$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/16FC1DF2D807E338985DE30932EA34E250228796.mft File: 16FC1DF2D807E338985DE30932EA34E250228796.mft (raw, json) Hash identifier: l0efhghJ5K9HXxeiaZH672osExoVmah4w3PA/VWEA70= Subject key identifier: 96:B4:B2:B6:F3:08:2D:FF:95:0B:E8:68:56:EC:E6:F8:31:88:E5:A9 Authority key identifier: 16:FC:1D:F2:D8:07:E3:38:98:5D:E3:09:32:EA:34:E2:50:22:87:96 Certificate issuer: /CN=16FC1DF2D807E338985DE30932EA34E250228796 Certificate serial: 63A938AD417128EAA4C284B06A35EE22429F0855 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/16FC1DF2D807E338985DE30932EA34E250228796.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/16FC1DF2D807E338985DE30932EA34E250228796.mft Manifest number: C8 Signing time: Mon 28 Sep 2026 16:30:03 +0000 Manifest this update: Mon 28 Sep 2026 16:25:03 +0000 Manifest next update: Tue 29 Sep 2026 17:20:03 +0000 Files and hashes: 1: 3130332e3131392e3131382e302f32342d3234203d3e20313337333738.roa (hash: 0FBu/rjRCHpSQhidXvQmco2Gd+NRZ/I75lgQ9c+yrhs=) 2: 323430333a343334303a3a2f33322d3332203d3e20313337333738.roa (hash: 1dE/zpXNqMfI1ilfUn5DrrCSaXBhuo+1IUrzkuKY22o=) 3: 3130332e3131392e3131372e302f32342d3234203d3e20313337333738.roa (hash: roqA5lD4sFTDR1g7UxqG9+ZjfyukoDRdAX9XNlxiMJE=) 4: 3130332e3131392e3131392e302f32342d3234203d3e20313337333738.roa (hash: iWp9zL2tSRzcXXiV+WVgdnT86pBdN5E8UOgytY/+pL4=) 5: 16FC1DF2D807E338985DE30932EA34E250228796.crl (hash: 0IS1FlbFDx1wEhsCqgNmzro4x1kpBFjFSfV1F3k7xEE=) 6: 3130332e3131392e3131362e302f32342d3234203d3e20313337333738.roa (hash: A7xyFA4qpVRKeavzBnm+Cjv8gBWwy1p/6K95VuLQBjM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/16FC1DF2D807E338985DE30932EA34E250228796.crl rsync://rpki-rsync.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/16FC1DF2D807E338985DE30932EA34E250228796.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/16FC1DF2D807E338985DE30932EA34E250228796.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 17:20:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:a9:38:ad:41:71:28:ea:a4:c2:84:b0:6a:35:ee:22:42:9f:08:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16FC1DF2D807E338985DE30932EA34E250228796 Validity Not Before: Sep 28 16:25:03 2026 GMT Not After : Sep 29 17:20:03 2026 GMT Subject: CN=96B4B2B6F3082DFF950BE86856ECE6F83188E5A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:29:fa:0a:68:01:b7:50:65:64:97:e1:b4:b8: 4d:ed:67:16:c4:36:c6:e7:26:41:6a:f7:7c:9d:6e: c2:34:45:5d:d0:5f:2e:a7:d3:e6:83:37:5d:a2:7f: 65:61:13:ae:4b:68:7a:22:4f:84:99:25:3c:4e:c5: d3:28:40:ab:bc:e6:b2:a0:a1:33:fc:01:c3:df:f0: c4:c7:53:80:0b:a5:01:d4:f2:f6:2b:37:6c:55:4c: 91:85:70:42:6c:af:dd:38:b3:71:43:b5:02:ab:92: 7f:17:ea:6e:9c:83:cc:9d:1f:d4:5e:a5:98:81:8c: 5f:97:ff:be:73:ab:ec:5d:e9:26:e4:ed:b6:36:a0: 1d:1f:46:d6:0f:97:ab:f2:2f:d9:10:bd:d0:da:04: 85:6a:c6:28:c5:ac:9c:84:4b:61:17:91:d4:29:4f: 0a:29:68:f2:67:29:94:30:26:75:a7:a7:b4:cd:56: 1d:48:df:dd:28:1a:59:61:8a:3f:57:8e:72:94:91: c6:7f:0b:f4:f2:bc:e1:1a:a9:e5:cc:a9:72:16:c2: 76:8e:a1:c1:71:38:9c:e8:32:1f:e5:81:cb:3c:44: 24:fc:d7:0a:fa:67:b7:21:4e:92:8a:e4:97:cf:d1: fc:98:a9:43:b9:f4:e5:51:b7:55:18:28:30:08:08: 79:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:B4:B2:B6:F3:08:2D:FF:95:0B:E8:68:56:EC:E6:F8:31:88:E5:A9 X509v3 Authority Key Identifier: keyid:16:FC:1D:F2:D8:07:E3:38:98:5D:E3:09:32:EA:34:E2:50:22:87:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/16FC1DF2D807E338985DE30932EA34E250228796.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/16FC1DF2D807E338985DE30932EA34E250228796.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/16FC1DF2D807E338985DE30932EA34E250228796.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:1a:31:04:b5:88:9e:83:e0:d8:d5:44:96:be:ca:85:da:fa: a7:da:67:1a:c2:31:b3:63:b5:b4:0c:d3:44:61:d3:dd:79:09: db:ab:41:f9:0b:fb:2e:d9:84:6a:95:7c:44:7b:f5:0e:1c:a5: c6:17:a2:9a:d5:ca:6e:18:44:56:bf:8a:61:fe:1f:e6:23:de: 09:a8:6e:d1:84:7c:f3:ff:d7:99:61:db:e8:60:56:cb:32:96: c5:3c:2d:8d:57:4c:f2:e6:39:8c:6c:e4:bc:3a:15:0c:28:62: 97:40:93:bc:8b:0f:4c:8c:85:fd:cc:84:4b:74:75:d4:64:41: 80:97:34:8c:40:ee:43:71:4e:a0:16:e2:c0:d2:59:0f:0a:f3: fb:26:5a:92:a8:4d:5a:aa:d9:ae:28:bd:38:c5:78:18:ae:28: 31:de:0e:39:13:d8:da:70:3e:3f:4a:5e:89:df:d8:a4:43:65: e3:7a:39:d3:c0:bb:30:63:d6:53:a5:81:f9:76:22:91:9f:e4: 59:b3:04:26:7a:35:bf:52:3d:e4:b6:ba:31:2e:0a:99:18:83: ec:75:73:4f:e5:1c:4c:a0:d3:f5:0f:98:0f:79:08:53:79:9e: cf:3f:df:06:f3:92:d7:1d:ea:4b:79:08:06:fd:23:e2:fd:e7: eb:0e:5a:10 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY6k4rUFxKOqkwoSwajXuIkKfCFUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTZGQzFERjJEODA3RTMzODk4NURFMzA5MzJFQTM0RTI1 MDIyODc5NjAeFw0yNjA5MjgxNjI1MDNaFw0yNjA5MjkxNzIwMDNaMDMxMTAvBgNV BAMTKDk2QjRCMkI2RjMwODJERkY5NTBCRTg2ODU2RUNFNkY4MzE4OEU1QTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMKfoKaAG3UGVkl+G0uE3tZxbE NsbnJkFq93ydbsI0RV3QXy6n0+aDN12if2VhE65LaHoiT4SZJTxOxdMoQKu85rKg oTP8AcPf8MTHU4ALpQHU8vYrN2xVTJGFcEJsr904s3FDtQKrkn8X6m6cg8ydH9Re pZiBjF+X/75zq+xd6Sbk7bY2oB0fRtYPl6vyL9kQvdDaBIVqxijFrJyES2EXkdQp TwopaPJnKZQwJnWnp7TNVh1I390oGllhij9XjnKUkcZ/C/TyvOEaqeXMqXIWwnaO ocFxOJzoMh/lgcs8RCT81wr6Z7chTpKK5JfP0fyYqUO59OVRt1UYKDAICHlXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlrSytvMILf+VC+hoVuzm+DGI5akwHwYDVR0j BBgwFoAUFvwd8tgH4ziYXeMJMuo04lAih5YwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2U4OTUwZjAtM2IxNC00YTZkLWIzMGYtNzUzNzljYjJlYmNlLzAvMTZGQzFERjJE ODA3RTMzODk4NURFMzA5MzJFQTM0RTI1MDIyODc5Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xNkZDMURGMkQ4MDdFMzM4OTg1REUzMDkzMkVBMzRFMjUwMjI4 Nzk2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2U4OTUwZjAtM2IxNC00YTZkLWIz MGYtNzUzNzljYjJlYmNlLzAvMTZGQzFERjJEODA3RTMzODk4NURFMzA5MzJFQTM0 RTI1MDIyODc5Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIkaMQS1iJ6D4NjVRJa+yoXa+qfaZxrCMbNj tbQM00Rh0915CdurQfkL+y7ZhGqVfER79Q4cpcYXoprVym4YRFa/imH+H+Yj3gmo btGEfPP/15lh2+hgVssylsU8LY1XTPLmOYxs5Lw6FQwoYpdAk7yLD0yMhf3MhEt0 ddRkQYCXNIxA7kNxTqAW4sDSWQ8K8/smWpKoTVqq2a4ovTjFeBiuKDHeDjkT2Npw Pj9KXonf2KRDZeN6OdPAuzBj1lOlgfl2IpGf5FmzBCZ6Nb9SPeS2ujEuCpkYg+x1 c0/lHEyg0/UPmA95CFN5ns8/3wbzktcd6kt5CAb9I+L95+sOWhA= -----END CERTIFICATE-----Generated at Tue Sep 29 11:53:57 2026 by rpki-client