$ rpki-client -vvf repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/C16E46D556A47D2429EC847E95E7C429D38AC26D.mft File: C16E46D556A47D2429EC847E95E7C429D38AC26D.mft (raw, json) Hash identifier: u0ZF+/lH8OIUEhZmtvEodm18/JZs+1hzWufIj2HGa1w= Subject key identifier: 8C:D4:85:D7:BC:41:C5:7C:50:F1:82:19:69:47:4A:BD:9F:22:0B:39 Authority key identifier: C1:6E:46:D5:56:A4:7D:24:29:EC:84:7E:95:E7:C4:29:D3:8A:C2:6D Certificate issuer: /CN=C16E46D556A47D2429EC847E95E7C429D38AC26D Certificate serial: 7F8C82713E3B11E4D6C6C40E6F53BF7223D36FD0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C16E46D556A47D2429EC847E95E7C429D38AC26D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/C16E46D556A47D2429EC847E95E7C429D38AC26D.mft Manifest number: 0369 Signing time: Wed 03 Sep 2025 04:32:08 +0000 Manifest this update: Wed 03 Sep 2025 04:27:08 +0000 Manifest next update: Sat 06 Sep 2025 12:22:08 +0000 Files and hashes: 1: 3230322e34332e3131332e302f32342d3234203d3e203435333235.roa (hash: iAl8NmWNJlmHejJ5sIMuSWgzBreFnv6E6ju9qJHMnsY=) 2: 3132322e3234382e34372e302f32342d3234203d3e203435333235.roa (hash: PlPCblW+Y4v6qxU+CWaZnHwrOaBWn48VhJ1vBaFINzQ=) 3: 3132322e3234382e33352e302f32342d3234203d3e20313431313432.roa (hash: GE7T9YC/kqBLoYKuMN7OgXcO8QMg0KTigD9MICwdRZo=) 4: 3132322e3234382e33382e302f32342d3234203d3e203435333235.roa (hash: 1mSxPF9RWPzW0o8OV1KEyXpWaFNHEqMbTeJUgaklFZE=) 5: 3230332e33302e3235352e302f32342d3234203d3e203435333235.roa (hash: YNrbS8ak9Mk+b9Wc7pVzuLcBWX2U2ASVy3A/+idXG9A=) 6: 3132322e3234382e33372e302f32342d3234203d3e20313431313432.roa (hash: Lxbv9g4Tc4zr/yZca8M8S2X24CLaJFBuvzgxl8QAASI=) 7: 3230322e35382e3234322e302f32342d3234203d3e203435333235.roa (hash: vfSJs3OGToXJYOrii1md06kGIUgxpU6Nq1gMsM7qNrc=) 8: 3132322e3234382e34362e302f32342d3234203d3e203435333235.roa (hash: SHNUndN8A/BIGBgaMZGSvUYKm9oObzfVbZRCy6qWjNQ=) 9: 3230322e35382e3234332e302f32342d3234203d3e203435333235.roa (hash: WivqrExuW/czATKs+PzCjFZrJxIri49e6BcoDofHA0A=) 10: 3132322e3234382e33392e302f32342d3234203d3e203435333235.roa (hash: +XlWSZnNsHedFhk9EhTLsRli1/7HpiSYXEFODfdlqoo=) 11: 3132322e3234382e33332e302f32342d3234203d3e203435333235.roa (hash: 1bWKpPyCmq0Ewpg+6GFok/ArRgk2NtJdp28v3wc0LwU=) 12: 3132322e3234382e34302e302f32342d3234203d3e203435333235.roa (hash: RR7ACbPl/JlaFFYkC+v/rS/Uji2Joiu0jBs1396uYUQ=) 13: 3132322e3234382e34352e302f32342d3234203d3e203435333235.roa (hash: sKqe/v72Bkg2bo/MAJzQwOx67n39YutbyZ1RMbwLFW4=) 14: C16E46D556A47D2429EC847E95E7C429D38AC26D.crl (hash: s9zv2oEgunYGjfDDYKkMKJJutnKOwZTbaUCx7rqDy+s=) 15: 3230332e33302e3235342e302f32342d3234203d3e203435333235.roa (hash: qwVpoc/q8olJzTwzAZ1Ng5Im8A/3FvC7AKArG6XMGjY=) 16: 3132322e3234382e34312e302f32342d3234203d3e203435333235.roa (hash: WQ720U4S99SeEIPGAMPrXzE0oNhC79BMDbo0SDUiMMw=) 17: 323430303a373530303a3a2f33322d3332203d3e20313431313432.roa (hash: jAH5xZ0mM2gJ4zgC+LxXgivI18TAlcZ5CPYpBlGyxP0=) 18: 3132322e3234382e33322e302f32342d3234203d3e203435333235.roa (hash: UQXVoZKGz5JhkoTTlnHcb+EQxg2+/5hollJFLUnx0yQ=) 19: 3132322e3234382e33342e302f32342d3234203d3e203435333235.roa (hash: xWN96AN2o/5DjK3ZlzwTHnF0Jn7pZjmGqWHyJSo//1M=) 20: 3132322e3234382e34332e302f32342d3234203d3e203435333235.roa (hash: z7XL2D0wXQTjcZf3j2e+IrsJInNEddx4qPTq74sMeHo=) 21: 3132322e3234382e33362e302f32342d3234203d3e203435333235.roa (hash: OdWDIwy3kzlmQdcK2SaQYfq9ix9p7PQmfJSCMg+I4yw=) 22: 3132322e3234382e34322e302f32342d3234203d3e20313431313432.roa (hash: rKBd3FDglxAur6pNSQahm+4YOdXF+ndHaH2ghrjrs0c=) 23: 3132322e3234382e34342e302f32342d3234203d3e20313431313432.roa (hash: h34a36oOro4h82UzWlqmmFvXIQsUxyJPSi5+fu8agyc=) 24: 3230322e34332e3131322e302f32342d3234203d3e203435333235.roa (hash: ysRy+nrk2+7qcjRHwMFa5bwT6ZEU71YLfsCXRkR1Es0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/C16E46D556A47D2429EC847E95E7C429D38AC26D.crl rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/C16E46D556A47D2429EC847E95E7C429D38AC26D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C16E46D556A47D2429EC847E95E7C429D38AC26D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 12:22:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:8c:82:71:3e:3b:11:e4:d6:c6:c4:0e:6f:53:bf:72:23:d3:6f:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C16E46D556A47D2429EC847E95E7C429D38AC26D Validity Not Before: Sep 3 04:27:08 2025 GMT Not After : Sep 6 12:22:08 2025 GMT Subject: CN=8CD485D7BC41C57C50F1821969474ABD9F220B39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:a2:6e:9c:80:59:23:69:5d:d5:b4:cf:50:28: 48:86:7e:0f:df:cc:25:cf:01:41:81:69:e6:4f:3b: 08:27:54:c4:da:a2:ad:58:93:23:67:91:5b:4b:a4: 68:76:5a:1e:27:46:32:e8:82:4c:f0:6e:08:1e:2a: 22:46:3e:b3:5b:3b:52:c1:40:24:17:83:29:ae:19: a2:28:a3:a1:c8:9f:7f:2e:31:ac:f6:19:10:45:b2: 67:9a:4d:9f:58:86:9e:7a:66:4c:e1:b7:72:40:7f: bf:d5:08:d1:6e:f0:92:1f:f6:b1:61:97:f4:65:57: fc:6d:c0:53:9f:22:4b:61:a7:de:9d:a6:c1:54:ed: 81:29:b5:84:c7:90:88:c5:be:61:f8:2a:f5:80:fd: 3f:48:a0:8d:11:aa:62:6e:4a:98:04:f1:5d:3d:96: 0c:2b:31:99:de:d1:fc:3a:78:37:33:4f:36:fa:d4: 2a:c7:dc:06:35:5d:a4:99:98:4c:df:2a:30:fa:ab: 12:d7:22:fb:4b:5a:bd:b1:69:83:81:7b:3b:a2:f6: d2:d3:80:8d:c1:1a:cd:15:c3:cb:ff:6c:e1:09:bb: 8a:82:53:4a:de:07:32:7e:67:d1:50:6e:50:30:8e: 7e:f5:a6:b9:0f:7a:00:07:65:ae:60:a9:e0:6d:ae: 4b:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:D4:85:D7:BC:41:C5:7C:50:F1:82:19:69:47:4A:BD:9F:22:0B:39 X509v3 Authority Key Identifier: keyid:C1:6E:46:D5:56:A4:7D:24:29:EC:84:7E:95:E7:C4:29:D3:8A:C2:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/C16E46D556A47D2429EC847E95E7C429D38AC26D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C16E46D556A47D2429EC847E95E7C429D38AC26D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/C16E46D556A47D2429EC847E95E7C429D38AC26D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:e9:75:c4:e2:ee:58:59:f7:37:7e:7f:98:c0:b2:b3:22:90: 72:e7:e7:39:fe:cb:ec:17:c2:f7:2b:30:51:9b:45:dc:d3:bd: 90:68:95:60:f7:3f:8b:b3:1f:11:ff:36:bb:ee:1d:b6:2c:b1: a2:35:d9:d6:88:92:ae:44:31:34:f4:ee:89:b6:32:8a:bd:f8: 76:16:9c:51:99:a9:55:7b:93:0c:05:a9:6c:6b:f2:34:7b:18: f5:0a:a1:8b:d6:f4:3d:81:10:0d:e4:02:d8:22:15:6e:12:71: d9:bf:5d:44:62:1d:79:a3:1b:44:75:13:19:f1:3a:27:a2:be: d7:71:48:61:ac:42:9e:2e:81:9a:d0:05:54:a3:ee:b3:02:2e: ac:0a:24:83:33:dd:1d:63:aa:50:7b:18:17:9d:88:76:cf:61: 79:1d:6f:57:64:47:e0:1f:2c:8a:fa:f5:d7:ad:c5:66:5b:f3: 5e:1b:02:09:12:50:46:d4:13:a9:8d:a2:d6:11:ac:af:d6:b0: ca:5c:46:ad:2b:c9:8e:3a:4a:ea:6a:96:d7:69:09:0f:80:ef: 21:4e:39:d2:60:b9:37:49:f5:eb:6f:e2:15:85:20:03:ed:0e: 16:fc:78:93:bf:f1:b2:ff:a8:3a:2d:22:bc:95:32:01:02:2d: fe:51:a0:47 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf4yCcT47EeTWxsQOb1O/ciPTb9AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzE2RTQ2RDU1NkE0N0QyNDI5RUM4NDdFOTVFN0M0MjlE MzhBQzI2RDAeFw0yNTA5MDMwNDI3MDhaFw0yNTA5MDYxMjIyMDhaMDMxMTAvBgNV BAMTKDhDRDQ4NUQ3QkM0MUM1N0M1MEYxODIxOTY5NDc0QUJEOUYyMjBCMzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXom6cgFkjaV3VtM9QKEiGfg/f zCXPAUGBaeZPOwgnVMTaoq1YkyNnkVtLpGh2Wh4nRjLogkzwbggeKiJGPrNbO1LB QCQXgymuGaIoo6HIn38uMaz2GRBFsmeaTZ9Yhp56Zkzht3JAf7/VCNFu8JIf9rFh l/RlV/xtwFOfIkthp96dpsFU7YEptYTHkIjFvmH4KvWA/T9IoI0RqmJuSpgE8V09 lgwrMZne0fw6eDczTzb61CrH3AY1XaSZmEzfKjD6qxLXIvtLWr2xaYOBezui9tLT gI3BGs0Vw8v/bOEJu4qCU0reBzJ+Z9FQblAwjn71prkPegAHZa5gqeBtrks5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjNSF17xBxXxQ8YIZaUdKvZ8iCzkwHwYDVR0j BBgwFoAUwW5G1VakfSQp7IR+lefEKdOKwm0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZjJlN2ZkNi1lYjVlLTQ4MGEtOGU5Ny1jNTVmNjhlMDU4OWEvMC9DMTZFNDZENTU2 QTQ3RDI0MjlFQzg0N0U5NUU3QzQyOUQzOEFDMjZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzE2RTQ2RDU1NkE0N0QyNDI5RUM4NDdFOTVFN0M0MjlEMzhB QzI2RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGYyZTdmZDYtZWI1ZS00ODBhLThl OTctYzU1ZjY4ZTA1ODlhLzAvQzE2RTQ2RDU1NkE0N0QyNDI5RUM4NDdFOTVFN0M0 MjlEMzhBQzI2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGHpdcTi7lhZ9zd+f5jAsrMikHLn5zn+y+wX wvcrMFGbRdzTvZBolWD3P4uzHxH/NrvuHbYssaI12daIkq5EMTT07om2Moq9+HYW nFGZqVV7kwwFqWxr8jR7GPUKoYvW9D2BEA3kAtgiFW4Scdm/XURiHXmjG0R1Exnx OieivtdxSGGsQp4ugZrQBVSj7rMCLqwKJIMz3R1jqlB7GBediHbPYXkdb1dkR+Af LIr69detxWZb814bAgkSUEbUE6mNotYRrK/WsMpcRq0ryY46SupqltdpCQ+A7yFO OdJguTdJ9etv4hWFIAPtDhb8eJO/8bL/qDotIryVMgECLf5RoEc= -----END CERTIFICATE-----Generated at Fri Sep 5 10:13:10 2025 by rpki-client