$ rpki-client -vvf repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/C16E46D556A47D2429EC847E95E7C429D38AC26D.mft File: C16E46D556A47D2429EC847E95E7C429D38AC26D.mft (raw, json) Hash identifier: SYiObWqChBnb6dhkHcNKR0nhH7lpcMBK+frZrIpWmSg= Subject key identifier: 2D:B2:7F:C3:53:09:5E:EA:A4:9F:A9:C0:91:9F:8D:17:A7:A2:98:12 Authority key identifier: C1:6E:46:D5:56:A4:7D:24:29:EC:84:7E:95:E7:C4:29:D3:8A:C2:6D Certificate issuer: /CN=C16E46D556A47D2429EC847E95E7C429D38AC26D Certificate serial: 0F0A65A62C1F2B97FB307BD0DFED4E190BB2F8AC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C16E46D556A47D2429EC847E95E7C429D38AC26D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/C16E46D556A47D2429EC847E95E7C429D38AC26D.mft Manifest number: 0347 Signing time: Sun 29 Jun 2025 00:42:07 +0000 Manifest this update: Sun 29 Jun 2025 00:37:07 +0000 Manifest next update: Wed 02 Jul 2025 09:54:07 +0000 Files and hashes: 1: 3132322e3234382e33322e302f32342d3234203d3e203435333235.roa (hash: UQXVoZKGz5JhkoTTlnHcb+EQxg2+/5hollJFLUnx0yQ=) 2: 3132322e3234382e33392e302f32342d3234203d3e203435333235.roa (hash: +XlWSZnNsHedFhk9EhTLsRli1/7HpiSYXEFODfdlqoo=) 3: 3132322e3234382e34362e302f32342d3234203d3e203435333235.roa (hash: SHNUndN8A/BIGBgaMZGSvUYKm9oObzfVbZRCy6qWjNQ=) 4: 3230322e34332e3131322e302f32342d3234203d3e203435333235.roa (hash: ysRy+nrk2+7qcjRHwMFa5bwT6ZEU71YLfsCXRkR1Es0=) 5: 3132322e3234382e33352e302f32342d3234203d3e203435333235.roa (hash: tpz05ygSqebIjUSPwghHsNHlvwhhI3vwB7cunp1p9bE=) 6: 3132322e3234382e34322e302f32342d3234203d3e20313431313432.roa (hash: rKBd3FDglxAur6pNSQahm+4YOdXF+ndHaH2ghrjrs0c=) 7: 3132322e3234382e33342e302f32342d3234203d3e203435333235.roa (hash: xWN96AN2o/5DjK3ZlzwTHnF0Jn7pZjmGqWHyJSo//1M=) 8: 3132322e3234382e34352e302f32342d3234203d3e203435333235.roa (hash: sKqe/v72Bkg2bo/MAJzQwOx67n39YutbyZ1RMbwLFW4=) 9: 3132322e3234382e34332e302f32342d3234203d3e203435333235.roa (hash: z7XL2D0wXQTjcZf3j2e+IrsJInNEddx4qPTq74sMeHo=) 10: 3132322e3234382e34342e302f32342d3234203d3e20313431313432.roa (hash: h34a36oOro4h82UzWlqmmFvXIQsUxyJPSi5+fu8agyc=) 11: 323430303a373530303a3a2f33322d3332203d3e203435333235.roa (hash: x21nuMOFacoxM1n3i0ebBYoK59D8tMJoxNNKmC7nIow=) 12: 3132322e3234382e33382e302f32342d3234203d3e203435333235.roa (hash: 1mSxPF9RWPzW0o8OV1KEyXpWaFNHEqMbTeJUgaklFZE=) 13: 3132322e3234382e34372e302f32342d3234203d3e203435333235.roa (hash: PlPCblW+Y4v6qxU+CWaZnHwrOaBWn48VhJ1vBaFINzQ=) 14: 3132322e3234382e34312e302f32342d3234203d3e203435333235.roa (hash: WQ720U4S99SeEIPGAMPrXzE0oNhC79BMDbo0SDUiMMw=) 15: 3230332e33302e3235352e302f32342d3234203d3e203435333235.roa (hash: YNrbS8ak9Mk+b9Wc7pVzuLcBWX2U2ASVy3A/+idXG9A=) 16: 3132322e3234382e33372e302f32342d3234203d3e20313431313432.roa (hash: Lxbv9g4Tc4zr/yZca8M8S2X24CLaJFBuvzgxl8QAASI=) 17: 3132322e3234382e33332e302f32342d3234203d3e203435333235.roa (hash: 1bWKpPyCmq0Ewpg+6GFok/ArRgk2NtJdp28v3wc0LwU=) 18: C16E46D556A47D2429EC847E95E7C429D38AC26D.crl (hash: yxakdmpm59tkHY/mPX2epCjmr3Z02qfzFdbTV0LPdkM=) 19: 3230322e34332e3131332e302f32342d3234203d3e203435333235.roa (hash: iAl8NmWNJlmHejJ5sIMuSWgzBreFnv6E6ju9qJHMnsY=) 20: 3132322e3234382e34302e302f32342d3234203d3e203435333235.roa (hash: RR7ACbPl/JlaFFYkC+v/rS/Uji2Joiu0jBs1396uYUQ=) 21: 3230332e33302e3235342e302f32342d3234203d3e203435333235.roa (hash: qwVpoc/q8olJzTwzAZ1Ng5Im8A/3FvC7AKArG6XMGjY=) 22: 3132322e3234382e33362e302f32342d3234203d3e203435333235.roa (hash: OdWDIwy3kzlmQdcK2SaQYfq9ix9p7PQmfJSCMg+I4yw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/C16E46D556A47D2429EC847E95E7C429D38AC26D.crl rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/C16E46D556A47D2429EC847E95E7C429D38AC26D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C16E46D556A47D2429EC847E95E7C429D38AC26D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 09:54:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:0a:65:a6:2c:1f:2b:97:fb:30:7b:d0:df:ed:4e:19:0b:b2:f8:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C16E46D556A47D2429EC847E95E7C429D38AC26D Validity Not Before: Jun 29 00:37:07 2025 GMT Not After : Jul 2 09:54:07 2025 GMT Subject: CN=2DB27FC353095EEAA49FA9C0919F8D17A7A29812 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:75:58:db:f3:db:8f:78:2c:c2:19:d5:2a:0e: 0a:f0:f4:a8:3e:de:a5:23:a7:14:f9:21:fe:35:f0: a6:7e:fa:0b:ef:15:8f:38:2e:4c:2d:e7:1d:d9:40: 3f:a1:c2:f4:fc:14:5a:21:cf:74:1c:ec:f9:5d:4f: 29:b3:3f:c7:8a:18:5f:61:b5:a7:a8:9f:f5:ed:eb: f1:9d:aa:17:bb:32:e6:60:66:6a:a3:5d:b4:8f:ee: a4:2d:04:0e:e1:8b:76:ad:db:ee:65:a3:66:bd:be: 7f:70:b3:f7:66:e1:ba:e4:b0:b6:ea:c4:24:aa:8f: 5a:fe:e1:fa:46:2b:c0:79:62:ce:d9:fc:93:8f:38: 43:ff:8e:4c:1b:86:b9:6d:fc:6a:f0:02:d6:4f:7c: cd:b3:e3:f4:9e:11:13:8a:a9:e3:8a:db:8a:76:ad: 22:70:9b:32:20:f9:49:19:b8:30:55:d2:2c:a0:d6: 4b:cd:69:84:32:ed:07:ae:a1:c7:ee:47:a0:f8:0e: 8c:f6:0b:11:74:38:28:81:45:71:66:1b:8d:62:9d: b2:3f:db:43:e1:aa:a0:b2:a1:db:6f:47:dc:90:ea: 51:c9:a7:12:70:bd:74:b7:19:4a:8b:7f:87:fd:4a: 3e:cc:88:42:89:4e:84:72:b0:cf:40:53:c2:05:8f: 78:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:B2:7F:C3:53:09:5E:EA:A4:9F:A9:C0:91:9F:8D:17:A7:A2:98:12 X509v3 Authority Key Identifier: keyid:C1:6E:46:D5:56:A4:7D:24:29:EC:84:7E:95:E7:C4:29:D3:8A:C2:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/C16E46D556A47D2429EC847E95E7C429D38AC26D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C16E46D556A47D2429EC847E95E7C429D38AC26D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/C16E46D556A47D2429EC847E95E7C429D38AC26D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:e9:c2:9e:2a:7c:42:16:b0:94:d0:48:1a:b4:05:73:a1:60: 3c:38:f8:00:43:80:aa:fd:20:a5:8e:44:33:b6:67:12:74:53: aa:76:53:8f:24:cf:85:c4:77:1b:fd:c7:a1:44:1c:cb:94:08: f4:2f:22:6d:02:08:9f:64:af:9a:7b:1c:f6:51:84:d9:6b:05: f1:c7:35:62:bd:f0:c5:bb:ee:be:3f:29:5a:61:56:7f:f9:ec: 04:bc:da:88:da:e2:52:3c:64:46:eb:07:c9:e1:af:dc:79:ac: fd:6f:89:b0:f2:5a:1b:19:c7:f1:e7:d2:6c:0e:1a:c5:48:6d: 49:13:85:2b:06:7b:e2:42:f7:e1:94:9b:9b:ab:5c:8c:a7:0c: b9:3a:45:59:10:21:24:51:26:a9:b5:52:d1:14:72:48:15:b4: 0d:0e:37:f3:f3:98:14:c0:c6:1e:2e:81:c5:87:f5:94:4c:ae: ee:86:74:bc:e7:8a:8c:c7:70:af:9b:8a:64:e9:d7:1a:5f:4e: c5:16:91:de:be:2c:d8:ed:f3:56:c1:b3:ea:12:01:89:f8:a5: 2d:61:33:59:43:a1:2b:8c:43:8b:f5:19:b5:3e:07:05:c6:e7: 21:5a:5f:09:3a:b6:9b:84:38:1a:cd:53:ac:31:a0:a2:31:2e: bf:01:da:3c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDwplpiwfK5f7MHvQ3+1OGQuy+KwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzE2RTQ2RDU1NkE0N0QyNDI5RUM4NDdFOTVFN0M0MjlE MzhBQzI2RDAeFw0yNTA2MjkwMDM3MDdaFw0yNTA3MDIwOTU0MDdaMDMxMTAvBgNV BAMTKDJEQjI3RkMzNTMwOTVFRUFBNDlGQTlDMDkxOUY4RDE3QTdBMjk4MTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8dVjb89uPeCzCGdUqDgrw9Kg+ 3qUjpxT5If418KZ++gvvFY84Lkwt5x3ZQD+hwvT8FFohz3Qc7PldTymzP8eKGF9h taeon/Xt6/Gdqhe7MuZgZmqjXbSP7qQtBA7hi3at2+5lo2a9vn9ws/dm4brksLbq xCSqj1r+4fpGK8B5Ys7Z/JOPOEP/jkwbhrlt/GrwAtZPfM2z4/SeEROKqeOK24p2 rSJwmzIg+UkZuDBV0iyg1kvNaYQy7QeuocfuR6D4Doz2CxF0OCiBRXFmG41inbI/ 20PhqqCyodtvR9yQ6lHJpxJwvXS3GUqLf4f9Sj7MiEKJToRysM9AU8IFj3jNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULbJ/w1MJXuqkn6nAkZ+NF6eimBIwHwYDVR0j BBgwFoAUwW5G1VakfSQp7IR+lefEKdOKwm0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZjJlN2ZkNi1lYjVlLTQ4MGEtOGU5Ny1jNTVmNjhlMDU4OWEvMC9DMTZFNDZENTU2 QTQ3RDI0MjlFQzg0N0U5NUU3QzQyOUQzOEFDMjZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzE2RTQ2RDU1NkE0N0QyNDI5RUM4NDdFOTVFN0M0MjlEMzhB QzI2RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGYyZTdmZDYtZWI1ZS00ODBhLThl OTctYzU1ZjY4ZTA1ODlhLzAvQzE2RTQ2RDU1NkE0N0QyNDI5RUM4NDdFOTVFN0M0 MjlEMzhBQzI2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEXpwp4qfEIWsJTQSBq0BXOhYDw4+ABDgKr9 IKWORDO2ZxJ0U6p2U48kz4XEdxv9x6FEHMuUCPQvIm0CCJ9kr5p7HPZRhNlrBfHH NWK98MW77r4/KVphVn/57AS82oja4lI8ZEbrB8nhr9x5rP1vibDyWhsZx/Hn0mwO GsVIbUkThSsGe+JC9+GUm5urXIynDLk6RVkQISRRJqm1UtEUckgVtA0ON/PzmBTA xh4ugcWH9ZRMru6GdLzniozHcK+bimTp1xpfTsUWkd6+LNjt81bBs+oSAYn4pS1h M1lDoSuMQ4v1GbU+BwXG5yFaXwk6tpuEOBrNU6wxoKIxLr8B2jw= -----END CERTIFICATE-----Generated at Mon Jun 30 08:14:33 2025 by rpki-client