$ rpki-client -vvf repo-rpki.idnic.net/repo/b87d446c-1144-4009-bd98-0678d647f4ce/0/C816A670D0EF35D7923125F4B2671225E2E843FB.mft File: C816A670D0EF35D7923125F4B2671225E2E843FB.mft (raw, json) Hash identifier: Q/hmZ1uTRKk9tO7bUsmdQbRiA0Ibxv6nxmJY0J+rwqY= Subject key identifier: F1:5E:D6:E5:1D:5A:68:77:8A:F8:6D:8B:0D:08:4B:56:D6:43:99:2E Authority key identifier: C8:16:A6:70:D0:EF:35:D7:92:31:25:F4:B2:67:12:25:E2:E8:43:FB Certificate issuer: /CN=C816A670D0EF35D7923125F4B2671225E2E843FB Certificate serial: 4FC428CE6E5911C0F9F5B0215D59AA598D861309 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C816A670D0EF35D7923125F4B2671225E2E843FB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b87d446c-1144-4009-bd98-0678d647f4ce/0/C816A670D0EF35D7923125F4B2671225E2E843FB.mft Manifest number: 1D Signing time: Tue 24 Mar 2026 12:12:07 +0000 Manifest this update: Tue 24 Mar 2026 12:07:07 +0000 Manifest next update: Fri 27 Mar 2026 17:01:07 +0000 Files and hashes: 1: C816A670D0EF35D7923125F4B2671225E2E843FB.crl (hash: dlYaZN/1M38VOJh3qXhks9tLgEJJRSqWUznTCx/1JnQ=) 2: 3130332e3134312e36322e302f32332d3234203d3e20313338383935.roa (hash: m788pI8kuW1mAz5aJj9/QdtxJsGtB244M/fnoZxh0tA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b87d446c-1144-4009-bd98-0678d647f4ce/0/C816A670D0EF35D7923125F4B2671225E2E843FB.crl rsync://repo-rpki.idnic.net/repo/b87d446c-1144-4009-bd98-0678d647f4ce/0/C816A670D0EF35D7923125F4B2671225E2E843FB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C816A670D0EF35D7923125F4B2671225E2E843FB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 17:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:c4:28:ce:6e:59:11:c0:f9:f5:b0:21:5d:59:aa:59:8d:86:13:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C816A670D0EF35D7923125F4B2671225E2E843FB Validity Not Before: Mar 24 12:07:07 2026 GMT Not After : Mar 27 17:01:07 2026 GMT Subject: CN=F15ED6E51D5A68778AF86D8B0D084B56D643992E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:40:2e:68:00:0b:7f:a5:b9:8a:7e:1d:74:1b: 77:2c:91:1a:61:69:69:9b:63:99:c2:50:6a:c8:b6: 68:d8:3b:11:c5:7c:83:79:57:d3:7c:12:e4:6b:58: f0:f9:27:c8:86:55:e9:03:57:ee:bb:0d:da:aa:47: 8a:77:78:87:ae:0f:31:d4:09:a7:89:3d:fb:fb:d3: 13:8c:f8:d4:00:b5:f1:cb:cf:77:39:bd:aa:1d:0c: 6e:9c:5a:7a:94:78:4e:02:5a:4d:c0:0e:41:67:77: 98:40:03:7d:3a:04:44:9f:2a:1d:aa:89:b8:2e:89: 1e:bc:5b:ba:de:b3:2f:ec:8f:81:a8:0a:c6:82:90: 5c:75:38:b9:ac:64:22:b0:88:d6:c5:b4:cf:0a:55: cf:9e:02:e1:9d:26:d7:dc:e2:e7:65:e8:34:0f:ee: 20:d4:d6:18:fc:e7:fd:7c:5a:e3:9c:a6:72:41:f7: 0c:b1:d3:94:dc:d2:e1:92:c6:76:3d:8f:d3:f7:3b: e4:1b:a6:98:be:1a:aa:77:62:d4:ca:38:5b:7d:14: 64:58:13:d9:4c:77:61:e0:dd:67:3a:33:33:7b:cf: 48:36:1f:e7:c7:eb:2f:26:df:e4:c7:fd:de:fd:15: 1d:26:8b:a7:12:a9:39:4a:88:e1:7a:d8:44:d0:2f: 63:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:5E:D6:E5:1D:5A:68:77:8A:F8:6D:8B:0D:08:4B:56:D6:43:99:2E X509v3 Authority Key Identifier: keyid:C8:16:A6:70:D0:EF:35:D7:92:31:25:F4:B2:67:12:25:E2:E8:43:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b87d446c-1144-4009-bd98-0678d647f4ce/0/C816A670D0EF35D7923125F4B2671225E2E843FB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C816A670D0EF35D7923125F4B2671225E2E843FB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b87d446c-1144-4009-bd98-0678d647f4ce/0/C816A670D0EF35D7923125F4B2671225E2E843FB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:18:ee:8f:f9:df:7d:15:34:5a:37:11:01:b5:08:59:e6:8d: 31:83:6d:86:15:d8:d7:a1:f6:1b:0a:9e:64:8e:5a:1d:ae:1a: fc:7c:48:38:76:98:b1:69:ea:e8:a8:65:eb:ce:80:f1:08:42: a9:1e:2c:9c:84:98:83:6a:fa:90:cd:53:ad:23:a0:a8:1a:a5: 30:fd:03:c4:87:d0:e0:cc:be:53:70:ec:0b:ed:f2:88:89:ab: 45:da:55:3c:3b:1c:d6:7c:dd:31:c9:17:96:ba:34:8c:72:3d: b5:05:da:b5:7d:03:de:d9:00:31:18:68:90:23:da:53:2b:22: 9c:be:85:32:75:72:96:5d:6f:00:3c:fb:12:23:55:62:0b:4f: b4:48:f4:75:f8:e2:76:92:7f:cd:39:eb:5e:9f:a9:1d:38:30: 4a:ce:ee:02:fd:c1:04:ea:b9:9b:70:95:2f:69:d0:89:d2:35: 5c:23:c4:a9:5f:75:e1:98:09:15:96:eb:22:b3:e6:36:a0:85: 2a:dd:0b:5d:55:9d:da:43:fc:34:43:ca:c2:37:c5:89:9b:a0: ed:3e:9c:e4:34:f2:89:55:81:5b:1e:66:1f:32:ab:73:00:f1: ef:97:bc:a3:c2:d7:14:66:f5:d5:a2:3f:56:c5:ce:94:af:53: 44:1e:bc:98 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT8Qozm5ZEcD59bAhXVmqWY2GEwkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzgxNkE2NzBEMEVGMzVENzkyMzEyNUY0QjI2NzEyMjVF MkU4NDNGQjAeFw0yNjAzMjQxMjA3MDdaFw0yNjAzMjcxNzAxMDdaMDMxMTAvBgNV BAMTKEYxNUVENkU1MUQ1QTY4Nzc4QUY4NkQ4QjBEMDg0QjU2RDY0Mzk5MkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlQC5oAAt/pbmKfh10G3cskRph aWmbY5nCUGrItmjYOxHFfIN5V9N8EuRrWPD5J8iGVekDV+67DdqqR4p3eIeuDzHU CaeJPfv70xOM+NQAtfHLz3c5vaodDG6cWnqUeE4CWk3ADkFnd5hAA306BESfKh2q ibguiR68W7resy/sj4GoCsaCkFx1OLmsZCKwiNbFtM8KVc+eAuGdJtfc4udl6DQP 7iDU1hj85/18WuOcpnJB9wyx05Tc0uGSxnY9j9P3O+Qbppi+Gqp3YtTKOFt9FGRY E9lMd2Hg3Wc6MzN7z0g2H+fH6y8m3+TH/d79FR0mi6cSqTlKiOF62ETQL2PHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8V7W5R1aaHeK+G2LDQhLVtZDmS4wHwYDVR0j BBgwFoAUyBamcNDvNdeSMSX0smcSJeLoQ/swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ODdkNDQ2Yy0xMTQ0LTQwMDktYmQ5OC0wNjc4ZDY0N2Y0Y2UvMC9DODE2QTY3MEQw RUYzNUQ3OTIzMTI1RjRCMjY3MTIyNUUyRTg0M0ZCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzgxNkE2NzBEMEVGMzVENzkyMzEyNUY0QjI2NzEyMjVFMkU4 NDNGQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjg3ZDQ0NmMtMTE0NC00MDA5LWJk OTgtMDY3OGQ2NDdmNGNlLzAvQzgxNkE2NzBEMEVGMzVENzkyMzEyNUY0QjI2NzEy MjVFMkU4NDNGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJYY7o/5330VNFo3EQG1CFnmjTGDbYYV2Neh 9hsKnmSOWh2uGvx8SDh2mLFp6uioZevOgPEIQqkeLJyEmINq+pDNU60joKgapTD9 A8SH0ODMvlNw7Avt8oiJq0XaVTw7HNZ83THJF5a6NIxyPbUF2rV9A97ZADEYaJAj 2lMrIpy+hTJ1cpZdbwA8+xIjVWILT7RI9HX44naSf805616fqR04MErO7gL9wQTq uZtwlS9p0InSNVwjxKlfdeGYCRWW6yKz5jaghSrdC11VndpD/DRDysI3xYmboO0+ nOQ08olVgVseZh8yq3MA8e+XvKPC1xRm9dWiP1bFzpSvU0QevJg= -----END CERTIFICATE-----Generated at Thu Mar 26 17:40:43 2026 by rpki-client