$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f0a929c6-1e25-494a-b0f9-55fc4fc94fbc/0/2116A6F5F0642D2E606A3ACFF738E48F344FB967.mft File: 2116A6F5F0642D2E606A3ACFF738E48F344FB967.mft (raw, json) Hash identifier: BftH2EPw2elr7gLzYntK0RFRy0ih8K+/jOqX5f35/D0= Subject key identifier: 7F:A4:60:6A:09:6E:92:37:5C:97:BE:6D:A8:56:6B:75:E5:5A:72:6C Authority key identifier: 21:16:A6:F5:F0:64:2D:2E:60:6A:3A:CF:F7:38:E4:8F:34:4F:B9:67 Certificate issuer: /CN=2116A6F5F0642D2E606A3ACFF738E48F344FB967 Certificate serial: 505FD4ABF404FC1E9CCFFD21079FB873D42210E2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2116A6F5F0642D2E606A3ACFF738E48F344FB967.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f0a929c6-1e25-494a-b0f9-55fc4fc94fbc/0/2116A6F5F0642D2E606A3ACFF738E48F344FB967.mft Manifest number: BD Signing time: Sun 20 Sep 2026 05:03:27 +0000 Manifest this update: Sun 20 Sep 2026 04:58:27 +0000 Manifest next update: Mon 21 Sep 2026 06:05:27 +0000 Files and hashes: 1: 323430343a3530303a3a2f33322d3438203d3e203234323031.roa (hash: GmHQTfawH8Y622MsP42Ft9zNqj0KvfRVwfqFipMcEyw=) 2: 3130332e3232382e3234302e302f32322d3234203d3e203435373030.roa (hash: wIhC8ahVWqomrNJdfdl2zgDb8UOJzi58mGNtTXqf6+U=) 3: 2116A6F5F0642D2E606A3ACFF738E48F344FB967.crl (hash: RFIfwyLf8V40HpC7aahIWE3Y6s73h/k/rOEAAH+xTWQ=) 4: 3230322e38372e3234382e302f32312d3234203d3e203234323031.roa (hash: VxgiDdOeTdoccsaOMR0a2e8pGcsjFYPyxSS+V6ZCUrY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f0a929c6-1e25-494a-b0f9-55fc4fc94fbc/0/2116A6F5F0642D2E606A3ACFF738E48F344FB967.crl rsync://rpki-rsync.idnic.net/repo/f0a929c6-1e25-494a-b0f9-55fc4fc94fbc/0/2116A6F5F0642D2E606A3ACFF738E48F344FB967.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2116A6F5F0642D2E606A3ACFF738E48F344FB967.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 06:05:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:5f:d4:ab:f4:04:fc:1e:9c:cf:fd:21:07:9f:b8:73:d4:22:10:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2116A6F5F0642D2E606A3ACFF738E48F344FB967 Validity Not Before: Sep 20 04:58:27 2026 GMT Not After : Sep 21 06:05:27 2026 GMT Subject: CN=7FA4606A096E92375C97BE6DA8566B75E55A726C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:47:c3:04:8c:87:51:12:5f:1a:b0:3b:1a:30: 8d:70:98:d5:02:18:67:26:3d:ef:d7:62:5b:c4:12: fd:57:ef:22:bc:82:20:24:a2:c0:d7:f6:0e:01:1a: 6b:88:96:ca:19:5a:63:04:94:48:95:e3:6b:c7:70: 86:88:28:7e:66:b6:cf:bc:21:34:dd:e8:a2:5c:0f: 24:db:d1:5b:50:4d:af:2f:e7:f7:69:54:d5:81:c4: 46:7f:f8:97:7b:74:df:0e:c8:f9:12:f1:db:0a:2c: d1:d2:0e:9f:48:3b:a1:cd:9c:fc:8f:ed:28:e3:f2: cc:6a:0b:68:d8:ab:e8:04:ca:68:96:06:58:e7:60: 10:e5:5c:ec:95:af:f7:df:c1:4b:a9:14:c6:4a:9a: eb:3c:73:74:bb:e6:a2:65:1a:ae:6a:1e:c9:b4:95: 22:0a:6c:8b:14:ba:8c:76:69:fb:49:ac:e4:4a:dd: 95:04:ad:43:d2:51:45:78:83:06:c8:a5:e0:3e:a7: 8d:3c:0c:47:30:4f:f0:32:e5:b9:ae:6b:b9:8e:60: b5:55:9b:b5:dc:8f:fb:a2:06:76:a1:d3:b7:b5:2e: 0a:f2:e5:ff:89:0e:86:38:a6:cd:71:03:64:b6:af: 4b:f2:52:98:93:46:f3:de:de:2f:bb:98:b7:de:9e: 6a:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:A4:60:6A:09:6E:92:37:5C:97:BE:6D:A8:56:6B:75:E5:5A:72:6C X509v3 Authority Key Identifier: keyid:21:16:A6:F5:F0:64:2D:2E:60:6A:3A:CF:F7:38:E4:8F:34:4F:B9:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f0a929c6-1e25-494a-b0f9-55fc4fc94fbc/0/2116A6F5F0642D2E606A3ACFF738E48F344FB967.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2116A6F5F0642D2E606A3ACFF738E48F344FB967.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f0a929c6-1e25-494a-b0f9-55fc4fc94fbc/0/2116A6F5F0642D2E606A3ACFF738E48F344FB967.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:0b:5a:60:c3:ab:69:de:02:00:d0:f4:fc:ce:4e:73:5f:6e: f3:c2:c4:24:18:9a:ab:ed:d6:7f:5a:af:38:e7:ac:48:1a:99: 25:ce:ae:e4:ba:24:5c:bb:b2:20:eb:07:f7:88:0f:d6:47:aa: 10:2d:c8:5c:21:23:fe:4d:dc:75:64:a6:49:02:b9:85:93:64: b2:3d:7d:be:c5:9b:6f:36:f8:7d:db:fa:83:e8:93:81:31:c6: c8:aa:ed:bf:95:cd:74:e5:71:b2:dd:9e:74:fb:b2:df:a2:ea: 0d:d6:6c:d7:57:45:1c:3a:96:d6:06:68:41:ff:4c:56:2a:12: 50:d9:59:a8:91:58:e2:72:4d:de:51:58:ae:90:23:e0:b6:ce: 4b:7e:36:02:99:b5:ba:96:dd:f1:4b:35:5c:b6:72:e1:1d:62: 7b:b1:20:4b:ca:74:1e:76:4e:d3:6e:54:a2:63:5e:5f:07:42: 1f:ac:81:53:99:9a:8b:12:0a:bd:5b:1c:59:4f:2a:a6:1c:f1: 89:bc:5d:1b:70:35:c3:1d:36:fd:97:eb:11:41:07:4c:49:64: ce:3d:50:93:f2:28:c7:a8:69:e0:8a:58:0b:84:1a:24:c4:87: 2f:8e:1c:82:83:b2:65:63:2c:f1:ac:9d:99:5a:bf:13:32:e3: a1:55:c5:81 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUF/Uq/QE/B6cz/0hB5+4c9QiEOIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjExNkE2RjVGMDY0MkQyRTYwNkEzQUNGRjczOEU0OEYz NDRGQjk2NzAeFw0yNjA5MjAwNDU4MjdaFw0yNjA5MjEwNjA1MjdaMDMxMTAvBgNV BAMTKDdGQTQ2MDZBMDk2RTkyMzc1Qzk3QkU2REE4NTY2Qjc1RTU1QTcyNkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCBR8MEjIdREl8asDsaMI1wmNUC GGcmPe/XYlvEEv1X7yK8giAkosDX9g4BGmuIlsoZWmMElEiV42vHcIaIKH5mts+8 ITTd6KJcDyTb0VtQTa8v5/dpVNWBxEZ/+Jd7dN8OyPkS8dsKLNHSDp9IO6HNnPyP 7Sjj8sxqC2jYq+gEymiWBljnYBDlXOyVr/ffwUupFMZKmus8c3S75qJlGq5qHsm0 lSIKbIsUuox2aftJrORK3ZUErUPSUUV4gwbIpeA+p408DEcwT/Ay5bmua7mOYLVV m7Xcj/uiBnah07e1Lgry5f+JDoY4ps1xA2S2r0vyUpiTRvPe3i+7mLfenmolAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUf6Rgaglukjdcl75tqFZrdeVacmwwHwYDVR0j BBgwFoAUIRam9fBkLS5gajrP9zjkjzRPuWcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjBhOTI5YzYtMWUyNS00OTRhLWIwZjktNTVmYzRmYzk0ZmJjLzAvMjExNkE2RjVG MDY0MkQyRTYwNkEzQUNGRjczOEU0OEYzNDRGQjk2Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMTE2QTZGNUYwNjQyRDJFNjA2QTNBQ0ZGNzM4RTQ4RjM0NEZC OTY3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjBhOTI5YzYtMWUyNS00OTRhLWIw ZjktNTVmYzRmYzk0ZmJjLzAvMjExNkE2RjVGMDY0MkQyRTYwNkEzQUNGRjczOEU0 OEYzNDRGQjk2Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAsLWmDDq2neAgDQ9PzOTnNfbvPCxCQYmqvt 1n9arzjnrEgamSXOruS6JFy7siDrB/eID9ZHqhAtyFwhI/5N3HVkpkkCuYWTZLI9 fb7Fm282+H3b+oPok4Exxsiq7b+VzXTlcbLdnnT7st+i6g3WbNdXRRw6ltYGaEH/ TFYqElDZWaiRWOJyTd5RWK6QI+C2zkt+NgKZtbqW3fFLNVy2cuEdYnuxIEvKdB52 TtNuVKJjXl8HQh+sgVOZmosSCr1bHFlPKqYc8Ym8XRtwNcMdNv2X6xFBB0xJZM49 UJPyKMeoaeCKWAuEGiTEhy+OHIKDsmVjLPGsnZlavxMy46FVxYE= -----END CERTIFICATE-----Generated at Sun Sep 20 19:12:07 2026 by rpki-client