
$ rpki-client -vvf repo-rpki.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/16F8223FA3342ACE31ED864C538E59E22A52BC89.mft
File: 16F8223FA3342ACE31ED864C538E59E22A52BC89.mft (raw, json)
Hash identifier: RFHvM9zowDvaa7oQtvod9t7NzA55YEKFRYzMLib4Aqs=
Subject key identifier: BF:97:51:3B:96:CD:0A:1F:CC:C8:F0:1D:90:72:66:DE:29:1C:79:D8
Authority key identifier: 16:F8:22:3F:A3:34:2A:CE:31:ED:86:4C:53:8E:59:E2:2A:52:BC:89
Certificate issuer: /CN=16F8223FA3342ACE31ED864C538E59E22A52BC89
Certificate serial: 4C43F4D40A6E8BE2093B5D98874D6A3F681A343E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/16F8223FA3342ACE31ED864C538E59E22A52BC89.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/16F8223FA3342ACE31ED864C538E59E22A52BC89.mft
Manifest number: C9
Signing time: Sat 07 Mar 2026 04:41:19 +0000
Manifest this update: Sat 07 Mar 2026 04:36:19 +0000
Manifest next update: Tue 10 Mar 2026 08:11:19 +0000
Files and hashes: 1: 3136302e32352e3135372e302f32342d3234203d3e20313533303835.roa (hash: BLy2IIO/t25gzHYkfmO4RMXFqI37JzfK6VfmCeQNaI4=)
2: 16F8223FA3342ACE31ED864C538E59E22A52BC89.crl (hash: W0fyzmcSP0llENMUbIZVCAnLxhaz5W96u4GfAZFQN98=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/16F8223FA3342ACE31ED864C538E59E22A52BC89.crl
rsync://repo-rpki.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/16F8223FA3342ACE31ED864C538E59E22A52BC89.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/16F8223FA3342ACE31ED864C538E59E22A52BC89.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 08:48:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:43:f4:d4:0a:6e:8b:e2:09:3b:5d:98:87:4d:6a:3f:68:1a:34:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16F8223FA3342ACE31ED864C538E59E22A52BC89
Validity
Not Before: Mar 7 04:36:19 2026 GMT
Not After : Mar 10 08:11:19 2026 GMT
Subject: CN=BF97513B96CD0A1FCCC8F01D907266DE291C79D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:45:bc:6a:3d:66:4b:e9:64:28:b8:f3:7f:71:
37:2d:3d:78:c7:84:50:cf:62:45:37:a4:8e:8d:1d:
dd:9c:f6:5c:9a:44:67:de:57:94:10:7a:bb:6d:2f:
d9:f8:b2:b6:0d:9b:26:28:4a:08:4e:45:d8:30:72:
8a:6e:d8:58:0e:10:71:22:bd:05:3f:d0:c8:f3:8b:
8a:d4:5f:95:35:92:b2:fb:53:3f:42:03:96:5a:95:
e1:71:32:ea:a4:74:2c:61:7a:fb:b1:10:02:c6:3f:
75:4c:c1:e0:74:58:70:2a:9f:e2:12:13:94:ca:08:
0a:74:43:be:19:fb:8a:78:bf:20:59:3e:2d:2f:fa:
27:08:82:1e:53:ce:42:31:a2:13:6a:a9:63:80:0f:
46:89:f6:44:8c:1b:9b:35:bd:84:54:10:14:90:57:
7d:d6:7e:1a:04:8a:da:d2:14:57:9b:06:88:48:fa:
ac:5e:eb:96:07:fc:ff:3c:53:be:fe:c3:60:d7:c2:
2a:98:96:1a:be:c5:b0:65:43:39:00:dc:00:eb:64:
5e:fb:a7:fe:ec:5d:6b:4c:be:1b:10:e9:a3:ec:ea:
ff:92:ef:92:f9:9a:36:34:7e:d4:c1:0c:a2:83:67:
f3:97:99:aa:7a:ff:7f:ed:1e:7f:1b:bc:40:c1:05:
2c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:97:51:3B:96:CD:0A:1F:CC:C8:F0:1D:90:72:66:DE:29:1C:79:D8
X509v3 Authority Key Identifier:
keyid:16:F8:22:3F:A3:34:2A:CE:31:ED:86:4C:53:8E:59:E2:2A:52:BC:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/16F8223FA3342ACE31ED864C538E59E22A52BC89.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/16F8223FA3342ACE31ED864C538E59E22A52BC89.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/16F8223FA3342ACE31ED864C538E59E22A52BC89.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:62:26:6a:0a:47:f2:5e:77:35:0a:f3:ef:1b:83:71:a2:c9:
b2:2e:94:aa:d7:9c:4f:d9:e6:8a:ae:3d:85:4d:a0:7f:27:05:
a6:d0:d8:7a:a1:16:29:9f:a1:9f:52:6f:b8:16:04:7d:f6:aa:
73:0b:55:12:72:ab:cb:d3:85:d2:77:43:3c:7d:01:82:c5:bf:
68:48:dd:0c:89:d6:56:3b:03:90:d9:5c:2c:82:3a:68:19:de:
2c:5a:46:dd:77:73:14:aa:4a:21:7b:23:00:bc:1a:39:6e:17:
26:34:57:37:9b:f0:c5:e4:d5:fd:8a:aa:64:00:9c:f2:8e:6d:
e5:67:5b:01:f7:e5:18:a0:d6:06:24:dc:c9:7a:33:cf:93:89:
3c:c7:0b:aa:68:03:c2:c7:7c:ca:2d:45:21:68:8a:ab:54:bf:
df:8b:eb:e5:a0:82:89:13:68:d8:56:e9:39:a1:e1:36:2d:ed:
9a:90:e5:e9:cb:88:6a:af:d2:a3:0c:07:9b:c4:34:18:42:88:
7a:a7:25:60:3e:b8:29:0e:94:ab:93:ea:fa:0f:80:47:d2:48:
0f:cc:76:ec:86:47:ed:f7:b6:dd:c7:2d:d2:1e:85:fb:b1:2e:
1d:90:34:0a:72:91:ab:e9:9e:a3:71:88:27:db:b3:db:3c:1b:
17:54:2e:36
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUTEP01Apui+IJO12Yh01qP2gaND4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTZGODIyM0ZBMzM0MkFDRTMxRUQ4NjRDNTM4RTU5RTIy
QTUyQkM4OTAeFw0yNjAzMDcwNDM2MTlaFw0yNjAzMTAwODExMTlaMDMxMTAvBgNV
BAMTKEJGOTc1MTNCOTZDRDBBMUZDQ0M4RjAxRDkwNzI2NkRFMjkxQzc5RDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDERbxqPWZL6WQouPN/cTctPXjH
hFDPYkU3pI6NHd2c9lyaRGfeV5QQerttL9n4srYNmyYoSghORdgwcopu2FgOEHEi
vQU/0Mjzi4rUX5U1krL7Uz9CA5ZaleFxMuqkdCxhevuxEALGP3VMweB0WHAqn+IS
E5TKCAp0Q74Z+4p4vyBZPi0v+icIgh5TzkIxohNqqWOAD0aJ9kSMG5s1vYRUEBSQ
V33WfhoEitrSFFebBohI+qxe65YH/P88U77+w2DXwiqYlhq+xbBlQzkA3ADrZF77
p/7sXWtMvhsQ6aPs6v+S75L5mjY0ftTBDKKDZ/OXmap6/3/tHn8bvEDBBSydAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUv5dRO5bNCh/MyPAdkHJm3ikcedgwHwYDVR0j
BBgwFoAUFvgiP6M0Ks4x7YZMU45Z4ipSvIkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j
M2E5ZDc4OC1iY2Y3LTQ2ZjAtOGI1Yi0wZDdkMWZjYjZkYTMvMC8xNkY4MjIzRkEz
MzQyQUNFMzFFRDg2NEM1MzhFNTlFMjJBNTJCQzg5LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzEvMTZGODIyM0ZBMzM0MkFDRTMxRUQ4NjRDNTM4RTU5RTIyQTUy
QkM4OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzNhOWQ3ODgtYmNmNy00NmYwLThi
NWItMGQ3ZDFmY2I2ZGEzLzAvMTZGODIyM0ZBMzM0MkFDRTMxRUQ4NjRDNTM4RTU5
RTIyQTUyQkM4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAHRiJmoKR/JedzUK8+8bg3GiybIulKrXnE/Z
5oquPYVNoH8nBabQ2HqhFimfoZ9Sb7gWBH32qnMLVRJyq8vThdJ3Qzx9AYLFv2hI
3QyJ1lY7A5DZXCyCOmgZ3ixaRt13cxSqSiF7IwC8GjluFyY0Vzeb8MXk1f2KqmQA
nPKObeVnWwH35Rig1gYk3Ml6M8+TiTzHC6poA8LHfMotRSFoiqtUv9+L6+WggokT
aNhW6Tmh4TYt7ZqQ5enLiGqv0qMMB5vENBhCiHqnJWA+uCkOlKuT6voPgEfSSA/M
duyGR+33tt3HLdIehfuxLh2QNApykavpnqNxiCfbs9s8GxdULjY=
-----END CERTIFICATE-----
Generated at Sat Mar 7 17:49:04 2026 by rpki-client