$ rpki-client -vvf rpki-rsync.idnic.net/repo/f0a929c6-1e25-494a-b0f9-55fc4fc94fbc/0/2116A6F5F0642D2E606A3ACFF738E48F344FB967.mft File: 2116A6F5F0642D2E606A3ACFF738E48F344FB967.mft (raw, json) Hash identifier: PTZ002pai+ESw/fxkLBU1mBpztIcPBOR+ZRCAvW4lfc= Subject key identifier: 04:C5:8F:8E:1A:4B:06:27:52:B8:8C:FA:42:0A:E6:C4:E3:F1:1E:4C Authority key identifier: 21:16:A6:F5:F0:64:2D:2E:60:6A:3A:CF:F7:38:E4:8F:34:4F:B9:67 Certificate issuer: /CN=2116A6F5F0642D2E606A3ACFF738E48F344FB967 Certificate serial: 2330316F6C2A6A787B95C4F084C719937066321C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2116A6F5F0642D2E606A3ACFF738E48F344FB967.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f0a929c6-1e25-494a-b0f9-55fc4fc94fbc/0/2116A6F5F0642D2E606A3ACFF738E48F344FB967.mft Manifest number: 3E Signing time: Tue 16 Jun 2026 20:44:17 +0000 Manifest this update: Tue 16 Jun 2026 20:39:17 +0000 Manifest next update: Wed 17 Jun 2026 21:04:17 +0000 Files and hashes: 1: 323430343a3530303a3a2f33322d3438203d3e203234323031.roa (hash: GmHQTfawH8Y622MsP42Ft9zNqj0KvfRVwfqFipMcEyw=) 2: 3130332e3232382e3234302e302f32322d3234203d3e203435373030.roa (hash: wIhC8ahVWqomrNJdfdl2zgDb8UOJzi58mGNtTXqf6+U=) 3: 3230322e38372e3234382e302f32312d3234203d3e203234323031.roa (hash: VxgiDdOeTdoccsaOMR0a2e8pGcsjFYPyxSS+V6ZCUrY=) 4: 2116A6F5F0642D2E606A3ACFF738E48F344FB967.crl (hash: hgwdo/2cxsXhUaINnleUc86ZpyO7Sk0RJm0eBgTpMHs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f0a929c6-1e25-494a-b0f9-55fc4fc94fbc/0/2116A6F5F0642D2E606A3ACFF738E48F344FB967.crl rsync://rpki-rsync.idnic.net/repo/f0a929c6-1e25-494a-b0f9-55fc4fc94fbc/0/2116A6F5F0642D2E606A3ACFF738E48F344FB967.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2116A6F5F0642D2E606A3ACFF738E48F344FB967.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 21:04:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:30:31:6f:6c:2a:6a:78:7b:95:c4:f0:84:c7:19:93:70:66:32:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2116A6F5F0642D2E606A3ACFF738E48F344FB967 Validity Not Before: Jun 16 20:39:17 2026 GMT Not After : Jun 17 21:04:17 2026 GMT Subject: CN=04C58F8E1A4B062752B88CFA420AE6C4E3F11E4C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:a7:86:18:3a:b0:49:2f:37:d1:56:cc:b0:26: a8:3d:3d:bf:90:ce:70:57:42:70:46:b6:b5:c7:f3: 0b:b7:61:b5:15:9e:9b:d3:7b:70:38:47:3e:9f:83: de:40:eb:6f:e8:28:0f:e3:61:8a:36:6e:19:86:9c: 42:86:3a:9c:ce:ce:ec:7c:c2:21:40:4b:8e:e3:08: 7e:5c:e5:97:fc:91:9c:12:e7:f4:6c:5c:35:4c:c2: b1:f6:44:50:d4:c1:42:20:73:2a:3a:fe:6c:96:cd: 85:bb:a9:0b:d1:cc:d5:e7:b3:25:b0:d8:77:74:73: 2d:8e:a2:52:a0:b1:ae:f9:88:96:c9:56:05:ac:35: 49:d1:0e:db:44:3d:10:19:f2:3a:5d:3d:d9:b1:e9: 44:0e:81:4c:04:55:c6:3e:d4:95:77:06:a5:0e:c5: 9c:58:35:bf:fa:5b:90:fa:9d:af:fb:d5:14:9b:41: b1:23:16:85:e7:9c:46:4c:fa:27:23:a4:35:97:9d: 52:29:03:31:3d:c3:92:ea:45:13:b2:fa:92:5d:31: 9c:a9:ab:93:06:9e:6d:78:9c:22:14:c8:db:b7:f7: 5b:92:f7:04:8d:80:c8:5f:3e:0c:29:90:9f:e0:dc: e4:18:42:d6:84:60:b9:83:0f:a8:2b:b2:e2:cd:ef: 4a:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:C5:8F:8E:1A:4B:06:27:52:B8:8C:FA:42:0A:E6:C4:E3:F1:1E:4C X509v3 Authority Key Identifier: keyid:21:16:A6:F5:F0:64:2D:2E:60:6A:3A:CF:F7:38:E4:8F:34:4F:B9:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f0a929c6-1e25-494a-b0f9-55fc4fc94fbc/0/2116A6F5F0642D2E606A3ACFF738E48F344FB967.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2116A6F5F0642D2E606A3ACFF738E48F344FB967.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f0a929c6-1e25-494a-b0f9-55fc4fc94fbc/0/2116A6F5F0642D2E606A3ACFF738E48F344FB967.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:da:ae:fd:f7:6f:5e:30:cc:63:ae:ef:dd:a8:7e:93:6f:e8: 99:7d:d5:7f:f8:7f:d8:c6:69:79:f1:09:c5:1d:85:5e:e4:d6: a6:71:82:74:b3:09:f0:0b:29:ff:46:19:f1:2e:0e:5b:b1:90: 6b:64:30:89:e2:66:72:ed:2d:24:8a:ef:cf:f4:ab:fe:41:50: 32:3c:56:a6:ff:90:72:bb:5e:11:f0:e9:60:ea:65:75:e2:42: da:88:b6:7a:dc:ce:43:ea:26:2f:fc:bd:e2:7c:6d:0c:7c:51: 6a:a1:84:c1:45:5e:18:01:cc:50:e9:d5:11:02:ce:34:65:89: 31:42:23:d3:f8:4b:54:94:ad:2c:50:01:70:28:06:95:e3:56: 1c:67:b0:fe:a9:35:b1:a2:34:42:5d:92:66:41:de:0a:ee:0f: c1:44:6e:d4:92:cb:ab:8f:70:6f:45:4e:e3:2e:a4:6e:dc:8a: 6b:c0:67:59:e3:46:b4:ca:fb:be:21:34:50:b0:a7:51:e3:6b: e6:65:5f:b3:71:b4:70:56:7d:9d:f2:34:b3:02:fb:04:d9:f5: 5b:b4:8f:1c:9c:f2:85:dc:75:ed:2e:ef:90:6a:19:fd:42:e1: b8:4e:02:9a:bd:d5:a6:a5:4f:5c:ec:f1:a8:a4:eb:4a:d4:55: a3:88:ce:07 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIzAxb2wqanh7lcTwhMcZk3BmMhwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjExNkE2RjVGMDY0MkQyRTYwNkEzQUNGRjczOEU0OEYz NDRGQjk2NzAeFw0yNjA2MTYyMDM5MTdaFw0yNjA2MTcyMTA0MTdaMDMxMTAvBgNV BAMTKDA0QzU4RjhFMUE0QjA2Mjc1MkI4OENGQTQyMEFFNkM0RTNGMTFFNEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtp4YYOrBJLzfRVsywJqg9Pb+Q znBXQnBGtrXH8wu3YbUVnpvTe3A4Rz6fg95A62/oKA/jYYo2bhmGnEKGOpzOzux8 wiFAS47jCH5c5Zf8kZwS5/RsXDVMwrH2RFDUwUIgcyo6/myWzYW7qQvRzNXnsyWw 2Hd0cy2OolKgsa75iJbJVgWsNUnRDttEPRAZ8jpdPdmx6UQOgUwEVcY+1JV3BqUO xZxYNb/6W5D6na/71RSbQbEjFoXnnEZM+icjpDWXnVIpAzE9w5LqRROy+pJdMZyp q5MGnm14nCIUyNu391uS9wSNgMhfPgwpkJ/g3OQYQtaEYLmDD6grsuLN70pFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBMWPjhpLBidSuIz6QgrmxOPxHkwwHwYDVR0j BBgwFoAUIRam9fBkLS5gajrP9zjkjzRPuWcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjBhOTI5YzYtMWUyNS00OTRhLWIwZjktNTVmYzRmYzk0ZmJjLzAvMjExNkE2RjVG MDY0MkQyRTYwNkEzQUNGRjczOEU0OEYzNDRGQjk2Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMTE2QTZGNUYwNjQyRDJFNjA2QTNBQ0ZGNzM4RTQ4RjM0NEZC OTY3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjBhOTI5YzYtMWUyNS00OTRhLWIw ZjktNTVmYzRmYzk0ZmJjLzAvMjExNkE2RjVGMDY0MkQyRTYwNkEzQUNGRjczOEU0 OEYzNDRGQjk2Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEzarv33b14wzGOu792ofpNv6Jl91X/4f9jG aXnxCcUdhV7k1qZxgnSzCfALKf9GGfEuDluxkGtkMIniZnLtLSSK78/0q/5BUDI8 Vqb/kHK7XhHw6WDqZXXiQtqItnrczkPqJi/8veJ8bQx8UWqhhMFFXhgBzFDp1REC zjRliTFCI9P4S1SUrSxQAXAoBpXjVhxnsP6pNbGiNEJdkmZB3gruD8FEbtSSy6uP cG9FTuMupG7cimvAZ1njRrTK+74hNFCwp1Hja+ZlX7NxtHBWfZ3yNLMC+wTZ9Vu0 jxyc8oXcde0u75BqGf1C4bhOApq91aalT1zs8aik60rUVaOIzgc= -----END CERTIFICATE-----Generated at Wed Jun 17 10:02:33 2026 by rpki-client