
$ rpki-client -vvf repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/C16E46D556A47D2429EC847E95E7C429D38AC26D.mft
File: C16E46D556A47D2429EC847E95E7C429D38AC26D.mft (raw, json)
Hash identifier: HrJgKt19uAtATFItwwqrvUPs+/LYbYa2S8X3jBUpQnA=
Subject key identifier: AB:68:F2:99:7A:92:12:0C:71:AD:78:CF:3D:72:C3:08:DC:E6:22:30
Authority key identifier: C1:6E:46:D5:56:A4:7D:24:29:EC:84:7E:95:E7:C4:29:D3:8A:C2:6D
Certificate issuer: /CN=C16E46D556A47D2429EC847E95E7C429D38AC26D
Certificate serial: 5B3362866357D5E0E54094554D8AAC2021C72A24
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C16E46D556A47D2429EC847E95E7C429D38AC26D.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/C16E46D556A47D2429EC847E95E7C429D38AC26D.mft
Manifest number: 03BC
Signing time: Sun 01 Mar 2026 10:42:24 +0000
Manifest this update: Sun 01 Mar 2026 10:37:24 +0000
Manifest next update: Wed 04 Mar 2026 18:29:24 +0000
Files and hashes: 1: 3132322e3234382e33382e302f32342d3234203d3e203435333235.roa (hash: Giz7os34qxdcaeyi2EtKcr2LS4LsMlTnJlV8pqSpEa4=)
2: 3132322e3234382e33372e302f32342d3234203d3e20313431313432.roa (hash: q+4LJqnEtPR8u/O7vXDxEMWbUC+3pBdRVabjnpWaIW8=)
3: 3132322e3234382e34342e302f32342d3234203d3e20313431313432.roa (hash: /wV95wT81KDKro/jg/Buo94wrPpWyGBGso5Gssi1qLc=)
4: C16E46D556A47D2429EC847E95E7C429D38AC26D.crl (hash: Z54sH/RLtw3ZIs5i0pgqwVVLjNW7WN1NrEP5bLNmr/A=)
5: 3132322e3234382e34302e302f32342d3234203d3e203435333235.roa (hash: r1xG0EZ+diPvqjo3maUSgSdAXF/PbzNzYbElj3DkPms=)
6: 3132322e3234382e33342e302f32342d3234203d3e203435333235.roa (hash: TPAjUCjHJnWAtWeWIogMrgqyIk1DQzed8sLTl5HA/OY=)
7: 3230332e33302e3235352e302f32342d3234203d3e203435333235.roa (hash: xUdwOu6GtGdzxItV3iA1A5hAD2Ey5dnmQ19p3DcRu10=)
8: 3132322e3234382e34312e302f32342d3234203d3e203435333235.roa (hash: VEDwBMu7e2mzL/h9CHSnsP+W8nFPBXkEhV06ak5Sn4k=)
9: 3230332e33302e3235342e302f32342d3234203d3e203435333235.roa (hash: f0QuTjuXU3+PMwtOvyLhhE3F7fk0wnPs64pd29FWWiY=)
10: 323430303a373530303a3a2f33322d3332203d3e20313431313432.roa (hash: jAH5xZ0mM2gJ4zgC+LxXgivI18TAlcZ5CPYpBlGyxP0=)
11: 3230322e34332e3131332e302f32342d3234203d3e203435333235.roa (hash: 8c4EuCrXR9USSkoSueUSWcZF3Vya08SYcqUOI9OfmOY=)
12: 3132322e3234382e34332e302f32342d3234203d3e203435333235.roa (hash: TzoAuOSZ6mXbYFD7JpUog8X7cU+aL4pu97WqgSsQlww=)
13: 3132322e3234382e34352e302f32342d3234203d3e203435333235.roa (hash: OxhA3uXfrHkYk9hpK8Kprlt50rQpJAHKf4/psbChj9g=)
14: 3132322e3234382e34362e302f32342d3234203d3e203435333235.roa (hash: cNjA+vEY4etZqGchJ8HDvYFIMYzWVJuVGOU4SD9SCJc=)
15: 3230322e35382e3234332e302f32342d3234203d3e203435333235.roa (hash: WivqrExuW/czATKs+PzCjFZrJxIri49e6BcoDofHA0A=)
16: 3132322e3234382e33392e302f32342d3234203d3e203435333235.roa (hash: VdRAPx9PRO631CUuDsRT3G+gpxtg4/VX90lYsk0SMVU=)
17: 3132322e3234382e33322e302f32342d3234203d3e203435333235.roa (hash: YtgOnaLw1bxl1wUrgM2neAz8Qf57lo3CvBW85nMyhJg=)
18: 3132322e3234382e33362e302f32342d3234203d3e203435333235.roa (hash: s1sd22aoOx7eVnGzzPZfaCEnUeLM+0ey0B/Ng0FNQzE=)
19: 3132322e3234382e34372e302f32342d3234203d3e203435333235.roa (hash: pMSHdCGU3wSWW64VJ8Q+XCnRMyb8p81kTgkpP+Gwk14=)
20: 3132322e3234382e34322e302f32342d3234203d3e20313431313432.roa (hash: BEXTqeRuOYeCds/GtbXckcTCx17EaQiOC1/BtPp70DI=)
21: 3132322e3234382e33332e302f32342d3234203d3e203435333235.roa (hash: 8NBF7TYD3mv93Ahcm2U3DCAxcvF4PEalBVAFdo0PIhA=)
22: 3132322e3234382e33352e302f32342d3234203d3e20313431313432.roa (hash: GE7T9YC/kqBLoYKuMN7OgXcO8QMg0KTigD9MICwdRZo=)
23: 3230322e34332e3131322e302f32342d3234203d3e203435333235.roa (hash: YfbB3z09y4MNoTi1HjR4+z9IdxMYyBM89bj8p3WiTw4=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/C16E46D556A47D2429EC847E95E7C429D38AC26D.crl
rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/C16E46D556A47D2429EC847E95E7C429D38AC26D.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C16E46D556A47D2429EC847E95E7C429D38AC26D.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 18:29:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:33:62:86:63:57:d5:e0:e5:40:94:55:4d:8a:ac:20:21:c7:2a:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C16E46D556A47D2429EC847E95E7C429D38AC26D
Validity
Not Before: Mar 1 10:37:24 2026 GMT
Not After : Mar 4 18:29:24 2026 GMT
Subject: CN=AB68F2997A92120C71AD78CF3D72C308DCE62230
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:58:17:0c:45:94:3b:a9:4c:89:7d:90:cb:e2:
6e:69:1c:67:a9:f4:c4:d3:c4:8c:9d:ac:7f:04:02:
8c:c6:8d:a7:11:cf:20:15:a5:15:3b:e5:86:32:c5:
0b:96:9f:f2:70:cf:ca:ad:90:00:98:b4:bf:f3:b7:
b9:2f:23:2e:9a:f0:dc:82:ec:39:83:75:a5:f7:4a:
54:f8:71:eb:54:69:58:b2:09:38:00:d4:d1:6c:c9:
a2:28:1a:f0:fe:3a:95:52:57:47:25:12:75:a3:fe:
37:e2:6f:f5:21:e1:51:ba:53:2c:91:58:a8:6b:77:
3a:c1:2d:41:7f:88:4b:a6:9d:fd:0c:70:4c:db:eb:
7e:e3:c2:fb:e3:3b:1e:e6:76:ab:3b:cf:4d:e5:5a:
67:fa:13:bb:bd:1a:8b:38:de:3c:83:f1:ab:3f:f6:
71:88:a7:49:57:af:b8:eb:28:32:9a:0a:d3:3d:1a:
bc:49:39:93:e0:e8:ac:92:05:e3:83:3c:d8:2e:2f:
6d:6f:c4:dd:d6:d1:79:27:10:e8:61:b6:c6:0b:56:
81:3a:18:18:06:c8:ed:07:58:e5:54:9d:3c:91:76:
16:3e:2a:5e:5d:19:fb:d2:0d:c0:ec:68:0e:e5:43:
ee:1a:f7:3c:fd:0e:08:f7:8f:14:91:69:7b:ba:52:
c9:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:68:F2:99:7A:92:12:0C:71:AD:78:CF:3D:72:C3:08:DC:E6:22:30
X509v3 Authority Key Identifier:
keyid:C1:6E:46:D5:56:A4:7D:24:29:EC:84:7E:95:E7:C4:29:D3:8A:C2:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/C16E46D556A47D2429EC847E95E7C429D38AC26D.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C16E46D556A47D2429EC847E95E7C429D38AC26D.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/C16E46D556A47D2429EC847E95E7C429D38AC26D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:a9:2c:e9:1c:db:f8:02:f7:53:9d:73:40:9d:f9:f2:2b:37:
d7:2e:02:da:5e:d6:ea:09:fd:c6:6d:32:ef:60:1d:ae:46:19:
b1:50:88:be:03:8e:2e:0c:74:08:0c:fd:0a:9e:f0:32:26:b8:
ad:81:14:b9:e5:3a:1c:9b:d4:39:04:7c:4c:a4:36:74:c4:49:
e5:46:57:bf:de:66:cd:82:a2:10:75:80:85:83:90:62:74:ec:
d5:53:ae:68:9a:af:87:6c:90:99:39:63:ee:dd:15:fe:dd:5a:
21:9e:d3:46:16:8b:42:2d:d8:fe:94:e4:80:74:d5:9d:a8:db:
a7:1e:b4:b3:c6:88:9e:7d:c0:d4:b6:dc:79:fa:be:80:d8:c3:
c2:8c:43:48:3c:94:7f:17:5a:6d:ad:1f:3a:b9:fc:1c:2e:7f:
0b:4d:08:0f:b0:79:b8:6c:a5:98:ed:ba:ff:17:ab:fa:10:16:
30:d7:6c:7a:de:91:b6:f2:3d:a8:0a:f1:73:f0:e9:34:ed:93:
b2:31:f2:5a:7b:3a:eb:c8:a6:54:6a:ea:cd:31:22:40:44:34:
85:a3:b2:37:41:e1:fe:7a:19:c4:a5:2e:dd:fd:79:83:05:e0:
d1:a3:dc:36:be:c5:6d:2d:41:b8:d4:71:c7:9a:54:52:fb:5c:
09:2a:9b:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:32:54 2026 by rpki-client