$ rpki-client -vvf repo-rpki.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/16F8223FA3342ACE31ED864C538E59E22A52BC89.mft File: 16F8223FA3342ACE31ED864C538E59E22A52BC89.mft (raw, json) Hash identifier: GgzldDTLbMRKCg7uUCcRRYhgCmFvrYF6CB9z96b6d0s= Subject key identifier: 07:13:FC:01:8B:4D:C0:43:E7:01:0B:C4:9D:CF:0F:86:2F:B8:B7:C6 Authority key identifier: 16:F8:22:3F:A3:34:2A:CE:31:ED:86:4C:53:8E:59:E2:2A:52:BC:89 Certificate issuer: /CN=16F8223FA3342ACE31ED864C538E59E22A52BC89 Certificate serial: 332889A70829D3B028940786B0E9CDC004595C3D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/16F8223FA3342ACE31ED864C538E59E22A52BC89.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/16F8223FA3342ACE31ED864C538E59E22A52BC89.mft Manifest number: 92 Signing time: Tue 04 Nov 2025 12:41:13 +0000 Manifest this update: Tue 04 Nov 2025 12:36:13 +0000 Manifest next update: Fri 07 Nov 2025 21:28:13 +0000 Files and hashes: 1: 16F8223FA3342ACE31ED864C538E59E22A52BC89.crl (hash: imBaN5B2Siq0kKtdt8VSHcQQ0Ay0SpqjLY+bVzUt6es=) 2: 3136302e32352e3135372e302f32342d3234203d3e20313533303835.roa (hash: aKd9F4ACmgNItMgz+uXKOhQG73PpNtSpdGFc0rlMBFo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/16F8223FA3342ACE31ED864C538E59E22A52BC89.crl rsync://repo-rpki.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/16F8223FA3342ACE31ED864C538E59E22A52BC89.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/16F8223FA3342ACE31ED864C538E59E22A52BC89.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 10:49:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:28:89:a7:08:29:d3:b0:28:94:07:86:b0:e9:cd:c0:04:59:5c:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16F8223FA3342ACE31ED864C538E59E22A52BC89 Validity Not Before: Nov 4 12:36:13 2025 GMT Not After : Nov 7 21:28:13 2025 GMT Subject: CN=0713FC018B4DC043E7010BC49DCF0F862FB8B7C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:fe:a0:68:6c:be:e0:e2:55:d5:e2:00:ad:67: 7f:9a:c8:30:fc:1b:9b:da:ea:29:94:4b:24:6e:a6: ec:fb:2f:a6:d5:48:c0:24:43:c7:e2:2a:3a:60:c8: 85:51:c1:9f:ff:16:87:e8:6f:95:34:38:03:22:15: b9:e5:e1:62:7a:67:53:24:6d:00:18:13:e0:b1:e6: 51:68:1b:29:f4:5f:51:f0:4a:94:f5:56:21:c6:ea: 19:36:85:ba:0d:73:c9:c5:68:ab:32:6e:3a:be:56: 1b:04:1c:19:a9:3c:52:be:66:a5:21:49:54:0e:48: e3:3e:c6:b3:93:68:90:48:c8:53:a4:1c:cd:a2:87: f8:1f:ea:ff:8b:85:b5:3e:00:4e:58:9f:ea:25:f5: cf:d5:30:d3:48:af:e0:1a:8b:4a:0e:d9:63:28:3b: 8d:54:e6:69:1b:0b:d5:99:95:b0:b6:e2:7e:17:d3: fe:49:e2:34:44:4b:fd:67:80:7a:67:55:a6:ac:cb: e4:1d:ae:db:78:1f:9d:6b:f1:3f:a0:cc:d3:bc:e5: 35:89:96:d2:67:ef:74:ca:aa:ca:49:4d:a9:ae:f1: d9:e5:74:40:32:6f:e5:3f:62:30:ba:71:26:3f:9d: df:5e:08:2d:56:18:4d:58:e4:b7:40:db:66:74:c5: c9:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:13:FC:01:8B:4D:C0:43:E7:01:0B:C4:9D:CF:0F:86:2F:B8:B7:C6 X509v3 Authority Key Identifier: keyid:16:F8:22:3F:A3:34:2A:CE:31:ED:86:4C:53:8E:59:E2:2A:52:BC:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/16F8223FA3342ACE31ED864C538E59E22A52BC89.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/16F8223FA3342ACE31ED864C538E59E22A52BC89.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/16F8223FA3342ACE31ED864C538E59E22A52BC89.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:74:f0:ea:bb:a4:c1:6c:50:06:b7:65:5d:93:cb:4a:c1:5e: 1b:57:ca:7e:a1:16:96:d0:a9:e0:5c:7e:62:e3:b5:b6:a1:86: c9:3a:ad:63:ed:a5:cb:4e:f8:77:2a:c7:ea:a2:c2:c8:85:f1: 98:cb:04:a5:ff:ba:14:87:2c:5a:ac:fb:b0:36:4e:56:7b:00: a4:e7:44:23:6d:77:98:89:2f:24:09:da:5d:0a:6d:55:1d:aa: a7:7e:c1:2d:98:fa:c8:e7:6d:9a:3a:94:44:bb:dc:d2:6c:3f: 17:52:da:2b:61:df:82:49:5b:17:22:a5:e3:a0:6f:33:0b:a1: 42:d3:45:eb:6b:08:c7:f9:74:ca:8e:53:b3:f2:ca:76:d7:8d: bb:bf:a5:d7:4b:83:8e:ae:b1:99:b2:05:37:20:51:35:d6:cd: 61:9e:da:84:72:ea:3a:52:a3:c0:02:7f:ee:8f:3e:bb:51:06: 4c:30:e3:87:41:66:4f:68:1f:a5:89:08:f2:6b:fa:89:d4:8b: 89:e3:b4:45:89:70:5b:21:2b:ce:28:3c:14:24:e9:c0:6c:48: 2f:19:0f:b0:05:40:e6:a9:f7:76:28:55:83:e1:57:21:71:9a: 33:1f:97:ff:0c:e2:b7:93:f9:33:6e:e6:82:84:6d:bd:25:e9: 27:d3:85:b3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMyiJpwgp07AolAeGsOnNwARZXD0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTZGODIyM0ZBMzM0MkFDRTMxRUQ4NjRDNTM4RTU5RTIy QTUyQkM4OTAeFw0yNTExMDQxMjM2MTNaFw0yNTExMDcyMTI4MTNaMDMxMTAvBgNV BAMTKDA3MTNGQzAxOEI0REMwNDNFNzAxMEJDNDlEQ0YwRjg2MkZCOEI3QzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCb/qBobL7g4lXV4gCtZ3+ayDD8 G5va6imUSyRupuz7L6bVSMAkQ8fiKjpgyIVRwZ//Fofob5U0OAMiFbnl4WJ6Z1Mk bQAYE+Cx5lFoGyn0X1HwSpT1ViHG6hk2hboNc8nFaKsybjq+VhsEHBmpPFK+ZqUh SVQOSOM+xrOTaJBIyFOkHM2ih/gf6v+LhbU+AE5Yn+ol9c/VMNNIr+Aai0oO2WMo O41U5mkbC9WZlbC24n4X0/5J4jRES/1ngHpnVaasy+Qdrtt4H51r8T+gzNO85TWJ ltJn73TKqspJTamu8dnldEAyb+U/YjC6cSY/nd9eCC1WGE1Y5LdA22Z0xcl5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBxP8AYtNwEPnAQvEnc8Phi+4t8YwHwYDVR0j BBgwFoAUFvgiP6M0Ks4x7YZMU45Z4ipSvIkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j M2E5ZDc4OC1iY2Y3LTQ2ZjAtOGI1Yi0wZDdkMWZjYjZkYTMvMC8xNkY4MjIzRkEz MzQyQUNFMzFFRDg2NEM1MzhFNTlFMjJBNTJCQzg5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMTZGODIyM0ZBMzM0MkFDRTMxRUQ4NjRDNTM4RTU5RTIyQTUy QkM4OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzNhOWQ3ODgtYmNmNy00NmYwLThi NWItMGQ3ZDFmY2I2ZGEzLzAvMTZGODIyM0ZBMzM0MkFDRTMxRUQ4NjRDNTM4RTU5 RTIyQTUyQkM4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGR08Oq7pMFsUAa3ZV2Ty0rBXhtXyn6hFpbQ qeBcfmLjtbahhsk6rWPtpctO+Hcqx+qiwsiF8ZjLBKX/uhSHLFqs+7A2TlZ7AKTn RCNtd5iJLyQJ2l0KbVUdqqd+wS2Y+sjnbZo6lES73NJsPxdS2ith34JJWxcipeOg bzMLoULTRetrCMf5dMqOU7PyynbXjbu/pddLg46usZmyBTcgUTXWzWGe2oRy6jpS o8ACf+6PPrtRBkww44dBZk9oH6WJCPJr+onUi4njtEWJcFshK84oPBQk6cBsSC8Z D7AFQOap93YoVYPhVyFxmjMfl/8M4reT+TNu5oKEbb0l6SfThbM= -----END CERTIFICATE-----Generated at Wed Nov 5 01:21:46 2025 by rpki-client