$ rpki-client -vvf repo-rpki.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/16F8223FA3342ACE31ED864C538E59E22A52BC89.mft File: 16F8223FA3342ACE31ED864C538E59E22A52BC89.mft (raw, json) Hash identifier: ies/7fvAdX+OnCMMAULUMXpYbp+RrQOpCFYjjWrqST4= Subject key identifier: 93:DC:B3:E3:46:10:F1:E6:18:B7:C0:06:3C:63:9A:50:04:A4:1B:A0 Authority key identifier: 16:F8:22:3F:A3:34:2A:CE:31:ED:86:4C:53:8E:59:E2:2A:52:BC:89 Certificate issuer: /CN=16F8223FA3342ACE31ED864C538E59E22A52BC89 Certificate serial: 39C0ED9FA84A881ABE2DAA55040A8CD56AAF8D77 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/16F8223FA3342ACE31ED864C538E59E22A52BC89.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/16F8223FA3342ACE31ED864C538E59E22A52BC89.mft Manifest number: DD Signing time: Mon 20 Apr 2026 12:11:22 +0000 Manifest this update: Mon 20 Apr 2026 12:06:21 +0000 Manifest next update: Thu 23 Apr 2026 19:21:21 +0000 Files and hashes: 1: 16F8223FA3342ACE31ED864C538E59E22A52BC89.crl (hash: 7MppIVSAQVvPfH6peZbIbot79Uiolg5Xe8s6h3P8P/M=) 2: 3136302e32352e3135372e302f32342d3234203d3e20313533303835.roa (hash: BLy2IIO/t25gzHYkfmO4RMXFqI37JzfK6VfmCeQNaI4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/16F8223FA3342ACE31ED864C538E59E22A52BC89.crl rsync://repo-rpki.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/16F8223FA3342ACE31ED864C538E59E22A52BC89.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/16F8223FA3342ACE31ED864C538E59E22A52BC89.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 19:21:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:c0:ed:9f:a8:4a:88:1a:be:2d:aa:55:04:0a:8c:d5:6a:af:8d:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16F8223FA3342ACE31ED864C538E59E22A52BC89 Validity Not Before: Apr 20 12:06:21 2026 GMT Not After : Apr 23 19:21:21 2026 GMT Subject: CN=93DCB3E34610F1E618B7C0063C639A5004A41BA0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:1d:91:9a:74:d5:38:45:86:60:a5:ea:e5:da: d2:d7:61:8b:a8:fa:3f:bf:41:ca:f8:ee:de:7a:1a: db:cc:cc:46:32:30:b4:3e:37:4e:7a:f6:39:82:01: 48:ef:a6:fe:3a:f7:83:b5:19:df:85:67:40:ef:46: 30:4c:e8:91:a2:db:e4:08:15:07:63:bb:2b:8f:4a: da:eb:39:48:16:7d:66:e5:31:95:28:bc:be:68:1b: de:5b:2a:90:1a:89:ab:89:14:e5:c3:a8:4d:41:d6: cc:f6:7b:f6:dc:8c:90:c8:b6:42:4b:05:3c:3a:86: 92:9c:0f:56:0b:3a:83:ab:7a:c3:a0:74:d3:46:e4: 16:35:51:4c:d7:d8:fe:b7:a8:f4:85:da:74:01:f6: a6:07:55:1c:32:88:49:3a:5e:6f:15:a0:54:9d:0b: ea:68:ac:bd:95:0f:85:f6:0e:f0:27:7a:ec:2a:63: 9f:0c:5b:0f:bc:20:82:4b:ce:36:c0:f7:74:5a:79: df:66:ef:ab:23:b2:ae:21:9b:e5:01:a5:6e:97:3e: 43:01:92:52:2e:13:f6:9c:de:7e:a7:dc:85:76:3b: f9:9b:43:7e:b5:1c:1c:b8:bb:d7:68:a1:68:4b:de: 03:7e:7f:db:02:aa:c8:11:c4:5a:61:e7:21:f1:f3: 44:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:DC:B3:E3:46:10:F1:E6:18:B7:C0:06:3C:63:9A:50:04:A4:1B:A0 X509v3 Authority Key Identifier: keyid:16:F8:22:3F:A3:34:2A:CE:31:ED:86:4C:53:8E:59:E2:2A:52:BC:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/16F8223FA3342ACE31ED864C538E59E22A52BC89.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/16F8223FA3342ACE31ED864C538E59E22A52BC89.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/16F8223FA3342ACE31ED864C538E59E22A52BC89.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:b1:9d:11:93:d1:af:8e:f4:57:b6:97:2f:15:89:1e:63:ca: aa:3c:43:8c:4d:2e:cf:d3:0d:d7:1e:83:cd:74:53:57:2b:45: 7d:40:71:41:ca:52:75:59:76:3f:dd:12:43:99:bd:8b:bc:29: 35:b7:3f:b4:c2:35:33:05:d4:04:90:2b:d4:57:7c:de:f1:ee: 6c:8d:f6:25:3f:31:f0:ad:4b:e4:56:cd:fb:33:e8:4f:bf:b4: 76:0e:61:36:2a:5d:2e:cb:84:4f:35:23:98:d1:cf:5c:b0:14: fa:5b:83:b9:42:0b:b6:d8:13:34:13:b0:0e:b7:60:9c:93:4d: 87:c5:67:7f:83:b4:03:6d:a6:58:44:66:20:18:a1:ba:f5:64: e9:6f:b4:e7:19:a0:9b:2b:98:7e:9f:c1:de:a9:52:33:b2:7b: 7a:c4:1c:fd:79:74:a6:83:6f:73:56:e4:41:99:e1:79:57:17: 26:87:1a:85:a5:9f:98:9e:30:19:c7:19:81:73:1f:75:2e:cd: 49:ab:de:63:e6:92:d7:f7:7b:2c:8f:b6:00:b9:ff:9d:da:d3: 93:44:ec:d7:fc:87:5c:73:1b:97:d8:fa:a1:fd:a3:27:93:14: 07:90:93:29:ae:fd:74:a1:6a:94:8e:ae:6d:f3:91:0e:ae:7f: 25:7c:5d:07 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOcDtn6hKiBq+LapVBAqM1WqvjXcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTZGODIyM0ZBMzM0MkFDRTMxRUQ4NjRDNTM4RTU5RTIy QTUyQkM4OTAeFw0yNjA0MjAxMjA2MjFaFw0yNjA0MjMxOTIxMjFaMDMxMTAvBgNV BAMTKDkzRENCM0UzNDYxMEYxRTYxOEI3QzAwNjNDNjM5QTUwMDRBNDFCQTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2HZGadNU4RYZgperl2tLXYYuo +j+/Qcr47t56GtvMzEYyMLQ+N0569jmCAUjvpv4694O1Gd+FZ0DvRjBM6JGi2+QI FQdjuyuPStrrOUgWfWblMZUovL5oG95bKpAaiauJFOXDqE1B1sz2e/bcjJDItkJL BTw6hpKcD1YLOoOresOgdNNG5BY1UUzX2P63qPSF2nQB9qYHVRwyiEk6Xm8VoFSd C+porL2VD4X2DvAneuwqY58MWw+8IIJLzjbA93Raed9m76sjsq4hm+UBpW6XPkMB klIuE/ac3n6n3IV2O/mbQ361HBy4u9dooWhL3gN+f9sCqsgRxFph5yHx80TTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUk9yz40YQ8eYYt8AGPGOaUASkG6AwHwYDVR0j BBgwFoAUFvgiP6M0Ks4x7YZMU45Z4ipSvIkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j M2E5ZDc4OC1iY2Y3LTQ2ZjAtOGI1Yi0wZDdkMWZjYjZkYTMvMC8xNkY4MjIzRkEz MzQyQUNFMzFFRDg2NEM1MzhFNTlFMjJBNTJCQzg5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMTZGODIyM0ZBMzM0MkFDRTMxRUQ4NjRDNTM4RTU5RTIyQTUy QkM4OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzNhOWQ3ODgtYmNmNy00NmYwLThi NWItMGQ3ZDFmY2I2ZGEzLzAvMTZGODIyM0ZBMzM0MkFDRTMxRUQ4NjRDNTM4RTU5 RTIyQTUyQkM4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABKxnRGT0a+O9Fe2ly8ViR5jyqo8Q4xNLs/T Ddceg810U1crRX1AcUHKUnVZdj/dEkOZvYu8KTW3P7TCNTMF1ASQK9RXfN7x7myN 9iU/MfCtS+RWzfsz6E+/tHYOYTYqXS7LhE81I5jRz1ywFPpbg7lCC7bYEzQTsA63 YJyTTYfFZ3+DtANtplhEZiAYobr1ZOlvtOcZoJsrmH6fwd6pUjOye3rEHP15dKaD b3NW5EGZ4XlXFyaHGoWln5ieMBnHGYFzH3UuzUmr3mPmktf3eyyPtgC5/53a05NE 7Nf8h1xzG5fY+qH9oyeTFAeQkymu/XShapSOrm3zkQ6ufyV8XQc= -----END CERTIFICATE-----Generated at Wed Apr 22 04:52:46 2026 by rpki-client