$ rpki-client -vvf repo-rpki.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/16F8223FA3342ACE31ED864C538E59E22A52BC89.mft File: 16F8223FA3342ACE31ED864C538E59E22A52BC89.mft (raw, json) Hash identifier: 6mcZZMERsTGGx0AW57KiABQAte7m01lScUYgwImG8Jc= Subject key identifier: 51:BD:66:FB:77:4C:30:C9:65:6D:CA:C0:50:65:35:A0:CC:C6:B6:9B Authority key identifier: 16:F8:22:3F:A3:34:2A:CE:31:ED:86:4C:53:8E:59:E2:2A:52:BC:89 Certificate issuer: /CN=16F8223FA3342ACE31ED864C538E59E22A52BC89 Certificate serial: 454C525B1E515737A278A1BEB2DE506373E45507 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/16F8223FA3342ACE31ED864C538E59E22A52BC89.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/16F8223FA3342ACE31ED864C538E59E22A52BC89.mft Manifest number: 64 Signing time: Wed 23 Jul 2025 11:31:09 +0000 Manifest this update: Wed 23 Jul 2025 11:26:09 +0000 Manifest next update: Sat 26 Jul 2025 20:47:09 +0000 Files and hashes: 1: 16F8223FA3342ACE31ED864C538E59E22A52BC89.crl (hash: oCRXFo9UvxtjLyZb4p/lBJTiBVN7FjNi3mnjANE2HNQ=) 2: 3136302e32352e3135372e302f32342d3234203d3e20313533303835.roa (hash: aKd9F4ACmgNItMgz+uXKOhQG73PpNtSpdGFc0rlMBFo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/16F8223FA3342ACE31ED864C538E59E22A52BC89.crl rsync://repo-rpki.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/16F8223FA3342ACE31ED864C538E59E22A52BC89.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/16F8223FA3342ACE31ED864C538E59E22A52BC89.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 14:09:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:4c:52:5b:1e:51:57:37:a2:78:a1:be:b2:de:50:63:73:e4:55:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16F8223FA3342ACE31ED864C538E59E22A52BC89 Validity Not Before: Jul 23 11:26:09 2025 GMT Not After : Jul 26 20:47:09 2025 GMT Subject: CN=51BD66FB774C30C9656DCAC0506535A0CCC6B69B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:15:6f:d1:f5:f0:4b:fa:d2:44:ee:cd:5d:de: b4:df:39:14:60:f2:af:bb:f5:8d:28:19:8c:22:64: b7:0a:53:45:6b:8b:84:c8:3c:84:b1:8e:85:95:a8: 16:28:6c:76:e3:03:43:ca:4a:90:92:a9:85:4c:2e: 74:02:11:ae:4b:c9:78:56:2e:1b:03:22:64:37:5e: 22:9e:40:0d:ef:f6:2e:47:ec:e4:d2:f5:de:4a:df: c9:3b:7a:46:a9:85:7f:a1:a4:fc:5b:25:bb:d2:6c: 38:28:32:6b:fa:b6:1e:4d:70:00:84:60:3a:12:52: 7a:cf:4f:0a:56:1a:4d:1e:cb:5e:37:3a:87:f1:70: f9:d1:83:ba:df:0a:3f:6c:83:21:28:3b:4a:f0:1e: cb:5d:a1:43:ff:10:37:ff:f2:81:18:72:e2:74:bd: e7:20:1b:8f:ff:ef:82:15:dc:b8:a8:1d:5d:25:c2: 52:7b:e3:05:56:e9:55:9e:0a:89:9d:93:fe:80:02: d0:23:78:38:fb:21:9d:20:a9:a9:06:fc:7d:c5:d0: 08:bd:2c:8a:34:1b:68:92:8e:96:06:b4:ee:6e:ce: a2:24:e3:b0:57:a6:ef:e9:93:7b:ba:e7:1e:33:e9: bc:7e:75:1c:35:f6:db:01:ec:57:8c:39:48:40:03: 5e:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:BD:66:FB:77:4C:30:C9:65:6D:CA:C0:50:65:35:A0:CC:C6:B6:9B X509v3 Authority Key Identifier: keyid:16:F8:22:3F:A3:34:2A:CE:31:ED:86:4C:53:8E:59:E2:2A:52:BC:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/16F8223FA3342ACE31ED864C538E59E22A52BC89.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/16F8223FA3342ACE31ED864C538E59E22A52BC89.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/16F8223FA3342ACE31ED864C538E59E22A52BC89.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:4a:04:9a:42:a9:0d:13:20:95:00:38:b7:d3:b3:e8:6a:25: df:8a:6f:2a:f2:ea:6b:25:5a:16:73:db:e0:79:b4:2a:be:82: c4:4a:55:8a:38:bf:07:29:c9:89:c8:73:c8:fd:de:09:12:e2: 66:fb:8a:48:ed:92:61:9e:1a:45:c4:0c:99:a5:54:d9:ae:ca: 20:f6:fb:6e:57:e6:d7:e6:b5:fa:15:35:16:45:55:4a:8b:b2: 9a:8b:c7:0e:e7:52:96:ab:eb:53:22:c7:81:fa:ef:bd:b3:65: 50:a3:7f:ac:f7:84:0c:ab:61:5a:9a:8a:2f:35:07:7a:1b:97: a2:3b:1e:15:91:28:2a:a6:1c:04:ad:3f:a0:16:9f:cf:97:73: 6a:58:a5:56:69:bc:c7:6b:20:f0:bb:0e:cb:01:d9:05:4b:72: 6f:25:c2:bb:4b:df:ad:91:3f:7c:e3:c2:90:f3:54:5a:c5:52: 4d:28:fb:39:d3:86:52:1c:02:fe:5a:82:8e:e5:f6:fe:8a:8e: 9f:2e:01:a0:11:62:63:40:f3:a7:0c:e6:25:0b:24:f8:43:39: 57:fc:41:5c:b9:4b:c0:8b:2d:ea:28:b9:e7:ed:33:1b:25:e8: 89:cf:a3:1d:61:59:7d:b7:bd:2c:a7:78:e5:af:5f:1a:63:06: 7c:68:be:04 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURUxSWx5RVzeieKG+st5QY3PkVQcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTZGODIyM0ZBMzM0MkFDRTMxRUQ4NjRDNTM4RTU5RTIy QTUyQkM4OTAeFw0yNTA3MjMxMTI2MDlaFw0yNTA3MjYyMDQ3MDlaMDMxMTAvBgNV BAMTKDUxQkQ2NkZCNzc0QzMwQzk2NTZEQ0FDMDUwNjUzNUEwQ0NDNkI2OUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0FW/R9fBL+tJE7s1d3rTfORRg 8q+79Y0oGYwiZLcKU0Vri4TIPISxjoWVqBYobHbjA0PKSpCSqYVMLnQCEa5LyXhW LhsDImQ3XiKeQA3v9i5H7OTS9d5K38k7ekaphX+hpPxbJbvSbDgoMmv6th5NcACE YDoSUnrPTwpWGk0ey143OofxcPnRg7rfCj9sgyEoO0rwHstdoUP/EDf/8oEYcuJ0 vecgG4//74IV3LioHV0lwlJ74wVW6VWeComdk/6AAtAjeDj7IZ0gqakG/H3F0Ai9 LIo0G2iSjpYGtO5uzqIk47BXpu/pk3u65x4z6bx+dRw19tsB7FeMOUhAA16ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUb1m+3dMMMllbcrAUGU1oMzGtpswHwYDVR0j BBgwFoAUFvgiP6M0Ks4x7YZMU45Z4ipSvIkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j M2E5ZDc4OC1iY2Y3LTQ2ZjAtOGI1Yi0wZDdkMWZjYjZkYTMvMC8xNkY4MjIzRkEz MzQyQUNFMzFFRDg2NEM1MzhFNTlFMjJBNTJCQzg5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMTZGODIyM0ZBMzM0MkFDRTMxRUQ4NjRDNTM4RTU5RTIyQTUy QkM4OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzNhOWQ3ODgtYmNmNy00NmYwLThi NWItMGQ3ZDFmY2I2ZGEzLzAvMTZGODIyM0ZBMzM0MkFDRTMxRUQ4NjRDNTM4RTU5 RTIyQTUyQkM4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACVKBJpCqQ0TIJUAOLfTs+hqJd+Kbyry6msl WhZz2+B5tCq+gsRKVYo4vwcpyYnIc8j93gkS4mb7ikjtkmGeGkXEDJmlVNmuyiD2 +25X5tfmtfoVNRZFVUqLspqLxw7nUpar61Mix4H6772zZVCjf6z3hAyrYVqaii81 B3obl6I7HhWRKCqmHAStP6AWn8+Xc2pYpVZpvMdrIPC7DssB2QVLcm8lwrtL362R P3zjwpDzVFrFUk0o+znThlIcAv5ago7l9v6Kjp8uAaARYmNA86cM5iULJPhDOVf8 QVy5S8CLLeooueftMxsl6InPox1hWX23vSyneOWvXxpjBnxovgQ= -----END CERTIFICATE-----Generated at Thu Jul 24 08:15:18 2025 by rpki-client