$ rpki-client -vvf repo-rpki.idnic.net/repo/e11a3d56-ac75-4981-9726-c440214c81ed/0/16B946F06E300C41DA2C037393837F098BA659D1.mft File: 16B946F06E300C41DA2C037393837F098BA659D1.mft (raw, json) Hash identifier: OlMbHlrpyGJq8B0Hu99yZlPIItYZCQEe856+gQqK3/E= Subject key identifier: 42:FD:96:17:FD:56:D0:5A:98:4E:B4:C6:00:D7:C6:2F:1D:C7:81:A4 Authority key identifier: 16:B9:46:F0:6E:30:0C:41:DA:2C:03:73:93:83:7F:09:8B:A6:59:D1 Certificate issuer: /CN=16B946F06E300C41DA2C037393837F098BA659D1 Certificate serial: 23E90ED441CDDBDB6DC203FF0EF74C1D5EBAC570 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/16B946F06E300C41DA2C037393837F098BA659D1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e11a3d56-ac75-4981-9726-c440214c81ed/0/16B946F06E300C41DA2C037393837F098BA659D1.mft Manifest number: 0119 Signing time: Sat 28 Jun 2025 19:20:04 +0000 Manifest this update: Sat 28 Jun 2025 19:15:04 +0000 Manifest next update: Wed 02 Jul 2025 03:32:04 +0000 Files and hashes: 1: 3130332e3130312e3134302e302f32332d3234203d3e20313530393536.roa (hash: LaUmdsA0P0deIenBqrE3rn8TDNZPOKJgzqPX3Sp3apY=) 2: 16B946F06E300C41DA2C037393837F098BA659D1.crl (hash: QyWVl8n4vZKH9w1lhr+0jhft23AUpY7z5n6ePRYqYVo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e11a3d56-ac75-4981-9726-c440214c81ed/0/16B946F06E300C41DA2C037393837F098BA659D1.crl rsync://repo-rpki.idnic.net/repo/e11a3d56-ac75-4981-9726-c440214c81ed/0/16B946F06E300C41DA2C037393837F098BA659D1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/16B946F06E300C41DA2C037393837F098BA659D1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 03:32:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:e9:0e:d4:41:cd:db:db:6d:c2:03:ff:0e:f7:4c:1d:5e:ba:c5:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16B946F06E300C41DA2C037393837F098BA659D1 Validity Not Before: Jun 28 19:15:04 2025 GMT Not After : Jul 2 03:32:04 2025 GMT Subject: CN=42FD9617FD56D05A984EB4C600D7C62F1DC781A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:f4:dd:bb:8b:82:66:2a:d6:4e:27:30:44:0c: a0:8e:b7:64:3a:b0:22:26:ca:80:d2:50:ae:cb:06: b7:72:f7:3f:98:97:ae:77:a5:d5:ec:8b:37:c3:c1: 88:8c:a1:9b:9d:05:a4:cc:e5:a5:2e:c0:f8:cf:2f: 24:dd:fb:39:ce:cb:5f:cf:c1:ca:51:5f:17:a5:76: e0:19:3e:c6:98:83:c3:40:2a:38:1c:db:dc:6c:2c: 12:62:32:d0:31:25:6a:4a:5e:4a:11:73:4d:b9:b1: 35:c1:6a:3f:fa:7d:58:ef:de:7a:e9:bb:e1:48:08: ff:40:43:89:43:d4:21:e0:bc:27:76:bd:bb:8d:b3: f3:da:eb:f6:55:61:ab:1a:5b:67:2f:6b:10:4e:8a: 15:5d:4e:d4:86:17:2a:75:c5:09:c7:db:51:e2:c7: cc:08:bb:b4:4f:de:1e:55:f3:d8:68:6f:03:37:fb: fb:d9:22:70:72:3f:5d:2b:b4:e1:b7:a4:c6:c0:73: ad:2e:b6:10:40:14:bd:2f:4b:96:08:fe:2f:b7:dc: e5:92:77:f9:db:1d:b0:4f:c7:dc:06:e0:5a:a7:b0: 52:5c:0d:1a:93:a2:c4:6f:84:bb:1c:a5:67:ac:82: 6a:b5:58:3c:e0:e5:1b:b5:39:ac:58:bf:19:83:51: 80:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:FD:96:17:FD:56:D0:5A:98:4E:B4:C6:00:D7:C6:2F:1D:C7:81:A4 X509v3 Authority Key Identifier: keyid:16:B9:46:F0:6E:30:0C:41:DA:2C:03:73:93:83:7F:09:8B:A6:59:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e11a3d56-ac75-4981-9726-c440214c81ed/0/16B946F06E300C41DA2C037393837F098BA659D1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/16B946F06E300C41DA2C037393837F098BA659D1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e11a3d56-ac75-4981-9726-c440214c81ed/0/16B946F06E300C41DA2C037393837F098BA659D1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:0d:a8:1e:47:3f:47:6b:b9:a3:ce:bb:06:60:53:d2:4f:31: 1b:60:01:ef:fb:06:5a:a2:de:4b:12:3c:62:9c:5f:77:7c:44: aa:54:ab:51:94:c2:9e:2d:0d:ef:3f:88:0a:80:29:19:68:c2: 08:cd:d0:3a:87:e0:fa:a7:69:53:6d:0b:97:7e:16:d2:9c:ea: dc:17:4d:88:40:c1:73:8a:32:fb:7a:e9:2e:70:c8:38:fb:cb: 76:e5:e6:1f:52:d5:33:3e:6f:c8:59:66:ce:ce:53:46:37:71: 59:14:9c:c7:48:c4:48:50:9e:65:c1:17:f9:23:3c:c1:8e:4d: 64:79:2f:9f:d8:88:6f:58:1a:33:76:11:3e:62:52:4d:56:ca: 0a:41:4a:28:96:2f:ce:cb:d3:b8:bf:c1:7e:f3:53:fc:87:5d: 78:7d:5f:65:28:81:18:45:c9:99:a8:3b:2d:ef:53:b6:9d:91: 92:f7:46:34:aa:0f:d1:e8:c4:de:ef:a1:25:25:71:7f:d1:ff: 17:90:15:c1:b1:31:a0:b5:0c:68:0d:36:7f:1a:9f:1a:6c:29: 21:87:0e:51:be:90:5d:11:79:5d:d5:c7:13:e5:b7:77:c3:5f: d8:37:7e:95:5c:c4:32:ba:04:92:8b:30:ea:60:12:d9:43:92: 4e:ff:13:a6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI+kO1EHN29ttwgP/DvdMHV66xXAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTZCOTQ2RjA2RTMwMEM0MURBMkMwMzczOTM4MzdGMDk4 QkE2NTlEMTAeFw0yNTA2MjgxOTE1MDRaFw0yNTA3MDIwMzMyMDRaMDMxMTAvBgNV BAMTKDQyRkQ5NjE3RkQ1NkQwNUE5ODRFQjRDNjAwRDdDNjJGMURDNzgxQTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg9N27i4JmKtZOJzBEDKCOt2Q6 sCImyoDSUK7LBrdy9z+Yl653pdXsizfDwYiMoZudBaTM5aUuwPjPLyTd+znOy1/P wcpRXxelduAZPsaYg8NAKjgc29xsLBJiMtAxJWpKXkoRc025sTXBaj/6fVjv3nrp u+FICP9AQ4lD1CHgvCd2vbuNs/Pa6/ZVYasaW2cvaxBOihVdTtSGFyp1xQnH21Hi x8wIu7RP3h5V89hobwM3+/vZInByP10rtOG3pMbAc60uthBAFL0vS5YI/i+33OWS d/nbHbBPx9wG4FqnsFJcDRqTosRvhLscpWesgmq1WDzg5Ru1OaxYvxmDUYDvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQv2WF/1W0FqYTrTGANfGLx3HgaQwHwYDVR0j BBgwFoAUFrlG8G4wDEHaLANzk4N/CYumWdEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MTFhM2Q1Ni1hYzc1LTQ5ODEtOTcyNi1jNDQwMjE0YzgxZWQvMC8xNkI5NDZGMDZF MzAwQzQxREEyQzAzNzM5MzgzN0YwOThCQTY1OUQxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTZCOTQ2RjA2RTMwMEM0MURBMkMwMzczOTM4MzdGMDk4QkE2 NTlEMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTExYTNkNTYtYWM3NS00OTgxLTk3 MjYtYzQ0MDIxNGM4MWVkLzAvMTZCOTQ2RjA2RTMwMEM0MURBMkMwMzczOTM4MzdG MDk4QkE2NTlEMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACINqB5HP0druaPOuwZgU9JPMRtgAe/7Blqi 3ksSPGKcX3d8RKpUq1GUwp4tDe8/iAqAKRlowgjN0DqH4PqnaVNtC5d+FtKc6twX TYhAwXOKMvt66S5wyDj7y3bl5h9S1TM+b8hZZs7OU0Y3cVkUnMdIxEhQnmXBF/kj PMGOTWR5L5/YiG9YGjN2ET5iUk1WygpBSiiWL87L07i/wX7zU/yHXXh9X2UogRhF yZmoOy3vU7adkZL3RjSqD9HoxN7voSUlcX/R/xeQFcGxMaC1DGgNNn8anxpsKSGH DlG+kF0ReV3VxxPlt3fDX9g3fpVcxDK6BJKLMOpgEtlDkk7/E6Y= -----END CERTIFICATE-----Generated at Sun Jun 29 18:51:31 2025 by rpki-client