$ rpki-client -vvf repo-rpki.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/166B4918E7A1A1641E7C79C537833379E393522E.mft File: 166B4918E7A1A1641E7C79C537833379E393522E.mft (raw, json) Hash identifier: Pghm0uaL8nXWD2B78KEmdIS+eCV7oWbJbvP2cGJP3iY= Subject key identifier: B5:D6:F2:CE:2C:B8:18:0E:63:27:47:52:F6:2E:DE:35:7C:1D:5A:3F Authority key identifier: 16:6B:49:18:E7:A1:A1:64:1E:7C:79:C5:37:83:33:79:E3:93:52:2E Certificate issuer: /CN=166B4918E7A1A1641E7C79C537833379E393522E Certificate serial: 013ACD539637883BFD83EC6FE1152B8888FA0D06 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/166B4918E7A1A1641E7C79C537833379E393522E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/166B4918E7A1A1641E7C79C537833379E393522E.mft Manifest number: 02A6 Signing time: Mon 09 Jun 2025 00:50:59 +0000 Manifest this update: Mon 09 Jun 2025 00:45:59 +0000 Manifest next update: Thu 12 Jun 2025 08:41:59 +0000 Files and hashes: 1: 166B4918E7A1A1641E7C79C537833379E393522E.crl (hash: k60hYzJAxdPwIZnLSZLYiUoJdKZnBVUwdGVou8/TrKo=) 2: 3130332e3137342e3138302e302f32342d3234203d3e20313437313037.roa (hash: xBUiCSESbzZk+8P8P8MAm4AC1FO9HF7oq0n8YHSjTdc=) 3: 3130332e3137342e3138312e302f32342d3234203d3e20313437313037.roa (hash: 27vppbMlwwwFcDlsbA8pyh2HjZV3e/4dVfkzUX4OWkw=) 4: 3130332e3137342e3138302e302f32332d3233203d3e20313437313037.roa (hash: 9Fgs7hWJuuOtFl0pJ1PAqQEu5PslUFaq/LB6Vrj8s2c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/166B4918E7A1A1641E7C79C537833379E393522E.crl rsync://repo-rpki.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/166B4918E7A1A1641E7C79C537833379E393522E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/166B4918E7A1A1641E7C79C537833379E393522E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Jun 2025 08:41:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:3a:cd:53:96:37:88:3b:fd:83:ec:6f:e1:15:2b:88:88:fa:0d:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=166B4918E7A1A1641E7C79C537833379E393522E Validity Not Before: Jun 9 00:45:59 2025 GMT Not After : Jun 12 08:41:59 2025 GMT Subject: CN=B5D6F2CE2CB8180E63274752F62EDE357C1D5A3F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:02:f7:4c:fa:37:46:3d:78:a6:ff:b2:6b:ea: 80:98:71:ff:08:5b:f5:cd:7a:20:8d:d2:04:51:3a: 38:80:77:06:c8:e9:c2:9e:a8:b5:66:aa:e7:78:81: ba:24:2b:97:69:d1:0a:72:22:9b:38:05:5e:20:8b: 3c:52:ac:8a:16:2f:94:d3:34:8c:c5:02:81:ac:1b: e4:3b:e0:80:14:66:90:84:55:ed:fb:99:2f:ef:c5: 23:14:ed:4e:19:7d:55:f2:bc:92:ee:be:77:3a:c3: 1d:72:8d:b9:70:bc:33:29:a6:e2:ac:96:ed:b0:98: 4a:44:a6:22:c4:20:91:c2:d6:06:56:60:a8:ce:78: 28:09:6b:f2:44:31:13:73:49:4e:52:fb:27:7e:ae: 94:d6:23:a9:f9:08:17:5d:bb:0f:04:a5:34:cf:9a: a4:b7:9d:66:2e:86:5f:99:5d:b4:92:c3:91:d0:30: f6:96:5c:51:1a:6f:b1:8d:f1:cd:32:e1:08:bc:58: 26:6e:a4:e8:af:18:af:3e:1f:b9:a3:c8:32:49:a9: e4:ac:b4:35:b2:b7:df:d0:e7:74:f6:b4:2d:9d:59: 61:f4:0c:6d:7a:35:9a:1a:cd:23:72:81:29:ed:42: 78:59:72:2e:38:28:46:fc:8a:60:b2:74:ea:f7:f9: 6b:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:D6:F2:CE:2C:B8:18:0E:63:27:47:52:F6:2E:DE:35:7C:1D:5A:3F X509v3 Authority Key Identifier: keyid:16:6B:49:18:E7:A1:A1:64:1E:7C:79:C5:37:83:33:79:E3:93:52:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/166B4918E7A1A1641E7C79C537833379E393522E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/166B4918E7A1A1641E7C79C537833379E393522E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/166B4918E7A1A1641E7C79C537833379E393522E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:a6:ca:b4:ab:e8:3d:5b:31:14:4a:f3:0a:da:87:f0:84:42: e8:e0:1b:3b:ae:2e:80:9f:91:3f:00:97:dd:e8:e2:98:44:f3: cc:d4:3b:16:96:8f:15:39:de:3e:c9:89:1f:cc:9f:39:76:cc: b1:74:61:f1:26:d2:06:b9:fc:ec:e7:55:7a:bf:03:3d:6a:46: a5:c3:bd:49:4e:9f:4d:5b:a8:26:c0:df:a3:4c:30:4f:9c:5f: 6e:ad:1f:60:bf:21:3c:7f:c3:44:15:76:c2:90:97:40:62:86: 15:1a:85:13:79:f0:fb:5c:73:22:fa:3f:1c:8c:bb:ae:cc:c5: c9:1d:39:36:96:ee:06:3b:df:60:e6:e4:c0:4f:9a:95:8b:e3: 89:4d:00:6d:d0:cc:5b:42:80:44:52:1f:e8:9d:80:80:3c:df: 8d:04:fa:95:24:60:ea:a1:59:13:52:f6:7d:ee:c8:2a:97:72: d6:a9:b2:cd:15:d7:3e:d6:a6:93:5a:14:5d:66:a2:6e:2a:0a: 22:04:fd:51:ca:03:dd:02:15:4f:d9:53:fb:9f:09:e8:c5:f9: f2:05:85:2e:57:e0:b7:b3:d8:fd:30:9f:9a:da:00:bc:ce:1b: 62:b0:42:66:65:57:5b:35:d2:0a:51:b3:30:7e:7c:c4:f3:ac: 40:a1:d8:87 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUATrNU5Y3iDv9g+xv4RUriIj6DQYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTY2QjQ5MThFN0ExQTE2NDFFN0M3OUM1Mzc4MzMzNzlF MzkzNTIyRTAeFw0yNTA2MDkwMDQ1NTlaFw0yNTA2MTIwODQxNTlaMDMxMTAvBgNV BAMTKEI1RDZGMkNFMkNCODE4MEU2MzI3NDc1MkY2MkVERTM1N0MxRDVBM0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIAvdM+jdGPXim/7Jr6oCYcf8I W/XNeiCN0gRROjiAdwbI6cKeqLVmqud4gbokK5dp0QpyIps4BV4gizxSrIoWL5TT NIzFAoGsG+Q74IAUZpCEVe37mS/vxSMU7U4ZfVXyvJLuvnc6wx1yjblwvDMppuKs lu2wmEpEpiLEIJHC1gZWYKjOeCgJa/JEMRNzSU5S+yd+rpTWI6n5CBdduw8EpTTP mqS3nWYuhl+ZXbSSw5HQMPaWXFEab7GN8c0y4Qi8WCZupOivGK8+H7mjyDJJqeSs tDWyt9/Q53T2tC2dWWH0DG16NZoazSNygSntQnhZci44KEb8imCydOr3+WuFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtdbyziy4GA5jJ0dS9i7eNXwdWj8wHwYDVR0j BBgwFoAUFmtJGOehoWQefHnFN4MzeeOTUi4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YzI4NTI5MS1jZTkyLTQxNDQtOWMxOC05ZThjMTkxZGRlYzYvMC8xNjZCNDkxOEU3 QTFBMTY0MUU3Qzc5QzUzNzgzMzM3OUUzOTM1MjJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTY2QjQ5MThFN0ExQTE2NDFFN0M3OUM1Mzc4MzMzNzlFMzkz NTIyRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWMyODUyOTEtY2U5Mi00MTQ0LTlj MTgtOWU4YzE5MWRkZWM2LzAvMTY2QjQ5MThFN0ExQTE2NDFFN0M3OUM1Mzc4MzMz NzlFMzkzNTIyRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJKmyrSr6D1bMRRK8wrah/CEQujgGzuuLoCf kT8Al93o4phE88zUOxaWjxU53j7JiR/Mnzl2zLF0YfEm0ga5/OznVXq/Az1qRqXD vUlOn01bqCbA36NMME+cX26tH2C/ITx/w0QVdsKQl0BihhUahRN58PtccyL6PxyM u67MxckdOTaW7gY732Dm5MBPmpWL44lNAG3QzFtCgERSH+idgIA8340E+pUkYOqh WRNS9n3uyCqXctapss0V1z7WppNaFF1mom4qCiIE/VHKA90CFU/ZU/ufCejF+fIF hS5X4Lez2P0wn5raALzOG2KwQmZlV1s10gpRszB+fMTzrECh2Ic= -----END CERTIFICATE-----Generated at Tue Jun 10 13:20:34 2025 by rpki-client