$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/16FC1DF2D807E338985DE30932EA34E250228796.mft File: 16FC1DF2D807E338985DE30932EA34E250228796.mft (raw, json) Hash identifier: KuOa/XmjvmtdurQPRDzW5wlHhXtvbQP/YFqrqqQemlQ= Subject key identifier: 23:36:FB:0E:6E:47:EB:46:76:30:1F:AB:1A:91:57:07:20:AB:F5:4C Authority key identifier: 16:FC:1D:F2:D8:07:E3:38:98:5D:E3:09:32:EA:34:E2:50:22:87:96 Certificate issuer: /CN=16FC1DF2D807E338985DE30932EA34E250228796 Certificate serial: 5185245FF9D8FE766932D8032E8D171E361276CD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/16FC1DF2D807E338985DE30932EA34E250228796.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/16FC1DF2D807E338985DE30932EA34E250228796.mft Manifest number: C3 Signing time: Fri 25 Sep 2026 02:33:29 +0000 Manifest this update: Fri 25 Sep 2026 02:28:29 +0000 Manifest next update: Sat 26 Sep 2026 03:18:29 +0000 Files and hashes: 1: 323430333a343334303a3a2f33322d3332203d3e20313337333738.roa (hash: 1dE/zpXNqMfI1ilfUn5DrrCSaXBhuo+1IUrzkuKY22o=) 2: 3130332e3131392e3131392e302f32342d3234203d3e20313337333738.roa (hash: iWp9zL2tSRzcXXiV+WVgdnT86pBdN5E8UOgytY/+pL4=) 3: 3130332e3131392e3131382e302f32342d3234203d3e20313337333738.roa (hash: 0FBu/rjRCHpSQhidXvQmco2Gd+NRZ/I75lgQ9c+yrhs=) 4: 3130332e3131392e3131372e302f32342d3234203d3e20313337333738.roa (hash: roqA5lD4sFTDR1g7UxqG9+ZjfyukoDRdAX9XNlxiMJE=) 5: 16FC1DF2D807E338985DE30932EA34E250228796.crl (hash: sR7oDQ5OjRxG29zd278zr5mn+Kqh+47CdNQMNrUhw4U=) 6: 3130332e3131392e3131362e302f32342d3234203d3e20313337333738.roa (hash: A7xyFA4qpVRKeavzBnm+Cjv8gBWwy1p/6K95VuLQBjM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/16FC1DF2D807E338985DE30932EA34E250228796.crl rsync://rpki-rsync.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/16FC1DF2D807E338985DE30932EA34E250228796.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/16FC1DF2D807E338985DE30932EA34E250228796.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 03:18:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:85:24:5f:f9:d8:fe:76:69:32:d8:03:2e:8d:17:1e:36:12:76:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16FC1DF2D807E338985DE30932EA34E250228796 Validity Not Before: Sep 25 02:28:29 2026 GMT Not After : Sep 26 03:18:29 2026 GMT Subject: CN=2336FB0E6E47EB4676301FAB1A91570720ABF54C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:44:31:35:f5:6c:5c:f3:fb:69:00:a8:7a:17: 9e:03:83:1e:91:3b:40:63:07:ed:61:4c:83:38:cd: cc:53:b3:e3:45:3a:55:2d:60:75:bb:96:06:e5:94: 66:86:8a:c1:e8:53:84:f5:3e:e4:bc:0d:35:2d:64: 62:5f:fa:c3:b3:b5:65:cd:b1:38:cb:bf:26:07:e8: 53:9a:9d:6b:2e:6d:d0:10:c1:ea:b9:d1:03:9e:46: 3c:af:ce:26:70:cf:93:33:84:87:39:3f:0f:73:0c: c1:d4:46:64:f9:fb:d4:7f:21:52:26:94:bc:04:6d: 9b:76:1b:fd:be:f7:c9:37:e1:ff:90:f3:75:93:5a: 01:fc:29:9a:70:c8:24:6c:f3:c6:35:e3:78:a3:dc: cb:74:b3:63:38:76:a9:4e:7f:85:8b:d1:46:57:12: fb:b2:e4:c8:9c:f1:3b:d4:c5:1f:0a:9f:ed:e1:ed: c3:b7:00:bb:54:37:44:47:a8:e3:9d:ef:4a:40:7d: ce:98:02:a9:9a:b3:0d:3d:67:28:5d:e4:c9:d7:a1: bf:5a:aa:29:8f:4c:0d:19:8a:96:78:bd:fb:a2:ba: ed:c2:47:5c:08:fe:7c:93:ec:41:c8:ba:94:09:52: 0f:46:84:8e:7a:36:99:3a:8a:0e:7d:b1:73:83:fb: 13:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:36:FB:0E:6E:47:EB:46:76:30:1F:AB:1A:91:57:07:20:AB:F5:4C X509v3 Authority Key Identifier: keyid:16:FC:1D:F2:D8:07:E3:38:98:5D:E3:09:32:EA:34:E2:50:22:87:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/16FC1DF2D807E338985DE30932EA34E250228796.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/16FC1DF2D807E338985DE30932EA34E250228796.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/16FC1DF2D807E338985DE30932EA34E250228796.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:f4:97:87:94:60:cc:d6:dc:30:f6:ad:0d:da:65:d5:08:87: 34:9b:f7:7a:73:09:b2:6a:b7:a1:b8:94:85:2a:a9:ee:72:01: fe:05:fa:dd:71:fb:06:42:5c:54:54:dc:95:c7:76:97:50:b5: 05:53:40:a6:b4:be:a0:b6:00:6c:72:91:3d:0f:41:eb:2a:93: 18:ca:57:93:51:89:43:41:18:44:72:11:48:92:0e:6e:56:71: 0a:71:9f:37:42:43:f7:14:8c:e2:8f:5a:f3:08:d0:5e:ad:e0: 6b:9b:39:28:1f:7b:59:4b:87:b9:e9:9f:69:74:23:ea:84:e7: 1f:64:e2:0e:69:e7:31:ee:57:99:d1:8d:4d:84:ed:9a:53:a4: a1:cf:52:50:ff:96:d3:2a:ee:d1:2d:93:e1:5d:cc:8d:ca:9a: 08:10:86:01:76:e0:80:ed:9a:94:be:57:ef:e9:a9:69:83:bb: 37:69:48:08:89:81:b7:5c:9a:28:a9:38:89:68:4f:08:d0:27: 65:8e:63:8e:7c:cf:c1:4c:88:2e:f4:46:e3:0c:e1:c2:f9:61: dd:d4:fc:ca:e1:94:8b:78:b2:1f:27:cf:0d:2d:ae:08:26:d8: 64:d4:fb:87:94:e9:8c:35:32:2b:c7:40:38:ac:2b:6b:53:57: 96:61:b6:d7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUYUkX/nY/nZpMtgDLo0XHjYSds0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTZGQzFERjJEODA3RTMzODk4NURFMzA5MzJFQTM0RTI1 MDIyODc5NjAeFw0yNjA5MjUwMjI4MjlaFw0yNjA5MjYwMzE4MjlaMDMxMTAvBgNV BAMTKDIzMzZGQjBFNkU0N0VCNDY3NjMwMUZBQjFBOTE1NzA3MjBBQkY1NEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9RDE19Wxc8/tpAKh6F54Dgx6R O0BjB+1hTIM4zcxTs+NFOlUtYHW7lgbllGaGisHoU4T1PuS8DTUtZGJf+sOztWXN sTjLvyYH6FOanWsubdAQweq50QOeRjyvziZwz5MzhIc5Pw9zDMHURmT5+9R/IVIm lLwEbZt2G/2+98k34f+Q83WTWgH8KZpwyCRs88Y143ij3Mt0s2M4dqlOf4WL0UZX Evuy5Mic8TvUxR8Kn+3h7cO3ALtUN0RHqOOd70pAfc6YAqmasw09Zyhd5MnXob9a qimPTA0ZipZ4vfuiuu3CR1wI/nyT7EHIupQJUg9GhI56Npk6ig59sXOD+xPTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIzb7Dm5H60Z2MB+rGpFXByCr9UwwHwYDVR0j BBgwFoAUFvwd8tgH4ziYXeMJMuo04lAih5YwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2U4OTUwZjAtM2IxNC00YTZkLWIzMGYtNzUzNzljYjJlYmNlLzAvMTZGQzFERjJE ODA3RTMzODk4NURFMzA5MzJFQTM0RTI1MDIyODc5Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xNkZDMURGMkQ4MDdFMzM4OTg1REUzMDkzMkVBMzRFMjUwMjI4 Nzk2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2U4OTUwZjAtM2IxNC00YTZkLWIz MGYtNzUzNzljYjJlYmNlLzAvMTZGQzFERjJEODA3RTMzODk4NURFMzA5MzJFQTM0 RTI1MDIyODc5Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAz0l4eUYMzW3DD2rQ3aZdUIhzSb93pzCbJq t6G4lIUqqe5yAf4F+t1x+wZCXFRU3JXHdpdQtQVTQKa0vqC2AGxykT0PQesqkxjK V5NRiUNBGERyEUiSDm5WcQpxnzdCQ/cUjOKPWvMI0F6t4GubOSgfe1lLh7npn2l0 I+qE5x9k4g5p5zHuV5nRjU2E7ZpTpKHPUlD/ltMq7tEtk+FdzI3KmggQhgF24IDt mpS+V+/pqWmDuzdpSAiJgbdcmiipOIloTwjQJ2WOY458z8FMiC70RuMM4cL5Yd3U /MrhlIt4sh8nzw0trggm2GTU+4eU6Yw1MivHQDisK2tTV5Zhttc= -----END CERTIFICATE-----Generated at Fri Sep 25 20:17:39 2026 by rpki-client