$ rpki-client -vvf repo-rpki.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/16F8223FA3342ACE31ED864C538E59E22A52BC89.mft File: 16F8223FA3342ACE31ED864C538E59E22A52BC89.mft (raw, json) Hash identifier: 0pSlPBX/chetyjUKCREU/kdcH1PMJsQKjJGVCA00kAI= Subject key identifier: 89:8A:82:57:E9:02:4A:34:4B:FD:5E:FB:66:3C:6B:54:8F:2D:99:31 Authority key identifier: 16:F8:22:3F:A3:34:2A:CE:31:ED:86:4C:53:8E:59:E2:2A:52:BC:89 Certificate issuer: /CN=16F8223FA3342ACE31ED864C538E59E22A52BC89 Certificate serial: 10BA9472CDB8B253AE99B97263A89A739CE64B89 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/16F8223FA3342ACE31ED864C538E59E22A52BC89.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/16F8223FA3342ACE31ED864C538E59E22A52BC89.mft Manifest number: 71 Signing time: Thu 21 Aug 2025 23:31:12 +0000 Manifest this update: Thu 21 Aug 2025 23:26:12 +0000 Manifest next update: Mon 25 Aug 2025 07:11:12 +0000 Files and hashes: 1: 3136302e32352e3135372e302f32342d3234203d3e20313533303835.roa (hash: aKd9F4ACmgNItMgz+uXKOhQG73PpNtSpdGFc0rlMBFo=) 2: 16F8223FA3342ACE31ED864C538E59E22A52BC89.crl (hash: tcXKkWTqRQcIGUyBqr35Azt4La8m2iDDlw5W6R4SZN8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/16F8223FA3342ACE31ED864C538E59E22A52BC89.crl rsync://repo-rpki.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/16F8223FA3342ACE31ED864C538E59E22A52BC89.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/16F8223FA3342ACE31ED864C538E59E22A52BC89.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 07:11:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:ba:94:72:cd:b8:b2:53:ae:99:b9:72:63:a8:9a:73:9c:e6:4b:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16F8223FA3342ACE31ED864C538E59E22A52BC89 Validity Not Before: Aug 21 23:26:12 2025 GMT Not After : Aug 25 07:11:12 2025 GMT Subject: CN=898A8257E9024A344BFD5EFB663C6B548F2D9931 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:07:30:ea:76:92:db:8f:d7:66:77:3c:1e:7d: 60:2a:3f:e5:78:0c:97:89:00:2a:4a:43:b1:6b:3d: 65:87:53:51:9d:3a:ad:8e:5c:3e:f1:df:9a:1e:3e: a8:2d:7a:b9:f4:20:9b:3f:56:44:8e:e0:73:38:e6: 89:56:f6:7f:8a:5c:b7:7c:a0:51:6d:71:38:d1:32: 20:ce:7c:a1:d3:97:e5:57:a1:b4:3a:8b:14:02:f0: 15:8b:d0:af:d4:be:22:74:e5:eb:f5:63:11:b5:80: 89:ad:52:d5:f9:a3:4b:77:00:11:0c:4e:c1:c7:72: 9c:e8:ca:0d:d1:9e:71:b6:e8:dc:b3:51:b5:44:7b: d5:b9:fe:97:4f:89:dc:bd:fb:ea:a1:cc:f8:90:50: 59:2a:f3:de:4a:fb:75:64:66:3b:11:15:ee:25:4c: a0:3b:3b:78:97:c3:82:70:2f:a2:ac:fb:f9:ed:40: 76:b9:14:c3:c7:77:c5:73:bd:d4:0c:f0:e2:ac:85: 73:b2:4c:ec:08:2d:63:e7:f5:fa:6b:5e:4e:8b:a5: 29:5b:42:e8:63:de:e6:62:81:06:09:a8:ab:3a:be: 8f:be:ce:b5:1f:d8:81:b4:fe:e6:18:4b:fb:ad:9d: 6c:a1:b0:b3:b8:24:f9:4c:04:eb:99:e9:8f:d4:75: ab:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:8A:82:57:E9:02:4A:34:4B:FD:5E:FB:66:3C:6B:54:8F:2D:99:31 X509v3 Authority Key Identifier: keyid:16:F8:22:3F:A3:34:2A:CE:31:ED:86:4C:53:8E:59:E2:2A:52:BC:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/16F8223FA3342ACE31ED864C538E59E22A52BC89.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/16F8223FA3342ACE31ED864C538E59E22A52BC89.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/16F8223FA3342ACE31ED864C538E59E22A52BC89.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:68:e8:be:11:36:98:02:6a:80:88:18:bc:76:99:4c:fc:26: 91:1c:d5:82:5d:e8:52:51:8e:0f:fd:97:cc:69:19:46:9e:b5: fd:84:9c:ee:4d:b3:76:fa:ab:12:14:53:bc:31:25:61:5a:2d: 11:8c:f1:e4:32:ba:39:93:77:0e:eb:e4:21:c1:14:be:db:06: 05:54:48:e8:f5:ed:99:a7:25:79:21:c1:b4:49:06:c3:1d:57: d7:85:07:f6:30:ad:fb:a5:94:8c:e1:c7:f4:96:e1:39:c6:46: 76:71:f3:95:e5:e6:88:ca:87:6c:7a:d3:54:3b:f3:12:ce:70: 07:d1:39:51:8b:89:c4:7f:28:fb:e2:ca:b6:ca:24:24:8d:a8: 8f:92:d6:85:78:fb:21:12:21:67:bb:66:10:8c:16:c7:30:f0: 60:22:71:7e:fb:64:11:b8:16:0f:fb:71:c5:53:79:62:5e:c5: 28:fa:1c:98:f1:6e:5a:29:a7:37:0f:9a:3b:a6:92:9f:33:e9: 72:d5:bd:0d:4d:6e:bd:fb:20:c8:f2:72:42:2e:36:10:33:13: a8:3b:c9:c3:89:38:b9:91:c7:78:04:1a:11:93:15:2c:37:de: c6:66:fd:d0:4b:7c:5c:60:40:60:36:f8:f3:f1:c6:23:1c:5e: 8b:48:e6:bb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUELqUcs24slOumblyY6iac5zmS4kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTZGODIyM0ZBMzM0MkFDRTMxRUQ4NjRDNTM4RTU5RTIy QTUyQkM4OTAeFw0yNTA4MjEyMzI2MTJaFw0yNTA4MjUwNzExMTJaMDMxMTAvBgNV BAMTKDg5OEE4MjU3RTkwMjRBMzQ0QkZENUVGQjY2M0M2QjU0OEYyRDk5MzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzBzDqdpLbj9dmdzwefWAqP+V4 DJeJACpKQ7FrPWWHU1GdOq2OXD7x35oePqgtern0IJs/VkSO4HM45olW9n+KXLd8 oFFtcTjRMiDOfKHTl+VXobQ6ixQC8BWL0K/UviJ05ev1YxG1gImtUtX5o0t3ABEM TsHHcpzoyg3RnnG26NyzUbVEe9W5/pdPidy9++qhzPiQUFkq895K+3VkZjsRFe4l TKA7O3iXw4JwL6Ks+/ntQHa5FMPHd8VzvdQM8OKshXOyTOwILWPn9fprXk6LpSlb Quhj3uZigQYJqKs6vo++zrUf2IG0/uYYS/utnWyhsLO4JPlMBOuZ6Y/UdavrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiYqCV+kCSjRL/V77ZjxrVI8tmTEwHwYDVR0j BBgwFoAUFvgiP6M0Ks4x7YZMU45Z4ipSvIkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j M2E5ZDc4OC1iY2Y3LTQ2ZjAtOGI1Yi0wZDdkMWZjYjZkYTMvMC8xNkY4MjIzRkEz MzQyQUNFMzFFRDg2NEM1MzhFNTlFMjJBNTJCQzg5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMTZGODIyM0ZBMzM0MkFDRTMxRUQ4NjRDNTM4RTU5RTIyQTUy QkM4OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzNhOWQ3ODgtYmNmNy00NmYwLThi NWItMGQ3ZDFmY2I2ZGEzLzAvMTZGODIyM0ZBMzM0MkFDRTMxRUQ4NjRDNTM4RTU5 RTIyQTUyQkM4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALdo6L4RNpgCaoCIGLx2mUz8JpEc1YJd6FJR jg/9l8xpGUaetf2EnO5Ns3b6qxIUU7wxJWFaLRGM8eQyujmTdw7r5CHBFL7bBgVU SOj17ZmnJXkhwbRJBsMdV9eFB/YwrfullIzhx/SW4TnGRnZx85Xl5ojKh2x601Q7 8xLOcAfROVGLicR/KPviyrbKJCSNqI+S1oV4+yESIWe7ZhCMFscw8GAicX77ZBG4 Fg/7ccVTeWJexSj6HJjxbloppzcPmjumkp8z6XLVvQ1Nbr37IMjyckIuNhAzE6g7 ycOJOLmRx3gEGhGTFSw33sZm/dBLfFxgQGA2+PPxxiMcXotI5rs= -----END CERTIFICATE-----Generated at Sun Aug 24 04:41:56 2025 by rpki-client