$ rpki-client -vvf repo-rpki.idnic.net/repo/3c9941a4-28d2-47d1-91e7-acab59084462/0/B16C4772F3D77045BBA997F94CEACA9E0DCC2865.mft File: B16C4772F3D77045BBA997F94CEACA9E0DCC2865.mft (raw, json) Hash identifier: iIsVmXiB8ayJ9XHODoXtxvw8DU/8JpU9urwfXmfJAEg= Subject key identifier: 78:E1:95:E2:1D:12:29:E6:91:AB:31:AE:86:94:C1:0D:9E:86:18:D4 Authority key identifier: B1:6C:47:72:F3:D7:70:45:BB:A9:97:F9:4C:EA:CA:9E:0D:CC:28:65 Certificate issuer: /CN=B16C4772F3D77045BBA997F94CEACA9E0DCC2865 Certificate serial: 04D3F42E486006D75EEE5BC6485FF2830FE74963 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B16C4772F3D77045BBA997F94CEACA9E0DCC2865.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3c9941a4-28d2-47d1-91e7-acab59084462/0/B16C4772F3D77045BBA997F94CEACA9E0DCC2865.mft Manifest number: 013C Signing time: Sun 02 Nov 2025 06:21:56 +0000 Manifest this update: Sun 02 Nov 2025 06:16:56 +0000 Manifest next update: Wed 05 Nov 2025 14:15:56 +0000 Files and hashes: 1: B16C4772F3D77045BBA997F94CEACA9E0DCC2865.crl (hash: YnyjjyfmVSsG8tvKwGcvqx108FX8c4YMRppQ+ZXd+9M=) 2: 3138302e3133312e3132392e302f32342d3234203d3e20313532303238.roa (hash: IK3NBrk/iQNskIBya+kx1CnPloRzYziR32FnB/WUNZ4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3c9941a4-28d2-47d1-91e7-acab59084462/0/B16C4772F3D77045BBA997F94CEACA9E0DCC2865.crl rsync://repo-rpki.idnic.net/repo/3c9941a4-28d2-47d1-91e7-acab59084462/0/B16C4772F3D77045BBA997F94CEACA9E0DCC2865.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B16C4772F3D77045BBA997F94CEACA9E0DCC2865.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 14:15:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:d3:f4:2e:48:60:06:d7:5e:ee:5b:c6:48:5f:f2:83:0f:e7:49:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B16C4772F3D77045BBA997F94CEACA9E0DCC2865 Validity Not Before: Nov 2 06:16:56 2025 GMT Not After : Nov 5 14:15:56 2025 GMT Subject: CN=78E195E21D1229E691AB31AE8694C10D9E8618D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e6:d0:bd:06:5a:c6:bc:85:02:54:f5:0c:26: 6b:a9:43:75:8c:4c:5b:cb:b4:b3:e4:9b:ee:8c:b6: 79:73:93:26:c5:2b:91:9f:62:54:1b:b2:9a:34:29: 04:5d:e7:87:68:f8:bd:eb:6c:aa:af:35:f3:3e:bb: 2e:db:b0:a4:1f:5e:c8:57:7d:79:82:1c:f8:b3:99: 3d:3d:f2:01:7b:f8:6b:85:8d:fb:15:e5:da:ee:c4: 50:7e:c7:7d:ce:c2:4d:13:cd:84:88:2a:83:60:54: 27:63:3d:99:06:16:f1:ad:e9:f8:9b:f8:f2:03:62: 0f:2e:97:99:1b:d8:d0:29:1c:8a:3c:77:77:9f:b5: 10:ff:6c:a3:ca:93:07:5e:e7:7c:ac:c8:d0:8e:41: c2:56:1c:a1:38:4b:7e:fc:1d:b0:2f:90:4a:8a:d6: 4e:72:da:5a:28:36:cd:18:09:10:d5:1e:da:19:b1: fb:92:5f:32:fd:c0:28:cf:55:b9:28:d5:65:a6:0c: 87:32:c7:d4:1b:b9:4c:72:29:d9:32:1b:89:3e:e8: 71:19:c6:93:32:b3:62:3b:77:c1:bd:13:9e:ee:24: f5:ce:c9:67:f6:35:19:d1:7a:2d:62:f7:1d:54:86: 4e:86:34:9a:e7:59:e9:a0:c2:53:ff:66:6a:d1:ee: 07:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:E1:95:E2:1D:12:29:E6:91:AB:31:AE:86:94:C1:0D:9E:86:18:D4 X509v3 Authority Key Identifier: keyid:B1:6C:47:72:F3:D7:70:45:BB:A9:97:F9:4C:EA:CA:9E:0D:CC:28:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3c9941a4-28d2-47d1-91e7-acab59084462/0/B16C4772F3D77045BBA997F94CEACA9E0DCC2865.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B16C4772F3D77045BBA997F94CEACA9E0DCC2865.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3c9941a4-28d2-47d1-91e7-acab59084462/0/B16C4772F3D77045BBA997F94CEACA9E0DCC2865.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:5b:87:15:2b:3b:37:d7:a4:45:f9:33:76:54:1d:54:b0:f0: d3:8e:19:07:a6:a9:6b:14:d0:06:53:91:49:77:32:ae:76:3a: e8:d5:5a:4e:77:fb:ed:10:1f:03:86:33:76:e8:18:03:3c:42: 79:fd:26:d0:21:13:66:84:9b:92:31:2a:76:c0:e9:5f:fc:da: a8:c2:cd:53:e0:5c:83:f7:6a:c6:dd:28:96:75:9c:34:65:91: 19:61:8e:a1:cd:23:49:03:25:ed:48:45:bf:4d:17:82:53:2a: ae:44:bf:e7:f7:c6:dd:a6:36:cb:a3:91:80:16:d9:b7:05:36: d8:f2:0d:47:89:99:70:7c:54:e4:28:1b:8a:c6:00:b2:f5:74: d9:e8:12:d2:dc:13:13:b0:7c:a4:59:49:78:96:48:7a:2f:a1: 56:34:1c:74:f4:cb:74:6c:2e:27:32:52:66:03:5e:24:85:81: 92:24:05:ff:0f:8f:02:e2:b7:45:90:7c:83:6c:ee:4e:3c:4a: 0c:e6:4e:b6:e6:ad:71:6d:ee:04:c1:6a:86:1b:a8:8d:cc:32: 75:16:8d:88:c0:0e:8c:fc:8d:71:27:74:02:45:85:b8:c1:3c: d8:67:66:c7:1c:c7:46:e4:8b:05:1a:4b:22:ce:9c:be:d5:c3: dc:97:b6:fc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBNP0LkhgBtde7lvGSF/ygw/nSWMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjE2QzQ3NzJGM0Q3NzA0NUJCQTk5N0Y5NENFQUNBOUUw RENDMjg2NTAeFw0yNTExMDIwNjE2NTZaFw0yNTExMDUxNDE1NTZaMDMxMTAvBgNV BAMTKDc4RTE5NUUyMUQxMjI5RTY5MUFCMzFBRTg2OTRDMTBEOUU4NjE4RDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk5tC9BlrGvIUCVPUMJmupQ3WM TFvLtLPkm+6MtnlzkybFK5GfYlQbspo0KQRd54do+L3rbKqvNfM+uy7bsKQfXshX fXmCHPizmT098gF7+GuFjfsV5druxFB+x33Owk0TzYSIKoNgVCdjPZkGFvGt6fib +PIDYg8ul5kb2NApHIo8d3eftRD/bKPKkwde53ysyNCOQcJWHKE4S378HbAvkEqK 1k5y2looNs0YCRDVHtoZsfuSXzL9wCjPVbko1WWmDIcyx9QbuUxyKdkyG4k+6HEZ xpMys2I7d8G9E57uJPXOyWf2NRnRei1i9x1Uhk6GNJrnWemgwlP/ZmrR7gc3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeOGV4h0SKeaRqzGuhpTBDZ6GGNQwHwYDVR0j BBgwFoAUsWxHcvPXcEW7qZf5TOrKng3MKGUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z Yzk5NDFhNC0yOGQyLTQ3ZDEtOTFlNy1hY2FiNTkwODQ0NjIvMC9CMTZDNDc3MkYz RDc3MDQ1QkJBOTk3Rjk0Q0VBQ0E5RTBEQ0MyODY1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjE2QzQ3NzJGM0Q3NzA0NUJCQTk5N0Y5NENFQUNBOUUwREND Mjg2NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2M5OTQxYTQtMjhkMi00N2QxLTkx ZTctYWNhYjU5MDg0NDYyLzAvQjE2QzQ3NzJGM0Q3NzA0NUJCQTk5N0Y5NENFQUNB OUUwRENDMjg2NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADBbhxUrOzfXpEX5M3ZUHVSw8NOOGQemqWsU 0AZTkUl3Mq52OujVWk53++0QHwOGM3boGAM8Qnn9JtAhE2aEm5IxKnbA6V/82qjC zVPgXIP3asbdKJZ1nDRlkRlhjqHNI0kDJe1IRb9NF4JTKq5Ev+f3xt2mNsujkYAW 2bcFNtjyDUeJmXB8VOQoG4rGALL1dNnoEtLcExOwfKRZSXiWSHovoVY0HHT0y3Rs LicyUmYDXiSFgZIkBf8PjwLit0WQfINs7k48SgzmTrbmrXFt7gTBaoYbqI3MMnUW jYjADoz8jXEndAJFhbjBPNhnZsccx0bkiwUaSyLOnL7Vw9yXtvw= -----END CERTIFICATE-----Generated at Tue Nov 4 12:54:32 2025 by rpki-client