$ rpki-client -vvvf rpki-rsync.idnic.net/repo/59cc2e5b-3b91-42af-8203-5e3b91704843/0/C16F24B51E8F9D35194675A5A6B5BBF38DDB3302.mft File: C16F24B51E8F9D35194675A5A6B5BBF38DDB3302.mft (raw, json) Hash identifier: MZAevnCLPsJm6QxrY5r4Ll4orAPPC8EchFovliGyy3U= Subject key identifier: A9:74:09:19:5D:E4:BB:61:7D:CE:60:23:57:84:A5:F7:D4:8F:19:FF Authority key identifier: C1:6F:24:B5:1E:8F:9D:35:19:46:75:A5:A6:B5:BB:F3:8D:DB:33:02 Certificate issuer: /CN=C16F24B51E8F9D35194675A5A6B5BBF38DDB3302 Certificate serial: 12BE502858BC59B49BA5162CCDB8338FA3ABA679 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C16F24B51E8F9D35194675A5A6B5BBF38DDB3302.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/59cc2e5b-3b91-42af-8203-5e3b91704843/0/C16F24B51E8F9D35194675A5A6B5BBF38DDB3302.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 09:22:21 +0000 Manifest this update: Thu 24 Sep 2026 09:17:21 +0000 Manifest next update: Fri 25 Sep 2026 12:21:21 +0000 Files and hashes: 1: 3130332e3138302e39352e302f32342d3234203d3e20313439333538.roa (hash: Cpjg4SMt12A8DW7uKCND6UkuKdprXSLBV2afftUulJU=) 2: C16F24B51E8F9D35194675A5A6B5BBF38DDB3302.crl (hash: KrdSfTqdDgDOWgJT8ZjwBYH5D7O+EdctfMa6o96rHng=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/59cc2e5b-3b91-42af-8203-5e3b91704843/0/C16F24B51E8F9D35194675A5A6B5BBF38DDB3302.crl rsync://rpki-rsync.idnic.net/repo/59cc2e5b-3b91-42af-8203-5e3b91704843/0/C16F24B51E8F9D35194675A5A6B5BBF38DDB3302.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C16F24B51E8F9D35194675A5A6B5BBF38DDB3302.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:be:50:28:58:bc:59:b4:9b:a5:16:2c:cd:b8:33:8f:a3:ab:a6:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C16F24B51E8F9D35194675A5A6B5BBF38DDB3302 Validity Not Before: Sep 24 09:17:21 2026 GMT Not After : Sep 25 12:21:21 2026 GMT Subject: CN=A97409195DE4BB617DCE60235784A5F7D48F19FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:a4:1f:b5:9b:33:f3:7f:87:77:93:b9:a3:a2: fe:e6:3f:f7:da:6d:12:37:1f:0b:71:e8:d2:d3:35: 4a:22:f8:64:fc:54:7f:fb:f1:27:02:4b:a5:4c:56: 75:c7:cb:36:9d:63:61:03:c3:80:54:1a:04:1f:c7: 4c:39:1d:f0:fd:47:50:1e:67:ca:c0:3c:10:26:23: 97:da:07:88:d7:6d:2b:82:ca:38:33:85:5a:1b:1a: 45:c4:22:b6:bd:bf:eb:3b:2a:90:44:39:72:ad:40: fe:fa:a8:b0:50:00:21:10:bc:0b:2e:e3:59:50:f0: d1:57:1c:67:9d:c7:a7:4c:9a:0d:19:f6:2a:85:ef: 20:e9:09:54:be:cc:7f:75:e2:a9:da:8b:8f:d4:51: 85:5f:a3:7a:74:e2:cf:2e:81:ae:60:6f:86:fd:eb: 44:92:94:3a:8e:e6:12:84:20:46:bb:dd:c4:53:0c: e0:20:55:e0:d2:27:b1:4e:96:da:ff:6d:81:37:c1: 30:ac:27:4d:6a:d9:34:4c:b7:52:e3:5c:db:fb:77: e0:18:8d:81:4b:67:e0:0b:22:cd:85:7d:36:99:6f: a2:d1:16:4e:5b:5d:4a:2f:50:4c:22:72:d1:41:89: 41:81:b7:78:39:19:28:21:c1:ba:9b:f6:d0:30:8b: 56:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:74:09:19:5D:E4:BB:61:7D:CE:60:23:57:84:A5:F7:D4:8F:19:FF X509v3 Authority Key Identifier: keyid:C1:6F:24:B5:1E:8F:9D:35:19:46:75:A5:A6:B5:BB:F3:8D:DB:33:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/59cc2e5b-3b91-42af-8203-5e3b91704843/0/C16F24B51E8F9D35194675A5A6B5BBF38DDB3302.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C16F24B51E8F9D35194675A5A6B5BBF38DDB3302.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/59cc2e5b-3b91-42af-8203-5e3b91704843/0/C16F24B51E8F9D35194675A5A6B5BBF38DDB3302.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:d6:2e:5e:c8:6f:93:fe:90:c2:dc:02:ff:e3:3d:3b:c8:83: 30:cc:2f:81:19:c1:96:f1:b9:33:47:21:a3:a1:a4:cf:49:24: a4:6e:f4:02:63:f0:a3:4f:d8:22:ee:60:fd:f3:43:25:76:f1: d4:a5:72:3d:fe:3a:1e:d6:cf:b7:40:a1:0c:e2:7c:b6:57:f9: f0:4c:b1:02:b9:f2:33:c5:73:3d:f0:8b:f4:11:4c:31:98:20: 95:79:3f:8b:24:1b:4c:83:de:11:e2:2d:ab:ab:6c:7b:e8:db: cc:6f:79:11:ad:f6:e5:79:a7:81:f0:50:81:ae:5a:14:35:ae: 4b:b2:01:e6:c7:5b:d2:18:84:8c:07:f4:49:35:f5:23:d0:0e: 20:ba:a5:c1:a1:5d:b3:64:33:98:82:ac:ed:7b:6f:df:ec:08: ed:f6:5e:ed:ae:cd:fc:b2:3f:08:df:79:0d:e6:78:6e:a2:dc: a8:6a:a0:79:16:56:2e:bb:ca:da:1b:ba:c2:3f:37:6e:93:c4: b2:eb:90:b8:9f:22:ac:55:5e:b2:e5:e2:33:b3:9b:54:84:5d: 79:2c:8f:d9:2c:c5:6d:3d:44:46:7a:cd:b3:60:fe:44:8f:2c: 25:6e:d6:01:9b:f6:62:92:6f:86:d7:ea:c5:c0:4e:02:5e:0f: e4:42:74:d2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEr5QKFi8WbSbpRYszbgzj6OrpnkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzE2RjI0QjUxRThGOUQzNTE5NDY3NUE1QTZCNUJCRjM4 RERCMzMwMjAeFw0yNjA5MjQwOTE3MjFaFw0yNjA5MjUxMjIxMjFaMDMxMTAvBgNV BAMTKEE5NzQwOTE5NURFNEJCNjE3RENFNjAyMzU3ODRBNUY3RDQ4RjE5RkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvpB+1mzPzf4d3k7mjov7mP/fa bRI3Hwtx6NLTNUoi+GT8VH/78ScCS6VMVnXHyzadY2EDw4BUGgQfx0w5HfD9R1Ae Z8rAPBAmI5faB4jXbSuCyjgzhVobGkXEIra9v+s7KpBEOXKtQP76qLBQACEQvAsu 41lQ8NFXHGedx6dMmg0Z9iqF7yDpCVS+zH914qnai4/UUYVfo3p04s8uga5gb4b9 60SSlDqO5hKEIEa73cRTDOAgVeDSJ7FOltr/bYE3wTCsJ01q2TRMt1LjXNv7d+AY jYFLZ+ALIs2FfTaZb6LRFk5bXUovUEwictFBiUGBt3g5GSghwbqb9tAwi1alAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqXQJGV3ku2F9zmAjV4Sl99SPGf8wHwYDVR0j BBgwFoAUwW8ktR6PnTUZRnWlprW7843bMwIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTljYzJlNWItM2I5MS00MmFmLTgyMDMtNWUzYjkxNzA0ODQzLzAvQzE2RjI0QjUx RThGOUQzNTE5NDY3NUE1QTZCNUJCRjM4RERCMzMwMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DMTZGMjRCNTFFOEY5RDM1MTk0Njc1QTVBNkI1QkJGMzhEREIz MzAyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTljYzJlNWItM2I5MS00MmFmLTgy MDMtNWUzYjkxNzA0ODQzLzAvQzE2RjI0QjUxRThGOUQzNTE5NDY3NUE1QTZCNUJC RjM4RERCMzMwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK3WLl7Ib5P+kMLcAv/jPTvIgzDML4EZwZbx uTNHIaOhpM9JJKRu9AJj8KNP2CLuYP3zQyV28dSlcj3+Oh7Wz7dAoQzifLZX+fBM sQK58jPFcz3wi/QRTDGYIJV5P4skG0yD3hHiLaurbHvo28xveRGt9uV5p4HwUIGu WhQ1rkuyAebHW9IYhIwH9Ek19SPQDiC6pcGhXbNkM5iCrO17b9/sCO32Xu2uzfyy PwjfeQ3meG6i3KhqoHkWVi67ytobusI/N26TxLLrkLifIqxVXrLl4jOzm1SEXXks j9ksxW09REZ6zbNg/kSPLCVu1gGb9mKSb4bX6sXATgJeD+RCdNI= -----END CERTIFICATE-----Generated at Thu Sep 24 20:22:12 2026 by rpki-client