$ rpki-client -vvf repo-rpki.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/166B4918E7A1A1641E7C79C537833379E393522E.mft File: 166B4918E7A1A1641E7C79C537833379E393522E.mft (raw, json) Hash identifier: 3g6fCXWmqp6pRIqTfUqUex38WRxgqfqI0LIttpEJnrI= Subject key identifier: 25:3C:B5:C0:F8:B5:24:24:B0:53:A3:08:0B:35:F0:E9:81:13:E6:A4 Authority key identifier: 16:6B:49:18:E7:A1:A1:64:1E:7C:79:C5:37:83:33:79:E3:93:52:2E Certificate issuer: /CN=166B4918E7A1A1641E7C79C537833379E393522E Certificate serial: 339D586820499C434DD7B630A2FB982E2DB15524 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/166B4918E7A1A1641E7C79C537833379E393522E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/166B4918E7A1A1641E7C79C537833379E393522E.mft Manifest number: 02C8 Signing time: Fri 22 Aug 2025 04:30:59 +0000 Manifest this update: Fri 22 Aug 2025 04:25:59 +0000 Manifest next update: Mon 25 Aug 2025 12:11:59 +0000 Files and hashes: 1: 166B4918E7A1A1641E7C79C537833379E393522E.crl (hash: S/PpRD4mmX3G/sg7XiyaL2R5vAnqM8Ou+vDaeZGbmzg=) 2: 3130332e3137342e3138302e302f32342d3234203d3e20313437313037.roa (hash: WsHwgNa1eu27mA5KJGjHDisSyyKknyjiNT1hKbJ/YGc=) 3: 3130332e3137342e3138312e302f32342d3234203d3e20313437313037.roa (hash: LzEWJe+Hglc03QN90vVTDC59A7niJ+rvkY3tQyL/MFs=) 4: 3130332e3137342e3138302e302f32332d3233203d3e20313437313037.roa (hash: oK3qw71PTaTu9zr3WTDr2kf09ZEsEk1iSGVob7ZwRo0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/166B4918E7A1A1641E7C79C537833379E393522E.crl rsync://repo-rpki.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/166B4918E7A1A1641E7C79C537833379E393522E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/166B4918E7A1A1641E7C79C537833379E393522E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 12:11:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:9d:58:68:20:49:9c:43:4d:d7:b6:30:a2:fb:98:2e:2d:b1:55:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=166B4918E7A1A1641E7C79C537833379E393522E Validity Not Before: Aug 22 04:25:59 2025 GMT Not After : Aug 25 12:11:59 2025 GMT Subject: CN=253CB5C0F8B52424B053A3080B35F0E98113E6A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:79:eb:59:55:cc:96:58:9e:5b:92:89:ff:b4: b1:0d:29:f4:98:25:1a:ac:50:3f:90:46:60:2c:2c: dd:f9:cb:9e:28:71:44:2f:91:6a:28:d0:e1:3d:08: 4c:53:f4:f1:4b:aa:b2:a1:61:24:23:a1:8c:2b:e9: 7b:23:0a:f1:d0:a6:3d:fe:92:95:ec:83:03:5b:d1: ea:4d:51:8f:fa:45:34:a1:ca:51:ab:6a:3d:81:8b: 90:58:ae:64:2e:03:bd:1b:b3:91:d7:dc:bd:fe:91: 37:4b:6d:e2:b1:28:83:d2:67:cd:04:81:a2:61:80: b7:55:ad:ae:d8:8b:66:93:9c:b1:f7:a7:9b:43:84: f5:45:ae:87:d6:0a:cf:f3:11:63:68:3e:4b:a2:19: 4d:77:6c:24:8d:95:93:72:95:ab:83:b3:d7:0c:51: 0a:a1:e1:28:2c:2b:bd:ee:eb:4b:5c:8c:9c:fa:78: 74:34:e2:d5:7f:78:6b:22:36:c0:47:ce:bd:81:e7: db:a4:9a:8d:e3:ae:a5:0a:b2:5b:4a:dd:65:68:9e: 74:a0:8f:a5:34:0c:5f:b0:dc:94:62:17:77:cf:3e: 1b:5a:95:5b:bf:1e:a6:fe:52:b4:8d:3d:b6:a6:08: 1f:9b:a5:b4:cf:13:e4:98:cf:3f:b3:61:48:cc:13: 58:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:3C:B5:C0:F8:B5:24:24:B0:53:A3:08:0B:35:F0:E9:81:13:E6:A4 X509v3 Authority Key Identifier: keyid:16:6B:49:18:E7:A1:A1:64:1E:7C:79:C5:37:83:33:79:E3:93:52:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/166B4918E7A1A1641E7C79C537833379E393522E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/166B4918E7A1A1641E7C79C537833379E393522E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/166B4918E7A1A1641E7C79C537833379E393522E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:e8:71:ec:2f:dd:f8:5a:e9:84:5d:0e:5d:93:d4:90:92:c8: b3:38:cb:4e:a1:8d:07:a6:eb:c0:8c:84:61:59:55:00:80:fa: 75:72:9e:7f:5d:27:1d:1c:e1:fe:bc:39:08:7c:42:66:3e:80: 3a:5e:f2:35:f2:2b:8c:30:cc:f6:77:43:83:95:f7:3d:c8:2e: 0c:8d:c0:d5:f1:96:4c:84:d9:99:dd:ae:29:f9:7d:fa:fd:83: 77:48:46:ea:12:35:77:c0:30:e4:ac:44:06:45:de:e6:0b:92: 7c:83:ad:33:7d:6f:46:46:97:a1:24:96:92:0f:37:3e:82:a4: 26:67:b6:89:2a:98:10:81:df:be:6e:cf:c1:9f:c1:67:42:31: ed:f0:22:80:b4:2b:f7:9a:79:a4:43:79:f4:9a:3c:1c:ff:6f: 31:a1:cb:b7:ce:6a:d5:d7:e0:d4:9c:78:bf:d7:bb:a3:d1:17: b5:8c:32:ff:35:44:d7:36:88:e7:b7:a7:b9:79:2f:6a:a3:cc: f5:52:66:c7:1f:64:0f:35:cc:00:cb:3c:2c:26:20:32:ba:56: 3c:f1:88:0b:ba:bb:64:aa:76:33:f7:29:da:4b:22:ad:27:65: 5f:30:5e:c0:24:86:37:7e:21:91:46:45:3d:37:df:fa:24:58: a6:0f:7d:b8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM51YaCBJnENN17YwovuYLi2xVSQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTY2QjQ5MThFN0ExQTE2NDFFN0M3OUM1Mzc4MzMzNzlF MzkzNTIyRTAeFw0yNTA4MjIwNDI1NTlaFw0yNTA4MjUxMjExNTlaMDMxMTAvBgNV BAMTKDI1M0NCNUMwRjhCNTI0MjRCMDUzQTMwODBCMzVGMEU5ODExM0U2QTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQeetZVcyWWJ5bkon/tLENKfSY JRqsUD+QRmAsLN35y54ocUQvkWoo0OE9CExT9PFLqrKhYSQjoYwr6XsjCvHQpj3+ kpXsgwNb0epNUY/6RTShylGraj2Bi5BYrmQuA70bs5HX3L3+kTdLbeKxKIPSZ80E gaJhgLdVra7Yi2aTnLH3p5tDhPVFrofWCs/zEWNoPkuiGU13bCSNlZNylauDs9cM UQqh4SgsK73u60tcjJz6eHQ04tV/eGsiNsBHzr2B59ukmo3jrqUKsltK3WVonnSg j6U0DF+w3JRiF3fPPhtalVu/Hqb+UrSNPbamCB+bpbTPE+SYzz+zYUjME1ivAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJTy1wPi1JCSwU6MICzXw6YET5qQwHwYDVR0j BBgwFoAUFmtJGOehoWQefHnFN4MzeeOTUi4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YzI4NTI5MS1jZTkyLTQxNDQtOWMxOC05ZThjMTkxZGRlYzYvMC8xNjZCNDkxOEU3 QTFBMTY0MUU3Qzc5QzUzNzgzMzM3OUUzOTM1MjJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTY2QjQ5MThFN0ExQTE2NDFFN0M3OUM1Mzc4MzMzNzlFMzkz NTIyRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWMyODUyOTEtY2U5Mi00MTQ0LTlj MTgtOWU4YzE5MWRkZWM2LzAvMTY2QjQ5MThFN0ExQTE2NDFFN0M3OUM1Mzc4MzMz NzlFMzkzNTIyRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEzocewv3fha6YRdDl2T1JCSyLM4y06hjQem 68CMhGFZVQCA+nVynn9dJx0c4f68OQh8QmY+gDpe8jXyK4wwzPZ3Q4OV9z3ILgyN wNXxlkyE2Zndrin5ffr9g3dIRuoSNXfAMOSsRAZF3uYLknyDrTN9b0ZGl6EklpIP Nz6CpCZntokqmBCB375uz8GfwWdCMe3wIoC0K/eaeaRDefSaPBz/bzGhy7fOatXX 4NSceL/Xu6PRF7WMMv81RNc2iOe3p7l5L2qjzPVSZscfZA81zADLPCwmIDK6Vjzx iAu6u2SqdjP3KdpLIq0nZV8wXsAkhjd+IZFGRT033/okWKYPfbg= -----END CERTIFICATE-----Generated at Sat Aug 23 17:24:14 2025 by rpki-client