$ rpki-client -vvf repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/C16E46D556A47D2429EC847E95E7C429D38AC26D.mft File: C16E46D556A47D2429EC847E95E7C429D38AC26D.mft (raw, json) Hash identifier: IJBTc1kb5musVAX/uYq/6SBkaTSq67w+lBq9sDm8Je8= Subject key identifier: 91:AC:1C:44:68:E1:2E:A3:5F:19:25:AC:E9:3A:88:7A:25:D2:E1:C0 Authority key identifier: C1:6E:46:D5:56:A4:7D:24:29:EC:84:7E:95:E7:C4:29:D3:8A:C2:6D Certificate issuer: /CN=C16E46D556A47D2429EC847E95E7C429D38AC26D Certificate serial: 1F1A035AC76DF576BEBB8D0356ACB3B92632CF9E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C16E46D556A47D2429EC847E95E7C429D38AC26D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/C16E46D556A47D2429EC847E95E7C429D38AC26D.mft Manifest number: 03C7 Signing time: Wed 25 Mar 2026 15:52:25 +0000 Manifest this update: Wed 25 Mar 2026 15:47:25 +0000 Manifest next update: Sat 28 Mar 2026 21:48:25 +0000 Files and hashes: 1: 3230332e33302e3235342e302f32342d3234203d3e203435333235.roa (hash: f0QuTjuXU3+PMwtOvyLhhE3F7fk0wnPs64pd29FWWiY=) 2: 323430303a373530303a3a2f33322d3332203d3e20313431313432.roa (hash: jAH5xZ0mM2gJ4zgC+LxXgivI18TAlcZ5CPYpBlGyxP0=) 3: 3132322e3234382e34332e302f32342d3234203d3e203435333235.roa (hash: TzoAuOSZ6mXbYFD7JpUog8X7cU+aL4pu97WqgSsQlww=) 4: 3132322e3234382e33322e302f32342d3234203d3e203435333235.roa (hash: YtgOnaLw1bxl1wUrgM2neAz8Qf57lo3CvBW85nMyhJg=) 5: 3132322e3234382e34352e302f32342d3234203d3e203435333235.roa (hash: OxhA3uXfrHkYk9hpK8Kprlt50rQpJAHKf4/psbChj9g=) 6: 3132322e3234382e33392e302f32342d3234203d3e203435333235.roa (hash: VdRAPx9PRO631CUuDsRT3G+gpxtg4/VX90lYsk0SMVU=) 7: 3230322e35382e3234332e302f32342d3234203d3e203435333235.roa (hash: WivqrExuW/czATKs+PzCjFZrJxIri49e6BcoDofHA0A=) 8: 3132322e3234382e34322e302f32342d3234203d3e20313431313432.roa (hash: BEXTqeRuOYeCds/GtbXckcTCx17EaQiOC1/BtPp70DI=) 9: 3132322e3234382e34302e302f32342d3234203d3e203435333235.roa (hash: r1xG0EZ+diPvqjo3maUSgSdAXF/PbzNzYbElj3DkPms=) 10: 3132322e3234382e33362e302f32342d3234203d3e203435333235.roa (hash: s1sd22aoOx7eVnGzzPZfaCEnUeLM+0ey0B/Ng0FNQzE=) 11: 3132322e3234382e34312e302f32342d3234203d3e203435333235.roa (hash: VEDwBMu7e2mzL/h9CHSnsP+W8nFPBXkEhV06ak5Sn4k=) 12: 3230322e34332e3131332e302f32342d3234203d3e203435333235.roa (hash: 8c4EuCrXR9USSkoSueUSWcZF3Vya08SYcqUOI9OfmOY=) 13: C16E46D556A47D2429EC847E95E7C429D38AC26D.crl (hash: 2sbwvW9UvD1MMHi4hLobreNX0qawgKJJfmVpV6onA2g=) 14: 3132322e3234382e33382e302f32342d3234203d3e203435333235.roa (hash: Giz7os34qxdcaeyi2EtKcr2LS4LsMlTnJlV8pqSpEa4=) 15: 3132322e3234382e33332e302f32342d3234203d3e203435333235.roa (hash: 8NBF7TYD3mv93Ahcm2U3DCAxcvF4PEalBVAFdo0PIhA=) 16: 3132322e3234382e34342e302f32342d3234203d3e20313431313432.roa (hash: /wV95wT81KDKro/jg/Buo94wrPpWyGBGso5Gssi1qLc=) 17: 3132322e3234382e34372e302f32342d3234203d3e203435333235.roa (hash: pMSHdCGU3wSWW64VJ8Q+XCnRMyb8p81kTgkpP+Gwk14=) 18: 3132322e3234382e34362e302f32342d3234203d3e203435333235.roa (hash: cNjA+vEY4etZqGchJ8HDvYFIMYzWVJuVGOU4SD9SCJc=) 19: 3230322e34332e3131322e302f32342d3234203d3e203435333235.roa (hash: YfbB3z09y4MNoTi1HjR4+z9IdxMYyBM89bj8p3WiTw4=) 20: 3132322e3234382e33372e302f32342d3234203d3e20313431313432.roa (hash: q+4LJqnEtPR8u/O7vXDxEMWbUC+3pBdRVabjnpWaIW8=) 21: 3132322e3234382e33352e302f32342d3234203d3e20313431313432.roa (hash: GE7T9YC/kqBLoYKuMN7OgXcO8QMg0KTigD9MICwdRZo=) 22: 3230332e33302e3235352e302f32342d3234203d3e203435333235.roa (hash: xUdwOu6GtGdzxItV3iA1A5hAD2Ey5dnmQ19p3DcRu10=) 23: 3132322e3234382e33342e302f32342d3234203d3e203435333235.roa (hash: TPAjUCjHJnWAtWeWIogMrgqyIk1DQzed8sLTl5HA/OY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/C16E46D556A47D2429EC847E95E7C429D38AC26D.crl rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/C16E46D556A47D2429EC847E95E7C429D38AC26D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C16E46D556A47D2429EC847E95E7C429D38AC26D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 21:48:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:1a:03:5a:c7:6d:f5:76:be:bb:8d:03:56:ac:b3:b9:26:32:cf:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C16E46D556A47D2429EC847E95E7C429D38AC26D Validity Not Before: Mar 25 15:47:25 2026 GMT Not After : Mar 28 21:48:25 2026 GMT Subject: CN=91AC1C4468E12EA35F1925ACE93A887A25D2E1C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:55:b5:59:cb:b7:0c:84:9d:09:ae:0a:b9:5e: e8:10:1c:d5:3e:c5:1d:57:77:56:41:b7:db:d0:47: 1f:68:4b:fd:89:4b:b7:32:da:3e:9a:9f:2b:47:3c: 4f:1f:a4:d6:87:2f:c1:1d:35:70:99:a9:52:c9:fb: 15:3e:0a:af:5d:de:dd:ef:95:59:0a:a4:67:12:e9: 9f:19:33:36:e3:96:dc:70:f6:2a:4b:64:4a:0a:eb: 63:39:0a:7c:03:48:04:dc:26:0f:6f:2f:96:62:7e: c2:c0:f1:96:43:2a:6c:3d:04:e1:3c:04:18:12:57: 48:b6:89:f8:5c:c1:09:8a:3c:00:82:6e:8b:99:36: e2:d7:2d:a1:28:88:82:28:ce:f0:af:bc:9c:b3:29: b3:e2:d3:65:55:16:d4:7e:4c:25:3b:d2:d0:0d:00: 10:7d:d3:36:7b:99:49:1d:b9:40:45:17:00:5a:11: 9f:6d:cf:e8:bd:a4:bb:f3:b9:39:91:b8:5b:6a:8c: 70:8d:49:b7:6a:bd:16:3c:0f:93:5d:a7:60:fe:46: 57:61:54:86:82:c3:21:c4:c9:15:30:ad:42:5e:69: 4a:5a:db:39:f5:d0:e0:a0:cc:a5:8e:e6:aa:c9:21: b7:44:d1:ae:7d:92:d7:c2:eb:d1:32:f9:84:90:2c: 3e:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:AC:1C:44:68:E1:2E:A3:5F:19:25:AC:E9:3A:88:7A:25:D2:E1:C0 X509v3 Authority Key Identifier: keyid:C1:6E:46:D5:56:A4:7D:24:29:EC:84:7E:95:E7:C4:29:D3:8A:C2:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/C16E46D556A47D2429EC847E95E7C429D38AC26D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C16E46D556A47D2429EC847E95E7C429D38AC26D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/C16E46D556A47D2429EC847E95E7C429D38AC26D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:67:b7:aa:a3:b6:f4:11:a9:87:56:4c:f4:54:d5:87:fb:a8: e6:42:b9:95:76:4a:06:df:0e:38:05:b5:cf:ac:c4:e0:f2:a8: 8f:b7:e5:03:a8:e1:14:5f:35:4d:3a:2e:37:35:3f:c5:7f:ec: 1c:48:b1:ec:35:c1:8d:6d:cb:06:f9:0f:65:67:96:e3:a3:0f: c7:77:69:bd:3b:c2:f5:6d:f0:4d:52:cf:99:68:ef:8e:a8:42: 07:3a:62:d5:0e:65:5e:d5:79:f6:b4:4e:7a:7f:6f:9f:74:38: ca:0a:c6:9b:ee:91:54:1f:82:8c:72:65:66:dd:28:34:97:e6: 9b:10:40:7d:6a:5a:f6:7e:ce:22:7b:7b:50:f5:af:9f:03:9d: cc:b2:ef:d2:b6:08:6f:6f:50:7b:d6:ef:aa:bf:af:fb:a5:3f: 37:78:af:b8:e4:b6:99:6e:3c:dc:15:a5:0f:e6:c6:d8:db:87: 48:6b:65:29:5e:9d:76:ba:48:f6:b0:40:9b:36:69:89:65:a3: cd:dc:41:06:bd:88:a4:0b:55:21:ab:84:0c:08:93:b1:9b:91: 98:09:2b:76:0d:9b:95:87:c7:f1:3d:7c:3a:62:7b:be:a0:08: 0c:ab:ae:c7:32:33:28:32:77:72:2b:c1:db:69:8c:12:2e:8f: 6d:de:4f:cc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHxoDWsdt9Xa+u40DVqyzuSYyz54wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzE2RTQ2RDU1NkE0N0QyNDI5RUM4NDdFOTVFN0M0MjlE MzhBQzI2RDAeFw0yNjAzMjUxNTQ3MjVaFw0yNjAzMjgyMTQ4MjVaMDMxMTAvBgNV BAMTKDkxQUMxQzQ0NjhFMTJFQTM1RjE5MjVBQ0U5M0E4ODdBMjVEMkUxQzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoVbVZy7cMhJ0Jrgq5XugQHNU+ xR1Xd1ZBt9vQRx9oS/2JS7cy2j6anytHPE8fpNaHL8EdNXCZqVLJ+xU+Cq9d3t3v lVkKpGcS6Z8ZMzbjltxw9ipLZEoK62M5CnwDSATcJg9vL5ZifsLA8ZZDKmw9BOE8 BBgSV0i2ifhcwQmKPACCbouZNuLXLaEoiIIozvCvvJyzKbPi02VVFtR+TCU70tAN ABB90zZ7mUkduUBFFwBaEZ9tz+i9pLvzuTmRuFtqjHCNSbdqvRY8D5Ndp2D+Rldh VIaCwyHEyRUwrUJeaUpa2zn10OCgzKWO5qrJIbdE0a59ktfC69Ey+YSQLD7nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkawcRGjhLqNfGSWs6TqIeiXS4cAwHwYDVR0j BBgwFoAUwW5G1VakfSQp7IR+lefEKdOKwm0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZjJlN2ZkNi1lYjVlLTQ4MGEtOGU5Ny1jNTVmNjhlMDU4OWEvMC9DMTZFNDZENTU2 QTQ3RDI0MjlFQzg0N0U5NUU3QzQyOUQzOEFDMjZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzE2RTQ2RDU1NkE0N0QyNDI5RUM4NDdFOTVFN0M0MjlEMzhB QzI2RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGYyZTdmZDYtZWI1ZS00ODBhLThl OTctYzU1ZjY4ZTA1ODlhLzAvQzE2RTQ2RDU1NkE0N0QyNDI5RUM4NDdFOTVFN0M0 MjlEMzhBQzI2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHZnt6qjtvQRqYdWTPRU1Yf7qOZCuZV2Sgbf DjgFtc+sxODyqI+35QOo4RRfNU06Ljc1P8V/7BxIsew1wY1tywb5D2VnluOjD8d3 ab07wvVt8E1Sz5lo746oQgc6YtUOZV7Vefa0Tnp/b590OMoKxpvukVQfgoxyZWbd KDSX5psQQH1qWvZ+ziJ7e1D1r58Dncyy79K2CG9vUHvW76q/r/ulPzd4r7jktplu PNwVpQ/mxtjbh0hrZSlenXa6SPawQJs2aYllo83cQQa9iKQLVSGrhAwIk7GbkZgJ K3YNm5WHx/E9fDpie76gCAyrrscyMygyd3IrwdtpjBIuj23eT8w= -----END CERTIFICATE-----Generated at Thu Mar 26 13:03:18 2026 by rpki-client