$ rpki-client -vvf repo-rpki.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/16F8223FA3342ACE31ED864C538E59E22A52BC89.mft File: 16F8223FA3342ACE31ED864C538E59E22A52BC89.mft (raw, json) Hash identifier: y8b/ziPFHwquh8x+5kDTKvGt7Rp1yja7/PnDqvWOV8A= Subject key identifier: 50:EC:D2:85:1F:8A:16:11:37:D1:5D:27:17:F0:4C:3F:D4:FA:B7:E3 Authority key identifier: 16:F8:22:3F:A3:34:2A:CE:31:ED:86:4C:53:8E:59:E2:2A:52:BC:89 Certificate issuer: /CN=16F8223FA3342ACE31ED864C538E59E22A52BC89 Certificate serial: 443E597FE67774BCE18AEAAF883A687C5F64C2B1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/16F8223FA3342ACE31ED864C538E59E22A52BC89.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/16F8223FA3342ACE31ED864C538E59E22A52BC89.mft Manifest number: C6 Signing time: Sat 28 Feb 2026 14:11:20 +0000 Manifest this update: Sat 28 Feb 2026 14:06:20 +0000 Manifest next update: Tue 03 Mar 2026 18:54:20 +0000 Files and hashes: 1: 16F8223FA3342ACE31ED864C538E59E22A52BC89.crl (hash: GyVk1Hs8ze0W1+qCtOUNrlefjePBpUyvq4/MODgr+VE=) 2: 3136302e32352e3135372e302f32342d3234203d3e20313533303835.roa (hash: BLy2IIO/t25gzHYkfmO4RMXFqI37JzfK6VfmCeQNaI4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/16F8223FA3342ACE31ED864C538E59E22A52BC89.crl rsync://repo-rpki.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/16F8223FA3342ACE31ED864C538E59E22A52BC89.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/16F8223FA3342ACE31ED864C538E59E22A52BC89.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 18:54:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:3e:59:7f:e6:77:74:bc:e1:8a:ea:af:88:3a:68:7c:5f:64:c2:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16F8223FA3342ACE31ED864C538E59E22A52BC89 Validity Not Before: Feb 28 14:06:20 2026 GMT Not After : Mar 3 18:54:20 2026 GMT Subject: CN=50ECD2851F8A161137D15D2717F04C3FD4FAB7E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:2a:ef:b1:e0:ed:03:ea:17:2d:7c:d1:8c:97: da:85:55:a8:ed:d0:06:4e:d7:12:9a:2e:08:f2:db: ce:0b:da:1e:54:a0:fb:89:ad:7f:b1:40:fa:20:ed: 6d:be:f9:44:d0:4d:19:73:1f:d9:b3:7c:f5:98:f1: a4:b1:9a:4e:22:95:7d:f7:94:5d:0f:90:34:7d:33: 02:57:41:2e:ed:9a:cb:c1:71:17:f0:05:df:0f:8b: 5b:90:9e:8f:94:fb:1d:77:a5:d7:53:c6:3b:60:1a: 9c:60:7f:22:d4:9f:7d:44:28:e3:7b:46:4f:8f:df: f7:02:b8:b9:5d:2e:87:41:1f:6b:22:c8:32:1e:a0: 6f:b3:3e:e1:33:4d:a5:38:66:b7:c8:12:ee:c6:bd: 5e:fd:26:d1:e7:46:78:de:31:68:20:ab:87:04:d6: fc:90:34:36:c5:3b:44:e4:4d:1f:96:1b:72:47:23: 17:89:8a:63:df:85:24:21:0b:f1:2e:87:3a:55:39: 53:48:ac:fb:a8:22:aa:b9:39:f4:9e:d8:1f:39:04: bb:dd:ef:f2:8d:84:81:02:03:ba:65:03:e1:3f:98: 6a:a0:3c:71:6c:95:a9:fa:44:26:66:50:aa:ee:ec: ac:71:86:c8:aa:a5:64:f0:e6:82:2b:4d:39:ff:ee: 23:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:EC:D2:85:1F:8A:16:11:37:D1:5D:27:17:F0:4C:3F:D4:FA:B7:E3 X509v3 Authority Key Identifier: keyid:16:F8:22:3F:A3:34:2A:CE:31:ED:86:4C:53:8E:59:E2:2A:52:BC:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/16F8223FA3342ACE31ED864C538E59E22A52BC89.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/16F8223FA3342ACE31ED864C538E59E22A52BC89.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/16F8223FA3342ACE31ED864C538E59E22A52BC89.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:b2:8c:89:5d:e5:1d:4f:1f:ae:87:56:d3:84:ac:41:0d:5c: f0:fe:53:79:3a:0c:8b:0f:6d:3b:69:8f:c6:e3:65:74:8f:99: 79:7d:ab:eb:e6:1e:a6:6e:52:b6:bf:9a:cc:c9:64:bd:3c:02: 07:7b:54:0a:16:99:4e:f9:13:4c:23:98:1a:e9:1b:1c:28:a9: 9b:92:f8:87:98:5d:cf:ba:1d:1d:18:98:73:2a:89:c6:8d:7b: 97:8b:08:d4:42:55:c3:4e:ff:c7:a2:fb:c5:44:28:3b:ef:9e: e1:d6:4e:e3:bb:f7:f3:fe:52:fe:08:20:00:65:13:7b:e3:4e: 5e:a4:9a:20:76:eb:10:ea:48:87:0c:77:8f:8a:f5:b8:95:95: 7e:d7:15:92:0e:a1:48:de:8a:3f:85:b4:2f:92:fa:8a:8b:6c: e4:e7:b7:49:ed:4c:f4:f1:f3:8e:05:c7:f1:c9:e0:fd:24:a0: 60:06:f3:56:70:e3:43:6e:a9:03:9f:c0:45:8c:dd:f3:5f:53: 86:04:91:eb:3f:13:a6:e3:1f:6c:0c:e9:e7:c6:67:84:be:84: de:9c:b8:e8:c2:39:7b:20:7e:ce:4a:59:60:9c:0e:67:a2:ec: 5b:66:71:58:c3:e8:8f:18:cb:cd:33:17:ed:fb:8f:44:f4:83: 0c:35:77:8e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURD5Zf+Z3dLzhiuqviDpofF9kwrEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTZGODIyM0ZBMzM0MkFDRTMxRUQ4NjRDNTM4RTU5RTIy QTUyQkM4OTAeFw0yNjAyMjgxNDA2MjBaFw0yNjAzMDMxODU0MjBaMDMxMTAvBgNV BAMTKDUwRUNEMjg1MUY4QTE2MTEzN0QxNUQyNzE3RjA0QzNGRDRGQUI3RTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMKu+x4O0D6hctfNGMl9qFVajt 0AZO1xKaLgjy284L2h5UoPuJrX+xQPog7W2++UTQTRlzH9mzfPWY8aSxmk4ilX33 lF0PkDR9MwJXQS7tmsvBcRfwBd8Pi1uQno+U+x13pddTxjtgGpxgfyLUn31EKON7 Rk+P3/cCuLldLodBH2siyDIeoG+zPuEzTaU4ZrfIEu7GvV79JtHnRnjeMWggq4cE 1vyQNDbFO0TkTR+WG3JHIxeJimPfhSQhC/EuhzpVOVNIrPuoIqq5OfSe2B85BLvd 7/KNhIECA7plA+E/mGqgPHFslan6RCZmUKru7KxxhsiqpWTw5oIrTTn/7iPpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUOzShR+KFhE30V0nF/BMP9T6t+MwHwYDVR0j BBgwFoAUFvgiP6M0Ks4x7YZMU45Z4ipSvIkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j M2E5ZDc4OC1iY2Y3LTQ2ZjAtOGI1Yi0wZDdkMWZjYjZkYTMvMC8xNkY4MjIzRkEz MzQyQUNFMzFFRDg2NEM1MzhFNTlFMjJBNTJCQzg5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMTZGODIyM0ZBMzM0MkFDRTMxRUQ4NjRDNTM4RTU5RTIyQTUy QkM4OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzNhOWQ3ODgtYmNmNy00NmYwLThi NWItMGQ3ZDFmY2I2ZGEzLzAvMTZGODIyM0ZBMzM0MkFDRTMxRUQ4NjRDNTM4RTU5 RTIyQTUyQkM4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEmyjIld5R1PH66HVtOErEENXPD+U3k6DIsP bTtpj8bjZXSPmXl9q+vmHqZuUra/mszJZL08Agd7VAoWmU75E0wjmBrpGxwoqZuS +IeYXc+6HR0YmHMqicaNe5eLCNRCVcNO/8ei+8VEKDvvnuHWTuO79/P+Uv4IIABl E3vjTl6kmiB26xDqSIcMd4+K9biVlX7XFZIOoUjeij+FtC+S+oqLbOTnt0ntTPTx 844Fx/HJ4P0koGAG81Zw40NuqQOfwEWM3fNfU4YEkes/E6bjH2wM6efGZ4S+hN6c uOjCOXsgfs5KWWCcDmei7FtmcVjD6I8Yy80zF+37j0T0gww1d44= -----END CERTIFICATE-----Generated at Mon Mar 2 11:18:08 2026 by rpki-client