$ rpki-client -vvvf rpki-rsync.idnic.net/repo/59cc2e5b-3b91-42af-8203-5e3b91704843/0/C16F24B51E8F9D35194675A5A6B5BBF38DDB3302.mft File: C16F24B51E8F9D35194675A5A6B5BBF38DDB3302.mft (raw, json) Hash identifier: bJWJxjmYYNJOh0VlA6Aa6nzY21G9ziKOygMkkw+uOLo= Subject key identifier: 90:A6:4A:D2:88:71:07:DB:64:1D:23:1E:B1:D9:45:FA:02:C4:86:DC Authority key identifier: C1:6F:24:B5:1E:8F:9D:35:19:46:75:A5:A6:B5:BB:F3:8D:DB:33:02 Certificate issuer: /CN=C16F24B51E8F9D35194675A5A6B5BBF38DDB3302 Certificate serial: 5AF657738E02873ED32C68BF1EEE451AC91299B5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C16F24B51E8F9D35194675A5A6B5BBF38DDB3302.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/59cc2e5b-3b91-42af-8203-5e3b91704843/0/C16F24B51E8F9D35194675A5A6B5BBF38DDB3302.mft Manifest number: BF Signing time: Tue 22 Sep 2026 02:19:24 +0000 Manifest this update: Tue 22 Sep 2026 02:14:24 +0000 Manifest next update: Wed 23 Sep 2026 03:30:24 +0000 Files and hashes: 1: C16F24B51E8F9D35194675A5A6B5BBF38DDB3302.crl (hash: h8+tWlp17+zUGelYdJtEh9r90+ZXmZpCUKJxgCY50sU=) 2: 3130332e3138302e39352e302f32342d3234203d3e20313439333538.roa (hash: Cpjg4SMt12A8DW7uKCND6UkuKdprXSLBV2afftUulJU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/59cc2e5b-3b91-42af-8203-5e3b91704843/0/C16F24B51E8F9D35194675A5A6B5BBF38DDB3302.crl rsync://rpki-rsync.idnic.net/repo/59cc2e5b-3b91-42af-8203-5e3b91704843/0/C16F24B51E8F9D35194675A5A6B5BBF38DDB3302.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C16F24B51E8F9D35194675A5A6B5BBF38DDB3302.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 03:30:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:f6:57:73:8e:02:87:3e:d3:2c:68:bf:1e:ee:45:1a:c9:12:99:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C16F24B51E8F9D35194675A5A6B5BBF38DDB3302 Validity Not Before: Sep 22 02:14:24 2026 GMT Not After : Sep 23 03:30:24 2026 GMT Subject: CN=90A64AD2887107DB641D231EB1D945FA02C486DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:4e:d4:a1:c1:2c:25:d9:f8:59:d7:8e:17:5a: df:97:c3:b4:a5:7b:d3:13:77:7c:37:00:29:f8:86: a1:1b:91:26:6f:3f:a6:89:a6:41:1a:96:4e:0c:8c: 12:7d:5e:84:01:80:0b:ff:bf:3e:64:99:25:ca:41: 01:31:e2:ca:58:ec:eb:77:aa:51:9a:a8:ed:5c:51: 8e:97:0a:c4:5f:a1:45:30:05:fe:03:36:ac:ea:dc: 1d:83:67:6d:f5:ff:1a:85:4f:a8:3f:d2:db:bc:a4: 33:31:b3:40:55:e7:37:ca:ae:d9:d7:9d:f6:37:78: c4:0a:89:08:6e:8d:c0:84:46:f9:14:15:dd:67:14: fb:02:68:c4:c0:bc:69:1d:d2:7a:93:b6:3f:eb:82: 2d:dc:44:54:53:45:84:dd:b5:5f:66:5b:3f:2b:61: 24:53:a2:dd:4d:03:21:ab:3f:d9:07:e5:89:8f:ee: 8a:e2:eb:dd:87:fb:b0:9d:7f:3c:17:6a:e3:29:ef: ec:a4:db:7b:cd:98:40:33:7e:a7:e5:92:89:2f:67: ed:1a:67:49:4e:73:91:9d:1c:93:2a:85:c1:45:8d: ec:69:f5:bc:0f:a2:ee:54:00:65:f1:6d:c2:ff:c0: c0:1d:40:c1:1e:57:cd:46:96:73:88:4a:cf:3b:c0: d2:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:A6:4A:D2:88:71:07:DB:64:1D:23:1E:B1:D9:45:FA:02:C4:86:DC X509v3 Authority Key Identifier: keyid:C1:6F:24:B5:1E:8F:9D:35:19:46:75:A5:A6:B5:BB:F3:8D:DB:33:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/59cc2e5b-3b91-42af-8203-5e3b91704843/0/C16F24B51E8F9D35194675A5A6B5BBF38DDB3302.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C16F24B51E8F9D35194675A5A6B5BBF38DDB3302.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/59cc2e5b-3b91-42af-8203-5e3b91704843/0/C16F24B51E8F9D35194675A5A6B5BBF38DDB3302.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:35:97:de:41:45:f7:cc:d2:87:d1:07:e7:9e:a5:53:d7:64: 82:31:81:89:f4:ab:a2:69:32:29:b8:3a:6b:02:1e:f8:ed:41: c3:d7:28:de:73:f1:3b:05:2a:04:4b:c4:bc:88:cc:44:11:09: ee:e6:95:3f:12:fe:85:75:31:c1:e2:35:83:47:92:b6:0e:5e: c2:4a:ac:ab:68:53:f0:15:42:ed:76:87:d6:17:cf:34:e5:e9: 57:34:29:b2:cd:7c:2d:27:06:14:e0:e3:06:03:ae:07:cb:00: 49:57:f7:0e:af:86:fb:29:26:55:0f:c4:29:e1:b9:da:d7:b7: d8:27:27:52:24:a9:fc:7a:60:ca:e2:3c:36:e5:21:a8:41:a6: 55:6b:83:67:aa:49:40:74:dd:03:6f:97:17:42:e5:ef:c6:f4: ca:f6:f8:1b:68:bf:65:9d:7f:d1:b7:64:17:7d:5a:e9:86:3c: 6f:c3:ab:f7:5c:39:88:7e:87:d3:ed:10:cb:00:15:ee:35:d3: 21:bc:2d:b3:59:ff:82:af:79:2f:75:39:5f:2f:ba:ee:1b:8c: c8:1b:85:25:55:13:7a:1e:32:75:ad:6e:9c:c4:9b:42:fe:32: 29:4b:3d:06:9a:03:56:92:42:0b:7d:85:9d:4f:5b:70:0a:d7: b0:ac:18:92 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWvZXc44Chz7TLGi/Hu5FGskSmbUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzE2RjI0QjUxRThGOUQzNTE5NDY3NUE1QTZCNUJCRjM4 RERCMzMwMjAeFw0yNjA5MjIwMjE0MjRaFw0yNjA5MjMwMzMwMjRaMDMxMTAvBgNV BAMTKDkwQTY0QUQyODg3MTA3REI2NDFEMjMxRUIxRDk0NUZBMDJDNDg2REMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7TtShwSwl2fhZ144XWt+Xw7Sl e9MTd3w3ACn4hqEbkSZvP6aJpkEalk4MjBJ9XoQBgAv/vz5kmSXKQQEx4spY7Ot3 qlGaqO1cUY6XCsRfoUUwBf4DNqzq3B2DZ231/xqFT6g/0tu8pDMxs0BV5zfKrtnX nfY3eMQKiQhujcCERvkUFd1nFPsCaMTAvGkd0nqTtj/rgi3cRFRTRYTdtV9mWz8r YSRTot1NAyGrP9kH5YmP7ori692H+7CdfzwXauMp7+yk23vNmEAzfqflkokvZ+0a Z0lOc5GdHJMqhcFFjexp9bwPou5UAGXxbcL/wMAdQMEeV81GlnOISs87wNKxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkKZK0ohxB9tkHSMesdlF+gLEhtwwHwYDVR0j BBgwFoAUwW8ktR6PnTUZRnWlprW7843bMwIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTljYzJlNWItM2I5MS00MmFmLTgyMDMtNWUzYjkxNzA0ODQzLzAvQzE2RjI0QjUx RThGOUQzNTE5NDY3NUE1QTZCNUJCRjM4RERCMzMwMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DMTZGMjRCNTFFOEY5RDM1MTk0Njc1QTVBNkI1QkJGMzhEREIz MzAyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTljYzJlNWItM2I5MS00MmFmLTgy MDMtNWUzYjkxNzA0ODQzLzAvQzE2RjI0QjUxRThGOUQzNTE5NDY3NUE1QTZCNUJC RjM4RERCMzMwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHM1l95BRffM0ofRB+eepVPXZIIxgYn0q6Jp Mim4OmsCHvjtQcPXKN5z8TsFKgRLxLyIzEQRCe7mlT8S/oV1McHiNYNHkrYOXsJK rKtoU/AVQu12h9YXzzTl6Vc0KbLNfC0nBhTg4wYDrgfLAElX9w6vhvspJlUPxCnh udrXt9gnJ1Ikqfx6YMriPDblIahBplVrg2eqSUB03QNvlxdC5e/G9Mr2+Btov2Wd f9G3ZBd9WumGPG/Dq/dcOYh+h9PtEMsAFe410yG8LbNZ/4KveS91OV8vuu4bjMgb hSVVE3oeMnWtbpzEm0L+MilLPQaaA1aSQgt9hZ1PW3AK17CsGJI= -----END CERTIFICATE-----Generated at Tue Sep 22 20:40:45 2026 by rpki-client