$ rpki-client -vvf repo-rpki.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/166B4918E7A1A1641E7C79C537833379E393522E.mft File: 166B4918E7A1A1641E7C79C537833379E393522E.mft (raw, json) Hash identifier: Wq21EeyYlbqq/hpoPGd2z89+QuUjqFnL6ZA0ND+m48E= Subject key identifier: FE:32:7A:34:C8:56:46:58:80:CE:E1:13:1D:FB:5F:DF:0F:67:4F:17 Authority key identifier: 16:6B:49:18:E7:A1:A1:64:1E:7C:79:C5:37:83:33:79:E3:93:52:2E Certificate issuer: /CN=166B4918E7A1A1641E7C79C537833379E393522E Certificate serial: 3FEDB7FD22379564361C7ED2877F5DD3C662CD15 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/166B4918E7A1A1641E7C79C537833379E393522E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/166B4918E7A1A1641E7C79C537833379E393522E.mft Manifest number: 02CE Signing time: Thu 04 Sep 2025 09:01:01 +0000 Manifest this update: Thu 04 Sep 2025 08:56:01 +0000 Manifest next update: Sun 07 Sep 2025 12:47:01 +0000 Files and hashes: 1: 3130332e3137342e3138302e302f32342d3234203d3e20313437313037.roa (hash: WsHwgNa1eu27mA5KJGjHDisSyyKknyjiNT1hKbJ/YGc=) 2: 3130332e3137342e3138312e302f32342d3234203d3e20313437313037.roa (hash: LzEWJe+Hglc03QN90vVTDC59A7niJ+rvkY3tQyL/MFs=) 3: 3130332e3137342e3138302e302f32332d3233203d3e20313437313037.roa (hash: oK3qw71PTaTu9zr3WTDr2kf09ZEsEk1iSGVob7ZwRo0=) 4: 166B4918E7A1A1641E7C79C537833379E393522E.crl (hash: v7R2YBAT1oK6ZtiLUQCzS9N6umq3T9gYX9h4rQnhAGs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/166B4918E7A1A1641E7C79C537833379E393522E.crl rsync://repo-rpki.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/166B4918E7A1A1641E7C79C537833379E393522E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/166B4918E7A1A1641E7C79C537833379E393522E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 12:47:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:ed:b7:fd:22:37:95:64:36:1c:7e:d2:87:7f:5d:d3:c6:62:cd:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=166B4918E7A1A1641E7C79C537833379E393522E Validity Not Before: Sep 4 08:56:01 2025 GMT Not After : Sep 7 12:47:01 2025 GMT Subject: CN=FE327A34C856465880CEE1131DFB5FDF0F674F17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:2c:b8:45:13:1a:64:6a:5c:8e:d5:da:e6:1f: f1:82:af:f7:ce:8c:3c:1c:74:1a:b8:15:8d:28:10: 2b:ae:00:ed:7c:b6:3f:6a:69:87:c7:4b:43:5f:b7: 26:39:8c:0d:a6:57:99:b6:22:02:ab:d9:5d:57:a5: 8d:a3:db:b1:94:f2:5d:2f:3a:13:ac:ab:ed:3e:6a: 5a:75:62:b2:32:c3:8f:31:6a:a3:ad:32:c0:ca:10: 77:cc:35:a7:b8:05:14:be:22:7c:64:2f:d5:35:db: 00:c9:7f:b9:88:20:47:27:e6:6e:64:18:84:d7:82: 63:91:a6:0a:7b:24:c3:72:ee:b2:02:6e:aa:1f:13: 1b:1d:67:5d:d3:57:83:e7:c9:37:f2:ec:58:50:03: 68:b7:00:d2:03:3c:f4:23:93:d3:d9:a9:59:f7:6a: a7:2c:c1:5e:6b:6d:56:32:9c:43:56:80:09:6e:af: fa:40:f4:04:90:cd:2f:8e:7b:92:de:17:57:2c:0c: 98:62:56:99:8c:74:07:da:e1:06:52:b8:c5:ab:10: 86:55:f7:5e:5f:60:49:c4:4d:0f:16:52:81:02:5e: 49:68:7f:c4:d0:e2:dc:63:60:c3:95:53:4e:15:7b: e2:e9:80:2a:1f:73:4f:a4:0b:e2:11:20:1f:b6:2f: 6c:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:32:7A:34:C8:56:46:58:80:CE:E1:13:1D:FB:5F:DF:0F:67:4F:17 X509v3 Authority Key Identifier: keyid:16:6B:49:18:E7:A1:A1:64:1E:7C:79:C5:37:83:33:79:E3:93:52:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/166B4918E7A1A1641E7C79C537833379E393522E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/166B4918E7A1A1641E7C79C537833379E393522E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/166B4918E7A1A1641E7C79C537833379E393522E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:d1:df:10:85:28:dd:10:51:bb:7f:85:ce:46:4f:85:2d:15: 18:72:a6:cb:5e:a4:f2:90:38:08:c6:d7:ab:e8:5a:85:08:22: 86:62:99:f8:35:74:d0:e5:47:a2:cd:27:0e:16:61:a3:78:b2: 51:a5:fc:5b:d5:d3:9c:95:f9:00:ac:9d:49:3e:29:0e:57:fd: 7a:c2:77:4d:99:a9:9e:e2:8e:bb:4b:be:df:c4:24:8a:5a:3c: f8:3a:84:a1:01:ee:f5:3b:d1:cf:38:ac:86:55:46:d5:bf:4b: b0:3f:ef:c2:90:a9:f7:65:17:9a:e1:02:53:4b:c9:94:6d:00: bd:7f:74:44:05:78:20:75:71:41:b5:41:33:22:95:88:5e:a5: 8d:07:15:1e:f0:64:ac:d2:4f:0c:51:4f:77:b1:0f:6e:c7:c4: 4f:6f:d3:87:40:f1:43:df:85:09:b3:1e:b0:06:de:4c:c2:bd: fc:98:97:80:de:8f:65:af:98:7b:51:f9:3a:f3:9d:a0:84:7e: f5:19:27:ee:6b:08:8f:f9:7e:4b:b6:71:1e:be:ef:ed:18:dd: ee:06:b1:fd:2d:10:a1:c1:d4:59:8e:cc:af:cf:8f:41:c1:9e: f8:f9:c8:3d:0f:46:d0:02:e7:2c:69:b9:0f:82:13:c8:83:6c: 67:78:26:9e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP+23/SI3lWQ2HH7Sh39d08ZizRUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTY2QjQ5MThFN0ExQTE2NDFFN0M3OUM1Mzc4MzMzNzlF MzkzNTIyRTAeFw0yNTA5MDQwODU2MDFaFw0yNTA5MDcxMjQ3MDFaMDMxMTAvBgNV BAMTKEZFMzI3QTM0Qzg1NjQ2NTg4MENFRTExMzFERkI1RkRGMEY2NzRGMTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnLLhFExpkalyO1drmH/GCr/fO jDwcdBq4FY0oECuuAO18tj9qaYfHS0NftyY5jA2mV5m2IgKr2V1XpY2j27GU8l0v OhOsq+0+alp1YrIyw48xaqOtMsDKEHfMNae4BRS+InxkL9U12wDJf7mIIEcn5m5k GITXgmORpgp7JMNy7rICbqofExsdZ13TV4PnyTfy7FhQA2i3ANIDPPQjk9PZqVn3 aqcswV5rbVYynENWgAlur/pA9ASQzS+Oe5LeF1csDJhiVpmMdAfa4QZSuMWrEIZV 915fYEnETQ8WUoECXklof8TQ4txjYMOVU04Ve+LpgCofc0+kC+IRIB+2L2zLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/jJ6NMhWRliAzuETHftf3w9nTxcwHwYDVR0j BBgwFoAUFmtJGOehoWQefHnFN4MzeeOTUi4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YzI4NTI5MS1jZTkyLTQxNDQtOWMxOC05ZThjMTkxZGRlYzYvMC8xNjZCNDkxOEU3 QTFBMTY0MUU3Qzc5QzUzNzgzMzM3OUUzOTM1MjJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTY2QjQ5MThFN0ExQTE2NDFFN0M3OUM1Mzc4MzMzNzlFMzkz NTIyRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWMyODUyOTEtY2U5Mi00MTQ0LTlj MTgtOWU4YzE5MWRkZWM2LzAvMTY2QjQ5MThFN0ExQTE2NDFFN0M3OUM1Mzc4MzMz NzlFMzkzNTIyRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH3R3xCFKN0QUbt/hc5GT4UtFRhypstepPKQ OAjG16voWoUIIoZimfg1dNDlR6LNJw4WYaN4slGl/FvV05yV+QCsnUk+KQ5X/XrC d02ZqZ7ijrtLvt/EJIpaPPg6hKEB7vU70c84rIZVRtW/S7A/78KQqfdlF5rhAlNL yZRtAL1/dEQFeCB1cUG1QTMilYhepY0HFR7wZKzSTwxRT3exD27HxE9v04dA8UPf hQmzHrAG3kzCvfyYl4Dej2WvmHtR+TrznaCEfvUZJ+5rCI/5fku2cR6+7+0Y3e4G sf0tEKHB1FmOzK/Pj0HBnvj5yD0PRtAC5yxpuQ+CE8iDbGd4Jp4= -----END CERTIFICATE-----Generated at Fri Sep 5 10:39:37 2025 by rpki-client