$ rpki-client -vvf repo-rpki.idnic.net/repo/648b6583-4122-469d-8384-3af1bcc6607f/0/16CD7877C91A179A0A6751085603DA8E7DE539F0.mft File: 16CD7877C91A179A0A6751085603DA8E7DE539F0.mft (raw, json) Hash identifier: r7tO/nSIAfPaw0iUalKkOjzQp3MS46xGwMF4IQYhUAs= Subject key identifier: 63:21:06:9A:B1:F7:11:79:CE:D1:42:73:2C:FB:19:8F:6C:16:C7:11 Authority key identifier: 16:CD:78:77:C9:1A:17:9A:0A:67:51:08:56:03:DA:8E:7D:E5:39:F0 Certificate issuer: /CN=16CD7877C91A179A0A6751085603DA8E7DE539F0 Certificate serial: 1100DE46450F48A6F65F52310F049AAD5D321092 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/16CD7877C91A179A0A6751085603DA8E7DE539F0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/648b6583-4122-469d-8384-3af1bcc6607f/0/16CD7877C91A179A0A6751085603DA8E7DE539F0.mft Manifest number: 0461 Signing time: Sun 15 Jun 2025 22:41:25 +0000 Manifest this update: Sun 15 Jun 2025 22:36:25 +0000 Manifest next update: Thu 19 Jun 2025 07:30:25 +0000 Files and hashes: 1: 16CD7877C91A179A0A6751085603DA8E7DE539F0.crl (hash: 6HW7gAdrId7GD12HnO4QjiB5+Ep3ZRcG7ZCFnSL4ukk=) 2: 3130332e3134372e3133342e302f32332d3234203d3e20313339393633.roa (hash: BjppJfwXPbmHCeUAWsFqIjK/iMCacW8kVEyJMndZWBE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/648b6583-4122-469d-8384-3af1bcc6607f/0/16CD7877C91A179A0A6751085603DA8E7DE539F0.crl rsync://repo-rpki.idnic.net/repo/648b6583-4122-469d-8384-3af1bcc6607f/0/16CD7877C91A179A0A6751085603DA8E7DE539F0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/16CD7877C91A179A0A6751085603DA8E7DE539F0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 07:30:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:00:de:46:45:0f:48:a6:f6:5f:52:31:0f:04:9a:ad:5d:32:10:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16CD7877C91A179A0A6751085603DA8E7DE539F0 Validity Not Before: Jun 15 22:36:25 2025 GMT Not After : Jun 19 07:30:25 2025 GMT Subject: CN=6321069AB1F71179CED142732CFB198F6C16C711 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:e2:c6:d8:b9:8d:47:db:30:3c:17:8e:2f:74: 05:3c:38:f4:b1:c5:ee:fa:33:08:c3:84:1a:30:0b: 7b:32:69:a2:4b:d1:a7:4e:a6:57:3e:9b:39:15:2c: 89:c7:40:e0:59:9f:69:5f:d5:0e:bd:70:33:58:21: ad:ab:95:b6:9e:7a:f6:05:71:27:a9:cb:b1:0c:73: d7:25:4c:80:dd:64:19:32:32:f4:42:e7:9b:6d:d6: f1:64:f8:a0:16:a0:25:af:94:53:65:52:9a:69:9c: b0:d5:89:21:83:87:fa:f7:ff:d0:8d:c3:8a:b9:77: d9:aa:50:df:d5:21:8e:fc:d0:4d:f1:cd:30:2c:b8: fb:bb:ee:52:b5:c1:0c:52:0a:8a:a3:9a:62:d0:68: 5f:cf:61:53:a9:9b:f7:73:a1:48:cd:a6:69:90:d0: 1c:b6:ad:ec:74:36:79:23:e7:ef:4b:99:c6:00:ac: 9b:de:e0:12:4a:c3:6b:45:13:a5:d4:d8:f7:f5:b2: 36:d8:71:23:01:ba:1f:27:09:fb:1b:fe:6f:c3:59: 5a:bb:50:2a:61:b5:41:fa:9e:96:db:1c:cf:4e:69: 96:14:e6:4f:bf:c0:66:1f:de:02:b1:79:0c:0a:47: ef:0d:18:73:a8:d9:19:e4:f3:bb:15:19:47:3f:63: 76:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:21:06:9A:B1:F7:11:79:CE:D1:42:73:2C:FB:19:8F:6C:16:C7:11 X509v3 Authority Key Identifier: keyid:16:CD:78:77:C9:1A:17:9A:0A:67:51:08:56:03:DA:8E:7D:E5:39:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/648b6583-4122-469d-8384-3af1bcc6607f/0/16CD7877C91A179A0A6751085603DA8E7DE539F0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/16CD7877C91A179A0A6751085603DA8E7DE539F0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/648b6583-4122-469d-8384-3af1bcc6607f/0/16CD7877C91A179A0A6751085603DA8E7DE539F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:8b:1b:d8:ce:6e:e1:21:ef:1e:55:58:e8:59:0e:ca:97:5e: 4c:06:cd:8f:e4:36:88:c6:58:eb:b1:8a:48:18:91:29:bd:10: 7f:00:4d:23:a1:11:66:33:94:e5:db:31:35:0b:46:0d:62:87: 1e:a1:11:97:7f:6b:0d:1a:ac:a5:73:ff:d8:fa:9c:db:2b:df: c1:5d:83:eb:07:10:28:b4:d3:58:15:1e:14:ea:d3:d1:66:f2: 11:95:f0:5c:43:0c:30:75:36:d2:e9:51:6d:1b:1b:12:0e:22: 2f:29:d4:ef:da:3c:97:44:63:aa:bf:7c:b7:c6:ae:6a:26:7b: 18:78:ba:ba:5f:fb:7d:5b:75:e7:e7:f2:9e:52:54:0d:ae:ba: 18:59:6d:42:fb:60:5c:2e:84:cf:1a:4c:7a:4e:24:9d:46:24: 2b:8b:24:98:f4:dd:3e:aa:09:60:9f:12:58:58:e9:b2:ad:51: 87:d3:a8:39:7c:60:47:42:04:ae:e7:6d:51:e7:31:52:b5:75: 33:6c:04:85:fe:0e:81:37:2d:ca:b0:32:22:11:22:c7:be:e8: 1b:97:85:ff:39:af:9a:66:de:c3:da:78:79:c8:d5:75:5a:93: a5:05:53:ac:69:86:e2:48:e8:e3:0d:03:cb:5d:4f:cb:d4:73: 33:49:f3:55 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEQDeRkUPSKb2X1IxDwSarV0yEJIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTZDRDc4NzdDOTFBMTc5QTBBNjc1MTA4NTYwM0RBOEU3 REU1MzlGMDAeFw0yNTA2MTUyMjM2MjVaFw0yNTA2MTkwNzMwMjVaMDMxMTAvBgNV BAMTKDYzMjEwNjlBQjFGNzExNzlDRUQxNDI3MzJDRkIxOThGNkMxNkM3MTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCf4sbYuY1H2zA8F44vdAU8OPSx xe76MwjDhBowC3syaaJL0adOplc+mzkVLInHQOBZn2lf1Q69cDNYIa2rlbaeevYF cSepy7EMc9clTIDdZBkyMvRC55tt1vFk+KAWoCWvlFNlUpppnLDViSGDh/r3/9CN w4q5d9mqUN/VIY780E3xzTAsuPu77lK1wQxSCoqjmmLQaF/PYVOpm/dzoUjNpmmQ 0By2rex0Nnkj5+9LmcYArJve4BJKw2tFE6XU2Pf1sjbYcSMBuh8nCfsb/m/DWVq7 UCphtUH6npbbHM9OaZYU5k+/wGYf3gKxeQwKR+8NGHOo2Rnk87sVGUc/Y3YJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYyEGmrH3EXnO0UJzLPsZj2wWxxEwHwYDVR0j BBgwFoAUFs14d8kaF5oKZ1EIVgPajn3lOfAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NDhiNjU4My00MTIyLTQ2OWQtODM4NC0zYWYxYmNjNjYwN2YvMC8xNkNENzg3N0M5 MUExNzlBMEE2NzUxMDg1NjAzREE4RTdERTUzOUYwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTZDRDc4NzdDOTFBMTc5QTBBNjc1MTA4NTYwM0RBOEU3REU1 MzlGMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjQ4YjY1ODMtNDEyMi00NjlkLTgz ODQtM2FmMWJjYzY2MDdmLzAvMTZDRDc4NzdDOTFBMTc5QTBBNjc1MTA4NTYwM0RB OEU3REU1MzlGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKGLG9jObuEh7x5VWOhZDsqXXkwGzY/kNojG WOuxikgYkSm9EH8ATSOhEWYzlOXbMTULRg1ihx6hEZd/aw0arKVz/9j6nNsr38Fd g+sHECi001gVHhTq09Fm8hGV8FxDDDB1NtLpUW0bGxIOIi8p1O/aPJdEY6q/fLfG rmomexh4urpf+31bdefn8p5SVA2uuhhZbUL7YFwuhM8aTHpOJJ1GJCuLJJj03T6q CWCfElhY6bKtUYfTqDl8YEdCBK7nbVHnMVK1dTNsBIX+DoE3LcqwMiIRIse+6BuX hf85r5pm3sPaeHnI1XVak6UFU6xphuJI6OMNA8tdT8vUczNJ81U= -----END CERTIFICATE-----Generated at Tue Jun 17 11:12:57 2025 by rpki-client