$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7670ae76-9594-4980-b410-491a6319ff3a/0/E161BF656F0149CB290354E631915A62950E0DF7.mft File: E161BF656F0149CB290354E631915A62950E0DF7.mft (raw, json) Hash identifier: THjgPMSC0IwsaVvD+Ia9ZdL/tk5yFIerOlnEy3rE3Z4= Subject key identifier: 04:03:59:EF:F7:8E:F5:45:9A:43:E6:87:BC:09:74:E8:4E:96:EF:7A Authority key identifier: E1:61:BF:65:6F:01:49:CB:29:03:54:E6:31:91:5A:62:95:0E:0D:F7 Certificate issuer: /CN=E161BF656F0149CB290354E631915A62950E0DF7 Certificate serial: 779E347C0351F7F0CC061828876B91530E3D0174 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/E161BF656F0149CB290354E631915A62950E0DF7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7670ae76-9594-4980-b410-491a6319ff3a/0/E161BF656F0149CB290354E631915A62950E0DF7.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 07:27:43 +0000 Manifest this update: Thu 17 Sep 2026 07:22:43 +0000 Manifest next update: Fri 18 Sep 2026 11:00:43 +0000 Files and hashes: 1: 3135372e36362e36372e302f32342d3234203d3e20313532373831.roa (hash: OfxEx4cxbUi1PsgMvuv5XcH2kiZ/xjVPvG8pLlZllKE=) 2: E161BF656F0149CB290354E631915A62950E0DF7.crl (hash: hRObHpAcVsiDrpEqjwrOQPX/9zSsENYGyLtz8p5TzX4=) 3: 3135372e36362e36362e302f32342d3234203d3e20313532373831.roa (hash: grf0YK9bJyH/cVnLX3ovqZL+z5fiMqaMnTX+lrSCaV0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7670ae76-9594-4980-b410-491a6319ff3a/0/E161BF656F0149CB290354E631915A62950E0DF7.crl rsync://rpki-rsync.idnic.net/repo/7670ae76-9594-4980-b410-491a6319ff3a/0/E161BF656F0149CB290354E631915A62950E0DF7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/E161BF656F0149CB290354E631915A62950E0DF7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 07:46:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:9e:34:7c:03:51:f7:f0:cc:06:18:28:87:6b:91:53:0e:3d:01:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E161BF656F0149CB290354E631915A62950E0DF7 Validity Not Before: Sep 17 07:22:43 2026 GMT Not After : Sep 18 11:00:43 2026 GMT Subject: CN=040359EFF78EF5459A43E687BC0974E84E96EF7A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:cf:2b:e8:db:6e:80:4f:cf:ef:5b:aa:d8:c1: 90:ff:c8:4b:24:56:83:53:80:dc:b2:09:91:3d:c1: 80:39:91:d4:31:a4:26:67:90:db:00:bd:7f:df:49: 3f:70:2d:86:f5:3c:2f:a8:f5:c7:45:5d:d9:c9:ef: c3:25:0a:38:b6:81:9d:88:fd:af:e8:59:4d:68:d4: 3c:2e:b4:3c:cf:ff:f0:a5:15:5a:98:48:78:76:97: 4a:c6:a6:ad:7c:35:00:46:9a:09:7d:6e:e2:a8:ec: 84:44:80:f1:31:85:26:4a:b1:cb:bb:ca:08:c2:0a: c9:1d:cc:57:64:d9:74:a6:d6:ae:4e:ea:1a:ca:0d: c1:56:f8:3f:54:58:98:42:15:9e:bd:a4:b3:6e:65: 92:75:c0:19:d7:67:e0:49:f3:24:07:c9:e1:41:ae: b4:08:28:e2:d2:df:cd:04:b4:82:f7:ca:51:a4:6c: d3:c9:2d:75:5d:ec:2b:25:ad:90:a0:f4:c1:23:b2: e2:13:43:52:40:38:20:90:24:ff:a3:76:b1:03:d9: 22:34:d9:07:dd:b0:ed:38:b1:f9:01:99:15:1d:ff: 24:63:85:cf:61:5c:e6:a8:8d:f7:4b:32:08:4f:02: 66:b3:74:f5:92:8e:1b:5a:f2:74:13:a9:45:11:c8: e7:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:03:59:EF:F7:8E:F5:45:9A:43:E6:87:BC:09:74:E8:4E:96:EF:7A X509v3 Authority Key Identifier: keyid:E1:61:BF:65:6F:01:49:CB:29:03:54:E6:31:91:5A:62:95:0E:0D:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7670ae76-9594-4980-b410-491a6319ff3a/0/E161BF656F0149CB290354E631915A62950E0DF7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/E161BF656F0149CB290354E631915A62950E0DF7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7670ae76-9594-4980-b410-491a6319ff3a/0/E161BF656F0149CB290354E631915A62950E0DF7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:bb:fb:56:8c:9a:7a:68:3f:ad:88:e7:a1:23:ba:5b:01:9e: fc:85:93:59:77:cf:d9:62:fe:82:80:9e:bf:27:3c:75:b2:fe: 02:52:c6:de:85:c2:8a:0c:a7:db:05:d3:4f:e4:d7:6f:0f:f0: 93:dd:6e:0a:2d:58:f5:a6:f1:e4:23:ad:5b:53:ec:90:b1:cc: fd:8b:b5:df:d2:42:03:69:c9:09:9e:11:29:b3:50:53:27:8f: ce:6c:c2:d5:f9:a2:f2:a2:a4:10:98:3c:85:bb:39:28:17:23: 51:a3:37:99:87:f9:71:c5:9f:55:56:50:92:17:66:af:9e:ee: 06:ef:cc:9a:7d:c5:55:92:0c:5f:5a:a5:9f:4b:85:e8:40:f3: c7:b6:5d:83:86:1f:03:57:e2:9b:eb:c2:32:74:a3:67:60:c2: 33:cd:fa:56:58:e5:6d:31:01:f1:1b:d0:c0:81:3d:70:b8:21: 22:77:a1:7f:9f:69:c0:ab:32:e5:6f:8f:b3:f5:fb:b1:0f:6f: 47:e3:b8:ee:38:6c:03:05:85:58:a7:b1:d2:df:19:bb:f7:96: c7:88:dc:78:69:ea:5a:39:87:ca:7d:ac:38:86:39:f9:24:08: 24:48:f3:99:2f:94:9b:63:5a:fe:28:58:ba:56:60:63:cc:59: ba:21:93:37 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd540fANR9/DMBhgoh2uRUw49AXQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTE2MUJGNjU2RjAxNDlDQjI5MDM1NEU2MzE5MTVBNjI5 NTBFMERGNzAeFw0yNjA5MTcwNzIyNDNaFw0yNjA5MTgxMTAwNDNaMDMxMTAvBgNV BAMTKDA0MDM1OUVGRjc4RUY1NDU5QTQzRTY4N0JDMDk3NEU4NEU5NkVGN0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCIzyvo226AT8/vW6rYwZD/yEsk VoNTgNyyCZE9wYA5kdQxpCZnkNsAvX/fST9wLYb1PC+o9cdFXdnJ78MlCji2gZ2I /a/oWU1o1DwutDzP//ClFVqYSHh2l0rGpq18NQBGmgl9buKo7IREgPExhSZKscu7 ygjCCskdzFdk2XSm1q5O6hrKDcFW+D9UWJhCFZ69pLNuZZJ1wBnXZ+BJ8yQHyeFB rrQIKOLS380EtIL3ylGkbNPJLXVd7CslrZCg9MEjsuITQ1JAOCCQJP+jdrED2SI0 2QfdsO04sfkBmRUd/yRjhc9hXOaojfdLMghPAmazdPWSjhta8nQTqUURyOcXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBANZ7/eO9UWaQ+aHvAl06E6W73owHwYDVR0j BBgwFoAU4WG/ZW8BScspA1TmMZFaYpUODfcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzY3MGFlNzYtOTU5NC00OTgwLWI0MTAtNDkxYTYzMTlmZjNhLzAvRTE2MUJGNjU2 RjAxNDlDQjI5MDM1NEU2MzE5MTVBNjI5NTBFMERGNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9FMTYxQkY2NTZGMDE0OUNCMjkwMzU0RTYzMTkxNUE2Mjk1MEUw REY3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzY3MGFlNzYtOTU5NC00OTgwLWI0 MTAtNDkxYTYzMTlmZjNhLzAvRTE2MUJGNjU2RjAxNDlDQjI5MDM1NEU2MzE5MTVB NjI5NTBFMERGNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA67+1aMmnpoP62I56EjulsBnvyFk1l3z9li /oKAnr8nPHWy/gJSxt6FwooMp9sF00/k128P8JPdbgotWPWm8eQjrVtT7JCxzP2L td/SQgNpyQmeESmzUFMnj85swtX5ovKipBCYPIW7OSgXI1GjN5mH+XHFn1VWUJIX Zq+e7gbvzJp9xVWSDF9apZ9LhehA88e2XYOGHwNX4pvrwjJ0o2dgwjPN+lZY5W0x AfEb0MCBPXC4ISJ3oX+facCrMuVvj7P1+7EPb0fjuO44bAMFhVinsdLfGbv3lseI 3Hhp6lo5h8p9rDiGOfkkCCRI85kvlJtjWv4oWLpWYGPMWbohkzc= -----END CERTIFICATE-----Generated at Thu Sep 17 12:22:38 2026 by rpki-client