$ rpki-client -vvf repo-rpki.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/116B1B493114E6F87244DA54CAB8D8EAB2503A38.mft File: 116B1B493114E6F87244DA54CAB8D8EAB2503A38.mft (raw, json) Hash identifier: kKJLHxcxmVKXYgwHPV5x2fEljCm5C6u9xrhHqu7WMxw= Subject key identifier: 57:AF:95:F0:20:0B:16:38:80:AF:0C:CB:26:9E:D8:46:49:C0:D0:6D Authority key identifier: 11:6B:1B:49:31:14:E6:F8:72:44:DA:54:CA:B8:D8:EA:B2:50:3A:38 Certificate issuer: /CN=116B1B493114E6F87244DA54CAB8D8EAB2503A38 Certificate serial: 75D6F7280FDA690055FB024C5A6E08086AA9F138 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/116B1B493114E6F87244DA54CAB8D8EAB2503A38.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/116B1B493114E6F87244DA54CAB8D8EAB2503A38.mft Manifest number: 04FF Signing time: Sun 20 Jul 2025 17:10:04 +0000 Manifest this update: Sun 20 Jul 2025 17:05:04 +0000 Manifest next update: Thu 24 Jul 2025 01:57:04 +0000 Files and hashes: 1: 34332e3234372e32322e302f32342d3234203d3e20313331373830.roa (hash: HBRVL6ab1EXX/4v+TicYMdAP2m56HzSbazq4BRWuQH4=) 2: 3230332e3137342e382e302f32312d3234203d3e203234353233.roa (hash: CCYyG9Lvz2JHKUXuBts3OmPCfqvhkN40wl/1YoY63Gk=) 3: 3230332e38342e3135322e302f32312d3234203d3e203234353233.roa (hash: sHtP5I2fCL/ByfK8+QejX4fzdx/zVWKbMfpBHH71lYU=) 4: 116B1B493114E6F87244DA54CAB8D8EAB2503A38.crl (hash: 84K2yuwD13lKumVve+/qXfCIIrAFfpRs4KexXjy/Muo=) 5: 3230322e36322e31322e302f32322d3234203d3e203234353233.roa (hash: zDNAzKqw5j02WXuh6T5DV38kgqgTtQhlXzyZ+EBpvWk=) 6: 34332e3234372e32302e302f32322d3234203d3e203234353233.roa (hash: H+RNVENUJYTTFsMWsgJwmtIem8PyNZc4K51/hdOdwYc=) 7: 3130332e32322e3234302e302f32322d3234203d3e203234353233.roa (hash: O8/63tusLe+8VPLAAqnF2wRbO5seVh0CdjonLiqJ+TA=) 8: 3131302e352e39362e302f32302d3234203d3e203234353233.roa (hash: YQwpls/VIYk0HtO6le+F2vrKuryHDRtN3YkX83o6jq0=) 9: 323430323a313230303a3a2f33322d3438203d3e203234353233.roa (hash: RF31+hlg7a1h6KD8MpJ2iWEMUqzQM6jZSnJZLrwUpW8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/116B1B493114E6F87244DA54CAB8D8EAB2503A38.crl rsync://repo-rpki.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/116B1B493114E6F87244DA54CAB8D8EAB2503A38.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/116B1B493114E6F87244DA54CAB8D8EAB2503A38.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 01:57:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:d6:f7:28:0f:da:69:00:55:fb:02:4c:5a:6e:08:08:6a:a9:f1:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=116B1B493114E6F87244DA54CAB8D8EAB2503A38 Validity Not Before: Jul 20 17:05:04 2025 GMT Not After : Jul 24 01:57:04 2025 GMT Subject: CN=57AF95F0200B163880AF0CCB269ED84649C0D06D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d2:7e:7d:0c:ba:7c:ba:08:a9:46:ac:ab:53: d8:e8:67:ad:2b:90:79:11:a4:6b:af:4c:a5:09:a5: ca:f2:a6:ff:ee:97:17:93:3a:ce:79:34:e3:28:e1: e9:87:d1:2d:83:6f:8c:1d:99:9a:70:84:73:0e:46: 25:44:47:94:00:0e:be:29:18:59:89:46:7a:eb:ba: 5d:6d:8d:17:70:cb:49:d9:af:39:0d:a8:38:b5:4d: f2:05:db:7c:23:17:d7:39:d5:5b:63:8d:5e:06:44: dc:6f:cb:90:e0:b8:10:b5:dd:cb:50:55:0b:dd:5f: dc:15:01:ce:a9:15:48:9e:59:80:f8:e2:07:80:47: 54:9d:76:ca:ba:07:cc:b0:b7:d8:af:e2:9e:32:72: c2:1e:a7:94:46:81:93:e5:88:6a:07:c0:97:fd:be: 5c:0f:bf:50:ae:95:19:7a:f4:14:2c:b0:2a:0e:07: 45:ab:a2:55:66:bf:18:16:e2:aa:d7:0e:45:f1:e2: 93:ca:cb:c1:9e:32:68:c1:12:97:f0:bc:a7:db:75: 4b:14:ac:3b:0e:8b:0e:90:40:5f:33:0d:cd:85:e8: 4e:26:72:ab:5d:70:7a:00:3d:51:2b:e0:52:49:86: 35:28:b3:88:db:ed:5d:7e:b1:4e:bd:0a:a9:0c:64: 21:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:AF:95:F0:20:0B:16:38:80:AF:0C:CB:26:9E:D8:46:49:C0:D0:6D X509v3 Authority Key Identifier: keyid:11:6B:1B:49:31:14:E6:F8:72:44:DA:54:CA:B8:D8:EA:B2:50:3A:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/116B1B493114E6F87244DA54CAB8D8EAB2503A38.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/116B1B493114E6F87244DA54CAB8D8EAB2503A38.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/116B1B493114E6F87244DA54CAB8D8EAB2503A38.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:6e:9f:ad:ae:87:e5:03:a0:8e:f1:1a:db:2f:a2:3e:fe:25: 7f:a6:e1:93:51:c0:b8:15:83:88:f3:ca:a1:13:9d:98:3f:3b: 21:2a:63:5c:1c:b7:fb:c7:48:5e:c6:14:59:c6:98:b5:d3:88: cf:16:7c:e2:f2:96:03:dd:fe:ad:cb:ce:05:7f:2d:6a:70:1a: 84:24:12:fb:67:4f:27:3d:56:c3:11:dc:30:93:6e:78:ca:4b: 30:49:5a:5f:5b:9b:f9:39:f8:9c:96:53:6b:e3:80:23:6c:d8: a9:15:39:0f:06:b3:8e:af:de:d1:b8:ec:4c:8e:f8:42:71:45: 0d:77:f9:8b:de:d9:3b:6c:f1:c2:86:59:92:d3:a9:7a:1b:5d: c4:0f:36:52:ff:ff:c6:c0:b4:62:27:53:7b:b8:2d:e8:ec:df: 7c:53:09:b2:81:15:19:e0:6b:85:e9:39:43:8d:b2:85:6d:27: a8:69:1f:25:3d:60:90:ae:cb:8c:68:b1:ea:37:e1:87:be:95: f3:d6:08:35:e3:da:6b:13:95:24:8b:9a:95:c3:55:53:7d:cb: cb:cf:da:00:5a:da:38:c6:80:d4:08:fa:c4:97:40:51:d2:b3: 86:bd:e7:cf:1e:98:d3:6f:8b:ce:69:58:09:fe:9d:54:ff:00: 59:ea:23:c1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUddb3KA/aaQBV+wJMWm4ICGqp8TgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTE2QjFCNDkzMTE0RTZGODcyNDREQTU0Q0FCOEQ4RUFC MjUwM0EzODAeFw0yNTA3MjAxNzA1MDRaFw0yNTA3MjQwMTU3MDRaMDMxMTAvBgNV BAMTKDU3QUY5NUYwMjAwQjE2Mzg4MEFGMENDQjI2OUVEODQ2NDlDMEQwNkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs0n59DLp8ugipRqyrU9joZ60r kHkRpGuvTKUJpcrypv/ulxeTOs55NOMo4emH0S2Db4wdmZpwhHMORiVER5QADr4p GFmJRnrrul1tjRdwy0nZrzkNqDi1TfIF23wjF9c51VtjjV4GRNxvy5DguBC13ctQ VQvdX9wVAc6pFUieWYD44geAR1Sddsq6B8ywt9iv4p4ycsIep5RGgZPliGoHwJf9 vlwPv1CulRl69BQssCoOB0WrolVmvxgW4qrXDkXx4pPKy8GeMmjBEpfwvKfbdUsU rDsOiw6QQF8zDc2F6E4mcqtdcHoAPVEr4FJJhjUos4jb7V1+sU69CqkMZCHLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUV6+V8CALFjiArwzLJp7YRknA0G0wHwYDVR0j BBgwFoAUEWsbSTEU5vhyRNpUyrjY6rJQOjgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YzY2Nzc2OS04MGRjLTQwOTMtYjVmNy1kZmU3YzU3MjA0ODYvMC8xMTZCMUI0OTMx MTRFNkY4NzI0NERBNTRDQUI4RDhFQUIyNTAzQTM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTE2QjFCNDkzMTE0RTZGODcyNDREQTU0Q0FCOEQ4RUFCMjUw M0EzOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGM2Njc3NjktODBkYy00MDkzLWI1 ZjctZGZlN2M1NzIwNDg2LzAvMTE2QjFCNDkzMTE0RTZGODcyNDREQTU0Q0FCOEQ4 RUFCMjUwM0EzOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALdun62uh+UDoI7xGtsvoj7+JX+m4ZNRwLgV g4jzyqETnZg/OyEqY1wct/vHSF7GFFnGmLXTiM8WfOLylgPd/q3LzgV/LWpwGoQk EvtnTyc9VsMR3DCTbnjKSzBJWl9bm/k5+JyWU2vjgCNs2KkVOQ8Gs46v3tG47EyO +EJxRQ13+Yve2Tts8cKGWZLTqXobXcQPNlL//8bAtGInU3u4Lejs33xTCbKBFRng a4XpOUONsoVtJ6hpHyU9YJCuy4xoseo34Ye+lfPWCDXj2msTlSSLmpXDVVN9y8vP 2gBa2jjGgNQI+sSXQFHSs4a9588emNNvi85pWAn+nVT/AFnqI8E= -----END CERTIFICATE-----Generated at Mon Jul 21 12:32:11 2025 by rpki-client