$ rpki-client -vvf repo-rpki.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/166B4918E7A1A1641E7C79C537833379E393522E.mft File: 166B4918E7A1A1641E7C79C537833379E393522E.mft (raw, json) Hash identifier: sguHbPk3srhsmPvs0+hvMKYEp/FwBpCWrNHRfq96Plk= Subject key identifier: F8:3E:D5:94:2E:BC:27:FC:99:AF:D8:FA:C6:40:D4:27:D3:53:81:2A Authority key identifier: 16:6B:49:18:E7:A1:A1:64:1E:7C:79:C5:37:83:33:79:E3:93:52:2E Certificate issuer: /CN=166B4918E7A1A1641E7C79C537833379E393522E Certificate serial: 29D69CE654B7419F2E692DD243377668F203EDB5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/166B4918E7A1A1641E7C79C537833379E393522E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/166B4918E7A1A1641E7C79C537833379E393522E.mft Manifest number: 0328 Signing time: Wed 25 Mar 2026 10:31:08 +0000 Manifest this update: Wed 25 Mar 2026 10:26:08 +0000 Manifest next update: Sat 28 Mar 2026 21:35:08 +0000 Files and hashes: 1: 3130332e3137342e3138302e302f32332d3233203d3e20313534343130.roa (hash: 5f6WVPyM1NaAUmmM9KmlCurONgPApRx10UTt15+/gqw=) 2: 3130332e3137342e3138302e302f32332d3233203d3e20313437313037.roa (hash: oK3qw71PTaTu9zr3WTDr2kf09ZEsEk1iSGVob7ZwRo0=) 3: 3130332e3137342e3138312e302f32342d3234203d3e20313437313037.roa (hash: LzEWJe+Hglc03QN90vVTDC59A7niJ+rvkY3tQyL/MFs=) 4: 3130332e3137342e3138302e302f32342d3234203d3e20313437313037.roa (hash: WsHwgNa1eu27mA5KJGjHDisSyyKknyjiNT1hKbJ/YGc=) 5: 166B4918E7A1A1641E7C79C537833379E393522E.crl (hash: AJ23hZwdsND538v09C5SDbLtL1QSq/Nw+mgpUak6kbE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/166B4918E7A1A1641E7C79C537833379E393522E.crl rsync://repo-rpki.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/166B4918E7A1A1641E7C79C537833379E393522E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/166B4918E7A1A1641E7C79C537833379E393522E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 21:35:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:d6:9c:e6:54:b7:41:9f:2e:69:2d:d2:43:37:76:68:f2:03:ed:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=166B4918E7A1A1641E7C79C537833379E393522E Validity Not Before: Mar 25 10:26:08 2026 GMT Not After : Mar 28 21:35:08 2026 GMT Subject: CN=F83ED5942EBC27FC99AFD8FAC640D427D353812A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:01:02:45:5a:6b:0b:43:55:b2:a3:4f:d9:c5: 23:08:0f:09:78:d9:58:86:a5:b3:e4:6c:1e:75:e5: 0c:17:3e:d2:f5:8e:71:7c:95:40:9b:79:a8:22:0f: 4b:24:f4:6d:28:01:e8:8b:df:08:ed:cf:97:6d:5d: 4d:2c:4c:c4:d8:8f:a9:83:50:45:e7:e3:70:71:bb: 52:a9:a7:46:8d:2a:88:8e:4c:18:9f:6e:11:41:22: 09:bb:d9:32:c6:41:8b:01:e6:3b:0c:54:fe:e4:a1: 67:3b:fc:b5:e4:59:28:d8:9d:60:75:5f:8d:1b:43: bd:99:32:93:c7:49:d5:98:b4:93:c0:ea:f6:2f:5e: 70:2d:af:73:95:21:7d:e6:c7:8f:68:71:f2:ab:4d: 23:f5:56:63:e9:b4:91:36:0d:d1:66:8f:42:ae:55: 8c:5e:59:13:38:d2:ed:10:db:0f:90:d9:ba:98:78: ed:a9:7c:fd:dc:05:97:e7:a5:45:24:60:73:61:62: b8:c6:67:cd:8d:bd:90:a4:c5:cb:15:17:b0:45:42: 0e:63:e9:fc:7d:98:5f:be:2e:61:0e:74:7d:c9:30: 0b:0f:a9:c8:1e:d7:32:fa:61:f4:89:ab:28:44:bf: 10:af:3d:a4:4d:07:4a:41:bb:6f:06:5a:57:90:19: b8:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:3E:D5:94:2E:BC:27:FC:99:AF:D8:FA:C6:40:D4:27:D3:53:81:2A X509v3 Authority Key Identifier: keyid:16:6B:49:18:E7:A1:A1:64:1E:7C:79:C5:37:83:33:79:E3:93:52:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/166B4918E7A1A1641E7C79C537833379E393522E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/166B4918E7A1A1641E7C79C537833379E393522E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/166B4918E7A1A1641E7C79C537833379E393522E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:a0:19:bb:ed:80:3c:4a:90:54:78:ae:c4:ce:5c:66:e1:f6: 0b:5e:92:6b:d5:74:df:6f:cc:14:6e:96:54:48:89:43:ee:6b: d7:ab:99:49:27:af:7d:f0:00:c8:21:e6:eb:0e:89:74:bc:fa: 3f:43:30:f0:99:b0:48:4f:d3:e0:59:0b:62:75:84:2e:a7:89: fa:50:25:64:fb:c9:4c:bc:47:17:25:d2:be:57:86:71:a0:1d: be:42:5e:41:35:4d:13:4d:34:3e:d8:d3:6c:08:cc:e4:2b:c8: fb:52:83:eb:7a:3f:fb:dc:9f:5c:a4:02:7c:ef:80:e1:7d:68: 6f:45:2b:54:61:84:f1:5d:13:a4:24:1d:9b:c7:75:68:0d:f6: e0:21:05:45:4b:07:7a:68:e5:12:fd:44:1f:1a:01:87:02:ac: 9d:fd:a6:1f:f3:cb:88:74:fb:b9:5a:72:6d:9d:f5:3c:99:5b: 33:ba:8b:08:83:86:9a:ed:92:c5:f0:ad:ca:69:b6:0e:ff:78: ce:0f:80:35:83:2a:02:03:66:ba:c7:fa:0a:03:19:22:90:a9: ff:e6:38:0a:87:a5:c1:38:3b:46:f3:7b:0a:33:cc:09:70:da: ef:c0:80:4d:73:42:90:e9:67:11:0d:97:0b:9e:fc:c6:89:90: f9:c3:cf:99 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKdac5lS3QZ8uaS3SQzd2aPID7bUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTY2QjQ5MThFN0ExQTE2NDFFN0M3OUM1Mzc4MzMzNzlF MzkzNTIyRTAeFw0yNjAzMjUxMDI2MDhaFw0yNjAzMjgyMTM1MDhaMDMxMTAvBgNV BAMTKEY4M0VENTk0MkVCQzI3RkM5OUFGRDhGQUM2NDBENDI3RDM1MzgxMkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgAQJFWmsLQ1Wyo0/ZxSMIDwl4 2ViGpbPkbB515QwXPtL1jnF8lUCbeagiD0sk9G0oAeiL3wjtz5dtXU0sTMTYj6mD UEXn43Bxu1Kpp0aNKoiOTBifbhFBIgm72TLGQYsB5jsMVP7koWc7/LXkWSjYnWB1 X40bQ72ZMpPHSdWYtJPA6vYvXnAtr3OVIX3mx49ocfKrTSP1VmPptJE2DdFmj0Ku VYxeWRM40u0Q2w+Q2bqYeO2pfP3cBZfnpUUkYHNhYrjGZ82NvZCkxcsVF7BFQg5j 6fx9mF++LmEOdH3JMAsPqcge1zL6YfSJqyhEvxCvPaRNB0pBu28GWleQGbjfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+D7VlC68J/yZr9j6xkDUJ9NTgSowHwYDVR0j BBgwFoAUFmtJGOehoWQefHnFN4MzeeOTUi4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YzI4NTI5MS1jZTkyLTQxNDQtOWMxOC05ZThjMTkxZGRlYzYvMC8xNjZCNDkxOEU3 QTFBMTY0MUU3Qzc5QzUzNzgzMzM3OUUzOTM1MjJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTY2QjQ5MThFN0ExQTE2NDFFN0M3OUM1Mzc4MzMzNzlFMzkz NTIyRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWMyODUyOTEtY2U5Mi00MTQ0LTlj MTgtOWU4YzE5MWRkZWM2LzAvMTY2QjQ5MThFN0ExQTE2NDFFN0M3OUM1Mzc4MzMz NzlFMzkzNTIyRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABqgGbvtgDxKkFR4rsTOXGbh9gtekmvVdN9v zBRullRIiUPua9ermUknr33wAMgh5usOiXS8+j9DMPCZsEhP0+BZC2J1hC6nifpQ JWT7yUy8Rxcl0r5XhnGgHb5CXkE1TRNNND7Y02wIzOQryPtSg+t6P/vcn1ykAnzv gOF9aG9FK1RhhPFdE6QkHZvHdWgN9uAhBUVLB3po5RL9RB8aAYcCrJ39ph/zy4h0 +7lacm2d9TyZWzO6iwiDhprtksXwrcpptg7/eM4PgDWDKgIDZrrH+goDGSKQqf/m OAqHpcE4O0bzewozzAlw2u/AgE1zQpDpZxENlwue/MaJkPnDz5k= -----END CERTIFICATE-----Generated at Thu Mar 26 23:51:39 2026 by rpki-client