$ rpki-client -vvf repo-rpki.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/16F8223FA3342ACE31ED864C538E59E22A52BC89.mft File: 16F8223FA3342ACE31ED864C538E59E22A52BC89.mft (raw, json) Hash identifier: DXbcFvNMCXsJWB0wAhCm6dJwhgaiYTo2o3EcUxDRpgg= Subject key identifier: 7E:3F:FA:93:27:41:BC:2C:DC:BD:C0:74:87:26:35:F3:D0:6E:78:A9 Authority key identifier: 16:F8:22:3F:A3:34:2A:CE:31:ED:86:4C:53:8E:59:E2:2A:52:BC:89 Certificate issuer: /CN=16F8223FA3342ACE31ED864C538E59E22A52BC89 Certificate serial: 41E9989196A2A3FAC2B03792BA9F39D9395840D4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/16F8223FA3342ACE31ED864C538E59E22A52BC89.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/16F8223FA3342ACE31ED864C538E59E22A52BC89.mft Manifest number: 5A Signing time: Tue 01 Jul 2025 13:31:09 +0000 Manifest this update: Tue 01 Jul 2025 13:26:09 +0000 Manifest next update: Fri 04 Jul 2025 16:53:09 +0000 Files and hashes: 1: 16F8223FA3342ACE31ED864C538E59E22A52BC89.crl (hash: 6f4/JdK36OYHLE3Htu0EverfAvBkvs1D/ASByUyh8p4=) 2: 3136302e32352e3135372e302f32342d3234203d3e20313533303835.roa (hash: aKd9F4ACmgNItMgz+uXKOhQG73PpNtSpdGFc0rlMBFo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/16F8223FA3342ACE31ED864C538E59E22A52BC89.crl rsync://repo-rpki.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/16F8223FA3342ACE31ED864C538E59E22A52BC89.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/16F8223FA3342ACE31ED864C538E59E22A52BC89.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 16:53:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:e9:98:91:96:a2:a3:fa:c2:b0:37:92:ba:9f:39:d9:39:58:40:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16F8223FA3342ACE31ED864C538E59E22A52BC89 Validity Not Before: Jul 1 13:26:09 2025 GMT Not After : Jul 4 16:53:09 2025 GMT Subject: CN=7E3FFA932741BC2CDCBDC074872635F3D06E78A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:66:71:9e:e3:66:ea:99:c5:b7:d2:28:2a:1f: 57:a9:50:aa:01:45:8e:a5:4a:20:9a:b7:28:19:21: 5f:c4:d0:bc:8c:59:e3:a9:3e:ae:dd:bb:90:43:84: 1e:01:6d:e8:5f:ee:6d:cc:e9:74:2d:c2:e3:0c:83: 43:d1:6b:11:d8:30:f9:d0:aa:b5:98:30:f3:d7:dd: 9c:74:f1:02:8a:c9:f8:54:62:ce:89:f8:8c:e4:d5: ef:ef:f1:c0:ea:cc:af:2a:2f:5a:da:5b:5d:07:d9: d5:4b:13:7b:79:0b:15:a6:4d:ce:b6:28:9c:25:d9: 49:1c:81:d4:48:ed:36:59:61:cf:f5:7d:08:65:d6: 13:24:10:52:86:f2:f2:b7:37:a8:8a:33:ed:82:5b: cb:28:31:30:74:ba:d9:f9:df:e2:fa:12:4e:29:6b: 69:e6:cf:8d:f6:15:e7:fe:47:b8:03:22:85:10:5b: f9:d3:c3:f4:f8:a2:bf:83:a1:bd:73:a0:a5:08:87: 39:45:a1:1d:40:2c:65:21:fe:e1:e3:b3:f9:e9:ea: e2:d8:a3:01:d4:22:cd:2f:1b:93:15:c6:d0:7e:74: 15:a8:a3:cf:13:d4:cd:d9:7a:cc:af:08:f1:49:dd: 66:46:15:33:44:72:9c:b5:0c:ec:ad:9b:fe:35:95: 6d:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:3F:FA:93:27:41:BC:2C:DC:BD:C0:74:87:26:35:F3:D0:6E:78:A9 X509v3 Authority Key Identifier: keyid:16:F8:22:3F:A3:34:2A:CE:31:ED:86:4C:53:8E:59:E2:2A:52:BC:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/16F8223FA3342ACE31ED864C538E59E22A52BC89.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/16F8223FA3342ACE31ED864C538E59E22A52BC89.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/16F8223FA3342ACE31ED864C538E59E22A52BC89.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:eb:1e:b4:f7:19:24:a4:98:e8:f7:fa:c3:a9:3f:1d:89:a6: 07:df:20:51:b1:62:a0:59:6e:9a:0e:19:c8:12:e1:8c:b7:8d: 59:b5:66:fb:0b:86:1a:83:8f:da:e2:43:1b:a9:ab:f6:e8:68: 8e:05:f4:86:7a:bd:db:6a:68:34:ae:fe:e4:45:6d:14:43:5f: fc:ab:61:4f:77:31:e5:62:31:9a:5f:6c:74:0f:35:21:e7:e2: 1d:76:8b:0b:ae:2d:56:c9:2b:ea:9b:02:38:01:84:d9:27:43: 2c:aa:e2:ed:69:ea:01:cc:35:6e:fe:87:b5:10:44:15:aa:4e: 45:ad:22:2e:2c:7e:7a:38:87:f7:9e:81:15:57:52:4c:e2:83: 8a:59:b9:ac:a6:29:cb:3e:ab:5d:d5:ad:d6:e5:77:63:ad:0e: f6:50:67:28:7b:7a:4a:00:23:14:46:63:a3:9f:05:c8:f2:91: 84:87:32:ec:3c:ad:70:01:37:96:56:3a:cd:b6:5e:26:28:68: 0d:89:dd:7f:12:93:0a:66:69:28:e7:3c:e1:e2:d2:5a:04:8f: 6c:69:32:63:f2:53:63:85:35:31:96:3c:f2:a5:25:2d:28:a2: 2d:33:3a:77:55:0f:f1:0f:1a:18:44:b4:97:9b:58:45:08:a3: 22:c3:4e:52 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQemYkZaio/rCsDeSup852TlYQNQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTZGODIyM0ZBMzM0MkFDRTMxRUQ4NjRDNTM4RTU5RTIy QTUyQkM4OTAeFw0yNTA3MDExMzI2MDlaFw0yNTA3MDQxNjUzMDlaMDMxMTAvBgNV BAMTKDdFM0ZGQTkzMjc0MUJDMkNEQ0JEQzA3NDg3MjYzNUYzRDA2RTc4QTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoZnGe42bqmcW30igqH1epUKoB RY6lSiCatygZIV/E0LyMWeOpPq7du5BDhB4Bbehf7m3M6XQtwuMMg0PRaxHYMPnQ qrWYMPPX3Zx08QKKyfhUYs6J+Izk1e/v8cDqzK8qL1raW10H2dVLE3t5CxWmTc62 KJwl2UkcgdRI7TZZYc/1fQhl1hMkEFKG8vK3N6iKM+2CW8soMTB0utn53+L6Ek4p a2nmz432Fef+R7gDIoUQW/nTw/T4or+Dob1zoKUIhzlFoR1ALGUh/uHjs/np6uLY owHUIs0vG5MVxtB+dBWoo88T1M3ZesyvCPFJ3WZGFTNEcpy1DOytm/41lW1PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfj/6kydBvCzcvcB0hyY189BueKkwHwYDVR0j BBgwFoAUFvgiP6M0Ks4x7YZMU45Z4ipSvIkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j M2E5ZDc4OC1iY2Y3LTQ2ZjAtOGI1Yi0wZDdkMWZjYjZkYTMvMC8xNkY4MjIzRkEz MzQyQUNFMzFFRDg2NEM1MzhFNTlFMjJBNTJCQzg5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMTZGODIyM0ZBMzM0MkFDRTMxRUQ4NjRDNTM4RTU5RTIyQTUy QkM4OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzNhOWQ3ODgtYmNmNy00NmYwLThi NWItMGQ3ZDFmY2I2ZGEzLzAvMTZGODIyM0ZBMzM0MkFDRTMxRUQ4NjRDNTM4RTU5 RTIyQTUyQkM4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAILrHrT3GSSkmOj3+sOpPx2JpgffIFGxYqBZ bpoOGcgS4Yy3jVm1ZvsLhhqDj9riQxupq/boaI4F9IZ6vdtqaDSu/uRFbRRDX/yr YU93MeViMZpfbHQPNSHn4h12iwuuLVbJK+qbAjgBhNknQyyq4u1p6gHMNW7+h7UQ RBWqTkWtIi4sfno4h/eegRVXUkzig4pZuaymKcs+q13Vrdbld2OtDvZQZyh7ekoA IxRGY6OfBcjykYSHMuw8rXABN5ZWOs22XiYoaA2J3X8SkwpmaSjnPOHi0loEj2xp MmPyU2OFNTGWPPKlJS0ooi0zOndVD/EPGhhEtJebWEUIoyLDTlI= -----END CERTIFICATE-----Generated at Thu Jul 3 00:41:52 2025 by rpki-client