$ rpki-client -vvf rpki-rsync.idnic.net/repo/f0a929c6-1e25-494a-b0f9-55fc4fc94fbc/0/2116A6F5F0642D2E606A3ACFF738E48F344FB967.mft File: 2116A6F5F0642D2E606A3ACFF738E48F344FB967.mft (raw, json) Hash identifier: ID7CMKOOhIr3LTSWAX/kShsh8ta4bTf9lh3vVQ7ETl4= Subject key identifier: 9C:A3:09:7C:F8:1E:1A:F8:20:61:0B:2A:7D:B1:5A:F0:89:08:A9:EC Authority key identifier: 21:16:A6:F5:F0:64:2D:2E:60:6A:3A:CF:F7:38:E4:8F:34:4F:B9:67 Certificate issuer: /CN=2116A6F5F0642D2E606A3ACFF738E48F344FB967 Certificate serial: 394290F1F92792BA65B5F3D73173308766D43ABD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2116A6F5F0642D2E606A3ACFF738E48F344FB967.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f0a929c6-1e25-494a-b0f9-55fc4fc94fbc/0/2116A6F5F0642D2E606A3ACFF738E48F344FB967.mft Manifest number: 0E Signing time: Tue 12 May 2026 01:13:20 +0000 Manifest this update: Tue 12 May 2026 01:08:20 +0000 Manifest next update: Wed 13 May 2026 05:07:20 +0000 Files and hashes: 1: 323430343a3530303a3a2f33322d3438203d3e203234323031.roa (hash: GmHQTfawH8Y622MsP42Ft9zNqj0KvfRVwfqFipMcEyw=) 2: 3230322e38372e3234382e302f32312d3234203d3e203234323031.roa (hash: VxgiDdOeTdoccsaOMR0a2e8pGcsjFYPyxSS+V6ZCUrY=) 3: 2116A6F5F0642D2E606A3ACFF738E48F344FB967.crl (hash: RJl+DkWJYA6oX/33ik6fF4W/VL3Tx6s6iYl7C6SXhMU=) 4: 3130332e3232382e3234302e302f32322d3234203d3e203435373030.roa (hash: wIhC8ahVWqomrNJdfdl2zgDb8UOJzi58mGNtTXqf6+U=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f0a929c6-1e25-494a-b0f9-55fc4fc94fbc/0/2116A6F5F0642D2E606A3ACFF738E48F344FB967.crl rsync://rpki-rsync.idnic.net/repo/f0a929c6-1e25-494a-b0f9-55fc4fc94fbc/0/2116A6F5F0642D2E606A3ACFF738E48F344FB967.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2116A6F5F0642D2E606A3ACFF738E48F344FB967.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 05:07:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:42:90:f1:f9:27:92:ba:65:b5:f3:d7:31:73:30:87:66:d4:3a:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2116A6F5F0642D2E606A3ACFF738E48F344FB967 Validity Not Before: May 12 01:08:20 2026 GMT Not After : May 13 05:07:20 2026 GMT Subject: CN=9CA3097CF81E1AF820610B2A7DB15AF08908A9EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:88:32:c6:42:3b:cb:99:91:34:61:d1:13:1d: cd:51:ab:0a:56:9c:70:79:03:93:3a:48:07:ca:16: 97:a5:50:3c:3c:20:7b:c2:5e:e0:d9:bf:b6:55:7e: 24:12:e4:d6:d2:52:07:d2:2b:83:ec:55:2f:9d:76: 47:64:de:8a:8b:de:11:b9:b0:d8:86:d9:0c:9a:53: 51:f9:5e:1d:8d:41:82:06:13:37:16:88:31:a0:19: bd:05:88:58:b1:ea:5a:f0:af:44:37:91:4c:03:e0: 7c:49:dc:df:eb:d7:8a:40:b8:b0:7f:3f:a0:cc:cc: df:78:80:71:4b:2d:ef:09:3b:b8:35:f8:0e:51:67: c1:5a:8f:78:4a:65:a5:c3:76:ea:52:78:63:45:e8: 16:5c:0c:e7:fe:81:18:ef:8f:83:1d:1b:ad:f6:79: 2c:c8:40:ec:af:86:4d:39:10:36:b2:99:e4:a5:d6: 47:3f:e4:d4:4b:54:9f:18:52:c6:df:8c:08:ed:a5: b6:cf:81:65:da:c3:bc:00:9a:cb:67:ff:ce:ba:12: ff:fb:1e:69:2b:45:54:ed:08:18:ce:f6:6a:40:e6: b5:4b:6b:64:9c:9f:7f:b3:e3:03:c4:9c:d3:3d:29: 85:d9:b6:37:44:97:5f:54:17:75:7f:84:f4:d1:ae: 1c:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:A3:09:7C:F8:1E:1A:F8:20:61:0B:2A:7D:B1:5A:F0:89:08:A9:EC X509v3 Authority Key Identifier: keyid:21:16:A6:F5:F0:64:2D:2E:60:6A:3A:CF:F7:38:E4:8F:34:4F:B9:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f0a929c6-1e25-494a-b0f9-55fc4fc94fbc/0/2116A6F5F0642D2E606A3ACFF738E48F344FB967.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2116A6F5F0642D2E606A3ACFF738E48F344FB967.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f0a929c6-1e25-494a-b0f9-55fc4fc94fbc/0/2116A6F5F0642D2E606A3ACFF738E48F344FB967.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:b5:e0:de:46:0d:b8:35:2e:9f:3d:62:dc:d5:81:fb:ef:c0: 99:76:de:ea:7a:1c:a0:33:cb:42:e9:2c:0e:84:99:e6:b4:99: b0:b4:1e:ef:a7:95:64:1b:87:7d:bd:0b:6a:ed:64:75:cb:6d: 60:a6:6f:6d:5e:a4:f5:6d:2a:d0:d3:43:b1:06:18:67:09:97: 06:2e:b8:c0:f3:36:1a:98:1f:b1:bd:f3:47:c9:da:20:26:0d: bf:dc:f4:64:11:ab:4a:0b:c6:70:5f:de:62:14:94:90:8f:12: ea:f3:a3:21:20:4f:1f:75:d9:af:26:0e:5a:b7:22:2b:28:bc: 4c:f3:3e:1f:2e:97:9c:c5:3e:2f:97:3e:60:06:06:e7:c7:be: 80:ba:87:96:97:2b:5b:fe:fe:f9:34:8f:e9:c6:30:e1:12:04: 13:7a:a1:03:68:09:45:f7:ac:a6:9a:4c:d8:06:52:a3:55:f5: 9b:39:75:51:02:90:ea:4d:66:ed:14:0e:ee:c8:3a:6d:dd:eb: f7:17:65:42:b1:32:06:29:84:6c:2d:10:9c:12:64:ca:ca:0d: c9:0b:44:0e:a6:ad:e0:1a:ba:31:e5:dd:63:69:92:88:57:4d: b0:0f:52:18:c0:14:84:1d:70:e6:6f:72:1a:50:2d:45:84:67: ad:05:1c:cc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOUKQ8fknkrpltfPXMXMwh2bUOr0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjExNkE2RjVGMDY0MkQyRTYwNkEzQUNGRjczOEU0OEYz NDRGQjk2NzAeFw0yNjA1MTIwMTA4MjBaFw0yNjA1MTMwNTA3MjBaMDMxMTAvBgNV BAMTKDlDQTMwOTdDRjgxRTFBRjgyMDYxMEIyQTdEQjE1QUYwODkwOEE5RUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSiDLGQjvLmZE0YdETHc1RqwpW nHB5A5M6SAfKFpelUDw8IHvCXuDZv7ZVfiQS5NbSUgfSK4PsVS+ddkdk3oqL3hG5 sNiG2QyaU1H5Xh2NQYIGEzcWiDGgGb0FiFix6lrwr0Q3kUwD4HxJ3N/r14pAuLB/ P6DMzN94gHFLLe8JO7g1+A5RZ8Faj3hKZaXDdupSeGNF6BZcDOf+gRjvj4MdG632 eSzIQOyvhk05EDaymeSl1kc/5NRLVJ8YUsbfjAjtpbbPgWXaw7wAmstn/866Ev/7 HmkrRVTtCBjO9mpA5rVLa2Scn3+z4wPEnNM9KYXZtjdEl19UF3V/hPTRrhzlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnKMJfPgeGvggYQsqfbFa8IkIqewwHwYDVR0j BBgwFoAUIRam9fBkLS5gajrP9zjkjzRPuWcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjBhOTI5YzYtMWUyNS00OTRhLWIwZjktNTVmYzRmYzk0ZmJjLzAvMjExNkE2RjVG MDY0MkQyRTYwNkEzQUNGRjczOEU0OEYzNDRGQjk2Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMTE2QTZGNUYwNjQyRDJFNjA2QTNBQ0ZGNzM4RTQ4RjM0NEZC OTY3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjBhOTI5YzYtMWUyNS00OTRhLWIw ZjktNTVmYzRmYzk0ZmJjLzAvMjExNkE2RjVGMDY0MkQyRTYwNkEzQUNGRjczOEU0 OEYzNDRGQjk2Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJq14N5GDbg1Lp89YtzVgfvvwJl23up6HKAz y0LpLA6Emea0mbC0Hu+nlWQbh329C2rtZHXLbWCmb21epPVtKtDTQ7EGGGcJlwYu uMDzNhqYH7G980fJ2iAmDb/c9GQRq0oLxnBf3mIUlJCPEurzoyEgTx912a8mDlq3 IisovEzzPh8ul5zFPi+XPmAGBufHvoC6h5aXK1v+/vk0j+nGMOESBBN6oQNoCUX3 rKaaTNgGUqNV9Zs5dVECkOpNZu0UDu7IOm3d6/cXZUKxMgYphGwtEJwSZMrKDckL RA6mreAaujHl3WNpkohXTbAPUhjAFIQdcOZvchpQLUWEZ60FHMw= -----END CERTIFICATE-----Generated at Tue May 12 22:19:27 2026 by rpki-client