$ rpki-client -vvf rpki-rsync.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/16FC1DF2D807E338985DE30932EA34E250228796.mft File: 16FC1DF2D807E338985DE30932EA34E250228796.mft (raw, json) Hash identifier: mfEttSyzHN6cYrN0iUTOr1AtZsmhp5vqQcOpzXFvPNw= Subject key identifier: F7:72:CC:8E:3C:33:91:82:F6:8B:E1:8E:D3:31:93:6D:DD:22:C6:2E Authority key identifier: 16:FC:1D:F2:D8:07:E3:38:98:5D:E3:09:32:EA:34:E2:50:22:87:96 Certificate issuer: /CN=16FC1DF2D807E338985DE30932EA34E250228796 Certificate serial: 1D93CA74E078F34DA22C8B4779BC38BAE57712E0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/16FC1DF2D807E338985DE30932EA34E250228796.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/16FC1DF2D807E338985DE30932EA34E250228796.mft Manifest number: 0F Signing time: Tue 12 May 2026 19:46:08 +0000 Manifest this update: Tue 12 May 2026 19:41:08 +0000 Manifest next update: Wed 13 May 2026 19:55:08 +0000 Files and hashes: 1: 3130332e3131392e3131362e302f32342d3234203d3e20313337333738.roa (hash: A7xyFA4qpVRKeavzBnm+Cjv8gBWwy1p/6K95VuLQBjM=) 2: 323430333a343334303a3a2f33322d3332203d3e20313337333738.roa (hash: 1dE/zpXNqMfI1ilfUn5DrrCSaXBhuo+1IUrzkuKY22o=) 3: 3130332e3131392e3131392e302f32342d3234203d3e20313337333738.roa (hash: iWp9zL2tSRzcXXiV+WVgdnT86pBdN5E8UOgytY/+pL4=) 4: 3130332e3131392e3131372e302f32342d3234203d3e20313337333738.roa (hash: roqA5lD4sFTDR1g7UxqG9+ZjfyukoDRdAX9XNlxiMJE=) 5: 16FC1DF2D807E338985DE30932EA34E250228796.crl (hash: 6vmGvigtLe4N0ZWfIJSEzWgBcA+asAYh3FFgz4RM4ow=) 6: 3130332e3131392e3131382e302f32342d3234203d3e20313337333738.roa (hash: 0FBu/rjRCHpSQhidXvQmco2Gd+NRZ/I75lgQ9c+yrhs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/16FC1DF2D807E338985DE30932EA34E250228796.crl rsync://rpki-rsync.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/16FC1DF2D807E338985DE30932EA34E250228796.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/16FC1DF2D807E338985DE30932EA34E250228796.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 19:55:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:93:ca:74:e0:78:f3:4d:a2:2c:8b:47:79:bc:38:ba:e5:77:12:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16FC1DF2D807E338985DE30932EA34E250228796 Validity Not Before: May 12 19:41:08 2026 GMT Not After : May 13 19:55:08 2026 GMT Subject: CN=F772CC8E3C339182F68BE18ED331936DDD22C62E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:21:89:5f:cd:b4:77:c2:51:fe:fa:9d:ec:6e: 59:e0:16:2e:f4:e8:a1:d2:f8:f9:a1:a7:10:8b:33: c9:00:09:bb:fd:51:d2:a8:74:c0:d9:d5:90:9f:d4: d0:fa:ae:46:62:6f:7c:06:35:ba:1e:c6:d2:b1:9d: f6:d3:7e:9d:b5:0e:41:f4:8c:15:f0:15:9b:28:87: 84:a2:a7:d1:5b:f7:34:99:9a:e4:86:88:53:d0:f3: 89:62:e7:2e:3e:fa:92:da:4a:53:80:f4:aa:58:11: 69:f8:3b:6f:46:0a:4a:fd:5f:7a:39:ab:f0:70:11: 82:c1:09:e5:76:0b:bf:39:79:c9:02:b3:db:c7:a5: bb:62:b2:ff:a3:b0:cc:02:66:77:d6:29:96:e2:9d: f1:16:99:57:3f:7f:9c:5e:e7:21:3a:b1:ce:ac:b8: 52:fe:07:a1:64:10:6d:40:4f:bc:91:b0:10:62:17: 1d:92:d1:b4:c8:18:ae:d8:78:0e:55:34:de:42:80: 1c:da:98:05:b2:06:2b:15:1a:22:9e:e7:ba:0a:19: 1e:66:69:a8:33:d4:e2:35:ed:eb:12:17:38:98:30: 14:40:2f:d4:de:bb:d4:2c:ea:4d:46:5a:ed:5e:2f: db:7c:7e:a0:95:45:84:59:69:20:c1:5d:2b:d0:95: 9f:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:72:CC:8E:3C:33:91:82:F6:8B:E1:8E:D3:31:93:6D:DD:22:C6:2E X509v3 Authority Key Identifier: keyid:16:FC:1D:F2:D8:07:E3:38:98:5D:E3:09:32:EA:34:E2:50:22:87:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/16FC1DF2D807E338985DE30932EA34E250228796.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/16FC1DF2D807E338985DE30932EA34E250228796.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/16FC1DF2D807E338985DE30932EA34E250228796.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:4c:9a:8a:55:9c:5c:3d:e2:d3:18:8c:1f:d9:26:4b:dc:c4: a0:7c:23:fa:36:f1:63:aa:42:00:44:d8:40:04:75:67:f0:29: c8:f7:20:4f:3e:97:f3:d4:f0:e8:12:18:a3:d4:65:10:2c:58: 6d:3f:66:9c:6b:7a:bb:c4:5a:75:f7:0d:ff:34:ee:02:96:6e: 25:3e:2e:de:07:b1:c5:21:72:97:d4:ae:3c:03:7e:1b:70:66: 5c:55:85:9c:34:8a:56:20:8b:1e:c3:05:92:16:83:51:3f:9e: 1e:f6:96:4b:4b:01:db:3c:03:9e:ea:91:b4:41:f3:29:b5:e5: 2f:47:16:6d:6c:e8:74:60:52:be:01:23:ba:ed:8a:3e:76:0b: ca:a8:9c:dc:29:bb:2b:5a:e0:d3:db:b0:80:25:59:0e:d0:34: bd:ce:03:eb:3b:c8:65:67:d7:c6:0a:c3:c8:0d:50:21:27:dd: e7:cb:dd:6c:28:3f:d8:da:76:86:e8:f7:0e:aa:a6:ad:34:b6: 6c:5f:43:6f:af:79:6e:f8:2c:92:6c:a6:a2:f2:ff:f9:fd:43: 90:f3:3f:fe:93:4e:5a:f7:d6:b5:77:be:51:24:cc:d5:fa:d5: 58:15:61:22:df:5d:b8:98:73:a7:de:1d:3c:92:b2:43:71:87: 3c:03:ad:ad -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHZPKdOB4802iLItHebw4uuV3EuAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTZGQzFERjJEODA3RTMzODk4NURFMzA5MzJFQTM0RTI1 MDIyODc5NjAeFw0yNjA1MTIxOTQxMDhaFw0yNjA1MTMxOTU1MDhaMDMxMTAvBgNV BAMTKEY3NzJDQzhFM0MzMzkxODJGNjhCRTE4RUQzMzE5MzZEREQyMkM2MkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCIYlfzbR3wlH++p3sblngFi70 6KHS+PmhpxCLM8kACbv9UdKodMDZ1ZCf1ND6rkZib3wGNboextKxnfbTfp21DkH0 jBXwFZsoh4Sip9Fb9zSZmuSGiFPQ84li5y4++pLaSlOA9KpYEWn4O29GCkr9X3o5 q/BwEYLBCeV2C785eckCs9vHpbtisv+jsMwCZnfWKZbinfEWmVc/f5xe5yE6sc6s uFL+B6FkEG1AT7yRsBBiFx2S0bTIGK7YeA5VNN5CgBzamAWyBisVGiKe57oKGR5m aagz1OI17esSFziYMBRAL9Teu9Qs6k1GWu1eL9t8fqCVRYRZaSDBXSvQlZ/ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU93LMjjwzkYL2i+GO0zGTbd0ixi4wHwYDVR0j BBgwFoAUFvwd8tgH4ziYXeMJMuo04lAih5YwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2U4OTUwZjAtM2IxNC00YTZkLWIzMGYtNzUzNzljYjJlYmNlLzAvMTZGQzFERjJE ODA3RTMzODk4NURFMzA5MzJFQTM0RTI1MDIyODc5Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xNkZDMURGMkQ4MDdFMzM4OTg1REUzMDkzMkVBMzRFMjUwMjI4 Nzk2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2U4OTUwZjAtM2IxNC00YTZkLWIz MGYtNzUzNzljYjJlYmNlLzAvMTZGQzFERjJEODA3RTMzODk4NURFMzA5MzJFQTM0 RTI1MDIyODc5Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGpMmopVnFw94tMYjB/ZJkvcxKB8I/o28WOq QgBE2EAEdWfwKcj3IE8+l/PU8OgSGKPUZRAsWG0/ZpxrervEWnX3Df807gKWbiU+ Lt4HscUhcpfUrjwDfhtwZlxVhZw0ilYgix7DBZIWg1E/nh72lktLAds8A57qkbRB 8ym15S9HFm1s6HRgUr4BI7rtij52C8qonNwpuyta4NPbsIAlWQ7QNL3OA+s7yGVn 18YKw8gNUCEn3efL3WwoP9jadobo9w6qpq00tmxfQ2+veW74LJJspqLy//n9Q5Dz P/6TTlr31rV3vlEkzNX61VgVYSLfXbiYc6feHTySskNxhzwDra0= -----END CERTIFICATE-----Generated at Wed May 13 06:37:56 2026 by rpki-client