$ rpki-client -vvf repo-rpki.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/16F8223FA3342ACE31ED864C538E59E22A52BC89.mft File: 16F8223FA3342ACE31ED864C538E59E22A52BC89.mft (raw, json) Hash identifier: vLy5Dk3WBfj30jsC4y8wm1oAzKuntnXRjtES1o/k3Qk= Subject key identifier: A7:A3:D7:03:97:55:3C:78:B9:0D:EF:0B:7D:F9:95:30:8E:9D:B3:77 Authority key identifier: 16:F8:22:3F:A3:34:2A:CE:31:ED:86:4C:53:8E:59:E2:2A:52:BC:89 Certificate issuer: /CN=16F8223FA3342ACE31ED864C538E59E22A52BC89 Certificate serial: 351E0952E4BFB678FB290E8454D0200B6C74B989 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/16F8223FA3342ACE31ED864C538E59E22A52BC89.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/16F8223FA3342ACE31ED864C538E59E22A52BC89.mft Manifest number: D1 Signing time: Wed 25 Mar 2026 02:21:24 +0000 Manifest this update: Wed 25 Mar 2026 02:16:24 +0000 Manifest next update: Sat 28 Mar 2026 13:23:24 +0000 Files and hashes: 1: 3136302e32352e3135372e302f32342d3234203d3e20313533303835.roa (hash: BLy2IIO/t25gzHYkfmO4RMXFqI37JzfK6VfmCeQNaI4=) 2: 16F8223FA3342ACE31ED864C538E59E22A52BC89.crl (hash: MCqMF/lPa33bWKhpvB/zGtkS+wcYcahR6nW03cq2utg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/16F8223FA3342ACE31ED864C538E59E22A52BC89.crl rsync://repo-rpki.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/16F8223FA3342ACE31ED864C538E59E22A52BC89.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/16F8223FA3342ACE31ED864C538E59E22A52BC89.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 13:23:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:1e:09:52:e4:bf:b6:78:fb:29:0e:84:54:d0:20:0b:6c:74:b9:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16F8223FA3342ACE31ED864C538E59E22A52BC89 Validity Not Before: Mar 25 02:16:24 2026 GMT Not After : Mar 28 13:23:24 2026 GMT Subject: CN=A7A3D70397553C78B90DEF0B7DF995308E9DB377 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:71:96:b0:3d:6e:00:ed:4e:6f:f7:e2:0b:82: 35:57:ac:45:a0:4b:0b:92:4a:ee:3c:4f:2f:8a:9f: 41:ea:44:17:11:0a:ec:be:cc:db:6f:4b:4d:49:91: 63:0f:ff:5b:7b:78:91:00:7a:03:f7:67:28:26:9c: 94:ea:db:95:8c:d8:0d:4f:c4:19:48:e5:2d:8d:3e: 8b:01:d8:84:15:ac:4f:c9:fc:3f:0f:11:dc:c8:c6: d0:ee:f7:44:a4:e6:bf:ef:e2:3e:bf:9f:ab:30:51: f1:eb:4d:60:c2:38:81:c9:6d:1c:8f:72:67:80:23: 24:ab:d8:a2:29:ff:65:a4:5e:9a:0d:54:76:55:7a: db:3e:c6:01:05:d0:39:b3:77:ba:f6:8f:4a:23:0d: f4:98:6a:6a:de:54:7b:09:46:0d:8e:fa:a1:d4:8f: 7f:c3:c9:fd:3e:26:47:d5:54:79:1c:96:43:aa:d3: e6:0f:3e:1a:7d:91:84:99:0d:0e:e2:5e:99:30:26: 8e:f9:cb:cb:6d:a3:4f:46:e2:d1:e3:b5:fa:c6:2d: 6a:eb:99:ef:e3:df:20:05:ed:28:a0:52:ba:af:d9: b7:4b:41:90:77:f6:a9:33:61:34:d0:ca:44:6c:05: 15:a7:16:13:c1:6d:77:ff:6e:8d:c1:67:28:37:77: 6b:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:A3:D7:03:97:55:3C:78:B9:0D:EF:0B:7D:F9:95:30:8E:9D:B3:77 X509v3 Authority Key Identifier: keyid:16:F8:22:3F:A3:34:2A:CE:31:ED:86:4C:53:8E:59:E2:2A:52:BC:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/16F8223FA3342ACE31ED864C538E59E22A52BC89.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/16F8223FA3342ACE31ED864C538E59E22A52BC89.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/16F8223FA3342ACE31ED864C538E59E22A52BC89.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:b0:9b:61:7e:c9:56:51:17:7a:12:8b:8d:73:c5:b0:ad:71: 62:49:d7:e9:7b:7f:0f:6c:e7:cf:6b:eb:bb:9a:f1:e2:58:64: aa:56:66:6d:f7:23:81:b8:d9:b8:e9:ec:56:77:7a:f6:ba:35: 9e:1c:31:96:3e:d2:25:ec:5c:29:7c:a8:01:41:c8:3e:eb:98: 29:13:e2:2d:00:88:a0:0b:d9:6b:d9:13:6c:09:87:21:b2:d2: b4:72:97:fe:04:9c:53:21:e6:2c:39:a9:b8:af:10:0a:66:7a: 68:e8:68:9e:dd:5f:ae:55:27:e8:2c:e7:12:47:ef:1b:10:db: f9:45:a5:b5:b0:40:47:52:ed:93:72:65:75:1f:b9:41:7f:ad: a4:66:b5:1e:87:ee:c3:e7:67:5a:2d:37:fc:d8:77:2d:b6:ae: 8e:a9:bc:65:f7:24:19:a7:80:a6:61:fb:0f:e9:70:da:59:38: 33:21:5c:20:45:18:db:b1:5b:1c:52:b1:88:83:c5:3f:02:8d: b2:48:d8:90:5e:10:55:69:9c:3d:1e:5c:dd:d8:d9:93:bb:96: 93:a2:a1:5e:7d:4b:8d:d0:72:18:41:c7:df:70:10:d4:fe:7c: e9:c4:e1:f2:00:10:8f:55:87:f2:89:39:79:a0:45:f4:63:d7: f4:b8:56:77 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNR4JUuS/tnj7KQ6EVNAgC2x0uYkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTZGODIyM0ZBMzM0MkFDRTMxRUQ4NjRDNTM4RTU5RTIy QTUyQkM4OTAeFw0yNjAzMjUwMjE2MjRaFw0yNjAzMjgxMzIzMjRaMDMxMTAvBgNV BAMTKEE3QTNENzAzOTc1NTNDNzhCOTBERUYwQjdERjk5NTMwOEU5REIzNzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCocZawPW4A7U5v9+ILgjVXrEWg SwuSSu48Ty+Kn0HqRBcRCuy+zNtvS01JkWMP/1t7eJEAegP3ZygmnJTq25WM2A1P xBlI5S2NPosB2IQVrE/J/D8PEdzIxtDu90Sk5r/v4j6/n6swUfHrTWDCOIHJbRyP cmeAIySr2KIp/2WkXpoNVHZVets+xgEF0Dmzd7r2j0ojDfSYamreVHsJRg2O+qHU j3/Dyf0+JkfVVHkclkOq0+YPPhp9kYSZDQ7iXpkwJo75y8tto09G4tHjtfrGLWrr me/j3yAF7SigUrqv2bdLQZB39qkzYTTQykRsBRWnFhPBbXf/bo3BZyg3d2tZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUp6PXA5dVPHi5De8LffmVMI6ds3cwHwYDVR0j BBgwFoAUFvgiP6M0Ks4x7YZMU45Z4ipSvIkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j M2E5ZDc4OC1iY2Y3LTQ2ZjAtOGI1Yi0wZDdkMWZjYjZkYTMvMC8xNkY4MjIzRkEz MzQyQUNFMzFFRDg2NEM1MzhFNTlFMjJBNTJCQzg5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMTZGODIyM0ZBMzM0MkFDRTMxRUQ4NjRDNTM4RTU5RTIyQTUy QkM4OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzNhOWQ3ODgtYmNmNy00NmYwLThi NWItMGQ3ZDFmY2I2ZGEzLzAvMTZGODIyM0ZBMzM0MkFDRTMxRUQ4NjRDNTM4RTU5 RTIyQTUyQkM4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABewm2F+yVZRF3oSi41zxbCtcWJJ1+l7fw9s 589r67ua8eJYZKpWZm33I4G42bjp7FZ3eva6NZ4cMZY+0iXsXCl8qAFByD7rmCkT 4i0AiKAL2WvZE2wJhyGy0rRyl/4EnFMh5iw5qbivEApmemjoaJ7dX65VJ+gs5xJH 7xsQ2/lFpbWwQEdS7ZNyZXUfuUF/raRmtR6H7sPnZ1otN/zYdy22ro6pvGX3JBmn gKZh+w/pcNpZODMhXCBFGNuxWxxSsYiDxT8CjbJI2JBeEFVpnD0eXN3Y2ZO7lpOi oV59S43QchhBx99wENT+fOnE4fIAEI9Vh/KJOXmgRfRj1/S4Vnc= -----END CERTIFICATE-----Generated at Thu Mar 26 13:53:14 2026 by rpki-client