$ rpki-client -vvf repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/C16E46D556A47D2429EC847E95E7C429D38AC26D.mft File: C16E46D556A47D2429EC847E95E7C429D38AC26D.mft (raw, json) Hash identifier: SCFduXJhqgz2FAserYUWoBvpRy9pfS8ercvyzxvSRg8= Subject key identifier: 16:41:68:DD:21:50:9E:B4:2D:AB:B0:92:56:48:F9:4C:CB:DD:DF:74 Authority key identifier: C1:6E:46:D5:56:A4:7D:24:29:EC:84:7E:95:E7:C4:29:D3:8A:C2:6D Certificate issuer: /CN=C16E46D556A47D2429EC847E95E7C429D38AC26D Certificate serial: 49B08435DA78F53C806D3A4B8B847ABB7463CFB2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C16E46D556A47D2429EC847E95E7C429D38AC26D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/C16E46D556A47D2429EC847E95E7C429D38AC26D.mft Manifest number: 0388 Signing time: Sun 02 Nov 2025 22:42:10 +0000 Manifest this update: Sun 02 Nov 2025 22:37:10 +0000 Manifest next update: Thu 06 Nov 2025 04:35:10 +0000 Files and hashes: 1: 3132322e3234382e34302e302f32342d3234203d3e203435333235.roa (hash: r1xG0EZ+diPvqjo3maUSgSdAXF/PbzNzYbElj3DkPms=) 2: 3132322e3234382e33332e302f32342d3234203d3e203435333235.roa (hash: 8NBF7TYD3mv93Ahcm2U3DCAxcvF4PEalBVAFdo0PIhA=) 3: 3132322e3234382e33372e302f32342d3234203d3e20313431313432.roa (hash: q+4LJqnEtPR8u/O7vXDxEMWbUC+3pBdRVabjnpWaIW8=) 4: 3132322e3234382e34372e302f32342d3234203d3e203435333235.roa (hash: pMSHdCGU3wSWW64VJ8Q+XCnRMyb8p81kTgkpP+Gwk14=) 5: 3132322e3234382e34332e302f32342d3234203d3e203435333235.roa (hash: TzoAuOSZ6mXbYFD7JpUog8X7cU+aL4pu97WqgSsQlww=) 6: 3132322e3234382e33382e302f32342d3234203d3e203435333235.roa (hash: Giz7os34qxdcaeyi2EtKcr2LS4LsMlTnJlV8pqSpEa4=) 7: 3230322e34332e3131322e302f32342d3234203d3e203435333235.roa (hash: YfbB3z09y4MNoTi1HjR4+z9IdxMYyBM89bj8p3WiTw4=) 8: 3230322e34332e3131332e302f32342d3234203d3e203435333235.roa (hash: 8c4EuCrXR9USSkoSueUSWcZF3Vya08SYcqUOI9OfmOY=) 9: 3132322e3234382e34322e302f32342d3234203d3e20313431313432.roa (hash: rKBd3FDglxAur6pNSQahm+4YOdXF+ndHaH2ghrjrs0c=) 10: 3132322e3234382e33342e302f32342d3234203d3e203435333235.roa (hash: TPAjUCjHJnWAtWeWIogMrgqyIk1DQzed8sLTl5HA/OY=) 11: 3230322e35382e3234332e302f32342d3234203d3e203435333235.roa (hash: WivqrExuW/czATKs+PzCjFZrJxIri49e6BcoDofHA0A=) 12: 3132322e3234382e33392e302f32342d3234203d3e203435333235.roa (hash: VdRAPx9PRO631CUuDsRT3G+gpxtg4/VX90lYsk0SMVU=) 13: 3132322e3234382e34352e302f32342d3234203d3e203435333235.roa (hash: OxhA3uXfrHkYk9hpK8Kprlt50rQpJAHKf4/psbChj9g=) 14: 323430303a373530303a3a2f33322d3332203d3e20313431313432.roa (hash: jAH5xZ0mM2gJ4zgC+LxXgivI18TAlcZ5CPYpBlGyxP0=) 15: 3132322e3234382e33322e302f32342d3234203d3e203435333235.roa (hash: YtgOnaLw1bxl1wUrgM2neAz8Qf57lo3CvBW85nMyhJg=) 16: 3230332e33302e3235342e302f32342d3234203d3e203435333235.roa (hash: f0QuTjuXU3+PMwtOvyLhhE3F7fk0wnPs64pd29FWWiY=) 17: 3132322e3234382e33352e302f32342d3234203d3e20313431313432.roa (hash: GE7T9YC/kqBLoYKuMN7OgXcO8QMg0KTigD9MICwdRZo=) 18: C16E46D556A47D2429EC847E95E7C429D38AC26D.crl (hash: EH8QU/e4ZBYDV3/GH1eUQ+gx26nlKKEwAfFJRN+5/lk=) 19: 3132322e3234382e34312e302f32342d3234203d3e203435333235.roa (hash: VEDwBMu7e2mzL/h9CHSnsP+W8nFPBXkEhV06ak5Sn4k=) 20: 3230332e33302e3235352e302f32342d3234203d3e203435333235.roa (hash: xUdwOu6GtGdzxItV3iA1A5hAD2Ey5dnmQ19p3DcRu10=) 21: 3132322e3234382e33362e302f32342d3234203d3e203435333235.roa (hash: s1sd22aoOx7eVnGzzPZfaCEnUeLM+0ey0B/Ng0FNQzE=) 22: 3132322e3234382e34362e302f32342d3234203d3e203435333235.roa (hash: cNjA+vEY4etZqGchJ8HDvYFIMYzWVJuVGOU4SD9SCJc=) 23: 3132322e3234382e34342e302f32342d3234203d3e20313431313432.roa (hash: h34a36oOro4h82UzWlqmmFvXIQsUxyJPSi5+fu8agyc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/C16E46D556A47D2429EC847E95E7C429D38AC26D.crl rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/C16E46D556A47D2429EC847E95E7C429D38AC26D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C16E46D556A47D2429EC847E95E7C429D38AC26D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 04:35:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:b0:84:35:da:78:f5:3c:80:6d:3a:4b:8b:84:7a:bb:74:63:cf:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C16E46D556A47D2429EC847E95E7C429D38AC26D Validity Not Before: Nov 2 22:37:10 2025 GMT Not After : Nov 6 04:35:10 2025 GMT Subject: CN=164168DD21509EB42DABB0925648F94CCBDDDF74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:b5:70:d9:f2:42:c5:8a:ba:aa:b8:0e:cb:1d: d5:bb:8d:92:ff:62:23:07:7e:82:e4:2c:be:7e:53: a4:8a:ec:29:9c:12:58:9b:b8:16:01:3a:23:3d:33: 42:86:ad:ab:a2:ee:20:4b:87:b8:29:e4:3a:55:37: a9:ca:00:ce:2d:17:27:40:39:4a:16:7d:ed:f7:d0: f4:e6:8c:d9:7e:e6:f9:0e:d9:49:a1:41:11:91:c2: 0c:39:30:12:05:6b:0b:80:28:74:54:e9:f5:a9:a5: e1:6f:a2:26:b0:68:b4:57:d1:c6:9f:55:73:79:f2: fd:25:52:7c:d1:a6:39:25:75:f4:fb:32:44:d9:29: db:c6:5d:81:cf:43:73:83:89:d0:87:a4:39:94:9a: 68:db:6f:bd:6a:3c:22:fd:94:1e:37:6d:77:40:7a: 9c:7c:05:cc:a6:17:ec:31:a6:27:0e:69:bd:68:cd: ca:16:32:54:17:0f:3e:6f:80:15:43:4f:c9:1d:5e: 49:9e:62:fb:0f:89:6d:40:f2:33:f6:06:dd:a7:df: 8a:40:f8:61:00:20:4b:39:0e:e6:50:97:3a:f7:86: 85:21:94:15:d8:7a:65:78:ea:80:28:62:a8:8e:6d: 03:31:dc:f7:cb:44:c4:b6:d3:ed:05:69:51:6c:22: 8a:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:41:68:DD:21:50:9E:B4:2D:AB:B0:92:56:48:F9:4C:CB:DD:DF:74 X509v3 Authority Key Identifier: keyid:C1:6E:46:D5:56:A4:7D:24:29:EC:84:7E:95:E7:C4:29:D3:8A:C2:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/C16E46D556A47D2429EC847E95E7C429D38AC26D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C16E46D556A47D2429EC847E95E7C429D38AC26D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/C16E46D556A47D2429EC847E95E7C429D38AC26D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:aa:c1:eb:eb:4d:45:c6:89:50:ba:6c:2f:2f:6a:53:9e:3e: be:4c:cd:1a:b6:e2:31:ff:dd:82:a3:03:93:82:54:d5:c3:c6: 53:19:29:0e:c0:16:4d:c6:fa:68:e6:a3:38:64:e5:d7:39:2f: 84:39:6c:9c:a8:f5:b6:a6:e1:f7:2b:36:5b:29:33:34:8a:1a: 0d:e3:c4:e2:fe:02:76:50:8e:f4:96:d0:eb:0b:a3:52:d8:67: 3e:37:eb:5a:e0:dc:e0:c0:02:d5:0c:ef:fe:83:0b:83:94:8a: e3:e6:a7:e7:c7:cb:b7:c9:e2:5e:f8:bc:49:62:1a:19:e3:73: 8a:78:81:91:88:e7:77:35:ce:f1:6f:52:93:28:30:ae:92:71: ac:fb:c3:62:0d:13:1b:0b:61:df:e0:b8:b4:d7:95:ba:1f:95: c5:ba:41:a2:fc:64:42:f6:7e:83:f3:36:cc:18:5b:b3:d4:ce: 43:37:d6:f0:06:5a:9e:8f:3d:a1:e6:56:d0:5e:4c:da:4f:de: e3:59:9d:63:60:a1:b1:f6:16:10:00:c2:79:f7:86:42:17:70: 06:d5:5b:1b:2d:63:12:a8:1f:8f:d5:b9:9b:5c:db:69:f3:82: 42:45:1c:18:0c:23:ab:08:3c:7f:68:0c:b0:13:9d:05:56:6a: 40:b7:b8:d8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSbCENdp49TyAbTpLi4R6u3Rjz7IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzE2RTQ2RDU1NkE0N0QyNDI5RUM4NDdFOTVFN0M0MjlE MzhBQzI2RDAeFw0yNTExMDIyMjM3MTBaFw0yNTExMDYwNDM1MTBaMDMxMTAvBgNV BAMTKDE2NDE2OEREMjE1MDlFQjQyREFCQjA5MjU2NDhGOTRDQ0JERERGNzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChtXDZ8kLFirqquA7LHdW7jZL/ YiMHfoLkLL5+U6SK7CmcElibuBYBOiM9M0KGraui7iBLh7gp5DpVN6nKAM4tFydA OUoWfe330PTmjNl+5vkO2UmhQRGRwgw5MBIFawuAKHRU6fWppeFvoiawaLRX0caf VXN58v0lUnzRpjkldfT7MkTZKdvGXYHPQ3ODidCHpDmUmmjbb71qPCL9lB43bXdA epx8BcymF+wxpicOab1ozcoWMlQXDz5vgBVDT8kdXkmeYvsPiW1A8jP2Bt2n34pA +GEAIEs5DuZQlzr3hoUhlBXYemV46oAoYqiObQMx3PfLRMS20+0FaVFsIoqHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFkFo3SFQnrQtq7CSVkj5TMvd33QwHwYDVR0j BBgwFoAUwW5G1VakfSQp7IR+lefEKdOKwm0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZjJlN2ZkNi1lYjVlLTQ4MGEtOGU5Ny1jNTVmNjhlMDU4OWEvMC9DMTZFNDZENTU2 QTQ3RDI0MjlFQzg0N0U5NUU3QzQyOUQzOEFDMjZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzE2RTQ2RDU1NkE0N0QyNDI5RUM4NDdFOTVFN0M0MjlEMzhB QzI2RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGYyZTdmZDYtZWI1ZS00ODBhLThl OTctYzU1ZjY4ZTA1ODlhLzAvQzE2RTQ2RDU1NkE0N0QyNDI5RUM4NDdFOTVFN0M0 MjlEMzhBQzI2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHaqwevrTUXGiVC6bC8valOePr5MzRq24jH/ 3YKjA5OCVNXDxlMZKQ7AFk3G+mjmozhk5dc5L4Q5bJyo9bam4fcrNlspMzSKGg3j xOL+AnZQjvSW0OsLo1LYZz4361rg3ODAAtUM7/6DC4OUiuPmp+fHy7fJ4l74vEli Ghnjc4p4gZGI53c1zvFvUpMoMK6Scaz7w2INExsLYd/guLTXlboflcW6QaL8ZEL2 foPzNswYW7PUzkM31vAGWp6PPaHmVtBeTNpP3uNZnWNgobH2FhAAwnn3hkIXcAbV WxstYxKoH4/VuZtc22nzgkJFHBgMI6sIPH9oDLATnQVWakC3uNg= -----END CERTIFICATE-----Generated at Tue Nov 4 09:26:15 2025 by rpki-client