$ rpki-client -vvf repo-rpki.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/16F8223FA3342ACE31ED864C538E59E22A52BC89.mft File: 16F8223FA3342ACE31ED864C538E59E22A52BC89.mft (raw, json) Hash identifier: WKPuaVSe95q4Q7JE4KJS+CUbcdt+Uk0e1QYtPM3cJNU= Subject key identifier: 73:47:CA:B8:DE:63:6D:70:54:53:A5:67:42:85:92:2F:DA:6C:C4:03 Authority key identifier: 16:F8:22:3F:A3:34:2A:CE:31:ED:86:4C:53:8E:59:E2:2A:52:BC:89 Certificate issuer: /CN=16F8223FA3342ACE31ED864C538E59E22A52BC89 Certificate serial: 400E3DEF14736EED6F19D0D712B8A0561C45011B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/16F8223FA3342ACE31ED864C538E59E22A52BC89.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/16F8223FA3342ACE31ED864C538E59E22A52BC89.mft Manifest number: 4F Signing time: Fri 06 Jun 2025 04:21:11 +0000 Manifest this update: Fri 06 Jun 2025 04:16:11 +0000 Manifest next update: Mon 09 Jun 2025 15:46:11 +0000 Files and hashes: 1: 16F8223FA3342ACE31ED864C538E59E22A52BC89.crl (hash: PUVrW7ZO9ccKCUNq1K9sgGc9R7FBxeX1qh6iozib4Ws=) 2: 3136302e32352e3135372e302f32342d3234203d3e20313533303835.roa (hash: aKd9F4ACmgNItMgz+uXKOhQG73PpNtSpdGFc0rlMBFo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/16F8223FA3342ACE31ED864C538E59E22A52BC89.crl rsync://repo-rpki.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/16F8223FA3342ACE31ED864C538E59E22A52BC89.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/16F8223FA3342ACE31ED864C538E59E22A52BC89.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 15:46:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:0e:3d:ef:14:73:6e:ed:6f:19:d0:d7:12:b8:a0:56:1c:45:01:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16F8223FA3342ACE31ED864C538E59E22A52BC89 Validity Not Before: Jun 6 04:16:11 2025 GMT Not After : Jun 9 15:46:11 2025 GMT Subject: CN=7347CAB8DE636D705453A5674285922FDA6CC403 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:9e:3b:fe:12:81:9e:6f:2f:38:5a:ab:6e:43: 67:24:38:fc:d5:2c:10:3a:db:9d:f6:6c:b4:da:48: 76:1c:83:af:68:16:10:8a:e0:4f:22:bf:e2:a8:68: a3:16:81:eb:45:63:7e:dc:e7:d5:59:f8:b7:2c:38: d3:cb:fd:d9:1f:d1:6c:9a:27:a9:9f:e6:59:55:5c: df:51:ec:b0:a4:5d:85:86:71:dc:27:8d:27:5c:66: 47:71:c1:6d:76:f0:81:26:65:d8:dd:b6:b7:d4:f7: 79:46:d9:c1:61:93:cf:db:da:1e:94:5a:09:eb:3a: c0:fb:01:04:70:c9:db:ce:57:7b:6e:0c:ca:62:94: 0d:37:ce:71:97:d5:41:6c:e8:83:0a:41:79:24:b1: bd:83:0a:6d:12:a5:f5:59:cc:c3:bf:90:04:69:e5: 13:0c:57:f2:ab:ab:7e:32:c7:b1:f2:c2:02:59:90: 26:7e:e6:71:1d:f7:af:80:88:b1:23:68:ec:73:e2: 95:91:df:df:0e:53:b6:52:71:7d:e3:96:0b:98:60: 15:dd:86:67:77:d6:0a:3e:62:71:94:71:2f:65:8b: 9b:c4:49:f1:77:6c:13:f4:e3:c3:31:8d:b6:85:65: 8a:3f:d7:0f:4a:ec:c9:d0:10:db:c5:db:f0:c1:cc: 18:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:47:CA:B8:DE:63:6D:70:54:53:A5:67:42:85:92:2F:DA:6C:C4:03 X509v3 Authority Key Identifier: keyid:16:F8:22:3F:A3:34:2A:CE:31:ED:86:4C:53:8E:59:E2:2A:52:BC:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/16F8223FA3342ACE31ED864C538E59E22A52BC89.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/16F8223FA3342ACE31ED864C538E59E22A52BC89.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/16F8223FA3342ACE31ED864C538E59E22A52BC89.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:39:93:79:85:e5:fb:4b:93:d7:cf:68:23:50:b1:a8:25:d1: 84:56:1a:b3:9f:e8:0d:89:e4:09:11:94:ab:d4:e6:6d:a0:83: 1c:84:89:c3:f7:c7:d6:9c:dd:f7:99:47:34:a4:5d:4b:d6:e6: 3a:58:f7:73:f8:2c:8d:ef:2f:a1:fd:97:d7:97:a3:a6:90:81: b6:0b:23:85:80:95:c5:5f:c3:6c:aa:00:56:79:bd:b7:56:e6: e0:1c:e8:95:0c:a2:75:93:4c:9e:c8:44:63:9b:ae:1f:cb:1e: 74:4d:11:ba:16:86:65:5c:23:9c:cb:ef:10:fc:dd:de:7e:e1: 7f:d7:44:c0:7a:95:15:e2:59:61:e2:77:b6:5c:ab:d0:11:ec: e2:b4:63:96:cf:2f:e8:d0:42:66:8c:92:ac:7b:bf:5b:d3:c2: 2b:d3:e5:6b:77:ee:7d:b3:a5:f8:ac:3a:7f:38:c1:df:3a:d9: 81:ca:5c:c2:80:e8:71:c0:19:1e:6c:d2:a4:32:7c:a9:fb:30: 59:ff:bc:77:92:7d:3f:be:db:5b:b4:5f:4b:a7:6e:fa:13:18: 67:3a:dd:35:a8:7c:9d:66:40:cf:e8:c2:e8:92:81:7e:83:57: cb:3a:41:de:68:df:b3:29:af:eb:22:75:d6:a1:b1:04:9d:d0: 24:86:ce:76 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQA497xRzbu1vGdDXErigVhxFARswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTZGODIyM0ZBMzM0MkFDRTMxRUQ4NjRDNTM4RTU5RTIy QTUyQkM4OTAeFw0yNTA2MDYwNDE2MTFaFw0yNTA2MDkxNTQ2MTFaMDMxMTAvBgNV BAMTKDczNDdDQUI4REU2MzZENzA1NDUzQTU2NzQyODU5MjJGREE2Q0M0MDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5njv+EoGeby84WqtuQ2ckOPzV LBA62532bLTaSHYcg69oFhCK4E8iv+KoaKMWgetFY37c59VZ+LcsONPL/dkf0Wya J6mf5llVXN9R7LCkXYWGcdwnjSdcZkdxwW128IEmZdjdtrfU93lG2cFhk8/b2h6U WgnrOsD7AQRwydvOV3tuDMpilA03znGX1UFs6IMKQXkksb2DCm0SpfVZzMO/kARp 5RMMV/Krq34yx7HywgJZkCZ+5nEd96+AiLEjaOxz4pWR398OU7ZScX3jlguYYBXd hmd31go+YnGUcS9li5vESfF3bBP048MxjbaFZYo/1w9K7MnQENvF2/DBzBgjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUc0fKuN5jbXBUU6VnQoWSL9psxAMwHwYDVR0j BBgwFoAUFvgiP6M0Ks4x7YZMU45Z4ipSvIkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j M2E5ZDc4OC1iY2Y3LTQ2ZjAtOGI1Yi0wZDdkMWZjYjZkYTMvMC8xNkY4MjIzRkEz MzQyQUNFMzFFRDg2NEM1MzhFNTlFMjJBNTJCQzg5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMTZGODIyM0ZBMzM0MkFDRTMxRUQ4NjRDNTM4RTU5RTIyQTUy QkM4OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzNhOWQ3ODgtYmNmNy00NmYwLThi NWItMGQ3ZDFmY2I2ZGEzLzAvMTZGODIyM0ZBMzM0MkFDRTMxRUQ4NjRDNTM4RTU5 RTIyQTUyQkM4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKM5k3mF5ftLk9fPaCNQsagl0YRWGrOf6A2J 5AkRlKvU5m2ggxyEicP3x9ac3feZRzSkXUvW5jpY93P4LI3vL6H9l9eXo6aQgbYL I4WAlcVfw2yqAFZ5vbdW5uAc6JUMonWTTJ7IRGObrh/LHnRNEboWhmVcI5zL7xD8 3d5+4X/XRMB6lRXiWWHid7Zcq9AR7OK0Y5bPL+jQQmaMkqx7v1vTwivT5Wt37n2z pfisOn84wd862YHKXMKA6HHAGR5s0qQyfKn7MFn/vHeSfT++21u0X0unbvoTGGc6 3TWofJ1mQM/owuiSgX6DV8s6Qd5o37Mpr+siddahsQSd0CSGznY= -----END CERTIFICATE-----Generated at Sun Jun 8 03:48:48 2025 by rpki-client