$ rpki-client -vvf repo-rpki.idnic.net/repo/3c9941a4-28d2-47d1-91e7-acab59084462/0/B16C4772F3D77045BBA997F94CEACA9E0DCC2865.mft File: B16C4772F3D77045BBA997F94CEACA9E0DCC2865.mft (raw, json) Hash identifier: lwoto1GHM4vLent1PKGuknL5NBSmNnZufk63CPynH1c= Subject key identifier: CA:00:DD:DF:94:1A:04:CB:D6:87:73:D8:47:5D:1E:DA:DF:24:E6:F2 Authority key identifier: B1:6C:47:72:F3:D7:70:45:BB:A9:97:F9:4C:EA:CA:9E:0D:CC:28:65 Certificate issuer: /CN=B16C4772F3D77045BBA997F94CEACA9E0DCC2865 Certificate serial: 0203E187BD1F61D18AFB0ADBD57A239E5E6A2AC5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B16C4772F3D77045BBA997F94CEACA9E0DCC2865.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3c9941a4-28d2-47d1-91e7-acab59084462/0/B16C4772F3D77045BBA997F94CEACA9E0DCC2865.mft Manifest number: 011C Signing time: Sat 23 Aug 2025 11:53:44 +0000 Manifest this update: Sat 23 Aug 2025 11:48:44 +0000 Manifest next update: Tue 26 Aug 2025 15:52:44 +0000 Files and hashes: 1: B16C4772F3D77045BBA997F94CEACA9E0DCC2865.crl (hash: ZfoO9+HJjAwqv8RPuPuBIvm1dlyr84i78QtFSzGQWXQ=) 2: 3138302e3133312e3132392e302f32342d3234203d3e20313532303238.roa (hash: ham3CevlCthR5zf32aym4G2m2qOgp6uooahhDHdIKYE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3c9941a4-28d2-47d1-91e7-acab59084462/0/B16C4772F3D77045BBA997F94CEACA9E0DCC2865.crl rsync://repo-rpki.idnic.net/repo/3c9941a4-28d2-47d1-91e7-acab59084462/0/B16C4772F3D77045BBA997F94CEACA9E0DCC2865.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B16C4772F3D77045BBA997F94CEACA9E0DCC2865.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 15:52:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:03:e1:87:bd:1f:61:d1:8a:fb:0a:db:d5:7a:23:9e:5e:6a:2a:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B16C4772F3D77045BBA997F94CEACA9E0DCC2865 Validity Not Before: Aug 23 11:48:44 2025 GMT Not After : Aug 26 15:52:44 2025 GMT Subject: CN=CA00DDDF941A04CBD68773D8475D1EDADF24E6F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:ee:4c:18:7f:b9:a3:f2:7b:d4:f9:68:7d:2f: 3f:26:37:9b:12:81:8c:fd:1b:44:e3:fe:08:1a:67: e6:44:f1:42:39:2b:8a:d8:80:2a:22:37:66:44:9e: 05:5b:fe:57:8c:ec:fb:63:ec:50:e1:1a:4d:87:21: bc:0f:ef:64:cf:3d:46:24:ae:dc:fe:45:37:1e:ec: 9d:8a:92:d4:76:b3:aa:68:c3:35:df:4e:8b:1c:40: f5:13:b4:fe:0e:1b:44:5a:3a:9c:1d:cd:21:90:53: b4:ee:c8:89:bf:e8:cd:6b:85:4c:c9:ca:42:d1:78: 61:21:e8:38:d1:52:a3:e0:c5:9b:ad:1e:74:03:f3: 4c:82:77:2f:bf:ae:78:fc:18:b3:fd:0b:94:87:bc: 25:a6:ef:be:c9:f4:1c:c7:e2:51:4f:c1:d8:be:2b: a0:40:ed:18:81:ac:94:14:9e:61:14:3f:e9:0a:f8: 82:03:53:98:cc:21:1e:bf:75:ed:f9:3b:cf:38:92: ec:ef:24:54:19:6f:8a:d1:78:ef:15:5e:07:1c:eb: af:89:95:ef:02:a6:fa:aa:61:81:27:dc:0a:22:e3: 8d:d5:f7:0f:90:a3:31:c3:3a:df:68:6f:7b:df:39: ff:40:63:4b:dd:d7:7b:a9:71:3e:40:17:ef:d8:f0: ea:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:00:DD:DF:94:1A:04:CB:D6:87:73:D8:47:5D:1E:DA:DF:24:E6:F2 X509v3 Authority Key Identifier: keyid:B1:6C:47:72:F3:D7:70:45:BB:A9:97:F9:4C:EA:CA:9E:0D:CC:28:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3c9941a4-28d2-47d1-91e7-acab59084462/0/B16C4772F3D77045BBA997F94CEACA9E0DCC2865.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B16C4772F3D77045BBA997F94CEACA9E0DCC2865.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3c9941a4-28d2-47d1-91e7-acab59084462/0/B16C4772F3D77045BBA997F94CEACA9E0DCC2865.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:47:c4:ed:bb:d0:07:7b:b8:a8:b7:a9:0e:d3:1d:13:27:ca: 6c:77:76:3f:8d:5f:2b:60:08:66:a9:10:4b:23:70:d1:f5:a4: 54:51:32:aa:bc:17:75:e9:c3:a9:f1:e3:73:d1:38:39:1d:b6: 04:51:0a:0a:bc:41:53:41:f2:1a:30:10:c0:8d:f8:e5:fd:e1: 97:c4:de:d5:e6:73:87:f9:62:ad:e9:54:3e:0d:56:0a:15:f7: 9b:f1:36:db:16:d3:c3:13:58:e1:5c:5a:05:a2:e2:bf:0e:40: 89:e2:87:76:4c:e6:f0:9a:ad:76:44:9b:a4:14:56:ac:92:e7: 0d:b4:24:0d:d2:7e:e5:ef:da:ec:96:08:02:5c:d2:2d:a1:eb: 7b:33:ad:cc:33:c9:9b:56:97:da:de:65:16:fc:07:89:32:3c: dc:0e:75:00:1b:60:bc:c1:dc:b5:2c:77:e9:2d:d1:49:b2:e0: f4:77:d9:ee:13:a6:74:a9:9c:ff:36:a5:03:0b:67:c0:6d:e8: f0:2a:9c:8c:f1:7b:66:16:3a:b0:fd:8b:d4:71:a9:a6:ee:19: af:df:c1:cb:c9:f5:ad:6a:15:4d:6c:02:c1:94:ce:6a:00:eb: e9:a8:ce:36:de:ab:74:e6:c4:8d:1d:4f:ff:b1:0c:2f:de:b0: a2:e1:9f:02 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAgPhh70fYdGK+wrb1Xojnl5qKsUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjE2QzQ3NzJGM0Q3NzA0NUJCQTk5N0Y5NENFQUNBOUUw RENDMjg2NTAeFw0yNTA4MjMxMTQ4NDRaFw0yNTA4MjYxNTUyNDRaMDMxMTAvBgNV BAMTKENBMDBERERGOTQxQTA0Q0JENjg3NzNEODQ3NUQxRURBREYyNEU2RjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDj7kwYf7mj8nvU+Wh9Lz8mN5sS gYz9G0Tj/ggaZ+ZE8UI5K4rYgCoiN2ZEngVb/leM7Ptj7FDhGk2HIbwP72TPPUYk rtz+RTce7J2KktR2s6powzXfToscQPUTtP4OG0RaOpwdzSGQU7TuyIm/6M1rhUzJ ykLReGEh6DjRUqPgxZutHnQD80yCdy+/rnj8GLP9C5SHvCWm777J9BzH4lFPwdi+ K6BA7RiBrJQUnmEUP+kK+IIDU5jMIR6/de35O884kuzvJFQZb4rReO8VXgcc66+J le8CpvqqYYEn3Aoi443V9w+QozHDOt9ob3vfOf9AY0vd13upcT5AF+/Y8Oq5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUygDd35QaBMvWh3PYR10e2t8k5vIwHwYDVR0j BBgwFoAUsWxHcvPXcEW7qZf5TOrKng3MKGUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z Yzk5NDFhNC0yOGQyLTQ3ZDEtOTFlNy1hY2FiNTkwODQ0NjIvMC9CMTZDNDc3MkYz RDc3MDQ1QkJBOTk3Rjk0Q0VBQ0E5RTBEQ0MyODY1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjE2QzQ3NzJGM0Q3NzA0NUJCQTk5N0Y5NENFQUNBOUUwREND Mjg2NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2M5OTQxYTQtMjhkMi00N2QxLTkx ZTctYWNhYjU5MDg0NDYyLzAvQjE2QzQ3NzJGM0Q3NzA0NUJCQTk5N0Y5NENFQUNB OUUwRENDMjg2NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIhHxO270Ad7uKi3qQ7THRMnymx3dj+NXytg CGapEEsjcNH1pFRRMqq8F3Xpw6nx43PRODkdtgRRCgq8QVNB8howEMCN+OX94ZfE 3tXmc4f5Yq3pVD4NVgoV95vxNtsW08MTWOFcWgWi4r8OQInih3ZM5vCarXZEm6QU VqyS5w20JA3SfuXv2uyWCAJc0i2h63szrcwzyZtWl9reZRb8B4kyPNwOdQAbYLzB 3LUsd+kt0Umy4PR32e4TpnSpnP82pQMLZ8Bt6PAqnIzxe2YWOrD9i9RxqabuGa/f wcvJ9a1qFU1sAsGUzmoA6+mozjbeq3TmxI0dT/+xDC/esKLhnwI= -----END CERTIFICATE-----Generated at Sun Aug 24 03:48:25 2025 by rpki-client