$ rpki-client -vvf repo-rpki.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/166B4918E7A1A1641E7C79C537833379E393522E.mft File: 166B4918E7A1A1641E7C79C537833379E393522E.mft (raw, json) Hash identifier: rNf8/JxE05K9Ogurs49zlABtBDquiRQ96OUcWqNhJAw= Subject key identifier: 95:8D:97:91:25:45:82:EB:7F:F6:7A:FF:42:42:2D:2E:5D:B8:F0:CD Authority key identifier: 16:6B:49:18:E7:A1:A1:64:1E:7C:79:C5:37:83:33:79:E3:93:52:2E Certificate issuer: /CN=166B4918E7A1A1641E7C79C537833379E393522E Certificate serial: 34ED1DD660DB3F1F61E5C3D48DAC0A75CD88F7F5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/166B4918E7A1A1641E7C79C537833379E393522E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/166B4918E7A1A1641E7C79C537833379E393522E.mft Manifest number: 0332 Signing time: Fri 17 Apr 2026 01:11:08 +0000 Manifest this update: Fri 17 Apr 2026 01:06:08 +0000 Manifest next update: Mon 20 Apr 2026 03:30:08 +0000 Files and hashes: 1: 3130332e3137342e3138302e302f32342d3234203d3e20313437313037.roa (hash: WsHwgNa1eu27mA5KJGjHDisSyyKknyjiNT1hKbJ/YGc=) 2: 3130332e3137342e3138312e302f32342d3234203d3e20313437313037.roa (hash: LzEWJe+Hglc03QN90vVTDC59A7niJ+rvkY3tQyL/MFs=) 3: 3130332e3137342e3138302e302f32332d3233203d3e20313534343130.roa (hash: 5f6WVPyM1NaAUmmM9KmlCurONgPApRx10UTt15+/gqw=) 4: 166B4918E7A1A1641E7C79C537833379E393522E.crl (hash: xniv0P5L0Krc4uPejf1n9sm9sSsFxLtRTvi53QHRKeY=) 5: 3130332e3137342e3138302e302f32332d3233203d3e20313437313037.roa (hash: oK3qw71PTaTu9zr3WTDr2kf09ZEsEk1iSGVob7ZwRo0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/166B4918E7A1A1641E7C79C537833379E393522E.crl rsync://repo-rpki.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/166B4918E7A1A1641E7C79C537833379E393522E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/166B4918E7A1A1641E7C79C537833379E393522E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 03:30:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:ed:1d:d6:60:db:3f:1f:61:e5:c3:d4:8d:ac:0a:75:cd:88:f7:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=166B4918E7A1A1641E7C79C537833379E393522E Validity Not Before: Apr 17 01:06:08 2026 GMT Not After : Apr 20 03:30:08 2026 GMT Subject: CN=958D9791254582EB7FF67AFF42422D2E5DB8F0CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:bd:9d:9e:e2:32:a9:c5:01:41:d8:dd:63:46: dc:2c:37:e7:1a:78:1e:1c:f5:af:5d:ef:1d:10:f7: 1d:ba:2f:91:97:0d:0d:46:71:b8:02:5e:cf:4d:4b: 97:eb:4e:96:1b:8d:dc:93:7a:b1:b5:0a:cb:08:32: 47:c1:8a:22:bc:6a:24:55:a5:ca:6c:59:eb:d0:0e: b2:ff:d4:61:ff:2e:4d:11:d7:8a:61:7c:c7:c3:32: 06:c3:96:3d:e7:37:a6:71:78:6e:b9:84:6f:0f:b6: 76:78:1f:9a:7c:4b:ca:dc:50:6e:5a:df:1b:e4:06: 87:07:25:19:af:05:ac:6d:87:fe:d2:10:aa:ed:0b: 57:29:da:18:9d:90:25:48:b7:db:a2:85:d2:1f:75: 64:ad:d3:39:ee:67:78:1d:57:92:3e:01:8a:98:f1: 38:99:50:cf:6a:32:90:3a:2c:83:84:c5:eb:13:3c: 97:95:4d:ce:ea:77:e7:a2:bb:c6:46:38:fb:0d:bf: ea:e3:cd:35:39:5a:57:ab:d5:98:e6:c5:6d:13:fc: d0:2e:d3:71:e3:69:a8:d3:9b:31:3a:aa:e9:3d:28: 57:fc:a7:fe:70:ad:e0:34:d8:e6:43:35:1d:b6:c1: 8a:fb:d5:fa:7e:d4:f6:9e:d9:ec:17:0b:02:8d:1c: 2d:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:8D:97:91:25:45:82:EB:7F:F6:7A:FF:42:42:2D:2E:5D:B8:F0:CD X509v3 Authority Key Identifier: keyid:16:6B:49:18:E7:A1:A1:64:1E:7C:79:C5:37:83:33:79:E3:93:52:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/166B4918E7A1A1641E7C79C537833379E393522E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/166B4918E7A1A1641E7C79C537833379E393522E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/166B4918E7A1A1641E7C79C537833379E393522E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:9a:d6:06:22:c2:be:66:3e:c2:80:2b:19:14:35:b1:24:aa: 05:9d:f5:ec:fd:44:2a:b6:8d:5e:e7:d4:b5:0e:71:90:36:70: 8e:ae:80:ae:99:03:f4:c8:51:ca:c6:4a:07:85:31:9e:23:e1: 7b:46:77:83:80:c1:8e:3d:40:d2:6b:36:6d:50:21:b9:be:40: 0b:f3:bf:af:35:fb:f5:2b:20:8d:4d:c4:85:d5:8b:c8:5a:e2: 16:c5:14:07:76:fa:3b:c4:3a:95:b2:5a:65:d3:bd:7d:78:ff: ca:a8:8c:07:30:f0:16:b6:21:3a:24:1d:a1:60:41:6e:bd:3c: e7:77:9b:5a:18:7c:22:f6:71:4a:5f:9a:e1:6a:50:82:72:84: 92:cd:a4:3d:5a:b6:ad:19:06:9e:01:a6:7b:05:9b:2b:b0:8f: a4:1c:5d:be:9f:79:0a:43:30:30:e9:af:5d:03:e9:9b:b9:f4: 7f:0a:66:bd:cf:fa:b5:78:c7:a6:b0:a2:c7:ec:c1:5a:c9:8b: e2:7e:79:dc:8e:3e:d4:0c:65:eb:a7:c0:ec:9a:2a:df:42:29: 1b:81:7a:30:e7:a4:e7:68:21:f0:97:83:e0:30:67:9d:a1:b1: 1e:e8:5e:a9:a1:2f:69:0f:c6:62:83:70:d6:64:de:00:4f:5f: 13:d0:e7:2f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNO0d1mDbPx9h5cPUjawKdc2I9/UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTY2QjQ5MThFN0ExQTE2NDFFN0M3OUM1Mzc4MzMzNzlF MzkzNTIyRTAeFw0yNjA0MTcwMTA2MDhaFw0yNjA0MjAwMzMwMDhaMDMxMTAvBgNV BAMTKDk1OEQ5NzkxMjU0NTgyRUI3RkY2N0FGRjQyNDIyRDJFNURCOEYwQ0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFvZ2e4jKpxQFB2N1jRtwsN+ca eB4c9a9d7x0Q9x26L5GXDQ1GcbgCXs9NS5frTpYbjdyTerG1CssIMkfBiiK8aiRV pcpsWevQDrL/1GH/Lk0R14phfMfDMgbDlj3nN6ZxeG65hG8PtnZ4H5p8S8rcUG5a 3xvkBocHJRmvBaxth/7SEKrtC1cp2hidkCVIt9uihdIfdWSt0znuZ3gdV5I+AYqY 8TiZUM9qMpA6LIOExesTPJeVTc7qd+eiu8ZGOPsNv+rjzTU5Wler1ZjmxW0T/NAu 03HjaajTmzE6quk9KFf8p/5wreA02OZDNR22wYr71fp+1Pae2ewXCwKNHC1ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlY2XkSVFgut/9nr/QkItLl248M0wHwYDVR0j BBgwFoAUFmtJGOehoWQefHnFN4MzeeOTUi4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YzI4NTI5MS1jZTkyLTQxNDQtOWMxOC05ZThjMTkxZGRlYzYvMC8xNjZCNDkxOEU3 QTFBMTY0MUU3Qzc5QzUzNzgzMzM3OUUzOTM1MjJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTY2QjQ5MThFN0ExQTE2NDFFN0M3OUM1Mzc4MzMzNzlFMzkz NTIyRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWMyODUyOTEtY2U5Mi00MTQ0LTlj MTgtOWU4YzE5MWRkZWM2LzAvMTY2QjQ5MThFN0ExQTE2NDFFN0M3OUM1Mzc4MzMz NzlFMzkzNTIyRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIKa1gYiwr5mPsKAKxkUNbEkqgWd9ez9RCq2 jV7n1LUOcZA2cI6ugK6ZA/TIUcrGSgeFMZ4j4XtGd4OAwY49QNJrNm1QIbm+QAvz v681+/UrII1NxIXVi8ha4hbFFAd2+jvEOpWyWmXTvX14/8qojAcw8Ba2ITokHaFg QW69POd3m1oYfCL2cUpfmuFqUIJyhJLNpD1atq0ZBp4BpnsFmyuwj6QcXb6feQpD MDDpr10D6Zu59H8KZr3P+rV4x6awosfswVrJi+J+edyOPtQMZeunwOyaKt9CKRuB ejDnpOdoIfCXg+AwZ52hsR7oXqmhL2kPxmKDcNZk3gBPXxPQ5y8= -----END CERTIFICATE-----Generated at Fri Apr 17 20:41:47 2026 by rpki-client