$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1ce8da9c-bdbd-4908-ba92-d90fea9c8f05/0/16E36A76C68AD7EF73B872D0A244597711CEC92B.mft File: 16E36A76C68AD7EF73B872D0A244597711CEC92B.mft (raw, json) Hash identifier: ttNpYRtt1yR75kADEYow6B4jO96pKywm5Qo/4y+2krQ= Subject key identifier: 9B:DC:15:0D:0C:76:54:7C:08:28:FE:E6:F1:AD:54:02:76:2F:5E:D5 Authority key identifier: 16:E3:6A:76:C6:8A:D7:EF:73:B8:72:D0:A2:44:59:77:11:CE:C9:2B Certificate issuer: /CN=16E36A76C68AD7EF73B872D0A244597711CEC92B Certificate serial: 2B6BB82CB100125864E9083A2E818EEC48F7AEB2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/16E36A76C68AD7EF73B872D0A244597711CEC92B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1ce8da9c-bdbd-4908-ba92-d90fea9c8f05/0/16E36A76C68AD7EF73B872D0A244597711CEC92B.mft Manifest number: BD Signing time: Sun 20 Sep 2026 11:31:22 +0000 Manifest this update: Sun 20 Sep 2026 11:26:22 +0000 Manifest next update: Mon 21 Sep 2026 14:14:22 +0000 Files and hashes: 1: 16E36A76C68AD7EF73B872D0A244597711CEC92B.crl (hash: Yg3x9R7TFbcRmjjq34l5/bYHcMHs+XI2i+8T2n5GspU=) 2: 3130332e34392e35302e302f32332d3234203d3e20313530343830.roa (hash: EANVJlxEg4YVe0voA5UkBVDWr1/ZEx1MsPgsXOFauYo=) 3: 3130332e34392e35312e302f32342d3234203d3e20313530343830.roa (hash: AGIMZGexipjyvpy+LmJUJY6hAht+8SMw5E+al1hg6Ds=) 4: 3130332e34392e35302e302f32342d3234203d3e20313530343830.roa (hash: d1VIPUB5246bc9b42k+QQyjwKQyjJBedF26BcXOCp3E=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1ce8da9c-bdbd-4908-ba92-d90fea9c8f05/0/16E36A76C68AD7EF73B872D0A244597711CEC92B.crl rsync://rpki-rsync.idnic.net/repo/1ce8da9c-bdbd-4908-ba92-d90fea9c8f05/0/16E36A76C68AD7EF73B872D0A244597711CEC92B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/16E36A76C68AD7EF73B872D0A244597711CEC92B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 14:14:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:6b:b8:2c:b1:00:12:58:64:e9:08:3a:2e:81:8e:ec:48:f7:ae:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16E36A76C68AD7EF73B872D0A244597711CEC92B Validity Not Before: Sep 20 11:26:22 2026 GMT Not After : Sep 21 14:14:22 2026 GMT Subject: CN=9BDC150D0C76547C0828FEE6F1AD5402762F5ED5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:4b:8d:30:b3:52:61:28:70:53:f3:2b:37:eb: 6f:f9:e2:51:f6:c7:fd:97:db:bd:99:29:06:d2:d2: 0b:4c:d9:60:69:ba:df:e6:8d:c1:bb:2a:73:7f:5b: 57:b0:c1:24:d1:12:04:46:01:eb:d1:2e:05:19:6c: 69:31:3a:3f:60:68:c6:c2:d2:71:26:ed:f6:fe:02: d5:46:6f:1f:b4:20:a0:d1:09:23:2d:58:b8:59:03: 61:c8:95:36:40:78:e3:35:1c:c5:25:c7:3d:0a:6d: 37:9d:9a:05:03:60:c7:d4:d0:46:be:f7:82:68:21: 06:b8:62:e2:3b:7a:47:fa:02:64:d9:6a:f8:9c:92: d4:51:72:6f:4c:22:53:ee:43:d3:03:48:c4:e5:f4: 2b:f7:7a:01:bc:4d:70:83:81:94:21:65:5b:4e:f8: 28:58:86:13:ba:f5:f3:6a:b8:81:12:cb:39:cf:54: 58:16:fb:ee:12:8a:0f:8e:e7:c7:6e:0f:5a:7a:14: 2c:99:27:3e:7b:62:7f:12:0d:35:78:56:d1:64:bc: 32:83:29:15:fb:36:47:de:66:d2:29:59:b5:ce:8c: a9:2c:8a:a6:22:2a:65:ff:56:ff:2a:9f:d9:61:a6: d2:76:71:86:f8:76:c3:c4:b8:f4:72:fd:d8:84:e8: 0d:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:DC:15:0D:0C:76:54:7C:08:28:FE:E6:F1:AD:54:02:76:2F:5E:D5 X509v3 Authority Key Identifier: keyid:16:E3:6A:76:C6:8A:D7:EF:73:B8:72:D0:A2:44:59:77:11:CE:C9:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1ce8da9c-bdbd-4908-ba92-d90fea9c8f05/0/16E36A76C68AD7EF73B872D0A244597711CEC92B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/16E36A76C68AD7EF73B872D0A244597711CEC92B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1ce8da9c-bdbd-4908-ba92-d90fea9c8f05/0/16E36A76C68AD7EF73B872D0A244597711CEC92B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:ad:f9:07:b2:18:4e:db:41:37:67:59:f1:e2:c4:d0:99:91: dd:6c:f5:fd:ef:23:5d:67:ca:bb:6f:16:7b:75:09:71:54:8c: 87:41:a9:8c:e0:79:5d:57:65:52:47:ee:76:ca:a8:ca:c8:13: 94:e3:29:59:e6:09:53:87:70:33:44:73:53:a2:17:cc:c0:86: 8d:8b:df:bf:ab:2e:94:57:1a:59:33:57:27:bf:4b:ca:a9:08: 1f:28:27:af:98:0f:a0:f6:e8:cb:9f:6d:8b:c2:1b:9a:b6:20: 5e:5e:00:19:d9:79:24:e6:64:3d:e9:ed:a9:38:6e:4a:99:89: 22:09:e3:61:83:9f:36:af:e0:2b:7e:06:3f:02:13:82:84:58: e7:dd:ef:08:9a:49:07:d9:87:fe:de:4d:73:40:b3:0e:f5:1f: 81:91:0c:78:a4:16:c3:e4:4f:49:c8:bd:8d:c0:1d:f4:96:b6: 04:7e:34:90:64:9a:cb:7c:32:56:c7:8b:92:2c:96:f3:d1:fc: 5d:f0:57:ba:92:45:a0:45:99:48:d5:39:3b:0d:ce:e7:08:57: 0b:ce:6d:3e:49:9c:e1:3c:15:bc:01:ae:2b:5e:fe:13:c8:37: 95:46:ed:21:0a:b1:cf:2d:8f:1b:bc:21:e8:15:d3:14:78:8a: a3:da:3b:dc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK2u4LLEAElhk6Qg6LoGO7Ej3rrIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTZFMzZBNzZDNjhBRDdFRjczQjg3MkQwQTI0NDU5Nzcx MUNFQzkyQjAeFw0yNjA5MjAxMTI2MjJaFw0yNjA5MjExNDE0MjJaMDMxMTAvBgNV BAMTKDlCREMxNTBEMEM3NjU0N0MwODI4RkVFNkYxQUQ1NDAyNzYyRjVFRDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgS40ws1JhKHBT8ys362/54lH2 x/2X272ZKQbS0gtM2WBput/mjcG7KnN/W1ewwSTREgRGAevRLgUZbGkxOj9gaMbC 0nEm7fb+AtVGbx+0IKDRCSMtWLhZA2HIlTZAeOM1HMUlxz0KbTedmgUDYMfU0Ea+ 94JoIQa4YuI7ekf6AmTZavicktRRcm9MIlPuQ9MDSMTl9Cv3egG8TXCDgZQhZVtO +ChYhhO69fNquIESyznPVFgW++4Sig+O58duD1p6FCyZJz57Yn8SDTV4VtFkvDKD KRX7NkfeZtIpWbXOjKksiqYiKmX/Vv8qn9lhptJ2cYb4dsPEuPRy/diE6A1nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUm9wVDQx2VHwIKP7m8a1UAnYvXtUwHwYDVR0j BBgwFoAUFuNqdsaK1+9zuHLQokRZdxHOySswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWNlOGRhOWMtYmRiZC00OTA4LWJhOTItZDkwZmVhOWM4ZjA1LzAvMTZFMzZBNzZD NjhBRDdFRjczQjg3MkQwQTI0NDU5NzcxMUNFQzkyQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xNkUzNkE3NkM2OEFEN0VGNzNCODcyRDBBMjQ0NTk3NzExQ0VD OTJCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWNlOGRhOWMtYmRiZC00OTA4LWJh OTItZDkwZmVhOWM4ZjA1LzAvMTZFMzZBNzZDNjhBRDdFRjczQjg3MkQwQTI0NDU5 NzcxMUNFQzkyQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEat+QeyGE7bQTdnWfHixNCZkd1s9f3vI11n yrtvFnt1CXFUjIdBqYzgeV1XZVJH7nbKqMrIE5TjKVnmCVOHcDNEc1OiF8zAho2L 37+rLpRXGlkzVye/S8qpCB8oJ6+YD6D26MufbYvCG5q2IF5eABnZeSTmZD3p7ak4 bkqZiSIJ42GDnzav4Ct+Bj8CE4KEWOfd7wiaSQfZh/7eTXNAsw71H4GRDHikFsPk T0nIvY3AHfSWtgR+NJBkmst8MlbHi5IslvPR/F3wV7qSRaBFmUjVOTsNzucIVwvO bT5JnOE8FbwBrite/hPIN5VG7SEKsc8tjxu8IegV0xR4iqPaO9w= -----END CERTIFICATE-----Generated at Sun Sep 20 17:03:47 2026 by rpki-client