$ rpki-client -vvf repo-rpki.idnic.net/repo/3c9941a4-28d2-47d1-91e7-acab59084462/0/B16C4772F3D77045BBA997F94CEACA9E0DCC2865.mft File: B16C4772F3D77045BBA997F94CEACA9E0DCC2865.mft (raw, json) Hash identifier: jDbb59+ksxUlqCm9LbHhl0k4i7fDtRfynJ++R2PQSpc= Subject key identifier: 53:D6:5B:2D:A8:D2:83:8A:02:A7:65:61:B0:55:52:7E:76:30:22:73 Authority key identifier: B1:6C:47:72:F3:D7:70:45:BB:A9:97:F9:4C:EA:CA:9E:0D:CC:28:65 Certificate issuer: /CN=B16C4772F3D77045BBA997F94CEACA9E0DCC2865 Certificate serial: 2D6C953E6DA19920E098565BFCE70FBEDBEAD60D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B16C4772F3D77045BBA997F94CEACA9E0DCC2865.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3c9941a4-28d2-47d1-91e7-acab59084462/0/B16C4772F3D77045BBA997F94CEACA9E0DCC2865.mft Manifest number: 0103 Signing time: Sat 28 Jun 2025 12:41:53 +0000 Manifest this update: Sat 28 Jun 2025 12:36:53 +0000 Manifest next update: Tue 01 Jul 2025 20:00:53 +0000 Files and hashes: 1: B16C4772F3D77045BBA997F94CEACA9E0DCC2865.crl (hash: ZE7BYJo4ViCJe1QfEWZhBicVuoFLctlTQskFM2hnw3k=) 2: 3138302e3133312e3132392e302f32342d3234203d3e20313532303238.roa (hash: ham3CevlCthR5zf32aym4G2m2qOgp6uooahhDHdIKYE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3c9941a4-28d2-47d1-91e7-acab59084462/0/B16C4772F3D77045BBA997F94CEACA9E0DCC2865.crl rsync://repo-rpki.idnic.net/repo/3c9941a4-28d2-47d1-91e7-acab59084462/0/B16C4772F3D77045BBA997F94CEACA9E0DCC2865.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B16C4772F3D77045BBA997F94CEACA9E0DCC2865.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 20:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:6c:95:3e:6d:a1:99:20:e0:98:56:5b:fc:e7:0f:be:db:ea:d6:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B16C4772F3D77045BBA997F94CEACA9E0DCC2865 Validity Not Before: Jun 28 12:36:53 2025 GMT Not After : Jul 1 20:00:53 2025 GMT Subject: CN=53D65B2DA8D2838A02A76561B055527E76302273 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:fd:9a:40:72:ec:a7:62:b3:f9:1c:ed:18:0c: 20:36:81:27:f6:e8:d8:f5:38:59:04:a6:11:b7:ce: c3:7c:0a:67:89:69:68:34:05:de:8b:b6:7e:91:91: 61:d7:c0:2c:96:d5:83:a7:d3:ff:4d:ef:9a:1c:3a: 13:c0:e5:d7:bb:ef:a4:4d:ca:63:0c:a4:95:c2:73: fe:93:e6:2b:0a:96:cc:a9:28:20:58:b9:8d:71:65: 61:57:e6:47:f9:1e:3f:79:15:b1:c1:8a:81:5e:7c: 8e:46:3b:ae:e4:7a:96:7f:3d:26:49:b1:e0:c7:6e: 7f:7c:18:46:d5:5c:73:d3:82:49:66:ed:12:85:cb: 74:2f:fc:cf:ef:a2:4f:48:9f:f7:22:5d:e0:de:b8: c9:e9:6c:1a:c2:3a:bc:dd:02:c6:12:dc:f9:22:c6: 64:e9:ba:9b:a5:7c:a0:21:e7:2b:f4:c8:b8:a9:a5: e1:77:8b:35:3f:09:6e:72:46:a2:cd:30:f5:24:fe: 96:84:a4:e4:08:f1:84:c9:1f:8d:7f:18:ed:a9:ad: de:db:89:50:8b:63:16:c1:fc:9c:d3:aa:d3:9e:3d: a5:f8:74:60:30:e3:00:c6:b1:45:cb:67:9f:8c:7e: af:ea:15:6f:3a:a1:41:c4:67:4f:43:50:18:81:15: 3c:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:D6:5B:2D:A8:D2:83:8A:02:A7:65:61:B0:55:52:7E:76:30:22:73 X509v3 Authority Key Identifier: keyid:B1:6C:47:72:F3:D7:70:45:BB:A9:97:F9:4C:EA:CA:9E:0D:CC:28:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3c9941a4-28d2-47d1-91e7-acab59084462/0/B16C4772F3D77045BBA997F94CEACA9E0DCC2865.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B16C4772F3D77045BBA997F94CEACA9E0DCC2865.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3c9941a4-28d2-47d1-91e7-acab59084462/0/B16C4772F3D77045BBA997F94CEACA9E0DCC2865.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:16:d3:34:19:6d:85:e2:79:c1:94:26:b4:90:a9:59:23:9b: 83:95:a1:29:86:e8:53:f8:f6:54:7c:ab:1f:60:56:0a:a9:74: 1d:d7:65:c6:05:30:75:3f:86:9c:73:f8:55:e6:c7:6d:87:65: 55:67:6d:7c:58:82:dd:49:54:e6:e1:ed:06:2a:de:58:ce:cd: 92:ff:fa:54:9e:d9:a4:77:bc:1b:c4:3e:e8:7c:08:8c:f9:2d: b3:1a:53:31:02:47:5b:65:86:51:97:31:ec:9a:c2:fe:5c:ab: 98:80:eb:8c:37:25:99:a3:c1:d1:d7:3a:b4:d4:cd:0a:f9:88: 20:36:c6:e4:0b:49:0a:71:e2:97:a4:b6:64:cd:a3:28:44:11: 3f:4c:73:cb:de:56:1a:26:16:73:99:89:60:37:44:15:8c:30: 6e:33:9e:29:f7:fb:48:f9:9b:3e:8e:2e:c4:d7:03:18:c6:3f: 2d:3c:ca:fd:15:96:af:b2:c5:b5:28:81:8b:96:e2:f0:3f:4c: fd:ef:60:68:c1:04:a0:2d:f9:bd:7c:d0:3a:8d:5c:a4:16:50: 0f:f8:a7:e8:14:7f:d9:5a:69:ef:9f:3a:05:5b:d0:76:33:fd: 09:91:9d:13:b8:b5:8c:e3:c3:f3:36:6a:0d:73:51:6b:3a:53: 73:ce:19:49 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULWyVPm2hmSDgmFZb/OcPvtvq1g0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjE2QzQ3NzJGM0Q3NzA0NUJCQTk5N0Y5NENFQUNBOUUw RENDMjg2NTAeFw0yNTA2MjgxMjM2NTNaFw0yNTA3MDEyMDAwNTNaMDMxMTAvBgNV BAMTKDUzRDY1QjJEQThEMjgzOEEwMkE3NjU2MUIwNTU1MjdFNzYzMDIyNzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCe/ZpAcuynYrP5HO0YDCA2gSf2 6Nj1OFkEphG3zsN8CmeJaWg0Bd6Ltn6RkWHXwCyW1YOn0/9N75ocOhPA5de776RN ymMMpJXCc/6T5isKlsypKCBYuY1xZWFX5kf5Hj95FbHBioFefI5GO67kepZ/PSZJ seDHbn98GEbVXHPTgklm7RKFy3Qv/M/vok9In/ciXeDeuMnpbBrCOrzdAsYS3Pki xmTpupulfKAh5yv0yLippeF3izU/CW5yRqLNMPUk/paEpOQI8YTJH41/GO2prd7b iVCLYxbB/JzTqtOePaX4dGAw4wDGsUXLZ5+Mfq/qFW86oUHEZ09DUBiBFTydAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUU9ZbLajSg4oCp2VhsFVSfnYwInMwHwYDVR0j BBgwFoAUsWxHcvPXcEW7qZf5TOrKng3MKGUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z Yzk5NDFhNC0yOGQyLTQ3ZDEtOTFlNy1hY2FiNTkwODQ0NjIvMC9CMTZDNDc3MkYz RDc3MDQ1QkJBOTk3Rjk0Q0VBQ0E5RTBEQ0MyODY1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjE2QzQ3NzJGM0Q3NzA0NUJCQTk5N0Y5NENFQUNBOUUwREND Mjg2NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2M5OTQxYTQtMjhkMi00N2QxLTkx ZTctYWNhYjU5MDg0NDYyLzAvQjE2QzQ3NzJGM0Q3NzA0NUJCQTk5N0Y5NENFQUNB OUUwRENDMjg2NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALIW0zQZbYXiecGUJrSQqVkjm4OVoSmG6FP4 9lR8qx9gVgqpdB3XZcYFMHU/hpxz+FXmx22HZVVnbXxYgt1JVObh7QYq3ljOzZL/ +lSe2aR3vBvEPuh8CIz5LbMaUzECR1tlhlGXMeyawv5cq5iA64w3JZmjwdHXOrTU zQr5iCA2xuQLSQpx4pektmTNoyhEET9Mc8veVhomFnOZiWA3RBWMMG4znin3+0j5 mz6OLsTXAxjGPy08yv0Vlq+yxbUogYuW4vA/TP3vYGjBBKAt+b180DqNXKQWUA/4 p+gUf9laae+fOgVb0HYz/QmRnRO4tYzjw/M2ag1zUWs6U3POGUk= -----END CERTIFICATE-----Generated at Mon Jun 30 18:52:41 2025 by rpki-client