E2AF2A9C1BD801E8BC788FF3890004 Validity Not Before: May 12 23:32:45 2026 GMT Not After : May 14 01:22:45 2026 GMT Subject: CN=6322AA6B06F57004139F2876E45D97A7846A8E95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:43:cd:e1:f6:3b:de:40:99:cd:0b:b3:88:56: f9:48:b3:2b:f5:15:51:19:d1:a5:69:05:51:ac:80: 1a:32:81:78:47:13:b4:15:9a:c4:4a:df:59:ef:aa: 83:9f:7c:8a:4f:1d:6b:68:cc:ca:d5:09:59:16:87: 1b:21:3d:cd:0f:fe:8c:ed:8f:93:4c:79:78:39:51: bb:81:f7:20:a3:d3:69:d6:ab:90:57:b0:02:56:0d: c7:9b:ce:57:c8:f9:5b:94:d6:a1:e6:54:69:86:a8: 76:2a:f4:5d:61:23:27:05:77:86:ed:64:e6:e3:0a: 4b:29:0e:0b:f7:f0:de:2a:0e:01:84:b0:5f:80:89: dc:03:83:20:17:92:3a:74:11:1f:24:16:ba:dd:3a: 5c:34:ad:22:f5:3f:9a:47:23:23:10:42:be:15:52: 98:bd:c8:be:4f:53:01:d8:ef:05:13:60:3d:32:66: 19:89:0b:56:46:16:79:ae:cd:a5:6c:1d:7c:60:55: 15:be:17:b6:c2:dd:5f:04:91:20:e4:3c:b1:9e:72: 2d:d2:84:43:21:8c:ab:cf:3c:19:fe:36:39:66:1d: 45:72:82:4d:bb:78:43:4d:32:eb:1e:57:d2:bd:16: 85:bd:f4:b6:44:f3:da:90:6a:ea:b4:90:56:de:ff: dc:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:22:AA:6B:06:F5:70:04:13:9F:28:76:E4:5D:97:A7:84:6A:8E:95 X509v3 Authority Key Identifier: keyid:8F:16:5E:EE:E0:E2:AF:2A:9C:1B:D8:01:E8:BC:78:8F:F3:89:00:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/8F165EEEE0E2AF2A9C1BD801E8BC788FF3890004.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8F165EEEE0E2AF2A9C1BD801E8BC788FF3890004.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/8F165EEEE0E2AF2A9C1BD801E8BC788FF3890004.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:58:7b:c2:cd:60:95:c9:b5:d8:c9:8b:e4:5f:30:e1:f6:93: ba:af:1a:b3:c3:3e:f7:fb:20:54:a3:e3:8c:66:32:06:b2:7f: d7:c1:2b:d6:2e:33:ab:2c:fc:92:54:40:32:84:eb:ce:e2:e9: 75:a7:78:f5:b4:24:90:9f:ce:d2:f7:43:83:9f:d3:0e:39:6e: 0e:c1:9b:8e:69:0e:0b:4f:72:83:07:98:85:5b:b4:0b:38:d2: a6:ff:25:8d:f4:0b:a9:03:b5:0f:fa:47:ce:5f:a0:38:81:d3: 81:8f:e4:d7:59:9f:08:4c:49:62:0d:9e:53:df:48:75:af:cb: 5c:56:f4:f5:19:ff:7a:83:ec:d3:6f:d8:2f:5c:2a:b7:e4:48: f0:f5:50:5f:e6:6d:d5:bc:62:8b:3d:4e:7b:1d:1f:cf:4a:fe: 7e:2b:8c:b1:48:aa:dc:13:14:9d:f0:78:91:2b:f9:51:aa:f6: 9b:2b:ea:d6:a4:57:56:fa:a3:56:6d:84:16:43:20:8f:80:a7: ea:82:36:08:bf:f2:54:f9:d2:4f:b2:d9:9f:7b:f3:c1:00:fe: 16:f7:06:2c:b2:67:a3:4a:41:ed:fc:5f:d7:92:62:31:6a:ac: e7:eb:92:f9:bf:f0:85:2f:ed:89:74:0f:fd:2c:c6:c4:7b:6a: 6f:5d:15:6d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFnEGG37V7gJi0OndKWquGB/YyYYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEYxNjVFRUVFMEUyQUYyQTlDMUJEODAxRThCQzc4OEZG Mzg5MDAwNDAeFw0yNjA1MTIyMzMyNDVaFw0yNjA1MTQwMTIyNDVaMDMxMTAvBgNV BAMTKDYzMjJBQTZCMDZGNTcwMDQxMzlGMjg3NkU0NUQ5N0E3ODQ2QThFOTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7Q83h9jveQJnNC7OIVvlIsyv1 FVEZ0aVpBVGsgBoygXhHE7QVmsRK31nvqoOffIpPHWtozMrVCVkWhxshPc0P/ozt j5NMeXg5UbuB9yCj02nWq5BXsAJWDcebzlfI+VuU1qHmVGmGqHYq9F1hIycFd4bt ZObjCkspDgv38N4qDgGEsF+AidwDgyAXkjp0ER8kFrrdOlw0rSL1P5pHIyMQQr4V Upi9yL5PUwHY7wUTYD0yZhmJC1ZGFnmuzaVsHXxgVRW+F7bC3V8EkSDkPLGeci3S hEMhjKvPPBn+NjlmHUVygk27eENNMuseV9K9FoW99LZE89qQauq0kFbe/9w7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYyKqawb1cAQTnyh25F2Xp4RqjpUwHwYDVR0j BBgwFoAUjxZe7uDiryqcG9gB6Lx4j/OJAAQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWExNzk0YWEtMzI5MS00ODNiLWFjMGItN2JjN2IxYTY3Y2M2LzAvOEYxNjVFRUVF MEUyQUYyQTlDMUJEODAxRThCQzc4OEZGMzg5MDAwNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84RjE2NUVFRUUwRTJBRjJBOUMxQkQ4MDFFOEJDNzg4RkYzODkw MDA0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWExNzk0YWEtMzI5MS00ODNiLWFj MGItN2JjN2IxYTY3Y2M2LzAvOEYxNjVFRUVFMEUyQUYyQTlDMUJEODAxRThCQzc4 OEZGMzg5MDAwNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACpYe8LNYJXJtdjJi+RfMOH2k7qvGrPDPvf7 IFSj44xmMgayf9fBK9YuM6ss/JJUQDKE687i6XWnePW0JJCfztL3Q4Of0w45bg7B m45pDgtPcoMHmIVbtAs40qb/JY30C6kDtQ/6R85foDiB04GP5NdZnwhMSWINnlPf SHWvy1xW9PUZ/3qD7NNv2C9cKrfkSPD1UF/mbdW8Yos9TnsdH89K/n4rjLFIqtwT FJ3weJEr+VGq9psr6takV1b6o1ZthBZDII+Ap+qCNgi/8lT50k+y2Z9788EA/hb3 BiyyZ6NKQe38X9eSYjFqrOfrkvm/8IUv7Yl0D/0sxsR7am9dFW0= -----END CERTIFICATE-----Generated at Wed May 13 02:41:13 2026 by rpki-client