$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ea57613b-8b04-4c45-bedf-4ab061d4dcf9/0/163FCF7902CF93C079C25A5BB950177736E3A53E.mft File: 163FCF7902CF93C079C25A5BB950177736E3A53E.mft (raw, json) Hash identifier: 00kJUEaQOXNltCVX7V0jV1lMOOm25ebM0O8Bm9wgHs8= Subject key identifier: 1F:81:74:8E:15:21:44:4F:B4:34:1A:1A:AA:5E:83:35:96:76:CC:F0 Authority key identifier: 16:3F:CF:79:02:CF:93:C0:79:C2:5A:5B:B9:50:17:77:36:E3:A5:3E Certificate issuer: /CN=163FCF7902CF93C079C25A5BB950177736E3A53E Certificate serial: 7DDB80A834AF17E5B22A086A5AEB0F11037DE299 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/163FCF7902CF93C079C25A5BB950177736E3A53E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ea57613b-8b04-4c45-bedf-4ab061d4dcf9/0/163FCF7902CF93C079C25A5BB950177736E3A53E.mft Manifest number: BA Signing time: Thu 17 Sep 2026 06:16:12 +0000 Manifest this update: Thu 17 Sep 2026 06:11:12 +0000 Manifest next update: Fri 18 Sep 2026 08:56:12 +0000 Files and hashes: 1: 3130332e38352e35372e302f32342d3234203d3e20313530353530.roa (hash: W7gmKmZboqX2QA7q8U+p4B9nIs2a1qUtxZ1nMh6XFbg=) 2: 3130332e38352e35362e302f32342d3234203d3e20313530353530.roa (hash: 6RKcmzfjeDH4g7wyr++N6VgeRBt/pDFie/Fnes4qIjU=) 3: 163FCF7902CF93C079C25A5BB950177736E3A53E.crl (hash: QKhknQ1Cf16SmH1fPYegiekbD0lVv8Dd77D+pd23yMQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ea57613b-8b04-4c45-bedf-4ab061d4dcf9/0/163FCF7902CF93C079C25A5BB950177736E3A53E.crl rsync://rpki-rsync.idnic.net/repo/ea57613b-8b04-4c45-bedf-4ab061d4dcf9/0/163FCF7902CF93C079C25A5BB950177736E3A53E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/163FCF7902CF93C079C25A5BB950177736E3A53E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 08:56:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:db:80:a8:34:af:17:e5:b2:2a:08:6a:5a:eb:0f:11:03:7d:e2:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=163FCF7902CF93C079C25A5BB950177736E3A53E Validity Not Before: Sep 17 06:11:12 2026 GMT Not After : Sep 18 08:56:12 2026 GMT Subject: CN=1F81748E1521444FB4341A1AAA5E83359676CCF0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ca:af:cf:d3:03:c9:2a:36:aa:6e:46:58:21: 1b:4f:82:eb:3e:04:3a:c9:41:01:89:8f:2d:02:d8: 32:9c:9e:77:29:e6:13:7b:b4:4d:71:65:a9:6d:4c: 7a:7b:7e:fb:2b:e9:9a:bf:79:78:f7:80:2b:5b:8b: 90:aa:2c:36:1a:8d:74:b0:57:ca:de:67:59:db:2a: fd:3d:f4:a7:9a:cb:1b:23:cc:76:67:bf:4a:5b:68: 89:3e:f8:28:ad:a0:ed:d9:e3:e5:40:84:8e:5a:47: c3:26:e2:69:12:75:05:09:fe:7d:9a:c6:e9:1a:80: 43:79:93:12:a6:f5:53:93:ae:ac:bb:ea:5f:c0:4d: b0:b0:a0:64:7c:e6:f8:ad:1a:75:58:da:31:c4:d8: fd:06:33:d0:14:f8:9b:b7:85:eb:30:a4:4e:aa:6f: 9a:57:b8:62:ce:15:f2:1d:7e:7d:5d:25:b0:cb:80: df:b2:6c:c1:3f:9b:2a:ee:c9:62:e1:85:e7:63:8f: c8:eb:72:25:46:e0:5c:68:f6:b1:55:5a:1d:04:1f: bd:98:6a:12:d1:0e:a5:6a:5b:72:f4:6d:3a:ea:76: d2:32:89:2e:70:ad:17:67:7e:bb:bf:5b:fb:b7:d0: 20:e9:7e:6b:76:c7:04:82:2e:97:ef:ca:fc:59:99: 22:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:81:74:8E:15:21:44:4F:B4:34:1A:1A:AA:5E:83:35:96:76:CC:F0 X509v3 Authority Key Identifier: keyid:16:3F:CF:79:02:CF:93:C0:79:C2:5A:5B:B9:50:17:77:36:E3:A5:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ea57613b-8b04-4c45-bedf-4ab061d4dcf9/0/163FCF7902CF93C079C25A5BB950177736E3A53E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/163FCF7902CF93C079C25A5BB950177736E3A53E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ea57613b-8b04-4c45-bedf-4ab061d4dcf9/0/163FCF7902CF93C079C25A5BB950177736E3A53E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:2a:93:82:57:e0:5e:aa:c0:cb:fe:c5:51:ce:db:ea:97:21: d0:cd:56:bb:d5:75:b2:d0:12:86:e6:62:e4:56:d0:e5:2b:4c: f8:55:cd:4c:c1:70:5e:f2:a0:ea:14:f3:08:f8:c6:00:d3:bd: 22:74:b5:78:71:69:d5:42:70:64:4f:3b:88:d9:a6:fd:d7:bc: 49:9f:30:f4:68:d4:cf:00:c5:44:b0:eb:d6:e0:8d:58:9c:61: f3:76:ad:62:7d:0a:87:ed:c0:90:8c:38:3c:85:e7:11:f8:aa: 22:bc:82:17:72:ab:75:04:76:d7:c5:07:e2:b9:d3:1d:17:9b: ca:c5:b3:68:4a:fc:3c:2d:b4:32:13:5a:e9:2f:02:43:af:33: 21:19:de:4f:71:62:61:98:7d:57:ef:03:a3:42:63:21:41:6c: ba:b8:a9:43:a2:2b:3d:a3:f9:75:65:0f:03:ac:c4:6f:0a:aa: f6:db:c6:3f:81:bf:66:87:ab:b2:c3:59:4a:78:09:01:a9:8d: 00:8b:9f:6a:b2:90:3f:3d:53:b1:02:82:82:68:f4:f7:3d:01: 85:0b:1f:e6:63:7e:91:ae:6e:63:33:54:8e:a6:94:b1:43:cf: bc:6e:a4:dd:6c:3e:b4:d5:70:96:8a:2d:0c:4b:ee:f1:31:1d: e8:76:c0:c8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfduAqDSvF+WyKghqWusPEQN94pkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTYzRkNGNzkwMkNGOTNDMDc5QzI1QTVCQjk1MDE3Nzcz NkUzQTUzRTAeFw0yNjA5MTcwNjExMTJaFw0yNjA5MTgwODU2MTJaMDMxMTAvBgNV BAMTKDFGODE3NDhFMTUyMTQ0NEZCNDM0MUExQUFBNUU4MzM1OTY3NkNDRjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqyq/P0wPJKjaqbkZYIRtPgus+ BDrJQQGJjy0C2DKcnncp5hN7tE1xZaltTHp7fvsr6Zq/eXj3gCtbi5CqLDYajXSw V8reZ1nbKv099KeayxsjzHZnv0pbaIk++CitoO3Z4+VAhI5aR8Mm4mkSdQUJ/n2a xukagEN5kxKm9VOTrqy76l/ATbCwoGR85vitGnVY2jHE2P0GM9AU+Ju3heswpE6q b5pXuGLOFfIdfn1dJbDLgN+ybME/myruyWLhhedjj8jrciVG4Fxo9rFVWh0EH72Y ahLRDqVqW3L0bTrqdtIyiS5wrRdnfru/W/u30CDpfmt2xwSCLpfvyvxZmSKpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUH4F0jhUhRE+0NBoaql6DNZZ2zPAwHwYDVR0j BBgwFoAUFj/PeQLPk8B5wlpbuVAXdzbjpT4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWE1NzYxM2ItOGIwNC00YzQ1LWJlZGYtNGFiMDYxZDRkY2Y5LzAvMTYzRkNGNzkw MkNGOTNDMDc5QzI1QTVCQjk1MDE3NzczNkUzQTUzRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xNjNGQ0Y3OTAyQ0Y5M0MwNzlDMjVBNUJCOTUwMTc3NzM2RTNB NTNFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWE1NzYxM2ItOGIwNC00YzQ1LWJl ZGYtNGFiMDYxZDRkY2Y5LzAvMTYzRkNGNzkwMkNGOTNDMDc5QzI1QTVCQjk1MDE3 NzczNkUzQTUzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGIqk4JX4F6qwMv+xVHO2+qXIdDNVrvVdbLQ EobmYuRW0OUrTPhVzUzBcF7yoOoU8wj4xgDTvSJ0tXhxadVCcGRPO4jZpv3XvEmf MPRo1M8AxUSw69bgjVicYfN2rWJ9CoftwJCMODyF5xH4qiK8ghdyq3UEdtfFB+K5 0x0Xm8rFs2hK/DwttDITWukvAkOvMyEZ3k9xYmGYfVfvA6NCYyFBbLq4qUOiKz2j +XVlDwOsxG8Kqvbbxj+Bv2aHq7LDWUp4CQGpjQCLn2qykD89U7ECgoJo9Pc9AYUL H+ZjfpGubmMzVI6mlLFDz7xupN1sPrTVcJaKLQxL7vExHeh2wMg= -----END CERTIFICATE-----Generated at Thu Sep 17 14:43:53 2026 by rpki-client