$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f0a929c6-1e25-494a-b0f9-55fc4fc94fbc/0/2116A6F5F0642D2E606A3ACFF738E48F344FB967.mft File: 2116A6F5F0642D2E606A3ACFF738E48F344FB967.mft (raw, json) Hash identifier: 7KIddBIwh2SVM+niciCB0wPVqcSjHnyiaNxmZ4WzP1Y= Subject key identifier: 19:2F:1F:7F:A4:DE:AA:FF:E7:A3:1B:F7:1F:35:AE:39:3E:B2:97:F4 Authority key identifier: 21:16:A6:F5:F0:64:2D:2E:60:6A:3A:CF:F7:38:E4:8F:34:4F:B9:67 Certificate issuer: /CN=2116A6F5F0642D2E606A3ACFF738E48F344FB967 Certificate serial: 4A276D999FA2201673F990C5D4369209D6DCA99A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2116A6F5F0642D2E606A3ACFF738E48F344FB967.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f0a929c6-1e25-494a-b0f9-55fc4fc94fbc/0/2116A6F5F0642D2E606A3ACFF738E48F344FB967.mft Manifest number: A7 Signing time: Thu 03 Sep 2026 16:01:36 +0000 Manifest this update: Thu 03 Sep 2026 15:56:36 +0000 Manifest next update: Fri 04 Sep 2026 19:42:36 +0000 Files and hashes: 1: 2116A6F5F0642D2E606A3ACFF738E48F344FB967.crl (hash: KKWYVuyHjrOhT3DGYpY/fgCf9UkC1O8MIpB50kyFPh4=) 2: 3230322e38372e3234382e302f32312d3234203d3e203234323031.roa (hash: VxgiDdOeTdoccsaOMR0a2e8pGcsjFYPyxSS+V6ZCUrY=) 3: 323430343a3530303a3a2f33322d3438203d3e203234323031.roa (hash: GmHQTfawH8Y622MsP42Ft9zNqj0KvfRVwfqFipMcEyw=) 4: 3130332e3232382e3234302e302f32322d3234203d3e203435373030.roa (hash: wIhC8ahVWqomrNJdfdl2zgDb8UOJzi58mGNtTXqf6+U=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f0a929c6-1e25-494a-b0f9-55fc4fc94fbc/0/2116A6F5F0642D2E606A3ACFF738E48F344FB967.crl rsync://rpki-rsync.idnic.net/repo/f0a929c6-1e25-494a-b0f9-55fc4fc94fbc/0/2116A6F5F0642D2E606A3ACFF738E48F344FB967.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2116A6F5F0642D2E606A3ACFF738E48F344FB967.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 12:22:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:27:6d:99:9f:a2:20:16:73:f9:90:c5:d4:36:92:09:d6:dc:a9:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2116A6F5F0642D2E606A3ACFF738E48F344FB967 Validity Not Before: Sep 3 15:56:36 2026 GMT Not After : Sep 4 19:42:36 2026 GMT Subject: CN=192F1F7FA4DEAAFFE7A31BF71F35AE393EB297F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:07:a3:00:09:a3:b9:bd:08:a5:ec:70:fa:25: 42:63:b1:2b:56:07:b7:cf:95:88:7a:66:b8:07:e8: 47:00:0f:b5:ad:3f:d7:d6:cd:37:6e:dd:b9:2d:dc: 10:35:cc:3d:b6:53:7d:d0:57:fc:2b:a4:6d:d2:23: 93:d4:c2:d2:38:44:da:b3:a3:e7:15:cd:28:f7:fd: f0:b3:3b:85:ab:bc:70:88:01:f0:c6:05:fb:31:ab: 68:20:04:32:82:32:4c:15:ce:79:66:47:9f:58:bf: 29:11:3f:74:93:35:58:c6:a9:59:44:b3:1e:f6:72: cc:a7:5d:b4:a5:6e:fa:f9:90:54:24:50:d2:15:8f: 32:c0:7a:b9:b8:eb:db:f4:9a:ef:4f:51:e5:fa:c9: 86:dc:3a:4e:3c:b3:6a:a4:79:93:10:cc:00:f7:ab: fd:85:1c:79:a3:f1:00:b0:4d:a5:c7:9d:a3:4d:7c: 6a:32:b4:44:cb:1e:08:af:48:ea:fc:59:2f:cd:86: 3a:05:69:29:a1:f7:c5:36:ea:72:99:c5:ab:b1:dd: ce:9f:dd:16:eb:94:16:80:6d:de:96:4e:20:bc:22: 26:d2:dd:c2:7a:33:dd:a9:18:d7:b0:c2:41:a4:2a: 79:9c:62:5f:76:75:ed:2c:f8:d8:2c:2f:c9:b8:1c: 9a:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:2F:1F:7F:A4:DE:AA:FF:E7:A3:1B:F7:1F:35:AE:39:3E:B2:97:F4 X509v3 Authority Key Identifier: keyid:21:16:A6:F5:F0:64:2D:2E:60:6A:3A:CF:F7:38:E4:8F:34:4F:B9:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f0a929c6-1e25-494a-b0f9-55fc4fc94fbc/0/2116A6F5F0642D2E606A3ACFF738E48F344FB967.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2116A6F5F0642D2E606A3ACFF738E48F344FB967.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f0a929c6-1e25-494a-b0f9-55fc4fc94fbc/0/2116A6F5F0642D2E606A3ACFF738E48F344FB967.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:63:bf:48:79:3b:14:77:46:74:ff:23:34:74:01:8b:7a:be: a4:ec:65:33:05:51:ef:06:c4:04:fc:73:65:38:03:5a:c1:28: 9e:9c:6a:27:fb:ef:31:7d:9f:0a:81:75:a4:0b:c4:73:a3:ed: c5:08:8a:37:32:34:48:77:8d:27:3d:24:c9:b6:98:83:5f:5c: a5:44:ea:9f:51:49:8e:1b:a1:e1:6c:92:7f:07:88:13:1f:51: 64:17:6f:ad:a9:23:37:cf:11:4f:a3:c7:79:e8:b9:48:34:2c: db:0e:c0:f0:0f:a7:11:3d:e7:42:e5:80:a4:8d:51:84:aa:98: f0:56:46:40:7f:6f:62:50:94:9c:29:6b:92:e1:f8:40:1b:c3: f1:56:7f:f7:ff:9b:45:d9:f0:ab:44:94:3d:fe:d1:d3:1d:a7: 6c:b1:03:af:86:30:7b:47:10:a9:3f:97:42:3e:e2:fe:ae:ca: de:69:8c:2e:0c:75:f5:97:53:66:75:e9:28:81:6f:d8:73:17: 8f:d4:fb:11:e9:c5:0d:d3:1c:d1:fc:7a:ac:61:de:2d:e0:00: e4:e6:25:fc:11:f8:b1:43:09:2a:68:57:f7:4c:01:e8:56:90: 55:16:93:a5:8d:c6:9b:b2:b3:40:b8:af:27:e7:1b:01:4d:b3: 6c:db:16:b9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSidtmZ+iIBZz+ZDF1DaSCdbcqZowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjExNkE2RjVGMDY0MkQyRTYwNkEzQUNGRjczOEU0OEYz NDRGQjk2NzAeFw0yNjA5MDMxNTU2MzZaFw0yNjA5MDQxOTQyMzZaMDMxMTAvBgNV BAMTKDE5MkYxRjdGQTRERUFBRkZFN0EzMUJGNzFGMzVBRTM5M0VCMjk3RjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRB6MACaO5vQil7HD6JUJjsStW B7fPlYh6ZrgH6EcAD7WtP9fWzTdu3bkt3BA1zD22U33QV/wrpG3SI5PUwtI4RNqz o+cVzSj3/fCzO4WrvHCIAfDGBfsxq2ggBDKCMkwVznlmR59YvykRP3STNVjGqVlE sx72csynXbSlbvr5kFQkUNIVjzLAerm469v0mu9PUeX6yYbcOk48s2qkeZMQzAD3 q/2FHHmj8QCwTaXHnaNNfGoytETLHgivSOr8WS/NhjoFaSmh98U26nKZxaux3c6f 3RbrlBaAbd6WTiC8IibS3cJ6M92pGNewwkGkKnmcYl92de0s+NgsL8m4HJoBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGS8ff6Teqv/noxv3HzWuOT6yl/QwHwYDVR0j BBgwFoAUIRam9fBkLS5gajrP9zjkjzRPuWcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjBhOTI5YzYtMWUyNS00OTRhLWIwZjktNTVmYzRmYzk0ZmJjLzAvMjExNkE2RjVG MDY0MkQyRTYwNkEzQUNGRjczOEU0OEYzNDRGQjk2Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMTE2QTZGNUYwNjQyRDJFNjA2QTNBQ0ZGNzM4RTQ4RjM0NEZC OTY3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjBhOTI5YzYtMWUyNS00OTRhLWIw ZjktNTVmYzRmYzk0ZmJjLzAvMjExNkE2RjVGMDY0MkQyRTYwNkEzQUNGRjczOEU0 OEYzNDRGQjk2Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACpjv0h5OxR3RnT/IzR0AYt6vqTsZTMFUe8G xAT8c2U4A1rBKJ6caif77zF9nwqBdaQLxHOj7cUIijcyNEh3jSc9JMm2mINfXKVE 6p9RSY4boeFskn8HiBMfUWQXb62pIzfPEU+jx3nouUg0LNsOwPAPpxE950LlgKSN UYSqmPBWRkB/b2JQlJwpa5Lh+EAbw/FWf/f/m0XZ8KtElD3+0dMdp2yxA6+GMHtH EKk/l0I+4v6uyt5pjC4MdfWXU2Z16SiBb9hzF4/U+xHpxQ3THNH8eqxh3i3gAOTm JfwR+LFDCSpoV/dMAehWkFUWk6WNxpuys0C4ryfnGwFNs2zbFrk= -----END CERTIFICATE-----Generated at Thu Sep 3 19:23:32 2026 by rpki-client