$ rpki-client -vvf repo-rpki.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/16F8223FA3342ACE31ED864C538E59E22A52BC89.mft File: 16F8223FA3342ACE31ED864C538E59E22A52BC89.mft (raw, json) Hash identifier: LMR9AAprSouw3v04b4vHSIOG7XxDKAV6skZhySBFRlc= Subject key identifier: 5B:28:8C:48:F6:CD:23:9D:65:90:82:29:AC:FD:1F:73:C7:3B:3C:F0 Authority key identifier: 16:F8:22:3F:A3:34:2A:CE:31:ED:86:4C:53:8E:59:E2:2A:52:BC:89 Certificate issuer: /CN=16F8223FA3342ACE31ED864C538E59E22A52BC89 Certificate serial: 4B22A52C51943F70279892568F3CD1E77D26ED33 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/16F8223FA3342ACE31ED864C538E59E22A52BC89.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/16F8223FA3342ACE31ED864C538E59E22A52BC89.mft Manifest number: 53 Signing time: Sun 15 Jun 2025 13:21:11 +0000 Manifest this update: Sun 15 Jun 2025 13:16:11 +0000 Manifest next update: Thu 19 Jun 2025 00:04:11 +0000 Files and hashes: 1: 16F8223FA3342ACE31ED864C538E59E22A52BC89.crl (hash: w5yaEqfVFXB2RDQF3xIuJ/ZY4EqnWrWbWmN/WMun4vA=) 2: 3136302e32352e3135372e302f32342d3234203d3e20313533303835.roa (hash: aKd9F4ACmgNItMgz+uXKOhQG73PpNtSpdGFc0rlMBFo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/16F8223FA3342ACE31ED864C538E59E22A52BC89.crl rsync://repo-rpki.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/16F8223FA3342ACE31ED864C538E59E22A52BC89.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/16F8223FA3342ACE31ED864C538E59E22A52BC89.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 00:04:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:22:a5:2c:51:94:3f:70:27:98:92:56:8f:3c:d1:e7:7d:26:ed:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16F8223FA3342ACE31ED864C538E59E22A52BC89 Validity Not Before: Jun 15 13:16:11 2025 GMT Not After : Jun 19 00:04:11 2025 GMT Subject: CN=5B288C48F6CD239D65908229ACFD1F73C73B3CF0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:82:ad:08:17:2f:2d:84:79:be:08:3f:53:d1: 66:98:ef:b7:2f:5d:52:c4:c1:64:a7:f1:ec:b9:48: 77:f9:d0:8e:1d:cb:98:c4:46:61:e4:ef:ac:50:e0: f7:68:b9:3d:5f:af:5d:37:97:55:e9:8f:46:ed:7c: 26:72:eb:b6:54:a2:e0:a2:26:b0:2b:d0:95:23:20: 5d:cd:8b:a2:ab:6e:bc:a8:b7:a1:32:1d:b5:99:de: b5:82:2b:44:f0:e2:25:11:96:2e:84:9f:05:92:f6: 9a:c9:f0:7e:9c:80:2a:86:1f:c4:1b:8e:d6:bf:0c: d4:be:55:23:4c:13:23:00:33:3d:65:49:f1:c0:02: 76:ec:78:62:c6:d3:fe:37:3b:ec:da:e3:07:c3:fa: d4:00:ea:73:1f:6e:56:d0:45:fa:57:eb:cc:f2:86: 98:9f:2b:fc:a0:02:89:33:fd:d6:bf:89:7a:1a:dc: 8e:ab:45:02:e3:17:b8:a0:67:a4:ae:c6:ab:20:57: cb:14:1a:11:ae:95:6a:f4:e5:30:89:1e:25:94:27: b7:31:6e:aa:a9:48:e6:96:82:93:f2:52:4f:c3:da: d8:3c:7a:65:aa:7f:bf:cd:4c:8c:5c:da:e2:61:d2: 43:0b:5f:fe:8e:0f:90:67:73:26:77:c2:41:05:97: d2:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:28:8C:48:F6:CD:23:9D:65:90:82:29:AC:FD:1F:73:C7:3B:3C:F0 X509v3 Authority Key Identifier: keyid:16:F8:22:3F:A3:34:2A:CE:31:ED:86:4C:53:8E:59:E2:2A:52:BC:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/16F8223FA3342ACE31ED864C538E59E22A52BC89.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/16F8223FA3342ACE31ED864C538E59E22A52BC89.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/16F8223FA3342ACE31ED864C538E59E22A52BC89.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:02:68:3f:ec:90:ef:ce:c4:fd:1f:4b:00:82:cb:d2:2c:73: 81:de:d2:09:9b:fd:25:0e:cc:c0:02:f7:ae:d0:13:ac:a1:de: c6:03:8a:87:8e:82:84:2f:5d:b3:79:11:fd:19:1d:3e:1c:ee: 3a:cb:e1:de:2a:57:01:bf:31:fd:51:87:c6:97:ec:80:fe:49: 1a:b6:d6:b9:ae:ae:31:e9:67:a9:1f:eb:7b:39:96:c6:ff:5b: 66:86:65:c4:2a:5c:b6:1b:75:2b:94:3e:d0:b3:56:5e:64:a5: 26:54:5a:a7:1c:ad:1c:2e:d3:48:00:54:3c:74:5e:16:0c:40: 6b:12:c9:5e:fe:82:39:a6:30:11:9b:6c:9a:f3:b8:4e:87:b7: 3c:ae:0a:0c:76:cf:fe:ac:bb:c1:66:8e:05:92:20:4e:7a:46: 3d:83:1a:39:c5:9b:3f:9e:72:e0:41:2d:33:82:27:24:57:fc: 05:05:93:6e:b9:20:af:e8:0d:a2:c9:1b:fd:0e:a4:4f:d6:04: bb:fa:3f:d8:89:d8:f6:61:71:11:8d:cb:5e:a5:32:50:9d:82: a9:f0:e1:f1:c9:96:59:3d:64:ba:99:34:6c:89:3a:02:b3:c4: a9:c2:a1:56:78:55:be:22:8a:61:cd:0f:da:7a:83:e3:3a:3c: 2b:5b:79:9a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSyKlLFGUP3AnmJJWjzzR530m7TMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTZGODIyM0ZBMzM0MkFDRTMxRUQ4NjRDNTM4RTU5RTIy QTUyQkM4OTAeFw0yNTA2MTUxMzE2MTFaFw0yNTA2MTkwMDA0MTFaMDMxMTAvBgNV BAMTKDVCMjg4QzQ4RjZDRDIzOUQ2NTkwODIyOUFDRkQxRjczQzczQjNDRjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHgq0IFy8thHm+CD9T0WaY77cv XVLEwWSn8ey5SHf50I4dy5jERmHk76xQ4PdouT1fr103l1Xpj0btfCZy67ZUouCi JrAr0JUjIF3Ni6Krbryot6EyHbWZ3rWCK0Tw4iURli6EnwWS9prJ8H6cgCqGH8Qb jta/DNS+VSNMEyMAMz1lSfHAAnbseGLG0/43O+za4wfD+tQA6nMfblbQRfpX68zy hpifK/ygAokz/da/iXoa3I6rRQLjF7igZ6SuxqsgV8sUGhGulWr05TCJHiWUJ7cx bqqpSOaWgpPyUk/D2tg8emWqf7/NTIxc2uJh0kMLX/6OD5BncyZ3wkEFl9KrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWyiMSPbNI51lkIIprP0fc8c7PPAwHwYDVR0j BBgwFoAUFvgiP6M0Ks4x7YZMU45Z4ipSvIkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j M2E5ZDc4OC1iY2Y3LTQ2ZjAtOGI1Yi0wZDdkMWZjYjZkYTMvMC8xNkY4MjIzRkEz MzQyQUNFMzFFRDg2NEM1MzhFNTlFMjJBNTJCQzg5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMTZGODIyM0ZBMzM0MkFDRTMxRUQ4NjRDNTM4RTU5RTIyQTUy QkM4OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzNhOWQ3ODgtYmNmNy00NmYwLThi NWItMGQ3ZDFmY2I2ZGEzLzAvMTZGODIyM0ZBMzM0MkFDRTMxRUQ4NjRDNTM4RTU5 RTIyQTUyQkM4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFwCaD/skO/OxP0fSwCCy9Isc4He0gmb/SUO zMAC967QE6yh3sYDioeOgoQvXbN5Ef0ZHT4c7jrL4d4qVwG/Mf1Rh8aX7ID+SRq2 1rmurjHpZ6kf63s5lsb/W2aGZcQqXLYbdSuUPtCzVl5kpSZUWqccrRwu00gAVDx0 XhYMQGsSyV7+gjmmMBGbbJrzuE6HtzyuCgx2z/6su8FmjgWSIE56Rj2DGjnFmz+e cuBBLTOCJyRX/AUFk265IK/oDaLJG/0OpE/WBLv6P9iJ2PZhcRGNy16lMlCdgqnw 4fHJllk9ZLqZNGyJOgKzxKnCoVZ4Vb4iimHND9p6g+M6PCtbeZo= -----END CERTIFICATE-----Generated at Tue Jun 17 00:17:45 2025 by rpki-client