$ rpki-client -vvf repo-rpki.idnic.net/repo/648b6583-4122-469d-8384-3af1bcc6607f/0/16CD7877C91A179A0A6751085603DA8E7DE539F0.mft File: 16CD7877C91A179A0A6751085603DA8E7DE539F0.mft (raw, json) Hash identifier: /zs07zEPyTjlD0BeNjnn6GTbuDv+lgvPZlNRUqRXASo= Subject key identifier: 61:89:7B:4D:B0:75:1B:D1:12:06:D0:E3:4C:31:0F:94:81:BA:AF:D8 Authority key identifier: 16:CD:78:77:C9:1A:17:9A:0A:67:51:08:56:03:DA:8E:7D:E5:39:F0 Certificate issuer: /CN=16CD7877C91A179A0A6751085603DA8E7DE539F0 Certificate serial: 262F6296A9986BF272ECC66FE4B5E974CF52F718 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/16CD7877C91A179A0A6751085603DA8E7DE539F0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/648b6583-4122-469d-8384-3af1bcc6607f/0/16CD7877C91A179A0A6751085603DA8E7DE539F0.mft Manifest number: 04A0 Signing time: Mon 03 Nov 2025 14:21:27 +0000 Manifest this update: Mon 03 Nov 2025 14:16:27 +0000 Manifest next update: Thu 06 Nov 2025 19:49:27 +0000 Files and hashes: 1: 3130332e3134372e3133342e302f32332d3234203d3e20313339393633.roa (hash: EBtEj4ypwlzzw6GhMy3RkgtUq0npTq7gZQPuYhe9Zzc=) 2: 16CD7877C91A179A0A6751085603DA8E7DE539F0.crl (hash: qCGGKG63I8pxtvJnp9OXkaWWZj8rtW3+SjCQzcXxfg0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/648b6583-4122-469d-8384-3af1bcc6607f/0/16CD7877C91A179A0A6751085603DA8E7DE539F0.crl rsync://repo-rpki.idnic.net/repo/648b6583-4122-469d-8384-3af1bcc6607f/0/16CD7877C91A179A0A6751085603DA8E7DE539F0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/16CD7877C91A179A0A6751085603DA8E7DE539F0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 19:49:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:2f:62:96:a9:98:6b:f2:72:ec:c6:6f:e4:b5:e9:74:cf:52:f7:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16CD7877C91A179A0A6751085603DA8E7DE539F0 Validity Not Before: Nov 3 14:16:27 2025 GMT Not After : Nov 6 19:49:27 2025 GMT Subject: CN=61897B4DB0751BD11206D0E34C310F9481BAAFD8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:99:ee:94:6e:0c:69:dc:68:0b:d6:89:9b:29: 8e:f9:99:cb:7a:46:7b:1f:38:93:ac:fd:f7:2d:71: 3a:14:c8:af:26:4a:b0:f9:42:1d:f8:53:3a:ed:ad: 1e:43:30:d3:66:cc:ba:f7:33:52:87:39:40:e6:ae: 79:f7:24:cb:02:e9:d5:41:1c:bf:1d:82:41:12:43: c3:5f:44:1e:02:c9:d9:7c:07:a6:84:6e:fe:d3:7d: fd:5a:dc:88:2d:92:b4:94:8d:8a:7e:d2:9b:e8:27: cb:13:cc:6c:20:41:23:ca:00:16:57:17:09:6f:1b: 2e:d0:27:d0:4a:b3:ba:9d:58:55:a0:61:cf:43:ae: 9f:22:69:c0:94:2b:40:8e:61:a8:a4:73:2c:8e:0f: 98:81:fd:21:d3:6f:58:30:da:be:bf:7c:54:98:6b: be:1d:ae:0a:a6:65:01:b7:56:1c:c0:b6:d9:0a:0c: 21:c2:1b:c6:75:62:18:13:66:35:c3:8f:04:95:4e: 33:26:10:9f:71:6f:8e:75:62:29:e9:3c:bc:a8:45: 83:1d:c8:dd:38:e5:34:31:f7:9d:a8:80:42:b3:1e: a5:35:1a:26:d1:90:e7:f6:fb:a0:88:c8:4c:3d:4c: 87:20:1b:de:4e:ce:f8:77:99:3f:92:ef:15:17:9e: 02:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:89:7B:4D:B0:75:1B:D1:12:06:D0:E3:4C:31:0F:94:81:BA:AF:D8 X509v3 Authority Key Identifier: keyid:16:CD:78:77:C9:1A:17:9A:0A:67:51:08:56:03:DA:8E:7D:E5:39:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/648b6583-4122-469d-8384-3af1bcc6607f/0/16CD7877C91A179A0A6751085603DA8E7DE539F0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/16CD7877C91A179A0A6751085603DA8E7DE539F0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/648b6583-4122-469d-8384-3af1bcc6607f/0/16CD7877C91A179A0A6751085603DA8E7DE539F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:c6:ac:3a:57:bb:de:cb:c2:a4:4f:63:1c:58:7f:1c:d0:41: e9:b7:fd:8f:ee:19:8b:ed:a8:d7:68:9e:4e:89:8f:80:98:b4: 83:28:e9:9e:dd:0e:7f:64:ec:76:10:85:41:84:9e:55:d0:bc: 5d:6b:01:64:43:e1:a7:a4:b1:2c:07:ad:41:56:c7:4f:27:93: 6a:9a:a3:ce:34:d9:3a:08:40:25:71:e8:ee:de:be:d0:ea:f8: 7a:05:96:a5:6f:83:ef:63:73:75:b6:1a:46:e6:b9:9a:fa:40: 5d:bd:f8:3e:37:d8:71:09:d1:55:95:b7:44:01:3a:7a:fa:f9: 7f:a1:9d:6b:3a:bc:11:ac:88:c3:8e:19:49:c9:0a:3a:43:93: a6:d0:96:f2:b4:3f:19:b5:1a:16:3b:d7:b6:57:92:cb:5a:3b: 41:72:5d:b0:cb:d9:8b:a5:f3:de:08:13:cb:e4:a7:05:32:02: b6:6a:32:94:8d:0f:a5:d9:88:af:ef:c4:6e:ec:ae:36:fe:19: f3:7b:e1:e3:d9:d3:d5:e8:43:f8:8c:8b:89:1f:8d:86:29:be: 6b:4a:f3:07:34:b2:e7:7a:50:10:c6:3d:c4:5d:18:eb:ac:bc: f6:01:25:57:1a:55:1a:b4:09:b2:89:8f:c1:67:e2:76:5c:fd: 8a:7b:e5:30 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJi9ilqmYa/Jy7MZv5LXpdM9S9xgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTZDRDc4NzdDOTFBMTc5QTBBNjc1MTA4NTYwM0RBOEU3 REU1MzlGMDAeFw0yNTExMDMxNDE2MjdaFw0yNTExMDYxOTQ5MjdaMDMxMTAvBgNV BAMTKDYxODk3QjREQjA3NTFCRDExMjA2RDBFMzRDMzEwRjk0ODFCQUFGRDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDame6Ubgxp3GgL1ombKY75mct6 RnsfOJOs/fctcToUyK8mSrD5Qh34UzrtrR5DMNNmzLr3M1KHOUDmrnn3JMsC6dVB HL8dgkESQ8NfRB4Cydl8B6aEbv7Tff1a3IgtkrSUjYp+0pvoJ8sTzGwgQSPKABZX FwlvGy7QJ9BKs7qdWFWgYc9Drp8iacCUK0COYaikcyyOD5iB/SHTb1gw2r6/fFSY a74drgqmZQG3VhzAttkKDCHCG8Z1YhgTZjXDjwSVTjMmEJ9xb451YinpPLyoRYMd yN045TQx952ogEKzHqU1GibRkOf2+6CIyEw9TIcgG95Ozvh3mT+S7xUXngKNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYYl7TbB1G9ESBtDjTDEPlIG6r9gwHwYDVR0j BBgwFoAUFs14d8kaF5oKZ1EIVgPajn3lOfAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NDhiNjU4My00MTIyLTQ2OWQtODM4NC0zYWYxYmNjNjYwN2YvMC8xNkNENzg3N0M5 MUExNzlBMEE2NzUxMDg1NjAzREE4RTdERTUzOUYwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTZDRDc4NzdDOTFBMTc5QTBBNjc1MTA4NTYwM0RBOEU3REU1 MzlGMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjQ4YjY1ODMtNDEyMi00NjlkLTgz ODQtM2FmMWJjYzY2MDdmLzAvMTZDRDc4NzdDOTFBMTc5QTBBNjc1MTA4NTYwM0RB OEU3REU1MzlGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIXGrDpXu97LwqRPYxxYfxzQQem3/Y/uGYvt qNdonk6Jj4CYtIMo6Z7dDn9k7HYQhUGEnlXQvF1rAWRD4aeksSwHrUFWx08nk2qa o8402ToIQCVx6O7evtDq+HoFlqVvg+9jc3W2GkbmuZr6QF29+D432HEJ0VWVt0QB Onr6+X+hnWs6vBGsiMOOGUnJCjpDk6bQlvK0Pxm1GhY717ZXkstaO0FyXbDL2Yul 894IE8vkpwUyArZqMpSND6XZiK/vxG7srjb+GfN74ePZ09XoQ/iMi4kfjYYpvmtK 8wc0sud6UBDGPcRdGOusvPYBJVcaVRq0CbKJj8Fn4nZc/Yp75TA= -----END CERTIFICATE-----Generated at Tue Nov 4 12:38:09 2025 by rpki-client