$ rpki-client -vvf repo-rpki.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/116B1B493114E6F87244DA54CAB8D8EAB2503A38.mft File: 116B1B493114E6F87244DA54CAB8D8EAB2503A38.mft (raw, json) Hash identifier: vaal+q4vLkhOEPdLI3gUFwZ640WB7NiBGDM5KAHHMgo= Subject key identifier: DF:49:E7:43:7F:78:7A:3C:C1:60:BC:71:40:AE:72:98:10:5C:21:2D Authority key identifier: 11:6B:1B:49:31:14:E6:F8:72:44:DA:54:CA:B8:D8:EA:B2:50:3A:38 Certificate issuer: /CN=116B1B493114E6F87244DA54CAB8D8EAB2503A38 Certificate serial: 32B85427DC8943DE4ABE0DF99421EAB2D48ED998 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/116B1B493114E6F87244DA54CAB8D8EAB2503A38.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/116B1B493114E6F87244DA54CAB8D8EAB2503A38.mft Manifest number: 04F6 Signing time: Tue 01 Jul 2025 00:30:04 +0000 Manifest this update: Tue 01 Jul 2025 00:25:04 +0000 Manifest next update: Fri 04 Jul 2025 03:30:04 +0000 Files and hashes: 1: 34332e3234372e32302e302f32322d3234203d3e203234353233.roa (hash: H+RNVENUJYTTFsMWsgJwmtIem8PyNZc4K51/hdOdwYc=) 2: 3131302e352e39362e302f32302d3234203d3e203234353233.roa (hash: YQwpls/VIYk0HtO6le+F2vrKuryHDRtN3YkX83o6jq0=) 3: 3230322e36322e31322e302f32322d3234203d3e203234353233.roa (hash: zDNAzKqw5j02WXuh6T5DV38kgqgTtQhlXzyZ+EBpvWk=) 4: 323430323a313230303a3a2f33322d3438203d3e203234353233.roa (hash: RF31+hlg7a1h6KD8MpJ2iWEMUqzQM6jZSnJZLrwUpW8=) 5: 3130332e32322e3234302e302f32322d3234203d3e203234353233.roa (hash: O8/63tusLe+8VPLAAqnF2wRbO5seVh0CdjonLiqJ+TA=) 6: 116B1B493114E6F87244DA54CAB8D8EAB2503A38.crl (hash: LXAlQAhg602YDU0P9xEZmePO6Ue/SE9O12ESLZyl5ro=) 7: 34332e3234372e32322e302f32342d3234203d3e20313331373830.roa (hash: HBRVL6ab1EXX/4v+TicYMdAP2m56HzSbazq4BRWuQH4=) 8: 3230332e3137342e382e302f32312d3234203d3e203234353233.roa (hash: CCYyG9Lvz2JHKUXuBts3OmPCfqvhkN40wl/1YoY63Gk=) 9: 3230332e38342e3135322e302f32312d3234203d3e203234353233.roa (hash: sHtP5I2fCL/ByfK8+QejX4fzdx/zVWKbMfpBHH71lYU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/116B1B493114E6F87244DA54CAB8D8EAB2503A38.crl rsync://repo-rpki.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/116B1B493114E6F87244DA54CAB8D8EAB2503A38.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/116B1B493114E6F87244DA54CAB8D8EAB2503A38.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 03:30:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:b8:54:27:dc:89:43:de:4a:be:0d:f9:94:21:ea:b2:d4:8e:d9:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=116B1B493114E6F87244DA54CAB8D8EAB2503A38 Validity Not Before: Jul 1 00:25:04 2025 GMT Not After : Jul 4 03:30:04 2025 GMT Subject: CN=DF49E7437F787A3CC160BC7140AE7298105C212D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:08:4c:13:b8:34:26:f2:07:35:6b:f8:d7:69: 50:45:82:2e:ce:ce:34:45:ad:0b:d6:39:aa:af:57: 2a:34:49:46:2e:67:fa:b1:36:6b:bd:9c:a9:b7:ee: d8:51:25:e2:db:76:41:56:31:1a:79:72:21:b3:2d: fa:85:30:94:ad:e4:bb:2c:cf:87:88:c9:1a:1a:19: 9f:b1:9c:22:bb:54:46:a2:d4:55:53:c0:8b:b8:95: b0:cb:23:46:10:21:4a:47:61:d7:c9:7a:2d:ab:b2: 69:33:8e:7e:05:45:d0:d8:d1:13:a4:9f:26:c3:2c: 5a:46:8e:a5:be:35:79:e3:19:c9:65:ac:ef:58:52: f7:e4:4c:8c:65:16:35:fd:b5:2d:bc:a5:35:42:dd: 8f:82:74:c6:a0:fc:28:ba:6b:13:6d:cc:fe:10:23: e5:fb:07:a8:7f:05:46:90:45:ad:3c:1d:49:d2:64: d6:81:54:2c:d9:a1:e6:bd:0a:07:e1:17:06:13:46: 2f:51:ac:03:c1:9e:87:c6:e1:b8:6d:3b:06:41:f0: 6f:88:e5:47:9e:85:fb:34:cc:eb:8e:0b:ea:4d:9b: 1f:ea:0a:3e:1e:22:16:34:b4:f9:f3:37:65:67:50: af:86:8f:e0:86:bc:72:5e:79:e1:bf:a2:13:84:d1: 96:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:49:E7:43:7F:78:7A:3C:C1:60:BC:71:40:AE:72:98:10:5C:21:2D X509v3 Authority Key Identifier: keyid:11:6B:1B:49:31:14:E6:F8:72:44:DA:54:CA:B8:D8:EA:B2:50:3A:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/116B1B493114E6F87244DA54CAB8D8EAB2503A38.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/116B1B493114E6F87244DA54CAB8D8EAB2503A38.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/116B1B493114E6F87244DA54CAB8D8EAB2503A38.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:5d:5a:f9:11:a5:3c:28:ea:a8:d1:f0:82:82:03:85:a4:aa: 70:25:bc:e4:e4:b0:ae:b5:5b:b0:ac:3a:7e:e5:ff:d8:8a:97: c1:63:2b:8f:1a:f8:57:99:60:35:af:f4:e4:9a:cc:f1:58:9f: e6:a7:37:86:5c:4b:cc:35:13:db:a7:e4:2b:ac:d2:fa:fd:8f: 6c:79:56:e3:52:cc:08:83:02:c3:16:0f:a2:81:40:bd:6e:43: e8:c9:15:1c:18:66:1e:df:ac:fd:c3:2f:2c:50:57:e3:b4:98: f4:06:57:62:94:c8:d5:da:7b:96:a5:0b:00:f9:e7:8f:d8:56: d8:58:02:c9:c1:11:c6:68:b1:db:f2:8c:d8:59:55:a7:d8:7d: 7f:cc:3a:94:62:36:83:58:7e:2c:e4:70:72:da:37:31:31:64: 9f:63:ac:89:31:05:36:62:0e:cb:89:f1:c5:d8:a6:bc:83:e6: 64:12:b7:d4:d6:c7:73:59:da:e5:df:e0:5e:d3:e1:e3:55:82: c9:bb:24:f5:f6:12:80:85:cb:39:3e:9c:4b:32:97:77:54:08: 96:78:40:9f:8f:ce:1d:da:79:33:54:ff:a1:48:dc:0f:de:47: dc:79:ce:43:19:ce:e3:72:b7:c3:27:4b:d2:e4:2e:35:52:91: 0c:bc:09:81 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMrhUJ9yJQ95Kvg35lCHqstSO2ZgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTE2QjFCNDkzMTE0RTZGODcyNDREQTU0Q0FCOEQ4RUFC MjUwM0EzODAeFw0yNTA3MDEwMDI1MDRaFw0yNTA3MDQwMzMwMDRaMDMxMTAvBgNV BAMTKERGNDlFNzQzN0Y3ODdBM0NDMTYwQkM3MTQwQUU3Mjk4MTA1QzIxMkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjCEwTuDQm8gc1a/jXaVBFgi7O zjRFrQvWOaqvVyo0SUYuZ/qxNmu9nKm37thRJeLbdkFWMRp5ciGzLfqFMJSt5Lss z4eIyRoaGZ+xnCK7VEai1FVTwIu4lbDLI0YQIUpHYdfJei2rsmkzjn4FRdDY0ROk nybDLFpGjqW+NXnjGcllrO9YUvfkTIxlFjX9tS28pTVC3Y+CdMag/Ci6axNtzP4Q I+X7B6h/BUaQRa08HUnSZNaBVCzZoea9CgfhFwYTRi9RrAPBnofG4bhtOwZB8G+I 5Ueehfs0zOuOC+pNmx/qCj4eIhY0tPnzN2VnUK+Gj+CGvHJeeeG/ohOE0ZZXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU30nnQ394ejzBYLxxQK5ymBBcIS0wHwYDVR0j BBgwFoAUEWsbSTEU5vhyRNpUyrjY6rJQOjgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YzY2Nzc2OS04MGRjLTQwOTMtYjVmNy1kZmU3YzU3MjA0ODYvMC8xMTZCMUI0OTMx MTRFNkY4NzI0NERBNTRDQUI4RDhFQUIyNTAzQTM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTE2QjFCNDkzMTE0RTZGODcyNDREQTU0Q0FCOEQ4RUFCMjUw M0EzOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGM2Njc3NjktODBkYy00MDkzLWI1 ZjctZGZlN2M1NzIwNDg2LzAvMTE2QjFCNDkzMTE0RTZGODcyNDREQTU0Q0FCOEQ4 RUFCMjUwM0EzOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEZdWvkRpTwo6qjR8IKCA4WkqnAlvOTksK61 W7CsOn7l/9iKl8FjK48a+FeZYDWv9OSazPFYn+anN4ZcS8w1E9un5Cus0vr9j2x5 VuNSzAiDAsMWD6KBQL1uQ+jJFRwYZh7frP3DLyxQV+O0mPQGV2KUyNXae5alCwD5 54/YVthYAsnBEcZosdvyjNhZVafYfX/MOpRiNoNYfizkcHLaNzExZJ9jrIkxBTZi DsuJ8cXYpryD5mQSt9TWx3NZ2uXf4F7T4eNVgsm7JPX2EoCFyzk+nEsyl3dUCJZ4 QJ+Pzh3aeTNU/6FI3A/eR9x5zkMZzuNyt8MnS9LkLjVSkQy8CYE= -----END CERTIFICATE-----Generated at Thu Jul 3 03:48:48 2025 by rpki-client