$ rpki-client -vvf repo-rpki.idnic.net/repo/de3f2e9b-1068-4fa9-ba1d-59d071a412a2/0/16889A9053AE7EB169CF822E9EE670A5C618F97E.mft File: 16889A9053AE7EB169CF822E9EE670A5C618F97E.mft (raw, json) Hash identifier: PwrL73tlF4UkaAMcTANQNhGS4mxoFK8PsWiYKTmda8s= Subject key identifier: 1B:A1:D6:B9:56:B4:14:0B:22:42:A6:DA:5D:68:20:14:BB:2E:37:F3 Authority key identifier: 16:88:9A:90:53:AE:7E:B1:69:CF:82:2E:9E:E6:70:A5:C6:18:F9:7E Certificate issuer: /CN=16889A9053AE7EB169CF822E9EE670A5C618F97E Certificate serial: 4C8F792583DFC0AE3DF26C86021E01E1543BCCFE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/16889A9053AE7EB169CF822E9EE670A5C618F97E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/de3f2e9b-1068-4fa9-ba1d-59d071a412a2/0/16889A9053AE7EB169CF822E9EE670A5C618F97E.mft Manifest number: 0114 Signing time: Mon 21 Jul 2025 11:01:09 +0000 Manifest this update: Mon 21 Jul 2025 10:56:09 +0000 Manifest next update: Thu 24 Jul 2025 18:19:09 +0000 Files and hashes: 1: 16889A9053AE7EB169CF822E9EE670A5C618F97E.crl (hash: /JYEks1c1HGSs0f/Ld5L881nv5ScibuDzwLk5c4s2CQ=) 2: 3130332e36372e38302e302f32342d3234203d3e20313532303031.roa (hash: km/J3O6wA+/+giyqpUHqvd0x617eyhN+dq0ZwqMW8PA=) 3: 3130332e36372e38312e302f32342d3234203d3e20313532303031.roa (hash: VUXxXSjdw/tewePYso0nLi7PuBiFv1hIb0UmgFSc+fg=) 4: 3130332e36372e38302e302f32332d3233203d3e20313532303031.roa (hash: dOd/WmcL1O2XqOSnpwsMSYP0+oN55Jz82rLt6CdY2eM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/de3f2e9b-1068-4fa9-ba1d-59d071a412a2/0/16889A9053AE7EB169CF822E9EE670A5C618F97E.crl rsync://repo-rpki.idnic.net/repo/de3f2e9b-1068-4fa9-ba1d-59d071a412a2/0/16889A9053AE7EB169CF822E9EE670A5C618F97E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/16889A9053AE7EB169CF822E9EE670A5C618F97E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 16:48:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:8f:79:25:83:df:c0:ae:3d:f2:6c:86:02:1e:01:e1:54:3b:cc:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16889A9053AE7EB169CF822E9EE670A5C618F97E Validity Not Before: Jul 21 10:56:09 2025 GMT Not After : Jul 24 18:19:09 2025 GMT Subject: CN=1BA1D6B956B4140B2242A6DA5D682014BB2E37F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:2f:ab:81:50:94:a8:00:be:c0:43:e2:02:ef: 73:b0:28:12:c4:7e:70:84:17:b0:56:2d:f6:b6:e7: 76:ff:d6:21:e1:4d:b2:7e:c9:de:66:0f:4c:e4:2a: 3b:22:aa:b8:01:a8:29:1a:32:88:7d:cc:fe:9d:9d: 0b:21:a6:b6:1a:86:e3:be:9d:2b:04:db:d7:08:fd: 7a:73:da:26:ec:44:a6:0f:ac:59:00:2c:38:02:62: 44:0c:b1:ca:69:91:bd:ae:c3:b6:27:ad:18:fe:93: 1f:b9:b2:2f:4e:6b:de:15:a1:3c:94:44:1d:a0:fd: 74:2a:fc:69:c9:45:64:a0:5a:90:f9:2b:15:ed:dd: 1b:c7:b4:fc:39:59:bb:c4:e7:d6:19:e5:87:7d:e5: 9c:9b:3f:fa:4a:1b:dc:6f:ad:f0:fa:89:00:f4:ba: 11:c6:b0:76:d8:c0:b3:34:fe:6c:ca:61:bd:c9:89: 8e:75:a8:9d:46:17:12:fa:c3:d0:fe:e0:ce:e6:c3: 03:a9:e2:d2:8d:92:1a:21:56:ba:61:76:db:25:56: 4c:34:f6:26:e8:60:20:b1:57:c0:8f:8e:a2:f4:06: 8f:2d:d8:58:a1:32:be:3f:74:5e:1a:45:64:a4:d9: 57:bf:59:b1:6d:f4:02:e7:8d:58:e9:35:ed:38:69: 23:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:A1:D6:B9:56:B4:14:0B:22:42:A6:DA:5D:68:20:14:BB:2E:37:F3 X509v3 Authority Key Identifier: keyid:16:88:9A:90:53:AE:7E:B1:69:CF:82:2E:9E:E6:70:A5:C6:18:F9:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/de3f2e9b-1068-4fa9-ba1d-59d071a412a2/0/16889A9053AE7EB169CF822E9EE670A5C618F97E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/16889A9053AE7EB169CF822E9EE670A5C618F97E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/de3f2e9b-1068-4fa9-ba1d-59d071a412a2/0/16889A9053AE7EB169CF822E9EE670A5C618F97E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:11:9f:41:e6:b0:e1:41:3c:7b:a4:4d:1e:f2:65:31:57:75: a8:6c:3f:68:ce:6e:95:00:c7:27:8a:5c:7c:6b:5f:72:32:5e: 11:7a:35:c4:75:26:f8:c1:37:b0:c4:bb:3c:c8:6b:68:08:73: bc:10:67:10:08:1d:eb:2f:ef:1c:7a:28:81:54:fd:f8:24:59: 8a:56:59:3b:98:02:19:6d:6a:1c:23:bf:e9:5a:c2:6e:fa:53: 26:6d:61:0d:e0:71:e2:25:b0:2e:bb:ce:45:3e:55:8a:30:a0: b3:a7:b9:e0:53:82:3f:2f:47:89:1d:fc:63:41:d2:e3:2e:af: 77:30:68:9f:26:ab:46:00:0d:ca:4b:ed:3b:50:cd:f7:a1:ac: 59:bd:f4:d1:61:27:84:53:38:ea:a3:1f:d7:e6:fb:9c:67:f8: 5f:6b:0a:65:91:45:24:88:47:f7:ec:2b:c6:97:4e:bd:ea:f6: c3:5e:06:41:83:90:fc:d6:95:11:9b:1d:2f:eb:5d:9e:9d:d0: 76:aa:f4:57:45:cf:6d:da:8c:da:f5:4a:bc:da:da:71:3e:3d: 75:a5:35:9e:77:b1:47:16:fc:27:12:e0:02:80:f2:ce:5b:e4: d6:de:c0:0a:9c:b2:d2:53:b6:8e:dd:cc:35:85:b6:e3:c6:27: 25:8a:c9:7a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTI95JYPfwK498myGAh4B4VQ7zP4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTY4ODlBOTA1M0FFN0VCMTY5Q0Y4MjJFOUVFNjcwQTVD NjE4Rjk3RTAeFw0yNTA3MjExMDU2MDlaFw0yNTA3MjQxODE5MDlaMDMxMTAvBgNV BAMTKDFCQTFENkI5NTZCNDE0MEIyMjQyQTZEQTVENjgyMDE0QkIyRTM3RjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXL6uBUJSoAL7AQ+IC73OwKBLE fnCEF7BWLfa253b/1iHhTbJ+yd5mD0zkKjsiqrgBqCkaMoh9zP6dnQshprYahuO+ nSsE29cI/Xpz2ibsRKYPrFkALDgCYkQMscppkb2uw7YnrRj+kx+5si9Oa94VoTyU RB2g/XQq/GnJRWSgWpD5KxXt3RvHtPw5WbvE59YZ5Yd95ZybP/pKG9xvrfD6iQD0 uhHGsHbYwLM0/mzKYb3JiY51qJ1GFxL6w9D+4M7mwwOp4tKNkhohVrphdtslVkw0 9iboYCCxV8CPjqL0Bo8t2FihMr4/dF4aRWSk2Ve/WbFt9ALnjVjpNe04aSP5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUG6HWuVa0FAsiQqbaXWggFLsuN/MwHwYDVR0j BBgwFoAUFoiakFOufrFpz4IunuZwpcYY+X4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZTNmMmU5Yi0xMDY4LTRmYTktYmExZC01OWQwNzFhNDEyYTIvMC8xNjg4OUE5MDUz QUU3RUIxNjlDRjgyMkU5RUU2NzBBNUM2MThGOTdFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTY4ODlBOTA1M0FFN0VCMTY5Q0Y4MjJFOUVFNjcwQTVDNjE4 Rjk3RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGUzZjJlOWItMTA2OC00ZmE5LWJh MWQtNTlkMDcxYTQxMmEyLzAvMTY4ODlBOTA1M0FFN0VCMTY5Q0Y4MjJFOUVFNjcw QTVDNjE4Rjk3RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIARn0HmsOFBPHukTR7yZTFXdahsP2jObpUA xyeKXHxrX3IyXhF6NcR1JvjBN7DEuzzIa2gIc7wQZxAIHesv7xx6KIFU/fgkWYpW WTuYAhltahwjv+lawm76UyZtYQ3gceIlsC67zkU+VYowoLOnueBTgj8vR4kd/GNB 0uMur3cwaJ8mq0YADcpL7TtQzfehrFm99NFhJ4RTOOqjH9fm+5xn+F9rCmWRRSSI R/fsK8aXTr3q9sNeBkGDkPzWlRGbHS/rXZ6d0Haq9FdFz23ajNr1Srza2nE+PXWl NZ53sUcW/CcS4AKA8s5b5NbewAqcstJTto7dzDWFtuPGJyWKyXo= -----END CERTIFICATE-----Generated at Mon Jul 21 12:44:34 2025 by rpki-client