$ rpki-client -vvf repo-rpki.idnic.net/repo/648b6583-4122-469d-8384-3af1bcc6607f/0/16CD7877C91A179A0A6751085603DA8E7DE539F0.mft File: 16CD7877C91A179A0A6751085603DA8E7DE539F0.mft (raw, json) Hash identifier: kRggMjql4jiXwXLuRt72aHUhjStVu6edw38W2soOKwA= Subject key identifier: A3:1A:66:25:DD:96:53:36:77:B5:B4:C5:FA:79:F5:A3:4E:DB:ED:6F Authority key identifier: 16:CD:78:77:C9:1A:17:9A:0A:67:51:08:56:03:DA:8E:7D:E5:39:F0 Certificate issuer: /CN=16CD7877C91A179A0A6751085603DA8E7DE539F0 Certificate serial: 666A1440E079A089C22D9F08997AB1C02664C567 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/16CD7877C91A179A0A6751085603DA8E7DE539F0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/648b6583-4122-469d-8384-3af1bcc6607f/0/16CD7877C91A179A0A6751085603DA8E7DE539F0.mft Manifest number: 04E9 Signing time: Thu 16 Apr 2026 11:51:39 +0000 Manifest this update: Thu 16 Apr 2026 11:46:39 +0000 Manifest next update: Sun 19 Apr 2026 12:55:39 +0000 Files and hashes: 1: 16CD7877C91A179A0A6751085603DA8E7DE539F0.crl (hash: 8Vv6wr9lbnU0xd9oCA45nAEOFm7VFPHxc88ht5kRXDk=) 2: 3130332e3134372e3133342e302f32332d3234203d3e20313339393633.roa (hash: EBtEj4ypwlzzw6GhMy3RkgtUq0npTq7gZQPuYhe9Zzc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/648b6583-4122-469d-8384-3af1bcc6607f/0/16CD7877C91A179A0A6751085603DA8E7DE539F0.crl rsync://repo-rpki.idnic.net/repo/648b6583-4122-469d-8384-3af1bcc6607f/0/16CD7877C91A179A0A6751085603DA8E7DE539F0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/16CD7877C91A179A0A6751085603DA8E7DE539F0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 12:55:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:6a:14:40:e0:79:a0:89:c2:2d:9f:08:99:7a:b1:c0:26:64:c5:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16CD7877C91A179A0A6751085603DA8E7DE539F0 Validity Not Before: Apr 16 11:46:39 2026 GMT Not After : Apr 19 12:55:39 2026 GMT Subject: CN=A31A6625DD96533677B5B4C5FA79F5A34EDBED6F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:0b:38:98:b6:5f:4f:d6:37:bd:f5:00:40:09: cb:a3:59:45:65:50:37:55:a5:1f:77:6e:ea:c7:97: c2:8f:de:5e:57:4f:8f:47:bc:f9:d6:3a:2d:8a:7c: b3:ad:2b:fa:e4:86:58:e5:4b:81:c3:c0:cd:95:e5: 1b:66:16:8f:79:50:94:77:10:95:d6:31:61:66:da: d4:f2:9a:53:57:78:cc:5d:e8:ac:c7:da:d0:7f:6f: 28:c1:c9:e2:eb:9f:4e:ce:41:b2:37:3e:67:c5:53: bc:e8:b6:19:f7:b4:c8:d8:a7:4e:45:db:69:37:0a: 8b:95:31:d2:15:3b:19:74:1e:2c:88:6d:6b:e3:ca: 48:05:9d:73:37:8a:f1:54:26:98:19:c2:84:5b:de: 8c:82:27:b9:71:74:63:75:a6:7e:47:67:cf:52:a8: 3c:0e:cd:6e:1e:8a:76:50:18:98:9c:64:08:c6:fa: ef:94:a8:5f:9f:df:44:54:5a:99:07:c7:8d:84:bc: 19:d0:14:bd:65:c8:0b:3e:b5:e0:97:cf:cb:07:8c: 9e:58:87:e3:06:97:89:b4:f1:ed:8a:a0:5f:20:ad: 57:74:67:82:57:d4:10:3d:33:e3:25:e7:c7:62:45: 12:2d:72:ba:44:6e:4b:07:d4:9d:f3:81:fc:6f:81: f3:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:1A:66:25:DD:96:53:36:77:B5:B4:C5:FA:79:F5:A3:4E:DB:ED:6F X509v3 Authority Key Identifier: keyid:16:CD:78:77:C9:1A:17:9A:0A:67:51:08:56:03:DA:8E:7D:E5:39:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/648b6583-4122-469d-8384-3af1bcc6607f/0/16CD7877C91A179A0A6751085603DA8E7DE539F0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/16CD7877C91A179A0A6751085603DA8E7DE539F0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/648b6583-4122-469d-8384-3af1bcc6607f/0/16CD7877C91A179A0A6751085603DA8E7DE539F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:26:bc:86:b0:74:0b:27:91:42:5b:90:bc:84:9b:b2:b2:3a: ac:6e:12:3e:13:01:33:a9:ee:6c:41:4f:ff:ed:bb:3a:51:47: ec:0d:1e:20:7a:d0:50:7e:ae:7a:97:87:69:c6:31:82:99:73: 22:b1:b0:9a:fa:bf:f7:28:78:ca:bc:e7:c8:65:80:b6:f8:26: 51:72:2b:35:92:92:6d:75:2c:f4:f4:b9:bb:32:1f:ac:a9:a7: 51:85:22:a0:a3:af:00:b1:1b:00:c9:bd:2d:bb:8e:2e:32:5d: 0f:ab:e7:f1:a3:51:fe:71:6c:69:84:95:ba:8b:ff:9f:1d:75: 27:46:00:dc:93:63:c5:3d:85:8e:d0:91:b8:15:c0:76:34:d8: 31:44:21:64:c9:cb:82:cf:a6:0e:c1:b6:f5:2c:af:95:96:10: 71:60:45:f2:a5:4d:36:eb:4e:51:9a:45:c7:fb:a3:6e:37:e7: d7:bf:cc:53:b3:b1:01:a9:b6:58:21:62:83:6a:a2:26:0d:fc: b4:bd:94:57:b4:e0:93:09:10:e8:f2:6b:33:73:65:c2:d4:ab: eb:9d:c6:43:c9:ea:f5:c0:4d:62:c3:97:2b:2d:28:e8:8b:b7: 13:90:17:be:b0:1d:d0:ff:49:76:42:b9:a1:a4:dc:42:68:d1: 7e:d2:a8:31 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZmoUQOB5oInCLZ8ImXqxwCZkxWcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTZDRDc4NzdDOTFBMTc5QTBBNjc1MTA4NTYwM0RBOEU3 REU1MzlGMDAeFw0yNjA0MTYxMTQ2MzlaFw0yNjA0MTkxMjU1MzlaMDMxMTAvBgNV BAMTKEEzMUE2NjI1REQ5NjUzMzY3N0I1QjRDNUZBNzlGNUEzNEVEQkVENkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdCziYtl9P1je99QBACcujWUVl UDdVpR93burHl8KP3l5XT49HvPnWOi2KfLOtK/rkhljlS4HDwM2V5RtmFo95UJR3 EJXWMWFm2tTymlNXeMxd6KzH2tB/byjByeLrn07OQbI3PmfFU7zothn3tMjYp05F 22k3CouVMdIVOxl0HiyIbWvjykgFnXM3ivFUJpgZwoRb3oyCJ7lxdGN1pn5HZ89S qDwOzW4einZQGJicZAjG+u+UqF+f30RUWpkHx42EvBnQFL1lyAs+teCXz8sHjJ5Y h+MGl4m08e2KoF8grVd0Z4JX1BA9M+Ml58diRRItcrpEbksH1J3zgfxvgfNrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoxpmJd2WUzZ3tbTF+nn1o07b7W8wHwYDVR0j BBgwFoAUFs14d8kaF5oKZ1EIVgPajn3lOfAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NDhiNjU4My00MTIyLTQ2OWQtODM4NC0zYWYxYmNjNjYwN2YvMC8xNkNENzg3N0M5 MUExNzlBMEE2NzUxMDg1NjAzREE4RTdERTUzOUYwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTZDRDc4NzdDOTFBMTc5QTBBNjc1MTA4NTYwM0RBOEU3REU1 MzlGMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjQ4YjY1ODMtNDEyMi00NjlkLTgz ODQtM2FmMWJjYzY2MDdmLzAvMTZDRDc4NzdDOTFBMTc5QTBBNjc1MTA4NTYwM0RB OEU3REU1MzlGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC8mvIawdAsnkUJbkLyEm7KyOqxuEj4TATOp 7mxBT//tuzpRR+wNHiB60FB+rnqXh2nGMYKZcyKxsJr6v/coeMq858hlgLb4JlFy KzWSkm11LPT0ubsyH6ypp1GFIqCjrwCxGwDJvS27ji4yXQ+r5/GjUf5xbGmElbqL /58ddSdGANyTY8U9hY7QkbgVwHY02DFEIWTJy4LPpg7BtvUsr5WWEHFgRfKlTTbr TlGaRcf7o24359e/zFOzsQGptlghYoNqoiYN/LS9lFe04JMJEOjyazNzZcLUq+ud xkPJ6vXATWLDlystKOiLtxOQF76wHdD/SXZCuaGk3EJo0X7SqDE= -----END CERTIFICATE-----Generated at Fri Apr 17 19:50:26 2026 by rpki-client