$ rpki-client -vvf repo-rpki.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/16F8223FA3342ACE31ED864C538E59E22A52BC89.mft File: 16F8223FA3342ACE31ED864C538E59E22A52BC89.mft (raw, json) Hash identifier: do9cOmCsDI09Aadk/Anxi4adhGYJN+/d9j1mMYVac98= Subject key identifier: 9D:7A:C6:B9:09:2C:5C:29:19:D2:AE:B3:89:FD:95:3D:22:FE:39:60 Authority key identifier: 16:F8:22:3F:A3:34:2A:CE:31:ED:86:4C:53:8E:59:E2:2A:52:BC:89 Certificate issuer: /CN=16F8223FA3342ACE31ED864C538E59E22A52BC89 Certificate serial: 658DB9694836A4E8E3317CEAC1DA7EF1B2CF2B18 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/16F8223FA3342ACE31ED864C538E59E22A52BC89.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/16F8223FA3342ACE31ED864C538E59E22A52BC89.mft Manifest number: 6B Signing time: Thu 07 Aug 2025 20:01:14 +0000 Manifest this update: Thu 07 Aug 2025 19:56:14 +0000 Manifest next update: Mon 11 Aug 2025 07:45:14 +0000 Files and hashes: 1: 3136302e32352e3135372e302f32342d3234203d3e20313533303835.roa (hash: aKd9F4ACmgNItMgz+uXKOhQG73PpNtSpdGFc0rlMBFo=) 2: 16F8223FA3342ACE31ED864C538E59E22A52BC89.crl (hash: pnwDBYe3APuV3OCtcWjf00TXy9apC2l6yhpgPyFsto4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/16F8223FA3342ACE31ED864C538E59E22A52BC89.crl rsync://repo-rpki.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/16F8223FA3342ACE31ED864C538E59E22A52BC89.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/16F8223FA3342ACE31ED864C538E59E22A52BC89.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 07:45:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:8d:b9:69:48:36:a4:e8:e3:31:7c:ea:c1:da:7e:f1:b2:cf:2b:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16F8223FA3342ACE31ED864C538E59E22A52BC89 Validity Not Before: Aug 7 19:56:14 2025 GMT Not After : Aug 11 07:45:14 2025 GMT Subject: CN=9D7AC6B9092C5C2919D2AEB389FD953D22FE3960 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:b3:d2:79:01:60:78:94:8a:50:5b:c1:73:1e: 55:5f:d2:bc:c0:79:11:2d:e6:24:48:a2:ab:a5:38: 3f:f4:3d:23:1e:90:5d:8e:bb:d6:ec:82:15:33:ab: 9d:ff:b5:25:77:18:ab:f3:01:20:98:e4:6b:0a:8f: ec:43:4c:50:b5:60:07:c4:7c:29:48:70:0c:6d:4d: ea:f7:3f:d1:52:2a:9f:0f:d0:ac:de:5b:6d:6b:12: d5:dd:a3:88:d2:d4:c0:41:e1:0d:1b:3f:32:0c:3e: e7:02:28:51:ec:79:78:9d:64:73:6f:27:a9:5a:85: 17:db:0a:b3:71:0f:f6:18:52:f4:f0:29:e1:82:f8: 9c:09:4c:8d:0f:17:12:df:41:03:3a:0c:0d:79:32: 28:b7:ce:e4:d2:9b:94:5b:a2:54:d7:85:a1:b9:0f: e0:19:9c:a6:3d:4f:09:a8:e8:6f:c2:c6:1c:47:d6: 33:cd:aa:3d:ee:5a:74:81:c5:ae:61:e0:f8:a4:ff: d1:ac:25:d5:2a:6f:ec:7e:9a:2e:1e:b9:83:b9:c1: 67:0d:cf:b9:67:7c:39:f5:b5:99:20:71:f7:92:be: 75:be:0b:d3:2f:66:5a:a1:7c:28:11:34:72:4e:c6: c3:b8:db:e6:4b:e7:15:88:fd:28:e7:91:5c:bc:e3: 3a:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:7A:C6:B9:09:2C:5C:29:19:D2:AE:B3:89:FD:95:3D:22:FE:39:60 X509v3 Authority Key Identifier: keyid:16:F8:22:3F:A3:34:2A:CE:31:ED:86:4C:53:8E:59:E2:2A:52:BC:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/16F8223FA3342ACE31ED864C538E59E22A52BC89.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/16F8223FA3342ACE31ED864C538E59E22A52BC89.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/16F8223FA3342ACE31ED864C538E59E22A52BC89.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:db:c1:15:48:0c:9a:4a:ee:1c:57:70:42:bf:a6:c1:0d:d2: 7b:53:2c:37:0b:63:e0:c6:64:96:3a:95:db:96:05:98:26:a4: cc:ce:9b:ef:63:bb:54:6b:e1:fa:e8:4b:73:ad:bb:61:c7:62: df:00:d1:06:68:f0:bb:d2:b5:68:28:a4:39:85:39:c4:d0:ec: 9c:4b:7a:2e:e7:36:33:dc:52:33:32:59:2c:2b:65:c2:15:59: cc:30:71:13:46:7a:91:c2:92:c7:06:81:c5:69:7e:d5:55:9f: f2:95:1b:80:b6:0e:9b:28:0f:b5:c0:48:14:da:cf:6e:4d:96: 58:50:83:b2:ac:f4:87:ed:e0:4e:c9:a1:e2:15:3d:34:4d:09: 49:66:c9:3b:6d:6a:63:86:0e:51:43:87:9a:3c:f7:15:c0:94: 6f:0b:15:3a:5f:2f:89:f7:6a:9f:63:47:f5:72:52:3e:38:9a: 09:35:73:f8:13:a3:a9:99:33:48:3b:56:e7:f2:2d:3c:5f:0a: 37:b6:ab:aa:22:cf:c0:c3:30:90:d7:ee:59:5f:12:de:69:b2: 94:78:a8:8c:31:2c:6d:9d:7e:5a:24:8c:12:7c:a8:c8:35:10: af:9c:96:fb:32:01:f3:6a:bd:b1:6b:ff:30:1d:6c:b1:de:3d: 61:35:f0:f0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZY25aUg2pOjjMXzqwdp+8bLPKxgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTZGODIyM0ZBMzM0MkFDRTMxRUQ4NjRDNTM4RTU5RTIy QTUyQkM4OTAeFw0yNTA4MDcxOTU2MTRaFw0yNTA4MTEwNzQ1MTRaMDMxMTAvBgNV BAMTKDlEN0FDNkI5MDkyQzVDMjkxOUQyQUVCMzg5RkQ5NTNEMjJGRTM5NjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDps9J5AWB4lIpQW8FzHlVf0rzA eREt5iRIoqulOD/0PSMekF2Ou9bsghUzq53/tSV3GKvzASCY5GsKj+xDTFC1YAfE fClIcAxtTer3P9FSKp8P0KzeW21rEtXdo4jS1MBB4Q0bPzIMPucCKFHseXidZHNv J6lahRfbCrNxD/YYUvTwKeGC+JwJTI0PFxLfQQM6DA15Mii3zuTSm5RbolTXhaG5 D+AZnKY9Twmo6G/CxhxH1jPNqj3uWnSBxa5h4Pik/9GsJdUqb+x+mi4euYO5wWcN z7lnfDn1tZkgcfeSvnW+C9MvZlqhfCgRNHJOxsO42+ZL5xWI/SjnkVy84zppAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnXrGuQksXCkZ0q6zif2VPSL+OWAwHwYDVR0j BBgwFoAUFvgiP6M0Ks4x7YZMU45Z4ipSvIkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j M2E5ZDc4OC1iY2Y3LTQ2ZjAtOGI1Yi0wZDdkMWZjYjZkYTMvMC8xNkY4MjIzRkEz MzQyQUNFMzFFRDg2NEM1MzhFNTlFMjJBNTJCQzg5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMTZGODIyM0ZBMzM0MkFDRTMxRUQ4NjRDNTM4RTU5RTIyQTUy QkM4OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzNhOWQ3ODgtYmNmNy00NmYwLThi NWItMGQ3ZDFmY2I2ZGEzLzAvMTZGODIyM0ZBMzM0MkFDRTMxRUQ4NjRDNTM4RTU5 RTIyQTUyQkM4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI/bwRVIDJpK7hxXcEK/psEN0ntTLDcLY+DG ZJY6lduWBZgmpMzOm+9ju1Rr4froS3Otu2HHYt8A0QZo8LvStWgopDmFOcTQ7JxL ei7nNjPcUjMyWSwrZcIVWcwwcRNGepHCkscGgcVpftVVn/KVG4C2DpsoD7XASBTa z25NllhQg7Ks9Ift4E7JoeIVPTRNCUlmyTttamOGDlFDh5o89xXAlG8LFTpfL4n3 ap9jR/VyUj44mgk1c/gTo6mZM0g7VufyLTxfCje2q6oiz8DDMJDX7llfEt5pspR4 qIwxLG2dflokjBJ8qMg1EK+clvsyAfNqvbFr/zAdbLHePWE18PA= -----END CERTIFICATE-----Generated at Sat Aug 9 10:33:15 2025 by rpki-client