$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f0a929c6-1e25-494a-b0f9-55fc4fc94fbc/0/2116A6F5F0642D2E606A3ACFF738E48F344FB967.mft File: 2116A6F5F0642D2E606A3ACFF738E48F344FB967.mft (raw, json) Hash identifier: 7YLIkn8c2d87Gp95wjrwW5Gm1vUa8uWTzBrd8sqoe7M= Subject key identifier: AB:98:FF:3A:14:0D:97:37:C9:CA:84:B8:55:39:E0:CE:84:98:5F:CB Authority key identifier: 21:16:A6:F5:F0:64:2D:2E:60:6A:3A:CF:F7:38:E4:8F:34:4F:B9:67 Certificate issuer: /CN=2116A6F5F0642D2E606A3ACFF738E48F344FB967 Certificate serial: 0AF52E2E7D53C7DC4DFAD4D005D463BE1179F357 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2116A6F5F0642D2E606A3ACFF738E48F344FB967.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f0a929c6-1e25-494a-b0f9-55fc4fc94fbc/0/2116A6F5F0642D2E606A3ACFF738E48F344FB967.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 06:13:46 +0000 Manifest this update: Wed 23 Sep 2026 06:08:46 +0000 Manifest next update: Thu 24 Sep 2026 08:46:46 +0000 Files and hashes: 1: 3130332e3232382e3234302e302f32322d3234203d3e203435373030.roa (hash: wIhC8ahVWqomrNJdfdl2zgDb8UOJzi58mGNtTXqf6+U=) 2: 3230322e38372e3234382e302f32312d3234203d3e203234323031.roa (hash: VxgiDdOeTdoccsaOMR0a2e8pGcsjFYPyxSS+V6ZCUrY=) 3: 2116A6F5F0642D2E606A3ACFF738E48F344FB967.crl (hash: Tj8NGk6ezNRwwPoPQTX4ZSPsODxap4Speh5PXORtpdA=) 4: 323430343a3530303a3a2f33322d3438203d3e203234323031.roa (hash: GmHQTfawH8Y622MsP42Ft9zNqj0KvfRVwfqFipMcEyw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f0a929c6-1e25-494a-b0f9-55fc4fc94fbc/0/2116A6F5F0642D2E606A3ACFF738E48F344FB967.crl rsync://rpki-rsync.idnic.net/repo/f0a929c6-1e25-494a-b0f9-55fc4fc94fbc/0/2116A6F5F0642D2E606A3ACFF738E48F344FB967.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2116A6F5F0642D2E606A3ACFF738E48F344FB967.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 08:46:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:f5:2e:2e:7d:53:c7:dc:4d:fa:d4:d0:05:d4:63:be:11:79:f3:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2116A6F5F0642D2E606A3ACFF738E48F344FB967 Validity Not Before: Sep 23 06:08:46 2026 GMT Not After : Sep 24 08:46:46 2026 GMT Subject: CN=AB98FF3A140D9737C9CA84B85539E0CE84985FCB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:99:4f:36:d6:b6:2c:d5:13:97:7c:a5:ea:41: 62:38:3a:d5:98:62:04:11:bb:ff:fd:50:19:93:24: 8e:50:91:b8:1f:db:71:2d:28:7e:66:18:d9:38:41: a2:91:f5:11:5b:4c:87:2c:2f:c1:82:f5:0b:35:17: 34:ff:03:e4:94:c7:c7:52:84:99:ec:79:43:02:ef: 77:da:52:13:e9:e3:f9:58:45:77:d5:40:44:ce:84: 3a:6d:9c:90:8b:c2:63:2b:71:64:71:da:9d:b7:9d: cf:5d:3f:8e:36:1e:7e:18:1a:bd:5b:1e:f8:8f:0c: 27:ce:2f:b0:c4:d7:0b:f0:5d:94:03:65:4a:7b:d9: 4d:93:e0:cd:8a:8d:dd:d6:7a:b3:bd:5a:56:ac:64: 9e:e0:d4:00:31:90:f9:61:85:34:81:5d:9d:5e:c6: 40:10:1a:71:14:12:f3:31:a6:94:f5:83:f5:79:fa: 5c:5b:76:0f:b9:16:ed:b1:28:5b:05:69:b9:d3:a3: 66:fc:77:e5:2b:a7:ca:b5:d4:33:1d:65:e6:eb:84: 88:03:48:63:24:d8:d8:5f:44:7c:5e:2e:21:62:5a: 13:69:45:ae:0c:e9:73:55:f8:37:4c:c1:e9:a0:92: e1:c5:78:51:7e:98:55:4e:a9:10:05:24:f4:19:32: d9:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:98:FF:3A:14:0D:97:37:C9:CA:84:B8:55:39:E0:CE:84:98:5F:CB X509v3 Authority Key Identifier: keyid:21:16:A6:F5:F0:64:2D:2E:60:6A:3A:CF:F7:38:E4:8F:34:4F:B9:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f0a929c6-1e25-494a-b0f9-55fc4fc94fbc/0/2116A6F5F0642D2E606A3ACFF738E48F344FB967.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2116A6F5F0642D2E606A3ACFF738E48F344FB967.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f0a929c6-1e25-494a-b0f9-55fc4fc94fbc/0/2116A6F5F0642D2E606A3ACFF738E48F344FB967.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:a5:6c:50:7e:23:aa:c6:52:c4:78:7b:04:7b:cd:c5:05:58: 4f:06:f4:01:d6:b0:b8:3a:7e:5c:e0:0c:07:0b:e6:8e:4b:17: dc:21:24:30:c3:fe:f2:1f:31:55:08:42:7c:b4:dd:af:cd:58: 5a:65:79:7e:b7:be:9e:30:ff:46:b5:f0:dc:4e:3e:e8:29:67: 52:39:1e:61:7b:f0:d0:ab:db:67:8a:33:89:4e:d1:e9:b0:51: 30:d7:b4:36:da:c0:db:9a:14:65:13:72:09:70:08:21:b3:f6: ee:41:93:3c:01:61:ae:5d:95:f3:ae:b3:85:d2:bd:46:2b:de: 27:e0:46:1f:94:64:35:35:99:2f:7b:d6:f9:dc:fd:fd:ba:34: 30:58:e9:58:d4:c7:ca:6f:07:f0:5e:0c:38:be:88:46:03:12: 1c:49:b4:6f:db:3a:d0:84:7c:bc:0b:ba:c3:dd:56:84:03:27: 93:2d:fe:7a:b9:9a:6d:34:2d:02:38:7c:fd:87:9e:33:99:48: 0b:9b:7a:11:0c:07:ee:40:3e:5e:01:1e:98:0f:de:8e:97:87: c5:e3:4e:1d:cf:0f:f6:81:5b:31:f4:cf:f4:18:b4:ff:8f:a5: 83:5d:d3:58:4a:30:8c:21:a2:ab:8d:7e:bd:aa:89:dc:d9:84: 6b:b6:39:57 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCvUuLn1Tx9xN+tTQBdRjvhF581cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjExNkE2RjVGMDY0MkQyRTYwNkEzQUNGRjczOEU0OEYz NDRGQjk2NzAeFw0yNjA5MjMwNjA4NDZaFw0yNjA5MjQwODQ2NDZaMDMxMTAvBgNV BAMTKEFCOThGRjNBMTQwRDk3MzdDOUNBODRCODU1MzlFMENFODQ5ODVGQ0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXmU821rYs1ROXfKXqQWI4OtWY YgQRu//9UBmTJI5Qkbgf23EtKH5mGNk4QaKR9RFbTIcsL8GC9Qs1FzT/A+SUx8dS hJnseUMC73faUhPp4/lYRXfVQETOhDptnJCLwmMrcWRx2p23nc9dP442Hn4YGr1b HviPDCfOL7DE1wvwXZQDZUp72U2T4M2Kjd3WerO9WlasZJ7g1AAxkPlhhTSBXZ1e xkAQGnEUEvMxppT1g/V5+lxbdg+5Fu2xKFsFabnTo2b8d+Urp8q11DMdZebrhIgD SGMk2NhfRHxeLiFiWhNpRa4M6XNV+DdMwemgkuHFeFF+mFVOqRAFJPQZMtl1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUq5j/OhQNlzfJyoS4VTngzoSYX8swHwYDVR0j BBgwFoAUIRam9fBkLS5gajrP9zjkjzRPuWcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjBhOTI5YzYtMWUyNS00OTRhLWIwZjktNTVmYzRmYzk0ZmJjLzAvMjExNkE2RjVG MDY0MkQyRTYwNkEzQUNGRjczOEU0OEYzNDRGQjk2Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMTE2QTZGNUYwNjQyRDJFNjA2QTNBQ0ZGNzM4RTQ4RjM0NEZC OTY3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjBhOTI5YzYtMWUyNS00OTRhLWIw ZjktNTVmYzRmYzk0ZmJjLzAvMjExNkE2RjVGMDY0MkQyRTYwNkEzQUNGRjczOEU0 OEYzNDRGQjk2Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI+lbFB+I6rGUsR4ewR7zcUFWE8G9AHWsLg6 flzgDAcL5o5LF9whJDDD/vIfMVUIQny03a/NWFpleX63vp4w/0a18NxOPugpZ1I5 HmF78NCr22eKM4lO0emwUTDXtDbawNuaFGUTcglwCCGz9u5BkzwBYa5dlfOus4XS vUYr3ifgRh+UZDU1mS971vnc/f26NDBY6VjUx8pvB/BeDDi+iEYDEhxJtG/bOtCE fLwLusPdVoQDJ5Mt/nq5mm00LQI4fP2HnjOZSAubehEMB+5APl4BHpgP3o6Xh8Xj Th3PD/aBWzH0z/QYtP+PpYNd01hKMIwhoquNfr2qidzZhGu2OVc= -----END CERTIFICATE-----Generated at Wed Sep 23 21:56:59 2026 by rpki-client