$ rpki-client -vvf repo-rpki.idnic.net/repo/648b6583-4122-469d-8384-3af1bcc6607f/0/16CD7877C91A179A0A6751085603DA8E7DE539F0.mft File: 16CD7877C91A179A0A6751085603DA8E7DE539F0.mft (raw, json) Hash identifier: e9uuJEv9P5GHjBL1jcAgTakPt0e63AZ4ZycuHl5woyQ= Subject key identifier: AA:2D:A7:33:AA:78:24:17:84:13:4E:98:C9:20:AC:62:8B:D0:ED:E1 Authority key identifier: 16:CD:78:77:C9:1A:17:9A:0A:67:51:08:56:03:DA:8E:7D:E5:39:F0 Certificate issuer: /CN=16CD7877C91A179A0A6751085603DA8E7DE539F0 Certificate serial: 0FDFE806683076DA77F74961B13397AE9415537C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/16CD7877C91A179A0A6751085603DA8E7DE539F0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/648b6583-4122-469d-8384-3af1bcc6607f/0/16CD7877C91A179A0A6751085603DA8E7DE539F0.mft Manifest number: 0451 Signing time: Sat 10 May 2025 03:11:26 +0000 Manifest this update: Sat 10 May 2025 03:06:26 +0000 Manifest next update: Tue 13 May 2025 11:42:26 +0000 Files and hashes: 1: 3130332e3134372e3133342e302f32332d3234203d3e20313339393633.roa (hash: BjppJfwXPbmHCeUAWsFqIjK/iMCacW8kVEyJMndZWBE=) 2: 16CD7877C91A179A0A6751085603DA8E7DE539F0.crl (hash: QheSMyRoUDzvGL4TnQ9Nc+yoKjOnoktUWY/C8EPe++s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/648b6583-4122-469d-8384-3af1bcc6607f/0/16CD7877C91A179A0A6751085603DA8E7DE539F0.crl rsync://repo-rpki.idnic.net/repo/648b6583-4122-469d-8384-3af1bcc6607f/0/16CD7877C91A179A0A6751085603DA8E7DE539F0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/16CD7877C91A179A0A6751085603DA8E7DE539F0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 11:42:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:df:e8:06:68:30:76:da:77:f7:49:61:b1:33:97:ae:94:15:53:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16CD7877C91A179A0A6751085603DA8E7DE539F0 Validity Not Before: May 10 03:06:26 2025 GMT Not After : May 13 11:42:26 2025 GMT Subject: CN=AA2DA733AA78241784134E98C920AC628BD0EDE1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:a0:b9:16:82:db:c1:4e:40:c9:04:73:32:2e: c3:7c:a2:a9:10:79:d2:4a:78:f9:86:29:9d:d6:f6: aa:d8:d9:ad:c5:7e:c2:40:e9:45:03:57:e6:35:03: 83:ba:f1:65:68:27:63:77:f3:0b:a2:2e:cd:a4:24: d1:a6:f0:26:0a:96:43:64:18:f2:c6:e1:8c:b3:56: b9:48:d5:51:51:63:40:e0:cc:5f:94:cb:24:e0:90: b7:dc:f5:d6:01:16:2e:82:14:d0:aa:06:a8:23:67: bf:8d:56:e0:93:0c:83:5f:98:80:58:47:41:9e:bc: 31:0a:5e:6a:b6:49:28:dc:39:65:3a:db:a2:59:66: 64:42:9b:43:10:07:92:e8:9c:6f:60:93:c5:16:fc: 56:21:07:fa:8d:fc:16:4b:60:7b:5e:58:b8:18:b4: 73:df:ab:f9:70:e6:b8:10:d8:e8:68:b9:94:26:fb: 0e:67:39:a7:c9:d6:e2:bf:76:4f:17:d4:79:7a:02: c2:0e:0b:c0:6c:e4:5d:64:d4:55:d7:fc:dc:9c:08: 61:b2:63:e1:a3:82:ae:cf:d0:dc:74:d8:73:5f:ad: c4:b1:b4:05:26:06:ed:26:87:25:1d:97:1a:28:07: b2:53:7e:7f:b2:97:3b:70:97:c3:03:bd:f5:df:aa: 08:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:2D:A7:33:AA:78:24:17:84:13:4E:98:C9:20:AC:62:8B:D0:ED:E1 X509v3 Authority Key Identifier: keyid:16:CD:78:77:C9:1A:17:9A:0A:67:51:08:56:03:DA:8E:7D:E5:39:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/648b6583-4122-469d-8384-3af1bcc6607f/0/16CD7877C91A179A0A6751085603DA8E7DE539F0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/16CD7877C91A179A0A6751085603DA8E7DE539F0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/648b6583-4122-469d-8384-3af1bcc6607f/0/16CD7877C91A179A0A6751085603DA8E7DE539F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:4b:6c:81:d9:95:09:6b:af:bd:42:35:1e:37:8c:d3:2c:30: e1:74:e8:3c:5f:32:56:2e:82:2a:68:18:82:e7:35:68:4d:68: 71:81:05:1c:65:aa:a4:01:71:83:13:88:d7:e6:6a:3c:4b:5c: 68:a3:e0:07:97:dc:68:a1:f7:c4:64:f7:66:d9:43:e9:94:1c: 41:9b:4c:06:09:88:b6:e1:9d:68:e6:63:8f:b2:d3:83:35:aa: fc:91:b1:7e:57:bd:e1:9f:67:6b:df:1c:8c:53:91:18:2f:e2: 0e:ff:69:21:a3:8f:e2:58:9a:75:10:6c:74:e0:92:96:71:8c: 4f:e5:4c:a6:a3:89:08:61:4b:e4:f2:27:50:f9:07:aa:e7:42: 5d:8e:7d:fd:62:1e:e7:de:bb:84:a5:66:15:55:8d:c4:2c:04: f8:7f:3e:7d:79:ab:ea:61:a1:2a:e2:55:46:15:ca:17:f4:5c: db:95:12:ff:76:84:aa:dd:50:0e:03:6d:9a:c8:ae:76:29:cf: 88:d1:aa:b3:06:28:0a:ac:0b:a2:f8:e2:b1:07:a7:ff:60:6b: b0:f2:7c:89:d8:7a:03:cb:ad:f6:a3:b1:2d:de:4b:d1:36:a1: 65:ff:6f:fb:51:e0:ac:90:d5:0a:2d:02:7f:d9:ce:48:f5:4a: 89:1e:da:d4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD9/oBmgwdtp390lhsTOXrpQVU3wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTZDRDc4NzdDOTFBMTc5QTBBNjc1MTA4NTYwM0RBOEU3 REU1MzlGMDAeFw0yNTA1MTAwMzA2MjZaFw0yNTA1MTMxMTQyMjZaMDMxMTAvBgNV BAMTKEFBMkRBNzMzQUE3ODI0MTc4NDEzNEU5OEM5MjBBQzYyOEJEMEVERTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtoLkWgtvBTkDJBHMyLsN8oqkQ edJKePmGKZ3W9qrY2a3FfsJA6UUDV+Y1A4O68WVoJ2N38wuiLs2kJNGm8CYKlkNk GPLG4YyzVrlI1VFRY0DgzF+UyyTgkLfc9dYBFi6CFNCqBqgjZ7+NVuCTDINfmIBY R0GevDEKXmq2SSjcOWU626JZZmRCm0MQB5LonG9gk8UW/FYhB/qN/BZLYHteWLgY tHPfq/lw5rgQ2OhouZQm+w5nOafJ1uK/dk8X1Hl6AsIOC8Bs5F1k1FXX/NycCGGy Y+Gjgq7P0Nx02HNfrcSxtAUmBu0mhyUdlxooB7JTfn+ylztwl8MDvfXfqgidAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqi2nM6p4JBeEE06YySCsYovQ7eEwHwYDVR0j BBgwFoAUFs14d8kaF5oKZ1EIVgPajn3lOfAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NDhiNjU4My00MTIyLTQ2OWQtODM4NC0zYWYxYmNjNjYwN2YvMC8xNkNENzg3N0M5 MUExNzlBMEE2NzUxMDg1NjAzREE4RTdERTUzOUYwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTZDRDc4NzdDOTFBMTc5QTBBNjc1MTA4NTYwM0RBOEU3REU1 MzlGMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjQ4YjY1ODMtNDEyMi00NjlkLTgz ODQtM2FmMWJjYzY2MDdmLzAvMTZDRDc4NzdDOTFBMTc5QTBBNjc1MTA4NTYwM0RB OEU3REU1MzlGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALhLbIHZlQlrr71CNR43jNMsMOF06DxfMlYu gipoGILnNWhNaHGBBRxlqqQBcYMTiNfmajxLXGij4AeX3Gih98Rk92bZQ+mUHEGb TAYJiLbhnWjmY4+y04M1qvyRsX5XveGfZ2vfHIxTkRgv4g7/aSGjj+JYmnUQbHTg kpZxjE/lTKajiQhhS+TyJ1D5B6rnQl2Off1iHufeu4SlZhVVjcQsBPh/Pn15q+ph oSriVUYVyhf0XNuVEv92hKrdUA4DbZrIrnYpz4jRqrMGKAqsC6L44rEHp/9ga7Dy fInYegPLrfajsS3eS9E2oWX/b/tR4KyQ1QotAn/Zzkj1Soke2tQ= -----END CERTIFICATE-----Generated at Mon May 12 08:17:27 2025 by rpki-client