$ rpki-client -vvf repo-rpki.idnic.net/repo/e11a3d56-ac75-4981-9726-c440214c81ed/0/16B946F06E300C41DA2C037393837F098BA659D1.mft File: 16B946F06E300C41DA2C037393837F098BA659D1.mft (raw, json) Hash identifier: F3qGS/aN7NcpqrWYU42pNi1zzhPwRg4VNGPLxwuoL3g= Subject key identifier: CD:53:B6:4D:3C:BE:D9:D8:E8:89:08:8E:35:3F:F9:E8:F2:66:C2:C3 Authority key identifier: 16:B9:46:F0:6E:30:0C:41:DA:2C:03:73:93:83:7F:09:8B:A6:59:D1 Certificate issuer: /CN=16B946F06E300C41DA2C037393837F098BA659D1 Certificate serial: 319CC760BC035E134A78C0E2E7BDC8F3EC4543B8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/16B946F06E300C41DA2C037393837F098BA659D1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e11a3d56-ac75-4981-9726-c440214c81ed/0/16B946F06E300C41DA2C037393837F098BA659D1.mft Manifest number: 0191 Signing time: Wed 25 Mar 2026 00:20:04 +0000 Manifest this update: Wed 25 Mar 2026 00:15:04 +0000 Manifest next update: Sat 28 Mar 2026 01:42:04 +0000 Files and hashes: 1: 16B946F06E300C41DA2C037393837F098BA659D1.crl (hash: xLd7cURjdHxghu0L2mct8VDd9mZ4MFnjpQPsMRJ85Y4=) 2: 3130332e3130312e3134302e302f32332d3234203d3e20313530393536.roa (hash: jwEFj89dKbg3wcUKCaFzeQ/zncN2pkCnlrkS0ztC5Tk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e11a3d56-ac75-4981-9726-c440214c81ed/0/16B946F06E300C41DA2C037393837F098BA659D1.crl rsync://repo-rpki.idnic.net/repo/e11a3d56-ac75-4981-9726-c440214c81ed/0/16B946F06E300C41DA2C037393837F098BA659D1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/16B946F06E300C41DA2C037393837F098BA659D1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 01:42:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:9c:c7:60:bc:03:5e:13:4a:78:c0:e2:e7:bd:c8:f3:ec:45:43:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16B946F06E300C41DA2C037393837F098BA659D1 Validity Not Before: Mar 25 00:15:04 2026 GMT Not After : Mar 28 01:42:04 2026 GMT Subject: CN=CD53B64D3CBED9D8E889088E353FF9E8F266C2C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:19:bb:d0:d5:ed:0d:51:08:4c:38:1b:fe:43: 99:29:32:4f:1c:be:6b:c3:43:c6:bd:16:be:d8:51: f1:5e:7d:61:20:b9:19:a5:7a:1b:91:1b:22:7b:a1: 29:99:87:01:99:63:86:4e:27:75:03:43:88:1a:76: 0f:39:f0:8c:e9:e3:68:2c:e5:94:50:d1:69:48:51: 61:e5:70:ef:b4:de:7c:7e:67:60:74:12:95:fb:10: 52:89:8c:83:97:d5:c0:a2:61:70:50:0e:15:31:6d: e2:09:39:55:c7:4c:75:eb:8c:f3:66:98:d7:57:ae: b7:6e:14:c4:c9:a0:45:92:44:05:1f:91:b3:c6:db: 60:fd:ec:76:6f:3b:ec:4f:81:18:08:4b:ec:6f:fa: fe:02:c9:aa:e2:82:c8:b4:81:e5:54:43:64:f9:ee: 33:ba:dd:15:d9:d3:08:97:d6:3a:06:c6:7b:66:d3: 61:6d:4c:1a:e3:fd:44:f0:d0:53:5d:e7:5c:2a:9b: 04:12:69:43:f3:46:c8:50:fd:de:78:9c:87:5a:5d: 79:1f:aa:44:19:99:0f:a3:62:4d:db:4e:4f:a4:9b: 7b:54:1c:fc:af:aa:6b:a2:93:83:ce:f1:5f:4a:9e: fa:f3:a4:ae:52:a5:7a:e1:57:84:70:2b:85:e2:b6: 14:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:53:B6:4D:3C:BE:D9:D8:E8:89:08:8E:35:3F:F9:E8:F2:66:C2:C3 X509v3 Authority Key Identifier: keyid:16:B9:46:F0:6E:30:0C:41:DA:2C:03:73:93:83:7F:09:8B:A6:59:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e11a3d56-ac75-4981-9726-c440214c81ed/0/16B946F06E300C41DA2C037393837F098BA659D1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/16B946F06E300C41DA2C037393837F098BA659D1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e11a3d56-ac75-4981-9726-c440214c81ed/0/16B946F06E300C41DA2C037393837F098BA659D1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:8c:92:47:8e:e5:4c:c6:cc:cf:bb:cc:7c:fd:6f:e7:17:bd: 5d:3d:6e:5b:86:6f:94:5b:14:ed:7b:d8:d3:94:08:f7:96:c0: db:1a:85:65:ee:ca:fd:e9:d4:3e:93:03:aa:36:51:72:9a:69: bb:aa:e2:a9:a9:d0:48:d0:ce:16:35:01:17:49:89:90:ca:1a: 6a:5c:06:60:a7:ef:2a:a3:8a:60:3d:80:34:7c:da:8f:37:a9: 81:ac:cc:49:b4:f1:f2:cc:8c:b7:6e:10:ef:fd:66:cd:7a:87: a1:18:7a:12:ad:d0:5d:44:b6:df:5a:49:39:19:db:88:39:96: 6f:e0:47:0f:ec:55:69:4a:4d:32:20:63:52:65:ad:d7:18:d1: 1a:89:9c:6c:e2:3f:1e:9c:9a:7e:d4:45:65:f1:76:5d:e1:ed: cc:9c:cf:d2:ea:7a:76:8f:60:12:2b:4e:c4:ac:16:3a:c7:86: d8:64:60:88:99:ae:f5:c4:43:29:a9:aa:13:fd:dd:ba:22:39: fc:3c:7d:88:99:ce:d0:5a:ca:0e:5e:6c:27:6d:f6:87:2e:00: 09:43:7d:59:8c:45:5c:27:52:2c:9e:15:b2:7a:25:01:a5:af: 97:46:33:32:d4:a1:f2:92:ea:d4:d6:08:64:33:4b:60:83:88: 46:0b:37:86 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMZzHYLwDXhNKeMDi573I8+xFQ7gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTZCOTQ2RjA2RTMwMEM0MURBMkMwMzczOTM4MzdGMDk4 QkE2NTlEMTAeFw0yNjAzMjUwMDE1MDRaFw0yNjAzMjgwMTQyMDRaMDMxMTAvBgNV BAMTKENENTNCNjREM0NCRUQ5RDhFODg5MDg4RTM1M0ZGOUU4RjI2NkMyQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6GbvQ1e0NUQhMOBv+Q5kpMk8c vmvDQ8a9Fr7YUfFefWEguRmlehuRGyJ7oSmZhwGZY4ZOJ3UDQ4gadg858Izp42gs 5ZRQ0WlIUWHlcO+03nx+Z2B0EpX7EFKJjIOX1cCiYXBQDhUxbeIJOVXHTHXrjPNm mNdXrrduFMTJoEWSRAUfkbPG22D97HZvO+xPgRgIS+xv+v4Cyarigsi0geVUQ2T5 7jO63RXZ0wiX1joGxntm02FtTBrj/UTw0FNd51wqmwQSaUPzRshQ/d54nIdaXXkf qkQZmQ+jYk3bTk+km3tUHPyvqmuik4PO8V9KnvrzpK5SpXrhV4RwK4XithSRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzVO2TTy+2djoiQiONT/56PJmwsMwHwYDVR0j BBgwFoAUFrlG8G4wDEHaLANzk4N/CYumWdEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MTFhM2Q1Ni1hYzc1LTQ5ODEtOTcyNi1jNDQwMjE0YzgxZWQvMC8xNkI5NDZGMDZF MzAwQzQxREEyQzAzNzM5MzgzN0YwOThCQTY1OUQxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTZCOTQ2RjA2RTMwMEM0MURBMkMwMzczOTM4MzdGMDk4QkE2 NTlEMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTExYTNkNTYtYWM3NS00OTgxLTk3 MjYtYzQ0MDIxNGM4MWVkLzAvMTZCOTQ2RjA2RTMwMEM0MURBMkMwMzczOTM4MzdG MDk4QkE2NTlEMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAqMkkeO5UzGzM+7zHz9b+cXvV09bluGb5Rb FO172NOUCPeWwNsahWXuyv3p1D6TA6o2UXKaabuq4qmp0EjQzhY1ARdJiZDKGmpc BmCn7yqjimA9gDR82o83qYGszEm08fLMjLduEO/9Zs16h6EYehKt0F1Ett9aSTkZ 24g5lm/gRw/sVWlKTTIgY1JlrdcY0RqJnGziPx6cmn7URWXxdl3h7cycz9LqenaP YBIrTsSsFjrHhthkYIiZrvXEQympqhP93boiOfw8fYiZztBayg5ebCdt9ocuAAlD fVmMRVwnUiyeFbJ6JQGlr5dGMzLUofKS6tTWCGQzS2CDiEYLN4Y= -----END CERTIFICATE-----Generated at Thu Mar 26 18:57:25 2026 by rpki-client