$ rpki-client -vvf repo-rpki.idnic.net/repo/648b6583-4122-469d-8384-3af1bcc6607f/0/16CD7877C91A179A0A6751085603DA8E7DE539F0.mft File: 16CD7877C91A179A0A6751085603DA8E7DE539F0.mft (raw, json) Hash identifier: +Z72Fk3Re4hhydbOb1F4qwI0yCPJs41IJ5M21p6p80M= Subject key identifier: A2:5F:18:F7:A2:2D:F1:04:62:84:A5:B6:21:82:19:08:D0:40:A2:3B Authority key identifier: 16:CD:78:77:C9:1A:17:9A:0A:67:51:08:56:03:DA:8E:7D:E5:39:F0 Certificate issuer: /CN=16CD7877C91A179A0A6751085603DA8E7DE539F0 Certificate serial: 2DC77AB14514AF815E2A9CF9E0DEB48ED89B9847 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/16CD7877C91A179A0A6751085603DA8E7DE539F0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/648b6583-4122-469d-8384-3af1bcc6607f/0/16CD7877C91A179A0A6751085603DA8E7DE539F0.mft Manifest number: 0470 Signing time: Sat 19 Jul 2025 21:11:27 +0000 Manifest this update: Sat 19 Jul 2025 21:06:27 +0000 Manifest next update: Wed 23 Jul 2025 08:45:27 +0000 Files and hashes: 1: 3130332e3134372e3133342e302f32332d3234203d3e20313339393633.roa (hash: BjppJfwXPbmHCeUAWsFqIjK/iMCacW8kVEyJMndZWBE=) 2: 16CD7877C91A179A0A6751085603DA8E7DE539F0.crl (hash: J/xuy1a3l5YpfWWC+CCo03jVwp+DVHgNd6IF3bx1BUg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/648b6583-4122-469d-8384-3af1bcc6607f/0/16CD7877C91A179A0A6751085603DA8E7DE539F0.crl rsync://repo-rpki.idnic.net/repo/648b6583-4122-469d-8384-3af1bcc6607f/0/16CD7877C91A179A0A6751085603DA8E7DE539F0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/16CD7877C91A179A0A6751085603DA8E7DE539F0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 08:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:c7:7a:b1:45:14:af:81:5e:2a:9c:f9:e0:de:b4:8e:d8:9b:98:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16CD7877C91A179A0A6751085603DA8E7DE539F0 Validity Not Before: Jul 19 21:06:27 2025 GMT Not After : Jul 23 08:45:27 2025 GMT Subject: CN=A25F18F7A22DF1046284A5B621821908D040A23B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:6f:3b:74:76:50:ea:7f:a3:97:76:6a:4f:6e: 5c:bb:f5:7d:f7:a9:14:44:f1:c1:01:8a:27:b8:d4: 9a:0e:70:29:56:2c:ea:87:b5:33:c1:e9:c8:b1:fb: 9a:85:f6:59:ea:14:10:e8:ef:c7:a4:bf:85:9b:cf: ed:42:f6:7c:be:bf:f1:6c:4f:ff:9e:62:17:b3:20: 81:ed:b4:f5:cd:b8:73:38:eb:4c:31:00:44:5c:2c: 0f:72:6e:0e:a3:f3:df:db:7b:4b:7a:86:2d:b8:36: 6e:01:db:32:9f:b0:44:a1:05:ca:fd:cc:ae:de:89: 6e:b6:12:be:98:3b:83:2c:d3:5e:66:9d:af:33:a9: b0:9a:a0:ec:12:ad:01:13:70:cd:52:54:13:31:58: f6:b6:bf:56:cd:c0:4e:92:a9:50:50:43:76:dd:2d: 6a:49:3b:83:82:91:51:3a:a8:e3:a8:eb:f1:07:71: 63:8a:dc:80:eb:07:74:10:0f:0f:ee:d1:63:7e:5a: 65:79:b8:74:0a:e8:51:fc:ee:a2:3e:ce:3d:c2:c9: 76:76:f0:48:a2:69:a3:d9:3e:e0:8b:4e:7a:64:68: 69:2d:12:df:c2:fc:f5:93:76:ff:45:ba:c8:4c:80: 80:47:28:a2:03:f4:7b:58:ae:20:e1:4e:cb:72:18: b3:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:5F:18:F7:A2:2D:F1:04:62:84:A5:B6:21:82:19:08:D0:40:A2:3B X509v3 Authority Key Identifier: keyid:16:CD:78:77:C9:1A:17:9A:0A:67:51:08:56:03:DA:8E:7D:E5:39:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/648b6583-4122-469d-8384-3af1bcc6607f/0/16CD7877C91A179A0A6751085603DA8E7DE539F0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/16CD7877C91A179A0A6751085603DA8E7DE539F0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/648b6583-4122-469d-8384-3af1bcc6607f/0/16CD7877C91A179A0A6751085603DA8E7DE539F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:4b:16:7f:09:03:3a:46:29:29:68:d0:c1:81:cc:ae:94:03: d9:be:23:e0:63:13:57:28:d3:9c:db:fe:22:fc:77:73:82:4a: 6f:3d:39:d0:4f:51:ea:9d:98:c2:49:0f:b9:27:b5:58:7e:29: e8:85:70:64:67:2e:b7:d6:59:df:41:f6:1a:48:e7:61:f3:6d: 52:2e:6e:0a:72:35:56:f7:db:03:9c:4b:d2:78:f9:78:69:48: b3:51:4d:aa:c5:be:96:cf:e7:63:4e:34:c0:e3:11:8f:a0:11: 04:a0:1f:99:2f:ab:4d:78:97:82:9d:73:2c:c3:df:74:61:d3: af:fd:69:ae:2e:25:b8:0a:b7:10:fd:d4:1b:d1:26:61:03:22: 58:80:1e:bd:d5:d9:e8:ad:98:9d:10:cf:0b:98:2c:da:d3:61: 7f:66:d1:a2:01:ff:af:db:ae:9e:30:1e:2b:25:81:a3:2f:4b: 88:61:47:8a:7a:cb:dd:cc:9b:70:c3:e9:29:b1:0f:84:ba:12: d8:06:4e:70:ca:67:02:18:81:80:11:7c:51:59:e6:2f:33:6b: 1c:e6:86:48:0f:f2:d4:19:b9:b1:4d:d1:e9:f4:8c:ac:d3:a8: 06:d0:13:1c:b3:cd:fa:1d:45:d8:f6:b2:a9:09:9a:ae:a2:a8: d5:11:c8:a6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULcd6sUUUr4FeKpz54N60jtibmEcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTZDRDc4NzdDOTFBMTc5QTBBNjc1MTA4NTYwM0RBOEU3 REU1MzlGMDAeFw0yNTA3MTkyMTA2MjdaFw0yNTA3MjMwODQ1MjdaMDMxMTAvBgNV BAMTKEEyNUYxOEY3QTIyREYxMDQ2Mjg0QTVCNjIxODIxOTA4RDA0MEEyM0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrbzt0dlDqf6OXdmpPbly79X33 qRRE8cEBiie41JoOcClWLOqHtTPB6cix+5qF9lnqFBDo78ekv4Wbz+1C9ny+v/Fs T/+eYhezIIHttPXNuHM460wxAERcLA9ybg6j89/be0t6hi24Nm4B2zKfsEShBcr9 zK7eiW62Er6YO4Ms015mna8zqbCaoOwSrQETcM1SVBMxWPa2v1bNwE6SqVBQQ3bd LWpJO4OCkVE6qOOo6/EHcWOK3IDrB3QQDw/u0WN+WmV5uHQK6FH87qI+zj3CyXZ2 8EiiaaPZPuCLTnpkaGktEt/C/PWTdv9FushMgIBHKKID9HtYriDhTstyGLNBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUol8Y96It8QRihKW2IYIZCNBAojswHwYDVR0j BBgwFoAUFs14d8kaF5oKZ1EIVgPajn3lOfAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NDhiNjU4My00MTIyLTQ2OWQtODM4NC0zYWYxYmNjNjYwN2YvMC8xNkNENzg3N0M5 MUExNzlBMEE2NzUxMDg1NjAzREE4RTdERTUzOUYwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTZDRDc4NzdDOTFBMTc5QTBBNjc1MTA4NTYwM0RBOEU3REU1 MzlGMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjQ4YjY1ODMtNDEyMi00NjlkLTgz ODQtM2FmMWJjYzY2MDdmLzAvMTZDRDc4NzdDOTFBMTc5QTBBNjc1MTA4NTYwM0RB OEU3REU1MzlGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJpLFn8JAzpGKSlo0MGBzK6UA9m+I+BjE1co 05zb/iL8d3OCSm89OdBPUeqdmMJJD7kntVh+KeiFcGRnLrfWWd9B9hpI52HzbVIu bgpyNVb32wOcS9J4+XhpSLNRTarFvpbP52NONMDjEY+gEQSgH5kvq014l4KdcyzD 33Rh06/9aa4uJbgKtxD91BvRJmEDIliAHr3V2eitmJ0QzwuYLNrTYX9m0aIB/6/b rp4wHislgaMvS4hhR4p6y93Mm3DD6SmxD4S6EtgGTnDKZwIYgYARfFFZ5i8zaxzm hkgP8tQZubFN0en0jKzTqAbQExyzzfodRdj2sqkJmq6iqNURyKY= -----END CERTIFICATE-----Generated at Mon Jul 21 08:38:45 2025 by rpki-client