$ rpki-client -vvf repo-rpki.idnic.net/repo/3c9941a4-28d2-47d1-91e7-acab59084462/0/B16C4772F3D77045BBA997F94CEACA9E0DCC2865.mft File: B16C4772F3D77045BBA997F94CEACA9E0DCC2865.mft (raw, json) Hash identifier: y4uOudO71bRiOXRBKb0RZoQhDCZlezoF5Ugpr/GEoj4= Subject key identifier: 6C:B7:2F:65:6F:CB:4C:DD:A5:CB:16:6B:B7:2F:C4:D3:D0:4A:DD:6D Authority key identifier: B1:6C:47:72:F3:D7:70:45:BB:A9:97:F9:4C:EA:CA:9E:0D:CC:28:65 Certificate issuer: /CN=B16C4772F3D77045BBA997F94CEACA9E0DCC2865 Certificate serial: 57F4E412303F8DCFD22F6A0AE39F0EF5DFB1D333 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B16C4772F3D77045BBA997F94CEACA9E0DCC2865.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3c9941a4-28d2-47d1-91e7-acab59084462/0/B16C4772F3D77045BBA997F94CEACA9E0DCC2865.mft Manifest number: 0136 Signing time: Sun 19 Oct 2025 18:01:56 +0000 Manifest this update: Sun 19 Oct 2025 17:56:56 +0000 Manifest next update: Thu 23 Oct 2025 03:47:56 +0000 Files and hashes: 1: 3138302e3133312e3132392e302f32342d3234203d3e20313532303238.roa (hash: IK3NBrk/iQNskIBya+kx1CnPloRzYziR32FnB/WUNZ4=) 2: B16C4772F3D77045BBA997F94CEACA9E0DCC2865.crl (hash: iX8gAN62vQqseq/VtVBuWl7zWtuTeP7SYU3I0kBBXQw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3c9941a4-28d2-47d1-91e7-acab59084462/0/B16C4772F3D77045BBA997F94CEACA9E0DCC2865.crl rsync://repo-rpki.idnic.net/repo/3c9941a4-28d2-47d1-91e7-acab59084462/0/B16C4772F3D77045BBA997F94CEACA9E0DCC2865.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B16C4772F3D77045BBA997F94CEACA9E0DCC2865.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 03:47:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:f4:e4:12:30:3f:8d:cf:d2:2f:6a:0a:e3:9f:0e:f5:df:b1:d3:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B16C4772F3D77045BBA997F94CEACA9E0DCC2865 Validity Not Before: Oct 19 17:56:56 2025 GMT Not After : Oct 23 03:47:56 2025 GMT Subject: CN=6CB72F656FCB4CDDA5CB166BB72FC4D3D04ADD6D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:c3:6b:07:d1:2e:fa:11:a1:cf:05:f5:a4:eb: 30:b0:05:19:5a:aa:63:75:25:e3:2d:f3:02:3b:08: 61:2d:a2:69:a7:ed:1e:d8:08:99:a7:10:03:5e:6e: 87:f5:b0:70:6c:6f:e9:e7:6b:bd:af:9a:b6:c5:04: 5a:d9:a4:2f:d2:f4:de:f9:7f:c5:78:1c:9a:dc:e1: e1:c6:02:6e:b7:b2:16:ba:76:b6:15:18:93:24:92: 60:bb:f6:67:4b:1b:25:60:b1:11:8a:ad:6a:a4:91: e0:dc:64:36:94:e4:db:03:a7:5f:3e:f1:a5:96:68: 64:01:f9:10:46:f6:e6:f5:46:44:e8:4f:66:cd:d9: 32:fe:5f:7b:2a:4e:00:5c:62:68:87:af:47:7f:29: 8d:a5:cf:35:1c:9d:21:9f:c8:85:29:7c:99:e8:cf: c3:78:4a:2d:5d:dc:b4:6b:ac:3c:49:36:b0:b6:30: 52:4c:30:29:cb:32:a9:94:60:4a:d4:1c:28:02:8b: b5:4c:d7:63:97:1c:4d:57:5a:9a:00:42:7b:69:72: 82:4c:02:82:cf:3a:a3:12:67:7c:46:1a:e2:a5:ac: 4f:ad:77:5c:01:aa:2e:7c:97:26:ce:fb:c3:a3:0b: cd:2e:07:71:eb:95:82:e5:b2:89:3c:51:d5:fc:bd: 13:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:B7:2F:65:6F:CB:4C:DD:A5:CB:16:6B:B7:2F:C4:D3:D0:4A:DD:6D X509v3 Authority Key Identifier: keyid:B1:6C:47:72:F3:D7:70:45:BB:A9:97:F9:4C:EA:CA:9E:0D:CC:28:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3c9941a4-28d2-47d1-91e7-acab59084462/0/B16C4772F3D77045BBA997F94CEACA9E0DCC2865.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B16C4772F3D77045BBA997F94CEACA9E0DCC2865.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3c9941a4-28d2-47d1-91e7-acab59084462/0/B16C4772F3D77045BBA997F94CEACA9E0DCC2865.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:1a:66:cb:5c:c0:73:84:2d:72:59:65:51:3d:ff:c3:0c:e7: dc:ef:ff:34:07:fd:3e:5f:58:3e:a8:8b:e3:33:80:cc:17:a7: 00:dd:c7:5c:88:4f:fc:be:59:b0:4a:57:c0:89:04:b9:31:0a: 4c:10:2a:da:c6:ed:6a:57:8b:2f:e4:8d:7b:f4:f4:79:44:fe: 1b:2d:4d:40:6c:b6:ab:09:09:f7:fe:9c:eb:26:b8:2f:90:17: 97:2a:e4:08:df:a2:d9:36:8e:d5:05:33:72:f8:2f:60:bc:e3: 78:32:e1:62:2a:90:aa:a4:5b:88:84:69:35:df:17:e0:44:5b: 81:36:e6:4b:bc:26:0e:44:fd:83:29:5c:52:e5:2c:07:45:0d: 68:56:35:59:d4:0b:f7:1d:f0:68:20:69:3d:70:d6:8b:df:a4: 1c:b1:d7:69:7a:46:f6:82:19:c7:ed:bf:28:83:a9:27:3b:94: dc:7c:7b:0f:2f:d2:0a:24:dc:32:2a:b8:9a:ad:83:cf:81:f5: 44:13:a0:d9:b0:44:1b:a3:37:7a:58:fa:55:10:70:d1:20:51: 64:66:b3:0d:fd:8c:fa:28:30:bb:d9:6c:01:71:1b:f9:16:b4: 93:08:30:88:da:cf:99:fa:b6:13:4b:c3:80:5a:25:23:b4:d8: 86:bb:f9:ad -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV/TkEjA/jc/SL2oK458O9d+x0zMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjE2QzQ3NzJGM0Q3NzA0NUJCQTk5N0Y5NENFQUNBOUUw RENDMjg2NTAeFw0yNTEwMTkxNzU2NTZaFw0yNTEwMjMwMzQ3NTZaMDMxMTAvBgNV BAMTKDZDQjcyRjY1NkZDQjRDRERBNUNCMTY2QkI3MkZDNEQzRDA0QURENkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbw2sH0S76EaHPBfWk6zCwBRla qmN1JeMt8wI7CGEtommn7R7YCJmnEANebof1sHBsb+nna72vmrbFBFrZpC/S9N75 f8V4HJrc4eHGAm63sha6drYVGJMkkmC79mdLGyVgsRGKrWqkkeDcZDaU5NsDp18+ 8aWWaGQB+RBG9ub1RkToT2bN2TL+X3sqTgBcYmiHr0d/KY2lzzUcnSGfyIUpfJno z8N4Si1d3LRrrDxJNrC2MFJMMCnLMqmUYErUHCgCi7VM12OXHE1XWpoAQntpcoJM AoLPOqMSZ3xGGuKlrE+td1wBqi58lybO+8OjC80uB3HrlYLlsok8UdX8vRPnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbLcvZW/LTN2lyxZrty/E09BK3W0wHwYDVR0j BBgwFoAUsWxHcvPXcEW7qZf5TOrKng3MKGUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z Yzk5NDFhNC0yOGQyLTQ3ZDEtOTFlNy1hY2FiNTkwODQ0NjIvMC9CMTZDNDc3MkYz RDc3MDQ1QkJBOTk3Rjk0Q0VBQ0E5RTBEQ0MyODY1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjE2QzQ3NzJGM0Q3NzA0NUJCQTk5N0Y5NENFQUNBOUUwREND Mjg2NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2M5OTQxYTQtMjhkMi00N2QxLTkx ZTctYWNhYjU5MDg0NDYyLzAvQjE2QzQ3NzJGM0Q3NzA0NUJCQTk5N0Y5NENFQUNB OUUwRENDMjg2NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABMaZstcwHOELXJZZVE9/8MM59zv/zQH/T5f WD6oi+MzgMwXpwDdx1yIT/y+WbBKV8CJBLkxCkwQKtrG7WpXiy/kjXv09HlE/hst TUBstqsJCff+nOsmuC+QF5cq5Ajfotk2jtUFM3L4L2C843gy4WIqkKqkW4iEaTXf F+BEW4E25ku8Jg5E/YMpXFLlLAdFDWhWNVnUC/cd8GggaT1w1ovfpByx12l6RvaC GcftvyiDqSc7lNx8ew8v0gok3DIquJqtg8+B9UQToNmwRBujN3pY+lUQcNEgUWRm sw39jPooMLvZbAFxG/kWtJMIMIjaz5n6thNLw4BaJSO02Ia7+a0= -----END CERTIFICATE-----Generated at Mon Oct 20 10:08:28 2025 by rpki-client