$ rpki-client -vvf repo-rpki.idnic.net/repo/648b6583-4122-469d-8384-3af1bcc6607f/0/16CD7877C91A179A0A6751085603DA8E7DE539F0.mft File: 16CD7877C91A179A0A6751085603DA8E7DE539F0.mft (raw, json) Hash identifier: qMedRBXgOLzLZus2KRHs3CnrGk//zBxRvu+0D6yQeHQ= Subject key identifier: 36:66:7E:D9:77:76:1D:7D:90:F8:48:AD:71:08:9B:E3:D4:43:54:66 Authority key identifier: 16:CD:78:77:C9:1A:17:9A:0A:67:51:08:56:03:DA:8E:7D:E5:39:F0 Certificate issuer: /CN=16CD7877C91A179A0A6751085603DA8E7DE539F0 Certificate serial: 599A1FF50D71FD645F650195AD33D79D980ADB92 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/16CD7877C91A179A0A6751085603DA8E7DE539F0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/648b6583-4122-469d-8384-3af1bcc6607f/0/16CD7877C91A179A0A6751085603DA8E7DE539F0.mft Manifest number: 0468 Signing time: Tue 01 Jul 2025 20:41:37 +0000 Manifest this update: Tue 01 Jul 2025 20:36:37 +0000 Manifest next update: Sat 05 Jul 2025 08:35:37 +0000 Files and hashes: 1: 16CD7877C91A179A0A6751085603DA8E7DE539F0.crl (hash: AG067BtRLML0xWsCkRkUuWLKgA8W1G3T9wLQ7Xj4l68=) 2: 3130332e3134372e3133342e302f32332d3234203d3e20313339393633.roa (hash: BjppJfwXPbmHCeUAWsFqIjK/iMCacW8kVEyJMndZWBE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/648b6583-4122-469d-8384-3af1bcc6607f/0/16CD7877C91A179A0A6751085603DA8E7DE539F0.crl rsync://repo-rpki.idnic.net/repo/648b6583-4122-469d-8384-3af1bcc6607f/0/16CD7877C91A179A0A6751085603DA8E7DE539F0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/16CD7877C91A179A0A6751085603DA8E7DE539F0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 08:35:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:9a:1f:f5:0d:71:fd:64:5f:65:01:95:ad:33:d7:9d:98:0a:db:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16CD7877C91A179A0A6751085603DA8E7DE539F0 Validity Not Before: Jul 1 20:36:37 2025 GMT Not After : Jul 5 08:35:37 2025 GMT Subject: CN=36667ED977761D7D90F848AD71089BE3D4435466 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:cd:fc:34:c5:0f:46:34:a2:03:1d:c7:d0:46: 39:6d:8a:97:c0:99:7b:e1:f0:b3:b6:da:41:93:8b: e7:a4:cb:a2:70:eb:d1:06:a4:56:5f:4e:c9:3a:86: dc:d6:54:9e:8c:2b:17:4c:72:94:0b:36:c9:0e:63: 99:c7:bf:ba:b0:0b:f9:64:c5:10:24:e6:cc:8e:58: 3a:f2:06:86:ea:5c:c6:f6:6d:69:bb:bb:52:66:e6: 89:ba:aa:69:2e:f3:19:e7:dc:fc:60:c3:04:4e:68: b7:5a:33:74:9f:91:07:d5:e7:23:ee:d7:7c:92:bb: 07:74:9d:96:30:33:9f:b5:dc:91:b9:23:e3:9b:37: 23:55:7d:e6:40:dd:b1:c9:97:cf:e1:d3:bf:f4:ed: 40:7b:46:e9:09:b0:89:cb:9c:ec:eb:66:4c:f0:b7: a0:bd:20:09:f9:44:f7:e8:49:b7:d0:d4:2b:b4:c5: 3b:35:d1:fa:50:de:ad:9a:a8:e5:d4:ca:79:df:20: 71:16:ae:21:4d:87:c5:f0:eb:31:0d:85:90:3d:97: a2:09:ba:b5:2f:ab:51:e8:a8:09:af:ef:96:05:3e: 76:5f:ae:be:54:62:6d:d6:4e:52:ef:23:60:79:07: eb:17:35:ad:f0:25:f8:1c:8b:34:4a:8c:38:3d:02: f3:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:66:7E:D9:77:76:1D:7D:90:F8:48:AD:71:08:9B:E3:D4:43:54:66 X509v3 Authority Key Identifier: keyid:16:CD:78:77:C9:1A:17:9A:0A:67:51:08:56:03:DA:8E:7D:E5:39:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/648b6583-4122-469d-8384-3af1bcc6607f/0/16CD7877C91A179A0A6751085603DA8E7DE539F0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/16CD7877C91A179A0A6751085603DA8E7DE539F0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/648b6583-4122-469d-8384-3af1bcc6607f/0/16CD7877C91A179A0A6751085603DA8E7DE539F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:64:e2:05:9f:1b:ed:bc:8d:f8:6b:ce:32:97:f9:b0:4c:fb: 45:65:a8:39:22:d0:8e:00:ac:84:96:b4:d6:32:dc:2f:3a:3f: 57:20:28:be:94:46:e1:19:94:4a:31:fd:38:2a:04:24:ec:4e: a9:e6:84:78:bc:58:c2:df:f0:b7:55:3d:7e:de:ee:43:a3:d4: ac:43:cb:22:33:a2:d7:98:29:03:0c:d2:4b:7d:d4:a2:63:35: 56:40:d4:f7:ad:46:10:ce:99:83:21:30:cf:d7:e1:03:55:82: 60:72:ce:48:4b:4b:00:bc:f1:95:19:f9:c3:0c:04:16:7a:6a: 71:73:0d:51:6c:67:02:39:ae:dc:a6:51:1c:ef:52:c6:c1:11: 52:67:ab:8d:9d:c1:96:c1:ca:65:8a:c6:51:ae:aa:e5:bf:2f: 33:0b:50:a9:a0:6e:2f:53:ec:d8:5a:ac:cf:f6:bc:21:c1:ac: 09:4a:54:79:14:f1:68:02:07:55:19:0a:63:a1:ff:3d:b8:00: f1:c4:d4:1c:ec:94:5f:93:7e:b7:40:d6:ac:51:b9:82:5e:bd: b2:95:9d:b7:94:31:8e:90:96:5c:cf:88:12:50:0b:67:a5:ea: 68:a5:e1:72:e1:74:c4:6b:44:54:b6:51:57:e5:2a:65:d4:6d: 33:0a:0f:f3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWZof9Q1x/WRfZQGVrTPXnZgK25IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTZDRDc4NzdDOTFBMTc5QTBBNjc1MTA4NTYwM0RBOEU3 REU1MzlGMDAeFw0yNTA3MDEyMDM2MzdaFw0yNTA3MDUwODM1MzdaMDMxMTAvBgNV BAMTKDM2NjY3RUQ5Nzc3NjFEN0Q5MEY4NDhBRDcxMDg5QkUzRDQ0MzU0NjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMzfw0xQ9GNKIDHcfQRjltipfA mXvh8LO22kGTi+eky6Jw69EGpFZfTsk6htzWVJ6MKxdMcpQLNskOY5nHv7qwC/lk xRAk5syOWDryBobqXMb2bWm7u1Jm5om6qmku8xnn3PxgwwROaLdaM3SfkQfV5yPu 13ySuwd0nZYwM5+13JG5I+ObNyNVfeZA3bHJl8/h07/07UB7RukJsInLnOzrZkzw t6C9IAn5RPfoSbfQ1Cu0xTs10fpQ3q2aqOXUynnfIHEWriFNh8Xw6zENhZA9l6IJ urUvq1HoqAmv75YFPnZfrr5UYm3WTlLvI2B5B+sXNa3wJfgcizRKjDg9AvOJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNmZ+2Xd2HX2Q+EitcQib49RDVGYwHwYDVR0j BBgwFoAUFs14d8kaF5oKZ1EIVgPajn3lOfAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NDhiNjU4My00MTIyLTQ2OWQtODM4NC0zYWYxYmNjNjYwN2YvMC8xNkNENzg3N0M5 MUExNzlBMEE2NzUxMDg1NjAzREE4RTdERTUzOUYwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTZDRDc4NzdDOTFBMTc5QTBBNjc1MTA4NTYwM0RBOEU3REU1 MzlGMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjQ4YjY1ODMtNDEyMi00NjlkLTgz ODQtM2FmMWJjYzY2MDdmLzAvMTZDRDc4NzdDOTFBMTc5QTBBNjc1MTA4NTYwM0RB OEU3REU1MzlGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAApk4gWfG+28jfhrzjKX+bBM+0VlqDki0I4A rISWtNYy3C86P1cgKL6URuEZlEox/TgqBCTsTqnmhHi8WMLf8LdVPX7e7kOj1KxD yyIzoteYKQMM0kt91KJjNVZA1PetRhDOmYMhMM/X4QNVgmByzkhLSwC88ZUZ+cMM BBZ6anFzDVFsZwI5rtymURzvUsbBEVJnq42dwZbBymWKxlGuquW/LzMLUKmgbi9T 7NharM/2vCHBrAlKVHkU8WgCB1UZCmOh/z24APHE1BzslF+TfrdA1qxRuYJevbKV nbeUMY6QllzPiBJQC2el6mil4XLhdMRrRFS2UVflKmXUbTMKD/M= -----END CERTIFICATE-----Generated at Wed Jul 2 14:45:23 2025 by rpki-client