$ rpki-client -vvf repo-rpki.idnic.net/repo/3c9941a4-28d2-47d1-91e7-acab59084462/0/B16C4772F3D77045BBA997F94CEACA9E0DCC2865.mft File: B16C4772F3D77045BBA997F94CEACA9E0DCC2865.mft (raw, json) Hash identifier: Iu7itH/bgzAIwfjLaFqDUATm624WMMuuvKvfaxKpwa4= Subject key identifier: 77:B0:57:D1:4D:AC:D7:DC:1F:E4:DD:53:4A:3F:44:1E:93:CA:C6:EF Authority key identifier: B1:6C:47:72:F3:D7:70:45:BB:A9:97:F9:4C:EA:CA:9E:0D:CC:28:65 Certificate issuer: /CN=B16C4772F3D77045BBA997F94CEACA9E0DCC2865 Certificate serial: 569DCFD89A2C56717F9B5A0DFDDF687ECFED73B3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B16C4772F3D77045BBA997F94CEACA9E0DCC2865.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3c9941a4-28d2-47d1-91e7-acab59084462/0/B16C4772F3D77045BBA997F94CEACA9E0DCC2865.mft Manifest number: 010D Signing time: Sun 20 Jul 2025 20:11:59 +0000 Manifest this update: Sun 20 Jul 2025 20:06:59 +0000 Manifest next update: Thu 24 Jul 2025 00:05:59 +0000 Files and hashes: 1: B16C4772F3D77045BBA997F94CEACA9E0DCC2865.crl (hash: ZgOhZ8WBQ/1KFiH5XQah47FhNgcgP6NqiJVBjhvrnxQ=) 2: 3138302e3133312e3132392e302f32342d3234203d3e20313532303238.roa (hash: ham3CevlCthR5zf32aym4G2m2qOgp6uooahhDHdIKYE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3c9941a4-28d2-47d1-91e7-acab59084462/0/B16C4772F3D77045BBA997F94CEACA9E0DCC2865.crl rsync://repo-rpki.idnic.net/repo/3c9941a4-28d2-47d1-91e7-acab59084462/0/B16C4772F3D77045BBA997F94CEACA9E0DCC2865.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B16C4772F3D77045BBA997F94CEACA9E0DCC2865.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 00:05:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:9d:cf:d8:9a:2c:56:71:7f:9b:5a:0d:fd:df:68:7e:cf:ed:73:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B16C4772F3D77045BBA997F94CEACA9E0DCC2865 Validity Not Before: Jul 20 20:06:59 2025 GMT Not After : Jul 24 00:05:59 2025 GMT Subject: CN=77B057D14DACD7DC1FE4DD534A3F441E93CAC6EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:26:46:0a:e4:ac:55:e0:d2:5b:b4:85:a9:ae: 5e:4d:8d:db:25:7c:ed:2f:b3:f2:9f:ea:2a:ea:1d: b7:5f:28:23:da:59:48:c3:2b:9d:27:56:5b:1d:bc: 3f:4e:32:74:07:d2:60:6c:ec:e0:01:a1:bf:96:39: 34:6c:6a:34:60:49:3f:90:38:34:0e:db:71:d3:f9: 1c:29:de:08:0e:07:0a:97:ef:c8:65:27:32:e0:2f: 23:d1:8d:a0:8c:0a:5e:2f:eb:f7:16:3e:93:be:28: 6a:09:16:3b:85:fc:68:95:cc:04:bf:a5:49:ed:aa: 24:61:aa:8a:86:a5:ab:8a:36:d3:a4:39:db:3e:95: af:a1:e2:78:c2:12:0a:ad:eb:cb:61:18:e9:62:f8: 07:be:f7:8e:2f:dc:3d:44:0b:fb:ae:e6:a6:16:5f: 9d:1c:35:dc:a9:46:6d:dc:b0:5b:47:e6:bb:93:8c: 01:4a:54:c1:84:2d:78:58:41:6a:22:e8:f5:66:44: 7e:42:ee:b3:78:7c:ea:f3:f0:7a:8b:c0:a4:52:08: f0:b6:d4:c2:49:8d:c4:a5:2d:c3:13:9f:89:a2:9f: 77:fa:4b:60:a6:7e:f9:31:aa:3d:37:58:16:54:a1: 53:12:c8:71:10:34:1e:b3:39:c7:5c:91:49:21:f2: 06:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:B0:57:D1:4D:AC:D7:DC:1F:E4:DD:53:4A:3F:44:1E:93:CA:C6:EF X509v3 Authority Key Identifier: keyid:B1:6C:47:72:F3:D7:70:45:BB:A9:97:F9:4C:EA:CA:9E:0D:CC:28:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3c9941a4-28d2-47d1-91e7-acab59084462/0/B16C4772F3D77045BBA997F94CEACA9E0DCC2865.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B16C4772F3D77045BBA997F94CEACA9E0DCC2865.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3c9941a4-28d2-47d1-91e7-acab59084462/0/B16C4772F3D77045BBA997F94CEACA9E0DCC2865.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:0f:f9:ea:6a:cd:d2:39:01:cc:35:ba:06:d9:7e:f5:5e:bf: b2:c2:a3:79:eb:73:db:1a:0f:7a:00:37:fb:a7:3a:54:8d:6c: 28:f5:a8:58:56:93:ef:03:55:8e:fa:5c:1b:c3:92:f4:99:91: fb:8a:1f:c3:10:68:f9:54:cd:e0:0f:bc:d9:db:a8:52:67:ef: 9a:61:dd:d9:bb:c4:1d:86:5c:19:48:bd:1a:bc:c5:3b:62:06: d5:dc:96:72:02:13:fd:51:2d:a6:ac:e1:65:b5:70:32:f4:64: ea:71:a2:57:ef:06:21:a4:37:0e:b9:d2:48:0b:50:a7:aa:da: 6c:47:01:1c:1c:b0:e8:5c:b7:68:ac:f2:6d:4d:d8:fa:dc:7f: fc:77:62:d8:30:d6:bb:ff:e5:d8:75:92:ef:8c:13:bf:6b:38: 9e:c5:28:bc:18:c9:39:7b:11:56:33:00:48:0b:62:f2:e9:cb: 29:4e:7d:8f:b2:49:75:2f:33:61:cd:b6:32:77:0b:6d:fb:3b: 16:6b:ee:6a:6e:ef:3f:48:c0:be:44:7a:fa:21:7b:c8:11:43: 16:97:da:fa:9e:5b:92:3a:ca:cd:f5:a3:05:46:1c:c6:44:78: 0e:df:cf:c6:7c:4f:16:85:4e:d0:30:a8:23:13:6b:75:d4:d7: 12:0c:e3:33 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVp3P2JosVnF/m1oN/d9ofs/tc7MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjE2QzQ3NzJGM0Q3NzA0NUJCQTk5N0Y5NENFQUNBOUUw RENDMjg2NTAeFw0yNTA3MjAyMDA2NTlaFw0yNTA3MjQwMDA1NTlaMDMxMTAvBgNV BAMTKDc3QjA1N0QxNERBQ0Q3REMxRkU0REQ1MzRBM0Y0NDFFOTNDQUM2RUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFJkYK5KxV4NJbtIWprl5Njdsl fO0vs/Kf6irqHbdfKCPaWUjDK50nVlsdvD9OMnQH0mBs7OABob+WOTRsajRgST+Q ODQO23HT+Rwp3ggOBwqX78hlJzLgLyPRjaCMCl4v6/cWPpO+KGoJFjuF/GiVzAS/ pUntqiRhqoqGpauKNtOkOds+la+h4njCEgqt68thGOli+Ae+944v3D1EC/uu5qYW X50cNdypRm3csFtH5ruTjAFKVMGELXhYQWoi6PVmRH5C7rN4fOrz8HqLwKRSCPC2 1MJJjcSlLcMTn4min3f6S2Cmfvkxqj03WBZUoVMSyHEQNB6zOcdckUkh8gaZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUd7BX0U2s19wf5N1TSj9EHpPKxu8wHwYDVR0j BBgwFoAUsWxHcvPXcEW7qZf5TOrKng3MKGUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z Yzk5NDFhNC0yOGQyLTQ3ZDEtOTFlNy1hY2FiNTkwODQ0NjIvMC9CMTZDNDc3MkYz RDc3MDQ1QkJBOTk3Rjk0Q0VBQ0E5RTBEQ0MyODY1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjE2QzQ3NzJGM0Q3NzA0NUJCQTk5N0Y5NENFQUNBOUUwREND Mjg2NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2M5OTQxYTQtMjhkMi00N2QxLTkx ZTctYWNhYjU5MDg0NDYyLzAvQjE2QzQ3NzJGM0Q3NzA0NUJCQTk5N0Y5NENFQUNB OUUwRENDMjg2NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALgP+epqzdI5Acw1ugbZfvVev7LCo3nrc9sa D3oAN/unOlSNbCj1qFhWk+8DVY76XBvDkvSZkfuKH8MQaPlUzeAPvNnbqFJn75ph 3dm7xB2GXBlIvRq8xTtiBtXclnICE/1RLaas4WW1cDL0ZOpxolfvBiGkNw650kgL UKeq2mxHARwcsOhct2is8m1N2Prcf/x3Ytgw1rv/5dh1ku+ME79rOJ7FKLwYyTl7 EVYzAEgLYvLpyylOfY+ySXUvM2HNtjJ3C237OxZr7mpu7z9IwL5Eevohe8gRQxaX 2vqeW5I6ys31owVGHMZEeA7fz8Z8TxaFTtAwqCMTa3XU1xIM4zM= -----END CERTIFICATE-----Generated at Sun Jul 20 21:56:22 2025 by rpki-client