$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f0a929c6-1e25-494a-b0f9-55fc4fc94fbc/0/2116A6F5F0642D2E606A3ACFF738E48F344FB967.mft File: 2116A6F5F0642D2E606A3ACFF738E48F344FB967.mft (raw, json) Hash identifier: YuAchqdwCWNDtlqF7hpDvbasCj/NICy239Obz6ULPSU= Subject key identifier: CF:A9:9B:B1:30:40:7D:38:20:08:DD:C6:5F:30:36:3A:EC:44:4E:FC Authority key identifier: 21:16:A6:F5:F0:64:2D:2E:60:6A:3A:CF:F7:38:E4:8F:34:4F:B9:67 Certificate issuer: /CN=2116A6F5F0642D2E606A3ACFF738E48F344FB967 Certificate serial: 6CDD2C8272E1A5CAFA3894B39DE8CD2B38FEB07A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2116A6F5F0642D2E606A3ACFF738E48F344FB967.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f0a929c6-1e25-494a-b0f9-55fc4fc94fbc/0/2116A6F5F0642D2E606A3ACFF738E48F344FB967.mft Manifest number: EB Signing time: Sat 24 Oct 2026 12:34:39 +0000 Manifest this update: Sat 24 Oct 2026 12:29:39 +0000 Manifest next update: Sun 25 Oct 2026 16:27:39 +0000 Files and hashes: 1: 3130332e3232382e3234302e302f32322d3234203d3e203435373030.roa (hash: wIhC8ahVWqomrNJdfdl2zgDb8UOJzi58mGNtTXqf6+U=) 2: 3230322e38372e3234382e302f32312d3234203d3e203234323031.roa (hash: VxgiDdOeTdoccsaOMR0a2e8pGcsjFYPyxSS+V6ZCUrY=) 3: 2116A6F5F0642D2E606A3ACFF738E48F344FB967.crl (hash: pghF44/nHkNOV9qCmRvAVob4JVEFLesOOmTPHeRqfRA=) 4: 323430343a3530303a3a2f33322d3438203d3e203234323031.roa (hash: GmHQTfawH8Y622MsP42Ft9zNqj0KvfRVwfqFipMcEyw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f0a929c6-1e25-494a-b0f9-55fc4fc94fbc/0/2116A6F5F0642D2E606A3ACFF738E48F344FB967.crl rsync://rpki-rsync.idnic.net/repo/f0a929c6-1e25-494a-b0f9-55fc4fc94fbc/0/2116A6F5F0642D2E606A3ACFF738E48F344FB967.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2116A6F5F0642D2E606A3ACFF738E48F344FB967.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 03:03:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:dd:2c:82:72:e1:a5:ca:fa:38:94:b3:9d:e8:cd:2b:38:fe:b0:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2116A6F5F0642D2E606A3ACFF738E48F344FB967 Validity Not Before: Oct 24 12:29:39 2026 GMT Not After : Oct 25 16:27:39 2026 GMT Subject: CN=CFA99BB130407D382008DDC65F30363AEC444EFC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:65:6a:aa:7f:fe:7c:32:19:1d:9b:b8:05:24: 91:21:4d:f4:9b:93:f3:c4:e9:3f:e3:09:42:be:87: 7c:1d:14:67:b4:ce:3c:a7:e6:fc:cf:8c:6f:d8:92: 7a:b0:8b:1d:e2:40:61:9c:75:e2:57:b4:e4:3d:53: 45:3f:89:00:19:a5:15:6f:8d:fe:d1:8f:de:0e:d7: 25:a2:95:c3:02:c9:72:a6:1d:bd:68:cd:e0:6d:48: 56:c0:12:ff:32:47:a9:79:0d:98:e8:24:1c:ef:23: 76:7c:1c:99:00:81:9e:d1:be:e2:e6:f5:ed:f1:a2: 0d:2d:26:8d:9d:ed:ab:9e:ab:a9:dd:91:db:10:3c: be:e5:cf:7a:cc:b8:6d:d4:e9:24:fa:ae:55:af:61: e0:f2:ac:7d:82:64:e7:4e:2a:82:0e:94:e0:0d:cf: ea:98:d2:7f:88:e6:01:01:8b:64:4e:7c:cf:f9:f5: f9:21:ce:57:9a:28:94:74:61:e4:a2:08:0e:e3:3d: a4:3f:0c:3b:d7:63:b6:f2:e0:63:f4:d4:df:ee:4e: b2:c8:17:13:aa:4c:2d:19:2c:84:f2:7d:9a:ce:56: 29:06:d8:87:f2:9c:33:99:36:d6:b8:f9:d5:af:ca: cd:05:8b:cb:75:0d:81:69:00:8b:ae:5b:54:18:35: ff:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:A9:9B:B1:30:40:7D:38:20:08:DD:C6:5F:30:36:3A:EC:44:4E:FC X509v3 Authority Key Identifier: keyid:21:16:A6:F5:F0:64:2D:2E:60:6A:3A:CF:F7:38:E4:8F:34:4F:B9:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f0a929c6-1e25-494a-b0f9-55fc4fc94fbc/0/2116A6F5F0642D2E606A3ACFF738E48F344FB967.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2116A6F5F0642D2E606A3ACFF738E48F344FB967.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f0a929c6-1e25-494a-b0f9-55fc4fc94fbc/0/2116A6F5F0642D2E606A3ACFF738E48F344FB967.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:67:08:55:86:8c:58:37:d3:e7:2b:d2:34:2f:89:06:c1:6b: d6:f8:bb:fe:7b:9f:2d:ed:cf:c4:98:8d:88:52:93:65:e2:bb: b7:ee:7b:73:cd:3d:60:9a:37:cd:75:44:d8:81:ba:9d:aa:0c: 60:0e:33:a6:7a:0a:ba:4d:8c:9f:d7:ab:c1:c9:99:31:99:d9: 6b:18:e9:3d:07:f7:51:cf:dd:df:76:eb:60:55:81:9e:04:c8: 8e:e3:47:99:1e:20:0e:46:e6:da:18:ac:d5:2e:d9:b0:45:a0: e5:5e:38:be:63:66:fd:49:a3:0a:2a:00:18:5e:2c:47:0b:1e: e8:ed:33:eb:33:d6:91:4d:8e:fc:f6:79:e8:99:5f:02:2a:92: ab:34:59:fd:c3:f9:d8:7e:bc:8a:2a:70:2d:43:24:4a:2e:45: 2d:df:07:04:46:a7:83:a2:c4:ed:e9:08:04:95:95:3d:d5:82: 0d:c4:d5:a0:8f:13:75:96:33:c2:15:ac:ca:df:e1:16:52:86: 99:18:31:9b:47:e8:25:28:01:33:d3:5f:d4:d2:e8:03:2f:40: 60:19:09:59:03:e2:b2:d0:5e:55:39:a2:77:9c:8b:10:bf:28: 1d:98:b7:22:8b:8b:69:c5:ba:cc:55:74:1f:38:a5:73:2b:f2: 15:67:50:7a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbN0sgnLhpcr6OJSznejNKzj+sHowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjExNkE2RjVGMDY0MkQyRTYwNkEzQUNGRjczOEU0OEYz NDRGQjk2NzAeFw0yNjEwMjQxMjI5MzlaFw0yNjEwMjUxNjI3MzlaMDMxMTAvBgNV BAMTKENGQTk5QkIxMzA0MDdEMzgyMDA4RERDNjVGMzAzNjNBRUM0NDRFRkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuZWqqf/58Mhkdm7gFJJEhTfSb k/PE6T/jCUK+h3wdFGe0zjyn5vzPjG/Yknqwix3iQGGcdeJXtOQ9U0U/iQAZpRVv jf7Rj94O1yWilcMCyXKmHb1ozeBtSFbAEv8yR6l5DZjoJBzvI3Z8HJkAgZ7RvuLm 9e3xog0tJo2d7aueq6ndkdsQPL7lz3rMuG3U6ST6rlWvYeDyrH2CZOdOKoIOlOAN z+qY0n+I5gEBi2ROfM/59fkhzleaKJR0YeSiCA7jPaQ/DDvXY7by4GP01N/uTrLI FxOqTC0ZLITyfZrOVikG2IfynDOZNta4+dWvys0Fi8t1DYFpAIuuW1QYNf+tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUz6mbsTBAfTggCN3GXzA2OuxETvwwHwYDVR0j BBgwFoAUIRam9fBkLS5gajrP9zjkjzRPuWcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjBhOTI5YzYtMWUyNS00OTRhLWIwZjktNTVmYzRmYzk0ZmJjLzAvMjExNkE2RjVG MDY0MkQyRTYwNkEzQUNGRjczOEU0OEYzNDRGQjk2Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMTE2QTZGNUYwNjQyRDJFNjA2QTNBQ0ZGNzM4RTQ4RjM0NEZC OTY3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjBhOTI5YzYtMWUyNS00OTRhLWIw ZjktNTVmYzRmYzk0ZmJjLzAvMjExNkE2RjVGMDY0MkQyRTYwNkEzQUNGRjczOEU0 OEYzNDRGQjk2Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABpnCFWGjFg30+cr0jQviQbBa9b4u/57ny3t z8SYjYhSk2Xiu7fue3PNPWCaN811RNiBup2qDGAOM6Z6CrpNjJ/Xq8HJmTGZ2WsY 6T0H91HP3d9262BVgZ4EyI7jR5keIA5G5toYrNUu2bBFoOVeOL5jZv1JowoqABhe LEcLHujtM+sz1pFNjvz2eeiZXwIqkqs0Wf3D+dh+vIoqcC1DJEouRS3fBwRGp4Oi xO3pCASVlT3Vgg3E1aCPE3WWM8IVrMrf4RZShpkYMZtH6CUoATPTX9TS6AMvQGAZ CVkD4rLQXlU5onecixC/KB2YtyKLi2nFusxVdB84pXMr8hVnUHo= -----END CERTIFICATE-----Generated at Sat Oct 24 17:22:20 2026 by rpki-client