$ rpki-client -vvf rpki-rsync.idnic.net/repo/43ddb79f-2c37-47af-b95d-15311463b343/0/8E169B5A39E2F8580EE7F6AA4E76D6432700628C.mft File: 8E169B5A39E2F8580EE7F6AA4E76D6432700628C.mft (raw, json) Hash identifier: rp5eoZEdwVI0VUTjnzGU3sFCpLCz8z+sDa7iMhgTnwQ= Subject key identifier: D3:14:39:C0:BE:9F:FA:88:06:51:BF:88:2E:37:94:95:66:14:50:AB Authority key identifier: 8E:16:9B:5A:39:E2:F8:58:0E:E7:F6:AA:4E:76:D6:43:27:00:62:8C Certificate issuer: /CN=8E169B5A39E2F8580EE7F6AA4E76D6432700628C Certificate serial: 25DA84C3DB4E0DEAFC622BC0A26496F3ED2B2907 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8E169B5A39E2F8580EE7F6AA4E76D6432700628C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/43ddb79f-2c37-47af-b95d-15311463b343/0/8E169B5A39E2F8580EE7F6AA4E76D6432700628C.mft Manifest number: 14 Signing time: Sat 16 May 2026 10:11:14 +0000 Manifest this update: Sat 16 May 2026 10:06:14 +0000 Manifest next update: Sun 17 May 2026 10:47:14 +0000 Files and hashes: 1: 8E169B5A39E2F8580EE7F6AA4E76D6432700628C.crl (hash: PMlN1KViGvEbBMD/fMWKQ/5IF5Ylr94qWbGibYMxUjE=) 2: 3130332e38372e3134382e302f32332d3234203d3e203435333035.roa (hash: 8rzb6rpw7o6SCUVKHKIOOHkEZABIPHqgI7Fv4ouinrQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/43ddb79f-2c37-47af-b95d-15311463b343/0/8E169B5A39E2F8580EE7F6AA4E76D6432700628C.crl rsync://rpki-rsync.idnic.net/repo/43ddb79f-2c37-47af-b95d-15311463b343/0/8E169B5A39E2F8580EE7F6AA4E76D6432700628C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8E169B5A39E2F8580EE7F6AA4E76D6432700628C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 17 May 2026 09:33:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:da:84:c3:db:4e:0d:ea:fc:62:2b:c0:a2:64:96:f3:ed:2b:29:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E169B5A39E2F8580EE7F6AA4E76D6432700628C Validity Not Before: May 16 10:06:14 2026 GMT Not After : May 17 10:47:14 2026 GMT Subject: CN=D31439C0BE9FFA880651BF882E379495661450AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:6e:51:fe:c2:60:27:32:2c:f4:27:16:93:1e: 27:5d:d8:36:1f:ae:9c:a9:73:9e:2b:c0:24:06:c3: aa:66:02:40:4d:79:09:52:65:3f:17:00:ce:f1:1b: 35:9a:87:9b:72:94:05:8a:28:c6:cc:31:1e:f9:29: b7:9b:e4:33:2a:67:2c:55:5c:8b:90:00:23:41:ae: 4f:11:fe:38:15:60:cf:c4:81:5f:ef:17:40:6a:c7: 30:5e:24:c8:4c:db:50:b8:09:29:81:e2:83:5b:7b: bd:12:87:c7:4f:5c:d7:7f:13:6f:1f:79:33:99:ce: 02:1d:51:b3:27:85:10:54:0e:a9:48:3c:e5:d0:9e: 5b:e1:38:80:7c:f2:26:53:14:de:2d:bb:4b:b2:0b: 4b:f9:1f:46:ee:ad:f5:64:b3:e7:be:20:98:67:8b: 61:f0:6a:07:f5:26:e4:c0:4c:69:1d:6c:24:fc:0f: 43:e0:2f:3b:fb:07:ec:fe:52:8d:72:a5:8d:0b:2a: 5e:4a:41:83:54:53:9a:b2:cb:d4:46:ad:fb:f2:93: 29:6a:94:c4:29:63:2c:32:cb:70:c1:f2:96:ff:34: 1f:1a:7b:cc:c1:0b:3c:7a:fb:51:03:f7:d3:37:96: 1a:09:3d:c6:64:de:fc:96:3d:8c:80:04:94:70:9e: 10:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:14:39:C0:BE:9F:FA:88:06:51:BF:88:2E:37:94:95:66:14:50:AB X509v3 Authority Key Identifier: keyid:8E:16:9B:5A:39:E2:F8:58:0E:E7:F6:AA:4E:76:D6:43:27:00:62:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/43ddb79f-2c37-47af-b95d-15311463b343/0/8E169B5A39E2F8580EE7F6AA4E76D6432700628C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8E169B5A39E2F8580EE7F6AA4E76D6432700628C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/43ddb79f-2c37-47af-b95d-15311463b343/0/8E169B5A39E2F8580EE7F6AA4E76D6432700628C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:16:54:80:46:c1:22:3d:c1:3c:e0:06:e4:9a:76:30:40:14: 42:93:7c:f5:94:f2:24:c0:2c:72:66:81:6f:5c:1c:9c:3e:99: 81:c5:86:5a:6f:98:cd:e5:82:98:b5:4a:74:46:63:ee:5d:d6: 1d:b5:90:e9:32:bb:48:1f:3a:33:dd:33:18:e4:5c:a4:52:b4: 5e:89:ff:02:3c:fb:0f:7e:ec:25:02:9a:0c:73:af:37:3d:70: 42:66:c7:8b:96:34:51:7f:35:a9:30:f4:5e:92:58:07:2d:6d: c9:85:49:bb:e3:a3:0c:12:9a:e9:0a:24:3d:2a:49:22:b1:48: 33:65:64:c1:bd:38:9a:bf:1c:06:84:42:cc:3b:ff:65:66:d6: 84:27:81:78:3d:e8:9d:39:93:eb:fc:d6:5c:9d:5c:92:eb:cf: 0b:0e:62:35:c2:3d:8a:c7:94:35:c0:67:6a:b3:c2:5e:0c:e3: ff:a6:58:5a:ea:62:2c:2a:f8:5e:c5:fa:5d:b8:2c:cf:d9:09: 06:fc:86:9b:33:59:2a:33:74:25:1c:61:4f:46:38:cf:58:24: 50:1b:79:45:fb:b7:55:1f:c1:31:56:8a:ed:60:7c:e3:8d:57: 0f:f9:12:3e:ed:2c:e9:99:db:8e:7e:96:07:d9:56:7b:1e:2c: 5e:1d:7f:b7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJdqEw9tODer8YivAomSW8+0rKQcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEUxNjlCNUEzOUUyRjg1ODBFRTdGNkFBNEU3NkQ2NDMy NzAwNjI4QzAeFw0yNjA1MTYxMDA2MTRaFw0yNjA1MTcxMDQ3MTRaMDMxMTAvBgNV BAMTKEQzMTQzOUMwQkU5RkZBODgwNjUxQkY4ODJFMzc5NDk1NjYxNDUwQUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGblH+wmAnMiz0JxaTHidd2DYf rpypc54rwCQGw6pmAkBNeQlSZT8XAM7xGzWah5tylAWKKMbMMR75Kbeb5DMqZyxV XIuQACNBrk8R/jgVYM/EgV/vF0BqxzBeJMhM21C4CSmB4oNbe70Sh8dPXNd/E28f eTOZzgIdUbMnhRBUDqlIPOXQnlvhOIB88iZTFN4tu0uyC0v5H0burfVks+e+IJhn i2Hwagf1JuTATGkdbCT8D0PgLzv7B+z+Uo1ypY0LKl5KQYNUU5qyy9RGrfvykylq lMQpYywyy3DB8pb/NB8ae8zBCzx6+1ED99M3lhoJPcZk3vyWPYyABJRwnhBVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0xQ5wL6f+ogGUb+ILjeUlWYUUKswHwYDVR0j BBgwFoAUjhabWjni+FgO5/aqTnbWQycAYowwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDNkZGI3OWYtMmMzNy00N2FmLWI5NWQtMTUzMTE0NjNiMzQzLzAvOEUxNjlCNUEz OUUyRjg1ODBFRTdGNkFBNEU3NkQ2NDMyNzAwNjI4Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84RTE2OUI1QTM5RTJGODU4MEVFN0Y2QUE0RTc2RDY0MzI3MDA2 MjhDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDNkZGI3OWYtMmMzNy00N2FmLWI5 NWQtMTUzMTE0NjNiMzQzLzAvOEUxNjlCNUEzOUUyRjg1ODBFRTdGNkFBNEU3NkQ2 NDMyNzAwNjI4Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGcWVIBGwSI9wTzgBuSadjBAFEKTfPWU8iTA LHJmgW9cHJw+mYHFhlpvmM3lgpi1SnRGY+5d1h21kOkyu0gfOjPdMxjkXKRStF6J /wI8+w9+7CUCmgxzrzc9cEJmx4uWNFF/Nakw9F6SWActbcmFSbvjowwSmukKJD0q SSKxSDNlZMG9OJq/HAaEQsw7/2Vm1oQngXg96J05k+v81lydXJLrzwsOYjXCPYrH lDXAZ2qzwl4M4/+mWFrqYiwq+F7F+l24LM/ZCQb8hpszWSozdCUcYU9GOM9YJFAb eUX7t1UfwTFWiu1gfOONVw/5Ej7tLOmZ245+lgfZVnseLF4df7c= -----END CERTIFICATE-----Generated at Sat May 16 15:35:08 2026 by rpki-client