$ rpki-client -vvf repo-rpki.idnic.net/repo/3c9941a4-28d2-47d1-91e7-acab59084462/0/B16C4772F3D77045BBA997F94CEACA9E0DCC2865.mft File: B16C4772F3D77045BBA997F94CEACA9E0DCC2865.mft (raw, json) Hash identifier: 28RGp2EF8g1nMkHfuM8prH/FCfJP7HzS77phUvcbZJk= Subject key identifier: 91:D2:4A:2A:FC:86:A2:81:F9:00:32:EF:F3:CD:40:BD:9D:49:88:02 Authority key identifier: B1:6C:47:72:F3:D7:70:45:BB:A9:97:F9:4C:EA:CA:9E:0D:CC:28:65 Certificate issuer: /CN=B16C4772F3D77045BBA997F94CEACA9E0DCC2865 Certificate serial: 078B3C6CEB6DF8C093CA39241EB47B5E9A0E5B95 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B16C4772F3D77045BBA997F94CEACA9E0DCC2865.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3c9941a4-28d2-47d1-91e7-acab59084462/0/B16C4772F3D77045BBA997F94CEACA9E0DCC2865.mft Manifest number: 0122 Signing time: Fri 05 Sep 2025 12:51:55 +0000 Manifest this update: Fri 05 Sep 2025 12:46:55 +0000 Manifest next update: Mon 08 Sep 2025 18:39:55 +0000 Files and hashes: 1: 3138302e3133312e3132392e302f32342d3234203d3e20313532303238.roa (hash: ham3CevlCthR5zf32aym4G2m2qOgp6uooahhDHdIKYE=) 2: B16C4772F3D77045BBA997F94CEACA9E0DCC2865.crl (hash: Q++CBmTB6X98+54uxRttf5eGya6VNXQswKcwR+civsg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3c9941a4-28d2-47d1-91e7-acab59084462/0/B16C4772F3D77045BBA997F94CEACA9E0DCC2865.crl rsync://repo-rpki.idnic.net/repo/3c9941a4-28d2-47d1-91e7-acab59084462/0/B16C4772F3D77045BBA997F94CEACA9E0DCC2865.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B16C4772F3D77045BBA997F94CEACA9E0DCC2865.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 18:39:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:8b:3c:6c:eb:6d:f8:c0:93:ca:39:24:1e:b4:7b:5e:9a:0e:5b:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B16C4772F3D77045BBA997F94CEACA9E0DCC2865 Validity Not Before: Sep 5 12:46:55 2025 GMT Not After : Sep 8 18:39:55 2025 GMT Subject: CN=91D24A2AFC86A281F90032EFF3CD40BD9D498802 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:05:00:27:a7:49:92:8d:9f:eb:94:65:5c:36: 4a:dd:5f:ff:dd:a2:6d:8f:8d:cb:b6:d8:2b:68:c2: 2b:7b:aa:eb:c8:53:0f:f3:02:28:1c:df:ee:08:15: fc:67:31:46:8f:49:3b:51:5a:c0:91:92:3e:46:30: 86:c7:f9:ba:b3:42:db:be:e2:36:af:5b:a2:a2:98: a8:18:50:4e:5b:02:a6:0a:9a:b2:e7:a8:44:d8:28: b0:ef:d0:c6:c1:44:63:ad:47:c2:05:2d:0c:41:65: d1:e3:97:e0:d4:24:bb:bf:2b:65:6e:b6:34:53:4a: 52:15:55:77:79:41:6b:c8:20:57:15:44:50:f0:27: 8e:73:1e:f9:70:ff:50:ea:cf:b9:62:ed:c7:ce:b3: d0:e6:32:31:27:6c:40:4e:60:60:5a:30:61:c7:2e: 1c:69:8a:9a:e9:d1:d0:52:18:0c:c0:40:16:4e:28: 54:84:3f:42:61:02:a6:dd:c9:d7:b3:13:23:23:91: 4f:51:9a:c0:bc:0e:f1:6a:cc:4f:21:a6:59:ac:e1: 8d:00:8d:8a:f2:34:2d:ff:01:ce:52:e0:a6:1f:0b: eb:bf:c5:f4:c4:73:d0:ff:f4:4f:37:92:0c:4c:4d: 27:bc:6e:98:95:12:ab:36:8f:91:6f:be:6c:c7:61: 76:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:D2:4A:2A:FC:86:A2:81:F9:00:32:EF:F3:CD:40:BD:9D:49:88:02 X509v3 Authority Key Identifier: keyid:B1:6C:47:72:F3:D7:70:45:BB:A9:97:F9:4C:EA:CA:9E:0D:CC:28:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3c9941a4-28d2-47d1-91e7-acab59084462/0/B16C4772F3D77045BBA997F94CEACA9E0DCC2865.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B16C4772F3D77045BBA997F94CEACA9E0DCC2865.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3c9941a4-28d2-47d1-91e7-acab59084462/0/B16C4772F3D77045BBA997F94CEACA9E0DCC2865.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:80:de:fb:60:dd:b4:10:d5:0e:76:87:b4:66:b9:14:d7:15: e7:0f:4a:e9:d6:99:43:ae:60:52:50:7c:43:1e:d3:c0:ec:de: 82:7c:91:62:1f:67:66:b3:99:8f:bf:8c:33:e0:14:37:7d:87: 82:e3:ca:cd:88:56:8a:4e:40:38:24:30:ce:3a:64:2c:b6:0a: ec:b9:47:e9:3f:8f:54:f3:08:33:6c:0c:79:34:bb:79:57:4a: 91:4b:f1:83:96:cc:a5:e8:d5:a1:7d:3e:47:b8:8a:79:b6:f0: 1a:64:63:42:53:de:16:43:e8:18:f3:aa:d1:af:59:b7:5f:5d: a4:19:39:6a:c8:0d:50:16:4c:34:8f:85:78:cc:a7:d2:df:e0: 18:9a:bf:4e:f9:62:da:90:65:d1:38:69:34:3a:5d:ec:46:c7: a1:65:b3:f6:c9:ef:68:45:db:e0:47:c6:f2:30:f6:8d:00:74: 47:8d:06:fe:d1:6d:33:a5:55:d6:33:d1:c6:7f:b8:28:00:25: 91:71:00:0b:27:22:74:ee:72:89:2b:d5:df:e1:80:d6:7a:db: 5e:c6:41:c7:f8:4f:b5:b6:d8:89:18:c1:01:a3:eb:c3:eb:1e: ff:73:b2:37:7d:94:f3:d7:58:91:d8:c6:8a:09:bc:a7:2d:93: 1c:ba:00:0c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB4s8bOtt+MCTyjkkHrR7XpoOW5UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjE2QzQ3NzJGM0Q3NzA0NUJCQTk5N0Y5NENFQUNBOUUw RENDMjg2NTAeFw0yNTA5MDUxMjQ2NTVaFw0yNTA5MDgxODM5NTVaMDMxMTAvBgNV BAMTKDkxRDI0QTJBRkM4NkEyODFGOTAwMzJFRkYzQ0Q0MEJEOUQ0OTg4MDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1BQAnp0mSjZ/rlGVcNkrdX//d om2Pjcu22Ctowit7quvIUw/zAigc3+4IFfxnMUaPSTtRWsCRkj5GMIbH+bqzQtu+ 4javW6KimKgYUE5bAqYKmrLnqETYKLDv0MbBRGOtR8IFLQxBZdHjl+DUJLu/K2Vu tjRTSlIVVXd5QWvIIFcVRFDwJ45zHvlw/1Dqz7li7cfOs9DmMjEnbEBOYGBaMGHH Lhxpiprp0dBSGAzAQBZOKFSEP0JhAqbdydezEyMjkU9RmsC8DvFqzE8hplms4Y0A jYryNC3/Ac5S4KYfC+u/xfTEc9D/9E83kgxMTSe8bpiVEqs2j5FvvmzHYXY7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkdJKKvyGooH5ADLv881AvZ1JiAIwHwYDVR0j BBgwFoAUsWxHcvPXcEW7qZf5TOrKng3MKGUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z Yzk5NDFhNC0yOGQyLTQ3ZDEtOTFlNy1hY2FiNTkwODQ0NjIvMC9CMTZDNDc3MkYz RDc3MDQ1QkJBOTk3Rjk0Q0VBQ0E5RTBEQ0MyODY1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjE2QzQ3NzJGM0Q3NzA0NUJCQTk5N0Y5NENFQUNBOUUwREND Mjg2NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2M5OTQxYTQtMjhkMi00N2QxLTkx ZTctYWNhYjU5MDg0NDYyLzAvQjE2QzQ3NzJGM0Q3NzA0NUJCQTk5N0Y5NENFQUNB OUUwRENDMjg2NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFaA3vtg3bQQ1Q52h7RmuRTXFecPSunWmUOu YFJQfEMe08Ds3oJ8kWIfZ2azmY+/jDPgFDd9h4Ljys2IVopOQDgkMM46ZCy2Cuy5 R+k/j1TzCDNsDHk0u3lXSpFL8YOWzKXo1aF9Pke4inm28BpkY0JT3hZD6BjzqtGv WbdfXaQZOWrIDVAWTDSPhXjMp9Lf4Biav075YtqQZdE4aTQ6XexGx6Fls/bJ72hF 2+BHxvIw9o0AdEeNBv7RbTOlVdYz0cZ/uCgAJZFxAAsnInTucokr1d/hgNZ6217G Qcf4T7W22IkYwQGj68PrHv9zsjd9lPPXWJHYxooJvKctkxy6AAw= -----END CERTIFICATE-----Generated at Sun Sep 7 13:59:50 2025 by rpki-client