$ rpki-client -vvf repo-rpki.idnic.net/repo/648b6583-4122-469d-8384-3af1bcc6607f/0/16CD7877C91A179A0A6751085603DA8E7DE539F0.mft File: 16CD7877C91A179A0A6751085603DA8E7DE539F0.mft (raw, json) Hash identifier: q6rAJ5SYQOD1aSIC0SXKM2VYHvvzeVA+Do/hk4Sylfs= Subject key identifier: 99:D0:4C:96:D7:4F:CF:A7:E9:26:A2:14:08:C7:A2:E0:8A:48:BB:CF Authority key identifier: 16:CD:78:77:C9:1A:17:9A:0A:67:51:08:56:03:DA:8E:7D:E5:39:F0 Certificate issuer: /CN=16CD7877C91A179A0A6751085603DA8E7DE539F0 Certificate serial: 4CD8E3ECC778D8E1E415C60DF4597E1B3B42D7FC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/16CD7877C91A179A0A6751085603DA8E7DE539F0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/648b6583-4122-469d-8384-3af1bcc6607f/0/16CD7877C91A179A0A6751085603DA8E7DE539F0.mft Manifest number: 04D5 Signing time: Mon 02 Mar 2026 11:11:37 +0000 Manifest this update: Mon 02 Mar 2026 11:06:37 +0000 Manifest next update: Thu 05 Mar 2026 14:26:37 +0000 Files and hashes: 1: 3130332e3134372e3133342e302f32332d3234203d3e20313339393633.roa (hash: EBtEj4ypwlzzw6GhMy3RkgtUq0npTq7gZQPuYhe9Zzc=) 2: 16CD7877C91A179A0A6751085603DA8E7DE539F0.crl (hash: HJDYpHCND1fu3gOwVYsa/U3vWjmE3YcMh3uV4pLVcDQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/648b6583-4122-469d-8384-3af1bcc6607f/0/16CD7877C91A179A0A6751085603DA8E7DE539F0.crl rsync://repo-rpki.idnic.net/repo/648b6583-4122-469d-8384-3af1bcc6607f/0/16CD7877C91A179A0A6751085603DA8E7DE539F0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/16CD7877C91A179A0A6751085603DA8E7DE539F0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:d8:e3:ec:c7:78:d8:e1:e4:15:c6:0d:f4:59:7e:1b:3b:42:d7:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16CD7877C91A179A0A6751085603DA8E7DE539F0 Validity Not Before: Mar 2 11:06:37 2026 GMT Not After : Mar 5 14:26:37 2026 GMT Subject: CN=99D04C96D74FCFA7E926A21408C7A2E08A48BBCF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:9d:1e:2c:dc:20:39:fd:fc:dd:80:92:b3:c9: 6a:aa:46:7c:96:d8:d3:4e:98:6d:8d:1e:43:92:76: 2e:81:88:b0:99:05:8d:a1:0d:7c:c8:60:32:79:27: 4b:50:d6:bf:05:8a:9e:9a:7a:9d:bb:6c:7c:63:fa: 6e:b1:23:51:2c:6d:3e:e0:70:2c:2a:d6:16:57:8c: b5:1b:72:cc:68:14:cb:5e:cf:89:00:e8:2b:e5:86: 0d:cb:ff:b9:1a:c0:b8:a8:d3:d7:39:55:57:59:ad: 1b:b2:ec:78:3f:70:d9:ba:98:5e:24:e3:cc:d6:1d: c8:2d:31:3f:2e:1c:c1:37:e9:4f:e1:76:e8:66:28: 04:5c:c5:1d:e7:bc:6f:d8:fa:ce:f7:c8:21:8b:dd: ae:13:1f:e3:76:8c:5c:2b:02:36:6d:aa:76:3b:aa: 99:61:e2:dd:47:2e:27:83:95:03:34:7b:75:5a:48: 01:ad:c0:8e:0e:55:d3:98:ae:d7:7a:28:52:99:04: 86:0e:92:dd:8e:49:27:d3:6c:d4:f3:12:c6:e4:68: 1c:7a:7c:61:e1:72:59:0e:a8:cc:e6:5a:71:56:f5: ba:6f:8e:43:3c:c8:d2:db:11:46:3a:ee:18:33:dc: 94:89:f1:4d:60:45:8d:2a:56:bf:f9:da:8a:a9:c8: e5:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:D0:4C:96:D7:4F:CF:A7:E9:26:A2:14:08:C7:A2:E0:8A:48:BB:CF X509v3 Authority Key Identifier: keyid:16:CD:78:77:C9:1A:17:9A:0A:67:51:08:56:03:DA:8E:7D:E5:39:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/648b6583-4122-469d-8384-3af1bcc6607f/0/16CD7877C91A179A0A6751085603DA8E7DE539F0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/16CD7877C91A179A0A6751085603DA8E7DE539F0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/648b6583-4122-469d-8384-3af1bcc6607f/0/16CD7877C91A179A0A6751085603DA8E7DE539F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:7e:a0:8a:ca:ed:f2:8b:4d:63:52:28:ff:5b:18:62:00:9a: 45:f7:66:4e:25:fc:b5:3c:5b:16:c1:e9:49:c1:f5:69:71:d0: a4:99:04:b9:e2:6e:32:f5:39:dd:4d:1c:99:16:cd:3a:ea:cd: 91:f7:99:84:cf:8e:6c:a7:ba:c1:f2:7c:48:45:ec:88:4b:2b: d3:43:fe:0c:88:b5:7b:73:bd:55:50:03:57:dd:da:3f:d7:84: 42:ea:8d:7c:5b:6a:46:95:d5:3e:ab:94:22:49:0e:94:a2:35: 34:9a:e6:80:c7:89:bf:a0:b6:4e:bc:46:07:85:92:51:21:4b: 16:69:98:f1:0f:2f:12:90:01:16:34:12:cf:cf:84:cd:f2:74: 0f:ba:d1:b5:de:e7:a6:c7:85:86:0f:b3:86:a8:ee:78:03:24: 16:14:a4:d5:73:7f:49:0e:d9:0c:ad:69:f2:a7:95:fd:b5:da: 39:99:6c:f4:60:80:12:7d:c3:a1:8b:05:0f:4e:17:d8:a4:3b: 97:27:dc:59:10:67:da:c0:78:c6:39:8a:75:d2:8f:58:c7:6d: c5:df:bc:6b:d7:13:d4:72:2a:d3:e0:eb:c0:20:6a:55:02:44: a3:f2:02:de:92:a3:7e:28:28:5d:3e:4a:76:1f:2d:22:e0:bc: fd:24:8f:3e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTNjj7Md42OHkFcYN9Fl+GztC1/wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTZDRDc4NzdDOTFBMTc5QTBBNjc1MTA4NTYwM0RBOEU3 REU1MzlGMDAeFw0yNjAzMDIxMTA2MzdaFw0yNjAzMDUxNDI2MzdaMDMxMTAvBgNV BAMTKDk5RDA0Qzk2RDc0RkNGQTdFOTI2QTIxNDA4QzdBMkUwOEE0OEJCQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJnR4s3CA5/fzdgJKzyWqqRnyW 2NNOmG2NHkOSdi6BiLCZBY2hDXzIYDJ5J0tQ1r8Fip6aep27bHxj+m6xI1EsbT7g cCwq1hZXjLUbcsxoFMtez4kA6Cvlhg3L/7kawLio09c5VVdZrRuy7Hg/cNm6mF4k 48zWHcgtMT8uHME36U/hduhmKARcxR3nvG/Y+s73yCGL3a4TH+N2jFwrAjZtqnY7 qplh4t1HLieDlQM0e3VaSAGtwI4OVdOYrtd6KFKZBIYOkt2OSSfTbNTzEsbkaBx6 fGHhclkOqMzmWnFW9bpvjkM8yNLbEUY67hgz3JSJ8U1gRY0qVr/52oqpyOW3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmdBMltdPz6fpJqIUCMei4IpIu88wHwYDVR0j BBgwFoAUFs14d8kaF5oKZ1EIVgPajn3lOfAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NDhiNjU4My00MTIyLTQ2OWQtODM4NC0zYWYxYmNjNjYwN2YvMC8xNkNENzg3N0M5 MUExNzlBMEE2NzUxMDg1NjAzREE4RTdERTUzOUYwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTZDRDc4NzdDOTFBMTc5QTBBNjc1MTA4NTYwM0RBOEU3REU1 MzlGMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjQ4YjY1ODMtNDEyMi00NjlkLTgz ODQtM2FmMWJjYzY2MDdmLzAvMTZDRDc4NzdDOTFBMTc5QTBBNjc1MTA4NTYwM0RB OEU3REU1MzlGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABB+oIrK7fKLTWNSKP9bGGIAmkX3Zk4l/LU8 WxbB6UnB9Wlx0KSZBLnibjL1Od1NHJkWzTrqzZH3mYTPjmynusHyfEhF7IhLK9ND /gyItXtzvVVQA1fd2j/XhELqjXxbakaV1T6rlCJJDpSiNTSa5oDHib+gtk68RgeF klEhSxZpmPEPLxKQARY0Es/PhM3ydA+60bXe56bHhYYPs4ao7ngDJBYUpNVzf0kO 2QytafKnlf212jmZbPRggBJ9w6GLBQ9OF9ikO5cn3FkQZ9rAeMY5inXSj1jHbcXf vGvXE9RyKtPg68AgalUCRKPyAt6So34oKF0+SnYfLSLgvP0kjz4= -----END CERTIFICATE-----Generated at Mon Mar 2 14:44:20 2026 by rpki-client