$ rpki-client -vvf repo-rpki.idnic.net/repo/de3f2e9b-1068-4fa9-ba1d-59d071a412a2/0/16889A9053AE7EB169CF822E9EE670A5C618F97E.mft File: 16889A9053AE7EB169CF822E9EE670A5C618F97E.mft (raw, json) Hash identifier: elGISnX1WyBDCTr1HgXJqRRNkMvbSH5HoQunlwBjFQk= Subject key identifier: 66:0B:33:70:79:6D:6C:27:ED:19:BF:FD:A5:44:BB:37:C3:69:63:41 Authority key identifier: 16:88:9A:90:53:AE:7E:B1:69:CF:82:2E:9E:E6:70:A5:C6:18:F9:7E Certificate issuer: /CN=16889A9053AE7EB169CF822E9EE670A5C618F97E Certificate serial: 2B4FE281070CC229E33E97186222DD63E396B33B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/16889A9053AE7EB169CF822E9EE670A5C618F97E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/de3f2e9b-1068-4fa9-ba1d-59d071a412a2/0/16889A9053AE7EB169CF822E9EE670A5C618F97E.mft Manifest number: 011D Signing time: Mon 11 Aug 2025 00:51:11 +0000 Manifest this update: Mon 11 Aug 2025 00:46:11 +0000 Manifest next update: Thu 14 Aug 2025 01:52:11 +0000 Files and hashes: 1: 3130332e36372e38302e302f32342d3234203d3e20313532303031.roa (hash: km/J3O6wA+/+giyqpUHqvd0x617eyhN+dq0ZwqMW8PA=) 2: 16889A9053AE7EB169CF822E9EE670A5C618F97E.crl (hash: gyd05nu6b2bJRc/sNTmJM+ZEWpOnF+2o7Kbl61B6VyQ=) 3: 3130332e36372e38302e302f32332d3233203d3e20313532303031.roa (hash: dOd/WmcL1O2XqOSnpwsMSYP0+oN55Jz82rLt6CdY2eM=) 4: 3130332e36372e38312e302f32342d3234203d3e20313532303031.roa (hash: VUXxXSjdw/tewePYso0nLi7PuBiFv1hIb0UmgFSc+fg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/de3f2e9b-1068-4fa9-ba1d-59d071a412a2/0/16889A9053AE7EB169CF822E9EE670A5C618F97E.crl rsync://repo-rpki.idnic.net/repo/de3f2e9b-1068-4fa9-ba1d-59d071a412a2/0/16889A9053AE7EB169CF822E9EE670A5C618F97E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/16889A9053AE7EB169CF822E9EE670A5C618F97E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 01:52:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:4f:e2:81:07:0c:c2:29:e3:3e:97:18:62:22:dd:63:e3:96:b3:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16889A9053AE7EB169CF822E9EE670A5C618F97E Validity Not Before: Aug 11 00:46:11 2025 GMT Not After : Aug 14 01:52:11 2025 GMT Subject: CN=660B3370796D6C27ED19BFFDA544BB37C3696341 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b0:9b:15:e7:82:8d:dc:22:7a:9c:c7:90:1b: 96:54:d4:63:e1:cf:57:af:0c:ac:d1:a0:72:f4:d3: da:a5:64:5c:c9:44:b6:b8:c7:6e:b5:fa:f0:ab:a8: d6:6b:0a:a6:ed:8a:11:e3:64:a2:07:79:00:50:9c: b3:e8:99:cb:83:fa:8a:31:1c:44:32:2e:fa:f7:cc: 89:69:05:a1:68:f8:c7:f2:ff:8d:ec:61:f1:9e:a6: b4:ce:4a:20:90:0b:10:8a:18:8e:2f:08:ca:82:78: ed:da:21:7c:f4:ac:c9:64:c9:df:84:07:fa:2b:ff: 5b:e3:d4:cc:d1:9a:8e:d8:ef:b1:0c:28:94:df:51: 4b:17:05:db:41:c7:cd:58:b6:a5:34:e9:c5:ab:0a: 07:9e:2d:5a:de:a6:81:fe:c9:a1:e8:68:93:6b:08: 62:6f:40:91:12:05:d0:ac:53:91:02:d5:82:d1:2f: ad:34:a0:66:99:97:49:c9:24:80:a0:dc:32:16:bd: 19:29:15:54:66:83:4f:9a:d8:63:b4:cb:0e:6e:c3: c7:c7:54:b5:21:ed:45:66:7e:16:c4:19:88:aa:ee: 97:f1:1f:c0:74:26:28:b7:25:d8:47:8c:65:11:7b: 80:24:5f:a7:72:f2:74:3a:9d:5e:0b:9b:fb:21:11: fe:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:0B:33:70:79:6D:6C:27:ED:19:BF:FD:A5:44:BB:37:C3:69:63:41 X509v3 Authority Key Identifier: keyid:16:88:9A:90:53:AE:7E:B1:69:CF:82:2E:9E:E6:70:A5:C6:18:F9:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/de3f2e9b-1068-4fa9-ba1d-59d071a412a2/0/16889A9053AE7EB169CF822E9EE670A5C618F97E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/16889A9053AE7EB169CF822E9EE670A5C618F97E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/de3f2e9b-1068-4fa9-ba1d-59d071a412a2/0/16889A9053AE7EB169CF822E9EE670A5C618F97E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:f7:c2:68:73:4d:12:d9:50:39:59:04:77:64:67:61:73:71: b3:8f:3e:8e:95:bc:7e:9b:b1:74:73:32:c3:2f:89:cc:0c:bc: 09:d4:53:4a:60:13:61:9f:a2:77:ae:d4:a8:fc:75:97:88:a3: 00:8e:54:b8:1a:95:12:91:24:06:97:94:63:7a:3d:8f:9a:3a: f6:2a:5e:b1:50:cc:ce:09:2b:15:04:fe:12:05:c8:89:f5:84: f6:44:63:8d:ee:58:0e:46:30:b0:bb:f3:e1:a3:f8:ea:25:9d: 75:14:df:c2:33:38:86:01:fa:50:65:45:c8:cf:e9:b3:9c:1e: dd:e7:67:58:a0:ef:4d:1a:1a:04:ad:4f:63:9a:48:8a:82:97: 33:74:cb:1a:d4:f6:3c:e1:39:c5:e5:7e:6e:4e:36:24:51:30: 75:b3:26:b4:a4:e3:32:b8:01:d1:4e:d4:97:de:14:b1:84:dc: 05:92:6c:d2:3e:72:fd:70:e9:27:6e:ac:2d:5a:bb:05:9f:7c: e2:7e:5f:c1:4a:14:a7:5b:dd:fd:44:1f:32:e4:79:13:26:bd: 9a:7c:41:80:53:80:08:5a:8a:a1:46:9c:d5:9d:e3:4d:33:0c: f4:50:32:ea:48:11:2a:00:4f:e5:dd:73:15:57:d6:74:c0:8e: 00:56:b4:e3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK0/igQcMwinjPpcYYiLdY+OWszswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTY4ODlBOTA1M0FFN0VCMTY5Q0Y4MjJFOUVFNjcwQTVD NjE4Rjk3RTAeFw0yNTA4MTEwMDQ2MTFaFw0yNTA4MTQwMTUyMTFaMDMxMTAvBgNV BAMTKDY2MEIzMzcwNzk2RDZDMjdFRDE5QkZGREE1NDRCQjM3QzM2OTYzNDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCsJsV54KN3CJ6nMeQG5ZU1GPh z1evDKzRoHL009qlZFzJRLa4x261+vCrqNZrCqbtihHjZKIHeQBQnLPomcuD+oox HEQyLvr3zIlpBaFo+Mfy/43sYfGeprTOSiCQCxCKGI4vCMqCeO3aIXz0rMlkyd+E B/or/1vj1MzRmo7Y77EMKJTfUUsXBdtBx81YtqU06cWrCgeeLVrepoH+yaHoaJNr CGJvQJESBdCsU5EC1YLRL600oGaZl0nJJICg3DIWvRkpFVRmg0+a2GO0yw5uw8fH VLUh7UVmfhbEGYiq7pfxH8B0Jii3JdhHjGURe4AkX6dy8nQ6nV4Lm/shEf4DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZgszcHltbCftGb/9pUS7N8NpY0EwHwYDVR0j BBgwFoAUFoiakFOufrFpz4IunuZwpcYY+X4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZTNmMmU5Yi0xMDY4LTRmYTktYmExZC01OWQwNzFhNDEyYTIvMC8xNjg4OUE5MDUz QUU3RUIxNjlDRjgyMkU5RUU2NzBBNUM2MThGOTdFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTY4ODlBOTA1M0FFN0VCMTY5Q0Y4MjJFOUVFNjcwQTVDNjE4 Rjk3RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGUzZjJlOWItMTA2OC00ZmE5LWJh MWQtNTlkMDcxYTQxMmEyLzAvMTY4ODlBOTA1M0FFN0VCMTY5Q0Y4MjJFOUVFNjcw QTVDNjE4Rjk3RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAET3wmhzTRLZUDlZBHdkZ2FzcbOPPo6VvH6b sXRzMsMvicwMvAnUU0pgE2Gfoneu1Kj8dZeIowCOVLgalRKRJAaXlGN6PY+aOvYq XrFQzM4JKxUE/hIFyIn1hPZEY43uWA5GMLC78+Gj+OolnXUU38IzOIYB+lBlRcjP 6bOcHt3nZ1ig700aGgStT2OaSIqClzN0yxrU9jzhOcXlfm5ONiRRMHWzJrSk4zK4 AdFO1JfeFLGE3AWSbNI+cv1w6SdurC1auwWffOJ+X8FKFKdb3f1EHzLkeRMmvZp8 QYBTgAhaiqFGnNWd400zDPRQMupIESoAT+XdcxVX1nTAjgBWtOM= -----END CERTIFICATE-----Generated at Tue Aug 12 22:46:15 2025 by rpki-client