$ rpki-client -vvf repo-rpki.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0/1160709118182E564A6D9E250FF5000EFA5166A5.mft File: 1160709118182E564A6D9E250FF5000EFA5166A5.mft (raw, json) Hash identifier: blDJIH0jtPJgI6auArcao+cCbSPpzZ+oRrdBbMtt8Ig= Subject key identifier: D3:17:3A:65:80:6C:4B:0A:4D:99:ED:3F:03:55:53:C9:C1:C3:E2:86 Authority key identifier: 11:60:70:91:18:18:2E:56:4A:6D:9E:25:0F:F5:00:0E:FA:51:66:A5 Certificate issuer: /CN=1160709118182E564A6D9E250FF5000EFA5166A5 Certificate serial: 390426E39A8ED122EE3B3A38F7C46943F7914196 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1160709118182E564A6D9E250FF5000EFA5166A5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0/1160709118182E564A6D9E250FF5000EFA5166A5.mft Manifest number: 018C Signing time: Fri 22 Aug 2025 01:51:18 +0000 Manifest this update: Fri 22 Aug 2025 01:46:18 +0000 Manifest next update: Mon 25 Aug 2025 10:30:18 +0000 Files and hashes: 1: 3130332e38362e3131362e302f32332d3233203d3e20313530353532.roa (hash: BffdL0xKitvxF+n5DIFwc3meIV1XU+P2BJOh3472GOA=) 2: 3130332e38362e3131372e302f32342d3234203d3e20313530353532.roa (hash: jLdTwnwuZ2oNm7k6y9AMJvKWkqS7oKk99hplqsfZVHE=) 3: 1160709118182E564A6D9E250FF5000EFA5166A5.crl (hash: AmxwXVShmSw3qnd8TkWNoaOGO3nbye2QaxEb8r1vXFY=) 4: 3130332e38362e3131362e302f32342d3234203d3e20313530353532.roa (hash: ja3IpRMbJ39xL9dCXnsQKYTFFR+b+ZemcabWb42o+iQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0/1160709118182E564A6D9E250FF5000EFA5166A5.crl rsync://repo-rpki.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0/1160709118182E564A6D9E250FF5000EFA5166A5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1160709118182E564A6D9E250FF5000EFA5166A5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 10:30:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:04:26:e3:9a:8e:d1:22:ee:3b:3a:38:f7:c4:69:43:f7:91:41:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1160709118182E564A6D9E250FF5000EFA5166A5 Validity Not Before: Aug 22 01:46:18 2025 GMT Not After : Aug 25 10:30:18 2025 GMT Subject: CN=D3173A65806C4B0A4D99ED3F035553C9C1C3E286 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:fd:be:12:6d:1c:63:bb:ea:f4:7a:b8:d3:2b: b3:28:6b:1a:2f:db:5c:13:b2:6d:18:1f:d0:8a:86: 40:31:b5:f7:32:a7:ef:16:10:03:6a:74:05:ad:53: 27:51:7f:fa:a3:34:3f:b9:ab:de:21:e1:ff:86:27: d6:11:cf:ad:5e:0d:11:2c:e1:bf:e1:09:7b:93:10: 15:11:6a:6d:65:aa:10:81:39:d5:70:43:e5:5d:80: 80:89:06:3c:0c:27:7d:28:c1:ac:a1:0e:b4:1c:c0: 2f:17:ed:5d:f4:73:c8:e3:b6:3f:f1:e3:bc:63:98: f0:95:de:a7:05:aa:58:45:22:68:a8:3a:f1:4a:c4: 4b:41:30:b2:c9:f9:a9:a1:0c:b4:78:6b:64:98:e0: dd:15:5d:ec:6c:42:d0:ed:b9:e4:e8:ce:3d:ce:17: ec:37:97:98:96:77:f2:ed:14:73:ff:9d:f2:fc:55: 5d:ac:54:04:d1:14:5b:92:55:08:2d:74:81:c1:b7: 65:a5:c4:89:52:3d:a4:25:ae:64:6b:ce:fa:d3:29: 51:b9:f3:42:4e:cd:bb:67:e8:1a:17:2d:6e:35:10: b0:4d:d8:f0:44:ec:a7:cb:d5:5e:9d:e1:c3:87:72: b0:0f:b2:52:6f:9e:a1:b4:2f:ea:8e:9a:75:53:21: 14:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:17:3A:65:80:6C:4B:0A:4D:99:ED:3F:03:55:53:C9:C1:C3:E2:86 X509v3 Authority Key Identifier: keyid:11:60:70:91:18:18:2E:56:4A:6D:9E:25:0F:F5:00:0E:FA:51:66:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0/1160709118182E564A6D9E250FF5000EFA5166A5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1160709118182E564A6D9E250FF5000EFA5166A5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0/1160709118182E564A6D9E250FF5000EFA5166A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:18:b0:20:35:7d:7e:bb:4c:95:16:f8:ef:53:1d:54:71:33: 4d:5f:f3:a2:8c:37:00:aa:c6:8e:cb:b7:ee:9e:03:82:c8:ea: b4:88:07:7f:92:3a:f0:14:cd:21:d7:e2:f5:81:44:00:96:10: 9e:fe:66:e5:1e:1c:41:6b:7b:cd:dd:26:2a:4b:2d:4b:1d:b1: 88:6a:01:1f:eb:7c:ee:80:90:f3:f9:72:d1:c1:1c:98:8f:21: cd:20:77:c1:cd:a4:22:9c:09:28:f6:9a:c6:9c:f5:f7:28:55: ba:e9:17:17:dd:99:ff:d4:c0:1c:1c:1b:95:df:62:d4:88:a5: 33:eb:5a:08:12:da:7c:8e:06:58:de:38:3f:17:da:4a:dc:54: 69:2c:d7:15:b9:45:ce:2b:f4:31:98:6c:52:dc:44:52:5a:40: 33:27:db:d6:5f:9a:38:7d:b0:4d:56:6c:ff:53:62:24:ce:c3: ae:d2:df:2f:cb:18:d1:e3:19:78:ff:11:e8:b3:56:6a:cd:36: 4d:c9:ba:45:64:13:39:31:8d:1b:85:2a:aa:b2:78:e1:fe:9d: 2a:fc:f4:40:c9:6c:32:36:c7:63:aa:22:9d:73:07:26:9d:cd: df:9a:eb:c4:1f:7d:02:32:ae:25:4d:ce:94:00:86:b2:67:a6: 21:f3:f3:13 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOQQm45qO0SLuOzo498RpQ/eRQZYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTE2MDcwOTExODE4MkU1NjRBNkQ5RTI1MEZGNTAwMEVG QTUxNjZBNTAeFw0yNTA4MjIwMTQ2MThaFw0yNTA4MjUxMDMwMThaMDMxMTAvBgNV BAMTKEQzMTczQTY1ODA2QzRCMEE0RDk5RUQzRjAzNTU1M0M5QzFDM0UyODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC//b4SbRxju+r0erjTK7Moaxov 21wTsm0YH9CKhkAxtfcyp+8WEANqdAWtUydRf/qjND+5q94h4f+GJ9YRz61eDREs 4b/hCXuTEBURam1lqhCBOdVwQ+VdgICJBjwMJ30owayhDrQcwC8X7V30c8jjtj/x 47xjmPCV3qcFqlhFImioOvFKxEtBMLLJ+amhDLR4a2SY4N0VXexsQtDtueTozj3O F+w3l5iWd/LtFHP/nfL8VV2sVATRFFuSVQgtdIHBt2WlxIlSPaQlrmRrzvrTKVG5 80JOzbtn6BoXLW41ELBN2PBE7KfL1V6d4cOHcrAPslJvnqG0L+qOmnVTIRSTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0xc6ZYBsSwpNme0/A1VTycHD4oYwHwYDVR0j BBgwFoAUEWBwkRgYLlZKbZ4lD/UADvpRZqUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OTcxOGY2Yi1iNTE2LTQzYWUtYjU4OS04M2EyNWZhYTMwYmUvMC8xMTYwNzA5MTE4 MTgyRTU2NEE2RDlFMjUwRkY1MDAwRUZBNTE2NkE1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTE2MDcwOTExODE4MkU1NjRBNkQ5RTI1MEZGNTAwMEVGQTUx NjZBNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODk3MThmNmItYjUxNi00M2FlLWI1 ODktODNhMjVmYWEzMGJlLzAvMTE2MDcwOTExODE4MkU1NjRBNkQ5RTI1MEZGNTAw MEVGQTUxNjZBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKsYsCA1fX67TJUW+O9THVRxM01f86KMNwCq xo7Lt+6eA4LI6rSIB3+SOvAUzSHX4vWBRACWEJ7+ZuUeHEFre83dJipLLUsdsYhq AR/rfO6AkPP5ctHBHJiPIc0gd8HNpCKcCSj2msac9fcoVbrpFxfdmf/UwBwcG5Xf YtSIpTPrWggS2nyOBljeOD8X2krcVGks1xW5Rc4r9DGYbFLcRFJaQDMn29Zfmjh9 sE1WbP9TYiTOw67S3y/LGNHjGXj/EeizVmrNNk3JukVkEzkxjRuFKqqyeOH+nSr8 9EDJbDI2x2OqIp1zByadzd+a68QffQIyriVNzpQAhrJnpiHz8xM= -----END CERTIFICATE-----Generated at Sat Aug 23 10:31:44 2025 by rpki-client