$ rpki-client -vvf repo-rpki.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/166B4918E7A1A1641E7C79C537833379E393522E.mft File: 166B4918E7A1A1641E7C79C537833379E393522E.mft (raw, json) Hash identifier: CfIm4e9obcUInJiQ2RR0c1cV/t+jf7ouLllv13Acw+8= Subject key identifier: AC:30:4F:52:F3:41:AF:4C:8E:E5:22:F3:13:21:33:1C:C8:A6:1D:AF Authority key identifier: 16:6B:49:18:E7:A1:A1:64:1E:7C:79:C5:37:83:33:79:E3:93:52:2E Certificate issuer: /CN=166B4918E7A1A1641E7C79C537833379E393522E Certificate serial: 597A332E3C0BE45AFB269734D659E422DDB2F2FF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/166B4918E7A1A1641E7C79C537833379E393522E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/166B4918E7A1A1641E7C79C537833379E393522E.mft Manifest number: 031D Signing time: Sat 28 Feb 2026 13:31:08 +0000 Manifest this update: Sat 28 Feb 2026 13:26:08 +0000 Manifest next update: Wed 04 Mar 2026 00:44:08 +0000 Files and hashes: 1: 3130332e3137342e3138312e302f32342d3234203d3e20313437313037.roa (hash: LzEWJe+Hglc03QN90vVTDC59A7niJ+rvkY3tQyL/MFs=) 2: 3130332e3137342e3138302e302f32332d3233203d3e20313534343130.roa (hash: 5f6WVPyM1NaAUmmM9KmlCurONgPApRx10UTt15+/gqw=) 3: 3130332e3137342e3138302e302f32342d3234203d3e20313437313037.roa (hash: WsHwgNa1eu27mA5KJGjHDisSyyKknyjiNT1hKbJ/YGc=) 4: 166B4918E7A1A1641E7C79C537833379E393522E.crl (hash: L+iQjhstUJ6Gri5CXFitHhtuR6dKZTh/QVXK0LdRUHw=) 5: 3130332e3137342e3138302e302f32332d3233203d3e20313437313037.roa (hash: oK3qw71PTaTu9zr3WTDr2kf09ZEsEk1iSGVob7ZwRo0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/166B4918E7A1A1641E7C79C537833379E393522E.crl rsync://repo-rpki.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/166B4918E7A1A1641E7C79C537833379E393522E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/166B4918E7A1A1641E7C79C537833379E393522E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 00:44:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:7a:33:2e:3c:0b:e4:5a:fb:26:97:34:d6:59:e4:22:dd:b2:f2:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=166B4918E7A1A1641E7C79C537833379E393522E Validity Not Before: Feb 28 13:26:08 2026 GMT Not After : Mar 4 00:44:08 2026 GMT Subject: CN=AC304F52F341AF4C8EE522F31321331CC8A61DAF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d8:2f:3a:e5:e4:9d:b0:fd:69:e6:ff:7e:de: 81:db:73:47:c9:89:69:58:2c:9f:74:8a:24:c9:5f: 07:33:58:29:c7:78:f7:e0:b4:e5:d8:49:26:5a:ad: d9:13:b9:71:15:3a:06:00:fb:c4:b6:db:60:af:e3: 32:5d:6f:95:73:1d:7c:01:58:71:05:3f:2d:d4:ee: ed:51:3f:e5:88:01:50:b6:8f:b2:3a:6d:ab:ca:65: 50:67:3d:1b:48:49:da:81:f0:da:fe:24:24:77:89: 28:5d:5b:24:6e:b1:21:d3:26:03:26:05:12:1b:77: 26:a2:60:83:3f:ce:07:12:db:59:dc:6e:9e:24:27: 77:e5:7f:a8:37:d5:36:83:15:29:e4:a0:f5:f4:a4: ab:1b:40:a3:a4:36:01:f5:4e:07:4d:c9:05:72:d7: 4e:52:77:0a:9d:35:96:b0:42:b8:2b:b6:ab:c7:eb: b0:79:d3:17:28:4c:f8:e6:32:df:ae:db:d4:ce:e9: bc:4a:92:d1:c4:3e:b3:cd:87:fc:61:92:e8:fa:26: 99:71:95:6f:0b:d0:66:67:40:b2:de:2a:30:20:b5: ad:50:73:60:59:f1:c8:e2:19:e8:52:a3:2e:4b:2b: a3:97:db:ad:98:ee:58:42:38:76:ff:46:c6:48:84: aa:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:30:4F:52:F3:41:AF:4C:8E:E5:22:F3:13:21:33:1C:C8:A6:1D:AF X509v3 Authority Key Identifier: keyid:16:6B:49:18:E7:A1:A1:64:1E:7C:79:C5:37:83:33:79:E3:93:52:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/166B4918E7A1A1641E7C79C537833379E393522E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/166B4918E7A1A1641E7C79C537833379E393522E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/166B4918E7A1A1641E7C79C537833379E393522E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:a5:c9:d8:d7:e3:ea:cd:21:da:6c:b4:cd:01:c3:97:a9:4c: d3:b9:c5:da:7f:71:e2:22:3f:67:c6:0f:42:ef:c5:fe:82:d3: 75:2f:fd:89:3a:40:bf:2b:ae:31:fa:f4:20:57:ce:14:d2:33: e3:4b:92:41:8c:44:89:b7:27:e6:a1:64:70:a5:25:1c:83:43: f9:8a:bc:36:1d:03:3e:51:44:1d:c0:79:62:8a:0b:dc:d3:96: 19:d8:de:59:8c:82:c5:2a:72:67:5d:60:63:45:a2:f3:a1:ae: 5a:98:9c:f7:2d:90:c8:7d:96:37:e0:a0:0d:dd:45:a0:25:02: d7:46:03:cc:5a:01:80:10:1d:d1:1e:3b:d9:7b:ca:fe:9b:f9: ac:da:d7:04:26:5c:83:2d:9e:e2:b1:9e:6f:57:db:49:92:9c: 8a:6f:df:0a:57:af:dd:44:a5:7f:5d:37:56:42:c1:c1:f3:32: 52:26:87:04:0f:9e:aa:8e:f7:32:a1:92:a3:a2:0b:9f:65:e7: 60:97:fc:f8:52:5e:9c:f2:d4:2b:c0:f8:3a:20:e0:f1:30:35: 1f:de:0b:aa:bf:ec:b3:24:e8:09:2c:c7:ed:7a:b2:9b:3e:48: 79:8e:3b:30:25:f6:d5:dd:a2:de:94:62:7c:4f:0f:9e:7d:bc: d3:b0:99:bd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWXozLjwL5Fr7Jpc01lnkIt2y8v8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTY2QjQ5MThFN0ExQTE2NDFFN0M3OUM1Mzc4MzMzNzlF MzkzNTIyRTAeFw0yNjAyMjgxMzI2MDhaFw0yNjAzMDQwMDQ0MDhaMDMxMTAvBgNV BAMTKEFDMzA0RjUyRjM0MUFGNEM4RUU1MjJGMzEzMjEzMzFDQzhBNjFEQUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/2C865eSdsP1p5v9+3oHbc0fJ iWlYLJ90iiTJXwczWCnHePfgtOXYSSZardkTuXEVOgYA+8S222Cv4zJdb5VzHXwB WHEFPy3U7u1RP+WIAVC2j7I6bavKZVBnPRtISdqB8Nr+JCR3iShdWyRusSHTJgMm BRIbdyaiYIM/zgcS21ncbp4kJ3flf6g31TaDFSnkoPX0pKsbQKOkNgH1TgdNyQVy 105SdwqdNZawQrgrtqvH67B50xcoTPjmMt+u29TO6bxKktHEPrPNh/xhkuj6Jplx lW8L0GZnQLLeKjAgta1Qc2BZ8cjiGehSoy5LK6OX262Y7lhCOHb/RsZIhKpfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrDBPUvNBr0yO5SLzEyEzHMimHa8wHwYDVR0j BBgwFoAUFmtJGOehoWQefHnFN4MzeeOTUi4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YzI4NTI5MS1jZTkyLTQxNDQtOWMxOC05ZThjMTkxZGRlYzYvMC8xNjZCNDkxOEU3 QTFBMTY0MUU3Qzc5QzUzNzgzMzM3OUUzOTM1MjJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTY2QjQ5MThFN0ExQTE2NDFFN0M3OUM1Mzc4MzMzNzlFMzkz NTIyRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWMyODUyOTEtY2U5Mi00MTQ0LTlj MTgtOWU4YzE5MWRkZWM2LzAvMTY2QjQ5MThFN0ExQTE2NDFFN0M3OUM1Mzc4MzMz NzlFMzkzNTIyRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADulydjX4+rNIdpstM0Bw5epTNO5xdp/ceIi P2fGD0Lvxf6C03Uv/Yk6QL8rrjH69CBXzhTSM+NLkkGMRIm3J+ahZHClJRyDQ/mK vDYdAz5RRB3AeWKKC9zTlhnY3lmMgsUqcmddYGNFovOhrlqYnPctkMh9ljfgoA3d RaAlAtdGA8xaAYAQHdEeO9l7yv6b+aza1wQmXIMtnuKxnm9X20mSnIpv3wpXr91E pX9dN1ZCwcHzMlImhwQPnqqO9zKhkqOiC59l52CX/PhSXpzy1CvA+Dog4PEwNR/e C6q/7LMk6Aksx+16sps+SHmOOzAl9tXdot6UYnxPD559vNOwmb0= -----END CERTIFICATE-----Generated at Mon Mar 2 22:55:07 2026 by rpki-client