$ rpki-client -vvf repo-rpki.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0/1160709118182E564A6D9E250FF5000EFA5166A5.mft File: 1160709118182E564A6D9E250FF5000EFA5166A5.mft (raw, json) Hash identifier: W3HfDSfZv/Df3g8pHihg5NeZTnk6eB5lIqsPj5bJNMM= Subject key identifier: 35:2B:86:DD:DE:57:3B:16:62:05:8F:63:1F:D2:A3:B6:20:B6:44:31 Authority key identifier: 11:60:70:91:18:18:2E:56:4A:6D:9E:25:0F:F5:00:0E:FA:51:66:A5 Certificate issuer: /CN=1160709118182E564A6D9E250FF5000EFA5166A5 Certificate serial: 02DAED2410464B7F0B4580AF0EA1CA2E9AB82635 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1160709118182E564A6D9E250FF5000EFA5166A5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0/1160709118182E564A6D9E250FF5000EFA5166A5.mft Manifest number: 0193 Signing time: Sat 06 Sep 2025 16:51:17 +0000 Manifest this update: Sat 06 Sep 2025 16:46:17 +0000 Manifest next update: Wed 10 Sep 2025 03:19:17 +0000 Files and hashes: 1: 1160709118182E564A6D9E250FF5000EFA5166A5.crl (hash: MiF3DSv+EmumdKWniGbDsEABwT74jn3f7W2UR15hsn4=) 2: 3130332e38362e3131362e302f32342d3234203d3e20313530353532.roa (hash: ja3IpRMbJ39xL9dCXnsQKYTFFR+b+ZemcabWb42o+iQ=) 3: 3130332e38362e3131372e302f32342d3234203d3e20313530353532.roa (hash: jLdTwnwuZ2oNm7k6y9AMJvKWkqS7oKk99hplqsfZVHE=) 4: 3130332e38362e3131362e302f32332d3233203d3e20313530353532.roa (hash: BffdL0xKitvxF+n5DIFwc3meIV1XU+P2BJOh3472GOA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0/1160709118182E564A6D9E250FF5000EFA5166A5.crl rsync://repo-rpki.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0/1160709118182E564A6D9E250FF5000EFA5166A5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1160709118182E564A6D9E250FF5000EFA5166A5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 03:19:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:da:ed:24:10:46:4b:7f:0b:45:80:af:0e:a1:ca:2e:9a:b8:26:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1160709118182E564A6D9E250FF5000EFA5166A5 Validity Not Before: Sep 6 16:46:17 2025 GMT Not After : Sep 10 03:19:17 2025 GMT Subject: CN=352B86DDDE573B1662058F631FD2A3B620B64431 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:0d:ef:7d:ad:e9:a2:84:8c:ea:79:4f:94:3d: 7c:b9:00:2f:be:6c:39:48:c0:60:4c:f7:f3:9e:8d: 81:30:81:cd:44:33:3f:35:74:9e:b5:5d:65:65:3e: 87:58:99:4d:d8:76:88:23:7b:2a:0b:77:c4:1a:e6: 0e:9d:ad:63:52:49:2a:37:7e:96:e4:27:9d:4e:b6: d5:aa:b5:bf:14:ff:f0:86:8e:8e:1d:c1:63:b3:ce: f7:69:0d:03:2a:54:8c:43:c0:92:c8:bc:dd:68:08: 90:c3:9c:52:49:21:a2:78:6c:df:93:0d:6e:e5:1e: 09:62:19:03:f8:14:6f:ee:2e:89:b2:91:99:54:e2: d3:2e:8b:d8:b2:88:e3:4d:e0:e6:91:94:e6:44:f2: 34:c6:98:c3:a3:c7:ca:40:55:45:f1:2b:2c:59:00: 2c:08:25:1f:23:8b:a1:f2:f7:71:15:91:55:e8:3e: a8:e3:b7:e9:c4:00:40:91:eb:66:1e:66:98:dc:72: da:4e:be:43:47:b9:95:82:15:fe:de:bd:60:17:55: 90:cf:5c:6f:4a:4d:8b:25:28:09:96:28:f1:aa:75: e0:e8:f6:ad:2e:ea:27:a8:05:9f:16:c1:37:cf:9c: eb:dd:1d:7b:b6:28:68:d8:72:d6:e7:6f:b0:84:c8: f0:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:2B:86:DD:DE:57:3B:16:62:05:8F:63:1F:D2:A3:B6:20:B6:44:31 X509v3 Authority Key Identifier: keyid:11:60:70:91:18:18:2E:56:4A:6D:9E:25:0F:F5:00:0E:FA:51:66:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0/1160709118182E564A6D9E250FF5000EFA5166A5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1160709118182E564A6D9E250FF5000EFA5166A5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0/1160709118182E564A6D9E250FF5000EFA5166A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:6e:75:22:65:ef:29:52:42:89:03:fa:d0:13:18:99:2d:a8: 0b:6b:e2:c9:f4:6f:72:f9:8f:cf:95:15:b8:03:38:52:cf:c3: d3:9f:34:3e:e3:83:ea:33:c8:a0:56:fa:d2:ac:4a:7e:c8:58: d4:89:49:fc:8e:76:c9:f9:53:f5:03:a1:8c:57:d1:bb:4f:cc: 67:ce:02:3f:b9:fd:84:9f:51:98:2b:d0:0b:df:56:1d:9f:0a: ef:e4:19:9f:a0:ec:88:80:bf:cf:0d:81:80:c4:53:48:a3:e7: 2b:62:ac:3d:44:0d:02:1e:43:0e:3b:e4:80:13:5b:91:16:b7: 81:17:50:19:3b:4e:8d:54:1c:de:75:f5:32:12:1f:4e:f7:e4: 6a:f6:ad:86:01:e6:7e:ee:c1:cf:52:a0:2c:b4:cf:9c:46:07: 9c:32:e4:86:d6:14:d7:50:45:e1:0e:f2:b4:43:1a:76:2a:56: a1:5c:40:eb:a0:a5:50:b0:6f:6d:aa:63:62:f1:1c:34:1e:47: 15:2c:5f:b3:de:0d:83:22:e0:de:31:19:1e:6f:e0:2c:12:05: 0f:1a:cd:d8:ce:51:c3:a9:01:57:70:59:cb:df:ca:a8:7d:7f: a4:b6:73:19:11:83:3f:76:92:f2:13:ef:5e:99:0b:b6:c1:21: ad:78:8d:a3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAtrtJBBGS38LRYCvDqHKLpq4JjUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTE2MDcwOTExODE4MkU1NjRBNkQ5RTI1MEZGNTAwMEVG QTUxNjZBNTAeFw0yNTA5MDYxNjQ2MTdaFw0yNTA5MTAwMzE5MTdaMDMxMTAvBgNV BAMTKDM1MkI4NkREREU1NzNCMTY2MjA1OEY2MzFGRDJBM0I2MjBCNjQ0MzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfDe99remihIzqeU+UPXy5AC++ bDlIwGBM9/OejYEwgc1EMz81dJ61XWVlPodYmU3YdogjeyoLd8Qa5g6drWNSSSo3 fpbkJ51OttWqtb8U//CGjo4dwWOzzvdpDQMqVIxDwJLIvN1oCJDDnFJJIaJ4bN+T DW7lHgliGQP4FG/uLomykZlU4tMui9iyiONN4OaRlOZE8jTGmMOjx8pAVUXxKyxZ ACwIJR8ji6Hy93EVkVXoPqjjt+nEAECR62YeZpjcctpOvkNHuZWCFf7evWAXVZDP XG9KTYslKAmWKPGqdeDo9q0u6ieoBZ8WwTfPnOvdHXu2KGjYctbnb7CEyPBVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNSuG3d5XOxZiBY9jH9KjtiC2RDEwHwYDVR0j BBgwFoAUEWBwkRgYLlZKbZ4lD/UADvpRZqUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OTcxOGY2Yi1iNTE2LTQzYWUtYjU4OS04M2EyNWZhYTMwYmUvMC8xMTYwNzA5MTE4 MTgyRTU2NEE2RDlFMjUwRkY1MDAwRUZBNTE2NkE1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTE2MDcwOTExODE4MkU1NjRBNkQ5RTI1MEZGNTAwMEVGQTUx NjZBNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODk3MThmNmItYjUxNi00M2FlLWI1 ODktODNhMjVmYWEzMGJlLzAvMTE2MDcwOTExODE4MkU1NjRBNkQ5RTI1MEZGNTAw MEVGQTUxNjZBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABpudSJl7ylSQokD+tATGJktqAtr4sn0b3L5 j8+VFbgDOFLPw9OfND7jg+ozyKBW+tKsSn7IWNSJSfyOdsn5U/UDoYxX0btPzGfO Aj+5/YSfUZgr0AvfVh2fCu/kGZ+g7IiAv88NgYDEU0ij5ytirD1EDQIeQw475IAT W5EWt4EXUBk7To1UHN519TISH0735Gr2rYYB5n7uwc9SoCy0z5xGB5wy5IbWFNdQ ReEO8rRDGnYqVqFcQOugpVCwb22qY2LxHDQeRxUsX7PeDYMi4N4xGR5v4CwSBQ8a zdjOUcOpAVdwWcvfyqh9f6S2cxkRgz92kvIT716ZC7bBIa14jaM= -----END CERTIFICATE-----Generated at Tue Sep 9 01:24:13 2025 by rpki-client