$ rpki-client -vvf repo-rpki.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/116B1B493114E6F87244DA54CAB8D8EAB2503A38.mft File: 116B1B493114E6F87244DA54CAB8D8EAB2503A38.mft (raw, json) Hash identifier: 5l5qLRPS5sZtMW5CeSMTu5PWEG1Qsiv80j+2tfnyuFo= Subject key identifier: 69:57:0D:89:F5:FD:B8:15:A1:29:42:9E:D2:0C:75:3B:7B:B9:E1:63 Authority key identifier: 11:6B:1B:49:31:14:E6:F8:72:44:DA:54:CA:B8:D8:EA:B2:50:3A:38 Certificate issuer: /CN=116B1B493114E6F87244DA54CAB8D8EAB2503A38 Certificate serial: 08512C27D91C2BA8DD7C56BD5D16CEC5B9457CC8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/116B1B493114E6F87244DA54CAB8D8EAB2503A38.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/116B1B493114E6F87244DA54CAB8D8EAB2503A38.mft Manifest number: 0529 Signing time: Mon 20 Oct 2025 18:40:05 +0000 Manifest this update: Mon 20 Oct 2025 18:35:05 +0000 Manifest next update: Thu 23 Oct 2025 20:44:05 +0000 Files and hashes: 1: 34332e3234372e32322e302f32342d3234203d3e20313331373830.roa (hash: 5anZts+0bEon0rtEY8wdhQZ04blyk5ArSxY56Hko6LA=) 2: 3230322e36322e31322e302f32322d3234203d3e203234353233.roa (hash: rkvfltc1XeXNlZR/3yH5i2rDhAOYYmSdXeT/IyFdjyk=) 3: 3130332e32322e3234302e302f32322d3234203d3e203234353233.roa (hash: O8/63tusLe+8VPLAAqnF2wRbO5seVh0CdjonLiqJ+TA=) 4: 3230332e38342e3135322e302f32312d3234203d3e203234353233.roa (hash: sHtP5I2fCL/ByfK8+QejX4fzdx/zVWKbMfpBHH71lYU=) 5: 3131302e352e39362e302f32302d3234203d3e203234353233.roa (hash: YQwpls/VIYk0HtO6le+F2vrKuryHDRtN3YkX83o6jq0=) 6: 323430323a313230303a3a2f33322d3438203d3e203234353233.roa (hash: RF31+hlg7a1h6KD8MpJ2iWEMUqzQM6jZSnJZLrwUpW8=) 7: 116B1B493114E6F87244DA54CAB8D8EAB2503A38.crl (hash: bEtyzBIfNtCayPARqLi7D5bSfUr9kDPovdYRH4OLh4s=) 8: 3230332e3137342e382e302f32312d3234203d3e203234353233.roa (hash: CCYyG9Lvz2JHKUXuBts3OmPCfqvhkN40wl/1YoY63Gk=) 9: 34332e3234372e32302e302f32322d3234203d3e203234353233.roa (hash: H+RNVENUJYTTFsMWsgJwmtIem8PyNZc4K51/hdOdwYc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/116B1B493114E6F87244DA54CAB8D8EAB2503A38.crl rsync://repo-rpki.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/116B1B493114E6F87244DA54CAB8D8EAB2503A38.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/116B1B493114E6F87244DA54CAB8D8EAB2503A38.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:51:2c:27:d9:1c:2b:a8:dd:7c:56:bd:5d:16:ce:c5:b9:45:7c:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=116B1B493114E6F87244DA54CAB8D8EAB2503A38 Validity Not Before: Oct 20 18:35:05 2025 GMT Not After : Oct 23 20:44:05 2025 GMT Subject: CN=69570D89F5FDB815A129429ED20C753B7BB9E163 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:42:d0:a2:09:ee:24:78:38:94:3b:c4:20:bf: 59:dc:0f:c1:08:59:30:33:99:2f:e7:6c:4d:9d:28: 17:8b:20:e7:3f:6a:19:32:c1:e2:19:0c:6d:a1:db: cb:e8:3b:29:7f:2b:10:f2:05:0a:76:07:36:4b:70: c3:6c:92:9c:5e:74:6b:c7:0d:cb:32:b0:32:f6:ec: 0d:87:7a:09:ae:c1:d6:03:d6:98:e7:a9:74:c2:2e: e9:5f:ff:7b:ac:c5:35:ef:db:ab:1c:1f:a4:37:9c: 4f:6d:eb:74:a3:15:5a:c6:5e:db:3e:fa:f2:36:83: 76:c2:ea:41:8d:cd:8e:48:48:89:1d:64:eb:27:ed: 71:27:61:1a:86:21:89:88:b3:eb:4d:f4:50:03:0c: b0:0f:4e:f4:49:87:73:33:ed:77:7d:c7:20:05:0e: 05:5f:57:33:24:62:41:0c:16:bc:05:be:44:19:a7: ee:e8:e4:21:c1:b4:97:f8:4b:da:b4:c1:24:9e:8e: 66:da:07:7a:55:ba:2d:ed:78:8a:15:59:f9:c2:42: 2d:a9:2a:64:a6:e6:2a:d6:61:a5:df:ff:ec:83:2b: 17:bb:6d:57:ed:0a:bc:60:e9:db:05:ac:b6:34:65: 6c:ed:54:6e:39:55:15:23:05:55:b1:af:b6:38:cf: 76:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:57:0D:89:F5:FD:B8:15:A1:29:42:9E:D2:0C:75:3B:7B:B9:E1:63 X509v3 Authority Key Identifier: keyid:11:6B:1B:49:31:14:E6:F8:72:44:DA:54:CA:B8:D8:EA:B2:50:3A:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/116B1B493114E6F87244DA54CAB8D8EAB2503A38.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/116B1B493114E6F87244DA54CAB8D8EAB2503A38.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/116B1B493114E6F87244DA54CAB8D8EAB2503A38.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:97:c7:61:d4:e2:20:35:e9:4e:49:1e:86:fc:e5:4a:bd:f4: 85:5e:b7:f4:f3:92:50:a6:28:f3:ff:e7:37:53:3b:a2:29:ce: fe:9e:3c:67:74:5e:e5:d4:74:56:a2:55:53:b3:dc:e5:95:9c: 91:ea:d1:28:82:a4:95:c4:4b:16:a6:50:36:03:b1:cf:01:85: f6:18:02:ed:a2:de:1e:d2:04:bc:68:22:54:80:75:8d:4e:4e: fb:e0:cb:87:d5:8c:de:e4:b0:16:f9:80:47:ee:b5:3e:8c:72: 05:94:c0:c6:9f:23:17:24:51:d5:10:16:d7:43:82:40:ac:5e: fb:ec:28:01:2e:39:a0:46:4f:a3:a7:5a:eb:ec:42:47:a5:a9: e0:31:02:16:2f:73:be:62:f2:c3:60:e7:6c:22:b6:fb:a9:2d: 70:83:23:d8:72:5a:b4:fe:e4:c5:17:5c:e0:cb:ab:1e:f4:2e: a6:36:94:e1:d8:23:29:d4:2f:6e:c1:7e:9b:25:bd:91:54:20: c3:19:96:b8:a1:4f:fb:92:35:8f:b7:63:73:c2:e5:29:22:de: 65:e6:be:a5:ed:bb:7c:60:47:91:54:83:0b:70:0e:71:5b:85: c7:83:f4:6d:18:35:b4:a6:63:35:ac:a4:e5:5f:33:1f:f9:a3: 73:bd:c2:35 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCFEsJ9kcK6jdfFa9XRbOxblFfMgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTE2QjFCNDkzMTE0RTZGODcyNDREQTU0Q0FCOEQ4RUFC MjUwM0EzODAeFw0yNTEwMjAxODM1MDVaFw0yNTEwMjMyMDQ0MDVaMDMxMTAvBgNV BAMTKDY5NTcwRDg5RjVGREI4MTVBMTI5NDI5RUQyMEM3NTNCN0JCOUUxNjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKQtCiCe4keDiUO8Qgv1ncD8EI WTAzmS/nbE2dKBeLIOc/ahkyweIZDG2h28voOyl/KxDyBQp2BzZLcMNskpxedGvH DcsysDL27A2HegmuwdYD1pjnqXTCLulf/3usxTXv26scH6Q3nE9t63SjFVrGXts+ +vI2g3bC6kGNzY5ISIkdZOsn7XEnYRqGIYmIs+tN9FADDLAPTvRJh3Mz7Xd9xyAF DgVfVzMkYkEMFrwFvkQZp+7o5CHBtJf4S9q0wSSejmbaB3pVui3teIoVWfnCQi2p KmSm5irWYaXf/+yDKxe7bVftCrxg6dsFrLY0ZWztVG45VRUjBVWxr7Y4z3ZtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaVcNifX9uBWhKUKe0gx1O3u54WMwHwYDVR0j BBgwFoAUEWsbSTEU5vhyRNpUyrjY6rJQOjgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YzY2Nzc2OS04MGRjLTQwOTMtYjVmNy1kZmU3YzU3MjA0ODYvMC8xMTZCMUI0OTMx MTRFNkY4NzI0NERBNTRDQUI4RDhFQUIyNTAzQTM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTE2QjFCNDkzMTE0RTZGODcyNDREQTU0Q0FCOEQ4RUFCMjUw M0EzOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGM2Njc3NjktODBkYy00MDkzLWI1 ZjctZGZlN2M1NzIwNDg2LzAvMTE2QjFCNDkzMTE0RTZGODcyNDREQTU0Q0FCOEQ4 RUFCMjUwM0EzOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGaXx2HU4iA16U5JHob85Uq99IVet/TzklCm KPP/5zdTO6Ipzv6ePGd0XuXUdFaiVVOz3OWVnJHq0SiCpJXESxamUDYDsc8BhfYY Au2i3h7SBLxoIlSAdY1OTvvgy4fVjN7ksBb5gEfutT6McgWUwMafIxckUdUQFtdD gkCsXvvsKAEuOaBGT6OnWuvsQkelqeAxAhYvc75i8sNg52witvupLXCDI9hyWrT+ 5MUXXODLqx70LqY2lOHYIynUL27BfpslvZFUIMMZlrihT/uSNY+3Y3PC5Ski3mXm vqXtu3xgR5FUgwtwDnFbhceD9G0YNbSmYzWspOVfMx/5o3O9wjU= -----END CERTIFICATE-----Generated at Tue Oct 21 02:09:14 2025 by rpki-client