$ rpki-client -vvf rpki-rsync.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/8F165EEEE0E2AF2A9C1BD801E8BC788FF3890004.mft File: 8F165EEEE0E2AF2A9C1BD801E8BC788FF3890004.mft (raw, json) Hash identifier: 3lBjsvIwcq+qDgxW7ZM8g1euNgHe/IbNGe2xrvM1UCo= Subject key identifier: 0A:88:C1:1C:4B:FC:86:16:1E:81:66:27:72:2F:EF:EA:55:F3:CF:D1 Authority key identifier: 8F:16:5E:EE:E0:E2:AF:2A:9C:1B:D8:01:E8:BC:78:8F:F3:89:00:04 Certificate issuer: /CN=8F165EEEE0E2AF2A9C1BD801E8BC788FF3890004 Certificate serial: 51D7BECC77C8F8D2C3D0D447DA4253142B158088 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8F165EEEE0E2AF2A9C1BD801E8BC788FF3890004.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/8F165EEEE0E2AF2A9C1BD801E8BC788FF3890004.mft Manifest number: 42 Signing time: Sat 20 Jun 2026 02:48:07 +0000 Manifest this update: Sat 20 Jun 2026 02:43:07 +0000 Manifest next update: Sun 21 Jun 2026 05:37:07 +0000 Files and hashes: 1: 3130332e3136342e3233302e302f32332d3233203d3e20313431393133.roa (hash: iTeV8kWltCgG9BRtF/fXrU7ElxilAoEcwTni/bbcKq0=) 2: 3130332e3136342e3233302e302f32342d3234203d3e20313431393133.roa (hash: xcERPOeoIobD9EzffmgTdyjXFyN28upEkhuU+5L4nbA=) 3: 8F165EEEE0E2AF2A9C1BD801E8BC788FF3890004.crl (hash: 14voR7VmeisQ13Q5B8NC29sy94JlDMJ6GSPkTNrDFqA=) 4: 3130332e3136342e3233312e302f32342d3234203d3e20313431393133.roa (hash: 9jcglfq+TMOFbLOOgZj115GfLSh0l6ePRTI2eN2m36U=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/8F165EEEE0E2AF2A9C1BD801E8BC788FF3890004.crl rsync://rpki-rsync.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/8F165EEEE0E2AF2A9C1BD801E8BC788FF3890004.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8F165EEEE0E2AF2A9C1BD801E8BC788FF3890004.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 05:37:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:d7:be:cc:77:c8:f8:d2:c3:d0:d4:47:da:42:53:14:2b:15:80:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F165EEEE0E2AF2A9C1BD801E8BC788FF3890004 Validity Not Before: Jun 20 02:43:07 2026 GMT Not After : Jun 21 05:37:07 2026 GMT Subject: CN=0A88C11C4BFC86161E816627722FEFEA55F3CFD1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:6a:2b:a2:50:ab:c5:15:7d:d0:46:a4:2c:d8: 94:32:8a:b4:ff:53:cf:d1:5c:53:db:4d:3d:ee:90: 61:b2:23:91:2b:1a:68:7f:d9:27:b8:a6:e1:cc:27: b8:f5:e3:96:fc:76:aa:e3:15:b3:fa:e0:39:50:78: f8:d8:66:5d:1c:8e:45:4b:f3:c3:de:98:c8:7e:0c: 08:38:b4:0c:8d:67:86:5b:07:e3:74:35:f8:5d:9d: 04:2b:c7:95:83:73:66:94:a7:b0:63:b0:d7:88:84: c2:18:91:42:93:90:fb:6a:dd:f6:2d:81:ea:fa:3b: ba:af:75:e0:97:83:6f:3e:3d:f2:38:57:48:2e:24: 36:07:b0:b8:1c:58:0e:ab:77:a9:d9:45:0d:60:88: 96:82:36:80:5c:9e:e5:c2:95:b2:a6:07:06:b7:ba: da:3f:1f:81:c9:7f:03:0c:81:b9:a3:f1:87:c1:b1: 42:87:8a:62:2d:13:3e:b0:8a:ed:40:57:92:30:28: 44:f0:a7:59:46:b0:48:54:82:51:16:d0:2e:d4:a1: a0:6a:e7:65:7d:8b:19:c8:43:ac:07:7e:97:61:41: c1:ea:eb:73:46:2e:8b:5b:b5:33:21:01:c6:aa:75: fd:51:1b:c0:1a:e0:af:45:e2:e5:f6:3b:91:63:9b: 01:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:88:C1:1C:4B:FC:86:16:1E:81:66:27:72:2F:EF:EA:55:F3:CF:D1 X509v3 Authority Key Identifier: keyid:8F:16:5E:EE:E0:E2:AF:2A:9C:1B:D8:01:E8:BC:78:8F:F3:89:00:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/8F165EEEE0E2AF2A9C1BD801E8BC788FF3890004.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8F165EEEE0E2AF2A9C1BD801E8BC788FF3890004.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/8F165EEEE0E2AF2A9C1BD801E8BC788FF3890004.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:32:24:61:4a:89:27:e7:51:21:fb:96:64:51:96:7a:cd:fa: 5e:4a:f9:be:e9:07:99:88:02:7f:ed:4d:04:f1:aa:eb:23:ad: 54:44:88:1f:19:fa:d5:f0:90:25:e2:ca:ff:d1:23:9c:54:5e: 61:12:8e:bc:96:ca:1c:a6:5e:55:aa:d4:f1:9e:cb:fa:e3:ce: b8:de:c5:c5:a5:0e:a3:cd:a6:be:6b:43:ff:2c:30:2a:9a:3e: 98:b6:c7:26:94:04:79:64:a4:08:3f:d7:54:cd:43:bb:d5:f8: be:16:ff:20:cf:fd:90:df:34:36:d4:72:55:09:b6:8c:15:8f: bd:7a:fa:7b:0a:5d:37:9c:d2:aa:44:4a:ff:53:04:8f:b8:0a: 56:d6:39:f4:6d:d1:b2:ad:b5:b1:e4:52:ca:32:af:d7:2a:1d: a3:70:a5:7c:d0:8d:6c:09:13:04:a3:27:2a:e8:52:c6:48:63: a7:38:ab:f6:f5:37:21:57:8b:f9:84:99:c3:fd:24:d7:2b:b6: dd:cb:6d:3a:78:50:5e:bf:be:60:1e:ca:0d:1b:35:5f:77:4f: 46:45:f9:62:69:50:ed:19:2e:37:83:7e:95:f9:9e:a6:fd:09: df:7a:9f:7e:07:85:71:3e:30:d6:4b:c2:d5:4c:b4:68:58:8a: 73:09:16:b0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUde+zHfI+NLD0NRH2kJTFCsVgIgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEYxNjVFRUVFMEUyQUYyQTlDMUJEODAxRThCQzc4OEZG Mzg5MDAwNDAeFw0yNjA2MjAwMjQzMDdaFw0yNjA2MjEwNTM3MDdaMDMxMTAvBgNV BAMTKDBBODhDMTFDNEJGQzg2MTYxRTgxNjYyNzcyMkZFRkVBNTVGM0NGRDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7aiuiUKvFFX3QRqQs2JQyirT/ U8/RXFPbTT3ukGGyI5ErGmh/2Se4puHMJ7j145b8dqrjFbP64DlQePjYZl0cjkVL 88PemMh+DAg4tAyNZ4ZbB+N0NfhdnQQrx5WDc2aUp7BjsNeIhMIYkUKTkPtq3fYt ger6O7qvdeCXg28+PfI4V0guJDYHsLgcWA6rd6nZRQ1giJaCNoBcnuXClbKmBwa3 uto/H4HJfwMMgbmj8YfBsUKHimItEz6wiu1AV5IwKETwp1lGsEhUglEW0C7UoaBq 52V9ixnIQ6wHfpdhQcHq63NGLotbtTMhAcaqdf1RG8Aa4K9F4uX2O5FjmwEfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCojBHEv8hhYegWYnci/v6lXzz9EwHwYDVR0j BBgwFoAUjxZe7uDiryqcG9gB6Lx4j/OJAAQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWExNzk0YWEtMzI5MS00ODNiLWFjMGItN2JjN2IxYTY3Y2M2LzAvOEYxNjVFRUVF MEUyQUYyQTlDMUJEODAxRThCQzc4OEZGMzg5MDAwNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84RjE2NUVFRUUwRTJBRjJBOUMxQkQ4MDFFOEJDNzg4RkYzODkw MDA0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWExNzk0YWEtMzI5MS00ODNiLWFj MGItN2JjN2IxYTY3Y2M2LzAvOEYxNjVFRUVFMEUyQUYyQTlDMUJEODAxRThCQzc4 OEZGMzg5MDAwNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACgyJGFKiSfnUSH7lmRRlnrN+l5K+b7pB5mI An/tTQTxqusjrVREiB8Z+tXwkCXiyv/RI5xUXmESjryWyhymXlWq1PGey/rjzrje xcWlDqPNpr5rQ/8sMCqaPpi2xyaUBHlkpAg/11TNQ7vV+L4W/yDP/ZDfNDbUclUJ towVj716+nsKXTec0qpESv9TBI+4ClbWOfRt0bKttbHkUsoyr9cqHaNwpXzQjWwJ EwSjJyroUsZIY6c4q/b1NyFXi/mEmcP9JNcrtt3LbTp4UF6/vmAeyg0bNV93T0ZF +WJpUO0ZLjeDfpX5nqb9Cd96n34HhXE+MNZLwtVMtGhYinMJFrA= -----END CERTIFICATE-----Generated at Sat Jun 20 08:53:39 2026 by rpki-client