$ rpki-client -vvf repo-rpki.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/16F8223FA3342ACE31ED864C538E59E22A52BC89.mft File: 16F8223FA3342ACE31ED864C538E59E22A52BC89.mft (raw, json) Hash identifier: /aTdYJeP1MWKRPrRLVlQ8WI+uYOtNW9P+uu0fPyYCZs= Subject key identifier: 72:5B:8E:62:46:73:B0:11:67:84:C7:7F:A9:81:09:BF:C2:B6:6F:C8 Authority key identifier: 16:F8:22:3F:A3:34:2A:CE:31:ED:86:4C:53:8E:59:E2:2A:52:BC:89 Certificate issuer: /CN=16F8223FA3342ACE31ED864C538E59E22A52BC89 Certificate serial: 4B65314D6712DF3CA7D90D8B164395CB418642CF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/16F8223FA3342ACE31ED864C538E59E22A52BC89.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/16F8223FA3342ACE31ED864C538E59E22A52BC89.mft Manifest number: 8B Signing time: Sun 19 Oct 2025 09:41:13 +0000 Manifest this update: Sun 19 Oct 2025 09:36:13 +0000 Manifest next update: Wed 22 Oct 2025 20:54:13 +0000 Files and hashes: 1: 3136302e32352e3135372e302f32342d3234203d3e20313533303835.roa (hash: aKd9F4ACmgNItMgz+uXKOhQG73PpNtSpdGFc0rlMBFo=) 2: 16F8223FA3342ACE31ED864C538E59E22A52BC89.crl (hash: kgcR3nMptZTIK1OczcoUMCESM7+eaMyzSZmQh8JQVmU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/16F8223FA3342ACE31ED864C538E59E22A52BC89.crl rsync://repo-rpki.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/16F8223FA3342ACE31ED864C538E59E22A52BC89.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/16F8223FA3342ACE31ED864C538E59E22A52BC89.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 20:54:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:65:31:4d:67:12:df:3c:a7:d9:0d:8b:16:43:95:cb:41:86:42:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16F8223FA3342ACE31ED864C538E59E22A52BC89 Validity Not Before: Oct 19 09:36:13 2025 GMT Not After : Oct 22 20:54:13 2025 GMT Subject: CN=725B8E624673B0116784C77FA98109BFC2B66FC8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:fc:31:78:a0:41:08:d6:d4:38:ba:24:f6:eb: f7:9a:b6:c7:e6:ad:e5:e8:fd:bb:49:45:49:27:c3: f2:38:10:e6:bb:cd:d3:f9:f0:b5:49:68:cf:78:73: ed:1d:d6:54:65:83:b3:38:dc:e2:43:28:5c:e4:7b: a0:1f:40:dc:99:07:a6:08:23:ef:27:83:8e:26:33: 46:32:47:d5:ed:de:ac:fb:df:ba:4b:67:89:d4:f8: b1:21:ad:d5:45:93:d7:ff:5d:60:31:1c:ab:95:ac: 1f:da:31:37:df:4b:66:41:86:7d:58:fc:fb:40:8b: b0:6e:af:60:38:b7:05:d9:b7:ad:b9:9a:ec:2b:26: 7f:ce:2a:f1:e1:9b:ae:a6:d1:52:7b:29:df:00:39: cf:73:9f:5e:40:06:bb:8b:e1:70:48:56:b8:ea:f5: 61:35:ca:5b:63:d6:e8:f2:75:41:67:d4:01:52:0b: 16:09:70:8f:4c:e2:2d:e6:82:ff:8b:90:40:48:eb: 28:29:2e:32:c3:7b:dc:a1:83:44:09:6f:05:44:1f: d8:5c:3e:82:d8:d4:f6:4d:b8:67:bc:bd:2e:df:1f: 89:ae:4a:13:52:9a:c2:cc:70:81:2f:25:74:24:ce: c3:6d:0a:9b:8a:e5:ad:6d:e9:03:33:0b:a6:9f:0b: 35:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:5B:8E:62:46:73:B0:11:67:84:C7:7F:A9:81:09:BF:C2:B6:6F:C8 X509v3 Authority Key Identifier: keyid:16:F8:22:3F:A3:34:2A:CE:31:ED:86:4C:53:8E:59:E2:2A:52:BC:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/16F8223FA3342ACE31ED864C538E59E22A52BC89.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/16F8223FA3342ACE31ED864C538E59E22A52BC89.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/16F8223FA3342ACE31ED864C538E59E22A52BC89.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:63:a4:63:58:17:32:2f:3c:62:34:fa:0e:92:0f:56:2e:28: da:5c:90:9a:ba:a5:e3:a6:50:21:4d:d4:bd:71:69:7f:d3:b4: 45:13:c2:73:cd:2b:67:de:23:44:ed:32:13:25:8d:e9:c5:59: 33:96:dd:d2:72:87:82:ea:3f:2f:f2:d4:b1:44:57:90:9f:a7: 34:6b:60:0d:29:3a:12:02:99:13:0b:c4:a6:38:0c:4f:3e:69: d0:ca:82:34:15:3d:b5:ff:36:12:b4:41:70:78:c6:ac:41:54: dc:01:47:30:bb:9a:d9:b2:18:55:47:e7:33:2c:12:e9:38:88: 8e:fa:59:37:1d:51:5e:45:2d:c7:3d:3a:e4:cf:c9:b2:72:05: ba:13:98:da:e2:3e:ab:2f:5e:02:fd:fb:02:57:85:cc:a8:44: 23:52:29:f9:8d:35:83:3b:3d:94:c0:42:3f:f2:f7:d9:2f:49: 9b:a0:42:d3:49:df:db:21:3e:4d:3f:8b:97:7c:ce:b2:3c:04: a9:9a:f0:be:f1:ba:9c:95:6a:aa:d7:4b:eb:e9:42:0d:ff:ba: fd:90:56:3d:00:4c:5f:30:e3:3f:0d:7c:b1:0c:ac:7d:c4:a9: 08:72:00:31:81:23:23:b3:43:0e:29:6b:23:15:59:47:4c:c8: 64:9f:35:f6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS2UxTWcS3zyn2Q2LFkOVy0GGQs8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTZGODIyM0ZBMzM0MkFDRTMxRUQ4NjRDNTM4RTU5RTIy QTUyQkM4OTAeFw0yNTEwMTkwOTM2MTNaFw0yNTEwMjIyMDU0MTNaMDMxMTAvBgNV BAMTKDcyNUI4RTYyNDY3M0IwMTE2Nzg0Qzc3RkE5ODEwOUJGQzJCNjZGQzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF/DF4oEEI1tQ4uiT26/eatsfm reXo/btJRUknw/I4EOa7zdP58LVJaM94c+0d1lRlg7M43OJDKFzke6AfQNyZB6YI I+8ng44mM0YyR9Xt3qz737pLZ4nU+LEhrdVFk9f/XWAxHKuVrB/aMTffS2ZBhn1Y /PtAi7Bur2A4twXZt625muwrJn/OKvHhm66m0VJ7Kd8AOc9zn15ABruL4XBIVrjq 9WE1yltj1ujydUFn1AFSCxYJcI9M4i3mgv+LkEBI6ygpLjLDe9yhg0QJbwVEH9hc PoLY1PZNuGe8vS7fH4muShNSmsLMcIEvJXQkzsNtCpuK5a1t6QMzC6afCzWBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcluOYkZzsBFnhMd/qYEJv8K2b8gwHwYDVR0j BBgwFoAUFvgiP6M0Ks4x7YZMU45Z4ipSvIkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j M2E5ZDc4OC1iY2Y3LTQ2ZjAtOGI1Yi0wZDdkMWZjYjZkYTMvMC8xNkY4MjIzRkEz MzQyQUNFMzFFRDg2NEM1MzhFNTlFMjJBNTJCQzg5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMTZGODIyM0ZBMzM0MkFDRTMxRUQ4NjRDNTM4RTU5RTIyQTUy QkM4OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzNhOWQ3ODgtYmNmNy00NmYwLThi NWItMGQ3ZDFmY2I2ZGEzLzAvMTZGODIyM0ZBMzM0MkFDRTMxRUQ4NjRDNTM4RTU5 RTIyQTUyQkM4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKpjpGNYFzIvPGI0+g6SD1YuKNpckJq6peOm UCFN1L1xaX/TtEUTwnPNK2feI0TtMhMljenFWTOW3dJyh4LqPy/y1LFEV5CfpzRr YA0pOhICmRMLxKY4DE8+adDKgjQVPbX/NhK0QXB4xqxBVNwBRzC7mtmyGFVH5zMs Euk4iI76WTcdUV5FLcc9OuTPybJyBboTmNriPqsvXgL9+wJXhcyoRCNSKfmNNYM7 PZTAQj/y99kvSZugQtNJ39shPk0/i5d8zrI8BKma8L7xupyVaqrXS+vpQg3/uv2Q Vj0ATF8w4z8NfLEMrH3EqQhyADGBIyOzQw4payMVWUdMyGSfNfY= -----END CERTIFICATE-----Generated at Tue Oct 21 08:32:49 2025 by rpki-client