$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/8F165EEEE0E2AF2A9C1BD801E8BC788FF3890004.mft File: 8F165EEEE0E2AF2A9C1BD801E8BC788FF3890004.mft (raw, json) Hash identifier: svFHcGK8S1R3+6jr3SdelLk72UFt+7vhpOFjFoNO/x0= Subject key identifier: B7:29:E5:BE:01:5A:84:BF:D0:25:EC:D0:A1:A2:C8:FD:75:0B:C0:B0 Authority key identifier: 8F:16:5E:EE:E0:E2:AF:2A:9C:1B:D8:01:E8:BC:78:8F:F3:89:00:04 Certificate issuer: /CN=8F165EEEE0E2AF2A9C1BD801E8BC788FF3890004 Certificate serial: 257736B4E709BBCE139D883355EDCCC86F60687F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8F165EEEE0E2AF2A9C1BD801E8BC788FF3890004.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/8F165EEEE0E2AF2A9C1BD801E8BC788FF3890004.mft Manifest number: ED Signing time: Sun 25 Oct 2026 10:24:36 +0000 Manifest this update: Sun 25 Oct 2026 10:19:36 +0000 Manifest next update: Mon 26 Oct 2026 10:47:36 +0000 Files and hashes: 1: 3130332e3136342e3233302e302f32332d3233203d3e20313431393133.roa (hash: iTeV8kWltCgG9BRtF/fXrU7ElxilAoEcwTni/bbcKq0=) 2: 8F165EEEE0E2AF2A9C1BD801E8BC788FF3890004.crl (hash: hbupX++vuVUr2qu8S/jmLVLSKcmQGB/yJQpo4Q4nDps=) 3: 3130332e3136342e3233302e302f32342d3234203d3e20313431393133.roa (hash: xcERPOeoIobD9EzffmgTdyjXFyN28upEkhuU+5L4nbA=) 4: 3130332e3136342e3233312e302f32342d3234203d3e20313431393133.roa (hash: 9jcglfq+TMOFbLOOgZj115GfLSh0l6ePRTI2eN2m36U=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/8F165EEEE0E2AF2A9C1BD801E8BC788FF3890004.crl rsync://rpki-rsync.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/8F165EEEE0E2AF2A9C1BD801E8BC788FF3890004.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8F165EEEE0E2AF2A9C1BD801E8BC788FF3890004.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 10:47:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:77:36:b4:e7:09:bb:ce:13:9d:88:33:55:ed:cc:c8:6f:60:68:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F165EEEE0E2AF2A9C1BD801E8BC788FF3890004 Validity Not Before: Oct 25 10:19:36 2026 GMT Not After : Oct 26 10:47:36 2026 GMT Subject: CN=B729E5BE015A84BFD025ECD0A1A2C8FD750BC0B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:69:f9:92:82:f5:35:3f:87:8c:d4:1c:eb:9b: 1f:ad:90:d3:6d:10:5a:14:bc:98:4b:e5:0e:d3:43: 2d:5b:b1:04:1d:5d:3a:3d:c7:0e:f7:74:be:8f:5f: 24:74:3b:14:08:ec:2a:84:64:9b:21:24:dd:4d:5d: 15:7c:a4:aa:31:33:03:ba:e9:aa:52:26:e7:ac:fb: b2:58:9a:24:8e:11:90:df:d9:10:f3:22:7c:15:b0: 4f:35:7f:b7:88:7e:6f:d4:db:15:61:ff:0f:d7:1b: 18:cc:62:99:20:d1:15:d7:fd:1d:aa:45:c6:b1:6d: 6b:87:b0:c5:80:4b:5e:89:63:1c:91:2d:05:25:7f: bb:cd:8b:4a:94:e9:a3:48:43:97:26:a7:08:d8:fa: f9:1d:8b:0c:92:ab:c5:45:2c:77:e6:ca:17:2f:fd: af:24:94:e5:bc:79:c8:99:00:f3:0b:eb:cf:0e:ec: b1:4a:c0:51:15:de:44:c2:f0:a1:89:7b:d7:f5:ce: ec:94:50:bc:d2:08:a5:17:a8:56:79:99:b1:d8:73: 29:2d:e8:c0:ba:4d:33:a8:86:09:24:81:09:ae:be: 46:ac:1e:23:6c:be:76:82:24:13:68:bb:62:be:60: f8:d0:3c:42:a4:a1:96:9d:95:c8:f8:aa:68:69:1b: 76:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:29:E5:BE:01:5A:84:BF:D0:25:EC:D0:A1:A2:C8:FD:75:0B:C0:B0 X509v3 Authority Key Identifier: keyid:8F:16:5E:EE:E0:E2:AF:2A:9C:1B:D8:01:E8:BC:78:8F:F3:89:00:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/8F165EEEE0E2AF2A9C1BD801E8BC788FF3890004.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8F165EEEE0E2AF2A9C1BD801E8BC788FF3890004.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/8F165EEEE0E2AF2A9C1BD801E8BC788FF3890004.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:c9:fb:57:a6:dc:dd:a2:71:c7:a8:48:ab:fd:31:d3:55:b4: 1d:90:ae:13:95:f5:a9:7e:c2:0e:12:0d:66:b8:92:a4:b1:38: 00:4d:67:e8:63:b1:9b:4f:b3:53:71:82:a9:4b:2c:54:17:c2: f7:a6:33:98:1d:ec:8a:7f:0d:b7:9a:40:cd:36:d6:9e:fc:28: d5:01:b6:46:4f:08:4f:09:08:ec:fc:ce:f8:56:35:1c:1e:20: 5c:f1:7c:c2:a4:ad:11:67:1d:1d:75:16:af:6f:49:17:22:df: 9e:91:23:7b:d5:da:79:9c:bf:60:79:5f:7c:3d:40:61:e0:f9: 23:9f:54:b7:d6:3d:aa:21:b4:b4:c5:8c:a5:43:b7:f1:01:2b: f3:24:f0:87:0f:d0:50:cf:bf:74:b8:02:cf:dc:ae:3d:08:33: d8:8f:dd:bb:c9:20:a7:39:5f:a9:da:6d:e5:c9:53:36:ca:3e: 75:77:6a:59:06:88:fb:84:fb:b3:12:46:11:ef:7e:31:7b:cb: d0:be:ae:0c:5e:52:cb:8f:fb:13:e1:ec:01:8a:20:88:2a:96: 38:79:8e:6f:8d:e1:f5:51:c4:11:65:1c:8f:e5:6f:22:61:fd: f8:bb:ad:e9:6f:3e:63:68:9e:c5:17:77:77:62:86:d1:43:ac: e8:fd:e9:60 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJXc2tOcJu84TnYgzVe3MyG9gaH8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEYxNjVFRUVFMEUyQUYyQTlDMUJEODAxRThCQzc4OEZG Mzg5MDAwNDAeFw0yNjEwMjUxMDE5MzZaFw0yNjEwMjYxMDQ3MzZaMDMxMTAvBgNV BAMTKEI3MjlFNUJFMDE1QTg0QkZEMDI1RUNEMEExQTJDOEZENzUwQkMwQjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWafmSgvU1P4eM1Bzrmx+tkNNt EFoUvJhL5Q7TQy1bsQQdXTo9xw73dL6PXyR0OxQI7CqEZJshJN1NXRV8pKoxMwO6 6apSJues+7JYmiSOEZDf2RDzInwVsE81f7eIfm/U2xVh/w/XGxjMYpkg0RXX/R2q RcaxbWuHsMWAS16JYxyRLQUlf7vNi0qU6aNIQ5cmpwjY+vkdiwySq8VFLHfmyhcv /a8klOW8eciZAPML688O7LFKwFEV3kTC8KGJe9f1zuyUULzSCKUXqFZ5mbHYcykt 6MC6TTOohgkkgQmuvkasHiNsvnaCJBNou2K+YPjQPEKkoZadlcj4qmhpG3bjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtynlvgFahL/QJezQoaLI/XULwLAwHwYDVR0j BBgwFoAUjxZe7uDiryqcG9gB6Lx4j/OJAAQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWExNzk0YWEtMzI5MS00ODNiLWFjMGItN2JjN2IxYTY3Y2M2LzAvOEYxNjVFRUVF MEUyQUYyQTlDMUJEODAxRThCQzc4OEZGMzg5MDAwNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84RjE2NUVFRUUwRTJBRjJBOUMxQkQ4MDFFOEJDNzg4RkYzODkw MDA0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWExNzk0YWEtMzI5MS00ODNiLWFj MGItN2JjN2IxYTY3Y2M2LzAvOEYxNjVFRUVFMEUyQUYyQTlDMUJEODAxRThCQzc4 OEZGMzg5MDAwNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG/J+1em3N2icceoSKv9MdNVtB2QrhOV9al+ wg4SDWa4kqSxOABNZ+hjsZtPs1NxgqlLLFQXwvemM5gd7Ip/DbeaQM021p78KNUB tkZPCE8JCOz8zvhWNRweIFzxfMKkrRFnHR11Fq9vSRci356RI3vV2nmcv2B5X3w9 QGHg+SOfVLfWPaohtLTFjKVDt/EBK/Mk8IcP0FDPv3S4As/crj0IM9iP3bvJIKc5 X6nabeXJUzbKPnV3alkGiPuE+7MSRhHvfjF7y9C+rgxeUsuP+xPh7AGKIIgqljh5 jm+N4fVRxBFlHI/lbyJh/fi7relvPmNonsUXd3dihtFDrOj96WA= -----END CERTIFICATE-----Generated at Sun Oct 25 14:26:47 2026 by rpki-client