$ rpki-client -vvf rpki-rsync.idnic.net/repo/f0a929c6-1e25-494a-b0f9-55fc4fc94fbc/0/2116A6F5F0642D2E606A3ACFF738E48F344FB967.mft File: 2116A6F5F0642D2E606A3ACFF738E48F344FB967.mft (raw, json) Hash identifier: 7NhSkDxDYBZgclrdbqydqI3bQjJy6zBQa/nmpAYS/ZI= Subject key identifier: EF:5D:38:E9:EF:75:2F:AA:9A:69:80:16:4F:AF:7F:06:C2:B5:5E:1E Authority key identifier: 21:16:A6:F5:F0:64:2D:2E:60:6A:3A:CF:F7:38:E4:8F:34:4F:B9:67 Certificate issuer: /CN=2116A6F5F0642D2E606A3ACFF738E48F344FB967 Certificate serial: 62659243F8D798995A11E68F5526C2FA70A4BBFA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2116A6F5F0642D2E606A3ACFF738E48F344FB967.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f0a929c6-1e25-494a-b0f9-55fc4fc94fbc/0/2116A6F5F0642D2E606A3ACFF738E48F344FB967.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 14:02:13 +0000 Manifest this update: Tue 02 Jun 2026 13:57:13 +0000 Manifest next update: Wed 03 Jun 2026 17:11:13 +0000 Files and hashes: 1: 2116A6F5F0642D2E606A3ACFF738E48F344FB967.crl (hash: nS7ekLGATJEONjQJ2DUZhGXrotOh2kQ5UxfHx0Ws1uo=) 2: 3130332e3232382e3234302e302f32322d3234203d3e203435373030.roa (hash: wIhC8ahVWqomrNJdfdl2zgDb8UOJzi58mGNtTXqf6+U=) 3: 323430343a3530303a3a2f33322d3438203d3e203234323031.roa (hash: GmHQTfawH8Y622MsP42Ft9zNqj0KvfRVwfqFipMcEyw=) 4: 3230322e38372e3234382e302f32312d3234203d3e203234323031.roa (hash: VxgiDdOeTdoccsaOMR0a2e8pGcsjFYPyxSS+V6ZCUrY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f0a929c6-1e25-494a-b0f9-55fc4fc94fbc/0/2116A6F5F0642D2E606A3ACFF738E48F344FB967.crl rsync://rpki-rsync.idnic.net/repo/f0a929c6-1e25-494a-b0f9-55fc4fc94fbc/0/2116A6F5F0642D2E606A3ACFF738E48F344FB967.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2116A6F5F0642D2E606A3ACFF738E48F344FB967.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:65:92:43:f8:d7:98:99:5a:11:e6:8f:55:26:c2:fa:70:a4:bb:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2116A6F5F0642D2E606A3ACFF738E48F344FB967 Validity Not Before: Jun 2 13:57:13 2026 GMT Not After : Jun 3 17:11:13 2026 GMT Subject: CN=EF5D38E9EF752FAA9A6980164FAF7F06C2B55E1E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:4f:ff:7e:7a:0b:bf:fc:7f:d3:c0:12:32:e6: 7f:ae:fb:d5:e7:29:9f:94:5d:df:d2:5b:4e:8e:af: 8f:00:ed:bb:8f:9f:6c:9a:7e:6c:76:55:57:e4:b0: 83:3f:f7:a6:2a:40:cf:bc:c1:76:5c:f0:e0:37:c0: b3:d8:63:6a:71:19:7d:3f:8b:40:ee:63:4c:51:fd: 95:d9:a2:10:c3:d2:8e:d4:3c:d2:7c:1e:4e:07:29: 49:49:8b:f7:f8:99:d7:57:08:0f:14:92:73:89:4b: 0a:11:96:1f:dc:ef:18:58:d0:c0:92:f8:8b:1d:79: dc:5f:f6:2e:37:a6:92:72:80:71:01:56:b3:70:99: 5f:61:b6:3b:55:14:57:63:07:7a:50:09:c9:a9:28: 02:c9:f0:17:14:59:9b:ba:ba:9f:ea:69:3f:5d:9b: db:d8:82:88:49:b4:ba:7c:12:4e:3d:47:c2:8e:2a: e5:38:33:c4:0c:97:a7:ea:30:ec:d3:1e:7c:fa:ae: 1a:d5:fa:56:53:3d:93:ef:21:49:98:b2:03:16:56: 8a:c0:04:9d:09:58:6e:f1:03:0e:61:e0:db:ae:cf: 5e:f8:64:b9:04:c0:97:36:9c:c5:fd:d8:e5:28:53: e5:6a:95:9b:31:8e:25:61:58:80:90:59:f3:f5:b8: 1c:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:5D:38:E9:EF:75:2F:AA:9A:69:80:16:4F:AF:7F:06:C2:B5:5E:1E X509v3 Authority Key Identifier: keyid:21:16:A6:F5:F0:64:2D:2E:60:6A:3A:CF:F7:38:E4:8F:34:4F:B9:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f0a929c6-1e25-494a-b0f9-55fc4fc94fbc/0/2116A6F5F0642D2E606A3ACFF738E48F344FB967.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2116A6F5F0642D2E606A3ACFF738E48F344FB967.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f0a929c6-1e25-494a-b0f9-55fc4fc94fbc/0/2116A6F5F0642D2E606A3ACFF738E48F344FB967.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:b4:ce:e2:0f:1d:ae:68:b1:e2:e5:08:bd:cf:c3:ed:3b:48: 0d:20:6e:d0:63:11:5e:72:5b:bf:74:b0:66:75:6d:b8:2e:3f: 33:98:27:24:c9:c2:ea:c4:c2:60:88:ca:e3:bf:8d:a6:63:9e: b8:30:0a:fc:2a:43:d0:54:d7:4d:ad:bf:37:db:49:83:0d:88: 4c:c7:b7:2a:69:02:b7:c8:bb:55:aa:0e:ef:bc:1e:80:7c:a7: 46:81:27:f6:58:3d:ff:7e:81:92:99:94:7e:47:43:fa:50:76: e0:ad:bc:e4:b6:ba:5b:d3:f6:a6:cd:49:24:51:b3:dc:03:d6: d7:4c:54:c9:2b:48:bd:9a:03:7d:84:7b:13:65:ad:42:fa:84: da:77:13:5f:26:e0:30:14:ab:80:6d:ec:0a:5a:cc:6c:ef:c9: 4e:ff:69:07:4e:56:94:fa:5a:ff:28:aa:45:e6:54:0d:fd:6e: 94:57:6c:62:d2:81:b8:3d:52:a2:6e:f9:0a:2d:90:c1:77:cd: d8:12:4d:93:e3:e4:09:75:aa:2d:c9:4b:73:f4:5b:88:73:10: 1d:31:ac:38:65:b4:a6:2f:b0:68:af:83:60:21:e0:1a:fa:b8: 85:f0:60:9b:37:fc:c0:7d:eb:d6:2a:1b:8c:4f:9f:a6:75:dc: f3:12:37:6e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYmWSQ/jXmJlaEeaPVSbC+nCku/owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjExNkE2RjVGMDY0MkQyRTYwNkEzQUNGRjczOEU0OEYz NDRGQjk2NzAeFw0yNjA2MDIxMzU3MTNaFw0yNjA2MDMxNzExMTNaMDMxMTAvBgNV BAMTKEVGNUQzOEU5RUY3NTJGQUE5QTY5ODAxNjRGQUY3RjA2QzJCNTVFMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrT/9+egu//H/TwBIy5n+u+9Xn KZ+UXd/SW06Or48A7buPn2yafmx2VVfksIM/96YqQM+8wXZc8OA3wLPYY2pxGX0/ i0DuY0xR/ZXZohDD0o7UPNJ8Hk4HKUlJi/f4mddXCA8UknOJSwoRlh/c7xhY0MCS +Isdedxf9i43ppJygHEBVrNwmV9htjtVFFdjB3pQCcmpKALJ8BcUWZu6up/qaT9d m9vYgohJtLp8Ek49R8KOKuU4M8QMl6fqMOzTHnz6rhrV+lZTPZPvIUmYsgMWVorA BJ0JWG7xAw5h4Nuuz174ZLkEwJc2nMX92OUoU+VqlZsxjiVhWICQWfP1uBwXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU71046e91L6qaaYAWT69/BsK1Xh4wHwYDVR0j BBgwFoAUIRam9fBkLS5gajrP9zjkjzRPuWcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjBhOTI5YzYtMWUyNS00OTRhLWIwZjktNTVmYzRmYzk0ZmJjLzAvMjExNkE2RjVG MDY0MkQyRTYwNkEzQUNGRjczOEU0OEYzNDRGQjk2Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMTE2QTZGNUYwNjQyRDJFNjA2QTNBQ0ZGNzM4RTQ4RjM0NEZC OTY3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjBhOTI5YzYtMWUyNS00OTRhLWIw ZjktNTVmYzRmYzk0ZmJjLzAvMjExNkE2RjVGMDY0MkQyRTYwNkEzQUNGRjczOEU0 OEYzNDRGQjk2Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGO0zuIPHa5oseLlCL3Pw+07SA0gbtBjEV5y W790sGZ1bbguPzOYJyTJwurEwmCIyuO/jaZjnrgwCvwqQ9BU102tvzfbSYMNiEzH typpArfIu1WqDu+8HoB8p0aBJ/ZYPf9+gZKZlH5HQ/pQduCtvOS2ulvT9qbNSSRR s9wD1tdMVMkrSL2aA32EexNlrUL6hNp3E18m4DAUq4Bt7ApazGzvyU7/aQdOVpT6 Wv8oqkXmVA39bpRXbGLSgbg9UqJu+QotkMF3zdgSTZPj5Al1qi3JS3P0W4hzEB0x rDhltKYvsGivg2Ah4Br6uIXwYJs3/MB969YqG4xPn6Z13PMSN24= -----END CERTIFICATE-----Generated at Wed Jun 3 04:08:54 2026 by rpki-client