$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/16FC1DF2D807E338985DE30932EA34E250228796.mft File: 16FC1DF2D807E338985DE30932EA34E250228796.mft (raw, json) Hash identifier: ALii5p539T5ncxNNvpSdq83KyU26VhnXGMWrVUq1I3g= Subject key identifier: 86:FD:21:0B:C5:95:3C:4E:B2:91:FD:94:52:86:EA:52:38:DA:64:26 Authority key identifier: 16:FC:1D:F2:D8:07:E3:38:98:5D:E3:09:32:EA:34:E2:50:22:87:96 Certificate issuer: /CN=16FC1DF2D807E338985DE30932EA34E250228796 Certificate serial: 55236F4B7D624937FF5971280363BE8893824040 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/16FC1DF2D807E338985DE30932EA34E250228796.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/16FC1DF2D807E338985DE30932EA34E250228796.mft Manifest number: B8 Signing time: Wed 16 Sep 2026 23:48:23 +0000 Manifest this update: Wed 16 Sep 2026 23:43:23 +0000 Manifest next update: Fri 18 Sep 2026 01:23:23 +0000 Files and hashes: 1: 3130332e3131392e3131372e302f32342d3234203d3e20313337333738.roa (hash: roqA5lD4sFTDR1g7UxqG9+ZjfyukoDRdAX9XNlxiMJE=) 2: 3130332e3131392e3131382e302f32342d3234203d3e20313337333738.roa (hash: 0FBu/rjRCHpSQhidXvQmco2Gd+NRZ/I75lgQ9c+yrhs=) 3: 3130332e3131392e3131362e302f32342d3234203d3e20313337333738.roa (hash: A7xyFA4qpVRKeavzBnm+Cjv8gBWwy1p/6K95VuLQBjM=) 4: 16FC1DF2D807E338985DE30932EA34E250228796.crl (hash: aqr8hC2EizA60qCqlkgEO0oZRIAapVHLwwaYzYhTq+8=) 5: 323430333a343334303a3a2f33322d3332203d3e20313337333738.roa (hash: 1dE/zpXNqMfI1ilfUn5DrrCSaXBhuo+1IUrzkuKY22o=) 6: 3130332e3131392e3131392e302f32342d3234203d3e20313337333738.roa (hash: iWp9zL2tSRzcXXiV+WVgdnT86pBdN5E8UOgytY/+pL4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/16FC1DF2D807E338985DE30932EA34E250228796.crl rsync://rpki-rsync.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/16FC1DF2D807E338985DE30932EA34E250228796.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/16FC1DF2D807E338985DE30932EA34E250228796.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 01:23:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:23:6f:4b:7d:62:49:37:ff:59:71:28:03:63:be:88:93:82:40:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16FC1DF2D807E338985DE30932EA34E250228796 Validity Not Before: Sep 16 23:43:23 2026 GMT Not After : Sep 18 01:23:23 2026 GMT Subject: CN=86FD210BC5953C4EB291FD945286EA5238DA6426 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:c0:71:d5:d9:86:32:1a:35:b9:0d:0c:f4:65: 59:eb:4c:5c:af:b4:b0:2d:96:64:fe:70:6a:84:d4: 42:fe:cc:f5:11:92:ec:59:1a:9b:0a:66:b9:2f:01: 6c:4a:cd:46:4d:e8:2a:3a:4d:16:fd:9c:b2:59:8b: 6e:68:c5:7d:2c:a4:2c:2f:36:56:6b:70:4b:37:10: 1c:1a:1b:e4:5e:94:ba:31:db:88:dd:0a:cb:0e:a1: fb:fd:15:f7:82:d3:34:ef:7a:67:69:b2:0b:ad:93: 0a:1d:6e:b4:db:a9:76:c0:a2:a4:e6:02:8e:32:64: 4a:71:4d:85:0e:bd:19:46:ae:5a:f2:7e:f9:31:7b: cd:b9:33:37:65:f7:28:7c:a2:cb:a1:28:fd:d0:47: 90:54:69:1a:dd:66:ba:68:ff:e6:2d:0e:35:12:b8: af:03:0a:a9:44:90:b3:3b:b1:8b:32:4f:36:4b:46: 2e:69:2d:51:46:a3:cb:7c:7b:1f:c7:2d:83:08:c8: a7:14:41:c2:57:2f:9a:dc:87:c5:58:73:12:3c:2c: 48:41:a1:fe:54:5b:ad:34:b1:66:ae:0a:c1:51:5c: 7d:88:a0:84:3c:f0:74:be:75:1f:a3:96:d4:49:cc: fb:ff:c0:d1:b9:61:ee:ca:64:36:d4:1e:d3:3b:44: 0a:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:FD:21:0B:C5:95:3C:4E:B2:91:FD:94:52:86:EA:52:38:DA:64:26 X509v3 Authority Key Identifier: keyid:16:FC:1D:F2:D8:07:E3:38:98:5D:E3:09:32:EA:34:E2:50:22:87:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/16FC1DF2D807E338985DE30932EA34E250228796.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/16FC1DF2D807E338985DE30932EA34E250228796.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/16FC1DF2D807E338985DE30932EA34E250228796.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:fd:eb:de:9a:2b:1d:82:10:39:1d:a3:96:00:3e:55:69:20: d9:40:9d:c9:8b:ea:04:fc:a4:f0:5a:41:89:95:7e:f1:5b:76: f4:fd:a1:cf:b9:45:f1:df:68:43:25:3e:ff:ea:87:cc:5a:df: 30:cd:d1:a3:16:66:b3:0d:9a:97:02:5b:cf:98:10:e1:b2:09: d3:b4:ad:c5:ac:ee:11:87:2c:f0:d1:1c:69:f4:7e:b9:c9:36: b3:30:55:0d:e5:12:03:3e:94:fb:10:64:be:0b:e4:2d:2d:71: b0:7c:0f:93:06:42:5e:0f:ff:7a:65:f3:a7:b7:9f:fd:41:88: 3e:21:c6:3a:37:db:92:4e:0e:87:91:d7:fa:b3:66:ee:7e:7e: c1:55:31:7b:55:e7:c0:e6:09:6c:de:06:e7:a6:9b:51:e3:b2: 78:a5:da:55:29:82:b3:1c:bc:81:37:d9:8b:dc:f6:6e:dc:14: cf:4f:d4:cb:3c:8a:d0:47:05:60:a0:30:5b:92:a2:fe:74:d5: 81:cf:45:4e:b7:6c:cc:37:6d:9f:72:83:8b:be:2c:b5:66:00: f7:73:ac:a2:26:f7:c8:20:29:bb:f0:03:12:f5:be:c0:87:b9: ec:cb:72:74:30:ca:a5:34:a1:3d:e8:a3:f5:dd:c0:4d:8d:f1: 96:33:d7:3d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVSNvS31iSTf/WXEoA2O+iJOCQEAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTZGQzFERjJEODA3RTMzODk4NURFMzA5MzJFQTM0RTI1 MDIyODc5NjAeFw0yNjA5MTYyMzQzMjNaFw0yNjA5MTgwMTIzMjNaMDMxMTAvBgNV BAMTKDg2RkQyMTBCQzU5NTNDNEVCMjkxRkQ5NDUyODZFQTUyMzhEQTY0MjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSwHHV2YYyGjW5DQz0ZVnrTFyv tLAtlmT+cGqE1EL+zPURkuxZGpsKZrkvAWxKzUZN6Co6TRb9nLJZi25oxX0spCwv NlZrcEs3EBwaG+RelLox24jdCssOofv9FfeC0zTvemdpsgutkwodbrTbqXbAoqTm Ao4yZEpxTYUOvRlGrlryfvkxe825Mzdl9yh8osuhKP3QR5BUaRrdZrpo/+YtDjUS uK8DCqlEkLM7sYsyTzZLRi5pLVFGo8t8ex/HLYMIyKcUQcJXL5rch8VYcxI8LEhB of5UW600sWauCsFRXH2IoIQ88HS+dR+jltRJzPv/wNG5Ye7KZDbUHtM7RArRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhv0hC8WVPE6ykf2UUobqUjjaZCYwHwYDVR0j BBgwFoAUFvwd8tgH4ziYXeMJMuo04lAih5YwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2U4OTUwZjAtM2IxNC00YTZkLWIzMGYtNzUzNzljYjJlYmNlLzAvMTZGQzFERjJE ODA3RTMzODk4NURFMzA5MzJFQTM0RTI1MDIyODc5Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xNkZDMURGMkQ4MDdFMzM4OTg1REUzMDkzMkVBMzRFMjUwMjI4 Nzk2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2U4OTUwZjAtM2IxNC00YTZkLWIz MGYtNzUzNzljYjJlYmNlLzAvMTZGQzFERjJEODA3RTMzODk4NURFMzA5MzJFQTM0 RTI1MDIyODc5Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABL9696aKx2CEDkdo5YAPlVpINlAncmL6gT8 pPBaQYmVfvFbdvT9oc+5RfHfaEMlPv/qh8xa3zDN0aMWZrMNmpcCW8+YEOGyCdO0 rcWs7hGHLPDRHGn0frnJNrMwVQ3lEgM+lPsQZL4L5C0tcbB8D5MGQl4P/3pl86e3 n/1BiD4hxjo325JODoeR1/qzZu5+fsFVMXtV58DmCWzeBuemm1Hjsnil2lUpgrMc vIE32Yvc9m7cFM9P1Ms8itBHBWCgMFuSov501YHPRU63bMw3bZ9yg4u+LLVmAPdz rKIm98ggKbvwAxL1vsCHuezLcnQwyqU0oT3oo/XdwE2N8ZYz1z0= -----END CERTIFICATE-----Generated at Thu Sep 17 16:24:06 2026 by rpki-client