$ rpki-client -vvf rpki-rsync.idnic.net/repo/59cc2e5b-3b91-42af-8203-5e3b91704843/0/C16F24B51E8F9D35194675A5A6B5BBF38DDB3302.mft File: C16F24B51E8F9D35194675A5A6B5BBF38DDB3302.mft (raw, json) Hash identifier: frIWsTfLbYiuVEUlF8NEHlWlQWwb2k4vsVJ5HhYBkLA= Subject key identifier: A5:B3:2E:09:50:C3:8C:F7:A1:1F:9D:7E:4C:2F:75:A5:FB:27:4A:1C Authority key identifier: C1:6F:24:B5:1E:8F:9D:35:19:46:75:A5:A6:B5:BB:F3:8D:DB:33:02 Certificate issuer: /CN=C16F24B51E8F9D35194675A5A6B5BBF38DDB3302 Certificate serial: 7E2DD9179251DE571C7AAA24339D5AAB1BE71FB1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C16F24B51E8F9D35194675A5A6B5BBF38DDB3302.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/59cc2e5b-3b91-42af-8203-5e3b91704843/0/C16F24B51E8F9D35194675A5A6B5BBF38DDB3302.mft Manifest number: 0F Signing time: Tue 12 May 2026 23:48:01 +0000 Manifest this update: Tue 12 May 2026 23:43:01 +0000 Manifest next update: Thu 14 May 2026 00:14:01 +0000 Files and hashes: 1: C16F24B51E8F9D35194675A5A6B5BBF38DDB3302.crl (hash: d4FSb+qYLW49NiIqf99bA7LntNYx6ou/TE4N7TTY3+s=) 2: 3130332e3138302e39352e302f32342d3234203d3e20313439333538.roa (hash: Cpjg4SMt12A8DW7uKCND6UkuKdprXSLBV2afftUulJU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/59cc2e5b-3b91-42af-8203-5e3b91704843/0/C16F24B51E8F9D35194675A5A6B5BBF38DDB3302.crl rsync://rpki-rsync.idnic.net/repo/59cc2e5b-3b91-42af-8203-5e3b91704843/0/C16F24B51E8F9D35194675A5A6B5BBF38DDB3302.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C16F24B51E8F9D35194675A5A6B5BBF38DDB3302.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 00:14:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:2d:d9:17:92:51:de:57:1c:7a:aa:24:33:9d:5a:ab:1b:e7:1f:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C16F24B51E8F9D35194675A5A6B5BBF38DDB3302 Validity Not Before: May 12 23:43:01 2026 GMT Not After : May 14 00:14:01 2026 GMT Subject: CN=A5B32E0950C38CF7A11F9D7E4C2F75A5FB274A1C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:0f:9e:ff:b1:ed:5f:62:be:88:25:0f:12:ab: ec:f5:f4:f0:9d:10:e4:ba:a5:dc:41:ea:aa:be:c3: 0e:3e:10:6f:7c:c2:52:75:c1:b8:11:ea:6e:b9:f7: 46:e2:b7:24:af:4a:10:17:56:f4:ac:70:5e:1f:62: 8c:25:68:16:71:94:84:f1:ca:a4:40:63:8d:c3:ac: 28:b2:7f:1e:82:76:4b:b7:09:ba:93:19:8d:a0:8c: 16:f0:fc:6c:af:a8:4d:9e:ce:52:b5:80:5c:b7:1c: ec:ca:36:ff:97:05:5a:78:f4:31:a5:49:5a:d8:13: 35:61:ad:df:c2:e2:61:23:f6:1b:8b:bc:9d:e6:00: 31:ad:4d:5b:e1:d8:15:4a:7c:93:82:c0:b6:fe:d1: 16:32:d1:db:f3:a9:00:66:ff:2c:eb:97:2a:c0:57: f8:7e:a5:98:82:a6:86:7f:1c:df:47:c4:ea:9b:c0: 0e:31:ae:69:ae:9e:26:cf:84:8f:4c:d9:89:f4:69: 80:ca:9d:9b:80:83:e4:66:9e:6a:7c:9f:65:62:4d: 1c:54:b0:1b:e2:b2:10:48:5c:d5:11:4e:f6:af:4b: 6d:48:b1:b1:40:ee:82:6a:57:55:5c:1d:eb:d7:62: 32:6b:f7:07:75:9e:4b:ff:d9:f7:bc:cc:11:24:9b: 33:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:B3:2E:09:50:C3:8C:F7:A1:1F:9D:7E:4C:2F:75:A5:FB:27:4A:1C X509v3 Authority Key Identifier: keyid:C1:6F:24:B5:1E:8F:9D:35:19:46:75:A5:A6:B5:BB:F3:8D:DB:33:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/59cc2e5b-3b91-42af-8203-5e3b91704843/0/C16F24B51E8F9D35194675A5A6B5BBF38DDB3302.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C16F24B51E8F9D35194675A5A6B5BBF38DDB3302.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/59cc2e5b-3b91-42af-8203-5e3b91704843/0/C16F24B51E8F9D35194675A5A6B5BBF38DDB3302.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:d9:03:24:80:70:6b:a0:8c:4a:80:7b:18:8d:ca:50:25:f1: 7d:d0:14:b2:53:74:5b:17:2a:7a:fe:87:b2:60:eb:e3:59:4f: fa:50:56:c3:f2:8a:59:fb:b7:61:9f:95:c7:00:e4:41:19:5d: b3:f6:11:de:43:71:a4:42:4d:94:d3:32:22:11:c8:b7:b9:00: 1c:59:37:df:db:ed:8e:f1:72:b5:fb:51:0a:e6:fa:3d:90:02: 1e:b4:31:c6:03:32:dd:2c:ac:ad:bf:57:fe:eb:23:70:14:ff: aa:36:e1:4c:e3:a5:86:37:82:ad:13:6f:89:e9:14:a0:b3:dd: cc:5d:73:6d:22:e0:1b:3d:f8:00:a6:30:9f:8c:31:66:91:2a: 34:9b:f5:aa:aa:86:8d:ea:93:d4:15:2c:b2:d4:88:62:98:b9: d6:95:85:1a:b7:58:c7:f8:7f:fb:d0:77:1c:7f:c0:98:43:0d: e0:d3:e0:eb:fb:08:93:dd:25:ec:cd:b6:0a:3c:58:b2:55:16: 74:b2:1d:3a:2f:9a:9d:3d:ff:32:3d:c5:53:43:03:8f:ed:b3: ce:04:3c:a4:6d:f4:9c:33:44:b0:26:5b:fd:26:62:c3:af:4f: 8d:02:2b:34:54:f8:fb:76:27:31:7d:58:ae:cd:e0:1b:1f:9a: d8:75:85:4a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfi3ZF5JR3lcceqokM51aqxvnH7EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzE2RjI0QjUxRThGOUQzNTE5NDY3NUE1QTZCNUJCRjM4 RERCMzMwMjAeFw0yNjA1MTIyMzQzMDFaFw0yNjA1MTQwMDE0MDFaMDMxMTAvBgNV BAMTKEE1QjMyRTA5NTBDMzhDRjdBMTFGOUQ3RTRDMkY3NUE1RkIyNzRBMUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCKD57/se1fYr6IJQ8Sq+z19PCd EOS6pdxB6qq+ww4+EG98wlJ1wbgR6m6590bitySvShAXVvSscF4fYowlaBZxlITx yqRAY43DrCiyfx6Cdku3CbqTGY2gjBbw/GyvqE2ezlK1gFy3HOzKNv+XBVp49DGl SVrYEzVhrd/C4mEj9huLvJ3mADGtTVvh2BVKfJOCwLb+0RYy0dvzqQBm/yzrlyrA V/h+pZiCpoZ/HN9HxOqbwA4xrmmunibPhI9M2Yn0aYDKnZuAg+Rmnmp8n2ViTRxU sBvishBIXNURTvavS21IsbFA7oJqV1VcHevXYjJr9wd1nkv/2fe8zBEkmzPXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpbMuCVDDjPehH51+TC91pfsnShwwHwYDVR0j BBgwFoAUwW8ktR6PnTUZRnWlprW7843bMwIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTljYzJlNWItM2I5MS00MmFmLTgyMDMtNWUzYjkxNzA0ODQzLzAvQzE2RjI0QjUx RThGOUQzNTE5NDY3NUE1QTZCNUJCRjM4RERCMzMwMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DMTZGMjRCNTFFOEY5RDM1MTk0Njc1QTVBNkI1QkJGMzhEREIz MzAyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTljYzJlNWItM2I5MS00MmFmLTgy MDMtNWUzYjkxNzA0ODQzLzAvQzE2RjI0QjUxRThGOUQzNTE5NDY3NUE1QTZCNUJC RjM4RERCMzMwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHHZAySAcGugjEqAexiNylAl8X3QFLJTdFsX Knr+h7Jg6+NZT/pQVsPyiln7t2GflccA5EEZXbP2Ed5DcaRCTZTTMiIRyLe5ABxZ N9/b7Y7xcrX7UQrm+j2QAh60McYDMt0srK2/V/7rI3AU/6o24UzjpYY3gq0Tb4np FKCz3cxdc20i4Bs9+ACmMJ+MMWaRKjSb9aqqho3qk9QVLLLUiGKYudaVhRq3WMf4 f/vQdxx/wJhDDeDT4Ov7CJPdJezNtgo8WLJVFnSyHTovmp09/zI9xVNDA4/ts84E PKRt9JwzRLAmW/0mYsOvT40CKzRU+Pt2JzF9WK7N4Bsfmth1hUo= -----END CERTIFICATE-----Generated at Wed May 13 05:50:36 2026 by rpki-client