$ rpki-client -vvf rpki-rsync.idnic.net/repo/f0a929c6-1e25-494a-b0f9-55fc4fc94fbc/0/2116A6F5F0642D2E606A3ACFF738E48F344FB967.mft File: 2116A6F5F0642D2E606A3ACFF738E48F344FB967.mft (raw, json) Hash identifier: wf2z3EuvsW9w8/Ahq2EsBd82Q0OWrgJDtvIbA8K5T7k= Subject key identifier: EF:4C:54:5C:6E:9E:15:D7:10:0B:21:48:67:26:26:44:F2:A9:95:DE Authority key identifier: 21:16:A6:F5:F0:64:2D:2E:60:6A:3A:CF:F7:38:E4:8F:34:4F:B9:67 Certificate issuer: /CN=2116A6F5F0642D2E606A3ACFF738E48F344FB967 Certificate serial: 0639CF9E8A9B1A019E86EE40B3DC9E0F54C17C82 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2116A6F5F0642D2E606A3ACFF738E48F344FB967.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f0a929c6-1e25-494a-b0f9-55fc4fc94fbc/0/2116A6F5F0642D2E606A3ACFF738E48F344FB967.mft Manifest number: 70 Signing time: Fri 24 Jul 2026 12:35:00 +0000 Manifest this update: Fri 24 Jul 2026 12:30:00 +0000 Manifest next update: Sat 25 Jul 2026 14:53:00 +0000 Files and hashes: 1: 323430343a3530303a3a2f33322d3438203d3e203234323031.roa (hash: GmHQTfawH8Y622MsP42Ft9zNqj0KvfRVwfqFipMcEyw=) 2: 3230322e38372e3234382e302f32312d3234203d3e203234323031.roa (hash: VxgiDdOeTdoccsaOMR0a2e8pGcsjFYPyxSS+V6ZCUrY=) 3: 3130332e3232382e3234302e302f32322d3234203d3e203435373030.roa (hash: wIhC8ahVWqomrNJdfdl2zgDb8UOJzi58mGNtTXqf6+U=) 4: 2116A6F5F0642D2E606A3ACFF738E48F344FB967.crl (hash: 9KWAgkiBGoGCx1gw/0Xmm/63KMyYwdfUBgZPGz47gWA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f0a929c6-1e25-494a-b0f9-55fc4fc94fbc/0/2116A6F5F0642D2E606A3ACFF738E48F344FB967.crl rsync://rpki-rsync.idnic.net/repo/f0a929c6-1e25-494a-b0f9-55fc4fc94fbc/0/2116A6F5F0642D2E606A3ACFF738E48F344FB967.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2116A6F5F0642D2E606A3ACFF738E48F344FB967.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 07:07:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:39:cf:9e:8a:9b:1a:01:9e:86:ee:40:b3:dc:9e:0f:54:c1:7c:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2116A6F5F0642D2E606A3ACFF738E48F344FB967 Validity Not Before: Jul 24 12:30:00 2026 GMT Not After : Jul 25 14:53:00 2026 GMT Subject: CN=EF4C545C6E9E15D7100B214867262644F2A995DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:6c:e0:21:77:fd:cb:d7:f3:ff:c0:4a:44:52: 19:49:39:c4:80:6a:ad:b7:26:9f:1f:ec:19:9d:47: 39:66:56:34:89:83:de:90:22:a6:23:c4:3b:78:73: 34:62:b9:0d:10:ac:29:26:96:77:96:9a:f0:86:9a: 07:84:a3:56:14:86:63:66:06:92:01:87:f6:29:0b: ab:06:38:2e:6b:43:0b:01:75:4a:19:7f:6a:34:11: f5:d7:13:41:91:a8:d9:cb:74:e5:34:1a:de:43:83: 27:6c:19:7b:7a:de:a2:c1:a3:e0:1d:d2:99:18:66: da:e1:cb:14:42:95:4a:bd:f5:91:2b:ed:8a:17:f0: 0b:a9:9b:95:5d:bd:0b:52:f1:3f:b0:8d:f3:9d:e7: 77:9e:a9:7d:8c:54:53:f6:a5:42:2b:45:dd:c9:56: 1b:ae:3a:90:cf:a9:b3:99:a7:28:b9:9d:aa:6f:a7: 30:22:17:67:11:7b:d2:de:ce:e9:15:17:a7:e5:60: 95:fd:28:b2:45:1d:6c:74:dd:81:fe:d7:a9:c3:da: 6b:8c:b9:97:81:ce:26:c9:63:ee:dd:ff:a6:0b:27: f5:b6:72:8b:69:f8:53:d5:c4:ca:4a:44:00:97:1d: 0e:ec:3e:d2:dd:76:0c:6b:32:14:0c:08:8a:10:9b: ba:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:4C:54:5C:6E:9E:15:D7:10:0B:21:48:67:26:26:44:F2:A9:95:DE X509v3 Authority Key Identifier: keyid:21:16:A6:F5:F0:64:2D:2E:60:6A:3A:CF:F7:38:E4:8F:34:4F:B9:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f0a929c6-1e25-494a-b0f9-55fc4fc94fbc/0/2116A6F5F0642D2E606A3ACFF738E48F344FB967.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2116A6F5F0642D2E606A3ACFF738E48F344FB967.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f0a929c6-1e25-494a-b0f9-55fc4fc94fbc/0/2116A6F5F0642D2E606A3ACFF738E48F344FB967.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:d3:6c:8f:f6:0c:bf:b5:c9:b8:6e:3f:37:35:96:f8:1d:d4: 4f:88:ae:29:ea:42:59:2b:f3:e0:a2:dc:90:52:87:6b:af:66: 6f:e8:e3:03:05:0b:3e:06:46:18:bc:c2:b4:d9:dc:2d:78:d3: 15:5b:55:38:6d:75:b2:90:e5:52:24:0d:be:65:d9:8c:d1:64: 60:72:3d:aa:30:bd:9e:f7:6d:c9:42:b1:89:a7:4b:3a:05:26: a3:94:73:8a:86:1f:dd:25:66:67:b5:8b:86:17:58:f1:e4:18: 29:40:64:d7:a5:92:62:f6:19:4d:d9:03:ef:b3:2a:5f:ef:77: e5:dc:72:25:70:60:57:a2:c0:4b:cd:62:08:1e:c6:b1:de:a0: 9f:72:47:c0:b6:fc:fc:bb:3c:f6:92:85:ef:16:12:51:65:2f: 8f:33:7d:79:b6:26:43:f7:ed:b1:e7:cd:b0:38:96:8e:e7:64: 36:3a:d3:20:19:9d:41:2a:42:17:b5:59:52:2c:a9:08:96:36: 94:a7:8a:7d:1f:e1:d3:f3:00:09:89:85:a2:93:d1:4f:08:6c: b2:47:4e:48:e5:98:b3:72:6e:5a:66:de:ad:c8:a9:c4:20:dd: f0:35:3f:62:6c:03:98:7b:5f:ae:60:4f:d0:e3:96:f7:06:1b: b9:6b:99:5d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBjnPnoqbGgGehu5As9yeD1TBfIIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjExNkE2RjVGMDY0MkQyRTYwNkEzQUNGRjczOEU0OEYz NDRGQjk2NzAeFw0yNjA3MjQxMjMwMDBaFw0yNjA3MjUxNDUzMDBaMDMxMTAvBgNV BAMTKEVGNEM1NDVDNkU5RTE1RDcxMDBCMjE0ODY3MjYyNjQ0RjJBOTk1REUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUbOAhd/3L1/P/wEpEUhlJOcSA aq23Jp8f7BmdRzlmVjSJg96QIqYjxDt4czRiuQ0QrCkmlneWmvCGmgeEo1YUhmNm BpIBh/YpC6sGOC5rQwsBdUoZf2o0EfXXE0GRqNnLdOU0Gt5DgydsGXt63qLBo+Ad 0pkYZtrhyxRClUq99ZEr7YoX8Aupm5VdvQtS8T+wjfOd53eeqX2MVFP2pUIrRd3J VhuuOpDPqbOZpyi5napvpzAiF2cRe9LezukVF6flYJX9KLJFHWx03YH+16nD2muM uZeBzibJY+7d/6YLJ/W2cotp+FPVxMpKRACXHQ7sPtLddgxrMhQMCIoQm7ovAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU70xUXG6eFdcQCyFIZyYmRPKpld4wHwYDVR0j BBgwFoAUIRam9fBkLS5gajrP9zjkjzRPuWcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjBhOTI5YzYtMWUyNS00OTRhLWIwZjktNTVmYzRmYzk0ZmJjLzAvMjExNkE2RjVG MDY0MkQyRTYwNkEzQUNGRjczOEU0OEYzNDRGQjk2Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMTE2QTZGNUYwNjQyRDJFNjA2QTNBQ0ZGNzM4RTQ4RjM0NEZC OTY3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjBhOTI5YzYtMWUyNS00OTRhLWIw ZjktNTVmYzRmYzk0ZmJjLzAvMjExNkE2RjVGMDY0MkQyRTYwNkEzQUNGRjczOEU0 OEYzNDRGQjk2Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKHTbI/2DL+1ybhuPzc1lvgd1E+IrinqQlkr 8+Ci3JBSh2uvZm/o4wMFCz4GRhi8wrTZ3C140xVbVThtdbKQ5VIkDb5l2YzRZGBy PaowvZ73bclCsYmnSzoFJqOUc4qGH90lZme1i4YXWPHkGClAZNelkmL2GU3ZA++z Kl/vd+XcciVwYFeiwEvNYggexrHeoJ9yR8C2/Py7PPaShe8WElFlL48zfXm2JkP3 7bHnzbA4lo7nZDY60yAZnUEqQhe1WVIsqQiWNpSnin0f4dPzAAmJhaKT0U8IbLJH TkjlmLNyblpm3q3IqcQg3fA1P2JsA5h7X65gT9DjlvcGG7lrmV0= -----END CERTIFICATE-----Generated at Fri Jul 24 16:54:03 2026 by rpki-client