$ rpki-client -vvf repo-rpki.idnic.net/repo/3c9941a4-28d2-47d1-91e7-acab59084462/0/B16C4772F3D77045BBA997F94CEACA9E0DCC2865.mft File: B16C4772F3D77045BBA997F94CEACA9E0DCC2865.mft (raw, json) Hash identifier: ccj9cZYEq3+ULk7zHwoyzpA7U551ZZoWhy0pXG2JJI4= Subject key identifier: DE:90:54:90:61:0F:B8:14:52:02:80:8C:3A:C7:CF:99:AD:95:AB:29 Authority key identifier: B1:6C:47:72:F3:D7:70:45:BB:A9:97:F9:4C:EA:CA:9E:0D:CC:28:65 Certificate issuer: /CN=B16C4772F3D77045BBA997F94CEACA9E0DCC2865 Certificate serial: 107D3636D9760F1550EDFFAE431CACA5B3EFB1B7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B16C4772F3D77045BBA997F94CEACA9E0DCC2865.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3c9941a4-28d2-47d1-91e7-acab59084462/0/B16C4772F3D77045BBA997F94CEACA9E0DCC2865.mft Manifest number: 017C Signing time: Tue 24 Mar 2026 20:12:11 +0000 Manifest this update: Tue 24 Mar 2026 20:07:11 +0000 Manifest next update: Sat 28 Mar 2026 05:02:11 +0000 Files and hashes: 1: 3138302e3133312e3132392e302f32342d3234203d3e20313532303238.roa (hash: IK3NBrk/iQNskIBya+kx1CnPloRzYziR32FnB/WUNZ4=) 2: B16C4772F3D77045BBA997F94CEACA9E0DCC2865.crl (hash: Ekb8I8q0vF4Y/Ht6sARG9eJbCW6H1KfpXoMWzlcy5Po=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3c9941a4-28d2-47d1-91e7-acab59084462/0/B16C4772F3D77045BBA997F94CEACA9E0DCC2865.crl rsync://repo-rpki.idnic.net/repo/3c9941a4-28d2-47d1-91e7-acab59084462/0/B16C4772F3D77045BBA997F94CEACA9E0DCC2865.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B16C4772F3D77045BBA997F94CEACA9E0DCC2865.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 05:02:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:7d:36:36:d9:76:0f:15:50:ed:ff:ae:43:1c:ac:a5:b3:ef:b1:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B16C4772F3D77045BBA997F94CEACA9E0DCC2865 Validity Not Before: Mar 24 20:07:11 2026 GMT Not After : Mar 28 05:02:11 2026 GMT Subject: CN=DE905490610FB8145202808C3AC7CF99AD95AB29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d6:d7:8b:66:a8:a9:48:e9:2d:b7:7d:2d:42: 8c:19:c4:39:85:20:09:0a:ee:0e:74:9b:34:3e:0d: 6b:1a:d2:dc:a0:62:ea:2d:ee:0e:c6:9a:ec:0b:1c: 0b:45:61:bb:60:1d:ad:01:c5:9d:3d:71:f5:77:9b: bb:c2:62:75:e6:b1:6d:ac:a6:4d:fe:5b:24:51:bc: d5:4b:b5:37:24:d8:40:e0:d4:83:c3:24:42:b3:f0: e4:d0:4b:4f:8d:0b:9d:86:3d:8b:df:d5:76:e2:12: 61:ec:95:46:d6:5b:a1:47:c7:6f:be:64:cf:2e:b9: 4b:f7:8f:e6:2c:31:83:f5:af:96:fa:58:dd:3b:63: b8:e0:93:df:08:23:f6:dc:23:84:09:74:49:d6:e3: a8:8c:87:00:09:5a:a9:77:25:f1:e8:37:c6:9c:16: 2e:58:fb:ff:e1:b3:d4:2c:46:f4:dc:c1:1d:f9:0f: 46:c7:ea:b4:d4:94:93:ed:ba:42:31:07:9d:a5:8f: e6:28:4d:66:b8:4b:8b:22:12:79:a4:7b:f6:c6:a3: 99:4e:45:aa:de:e0:a7:c9:5e:4b:65:42:86:2d:94: 61:e6:02:03:14:7a:25:79:fa:c5:d0:dd:c4:54:08: e0:ba:e0:85:53:e6:cc:cc:03:62:c0:5f:76:37:92: b5:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:90:54:90:61:0F:B8:14:52:02:80:8C:3A:C7:CF:99:AD:95:AB:29 X509v3 Authority Key Identifier: keyid:B1:6C:47:72:F3:D7:70:45:BB:A9:97:F9:4C:EA:CA:9E:0D:CC:28:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3c9941a4-28d2-47d1-91e7-acab59084462/0/B16C4772F3D77045BBA997F94CEACA9E0DCC2865.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B16C4772F3D77045BBA997F94CEACA9E0DCC2865.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3c9941a4-28d2-47d1-91e7-acab59084462/0/B16C4772F3D77045BBA997F94CEACA9E0DCC2865.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:d4:c1:ce:b6:4d:cf:82:32:af:28:77:c1:b7:b9:bd:09:e9: 9b:2a:29:e3:9d:9e:ed:fb:db:e2:79:0c:27:f4:fd:dc:f7:ca: b2:30:79:83:fe:ab:b4:a4:bd:86:bb:5c:26:56:84:b7:51:1d: d2:d0:ef:91:43:ad:67:18:8b:73:f2:c1:80:48:52:67:9b:e3: a4:b8:8c:d2:00:fd:0b:ef:ae:d9:40:a0:30:c1:03:8d:22:9e: e3:61:2b:42:2d:c4:71:b8:c5:37:e6:73:d6:d6:75:5c:84:b0: e9:13:91:0f:fd:1d:e8:8e:3b:20:15:b5:a5:41:3a:42:2e:76: 68:12:d7:5d:66:c9:68:31:1d:f2:29:7f:30:9f:a9:40:40:27: ea:8c:fc:de:fd:c2:4b:5d:d6:2d:1f:73:8a:82:db:8f:4a:31: 7b:60:a7:77:a2:b9:f3:0b:42:b5:aa:c2:11:cb:6e:1c:1a:0c: d6:1d:77:cb:8e:d9:6d:e8:3b:ce:9f:5f:0f:e6:81:65:5d:d0: f0:6a:be:32:f4:31:50:e1:bc:f0:98:1f:6c:4a:14:01:04:34: c8:57:24:4f:0b:f6:26:ff:53:f2:c3:54:70:39:a9:c9:7c:5a: 42:aa:35:94:a0:05:55:59:10:1a:d4:e1:e4:84:12:ba:e9:33: 8c:83:13:31 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEH02Ntl2DxVQ7f+uQxyspbPvsbcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjE2QzQ3NzJGM0Q3NzA0NUJCQTk5N0Y5NENFQUNBOUUw RENDMjg2NTAeFw0yNjAzMjQyMDA3MTFaFw0yNjAzMjgwNTAyMTFaMDMxMTAvBgNV BAMTKERFOTA1NDkwNjEwRkI4MTQ1MjAyODA4QzNBQzdDRjk5QUQ5NUFCMjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC01teLZqipSOktt30tQowZxDmF IAkK7g50mzQ+DWsa0tygYuot7g7GmuwLHAtFYbtgHa0BxZ09cfV3m7vCYnXmsW2s pk3+WyRRvNVLtTck2EDg1IPDJEKz8OTQS0+NC52GPYvf1XbiEmHslUbWW6FHx2++ ZM8uuUv3j+YsMYP1r5b6WN07Y7jgk98II/bcI4QJdEnW46iMhwAJWql3JfHoN8ac Fi5Y+//hs9QsRvTcwR35D0bH6rTUlJPtukIxB52lj+YoTWa4S4siEnmke/bGo5lO Rare4KfJXktlQoYtlGHmAgMUeiV5+sXQ3cRUCOC64IVT5szMA2LAX3Y3krU9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3pBUkGEPuBRSAoCMOsfPma2VqykwHwYDVR0j BBgwFoAUsWxHcvPXcEW7qZf5TOrKng3MKGUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z Yzk5NDFhNC0yOGQyLTQ3ZDEtOTFlNy1hY2FiNTkwODQ0NjIvMC9CMTZDNDc3MkYz RDc3MDQ1QkJBOTk3Rjk0Q0VBQ0E5RTBEQ0MyODY1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjE2QzQ3NzJGM0Q3NzA0NUJCQTk5N0Y5NENFQUNBOUUwREND Mjg2NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2M5OTQxYTQtMjhkMi00N2QxLTkx ZTctYWNhYjU5MDg0NDYyLzAvQjE2QzQ3NzJGM0Q3NzA0NUJCQTk5N0Y5NENFQUNB OUUwRENDMjg2NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF/Uwc62Tc+CMq8od8G3ub0J6ZsqKeOdnu37 2+J5DCf0/dz3yrIweYP+q7SkvYa7XCZWhLdRHdLQ75FDrWcYi3PywYBIUmeb46S4 jNIA/QvvrtlAoDDBA40inuNhK0ItxHG4xTfmc9bWdVyEsOkTkQ/9HeiOOyAVtaVB OkIudmgS111myWgxHfIpfzCfqUBAJ+qM/N79wktd1i0fc4qC249KMXtgp3eiufML QrWqwhHLbhwaDNYdd8uO2W3oO86fXw/mgWVd0PBqvjL0MVDhvPCYH2xKFAEENMhX JE8L9ib/U/LDVHA5qcl8WkKqNZSgBVVZEBrU4eSEErrpM4yDEzE= -----END CERTIFICATE-----Generated at Thu Mar 26 13:39:25 2026 by rpki-client