$ rpki-client -vvf repo-rpki.idnic.net/repo/de3f2e9b-1068-4fa9-ba1d-59d071a412a2/0/16889A9053AE7EB169CF822E9EE670A5C618F97E.mft File: 16889A9053AE7EB169CF822E9EE670A5C618F97E.mft (raw, json) Hash identifier: d8Eh9hRHnrIOLh8uutmpr/NidpGbN5RWJLT21kIR6Gs= Subject key identifier: 43:FA:2A:24:30:F7:D0:E3:CE:A8:68:AF:79:7A:84:2A:61:17:24:9E Authority key identifier: 16:88:9A:90:53:AE:7E:B1:69:CF:82:2E:9E:E6:70:A5:C6:18:F9:7E Certificate issuer: /CN=16889A9053AE7EB169CF822E9EE670A5C618F97E Certificate serial: 0D728289909B4355F7ED45070C64C2D2E258E392 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/16889A9053AE7EB169CF822E9EE670A5C618F97E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/de3f2e9b-1068-4fa9-ba1d-59d071a412a2/0/16889A9053AE7EB169CF822E9EE670A5C618F97E.mft Manifest number: 0117 Signing time: Mon 28 Jul 2025 04:51:09 +0000 Manifest this update: Mon 28 Jul 2025 04:46:09 +0000 Manifest next update: Thu 31 Jul 2025 15:51:09 +0000 Files and hashes: 1: 3130332e36372e38302e302f32332d3233203d3e20313532303031.roa (hash: dOd/WmcL1O2XqOSnpwsMSYP0+oN55Jz82rLt6CdY2eM=) 2: 3130332e36372e38302e302f32342d3234203d3e20313532303031.roa (hash: km/J3O6wA+/+giyqpUHqvd0x617eyhN+dq0ZwqMW8PA=) 3: 16889A9053AE7EB169CF822E9EE670A5C618F97E.crl (hash: 09LVV1s09MRjMUpYtNXzW1vjuCKUqUQeopbom92AyeU=) 4: 3130332e36372e38312e302f32342d3234203d3e20313532303031.roa (hash: VUXxXSjdw/tewePYso0nLi7PuBiFv1hIb0UmgFSc+fg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/de3f2e9b-1068-4fa9-ba1d-59d071a412a2/0/16889A9053AE7EB169CF822E9EE670A5C618F97E.crl rsync://repo-rpki.idnic.net/repo/de3f2e9b-1068-4fa9-ba1d-59d071a412a2/0/16889A9053AE7EB169CF822E9EE670A5C618F97E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/16889A9053AE7EB169CF822E9EE670A5C618F97E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 31 Jul 2025 15:51:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:72:82:89:90:9b:43:55:f7:ed:45:07:0c:64:c2:d2:e2:58:e3:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16889A9053AE7EB169CF822E9EE670A5C618F97E Validity Not Before: Jul 28 04:46:09 2025 GMT Not After : Jul 31 15:51:09 2025 GMT Subject: CN=43FA2A2430F7D0E3CEA868AF797A842A6117249E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:c7:4b:84:48:b6:b9:49:07:65:cc:32:80:09: ce:25:6c:ef:b3:a2:cc:51:2a:a0:1e:f4:be:31:e0: 5b:4f:c9:84:f6:94:74:30:fa:fa:57:cd:bc:98:18: 89:81:09:3a:c8:7c:99:ff:9e:cd:4b:93:d3:7b:e5: 8a:f1:e7:da:3a:2a:ea:d4:0e:9d:e0:37:19:c3:e2: 6c:6e:05:f1:28:3b:7c:1e:9a:c6:e9:5a:34:d7:d6: 18:44:75:cb:de:23:e1:e2:88:4f:e1:a7:2e:e4:60: b0:e8:84:2b:9f:92:9e:28:d1:ba:fc:2f:cf:fa:2d: 35:c0:18:e2:f9:ad:e8:29:77:07:1b:38:76:80:a1: 88:ee:18:b9:f4:1c:f0:ec:2c:d0:bb:aa:e1:a2:0b: 44:f9:05:fa:f0:f6:ee:ae:d4:1d:b8:a7:ce:fc:95: a2:1a:e1:09:67:32:9c:9d:b3:72:c6:03:35:e4:f3: c0:8c:b0:d9:8c:23:3b:15:32:76:15:40:0d:70:5e: fe:fb:7a:e2:ca:b3:69:0d:55:35:38:14:bf:25:93: 33:60:c0:ce:51:6f:e7:10:97:51:03:2b:09:c7:31: d4:6a:2c:96:f7:a7:4f:7b:9b:d2:4c:a9:29:5e:d8: c4:7c:19:fb:f2:e6:1f:1a:06:9b:bd:3d:f4:1b:1b: 8f:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:FA:2A:24:30:F7:D0:E3:CE:A8:68:AF:79:7A:84:2A:61:17:24:9E X509v3 Authority Key Identifier: keyid:16:88:9A:90:53:AE:7E:B1:69:CF:82:2E:9E:E6:70:A5:C6:18:F9:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/de3f2e9b-1068-4fa9-ba1d-59d071a412a2/0/16889A9053AE7EB169CF822E9EE670A5C618F97E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/16889A9053AE7EB169CF822E9EE670A5C618F97E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/de3f2e9b-1068-4fa9-ba1d-59d071a412a2/0/16889A9053AE7EB169CF822E9EE670A5C618F97E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:26:e7:e9:04:db:36:1e:e2:71:d4:29:10:a4:ad:64:87:e3: 31:5e:b0:a9:59:c9:be:6d:f1:c9:79:54:b7:f6:41:29:19:af: d5:05:78:65:89:8a:e2:ed:05:9a:b5:47:61:39:28:b6:46:75: 57:82:61:67:6b:23:29:5b:4d:2d:5c:4b:8c:50:1f:b3:22:72: cc:d1:55:8a:19:c3:c5:e9:49:90:dd:9a:fe:c1:d8:46:b6:0d: 19:59:cc:9a:22:60:bf:19:0a:bf:d8:b1:54:d5:5c:b6:9b:ac: fb:80:2c:7e:a8:30:e8:a5:24:4c:f1:0a:ae:af:33:44:8f:17: 8e:2a:62:65:32:21:07:42:95:15:17:16:a2:4b:34:bd:1f:03: b1:0e:06:5d:d5:f9:fb:4e:fb:9b:07:3f:19:fc:9a:3d:4f:5e: d2:f1:10:b7:88:43:c5:f2:5f:45:23:24:31:1e:27:0f:3d:db: a1:f4:0b:62:5b:d4:55:8f:a2:2a:f5:1b:30:bc:c8:4d:47:b3: e8:e4:68:96:f5:34:a5:b0:e5:1b:c6:fe:ab:9f:c6:aa:d9:ed: e0:69:b8:be:11:56:d7:b6:a2:50:55:16:4b:ae:e7:5d:4c:5a: fd:7b:bd:87:b1:01:49:1f:d6:bb:d5:7c:3b:35:a6:0d:25:9e: 80:f2:d1:77 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDXKCiZCbQ1X37UUHDGTC0uJY45IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTY4ODlBOTA1M0FFN0VCMTY5Q0Y4MjJFOUVFNjcwQTVD NjE4Rjk3RTAeFw0yNTA3MjgwNDQ2MDlaFw0yNTA3MzExNTUxMDlaMDMxMTAvBgNV BAMTKDQzRkEyQTI0MzBGN0QwRTNDRUE4NjhBRjc5N0E4NDJBNjExNzI0OUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQx0uESLa5SQdlzDKACc4lbO+z osxRKqAe9L4x4FtPyYT2lHQw+vpXzbyYGImBCTrIfJn/ns1Lk9N75Yrx59o6KurU Dp3gNxnD4mxuBfEoO3wemsbpWjTX1hhEdcveI+HiiE/hpy7kYLDohCufkp4o0br8 L8/6LTXAGOL5regpdwcbOHaAoYjuGLn0HPDsLNC7quGiC0T5Bfrw9u6u1B24p878 laIa4QlnMpyds3LGAzXk88CMsNmMIzsVMnYVQA1wXv77euLKs2kNVTU4FL8lkzNg wM5Rb+cQl1EDKwnHMdRqLJb3p097m9JMqSle2MR8Gfvy5h8aBpu9PfQbG4/PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQ/oqJDD30OPOqGiveXqEKmEXJJ4wHwYDVR0j BBgwFoAUFoiakFOufrFpz4IunuZwpcYY+X4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZTNmMmU5Yi0xMDY4LTRmYTktYmExZC01OWQwNzFhNDEyYTIvMC8xNjg4OUE5MDUz QUU3RUIxNjlDRjgyMkU5RUU2NzBBNUM2MThGOTdFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTY4ODlBOTA1M0FFN0VCMTY5Q0Y4MjJFOUVFNjcwQTVDNjE4 Rjk3RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGUzZjJlOWItMTA2OC00ZmE5LWJh MWQtNTlkMDcxYTQxMmEyLzAvMTY4ODlBOTA1M0FFN0VCMTY5Q0Y4MjJFOUVFNjcw QTVDNjE4Rjk3RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABgm5+kE2zYe4nHUKRCkrWSH4zFesKlZyb5t 8cl5VLf2QSkZr9UFeGWJiuLtBZq1R2E5KLZGdVeCYWdrIylbTS1cS4xQH7MicszR VYoZw8XpSZDdmv7B2Ea2DRlZzJoiYL8ZCr/YsVTVXLabrPuALH6oMOilJEzxCq6v M0SPF44qYmUyIQdClRUXFqJLNL0fA7EOBl3V+ftO+5sHPxn8mj1PXtLxELeIQ8Xy X0UjJDEeJw8926H0C2Jb1FWPoir1GzC8yE1Hs+jkaJb1NKWw5RvG/qufxqrZ7eBp uL4RVte2olBVFkuu511MWv17vYexAUkf1rvVfDs1pg0lnoDy0Xc= -----END CERTIFICATE-----Generated at Tue Jul 29 00:15:08 2025 by rpki-client