$ rpki-client -vvf repo-rpki.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0/1160709118182E564A6D9E250FF5000EFA5166A5.mft File: 1160709118182E564A6D9E250FF5000EFA5166A5.mft (raw, json) Hash identifier: W1pJps3xlPJeXqBNCXaod3+33rnuxqAcHNbXMYaxGzw= Subject key identifier: 37:07:6C:AD:60:95:8F:69:AE:35:96:DE:25:04:8C:A9:7A:85:21:73 Authority key identifier: 11:60:70:91:18:18:2E:56:4A:6D:9E:25:0F:F5:00:0E:FA:51:66:A5 Certificate issuer: /CN=1160709118182E564A6D9E250FF5000EFA5166A5 Certificate serial: 534607C7C37D81481D8EB2A6B3B54F01BE9E6B7F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1160709118182E564A6D9E250FF5000EFA5166A5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0/1160709118182E564A6D9E250FF5000EFA5166A5.mft Manifest number: 01A6 Signing time: Sun 19 Oct 2025 18:21:19 +0000 Manifest this update: Sun 19 Oct 2025 18:16:19 +0000 Manifest next update: Wed 22 Oct 2025 23:54:19 +0000 Files and hashes: 1: 3130332e38362e3131362e302f32332d3233203d3e20313530353532.roa (hash: BffdL0xKitvxF+n5DIFwc3meIV1XU+P2BJOh3472GOA=) 2: 3130332e38362e3131362e302f32342d3234203d3e20313530353532.roa (hash: ja3IpRMbJ39xL9dCXnsQKYTFFR+b+ZemcabWb42o+iQ=) 3: 1160709118182E564A6D9E250FF5000EFA5166A5.crl (hash: NKEIJHG6EJ6RVU4WFmeUcz5LShyUiYjjIGdESsBOCh4=) 4: 3130332e38362e3131372e302f32342d3234203d3e20313530353532.roa (hash: jLdTwnwuZ2oNm7k6y9AMJvKWkqS7oKk99hplqsfZVHE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0/1160709118182E564A6D9E250FF5000EFA5166A5.crl rsync://repo-rpki.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0/1160709118182E564A6D9E250FF5000EFA5166A5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1160709118182E564A6D9E250FF5000EFA5166A5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 23:54:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:46:07:c7:c3:7d:81:48:1d:8e:b2:a6:b3:b5:4f:01:be:9e:6b:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1160709118182E564A6D9E250FF5000EFA5166A5 Validity Not Before: Oct 19 18:16:19 2025 GMT Not After : Oct 22 23:54:19 2025 GMT Subject: CN=37076CAD60958F69AE3596DE25048CA97A852173 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:86:75:4c:93:30:b5:a4:d2:60:a8:31:16:5c: ec:24:d7:ce:fe:ae:da:c4:20:5d:b9:5c:cb:0a:17: 69:52:b8:24:1e:b5:89:68:0b:79:f0:7e:f4:09:ce: 95:33:08:d2:88:16:49:3a:f4:e0:e6:46:f0:57:1f: 33:be:e7:93:cc:22:29:ca:ea:97:9d:0a:20:5d:7a: ac:3b:9a:40:00:02:67:93:11:99:57:d5:d5:22:f0: 10:17:d2:08:6a:eb:aa:d3:7e:74:ee:2e:55:c7:e1: 2a:e1:1a:f8:f8:cc:18:b8:28:a8:f0:cf:1b:03:3c: e8:46:68:d6:a3:1d:4b:7f:7c:50:52:bd:ee:6e:43: 21:b9:45:64:b2:8f:ed:58:02:a6:85:d6:94:03:24: 4d:ee:14:bb:4e:e1:b1:6e:c3:fb:8f:b8:3a:08:a7: 3a:d6:98:aa:e4:6b:32:08:19:0a:97:66:16:88:d0: 09:87:47:18:06:fa:9b:11:da:c2:f9:a5:c3:78:2a: 1d:39:db:34:06:49:c7:06:a7:b4:36:88:34:48:15: c4:90:6c:0f:8b:d7:a6:54:d2:f2:68:c3:02:2c:0d: a1:aa:8f:08:84:ae:59:51:31:0a:7b:92:d2:13:2a: ce:d1:a6:d4:5b:f9:5c:af:a4:8a:cd:95:05:64:82: 4f:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:07:6C:AD:60:95:8F:69:AE:35:96:DE:25:04:8C:A9:7A:85:21:73 X509v3 Authority Key Identifier: keyid:11:60:70:91:18:18:2E:56:4A:6D:9E:25:0F:F5:00:0E:FA:51:66:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0/1160709118182E564A6D9E250FF5000EFA5166A5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1160709118182E564A6D9E250FF5000EFA5166A5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0/1160709118182E564A6D9E250FF5000EFA5166A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:7d:17:4d:a9:a5:de:21:50:5e:bf:43:a6:15:9d:e3:e4:ee: 7e:e8:7b:b7:ea:8c:9c:97:31:53:3f:8e:53:59:c3:1c:f3:bc: 4f:37:9c:5e:a3:7e:47:6b:78:f8:38:6a:46:73:ce:7a:8a:fd: cb:6e:c3:c3:ff:c9:05:78:4d:eb:b4:c3:c7:6a:b6:c8:e8:61: 8a:8f:74:52:e9:a8:92:26:83:63:af:31:34:38:e8:f6:8b:08: 2a:96:07:a5:f1:00:9d:4d:9c:a0:8e:5a:a5:cd:d3:2c:fb:9b: dc:d9:5c:5f:db:a3:f4:43:0c:84:08:8a:2c:05:e9:8b:d0:ba: ca:83:8c:ff:ef:7c:de:50:2c:94:0a:b4:f5:8b:cb:9a:8e:39: 59:50:25:61:25:32:45:e6:5c:c2:0f:5e:47:ee:82:d4:af:78: 52:52:80:e8:ba:f3:ef:46:5a:80:b1:b7:e2:b3:d3:8f:10:bb: e1:ca:57:5a:6f:63:20:62:a7:b6:81:77:fa:9d:50:a8:03:2c: ad:9b:e0:b8:8f:d2:d2:ae:85:df:d2:99:d7:82:df:80:d9:3c: 11:86:88:13:7a:f3:b3:1f:91:c5:d5:35:2a:6f:c0:f6:8a:e6: 75:c4:e1:87:d8:25:03:81:05:65:d7:24:74:da:fb:97:49:aa: 7e:20:7d:27 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU0YHx8N9gUgdjrKms7VPAb6ea38wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTE2MDcwOTExODE4MkU1NjRBNkQ5RTI1MEZGNTAwMEVG QTUxNjZBNTAeFw0yNTEwMTkxODE2MTlaFw0yNTEwMjIyMzU0MTlaMDMxMTAvBgNV BAMTKDM3MDc2Q0FENjA5NThGNjlBRTM1OTZERTI1MDQ4Q0E5N0E4NTIxNzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDChnVMkzC1pNJgqDEWXOwk187+ rtrEIF25XMsKF2lSuCQetYloC3nwfvQJzpUzCNKIFkk69ODmRvBXHzO+55PMIinK 6pedCiBdeqw7mkAAAmeTEZlX1dUi8BAX0ghq66rTfnTuLlXH4SrhGvj4zBi4KKjw zxsDPOhGaNajHUt/fFBSve5uQyG5RWSyj+1YAqaF1pQDJE3uFLtO4bFuw/uPuDoI pzrWmKrkazIIGQqXZhaI0AmHRxgG+psR2sL5pcN4Kh052zQGSccGp7Q2iDRIFcSQ bA+L16ZU0vJowwIsDaGqjwiErllRMQp7ktITKs7RptRb+VyvpIrNlQVkgk8dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNwdsrWCVj2muNZbeJQSMqXqFIXMwHwYDVR0j BBgwFoAUEWBwkRgYLlZKbZ4lD/UADvpRZqUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OTcxOGY2Yi1iNTE2LTQzYWUtYjU4OS04M2EyNWZhYTMwYmUvMC8xMTYwNzA5MTE4 MTgyRTU2NEE2RDlFMjUwRkY1MDAwRUZBNTE2NkE1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTE2MDcwOTExODE4MkU1NjRBNkQ5RTI1MEZGNTAwMEVGQTUx NjZBNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODk3MThmNmItYjUxNi00M2FlLWI1 ODktODNhMjVmYWEzMGJlLzAvMTE2MDcwOTExODE4MkU1NjRBNkQ5RTI1MEZGNTAw MEVGQTUxNjZBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK19F02ppd4hUF6/Q6YVnePk7n7oe7fqjJyX MVM/jlNZwxzzvE83nF6jfkdrePg4akZzznqK/ctuw8P/yQV4Teu0w8dqtsjoYYqP dFLpqJImg2OvMTQ46PaLCCqWB6XxAJ1NnKCOWqXN0yz7m9zZXF/bo/RDDIQIiiwF 6YvQusqDjP/vfN5QLJQKtPWLy5qOOVlQJWElMkXmXMIPXkfugtSveFJSgOi68+9G WoCxt+Kz048Qu+HKV1pvYyBip7aBd/qdUKgDLK2b4LiP0tKuhd/SmdeC34DZPBGG iBN687MfkcXVNSpvwPaK5nXE4YfYJQOBBWXXJHTa+5dJqn4gfSc= -----END CERTIFICATE-----Generated at Mon Oct 20 13:56:39 2025 by rpki-client