$ rpki-client -vvf repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/C16E46D556A47D2429EC847E95E7C429D38AC26D.mft File: C16E46D556A47D2429EC847E95E7C429D38AC26D.mft (raw, json) Hash identifier: b7eATMv7bIEoPq+yTOWUCx/jKnPlhpXa11foa/UmRxw= Subject key identifier: 70:16:78:79:4D:D1:83:3A:56:79:A2:D7:A4:6C:FD:51:26:63:39:74 Authority key identifier: C1:6E:46:D5:56:A4:7D:24:29:EC:84:7E:95:E7:C4:29:D3:8A:C2:6D Certificate issuer: /CN=C16E46D556A47D2429EC847E95E7C429D38AC26D Certificate serial: 56E9C4BF83D24DE4CE2772AEEF4F7B617C66E118 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C16E46D556A47D2429EC847E95E7C429D38AC26D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/C16E46D556A47D2429EC847E95E7C429D38AC26D.mft Manifest number: 0352 Signing time: Mon 21 Jul 2025 01:52:07 +0000 Manifest this update: Mon 21 Jul 2025 01:47:07 +0000 Manifest next update: Thu 24 Jul 2025 06:29:07 +0000 Files and hashes: 1: 3230322e34332e3131322e302f32342d3234203d3e203435333235.roa (hash: ysRy+nrk2+7qcjRHwMFa5bwT6ZEU71YLfsCXRkR1Es0=) 2: 3132322e3234382e34302e302f32342d3234203d3e203435333235.roa (hash: RR7ACbPl/JlaFFYkC+v/rS/Uji2Joiu0jBs1396uYUQ=) 3: 3230322e34332e3131332e302f32342d3234203d3e203435333235.roa (hash: iAl8NmWNJlmHejJ5sIMuSWgzBreFnv6E6ju9qJHMnsY=) 4: 3230322e35382e3234332e302f32342d3234203d3e203435333235.roa (hash: WivqrExuW/czATKs+PzCjFZrJxIri49e6BcoDofHA0A=) 5: 3132322e3234382e34342e302f32342d3234203d3e20313431313432.roa (hash: h34a36oOro4h82UzWlqmmFvXIQsUxyJPSi5+fu8agyc=) 6: 3132322e3234382e33382e302f32342d3234203d3e203435333235.roa (hash: 1mSxPF9RWPzW0o8OV1KEyXpWaFNHEqMbTeJUgaklFZE=) 7: 3230332e33302e3235352e302f32342d3234203d3e203435333235.roa (hash: YNrbS8ak9Mk+b9Wc7pVzuLcBWX2U2ASVy3A/+idXG9A=) 8: 3132322e3234382e33322e302f32342d3234203d3e203435333235.roa (hash: UQXVoZKGz5JhkoTTlnHcb+EQxg2+/5hollJFLUnx0yQ=) 9: 323430303a373530303a3a2f33322d3332203d3e203435333235.roa (hash: x21nuMOFacoxM1n3i0ebBYoK59D8tMJoxNNKmC7nIow=) 10: 3132322e3234382e34352e302f32342d3234203d3e203435333235.roa (hash: sKqe/v72Bkg2bo/MAJzQwOx67n39YutbyZ1RMbwLFW4=) 11: 3132322e3234382e34312e302f32342d3234203d3e203435333235.roa (hash: WQ720U4S99SeEIPGAMPrXzE0oNhC79BMDbo0SDUiMMw=) 12: 3230322e35382e3234322e302f32342d3234203d3e203435333235.roa (hash: vfSJs3OGToXJYOrii1md06kGIUgxpU6Nq1gMsM7qNrc=) 13: 3132322e3234382e33342e302f32342d3234203d3e203435333235.roa (hash: xWN96AN2o/5DjK3ZlzwTHnF0Jn7pZjmGqWHyJSo//1M=) 14: 3132322e3234382e33352e302f32342d3234203d3e203435333235.roa (hash: tpz05ygSqebIjUSPwghHsNHlvwhhI3vwB7cunp1p9bE=) 15: 3132322e3234382e33362e302f32342d3234203d3e203435333235.roa (hash: OdWDIwy3kzlmQdcK2SaQYfq9ix9p7PQmfJSCMg+I4yw=) 16: 3132322e3234382e34332e302f32342d3234203d3e203435333235.roa (hash: z7XL2D0wXQTjcZf3j2e+IrsJInNEddx4qPTq74sMeHo=) 17: 3132322e3234382e34322e302f32342d3234203d3e20313431313432.roa (hash: rKBd3FDglxAur6pNSQahm+4YOdXF+ndHaH2ghrjrs0c=) 18: 3132322e3234382e34362e302f32342d3234203d3e203435333235.roa (hash: SHNUndN8A/BIGBgaMZGSvUYKm9oObzfVbZRCy6qWjNQ=) 19: C16E46D556A47D2429EC847E95E7C429D38AC26D.crl (hash: G0fYB+IYcgJ4iNI2/cCCcjHc76QNo8dvv3DAxdr3wKA=) 20: 3132322e3234382e34372e302f32342d3234203d3e203435333235.roa (hash: PlPCblW+Y4v6qxU+CWaZnHwrOaBWn48VhJ1vBaFINzQ=) 21: 3132322e3234382e33372e302f32342d3234203d3e20313431313432.roa (hash: Lxbv9g4Tc4zr/yZca8M8S2X24CLaJFBuvzgxl8QAASI=) 22: 3230332e33302e3235342e302f32342d3234203d3e203435333235.roa (hash: qwVpoc/q8olJzTwzAZ1Ng5Im8A/3FvC7AKArG6XMGjY=) 23: 3132322e3234382e33332e302f32342d3234203d3e203435333235.roa (hash: 1bWKpPyCmq0Ewpg+6GFok/ArRgk2NtJdp28v3wc0LwU=) 24: 3132322e3234382e33392e302f32342d3234203d3e203435333235.roa (hash: +XlWSZnNsHedFhk9EhTLsRli1/7HpiSYXEFODfdlqoo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/C16E46D556A47D2429EC847E95E7C429D38AC26D.crl rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/C16E46D556A47D2429EC847E95E7C429D38AC26D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C16E46D556A47D2429EC847E95E7C429D38AC26D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 06:29:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:e9:c4:bf:83:d2:4d:e4:ce:27:72:ae:ef:4f:7b:61:7c:66:e1:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C16E46D556A47D2429EC847E95E7C429D38AC26D Validity Not Before: Jul 21 01:47:07 2025 GMT Not After : Jul 24 06:29:07 2025 GMT Subject: CN=701678794DD1833A5679A2D7A46CFD5126633974 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:3a:9d:43:46:31:20:5b:d3:cd:76:7f:c7:8b: 0b:fd:52:e1:8e:4c:ed:f0:51:29:75:b2:57:cc:c1: 3a:70:21:a3:7e:05:b7:78:61:10:20:af:34:db:d3: d6:30:95:48:ad:ee:88:81:80:8b:6b:8b:ca:39:dc: 04:c2:60:0c:6f:ac:d4:94:76:8e:19:29:58:25:36: b9:6c:89:25:39:c7:15:67:8a:99:e4:73:96:64:5d: 28:e1:ff:d2:78:89:42:15:df:a9:1c:29:d5:64:50: 4f:10:79:5c:9a:0d:c5:a5:a6:03:ce:cc:75:62:e7: 69:4c:63:60:30:82:51:f1:09:ad:f2:d1:6e:17:ac: 48:5a:d2:eb:62:34:86:aa:6d:98:5e:5d:ae:f1:fd: cf:e8:a8:eb:75:98:a8:91:da:37:82:81:26:98:eb: 05:88:42:2a:72:59:68:ec:91:40:20:e2:24:9d:7a: fb:15:86:26:05:38:79:27:08:99:bb:f5:c4:c7:9e: e9:2b:7b:7d:66:13:ce:7c:e1:df:a9:3c:f4:a9:ab: 2a:b6:86:02:92:ab:92:d5:2e:41:28:f4:73:3f:f9: af:e0:7e:ba:c5:02:c2:bf:21:9d:5d:8c:fb:78:5a: 43:01:f1:bf:0b:fb:e4:ee:4c:b1:97:6c:4e:5f:f9: fc:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:16:78:79:4D:D1:83:3A:56:79:A2:D7:A4:6C:FD:51:26:63:39:74 X509v3 Authority Key Identifier: keyid:C1:6E:46:D5:56:A4:7D:24:29:EC:84:7E:95:E7:C4:29:D3:8A:C2:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/C16E46D556A47D2429EC847E95E7C429D38AC26D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C16E46D556A47D2429EC847E95E7C429D38AC26D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/C16E46D556A47D2429EC847E95E7C429D38AC26D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:3e:b7:ae:75:c2:3b:33:87:a5:a1:78:76:f0:f2:3a:f9:67: a8:60:16:6f:50:e9:b5:24:75:0b:ec:8b:4c:ff:64:13:b2:42: 4d:d8:ed:f4:0a:b4:3a:4a:49:d0:0b:ec:ec:36:39:52:5a:89: c0:c6:e6:61:57:76:ca:45:51:b6:c9:48:fc:b5:55:31:a4:2d: ce:96:4a:45:c1:27:44:88:2c:bf:7a:ef:83:2e:38:0c:d9:a2: ed:4e:ac:4f:2a:19:48:c9:b4:f0:bb:b6:02:a7:70:0c:c2:6d: 70:4d:37:d7:c3:6e:86:3b:b6:61:5f:05:91:66:8e:ec:40:c6: ce:5d:7c:40:e9:46:e3:20:93:87:7f:f6:51:7c:99:09:c9:c6: 66:65:df:4d:d8:2e:14:1a:37:2e:ac:1c:06:e7:bd:20:0a:ec: 4f:d3:9f:9d:0a:04:15:61:07:ab:87:d6:4c:bc:d9:fe:37:03: 54:4e:f1:8e:62:db:59:9d:b0:05:84:e0:d7:cb:eb:8a:5e:13: 18:29:16:ac:01:60:86:5e:08:f1:04:a6:0f:8a:a9:a9:03:3f: a6:f8:2d:23:c6:bd:45:c2:68:84:0f:bd:ef:c4:9d:50:5e:8a: d3:71:89:fb:b1:41:9c:a3:2d:f1:90:7a:5d:f5:85:e2:f2:2f: be:12:55:4f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVunEv4PSTeTOJ3Ku7097YXxm4RgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzE2RTQ2RDU1NkE0N0QyNDI5RUM4NDdFOTVFN0M0MjlE MzhBQzI2RDAeFw0yNTA3MjEwMTQ3MDdaFw0yNTA3MjQwNjI5MDdaMDMxMTAvBgNV BAMTKDcwMTY3ODc5NEREMTgzM0E1Njc5QTJEN0E0NkNGRDUxMjY2MzM5NzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoOp1DRjEgW9PNdn/Hiwv9UuGO TO3wUSl1slfMwTpwIaN+Bbd4YRAgrzTb09YwlUit7oiBgItri8o53ATCYAxvrNSU do4ZKVglNrlsiSU5xxVnipnkc5ZkXSjh/9J4iUIV36kcKdVkUE8QeVyaDcWlpgPO zHVi52lMY2AwglHxCa3y0W4XrEha0utiNIaqbZheXa7x/c/oqOt1mKiR2jeCgSaY 6wWIQipyWWjskUAg4iSdevsVhiYFOHknCJm79cTHnukre31mE8584d+pPPSpqyq2 hgKSq5LVLkEo9HM/+a/gfrrFAsK/IZ1djPt4WkMB8b8L++TuTLGXbE5f+fyHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcBZ4eU3RgzpWeaLXpGz9USZjOXQwHwYDVR0j BBgwFoAUwW5G1VakfSQp7IR+lefEKdOKwm0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZjJlN2ZkNi1lYjVlLTQ4MGEtOGU5Ny1jNTVmNjhlMDU4OWEvMC9DMTZFNDZENTU2 QTQ3RDI0MjlFQzg0N0U5NUU3QzQyOUQzOEFDMjZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzE2RTQ2RDU1NkE0N0QyNDI5RUM4NDdFOTVFN0M0MjlEMzhB QzI2RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGYyZTdmZDYtZWI1ZS00ODBhLThl OTctYzU1ZjY4ZTA1ODlhLzAvQzE2RTQ2RDU1NkE0N0QyNDI5RUM4NDdFOTVFN0M0 MjlEMzhBQzI2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB4+t651wjszh6WheHbw8jr5Z6hgFm9Q6bUk dQvsi0z/ZBOyQk3Y7fQKtDpKSdAL7Ow2OVJaicDG5mFXdspFUbbJSPy1VTGkLc6W SkXBJ0SILL9674MuOAzZou1OrE8qGUjJtPC7tgKncAzCbXBNN9fDboY7tmFfBZFm juxAxs5dfEDpRuMgk4d/9lF8mQnJxmZl303YLhQaNy6sHAbnvSAK7E/Tn50KBBVh B6uH1ky82f43A1RO8Y5i21mdsAWE4NfL64peExgpFqwBYIZeCPEEpg+KqakDP6b4 LSPGvUXCaIQPve/EnVBeitNxifuxQZyjLfGQel31heLyL74SVU8= -----END CERTIFICATE-----Generated at Mon Jul 21 08:33:34 2025 by rpki-client