$ rpki-client -vvf repo-rpki.idnic.net/repo/de3f2e9b-1068-4fa9-ba1d-59d071a412a2/0/16889A9053AE7EB169CF822E9EE670A5C618F97E.mft File: 16889A9053AE7EB169CF822E9EE670A5C618F97E.mft (raw, json) Hash identifier: MC6RK+3HrSgClU4TyjjbNoqbcQSRXWFYwl9rSEoUVUo= Subject key identifier: BF:FA:81:6D:83:BC:97:E4:E7:EA:8F:12:C8:3D:5C:F4:72:E8:25:CD Authority key identifier: 16:88:9A:90:53:AE:7E:B1:69:CF:82:2E:9E:E6:70:A5:C6:18:F9:7E Certificate issuer: /CN=16889A9053AE7EB169CF822E9EE670A5C618F97E Certificate serial: 52551FB100639F8B7BAE6C5D62F0564D48AE7756 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/16889A9053AE7EB169CF822E9EE670A5C618F97E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/de3f2e9b-1068-4fa9-ba1d-59d071a412a2/0/16889A9053AE7EB169CF822E9EE670A5C618F97E.mft Manifest number: FF Signing time: Tue 03 Jun 2025 14:31:19 +0000 Manifest this update: Tue 03 Jun 2025 14:26:19 +0000 Manifest next update: Fri 06 Jun 2025 17:53:19 +0000 Files and hashes: 1: 16889A9053AE7EB169CF822E9EE670A5C618F97E.crl (hash: bYSpDE/V0H5OKSNk+b413N2W5IPPKHSd1p0ECBaN+H8=) 2: 3130332e36372e38302e302f32342d3234203d3e20313532303031.roa (hash: km/J3O6wA+/+giyqpUHqvd0x617eyhN+dq0ZwqMW8PA=) 3: 3130332e36372e38302e302f32332d3233203d3e20313532303031.roa (hash: dOd/WmcL1O2XqOSnpwsMSYP0+oN55Jz82rLt6CdY2eM=) 4: 3130332e36372e38312e302f32342d3234203d3e20313532303031.roa (hash: VUXxXSjdw/tewePYso0nLi7PuBiFv1hIb0UmgFSc+fg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/de3f2e9b-1068-4fa9-ba1d-59d071a412a2/0/16889A9053AE7EB169CF822E9EE670A5C618F97E.crl rsync://repo-rpki.idnic.net/repo/de3f2e9b-1068-4fa9-ba1d-59d071a412a2/0/16889A9053AE7EB169CF822E9EE670A5C618F97E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/16889A9053AE7EB169CF822E9EE670A5C618F97E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 17:53:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:55:1f:b1:00:63:9f:8b:7b:ae:6c:5d:62:f0:56:4d:48:ae:77:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16889A9053AE7EB169CF822E9EE670A5C618F97E Validity Not Before: Jun 3 14:26:19 2025 GMT Not After : Jun 6 17:53:19 2025 GMT Subject: CN=BFFA816D83BC97E4E7EA8F12C83D5CF472E825CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:dd:01:a0:92:70:00:c6:fc:fc:65:1e:31:3b: dc:0b:b1:47:fe:d8:b4:67:7a:78:c7:81:34:c2:bb: 1d:d4:b6:7b:d3:b1:79:81:f0:da:14:cd:3e:8a:31: db:44:ad:58:39:c8:7d:5f:c7:68:d7:a0:2d:43:52: 0b:a7:aa:59:32:85:6a:c6:d9:59:eb:37:70:57:9f: 03:c2:60:a8:bd:a2:05:a4:cb:0f:80:88:51:2c:45: 6e:5b:91:81:9c:98:93:23:73:8b:cc:df:71:2c:0c: e8:dd:ef:33:41:04:5d:e2:3e:1f:d6:9b:75:e2:c6: af:49:05:9e:ad:db:e5:7e:3a:65:09:0c:a2:fd:8b: 2b:62:64:58:dc:e2:67:0e:9e:dc:a6:3d:51:15:c0: 07:19:93:44:91:ba:80:e6:9b:bb:95:7b:03:11:69: 72:72:17:15:d8:8a:c0:05:19:42:42:ed:64:de:5c: 78:26:33:7d:65:29:d9:26:ba:fe:60:76:7a:a4:27: f0:a4:e2:a5:a1:18:37:23:07:c4:1d:5d:94:78:f0: f3:98:8d:91:95:28:fc:00:87:66:60:ce:28:7e:5c: 54:4e:e8:a4:eb:89:0b:ee:ca:d5:72:14:81:6b:73: 8c:1b:e0:de:22:81:b6:07:ab:27:99:bd:31:8b:94: 76:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:FA:81:6D:83:BC:97:E4:E7:EA:8F:12:C8:3D:5C:F4:72:E8:25:CD X509v3 Authority Key Identifier: keyid:16:88:9A:90:53:AE:7E:B1:69:CF:82:2E:9E:E6:70:A5:C6:18:F9:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/de3f2e9b-1068-4fa9-ba1d-59d071a412a2/0/16889A9053AE7EB169CF822E9EE670A5C618F97E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/16889A9053AE7EB169CF822E9EE670A5C618F97E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/de3f2e9b-1068-4fa9-ba1d-59d071a412a2/0/16889A9053AE7EB169CF822E9EE670A5C618F97E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:51:d6:60:72:7f:9f:48:11:90:31:bc:60:28:8d:6d:5a:1b: 61:44:76:54:85:3b:12:8b:47:61:85:2c:53:56:a5:04:e6:ac: be:85:47:07:b1:55:e7:f4:90:95:88:ff:21:6b:97:ed:2c:7b: fd:39:7a:2e:c2:01:b1:ae:1c:09:a8:e9:5c:eb:22:b9:ca:a5: 4c:7a:dd:2a:58:83:5d:ad:3b:fe:a6:ac:df:8d:54:6c:55:20: 9a:e1:3e:fb:e1:06:bf:fe:8a:da:4a:06:23:2d:26:09:c1:4d: 6c:ed:4c:c9:7d:b2:57:85:50:bf:9a:79:21:b2:c5:29:f9:c7: bf:ee:da:68:6f:3f:02:19:c7:da:71:8a:7b:99:b9:fa:f6:db: e6:22:55:ab:6f:b1:5a:f0:40:3b:6e:6b:2c:72:a7:06:e0:40: 75:9f:4a:1b:ed:3e:56:ba:0c:20:95:5b:bf:19:4f:1f:4f:b1: d8:73:f6:0a:87:c3:2c:b3:7c:7a:f4:03:3b:cf:63:6e:27:f5: a6:e0:e5:15:d0:6f:0b:b4:e1:dc:ae:dd:c6:91:dc:58:7b:68: 45:f6:a9:77:12:01:43:eb:72:40:8e:21:62:de:8c:83:2d:f5: 4f:10:75:dc:4f:88:39:fb:5e:d7:5e:89:1f:86:07:b9:bd:c2: 3c:f6:25:cf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUlUfsQBjn4t7rmxdYvBWTUiud1YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTY4ODlBOTA1M0FFN0VCMTY5Q0Y4MjJFOUVFNjcwQTVD NjE4Rjk3RTAeFw0yNTA2MDMxNDI2MTlaFw0yNTA2MDYxNzUzMTlaMDMxMTAvBgNV BAMTKEJGRkE4MTZEODNCQzk3RTRFN0VBOEYxMkM4M0Q1Q0Y0NzJFODI1Q0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy3QGgknAAxvz8ZR4xO9wLsUf+ 2LRnenjHgTTCux3UtnvTsXmB8NoUzT6KMdtErVg5yH1fx2jXoC1DUgunqlkyhWrG 2VnrN3BXnwPCYKi9ogWkyw+AiFEsRW5bkYGcmJMjc4vM33EsDOjd7zNBBF3iPh/W m3Xixq9JBZ6t2+V+OmUJDKL9iytiZFjc4mcOntymPVEVwAcZk0SRuoDmm7uVewMR aXJyFxXYisAFGUJC7WTeXHgmM31lKdkmuv5gdnqkJ/Ck4qWhGDcjB8QdXZR48POY jZGVKPwAh2Zgzih+XFRO6KTriQvuytVyFIFrc4wb4N4igbYHqyeZvTGLlHYbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUv/qBbYO8l+Tn6o8SyD1c9HLoJc0wHwYDVR0j BBgwFoAUFoiakFOufrFpz4IunuZwpcYY+X4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZTNmMmU5Yi0xMDY4LTRmYTktYmExZC01OWQwNzFhNDEyYTIvMC8xNjg4OUE5MDUz QUU3RUIxNjlDRjgyMkU5RUU2NzBBNUM2MThGOTdFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTY4ODlBOTA1M0FFN0VCMTY5Q0Y4MjJFOUVFNjcwQTVDNjE4 Rjk3RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGUzZjJlOWItMTA2OC00ZmE5LWJh MWQtNTlkMDcxYTQxMmEyLzAvMTY4ODlBOTA1M0FFN0VCMTY5Q0Y4MjJFOUVFNjcw QTVDNjE4Rjk3RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHdR1mByf59IEZAxvGAojW1aG2FEdlSFOxKL R2GFLFNWpQTmrL6FRwexVef0kJWI/yFrl+0se/05ei7CAbGuHAmo6VzrIrnKpUx6 3SpYg12tO/6mrN+NVGxVIJrhPvvhBr/+itpKBiMtJgnBTWztTMl9sleFUL+aeSGy xSn5x7/u2mhvPwIZx9pxinuZufr22+YiVatvsVrwQDtuayxypwbgQHWfShvtPla6 DCCVW78ZTx9Psdhz9gqHwyyzfHr0AzvPY24n9abg5RXQbwu04dyu3caR3Fh7aEX2 qXcSAUPrckCOIWLejIMt9U8QddxPiDn7XtdeiR+GB7m9wjz2Jc8= -----END CERTIFICATE-----Generated at Tue Jun 3 23:55:54 2025 by rpki-client