$ rpki-client -vvvf rpki-rsync.idnic.net/repo/50c797b5-730a-4841-a756-833e26b1ca0c/0/916E287AE269B0C98717609DCBC5E6BE1BC00871.mft File: 916E287AE269B0C98717609DCBC5E6BE1BC00871.mft (raw, json) Hash identifier: qn0OelRtixvTUFXEex3+n4eeALQhHqQ+lNveyK7vOxM= Subject key identifier: E5:43:7C:2B:D2:67:D9:0C:E5:C4:4C:B9:69:4F:A3:E6:38:E4:35:D4 Authority key identifier: 91:6E:28:7A:E2:69:B0:C9:87:17:60:9D:CB:C5:E6:BE:1B:C0:08:71 Certificate issuer: /CN=916E287AE269B0C98717609DCBC5E6BE1BC00871 Certificate serial: 1254B422DA851F37B34ADAC4A4335A619834210F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/916E287AE269B0C98717609DCBC5E6BE1BC00871.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/50c797b5-730a-4841-a756-833e26b1ca0c/0/916E287AE269B0C98717609DCBC5E6BE1BC00871.mft Manifest number: C7 Signing time: Mon 28 Sep 2026 00:14:07 +0000 Manifest this update: Mon 28 Sep 2026 00:09:07 +0000 Manifest next update: Tue 29 Sep 2026 03:19:07 +0000 Files and hashes: 1: 916E287AE269B0C98717609DCBC5E6BE1BC00871.crl (hash: FCJ6awDNyy6dqzlbM4Ez2PDmxEfs12ud3u3AAfF7TuM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/50c797b5-730a-4841-a756-833e26b1ca0c/0/916E287AE269B0C98717609DCBC5E6BE1BC00871.crl rsync://rpki-rsync.idnic.net/repo/50c797b5-730a-4841-a756-833e26b1ca0c/0/916E287AE269B0C98717609DCBC5E6BE1BC00871.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/916E287AE269B0C98717609DCBC5E6BE1BC00871.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 03:19:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:54:b4:22:da:85:1f:37:b3:4a:da:c4:a4:33:5a:61:98:34:21:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=916E287AE269B0C98717609DCBC5E6BE1BC00871 Validity Not Before: Sep 28 00:09:07 2026 GMT Not After : Sep 29 03:19:07 2026 GMT Subject: CN=E5437C2BD267D90CE5C44CB9694FA3E638E435D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:a0:4f:67:0d:d0:1b:11:3b:4e:81:9c:08:e3: e8:b6:b9:5b:f8:4c:ee:6e:34:fb:8a:c2:56:95:66: ea:9f:81:4d:6a:f9:69:a3:e2:eb:79:eb:61:07:6b: 36:86:24:38:e2:96:38:fe:fd:21:17:d5:94:42:51: e9:00:f7:2a:04:e2:37:e6:d9:9d:d4:27:7a:69:c3: de:61:05:a7:df:14:39:38:b7:e9:5f:b1:f1:0c:cd: 34:89:53:da:22:dd:11:c3:b0:8c:c4:8e:bb:b6:be: eb:d1:58:75:01:84:99:01:78:98:08:f5:7f:6e:ed: 79:88:a0:02:ea:c0:b6:7e:03:90:9b:f6:09:95:d9: cc:47:d3:21:b7:90:83:52:67:f4:aa:b9:e8:28:c9: 89:17:11:e7:60:db:45:b3:bf:43:28:5e:7f:df:fe: ef:62:cb:83:9c:5f:50:c1:da:be:20:2f:7d:a6:d9: db:cd:df:1e:82:dd:21:ef:9f:da:25:9c:73:48:f9: 88:c1:55:36:0c:bf:d5:e0:19:15:96:d7:86:b7:3e: 1f:01:70:0e:a8:6f:76:7d:85:e8:0b:8d:a1:13:30: 85:f7:9c:05:ca:b9:ca:a7:f2:48:0b:30:fc:47:51: b6:76:c6:a3:6b:7b:38:f0:b6:47:b2:63:92:06:9f: ab:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:43:7C:2B:D2:67:D9:0C:E5:C4:4C:B9:69:4F:A3:E6:38:E4:35:D4 X509v3 Authority Key Identifier: keyid:91:6E:28:7A:E2:69:B0:C9:87:17:60:9D:CB:C5:E6:BE:1B:C0:08:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/50c797b5-730a-4841-a756-833e26b1ca0c/0/916E287AE269B0C98717609DCBC5E6BE1BC00871.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/916E287AE269B0C98717609DCBC5E6BE1BC00871.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/50c797b5-730a-4841-a756-833e26b1ca0c/0/916E287AE269B0C98717609DCBC5E6BE1BC00871.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:9e:53:be:d0:d9:bd:48:b1:3e:92:f5:99:d2:e4:4d:0b:0e: 95:5a:28:e3:99:8e:88:f5:ab:c5:d4:3c:bb:af:df:de:01:21: 80:99:20:1c:34:ea:e8:86:1c:61:d6:d0:f7:8a:db:d8:95:74: 87:65:a9:3e:e2:ab:f8:90:c9:9f:61:d7:0d:06:ff:a2:2d:4f: 15:f7:c0:a3:e1:66:83:91:60:ad:7e:c3:85:aa:91:29:42:de: f7:fd:67:a8:bc:41:ce:66:e4:35:65:23:85:35:2f:99:fc:3d: 5d:d9:0e:1d:98:7e:0c:d8:24:12:e4:76:e4:5e:f2:ed:16:b2: 91:b8:92:ba:ca:ad:16:f1:91:9c:74:13:49:57:3c:51:15:87: 72:ad:11:6c:b3:d7:16:af:fd:de:87:de:eb:10:9e:0f:ba:6e: 74:2b:7d:a6:30:79:6d:37:18:9b:5e:6d:31:cc:7d:92:a9:9e: c9:29:8d:eb:a2:5a:13:45:12:53:b1:71:c5:01:e0:74:63:9b: 51:6a:11:a4:ec:94:7c:4b:19:5f:9d:19:64:58:56:f3:c7:b5: 67:a0:fb:05:7a:7f:73:cd:d3:47:56:0e:9d:00:f5:40:92:e9: 30:25:5e:31:35:5a:a6:6f:1b:75:0a:fc:05:d3:a7:0e:cb:05: 72:61:4b:6b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUElS0ItqFHzezStrEpDNaYZg0IQ8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTE2RTI4N0FFMjY5QjBDOTg3MTc2MDlEQ0JDNUU2QkUx QkMwMDg3MTAeFw0yNjA5MjgwMDA5MDdaFw0yNjA5MjkwMzE5MDdaMDMxMTAvBgNV BAMTKEU1NDM3QzJCRDI2N0Q5MENFNUM0NENCOTY5NEZBM0U2MzhFNDM1RDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGoE9nDdAbETtOgZwI4+i2uVv4 TO5uNPuKwlaVZuqfgU1q+Wmj4ut562EHazaGJDjiljj+/SEX1ZRCUekA9yoE4jfm 2Z3UJ3ppw95hBaffFDk4t+lfsfEMzTSJU9oi3RHDsIzEjru2vuvRWHUBhJkBeJgI 9X9u7XmIoALqwLZ+A5Cb9gmV2cxH0yG3kINSZ/SquegoyYkXEedg20Wzv0MoXn/f /u9iy4OcX1DB2r4gL32m2dvN3x6C3SHvn9olnHNI+YjBVTYMv9XgGRWW14a3Ph8B cA6ob3Z9hegLjaETMIX3nAXKucqn8kgLMPxHUbZ2xqNrezjwtkeyY5IGn6u/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5UN8K9Jn2QzlxEy5aU+j5jjkNdQwHwYDVR0j BBgwFoAUkW4oeuJpsMmHF2Cdy8XmvhvACHEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTBjNzk3YjUtNzMwYS00ODQxLWE3NTYtODMzZTI2YjFjYTBjLzAvOTE2RTI4N0FF MjY5QjBDOTg3MTc2MDlEQ0JDNUU2QkUxQkMwMDg3MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85MTZFMjg3QUUyNjlCMEM5ODcxNzYwOURDQkM1RTZCRTFCQzAw ODcxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTBjNzk3YjUtNzMwYS00ODQxLWE3 NTYtODMzZTI2YjFjYTBjLzAvOTE2RTI4N0FFMjY5QjBDOTg3MTc2MDlEQ0JDNUU2 QkUxQkMwMDg3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACieU77Q2b1IsT6S9ZnS5E0LDpVaKOOZjoj1 q8XUPLuv394BIYCZIBw06uiGHGHW0PeK29iVdIdlqT7iq/iQyZ9h1w0G/6ItTxX3 wKPhZoORYK1+w4WqkSlC3vf9Z6i8Qc5m5DVlI4U1L5n8PV3ZDh2YfgzYJBLkduRe 8u0WspG4krrKrRbxkZx0E0lXPFEVh3KtEWyz1xav/d6H3usQng+6bnQrfaYweW03 GJtebTHMfZKpnskpjeuiWhNFElOxccUB4HRjm1FqEaTslHxLGV+dGWRYVvPHtWeg +wV6f3PN00dWDp0A9UCS6TAlXjE1WqZvG3UK/AXTpw7LBXJhS2s= -----END CERTIFICATE-----Generated at Mon Sep 28 18:14:03 2026 by rpki-client