$ rpki-client -vvf repo-rpki.idnic.net/repo/3c9941a4-28d2-47d1-91e7-acab59084462/0/B16C4772F3D77045BBA997F94CEACA9E0DCC2865.mft File: B16C4772F3D77045BBA997F94CEACA9E0DCC2865.mft (raw, json) Hash identifier: qGjAiIdb4rL+WAQm0MqSFM0IWWwzbMlUA9UHlgx4piE= Subject key identifier: 47:E3:D9:74:C4:83:08:D2:68:18:05:FC:E3:5D:F2:57:5E:BE:C2:90 Authority key identifier: B1:6C:47:72:F3:D7:70:45:BB:A9:97:F9:4C:EA:CA:9E:0D:CC:28:65 Certificate issuer: /CN=B16C4772F3D77045BBA997F94CEACA9E0DCC2865 Certificate serial: 6D28B190A41478545EB3F70A64F9B87CB1E9B796 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B16C4772F3D77045BBA997F94CEACA9E0DCC2865.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3c9941a4-28d2-47d1-91e7-acab59084462/0/B16C4772F3D77045BBA997F94CEACA9E0DCC2865.mft Manifest number: 0171 Signing time: Sat 28 Feb 2026 14:42:07 +0000 Manifest this update: Sat 28 Feb 2026 14:37:07 +0000 Manifest next update: Tue 03 Mar 2026 18:17:07 +0000 Files and hashes: 1: 3138302e3133312e3132392e302f32342d3234203d3e20313532303238.roa (hash: IK3NBrk/iQNskIBya+kx1CnPloRzYziR32FnB/WUNZ4=) 2: B16C4772F3D77045BBA997F94CEACA9E0DCC2865.crl (hash: M1rQ5lGTF3nulNRe5Va0SUzbeoLxKCn55ZBJq2tJ9e0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3c9941a4-28d2-47d1-91e7-acab59084462/0/B16C4772F3D77045BBA997F94CEACA9E0DCC2865.crl rsync://repo-rpki.idnic.net/repo/3c9941a4-28d2-47d1-91e7-acab59084462/0/B16C4772F3D77045BBA997F94CEACA9E0DCC2865.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B16C4772F3D77045BBA997F94CEACA9E0DCC2865.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 18:17:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:28:b1:90:a4:14:78:54:5e:b3:f7:0a:64:f9:b8:7c:b1:e9:b7:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B16C4772F3D77045BBA997F94CEACA9E0DCC2865 Validity Not Before: Feb 28 14:37:07 2026 GMT Not After : Mar 3 18:17:07 2026 GMT Subject: CN=47E3D974C48308D2681805FCE35DF2575EBEC290 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:68:9a:3a:49:f8:80:2b:4b:74:0a:a1:05:42: 86:6f:2d:04:76:72:e2:80:9c:18:2f:d3:5e:f0:0e: c7:df:00:f0:66:7f:1f:36:0f:66:cf:e8:00:1d:49: e7:25:46:42:55:ca:4d:2a:b0:de:df:23:d8:1a:a7: cb:33:6d:89:9f:4a:72:52:f1:76:4a:0c:98:e9:0d: ca:12:3a:9a:95:29:0e:0a:5b:23:fd:08:a4:e1:17: 5d:e7:a0:1c:63:c0:dd:a1:1f:59:93:d9:07:8e:5e: a5:98:6e:d4:06:aa:5f:96:33:df:eb:88:b2:b7:ce: dd:80:cf:d4:b9:c5:3b:a3:48:ff:5c:9a:9c:11:06: b2:53:f2:92:18:42:51:59:11:aa:73:91:13:e3:40: 60:06:07:35:07:81:a1:0f:fc:ba:db:ed:a7:7e:e9: 7a:a7:2c:9d:bd:38:d5:67:aa:18:ae:65:78:d7:e8: 81:42:5e:37:b2:90:e7:a1:44:54:f0:76:6d:5e:78: e5:2c:a5:99:86:c1:42:f7:05:4f:54:94:3c:e8:66: 75:d5:b1:58:75:72:1e:05:93:bd:be:28:f5:21:f5: 4a:dd:d3:13:02:6e:13:b1:da:e1:1c:89:8f:ba:65: 34:87:2a:05:f4:c0:4b:ad:33:b2:a8:60:83:a4:ec: 61:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:E3:D9:74:C4:83:08:D2:68:18:05:FC:E3:5D:F2:57:5E:BE:C2:90 X509v3 Authority Key Identifier: keyid:B1:6C:47:72:F3:D7:70:45:BB:A9:97:F9:4C:EA:CA:9E:0D:CC:28:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3c9941a4-28d2-47d1-91e7-acab59084462/0/B16C4772F3D77045BBA997F94CEACA9E0DCC2865.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B16C4772F3D77045BBA997F94CEACA9E0DCC2865.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3c9941a4-28d2-47d1-91e7-acab59084462/0/B16C4772F3D77045BBA997F94CEACA9E0DCC2865.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:a2:9d:02:37:d1:40:1f:fd:e2:ba:59:54:4f:e2:32:22:5e: c3:c7:aa:02:36:4f:8b:ed:f2:3b:e2:26:cf:47:8f:de:69:cb: ee:49:70:a4:dd:06:3f:f7:42:24:6e:43:b3:3b:03:1c:87:10: 18:03:23:b6:ed:52:87:11:9a:0d:f4:f0:e6:97:d3:3d:39:38: ce:42:5e:13:56:5e:0a:f2:1a:28:eb:f9:b8:1b:8b:17:7b:31: a1:3d:10:88:f7:7e:c6:ef:33:40:20:21:09:f6:0f:f0:f1:48: 7f:8f:7e:ad:97:86:be:f9:ed:35:54:45:82:28:ad:95:59:bd: 8e:68:35:29:bb:f9:99:24:18:1b:30:96:12:cd:75:e4:6e:4e: 2c:4b:13:bc:83:4b:eb:b4:88:e2:52:4f:86:83:ca:68:39:d1: 0a:5d:30:ca:44:97:1c:12:ed:9c:4c:26:28:fe:0b:80:27:99: 8d:51:f3:83:68:bd:6a:81:59:94:cb:e9:42:97:a8:fd:ea:64: a2:c1:fc:8c:5a:c6:24:70:57:7f:03:df:9c:db:ad:6a:98:d5: 80:16:06:e8:30:f2:89:02:f3:96:59:35:83:37:7e:a5:50:bc: 7a:19:cd:49:15:d8:08:27:3e:54:f0:81:79:a5:e8:a2:d2:e5: 61:cb:74:4c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbSixkKQUeFRes/cKZPm4fLHpt5YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjE2QzQ3NzJGM0Q3NzA0NUJCQTk5N0Y5NENFQUNBOUUw RENDMjg2NTAeFw0yNjAyMjgxNDM3MDdaFw0yNjAzMDMxODE3MDdaMDMxMTAvBgNV BAMTKDQ3RTNEOTc0QzQ4MzA4RDI2ODE4MDVGQ0UzNURGMjU3NUVCRUMyOTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaaJo6SfiAK0t0CqEFQoZvLQR2 cuKAnBgv017wDsffAPBmfx82D2bP6AAdSeclRkJVyk0qsN7fI9gap8szbYmfSnJS 8XZKDJjpDcoSOpqVKQ4KWyP9CKThF13noBxjwN2hH1mT2QeOXqWYbtQGql+WM9/r iLK3zt2Az9S5xTujSP9cmpwRBrJT8pIYQlFZEapzkRPjQGAGBzUHgaEP/Lrb7ad+ 6XqnLJ29ONVnqhiuZXjX6IFCXjeykOehRFTwdm1eeOUspZmGwUL3BU9UlDzoZnXV sVh1ch4Fk72+KPUh9Urd0xMCbhOx2uEciY+6ZTSHKgX0wEutM7KoYIOk7GGHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUR+PZdMSDCNJoGAX8413yV16+wpAwHwYDVR0j BBgwFoAUsWxHcvPXcEW7qZf5TOrKng3MKGUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z Yzk5NDFhNC0yOGQyLTQ3ZDEtOTFlNy1hY2FiNTkwODQ0NjIvMC9CMTZDNDc3MkYz RDc3MDQ1QkJBOTk3Rjk0Q0VBQ0E5RTBEQ0MyODY1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjE2QzQ3NzJGM0Q3NzA0NUJCQTk5N0Y5NENFQUNBOUUwREND Mjg2NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2M5OTQxYTQtMjhkMi00N2QxLTkx ZTctYWNhYjU5MDg0NDYyLzAvQjE2QzQ3NzJGM0Q3NzA0NUJCQTk5N0Y5NENFQUNB OUUwRENDMjg2NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEuinQI30UAf/eK6WVRP4jIiXsPHqgI2T4vt 8jviJs9Hj95py+5JcKTdBj/3QiRuQ7M7AxyHEBgDI7btUocRmg308OaX0z05OM5C XhNWXgryGijr+bgbixd7MaE9EIj3fsbvM0AgIQn2D/DxSH+Pfq2Xhr757TVURYIo rZVZvY5oNSm7+ZkkGBswlhLNdeRuTixLE7yDS+u0iOJST4aDymg50QpdMMpElxwS 7ZxMJij+C4AnmY1R84NovWqBWZTL6UKXqP3qZKLB/IxaxiRwV38D35zbrWqY1YAW Bugw8okC85ZZNYM3fqVQvHoZzUkV2AgnPlTwgXml6KLS5WHLdEw= -----END CERTIFICATE-----Generated at Mon Mar 2 10:17:08 2026 by rpki-client