$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/8F165EEEE0E2AF2A9C1BD801E8BC788FF3890004.mft File: 8F165EEEE0E2AF2A9C1BD801E8BC788FF3890004.mft (raw, json) Hash identifier: MDzmlltfUmz+9C9cQWlpoVUc3OmtYGcpvA1AWi339Jc= Subject key identifier: AF:F0:AF:09:5C:C4:07:79:9B:FD:6E:BD:04:5D:9E:21:7A:46:6E:38 Authority key identifier: 8F:16:5E:EE:E0:E2:AF:2A:9C:1B:D8:01:E8:BC:78:8F:F3:89:00:04 Certificate issuer: /CN=8F165EEEE0E2AF2A9C1BD801E8BC788FF3890004 Certificate serial: 4673155D4223330B5B6DADADA975DFB72FD3B94A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8F165EEEE0E2AF2A9C1BD801E8BC788FF3890004.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/8F165EEEE0E2AF2A9C1BD801E8BC788FF3890004.mft Manifest number: A8 Signing time: Thu 03 Sep 2026 14:24:33 +0000 Manifest this update: Thu 03 Sep 2026 14:19:33 +0000 Manifest next update: Fri 04 Sep 2026 17:35:33 +0000 Files and hashes: 1: 3130332e3136342e3233302e302f32332d3233203d3e20313431393133.roa (hash: iTeV8kWltCgG9BRtF/fXrU7ElxilAoEcwTni/bbcKq0=) 2: 3130332e3136342e3233302e302f32342d3234203d3e20313431393133.roa (hash: xcERPOeoIobD9EzffmgTdyjXFyN28upEkhuU+5L4nbA=) 3: 8F165EEEE0E2AF2A9C1BD801E8BC788FF3890004.crl (hash: G+u/+609C4RvHriMXXQLt3OmkiIscwq6zRnzeqc8Mj0=) 4: 3130332e3136342e3233312e302f32342d3234203d3e20313431393133.roa (hash: 9jcglfq+TMOFbLOOgZj115GfLSh0l6ePRTI2eN2m36U=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/8F165EEEE0E2AF2A9C1BD801E8BC788FF3890004.crl rsync://rpki-rsync.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/8F165EEEE0E2AF2A9C1BD801E8BC788FF3890004.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8F165EEEE0E2AF2A9C1BD801E8BC788FF3890004.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 12:22:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:73:15:5d:42:23:33:0b:5b:6d:ad:ad:a9:75:df:b7:2f:d3:b9:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F165EEEE0E2AF2A9C1BD801E8BC788FF3890004 Validity Not Before: Sep 3 14:19:33 2026 GMT Not After : Sep 4 17:35:33 2026 GMT Subject: CN=AFF0AF095CC407799BFD6EBD045D9E217A466E38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:c8:fb:8f:49:88:16:fa:84:25:c4:5c:60:ec: 36:7f:db:a1:e2:7e:2a:f0:5a:d9:a5:a7:b1:27:fb: 01:36:fb:a7:fd:20:b9:d4:0a:84:e6:84:90:5a:8a: ef:04:3e:ff:09:56:24:dc:58:32:03:01:4d:b5:ae: 4f:e8:5c:fe:63:ce:24:72:d3:47:50:f1:d7:9e:10: 03:4c:fd:b4:1c:70:95:9b:ac:54:37:c9:49:13:5d: 27:f6:04:b0:fd:f4:32:2f:ff:84:8b:8f:1f:ed:9c: f1:49:cb:02:9c:eb:cc:e0:a8:86:a6:61:86:8e:87: 2c:2f:76:f3:ec:8c:f0:7c:c9:07:92:41:b0:cb:ca: e2:3b:a4:05:dd:c5:cc:88:35:c1:b7:09:ff:ac:d2: da:f2:b8:34:23:73:4a:f8:93:80:73:04:f4:4c:d5: 4c:21:87:de:a7:17:47:a2:32:c2:65:56:4e:f3:2b: 45:eb:ce:24:de:2d:0a:61:31:d1:fd:e4:d4:a7:84: 7c:cf:49:f3:77:78:e0:ef:b4:25:bc:4a:2f:ba:fd: e0:d4:72:c0:2c:cc:12:50:62:d2:b7:fd:d5:20:21: 4f:d8:e3:50:e0:d9:2a:fe:5a:a1:2c:fe:ba:c8:1d: f0:92:e1:98:50:43:e0:26:8e:b0:e6:da:6f:5e:b1: 61:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:F0:AF:09:5C:C4:07:79:9B:FD:6E:BD:04:5D:9E:21:7A:46:6E:38 X509v3 Authority Key Identifier: keyid:8F:16:5E:EE:E0:E2:AF:2A:9C:1B:D8:01:E8:BC:78:8F:F3:89:00:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/8F165EEEE0E2AF2A9C1BD801E8BC788FF3890004.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8F165EEEE0E2AF2A9C1BD801E8BC788FF3890004.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/8F165EEEE0E2AF2A9C1BD801E8BC788FF3890004.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:9d:11:1e:63:8d:08:53:eb:40:28:02:5f:5e:eb:41:b6:4a: 51:4d:45:82:66:eb:1f:1e:6e:b2:95:fa:fd:6f:69:a1:53:dd: 4a:92:d7:d8:a6:73:75:37:d8:74:93:18:d3:57:0b:67:bf:10: aa:e2:63:c6:49:ca:24:60:32:ba:89:f7:20:30:40:77:23:da: f7:1a:b1:fd:65:9d:a0:b7:a1:e5:03:a8:02:ad:41:05:29:2f: ae:ac:52:40:4e:f4:19:a8:57:39:00:d8:4e:46:52:bc:fd:ea: 0e:48:0d:05:ea:7f:81:3f:9d:09:5a:a9:b4:4f:12:4e:a5:c7: ef:71:77:45:1a:de:f5:83:94:66:4d:5c:e1:4c:cf:41:39:2a: 71:d7:be:2b:bf:62:12:76:37:59:9f:c8:63:f0:70:da:6a:03: 9f:ad:04:84:fd:2e:ca:5e:bb:5e:f0:28:0d:14:6e:1a:29:bc: 82:62:39:06:ab:63:a3:c9:1a:11:97:af:a2:fb:70:42:2b:3e: c9:ec:ad:02:99:ae:94:eb:cc:bc:61:f7:8f:5a:e8:10:ed:ed: bb:e4:ce:4b:e9:48:e0:67:54:f4:c4:03:1e:ce:a7:3e:32:07: f0:76:7e:97:da:59:4f:ca:5a:d6:e6:2d:2d:b3:5b:50:d1:4c: 29:d7:26:68 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURnMVXUIjMwtbba2tqXXfty/TuUowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEYxNjVFRUVFMEUyQUYyQTlDMUJEODAxRThCQzc4OEZG Mzg5MDAwNDAeFw0yNjA5MDMxNDE5MzNaFw0yNjA5MDQxNzM1MzNaMDMxMTAvBgNV BAMTKEFGRjBBRjA5NUNDNDA3Nzk5QkZENkVCRDA0NUQ5RTIxN0E0NjZFMzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZyPuPSYgW+oQlxFxg7DZ/26Hi firwWtmlp7En+wE2+6f9ILnUCoTmhJBaiu8EPv8JViTcWDIDAU21rk/oXP5jziRy 00dQ8deeEANM/bQccJWbrFQ3yUkTXSf2BLD99DIv/4SLjx/tnPFJywKc68zgqIam YYaOhywvdvPsjPB8yQeSQbDLyuI7pAXdxcyINcG3Cf+s0tryuDQjc0r4k4BzBPRM 1Uwhh96nF0eiMsJlVk7zK0XrziTeLQphMdH95NSnhHzPSfN3eODvtCW8Si+6/eDU csAszBJQYtK3/dUgIU/Y41Dg2Sr+WqEs/rrIHfCS4ZhQQ+AmjrDm2m9esWH3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUr/CvCVzEB3mb/W69BF2eIXpGbjgwHwYDVR0j BBgwFoAUjxZe7uDiryqcG9gB6Lx4j/OJAAQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWExNzk0YWEtMzI5MS00ODNiLWFjMGItN2JjN2IxYTY3Y2M2LzAvOEYxNjVFRUVF MEUyQUYyQTlDMUJEODAxRThCQzc4OEZGMzg5MDAwNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84RjE2NUVFRUUwRTJBRjJBOUMxQkQ4MDFFOEJDNzg4RkYzODkw MDA0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWExNzk0YWEtMzI5MS00ODNiLWFj MGItN2JjN2IxYTY3Y2M2LzAvOEYxNjVFRUVFMEUyQUYyQTlDMUJEODAxRThCQzc4 OEZGMzg5MDAwNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKedER5jjQhT60AoAl9e60G2SlFNRYJm6x8e brKV+v1vaaFT3UqS19imc3U32HSTGNNXC2e/EKriY8ZJyiRgMrqJ9yAwQHcj2vca sf1lnaC3oeUDqAKtQQUpL66sUkBO9BmoVzkA2E5GUrz96g5IDQXqf4E/nQlaqbRP Ek6lx+9xd0Ua3vWDlGZNXOFMz0E5KnHXviu/YhJ2N1mfyGPwcNpqA5+tBIT9Lspe u17wKA0UbhopvIJiOQarY6PJGhGXr6L7cEIrPsnsrQKZrpTrzLxh949a6BDt7bvk zkvpSOBnVPTEAx7Opz4yB/B2fpfaWU/KWtbmLS2zW1DRTCnXJmg= -----END CERTIFICATE-----Generated at Thu Sep 3 17:45:25 2026 by rpki-client