$ rpki-client -vvf rpki-rsync.idnic.net/repo/f0a929c6-1e25-494a-b0f9-55fc4fc94fbc/0/2116A6F5F0642D2E606A3ACFF738E48F344FB967.mft File: 2116A6F5F0642D2E606A3ACFF738E48F344FB967.mft (raw, json) Hash identifier: Kqu0Rbc/+DduoXeLKoUtGW9dpmnYS+jpq0Exw8CPhJo= Subject key identifier: FA:7A:91:3C:3A:24:56:7F:F5:18:1B:F8:2B:A5:C0:76:35:20:2B:CF Authority key identifier: 21:16:A6:F5:F0:64:2D:2E:60:6A:3A:CF:F7:38:E4:8F:34:4F:B9:67 Certificate issuer: /CN=2116A6F5F0642D2E606A3ACFF738E48F344FB967 Certificate serial: 69679CF725A2B5623757E1CE208B3867977B1E47 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2116A6F5F0642D2E606A3ACFF738E48F344FB967.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f0a929c6-1e25-494a-b0f9-55fc4fc94fbc/0/2116A6F5F0642D2E606A3ACFF738E48F344FB967.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 17:36:43 +0000 Manifest this update: Thu 23 Jul 2026 17:31:43 +0000 Manifest next update: Fri 24 Jul 2026 20:34:43 +0000 Files and hashes: 1: 3130332e3232382e3234302e302f32322d3234203d3e203435373030.roa (hash: wIhC8ahVWqomrNJdfdl2zgDb8UOJzi58mGNtTXqf6+U=) 2: 3230322e38372e3234382e302f32312d3234203d3e203234323031.roa (hash: VxgiDdOeTdoccsaOMR0a2e8pGcsjFYPyxSS+V6ZCUrY=) 3: 2116A6F5F0642D2E606A3ACFF738E48F344FB967.crl (hash: uJz1LiG/6ULL0vhgOixrKgB127bEBmPeIvNQTGFHnoY=) 4: 323430343a3530303a3a2f33322d3438203d3e203234323031.roa (hash: GmHQTfawH8Y622MsP42Ft9zNqj0KvfRVwfqFipMcEyw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f0a929c6-1e25-494a-b0f9-55fc4fc94fbc/0/2116A6F5F0642D2E606A3ACFF738E48F344FB967.crl rsync://rpki-rsync.idnic.net/repo/f0a929c6-1e25-494a-b0f9-55fc4fc94fbc/0/2116A6F5F0642D2E606A3ACFF738E48F344FB967.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2116A6F5F0642D2E606A3ACFF738E48F344FB967.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 20:34:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:67:9c:f7:25:a2:b5:62:37:57:e1:ce:20:8b:38:67:97:7b:1e:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2116A6F5F0642D2E606A3ACFF738E48F344FB967 Validity Not Before: Jul 23 17:31:43 2026 GMT Not After : Jul 24 20:34:43 2026 GMT Subject: CN=FA7A913C3A24567FF5181BF82BA5C07635202BCF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:c5:55:93:62:0f:40:56:19:1b:07:21:fb:ec: cf:7a:9f:e1:e3:fe:e3:b2:2b:cb:2e:85:87:0b:cc: 06:f9:a2:66:66:c5:c9:14:df:65:0e:90:aa:c5:4b: bd:b0:cc:85:a5:d1:f1:0b:82:8c:cc:26:e1:68:1c: b9:9d:8d:66:92:12:77:2d:41:5c:90:11:86:f9:f6: 50:94:0d:1b:96:0c:a9:23:f2:98:c1:05:b6:4c:34: b3:6b:fa:c4:5c:9c:96:67:7f:77:bc:43:d0:9b:23: dc:2a:86:73:7f:4a:d9:7f:4e:cf:d2:68:c0:01:f0: 8d:9d:31:26:c1:03:0d:de:dd:75:53:01:52:9a:67: 76:e9:1b:7f:bd:b3:80:70:cf:bb:ed:d4:40:bd:8a: c6:22:3f:eb:36:b2:94:60:a5:f0:28:fb:e0:ca:8d: 0e:c9:33:3f:49:9e:c9:0c:d8:64:06:02:4b:4e:ca: f8:98:2e:16:65:4a:4d:b2:a2:83:99:8b:cf:80:12: b7:20:09:0c:86:69:8d:72:ab:5f:41:ba:1e:ee:3e: 99:67:11:61:c4:85:27:b3:8d:3e:45:50:7f:3f:06: d7:16:da:6a:ea:99:7e:38:10:96:0a:49:6a:91:5d: 64:2a:37:49:b9:33:8e:a8:cc:75:39:1b:ce:f9:1e: a7:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:7A:91:3C:3A:24:56:7F:F5:18:1B:F8:2B:A5:C0:76:35:20:2B:CF X509v3 Authority Key Identifier: keyid:21:16:A6:F5:F0:64:2D:2E:60:6A:3A:CF:F7:38:E4:8F:34:4F:B9:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f0a929c6-1e25-494a-b0f9-55fc4fc94fbc/0/2116A6F5F0642D2E606A3ACFF738E48F344FB967.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2116A6F5F0642D2E606A3ACFF738E48F344FB967.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f0a929c6-1e25-494a-b0f9-55fc4fc94fbc/0/2116A6F5F0642D2E606A3ACFF738E48F344FB967.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:de:ab:14:af:ff:12:19:ab:76:d0:62:ef:2f:77:65:7a:7a: 68:dc:8d:0b:64:3a:90:8a:db:d4:f5:00:58:47:f9:93:bf:5a: 48:98:eb:98:c8:2a:e8:5e:64:12:ac:5f:ea:40:e1:20:9e:02: d1:2c:82:e6:88:23:1f:35:58:20:8d:c0:37:28:03:51:37:dc: 26:fd:93:f1:e6:27:41:ea:c8:09:f5:73:a9:cc:b7:f8:4d:3b: 61:ad:19:aa:5a:de:df:f2:4a:ca:22:8d:8b:a0:d8:29:16:7a: 26:d8:5d:28:3a:83:61:5d:c1:ad:2b:8d:a2:01:c3:b2:1e:d1: d5:0b:80:c2:2c:1f:a7:86:d7:ef:37:9d:fd:c8:89:5c:d3:5a: 3c:00:d8:94:b2:e9:cf:95:6f:ef:9f:be:1c:71:0d:05:76:71: 4f:63:dc:74:bb:cf:05:52:67:fd:34:9b:4e:07:d8:56:93:f9: c3:f2:20:8e:90:dc:5e:f8:c6:f3:54:3c:fe:16:d8:1c:eb:fd: ed:eb:52:3a:e1:69:b8:aa:4f:fa:f3:dc:70:5a:d1:72:dd:da: 92:c0:aa:bd:87:31:7a:27:8c:03:24:5c:c4:f1:d9:4b:d3:44: 8e:5a:9e:69:5b:e8:48:ec:ff:af:14:6d:ec:5d:92:a0:76:f8: f8:91:e9:11 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaWec9yWitWI3V+HOIIs4Z5d7HkcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjExNkE2RjVGMDY0MkQyRTYwNkEzQUNGRjczOEU0OEYz NDRGQjk2NzAeFw0yNjA3MjMxNzMxNDNaFw0yNjA3MjQyMDM0NDNaMDMxMTAvBgNV BAMTKEZBN0E5MTNDM0EyNDU2N0ZGNTE4MUJGODJCQTVDMDc2MzUyMDJCQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKxVWTYg9AVhkbByH77M96n+Hj /uOyK8suhYcLzAb5omZmxckU32UOkKrFS72wzIWl0fELgozMJuFoHLmdjWaSEnct QVyQEYb59lCUDRuWDKkj8pjBBbZMNLNr+sRcnJZnf3e8Q9CbI9wqhnN/Stl/Ts/S aMAB8I2dMSbBAw3e3XVTAVKaZ3bpG3+9s4Bwz7vt1EC9isYiP+s2spRgpfAo++DK jQ7JMz9JnskM2GQGAktOyviYLhZlSk2yooOZi8+AErcgCQyGaY1yq19Buh7uPpln EWHEhSezjT5FUH8/BtcW2mrqmX44EJYKSWqRXWQqN0m5M46ozHU5G875Hqd1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+nqRPDokVn/1GBv4K6XAdjUgK88wHwYDVR0j BBgwFoAUIRam9fBkLS5gajrP9zjkjzRPuWcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjBhOTI5YzYtMWUyNS00OTRhLWIwZjktNTVmYzRmYzk0ZmJjLzAvMjExNkE2RjVG MDY0MkQyRTYwNkEzQUNGRjczOEU0OEYzNDRGQjk2Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMTE2QTZGNUYwNjQyRDJFNjA2QTNBQ0ZGNzM4RTQ4RjM0NEZC OTY3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjBhOTI5YzYtMWUyNS00OTRhLWIw ZjktNTVmYzRmYzk0ZmJjLzAvMjExNkE2RjVGMDY0MkQyRTYwNkEzQUNGRjczOEU0 OEYzNDRGQjk2Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEreqxSv/xIZq3bQYu8vd2V6emjcjQtkOpCK 29T1AFhH+ZO/WkiY65jIKuheZBKsX+pA4SCeAtEsguaIIx81WCCNwDcoA1E33Cb9 k/HmJ0HqyAn1c6nMt/hNO2GtGapa3t/ySsoijYug2CkWeibYXSg6g2Fdwa0rjaIB w7Ie0dULgMIsH6eG1+83nf3IiVzTWjwA2JSy6c+Vb++fvhxxDQV2cU9j3HS7zwVS Z/00m04H2FaT+cPyII6Q3F74xvNUPP4W2Bzr/e3rUjrhabiqT/rz3HBa0XLd2pLA qr2HMXonjAMkXMTx2UvTRI5anmlb6Ejs/68UbexdkqB2+PiR6RE= -----END CERTIFICATE-----Generated at Fri Jul 24 12:37:34 2026 by rpki-client