$ rpki-client -vvf repo-rpki.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/116B1B493114E6F87244DA54CAB8D8EAB2503A38.mft File: 116B1B493114E6F87244DA54CAB8D8EAB2503A38.mft (raw, json) Hash identifier: A2OoFq1/3behGYzrg0uhhkRPSfPojw42E7ZYSSYfIec= Subject key identifier: EE:6B:B8:9A:7E:46:7D:5C:0D:0C:64:B0:1E:C4:BB:C5:1C:58:A3:F2 Authority key identifier: 11:6B:1B:49:31:14:E6:F8:72:44:DA:54:CA:B8:D8:EA:B2:50:3A:38 Certificate issuer: /CN=116B1B493114E6F87244DA54CAB8D8EAB2503A38 Certificate serial: 79015C08FF4415F79DF1C047B58E2FB4C96DE3D6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/116B1B493114E6F87244DA54CAB8D8EAB2503A38.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/116B1B493114E6F87244DA54CAB8D8EAB2503A38.mft Manifest number: 050F Signing time: Sat 23 Aug 2025 13:20:04 +0000 Manifest this update: Sat 23 Aug 2025 13:15:04 +0000 Manifest next update: Tue 26 Aug 2025 23:49:04 +0000 Files and hashes: 1: 34332e3234372e32322e302f32342d3234203d3e20313331373830.roa (hash: 5anZts+0bEon0rtEY8wdhQZ04blyk5ArSxY56Hko6LA=) 2: 3230322e36322e31322e302f32322d3234203d3e203234353233.roa (hash: rkvfltc1XeXNlZR/3yH5i2rDhAOYYmSdXeT/IyFdjyk=) 3: 3230332e38342e3135322e302f32312d3234203d3e203234353233.roa (hash: sHtP5I2fCL/ByfK8+QejX4fzdx/zVWKbMfpBHH71lYU=) 4: 323430323a313230303a3a2f33322d3438203d3e203234353233.roa (hash: RF31+hlg7a1h6KD8MpJ2iWEMUqzQM6jZSnJZLrwUpW8=) 5: 3130332e32322e3234302e302f32322d3234203d3e203234353233.roa (hash: O8/63tusLe+8VPLAAqnF2wRbO5seVh0CdjonLiqJ+TA=) 6: 3131302e352e39362e302f32302d3234203d3e203234353233.roa (hash: YQwpls/VIYk0HtO6le+F2vrKuryHDRtN3YkX83o6jq0=) 7: 116B1B493114E6F87244DA54CAB8D8EAB2503A38.crl (hash: 9MX35ShT7h0flUCpOC9z3jW0NcFEKF/Gn0r1tRfNr84=) 8: 3230332e3137342e382e302f32312d3234203d3e203234353233.roa (hash: CCYyG9Lvz2JHKUXuBts3OmPCfqvhkN40wl/1YoY63Gk=) 9: 34332e3234372e32302e302f32322d3234203d3e203234353233.roa (hash: H+RNVENUJYTTFsMWsgJwmtIem8PyNZc4K51/hdOdwYc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/116B1B493114E6F87244DA54CAB8D8EAB2503A38.crl rsync://repo-rpki.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/116B1B493114E6F87244DA54CAB8D8EAB2503A38.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/116B1B493114E6F87244DA54CAB8D8EAB2503A38.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 23:49:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:01:5c:08:ff:44:15:f7:9d:f1:c0:47:b5:8e:2f:b4:c9:6d:e3:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=116B1B493114E6F87244DA54CAB8D8EAB2503A38 Validity Not Before: Aug 23 13:15:04 2025 GMT Not After : Aug 26 23:49:04 2025 GMT Subject: CN=EE6BB89A7E467D5C0D0C64B01EC4BBC51C58A3F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:85:29:93:b7:b4:e6:7a:1b:33:2c:cd:64:cb: fc:be:28:a2:bb:d2:2d:44:10:20:40:fd:44:27:92: a5:39:68:f8:b2:34:02:a4:76:b1:70:31:f1:ea:01: 94:d0:e6:7d:55:c3:52:00:49:6a:cc:dc:97:5f:75: 3c:6b:6c:22:65:44:28:88:4f:4e:ae:29:cd:7e:70: 3b:65:de:41:fb:a7:2c:e6:00:d6:fa:ae:a9:75:de: 72:45:11:c7:6b:42:59:67:34:8d:c0:e9:38:19:eb: e8:a5:7c:88:ba:3f:3e:e8:84:c0:72:d5:5d:34:f7: cb:8a:0e:dd:61:d4:83:eb:cd:2a:3d:d2:e8:e7:0e: b6:0a:92:ca:8f:0e:14:83:8d:df:12:7c:43:de:b0: 42:55:39:2e:81:05:a6:d4:1d:2f:45:c2:4d:e4:e3: b5:85:85:ad:55:ef:82:cd:bd:8d:a6:95:89:41:08: 97:95:e7:09:d0:34:9b:f7:0a:a4:b6:77:09:14:27: 41:b1:1c:d4:fe:d1:dd:ff:1a:33:5e:65:e1:2c:74: 20:1a:11:35:b9:d8:47:60:d7:76:37:a0:79:67:86: 06:b5:8d:e6:d1:0a:3b:51:18:5c:e3:17:91:7c:f4: 63:b0:63:5f:3f:4d:f7:ef:37:1f:bb:9d:89:42:66: be:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:6B:B8:9A:7E:46:7D:5C:0D:0C:64:B0:1E:C4:BB:C5:1C:58:A3:F2 X509v3 Authority Key Identifier: keyid:11:6B:1B:49:31:14:E6:F8:72:44:DA:54:CA:B8:D8:EA:B2:50:3A:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/116B1B493114E6F87244DA54CAB8D8EAB2503A38.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/116B1B493114E6F87244DA54CAB8D8EAB2503A38.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/116B1B493114E6F87244DA54CAB8D8EAB2503A38.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:95:33:74:bb:fe:45:00:da:3f:d0:31:77:53:17:28:0e:20: b5:37:1a:69:ea:07:20:42:ac:25:b4:b1:fb:c1:87:0a:89:80: f2:68:92:07:75:04:b4:4e:fd:45:28:a9:48:8a:6f:a2:7b:cf: a1:b1:4b:52:90:db:aa:d0:61:c1:27:dc:67:6e:a6:fc:f3:94: 51:4a:ab:89:89:70:b7:b2:72:fe:e6:40:fe:41:00:14:ed:8c: a6:f4:18:9f:56:b6:41:05:bb:2b:16:3e:17:60:c2:59:55:b1: 9f:69:b7:49:15:87:76:97:22:b4:7a:56:d1:f5:42:95:f6:79: b0:c2:20:c7:19:37:35:26:c0:75:76:31:b6:19:f9:01:ca:11: 33:ed:89:e3:e4:c7:1b:eb:81:5b:ac:23:31:f6:81:8b:02:7e: 76:db:1e:ba:b6:ba:90:bb:13:f2:5a:11:b7:8f:07:06:27:a6: fa:97:ad:45:6c:53:b0:0e:bd:2f:67:8b:52:c0:53:8b:9d:37: 54:ae:98:30:fe:19:27:af:ed:d7:a0:c6:df:ca:26:1a:f5:92: 94:24:60:8d:6f:da:96:32:ed:3d:a1:c7:e9:5d:4d:51:23:5d: e8:21:74:b7:84:3e:e2:b6:2c:a5:ff:e3:6e:45:24:38:df:19: c0:ed:db:0c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeQFcCP9EFfed8cBHtY4vtMlt49YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTE2QjFCNDkzMTE0RTZGODcyNDREQTU0Q0FCOEQ4RUFC MjUwM0EzODAeFw0yNTA4MjMxMzE1MDRaFw0yNTA4MjYyMzQ5MDRaMDMxMTAvBgNV BAMTKEVFNkJCODlBN0U0NjdENUMwRDBDNjRCMDFFQzRCQkM1MUM1OEEzRjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvhSmTt7TmehszLM1ky/y+KKK7 0i1EECBA/UQnkqU5aPiyNAKkdrFwMfHqAZTQ5n1Vw1IASWrM3JdfdTxrbCJlRCiI T06uKc1+cDtl3kH7pyzmANb6rql13nJFEcdrQllnNI3A6TgZ6+ilfIi6Pz7ohMBy 1V0098uKDt1h1IPrzSo90ujnDrYKksqPDhSDjd8SfEPesEJVOS6BBabUHS9Fwk3k 47WFha1V74LNvY2mlYlBCJeV5wnQNJv3CqS2dwkUJ0GxHNT+0d3/GjNeZeEsdCAa ETW52Edg13Y3oHlnhga1jebRCjtRGFzjF5F89GOwY18/TffvNx+7nYlCZr4VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7mu4mn5GfVwNDGSwHsS7xRxYo/IwHwYDVR0j BBgwFoAUEWsbSTEU5vhyRNpUyrjY6rJQOjgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YzY2Nzc2OS04MGRjLTQwOTMtYjVmNy1kZmU3YzU3MjA0ODYvMC8xMTZCMUI0OTMx MTRFNkY4NzI0NERBNTRDQUI4RDhFQUIyNTAzQTM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTE2QjFCNDkzMTE0RTZGODcyNDREQTU0Q0FCOEQ4RUFCMjUw M0EzOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGM2Njc3NjktODBkYy00MDkzLWI1 ZjctZGZlN2M1NzIwNDg2LzAvMTE2QjFCNDkzMTE0RTZGODcyNDREQTU0Q0FCOEQ4 RUFCMjUwM0EzOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAmVM3S7/kUA2j/QMXdTFygOILU3GmnqByBC rCW0sfvBhwqJgPJokgd1BLRO/UUoqUiKb6J7z6GxS1KQ26rQYcEn3GdupvzzlFFK q4mJcLeycv7mQP5BABTtjKb0GJ9WtkEFuysWPhdgwllVsZ9pt0kVh3aXIrR6VtH1 QpX2ebDCIMcZNzUmwHV2MbYZ+QHKETPtiePkxxvrgVusIzH2gYsCfnbbHrq2upC7 E/JaEbePBwYnpvqXrUVsU7AOvS9ni1LAU4udN1SumDD+GSev7degxt/KJhr1kpQk YI1v2pYy7T2hx+ldTVEjXeghdLeEPuK2LKX/425FJDjfGcDt2ww= -----END CERTIFICATE-----Generated at Sat Aug 23 23:53:54 2025 by rpki-client