$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c6191bde-553d-49db-9cb6-b353e561daee/0/16A6747482288B9CE98B8471FAB375C9CC0473E3.mft File: 16A6747482288B9CE98B8471FAB375C9CC0473E3.mft (raw, json) Hash identifier: v+hAjuxOuqXFCMb+z30gpCkD7qv4uo3nCCiwUek9wwE= Subject key identifier: 28:64:AB:28:A2:DA:A2:06:3D:A5:BA:27:A4:F1:1D:B2:D3:C9:EB:02 Authority key identifier: 16:A6:74:74:82:28:8B:9C:E9:8B:84:71:FA:B3:75:C9:CC:04:73:E3 Certificate issuer: /CN=16A6747482288B9CE98B8471FAB375C9CC0473E3 Certificate serial: 487775D88B8983DA148BBDE8E73BA6872805BE39 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/16A6747482288B9CE98B8471FAB375C9CC0473E3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c6191bde-553d-49db-9cb6-b353e561daee/0/16A6747482288B9CE98B8471FAB375C9CC0473E3.mft Manifest number: 1C Signing time: Sun 25 Oct 2026 00:55:17 +0000 Manifest this update: Sun 25 Oct 2026 00:50:17 +0000 Manifest next update: Mon 26 Oct 2026 02:43:17 +0000 Files and hashes: 1: 3130332e3231362e3130342e302f32342d3234203d3e20313531353837.roa (hash: Qko/spdBlsUVP3897WCdZTdpikFTtKKMZnOIM7RvYVs=) 2: 16A6747482288B9CE98B8471FAB375C9CC0473E3.crl (hash: j6SMzCNLwFerrMOLHEHke0u2Q5KA7K6ESFdlOnvMmJg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c6191bde-553d-49db-9cb6-b353e561daee/0/16A6747482288B9CE98B8471FAB375C9CC0473E3.crl rsync://rpki-rsync.idnic.net/repo/c6191bde-553d-49db-9cb6-b353e561daee/0/16A6747482288B9CE98B8471FAB375C9CC0473E3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/16A6747482288B9CE98B8471FAB375C9CC0473E3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 19:21:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:77:75:d8:8b:89:83:da:14:8b:bd:e8:e7:3b:a6:87:28:05:be:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16A6747482288B9CE98B8471FAB375C9CC0473E3 Validity Not Before: Oct 25 00:50:17 2026 GMT Not After : Oct 26 02:43:17 2026 GMT Subject: CN=2864AB28A2DAA2063DA5BA27A4F11DB2D3C9EB02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:25:42:60:ea:b8:36:f6:e2:c3:d5:7a:7d:51: d2:49:97:7a:1f:2d:40:af:b8:44:4b:8a:c4:d8:06: 34:1d:01:4b:02:80:dc:3f:24:cb:72:22:4c:78:5b: 9e:f8:9a:3e:f2:63:45:3b:91:54:0d:30:f5:41:d5: ff:db:9c:47:45:24:93:16:f0:4a:8f:4b:93:fe:ae: e2:3f:a2:ab:d0:49:24:57:41:58:89:14:0c:cf:65: 40:45:d2:18:b9:d5:ca:a7:c4:e9:6f:8a:93:2c:67: 1c:d2:75:f7:63:7f:79:7b:8a:0c:9f:bf:98:a3:b0: ec:02:fd:27:f7:26:c1:ca:77:e1:af:b1:31:b8:94: 3c:b3:8e:3c:1e:87:e0:da:96:86:c3:be:16:43:04: 94:58:21:a9:b7:0a:29:ae:8e:f7:24:37:2a:50:12: f8:7f:68:f8:16:b5:74:79:a4:a4:47:a4:ad:d0:95: f3:48:76:93:ca:80:8c:af:ad:a0:64:b3:bb:75:4a: f3:4c:92:ee:68:94:55:d3:03:a9:ce:53:04:93:e9: b3:ba:85:52:f8:39:ae:62:b5:74:ed:a0:7b:46:c2: d3:01:57:fa:21:89:a2:25:69:6e:3e:67:fe:40:29: df:db:40:89:fb:14:85:3e:62:87:4c:d2:46:1e:0f: 1b:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:64:AB:28:A2:DA:A2:06:3D:A5:BA:27:A4:F1:1D:B2:D3:C9:EB:02 X509v3 Authority Key Identifier: keyid:16:A6:74:74:82:28:8B:9C:E9:8B:84:71:FA:B3:75:C9:CC:04:73:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c6191bde-553d-49db-9cb6-b353e561daee/0/16A6747482288B9CE98B8471FAB375C9CC0473E3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/16A6747482288B9CE98B8471FAB375C9CC0473E3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c6191bde-553d-49db-9cb6-b353e561daee/0/16A6747482288B9CE98B8471FAB375C9CC0473E3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:d8:f6:60:a3:83:0c:60:d9:db:a3:a1:f6:4e:46:ac:91:4c: 67:1d:71:db:2c:d3:c1:09:ea:1d:58:48:4e:07:87:1a:73:9c: 46:0d:e8:5f:a3:d7:c7:2c:38:b1:39:17:3d:85:5c:2d:23:99: 6a:6b:ca:57:ac:4e:23:4f:e8:66:45:c8:da:c2:dd:c2:21:7f: 05:09:1b:c6:cc:e4:32:08:dd:ed:7d:73:c1:76:51:3e:04:57: 9a:8f:0d:b7:b0:59:1a:6d:fc:36:52:cf:07:d7:63:3c:40:94: 20:54:4c:de:33:17:40:94:bf:a0:b4:89:33:da:76:5f:b2:fa: ca:1d:6a:a2:f7:34:a8:22:b8:0b:b6:1f:b9:cc:37:05:9f:9a: f7:bb:23:aa:08:dc:52:6a:dc:72:3c:21:b3:de:6f:26:27:a4: c5:12:11:7e:04:1a:4a:b8:91:b1:6c:f0:71:42:a0:16:ad:61: c2:ac:5c:08:24:5c:c8:e2:e4:a5:de:1e:58:52:cb:b3:64:92: d6:bc:8c:f3:98:80:7e:e8:8f:bf:c9:02:ce:b5:0a:26:3e:02: 2e:c9:fc:cb:a9:bc:66:c8:f1:29:30:26:25:d6:ad:58:05:63: 87:02:0c:81:51:22:ed:7d:d8:a1:ce:57:74:10:2b:c8:b9:18: 82:51:cb:30 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSHd12IuJg9oUi73o5zumhygFvjkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTZBNjc0NzQ4MjI4OEI5Q0U5OEI4NDcxRkFCMzc1QzlD QzA0NzNFMzAeFw0yNjEwMjUwMDUwMTdaFw0yNjEwMjYwMjQzMTdaMDMxMTAvBgNV BAMTKDI4NjRBQjI4QTJEQUEyMDYzREE1QkEyN0E0RjExREIyRDNDOUVCMDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSJUJg6rg29uLD1Xp9UdJJl3of LUCvuERLisTYBjQdAUsCgNw/JMtyIkx4W574mj7yY0U7kVQNMPVB1f/bnEdFJJMW 8EqPS5P+ruI/oqvQSSRXQViJFAzPZUBF0hi51cqnxOlvipMsZxzSdfdjf3l7igyf v5ijsOwC/Sf3JsHKd+GvsTG4lDyzjjweh+DalobDvhZDBJRYIam3CimujvckNypQ Evh/aPgWtXR5pKRHpK3QlfNIdpPKgIyvraBks7t1SvNMku5olFXTA6nOUwST6bO6 hVL4Oa5itXTtoHtGwtMBV/ohiaIlaW4+Z/5AKd/bQIn7FIU+YodM0kYeDxvLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKGSrKKLaogY9pbonpPEdstPJ6wIwHwYDVR0j BBgwFoAUFqZ0dIIoi5zpi4Rx+rN1ycwEc+MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzYxOTFiZGUtNTUzZC00OWRiLTljYjYtYjM1M2U1NjFkYWVlLzAvMTZBNjc0NzQ4 MjI4OEI5Q0U5OEI4NDcxRkFCMzc1QzlDQzA0NzNFMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xNkE2NzQ3NDgyMjg4QjlDRTk4Qjg0NzFGQUIzNzVDOUNDMDQ3 M0UzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzYxOTFiZGUtNTUzZC00OWRiLTlj YjYtYjM1M2U1NjFkYWVlLzAvMTZBNjc0NzQ4MjI4OEI5Q0U5OEI4NDcxRkFCMzc1 QzlDQzA0NzNFMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHDY9mCjgwxg2dujofZORqyRTGcdcdss08EJ 6h1YSE4HhxpznEYN6F+j18csOLE5Fz2FXC0jmWprylesTiNP6GZFyNrC3cIhfwUJ G8bM5DII3e19c8F2UT4EV5qPDbewWRpt/DZSzwfXYzxAlCBUTN4zF0CUv6C0iTPa dl+y+sodaqL3NKgiuAu2H7nMNwWfmve7I6oI3FJq3HI8IbPebyYnpMUSEX4EGkq4 kbFs8HFCoBatYcKsXAgkXMji5KXeHlhSy7Nkkta8jPOYgH7oj7/JAs61CiY+Ai7J /MupvGbI8SkwJiXWrVgFY4cCDIFRIu192KHOV3QQK8i5GIJRyzA= -----END CERTIFICATE-----Generated at Sun Oct 25 08:00:11 2026 by rpki-client