$ rpki-client -vvf repo-rpki.idnic.net/repo/648b6583-4122-469d-8384-3af1bcc6607f/0/16CD7877C91A179A0A6751085603DA8E7DE539F0.mft File: 16CD7877C91A179A0A6751085603DA8E7DE539F0.mft (raw, json) Hash identifier: LoAM9VHGT9gkn1Q4JOiSSwtZFllXQfJAMhPvuxXHB24= Subject key identifier: A9:0A:72:CC:AF:3D:38:ED:1A:19:E9:69:40:69:5E:01:98:61:E5:33 Authority key identifier: 16:CD:78:77:C9:1A:17:9A:0A:67:51:08:56:03:DA:8E:7D:E5:39:F0 Certificate issuer: /CN=16CD7877C91A179A0A6751085603DA8E7DE539F0 Certificate serial: 2B0CA59A9B0FFB150733CFE15D7043AA255D75E8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/16CD7877C91A179A0A6751085603DA8E7DE539F0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/648b6583-4122-469d-8384-3af1bcc6607f/0/16CD7877C91A179A0A6751085603DA8E7DE539F0.mft Manifest number: 04DF Signing time: Tue 24 Mar 2026 22:11:38 +0000 Manifest this update: Tue 24 Mar 2026 22:06:38 +0000 Manifest next update: Sat 28 Mar 2026 03:58:38 +0000 Files and hashes: 1: 3130332e3134372e3133342e302f32332d3234203d3e20313339393633.roa (hash: EBtEj4ypwlzzw6GhMy3RkgtUq0npTq7gZQPuYhe9Zzc=) 2: 16CD7877C91A179A0A6751085603DA8E7DE539F0.crl (hash: 9auSfdWVW1EsQOOauS6KxWPvHGvmc1hmCAdU2y4pZzc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/648b6583-4122-469d-8384-3af1bcc6607f/0/16CD7877C91A179A0A6751085603DA8E7DE539F0.crl rsync://repo-rpki.idnic.net/repo/648b6583-4122-469d-8384-3af1bcc6607f/0/16CD7877C91A179A0A6751085603DA8E7DE539F0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/16CD7877C91A179A0A6751085603DA8E7DE539F0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 03:58:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:0c:a5:9a:9b:0f:fb:15:07:33:cf:e1:5d:70:43:aa:25:5d:75:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16CD7877C91A179A0A6751085603DA8E7DE539F0 Validity Not Before: Mar 24 22:06:38 2026 GMT Not After : Mar 28 03:58:38 2026 GMT Subject: CN=A90A72CCAF3D38ED1A19E96940695E019861E533 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:a9:24:46:14:97:8e:ae:a2:e2:51:bc:f2:65: ad:d9:21:69:81:00:ea:c8:14:4d:41:5c:69:31:e4: d5:55:6b:27:d7:6d:ee:2c:d9:51:7b:ba:eb:e1:d8: d3:24:fc:44:d1:3a:96:6e:f9:e2:b3:96:2b:e8:ca: 3f:44:c1:b3:b7:2f:08:8c:7b:57:c6:23:a1:7f:f7: 47:b0:06:84:df:70:ac:9a:8f:e6:1a:55:cb:e5:b6: 7c:df:ad:36:93:d6:03:9b:17:3a:a6:b8:34:fd:64: 5a:c4:c4:bc:60:64:6e:c1:a7:5e:c7:fb:db:58:46: 16:48:b1:7d:6d:13:b6:81:99:35:a4:1d:df:ac:05: f7:1b:c2:15:21:de:f6:9d:2a:ee:b9:2a:83:33:4f: 0d:33:89:80:e9:f8:4e:c4:2c:8e:df:a1:3b:f1:f9: 36:ae:cf:da:d0:b2:5f:30:fe:64:e2:c5:cb:9b:d4: a3:29:6f:38:59:0e:e9:b6:ad:f9:bc:6f:8f:72:81: 29:bb:4f:7b:78:84:63:4b:d3:7e:9b:dd:4a:55:c4: 80:70:88:89:ba:80:33:82:44:11:e5:4d:25:1c:27: 5b:7f:1f:c7:69:39:ff:30:40:3e:ff:fd:30:c1:85: de:db:4c:0a:3d:7e:ac:84:22:90:a4:cb:1f:ec:0e: a8:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:0A:72:CC:AF:3D:38:ED:1A:19:E9:69:40:69:5E:01:98:61:E5:33 X509v3 Authority Key Identifier: keyid:16:CD:78:77:C9:1A:17:9A:0A:67:51:08:56:03:DA:8E:7D:E5:39:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/648b6583-4122-469d-8384-3af1bcc6607f/0/16CD7877C91A179A0A6751085603DA8E7DE539F0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/16CD7877C91A179A0A6751085603DA8E7DE539F0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/648b6583-4122-469d-8384-3af1bcc6607f/0/16CD7877C91A179A0A6751085603DA8E7DE539F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:9c:15:58:2c:d1:90:af:91:69:61:9d:b3:9d:63:85:8c:70: 11:5b:62:f4:f3:58:6a:25:67:b4:1b:24:4d:47:33:2a:71:bf: 0e:36:9b:7d:90:4e:65:27:0c:dd:d7:97:85:f8:cd:cd:31:3e: 64:a7:55:00:06:3e:ba:3b:bc:58:96:a4:9c:eb:21:7a:8d:c7: af:e1:05:12:06:df:9b:33:9c:24:18:15:01:c2:05:e9:a2:41: 19:71:71:dc:0e:8a:19:8e:3c:5f:b0:47:c8:bd:1c:71:54:8d: 81:63:93:8b:5a:90:51:87:9a:7f:9d:05:18:6d:4e:80:bc:be: 27:1f:b1:44:25:d7:48:94:a8:03:7f:03:84:90:6b:2d:0c:22: 6a:13:19:d0:07:c6:78:aa:81:e7:17:ba:9f:e6:29:bf:dd:c4: e4:e5:fd:19:e2:10:95:cd:92:50:ea:fa:a5:4e:16:b9:f5:07: 3c:99:9e:24:dc:c5:43:13:58:78:89:cd:00:0b:10:be:68:d0: 0b:3f:69:72:45:2f:d3:68:b2:71:d6:d9:2c:c0:9f:de:cd:55: 77:4c:6a:66:31:e0:13:fa:02:a4:91:d8:dd:a7:d1:96:2f:e1: 8a:b4:a4:81:6c:8a:bc:37:fb:ac:3e:59:6b:1d:2f:28:84:6b: 99:28:fd:40 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKwylmpsP+xUHM8/hXXBDqiVddegwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTZDRDc4NzdDOTFBMTc5QTBBNjc1MTA4NTYwM0RBOEU3 REU1MzlGMDAeFw0yNjAzMjQyMjA2MzhaFw0yNjAzMjgwMzU4MzhaMDMxMTAvBgNV BAMTKEE5MEE3MkNDQUYzRDM4RUQxQTE5RTk2OTQwNjk1RTAxOTg2MUU1MzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkqSRGFJeOrqLiUbzyZa3ZIWmB AOrIFE1BXGkx5NVVayfXbe4s2VF7uuvh2NMk/ETROpZu+eKzlivoyj9EwbO3LwiM e1fGI6F/90ewBoTfcKyaj+YaVcvltnzfrTaT1gObFzqmuDT9ZFrExLxgZG7Bp17H +9tYRhZIsX1tE7aBmTWkHd+sBfcbwhUh3vadKu65KoMzTw0ziYDp+E7ELI7foTvx +Tauz9rQsl8w/mTixcub1KMpbzhZDum2rfm8b49ygSm7T3t4hGNL036b3UpVxIBw iIm6gDOCRBHlTSUcJ1t/H8dpOf8wQD7//TDBhd7bTAo9fqyEIpCkyx/sDqgLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqQpyzK89OO0aGelpQGleAZhh5TMwHwYDVR0j BBgwFoAUFs14d8kaF5oKZ1EIVgPajn3lOfAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NDhiNjU4My00MTIyLTQ2OWQtODM4NC0zYWYxYmNjNjYwN2YvMC8xNkNENzg3N0M5 MUExNzlBMEE2NzUxMDg1NjAzREE4RTdERTUzOUYwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTZDRDc4NzdDOTFBMTc5QTBBNjc1MTA4NTYwM0RBOEU3REU1 MzlGMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjQ4YjY1ODMtNDEyMi00NjlkLTgz ODQtM2FmMWJjYzY2MDdmLzAvMTZDRDc4NzdDOTFBMTc5QTBBNjc1MTA4NTYwM0RB OEU3REU1MzlGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEScFVgs0ZCvkWlhnbOdY4WMcBFbYvTzWGol Z7QbJE1HMypxvw42m32QTmUnDN3Xl4X4zc0xPmSnVQAGPro7vFiWpJzrIXqNx6/h BRIG35sznCQYFQHCBemiQRlxcdwOihmOPF+wR8i9HHFUjYFjk4takFGHmn+dBRht ToC8vicfsUQl10iUqAN/A4SQay0MImoTGdAHxniqgecXup/mKb/dxOTl/RniEJXN klDq+qVOFrn1BzyZniTcxUMTWHiJzQALEL5o0As/aXJFL9NosnHW2SzAn97NVXdM amYx4BP6AqSR2N2n0ZYv4Yq0pIFsirw3+6w+WWsdLyiEa5ko/UA= -----END CERTIFICATE-----Generated at Thu Mar 26 18:25:45 2026 by rpki-client