$ rpki-client -vvf repo-rpki.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/166B4918E7A1A1641E7C79C537833379E393522E.mft File: 166B4918E7A1A1641E7C79C537833379E393522E.mft (raw, json) Hash identifier: 6ZVg7gV1QQrwyID2q+W650n/LyF5hxSMrD3m1Jviqo4= Subject key identifier: B0:3C:63:F1:79:F5:FE:76:70:F9:1D:ED:6D:5A:EC:24:59:CA:09:8B Authority key identifier: 16:6B:49:18:E7:A1:A1:64:1E:7C:79:C5:37:83:33:79:E3:93:52:2E Certificate issuer: /CN=166B4918E7A1A1641E7C79C537833379E393522E Certificate serial: 61BC5881E6E50F683D659AF9337BFCA844BEEE53 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/166B4918E7A1A1641E7C79C537833379E393522E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/166B4918E7A1A1641E7C79C537833379E393522E.mft Manifest number: 02E9 Signing time: Mon 03 Nov 2025 18:41:00 +0000 Manifest this update: Mon 03 Nov 2025 18:36:00 +0000 Manifest next update: Fri 07 Nov 2025 04:04:00 +0000 Files and hashes: 1: 3130332e3137342e3138302e302f32332d3233203d3e20313437313037.roa (hash: oK3qw71PTaTu9zr3WTDr2kf09ZEsEk1iSGVob7ZwRo0=) 2: 166B4918E7A1A1641E7C79C537833379E393522E.crl (hash: O3wJ6U5XQwbLMEe2oNcDb4PW0s+WcqjO/+hzoAiczc0=) 3: 3130332e3137342e3138312e302f32342d3234203d3e20313437313037.roa (hash: LzEWJe+Hglc03QN90vVTDC59A7niJ+rvkY3tQyL/MFs=) 4: 3130332e3137342e3138302e302f32342d3234203d3e20313437313037.roa (hash: WsHwgNa1eu27mA5KJGjHDisSyyKknyjiNT1hKbJ/YGc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/166B4918E7A1A1641E7C79C537833379E393522E.crl rsync://repo-rpki.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/166B4918E7A1A1641E7C79C537833379E393522E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/166B4918E7A1A1641E7C79C537833379E393522E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 04:04:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:bc:58:81:e6:e5:0f:68:3d:65:9a:f9:33:7b:fc:a8:44:be:ee:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=166B4918E7A1A1641E7C79C537833379E393522E Validity Not Before: Nov 3 18:36:00 2025 GMT Not After : Nov 7 04:04:00 2025 GMT Subject: CN=B03C63F179F5FE7670F91DED6D5AEC2459CA098B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:bc:31:e3:2b:e1:ee:80:cc:03:18:9f:27:89: df:a1:40:03:0c:49:98:22:6b:c2:6b:f4:93:a9:53: 28:fe:87:f0:39:43:4d:ff:4b:31:d6:cf:0f:82:ff: d0:2f:1d:d8:a6:61:b0:ba:2e:d4:b7:a5:28:91:3c: 32:b2:c7:5c:71:74:73:89:40:ea:72:48:fc:76:62: d8:12:5d:36:f1:92:90:40:75:1f:41:19:82:aa:35: d8:fd:e4:ce:0b:fe:55:2c:3d:c7:7a:1f:08:84:6d: f1:33:30:50:21:76:6c:c5:3a:eb:eb:fb:91:d9:ac: 3c:36:65:ed:29:97:54:90:81:ae:ed:6d:9d:e1:dd: f2:68:98:e1:45:4f:63:43:44:a3:a4:8b:cb:28:a8: 01:22:50:c6:ae:c8:2b:75:f7:b7:d4:f5:90:00:69: f9:78:c2:e8:40:af:64:38:02:de:f0:4a:ec:60:d8: 50:55:02:24:6b:06:75:d7:03:42:9e:aa:f4:da:9d: 1e:77:42:13:3c:97:73:d4:45:36:11:27:94:ed:21: 31:2e:69:9d:e3:44:c2:6f:37:5c:5a:15:a1:f8:7b: c6:e1:e5:4e:93:36:b7:4e:2c:5e:59:d2:ee:7e:95: 09:e5:fb:c0:f1:fc:f4:84:5b:36:e2:68:f8:f4:14: 3a:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:3C:63:F1:79:F5:FE:76:70:F9:1D:ED:6D:5A:EC:24:59:CA:09:8B X509v3 Authority Key Identifier: keyid:16:6B:49:18:E7:A1:A1:64:1E:7C:79:C5:37:83:33:79:E3:93:52:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/166B4918E7A1A1641E7C79C537833379E393522E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/166B4918E7A1A1641E7C79C537833379E393522E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/166B4918E7A1A1641E7C79C537833379E393522E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:f4:e5:1d:ff:66:ea:fa:f3:5a:bb:84:3b:b7:b2:c3:81:17: 6a:f2:34:d2:53:2b:c5:b5:90:35:eb:a0:f3:e0:60:0f:5d:d5: 63:0d:bd:a3:eb:71:8c:44:83:c0:0e:6a:29:9e:51:bd:3b:69: a6:61:c5:38:05:72:e1:5e:13:17:8e:a0:56:41:86:7f:6b:15: a9:a0:e7:a6:7e:78:e9:e6:45:98:46:08:43:b3:de:cf:cf:22: 52:d4:a5:18:d7:2c:a0:ad:b6:89:63:4c:7e:e2:5b:4e:36:62: 35:1d:9a:cd:17:79:2f:92:34:8f:41:97:48:17:ab:e8:21:a4: 56:0c:95:17:02:ea:0e:73:d8:45:56:1e:ef:6a:8a:65:b1:14: e4:69:5a:09:7b:74:b3:df:ba:b9:22:d3:49:b9:4c:e0:49:74: ce:70:74:33:c9:0d:aa:a9:c8:34:94:51:92:f8:82:d7:58:62: 7f:b2:83:69:5a:72:93:75:b0:82:93:f0:c6:ad:15:ab:9f:53: e7:a8:69:8b:7c:68:76:fb:13:54:6c:40:78:e3:67:62:ec:8d: 18:cb:ba:c5:00:12:bd:7e:88:17:dd:de:f5:bd:1e:47:55:93: 07:7c:60:ce:ed:a7:b8:81:d3:95:37:f2:f3:67:51:d9:25:63: 00:7b:c7:79 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYbxYgeblD2g9ZZr5M3v8qES+7lMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTY2QjQ5MThFN0ExQTE2NDFFN0M3OUM1Mzc4MzMzNzlF MzkzNTIyRTAeFw0yNTExMDMxODM2MDBaFw0yNTExMDcwNDA0MDBaMDMxMTAvBgNV BAMTKEIwM0M2M0YxNzlGNUZFNzY3MEY5MURFRDZENUFFQzI0NTlDQTA5OEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfvDHjK+HugMwDGJ8nid+hQAMM SZgia8Jr9JOpUyj+h/A5Q03/SzHWzw+C/9AvHdimYbC6LtS3pSiRPDKyx1xxdHOJ QOpySPx2YtgSXTbxkpBAdR9BGYKqNdj95M4L/lUsPcd6HwiEbfEzMFAhdmzFOuvr +5HZrDw2Ze0pl1SQga7tbZ3h3fJomOFFT2NDRKOki8soqAEiUMauyCt197fU9ZAA afl4wuhAr2Q4At7wSuxg2FBVAiRrBnXXA0KeqvTanR53QhM8l3PURTYRJ5TtITEu aZ3jRMJvN1xaFaH4e8bh5U6TNrdOLF5Z0u5+lQnl+8Dx/PSEWzbiaPj0FDoXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsDxj8Xn1/nZw+R3tbVrsJFnKCYswHwYDVR0j BBgwFoAUFmtJGOehoWQefHnFN4MzeeOTUi4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YzI4NTI5MS1jZTkyLTQxNDQtOWMxOC05ZThjMTkxZGRlYzYvMC8xNjZCNDkxOEU3 QTFBMTY0MUU3Qzc5QzUzNzgzMzM3OUUzOTM1MjJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTY2QjQ5MThFN0ExQTE2NDFFN0M3OUM1Mzc4MzMzNzlFMzkz NTIyRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWMyODUyOTEtY2U5Mi00MTQ0LTlj MTgtOWU4YzE5MWRkZWM2LzAvMTY2QjQ5MThFN0ExQTE2NDFFN0M3OUM1Mzc4MzMz NzlFMzkzNTIyRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALb05R3/Zur681q7hDu3ssOBF2ryNNJTK8W1 kDXroPPgYA9d1WMNvaPrcYxEg8AOaimeUb07aaZhxTgFcuFeExeOoFZBhn9rFamg 56Z+eOnmRZhGCEOz3s/PIlLUpRjXLKCttoljTH7iW042YjUdms0XeS+SNI9Bl0gX q+ghpFYMlRcC6g5z2EVWHu9qimWxFORpWgl7dLPfurki00m5TOBJdM5wdDPJDaqp yDSUUZL4gtdYYn+yg2lacpN1sIKT8MatFaufU+eoaYt8aHb7E1RsQHjjZ2LsjRjL usUAEr1+iBfd3vW9HkdVkwd8YM7tp7iB05U38vNnUdklYwB7x3k= -----END CERTIFICATE-----Generated at Tue Nov 4 16:38:05 2025 by rpki-client