$ rpki-client -vvf repo-rpki.idnic.net/repo/b87d446c-1144-4009-bd98-0678d647f4ce/0/C816A670D0EF35D7923125F4B2671225E2E843FB.mft File: C816A670D0EF35D7923125F4B2671225E2E843FB.mft (raw, json) Hash identifier: O9PyaMIgJ1tCxWclR5qTehclF1BonakH7rKYfrZwk30= Subject key identifier: 97:42:2C:E3:F9:6B:7B:68:C1:07:D3:02:12:78:A7:13:92:C8:C4:BA Authority key identifier: C8:16:A6:70:D0:EF:35:D7:92:31:25:F4:B2:67:12:25:E2:E8:43:FB Certificate issuer: /CN=C816A670D0EF35D7923125F4B2671225E2E843FB Certificate serial: 7CEB296BEC091B7CF4E53C33CD7B042F588362DE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C816A670D0EF35D7923125F4B2671225E2E843FB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b87d446c-1144-4009-bd98-0678d647f4ce/0/C816A670D0EF35D7923125F4B2671225E2E843FB.mft Manifest number: 27 Signing time: Wed 15 Apr 2026 19:12:09 +0000 Manifest this update: Wed 15 Apr 2026 19:07:09 +0000 Manifest next update: Sun 19 Apr 2026 03:29:09 +0000 Files and hashes: 1: 3130332e3134312e36322e302f32332d3234203d3e20313338383935.roa (hash: m788pI8kuW1mAz5aJj9/QdtxJsGtB244M/fnoZxh0tA=) 2: C816A670D0EF35D7923125F4B2671225E2E843FB.crl (hash: TTLvHFKVlilgt/ZOPolg5CT5ul6Ubr1pGTInGmWFzpA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b87d446c-1144-4009-bd98-0678d647f4ce/0/C816A670D0EF35D7923125F4B2671225E2E843FB.crl rsync://repo-rpki.idnic.net/repo/b87d446c-1144-4009-bd98-0678d647f4ce/0/C816A670D0EF35D7923125F4B2671225E2E843FB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C816A670D0EF35D7923125F4B2671225E2E843FB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 03:29:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:eb:29:6b:ec:09:1b:7c:f4:e5:3c:33:cd:7b:04:2f:58:83:62:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C816A670D0EF35D7923125F4B2671225E2E843FB Validity Not Before: Apr 15 19:07:09 2026 GMT Not After : Apr 19 03:29:09 2026 GMT Subject: CN=97422CE3F96B7B68C107D3021278A71392C8C4BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c5:0d:e1:07:8c:2f:29:bc:6e:c2:4e:92:34: a2:01:57:1b:ef:3b:3f:c9:7b:ac:4e:26:79:d5:a9: 14:76:17:08:69:b0:c3:0e:7b:f1:cf:6a:75:55:22: 71:68:ed:12:11:f0:1c:8c:14:f0:10:50:dc:c1:66: 6c:20:69:76:70:b4:10:ce:cb:29:76:d5:f8:af:41: 44:c4:36:bb:8c:1b:7b:3d:bc:85:6b:48:e3:f9:82: 19:02:9f:6d:78:f7:a8:51:eb:71:69:b0:35:cf:85: 4a:13:c9:33:98:9e:12:0b:4c:e6:34:7b:3f:2f:8d: 32:14:8d:ef:f5:33:16:e2:a1:96:fa:fb:33:fa:cb: 03:14:2b:b8:b1:25:56:20:d1:90:ad:d5:f3:68:92: 0d:3b:51:7c:f3:9b:0b:55:75:57:54:8d:52:a9:ca: 8b:26:09:ed:f3:43:4e:45:01:46:9e:fd:c7:d3:cc: 9b:ff:c3:7d:8b:96:f5:72:22:33:6b:91:71:34:6c: e1:a8:ae:64:71:84:72:7e:cb:7e:df:70:b7:13:fc: 09:af:11:05:9b:c7:bc:9f:16:06:f5:e4:9b:da:87: 1a:27:ba:a8:ea:6e:24:8f:13:f9:0d:1a:b1:40:21: ea:36:1d:ec:64:b0:f5:d8:f6:92:60:33:19:3a:66: e8:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:42:2C:E3:F9:6B:7B:68:C1:07:D3:02:12:78:A7:13:92:C8:C4:BA X509v3 Authority Key Identifier: keyid:C8:16:A6:70:D0:EF:35:D7:92:31:25:F4:B2:67:12:25:E2:E8:43:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b87d446c-1144-4009-bd98-0678d647f4ce/0/C816A670D0EF35D7923125F4B2671225E2E843FB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C816A670D0EF35D7923125F4B2671225E2E843FB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b87d446c-1144-4009-bd98-0678d647f4ce/0/C816A670D0EF35D7923125F4B2671225E2E843FB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:6c:ca:2c:0b:06:3f:38:7e:9f:b1:df:dd:ed:23:ca:ce:cb: 2a:55:57:6a:7d:f8:7a:05:d8:2d:c7:c7:7a:7f:3f:86:48:d5: 15:51:ef:5c:06:77:d5:87:6b:5e:b0:98:df:1b:de:5a:b9:d9: bf:82:4b:90:5c:a7:41:a6:4b:7c:0d:79:71:aa:cc:a7:b1:5c: 27:dc:b0:58:57:ff:46:4a:1e:d3:72:61:5f:7e:9b:3b:04:33: e9:fd:40:b5:29:16:d6:a1:c3:48:df:f8:76:ef:0c:b1:77:1e: 87:7c:52:f9:c0:58:77:0b:cc:77:51:de:90:a3:12:6e:58:fa: 5d:4f:95:f1:35:07:6e:e8:84:7e:5b:05:25:6b:21:72:fe:a9: 14:df:79:e2:3d:09:1d:af:57:f6:a9:bd:10:9a:f7:32:00:5a: 13:2d:f5:b7:71:e8:95:62:bd:33:13:35:e4:96:c7:b5:65:39: 4c:9e:c7:d4:3f:af:e7:af:a5:5b:39:62:b2:af:d7:20:77:cc: dc:81:40:60:2d:0d:8a:96:6e:3b:20:a6:fe:b3:27:df:95:db: a5:8d:5c:a8:60:73:88:cd:29:04:03:86:1f:bb:81:52:d4:e1: 4a:cd:91:73:ae:e0:e0:d8:a6:27:88:31:c0:dc:ba:2a:23:f9: 72:db:43:78 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfOspa+wJG3z05TwzzXsEL1iDYt4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzgxNkE2NzBEMEVGMzVENzkyMzEyNUY0QjI2NzEyMjVF MkU4NDNGQjAeFw0yNjA0MTUxOTA3MDlaFw0yNjA0MTkwMzI5MDlaMDMxMTAvBgNV BAMTKDk3NDIyQ0UzRjk2QjdCNjhDMTA3RDMwMjEyNzhBNzEzOTJDOEM0QkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzxQ3hB4wvKbxuwk6SNKIBVxvv Oz/Je6xOJnnVqRR2FwhpsMMOe/HPanVVInFo7RIR8ByMFPAQUNzBZmwgaXZwtBDO yyl21fivQUTENruMG3s9vIVrSOP5ghkCn21496hR63FpsDXPhUoTyTOYnhILTOY0 ez8vjTIUje/1MxbioZb6+zP6ywMUK7ixJVYg0ZCt1fNokg07UXzzmwtVdVdUjVKp yosmCe3zQ05FAUae/cfTzJv/w32LlvVyIjNrkXE0bOGormRxhHJ+y37fcLcT/Amv EQWbx7yfFgb15JvahxonuqjqbiSPE/kNGrFAIeo2HexksPXY9pJgMxk6Zuj/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUl0Is4/lre2jBB9MCEninE5LIxLowHwYDVR0j BBgwFoAUyBamcNDvNdeSMSX0smcSJeLoQ/swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ODdkNDQ2Yy0xMTQ0LTQwMDktYmQ5OC0wNjc4ZDY0N2Y0Y2UvMC9DODE2QTY3MEQw RUYzNUQ3OTIzMTI1RjRCMjY3MTIyNUUyRTg0M0ZCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzgxNkE2NzBEMEVGMzVENzkyMzEyNUY0QjI2NzEyMjVFMkU4 NDNGQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjg3ZDQ0NmMtMTE0NC00MDA5LWJk OTgtMDY3OGQ2NDdmNGNlLzAvQzgxNkE2NzBEMEVGMzVENzkyMzEyNUY0QjI2NzEy MjVFMkU4NDNGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAFsyiwLBj84fp+x393tI8rOyypVV2p9+HoF 2C3Hx3p/P4ZI1RVR71wGd9WHa16wmN8b3lq52b+CS5Bcp0GmS3wNeXGqzKexXCfc sFhX/0ZKHtNyYV9+mzsEM+n9QLUpFtahw0jf+HbvDLF3Hod8UvnAWHcLzHdR3pCj Em5Y+l1PlfE1B27ohH5bBSVrIXL+qRTfeeI9CR2vV/apvRCa9zIAWhMt9bdx6JVi vTMTNeSWx7VlOUyex9Q/r+evpVs5YrKv1yB3zNyBQGAtDYqWbjsgpv6zJ9+V26WN XKhgc4jNKQQDhh+7gVLU4UrNkXOu4ODYpieIMcDcuioj+XLbQ3g= -----END CERTIFICATE-----Generated at Fri Apr 17 19:51:13 2026 by rpki-client