$ rpki-client -vvvf rpki-rsync.idnic.net/repo/43ddb79f-2c37-47af-b95d-15311463b343/0/8E169B5A39E2F8580EE7F6AA4E76D6432700628C.mft File: 8E169B5A39E2F8580EE7F6AA4E76D6432700628C.mft (raw, json) Hash identifier: k3aY3vzAThV/Qsty7U641IHEaHdV3Wuau6UMLxaRXEQ= Subject key identifier: 1A:21:E9:AF:5A:61:2B:D4:F5:60:3E:CB:A4:84:FE:54:88:B8:0E:5C Authority key identifier: 8E:16:9B:5A:39:E2:F8:58:0E:E7:F6:AA:4E:76:D6:43:27:00:62:8C Certificate issuer: /CN=8E169B5A39E2F8580EE7F6AA4E76D6432700628C Certificate serial: 59A008A9B3209BF00D83E4243EAB5D6C00731436 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8E169B5A39E2F8580EE7F6AA4E76D6432700628C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/43ddb79f-2c37-47af-b95d-15311463b343/0/8E169B5A39E2F8580EE7F6AA4E76D6432700628C.mft Manifest number: EB Signing time: Sun 25 Oct 2026 09:38:29 +0000 Manifest this update: Sun 25 Oct 2026 09:33:29 +0000 Manifest next update: Mon 26 Oct 2026 11:41:29 +0000 Files and hashes: 1: 3130332e38372e3134382e302f32332d3234203d3e203435333035.roa (hash: 8rzb6rpw7o6SCUVKHKIOOHkEZABIPHqgI7Fv4ouinrQ=) 2: 8E169B5A39E2F8580EE7F6AA4E76D6432700628C.crl (hash: kFkBIGRaKNbgBqd4NNVnmyEV3+g4Z4tEQJavL0IEas8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/43ddb79f-2c37-47af-b95d-15311463b343/0/8E169B5A39E2F8580EE7F6AA4E76D6432700628C.crl rsync://rpki-rsync.idnic.net/repo/43ddb79f-2c37-47af-b95d-15311463b343/0/8E169B5A39E2F8580EE7F6AA4E76D6432700628C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8E169B5A39E2F8580EE7F6AA4E76D6432700628C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 11:41:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:a0:08:a9:b3:20:9b:f0:0d:83:e4:24:3e:ab:5d:6c:00:73:14:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E169B5A39E2F8580EE7F6AA4E76D6432700628C Validity Not Before: Oct 25 09:33:29 2026 GMT Not After : Oct 26 11:41:29 2026 GMT Subject: CN=1A21E9AF5A612BD4F5603ECBA484FE5488B80E5C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:c9:bc:77:a4:e7:75:9c:f1:b8:ab:ac:60:68: b8:8a:71:4d:0b:29:a2:fb:fa:a7:bb:a9:cd:65:42: 09:13:d5:f0:28:c8:a3:82:44:0f:3a:fc:dd:49:97: 84:a3:70:d5:e0:68:9c:24:1e:87:e3:16:11:85:03: 05:f7:2d:ba:b4:f8:32:9f:01:79:0f:5e:03:d1:a4: 50:3f:ab:bd:45:34:b7:0b:d0:04:73:aa:69:b1:f6: a3:fb:40:87:de:bd:57:95:96:4d:98:10:fd:43:a9: f5:35:32:33:df:43:74:08:b3:9f:38:44:6a:cd:d7: e9:87:53:ad:21:70:92:31:9e:e4:bb:9a:9a:3a:86: 13:e9:97:73:66:36:d1:e5:c9:a9:d4:06:8e:7f:87: 15:75:85:16:2e:30:5d:e4:3f:09:bc:38:b3:6f:06: 8c:eb:6f:81:5c:36:c8:06:b7:59:01:29:73:70:b3: 91:0d:09:f0:c8:b3:2a:7c:5d:a2:e6:39:de:eb:58: b4:e8:c6:08:f5:79:15:7e:0d:09:76:2d:a0:5f:80: df:17:73:01:1f:8a:0e:97:64:73:7b:27:68:b9:db: ac:df:ce:55:ac:e5:e3:9f:dd:7f:49:84:68:e4:29: cc:aa:d6:9b:f5:c9:19:53:30:e5:32:17:aa:d6:98: 14:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:21:E9:AF:5A:61:2B:D4:F5:60:3E:CB:A4:84:FE:54:88:B8:0E:5C X509v3 Authority Key Identifier: keyid:8E:16:9B:5A:39:E2:F8:58:0E:E7:F6:AA:4E:76:D6:43:27:00:62:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/43ddb79f-2c37-47af-b95d-15311463b343/0/8E169B5A39E2F8580EE7F6AA4E76D6432700628C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8E169B5A39E2F8580EE7F6AA4E76D6432700628C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/43ddb79f-2c37-47af-b95d-15311463b343/0/8E169B5A39E2F8580EE7F6AA4E76D6432700628C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:bd:06:2a:d9:16:69:0f:55:66:b9:ba:6b:3c:73:48:dd:73: 6a:58:12:dc:97:f4:fb:61:16:14:0e:30:3b:79:28:73:87:9e: 7a:e1:14:bb:51:81:bf:c8:2f:43:bf:a3:33:c8:25:26:9b:93: ce:e6:26:67:06:65:6b:fd:0b:e9:01:11:40:8c:01:fc:4a:78: f3:c4:7f:42:34:89:b2:9e:e4:91:7f:10:b0:6d:55:f2:19:83: 61:13:60:17:cb:74:88:0c:3b:2d:8c:50:f1:b4:98:a9:1e:35: 1f:8e:18:c5:a6:23:2b:ee:df:5e:c8:f8:ec:9b:2e:bb:c0:ad: e0:5b:0c:e0:81:93:4b:88:97:96:c8:e5:b8:31:4e:ee:a3:7e: 74:7d:9e:32:d5:74:70:92:9f:63:f7:3b:3a:f7:95:d6:02:f5: de:22:b3:25:b6:ba:92:d8:6d:df:c4:52:6b:f9:90:e5:3d:92: 05:fc:f1:f5:ad:92:29:35:81:4f:d2:43:48:02:d6:d2:5c:7b: a6:0a:b5:b9:89:76:f5:e3:0c:ab:55:8e:62:56:b4:58:ee:74: 76:ec:1f:2c:82:5e:36:4c:13:b4:87:be:3e:5b:5f:1a:70:aa: 35:6a:a8:5d:3c:c7:ff:ae:44:df:9b:35:ce:79:e2:de:f7:51: 16:9b:84:ce -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWaAIqbMgm/ANg+QkPqtdbABzFDYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEUxNjlCNUEzOUUyRjg1ODBFRTdGNkFBNEU3NkQ2NDMy NzAwNjI4QzAeFw0yNjEwMjUwOTMzMjlaFw0yNjEwMjYxMTQxMjlaMDMxMTAvBgNV BAMTKDFBMjFFOUFGNUE2MTJCRDRGNTYwM0VDQkE0ODRGRTU0ODhCODBFNUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcybx3pOd1nPG4q6xgaLiKcU0L KaL7+qe7qc1lQgkT1fAoyKOCRA86/N1Jl4SjcNXgaJwkHofjFhGFAwX3Lbq0+DKf AXkPXgPRpFA/q71FNLcL0ARzqmmx9qP7QIfevVeVlk2YEP1DqfU1MjPfQ3QIs584 RGrN1+mHU60hcJIxnuS7mpo6hhPpl3NmNtHlyanUBo5/hxV1hRYuMF3kPwm8OLNv Bozrb4FcNsgGt1kBKXNws5ENCfDIsyp8XaLmOd7rWLToxgj1eRV+DQl2LaBfgN8X cwEfig6XZHN7J2i526zfzlWs5eOf3X9JhGjkKcyq1pv1yRlTMOUyF6rWmBSvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGiHpr1phK9T1YD7LpIT+VIi4DlwwHwYDVR0j BBgwFoAUjhabWjni+FgO5/aqTnbWQycAYowwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDNkZGI3OWYtMmMzNy00N2FmLWI5NWQtMTUzMTE0NjNiMzQzLzAvOEUxNjlCNUEz OUUyRjg1ODBFRTdGNkFBNEU3NkQ2NDMyNzAwNjI4Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84RTE2OUI1QTM5RTJGODU4MEVFN0Y2QUE0RTc2RDY0MzI3MDA2 MjhDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDNkZGI3OWYtMmMzNy00N2FmLWI5 NWQtMTUzMTE0NjNiMzQzLzAvOEUxNjlCNUEzOUUyRjg1ODBFRTdGNkFBNEU3NkQ2 NDMyNzAwNjI4Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIW9BirZFmkPVWa5ums8c0jdc2pYEtyX9Pth FhQOMDt5KHOHnnrhFLtRgb/IL0O/ozPIJSabk87mJmcGZWv9C+kBEUCMAfxKePPE f0I0ibKe5JF/ELBtVfIZg2ETYBfLdIgMOy2MUPG0mKkeNR+OGMWmIyvu317I+Oyb LrvAreBbDOCBk0uIl5bI5bgxTu6jfnR9njLVdHCSn2P3Ozr3ldYC9d4isyW2upLY bd/EUmv5kOU9kgX88fWtkik1gU/SQ0gC1tJce6YKtbmJdvXjDKtVjmJWtFjudHbs HyyCXjZME7SHvj5bXxpwqjVqqF08x/+uRN+bNc554t73URabhM4= -----END CERTIFICATE-----Generated at Mon Oct 26 02:20:51 2026 by rpki-client