$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1ce8da9c-bdbd-4908-ba92-d90fea9c8f05/0/16E36A76C68AD7EF73B872D0A244597711CEC92B.mft File: 16E36A76C68AD7EF73B872D0A244597711CEC92B.mft (raw, json) Hash identifier: TR+bEpnmBhLVIOGsEENznuMLQlk6vYIEVpiBvxPjwmU= Subject key identifier: 17:DA:63:8E:57:DB:A9:F2:F8:30:A8:0E:EE:0D:47:4E:1F:2A:77:AB Authority key identifier: 16:E3:6A:76:C6:8A:D7:EF:73:B8:72:D0:A2:44:59:77:11:CE:C9:2B Certificate issuer: /CN=16E36A76C68AD7EF73B872D0A244597711CEC92B Certificate serial: 7FA556BF39D8C14527F691FEAF61653BA56110E9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/16E36A76C68AD7EF73B872D0A244597711CEC92B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1ce8da9c-bdbd-4908-ba92-d90fea9c8f05/0/16E36A76C68AD7EF73B872D0A244597711CEC92B.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 09:17:36 +0000 Manifest this update: Wed 23 Sep 2026 09:12:36 +0000 Manifest next update: Thu 24 Sep 2026 11:20:36 +0000 Files and hashes: 1: 3130332e34392e35312e302f32342d3234203d3e20313530343830.roa (hash: AGIMZGexipjyvpy+LmJUJY6hAht+8SMw5E+al1hg6Ds=) 2: 3130332e34392e35302e302f32342d3234203d3e20313530343830.roa (hash: d1VIPUB5246bc9b42k+QQyjwKQyjJBedF26BcXOCp3E=) 3: 16E36A76C68AD7EF73B872D0A244597711CEC92B.crl (hash: AQT5EKvYPfKIfMqiRfw3ANo/9rc0N246oyUyqKsVazc=) 4: 3130332e34392e35302e302f32332d3234203d3e20313530343830.roa (hash: EANVJlxEg4YVe0voA5UkBVDWr1/ZEx1MsPgsXOFauYo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1ce8da9c-bdbd-4908-ba92-d90fea9c8f05/0/16E36A76C68AD7EF73B872D0A244597711CEC92B.crl rsync://rpki-rsync.idnic.net/repo/1ce8da9c-bdbd-4908-ba92-d90fea9c8f05/0/16E36A76C68AD7EF73B872D0A244597711CEC92B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/16E36A76C68AD7EF73B872D0A244597711CEC92B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 11:20:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:a5:56:bf:39:d8:c1:45:27:f6:91:fe:af:61:65:3b:a5:61:10:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16E36A76C68AD7EF73B872D0A244597711CEC92B Validity Not Before: Sep 23 09:12:36 2026 GMT Not After : Sep 24 11:20:36 2026 GMT Subject: CN=17DA638E57DBA9F2F830A80EEE0D474E1F2A77AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:94:8f:e8:5e:ad:bc:41:21:1c:04:f5:bf:5f: 8c:03:0b:61:45:99:b0:4b:54:c5:f0:db:b5:4a:9b: 68:d6:66:28:38:f4:55:79:a1:c7:e3:c5:a7:a1:92: fb:97:da:67:8f:13:99:f2:dd:09:0f:b6:a1:db:4e: ee:e0:43:d3:21:36:04:50:18:f8:b5:44:dc:5c:ee: 94:7f:59:4c:bc:e7:75:34:fe:f6:64:24:1f:d4:71: f3:af:f0:37:ad:41:cf:a5:cb:5f:ec:9a:c6:69:9f: 48:7e:ab:0a:19:d3:35:4d:f6:aa:ad:67:f7:d8:14: da:bd:7f:8c:c5:6a:c1:b9:9e:e0:19:6d:e8:e7:4b: 74:8f:fc:b0:89:26:32:30:a5:a5:23:c5:e1:3a:9d: c8:cf:9a:73:6d:27:3a:a0:10:ca:97:15:40:dc:08: 69:5f:b3:ca:45:4c:7e:28:04:e6:59:a1:7a:8e:df: ba:c2:c4:ba:d8:42:76:14:c2:3d:62:84:13:5e:f8: 13:67:b1:e8:79:11:66:f8:52:e5:67:a8:dd:9c:ba: 2a:87:b2:31:9e:2d:7b:c1:f0:82:63:0a:aa:01:c3: 09:fb:96:ef:34:d3:fb:d1:ea:c2:6c:68:5a:66:71: 5b:09:f4:50:e8:3d:36:a7:a8:0f:c8:82:57:34:be: 4e:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:DA:63:8E:57:DB:A9:F2:F8:30:A8:0E:EE:0D:47:4E:1F:2A:77:AB X509v3 Authority Key Identifier: keyid:16:E3:6A:76:C6:8A:D7:EF:73:B8:72:D0:A2:44:59:77:11:CE:C9:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1ce8da9c-bdbd-4908-ba92-d90fea9c8f05/0/16E36A76C68AD7EF73B872D0A244597711CEC92B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/16E36A76C68AD7EF73B872D0A244597711CEC92B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1ce8da9c-bdbd-4908-ba92-d90fea9c8f05/0/16E36A76C68AD7EF73B872D0A244597711CEC92B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:b8:39:7a:a3:94:34:be:ea:64:02:d6:37:09:3b:5c:c9:70: 53:50:07:64:c1:e5:0d:c2:b9:ae:ad:4d:11:69:6a:6b:03:45: 65:4b:ac:da:5b:bb:20:76:ab:5c:a7:a2:1f:4c:81:94:54:d5: b9:4e:73:6b:a6:8c:5c:a3:58:23:fb:fe:2b:59:ff:f1:f6:4a: 9e:a4:e1:7e:a2:b8:52:07:28:65:5d:65:e2:81:10:ee:2c:d3: 06:78:c4:e9:27:bf:60:62:f3:93:d2:3e:30:ec:c5:20:07:98: 5d:2c:fc:36:3a:46:9b:58:7a:d5:74:73:02:b6:35:45:98:65: 43:f1:7e:d8:42:82:96:12:99:7a:4d:8b:57:48:ff:cc:3b:76: 66:11:20:25:dc:70:40:ea:6b:5c:81:8f:55:c7:82:34:8d:92: 78:3f:46:27:fe:06:ce:1d:c0:fd:d0:a8:12:bc:a0:2b:4a:0c: 98:18:e2:90:e1:48:1d:c5:de:ac:db:f5:ae:46:65:ab:f2:44: 31:3a:48:4c:62:1e:c4:ae:a7:31:64:59:97:ba:2c:38:bc:9f: 3b:82:10:e8:ff:c5:5b:c9:38:d1:33:f0:1a:00:fa:3d:c3:ed: 40:8d:e8:29:c0:fe:47:fc:e5:d7:7a:a2:82:ab:34:42:54:f2: 46:6f:71:d3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf6VWvznYwUUn9pH+r2FlO6VhEOkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTZFMzZBNzZDNjhBRDdFRjczQjg3MkQwQTI0NDU5Nzcx MUNFQzkyQjAeFw0yNjA5MjMwOTEyMzZaFw0yNjA5MjQxMTIwMzZaMDMxMTAvBgNV BAMTKDE3REE2MzhFNTdEQkE5RjJGODMwQTgwRUVFMEQ0NzRFMUYyQTc3QUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCulI/oXq28QSEcBPW/X4wDC2FF mbBLVMXw27VKm2jWZig49FV5ocfjxaehkvuX2mePE5ny3QkPtqHbTu7gQ9MhNgRQ GPi1RNxc7pR/WUy853U0/vZkJB/UcfOv8DetQc+ly1/smsZpn0h+qwoZ0zVN9qqt Z/fYFNq9f4zFasG5nuAZbejnS3SP/LCJJjIwpaUjxeE6ncjPmnNtJzqgEMqXFUDc CGlfs8pFTH4oBOZZoXqO37rCxLrYQnYUwj1ihBNe+BNnseh5EWb4UuVnqN2cuiqH sjGeLXvB8IJjCqoBwwn7lu800/vR6sJsaFpmcVsJ9FDoPTanqA/Iglc0vk7/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUF9pjjlfbqfL4MKgO7g1HTh8qd6swHwYDVR0j BBgwFoAUFuNqdsaK1+9zuHLQokRZdxHOySswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWNlOGRhOWMtYmRiZC00OTA4LWJhOTItZDkwZmVhOWM4ZjA1LzAvMTZFMzZBNzZD NjhBRDdFRjczQjg3MkQwQTI0NDU5NzcxMUNFQzkyQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xNkUzNkE3NkM2OEFEN0VGNzNCODcyRDBBMjQ0NTk3NzExQ0VD OTJCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWNlOGRhOWMtYmRiZC00OTA4LWJh OTItZDkwZmVhOWM4ZjA1LzAvMTZFMzZBNzZDNjhBRDdFRjczQjg3MkQwQTI0NDU5 NzcxMUNFQzkyQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF64OXqjlDS+6mQC1jcJO1zJcFNQB2TB5Q3C ua6tTRFpamsDRWVLrNpbuyB2q1ynoh9MgZRU1blOc2umjFyjWCP7/itZ//H2Sp6k 4X6iuFIHKGVdZeKBEO4s0wZ4xOknv2Bi85PSPjDsxSAHmF0s/DY6RptYetV0cwK2 NUWYZUPxfthCgpYSmXpNi1dI/8w7dmYRICXccEDqa1yBj1XHgjSNkng/Rif+Bs4d wP3QqBK8oCtKDJgY4pDhSB3F3qzb9a5GZavyRDE6SExiHsSupzFkWZe6LDi8nzuC EOj/xVvJONEz8BoA+j3D7UCN6CnA/kf85dd6ooKrNEJU8kZvcdM= -----END CERTIFICATE-----Generated at Thu Sep 24 03:51:50 2026 by rpki-client