$ rpki-client -vvf repo-rpki.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.mft File: 314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.mft (raw, json) Hash identifier: DtchBMjEvUxfvUPbG+d/ty0pP0dbFidjU7liqIa0jWg= Subject key identifier: BE:79:FC:6E:6B:E4:FE:ED:8F:97:42:27:EB:76:E4:8E:5B:A2:2F:74 Authority key identifier: 31:49:88:A7:9F:2A:52:2D:2E:D1:D4:AC:99:C4:AB:DF:DC:DB:B4:00 Certificate issuer: /CN=314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400 Certificate serial: 73CB550D52E8E60ED76D64D113F65320229DD4E6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.cer Subject info access: rsync://repo-rpki.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.mft Manifest number: 01A3 Signing time: Mon 03 Nov 2025 10:30:35 +0000 Manifest this update: Mon 03 Nov 2025 10:25:35 +0000 Manifest next update: Thu 06 Nov 2025 14:33:35 +0000 Files and hashes: 1: 3130332e3135322e3234322e302f32332d3234203d3e20313339343536.roa (hash: 89pUQxfl5rXIPDrZqajzc7VGVg5FDLEc5hZANvDFm/0=) 2: 323430373a373234303a3a2f33322d3332203d3e203538383230.roa (hash: ozUo4nr2ZiT2mHAD8ioZ2hPWQXjTqtcohKzFBlHP+7Q=) 3: 314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.crl (hash: wRHKwbGb+SoYh31lwUqYvL9yiHpl+akxPfCYmfCHr+0=) 4: 323430373a373234303a3a2f33322d3438203d3e203538383230.roa (hash: 9stbxrDkNUm3gzp6A8jjd9QQ8Ao52PCfqM2rcZOO6+U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.crl rsync://repo-rpki.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 14:33:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:cb:55:0d:52:e8:e6:0e:d7:6d:64:d1:13:f6:53:20:22:9d:d4:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400 Validity Not Before: Nov 3 10:25:35 2025 GMT Not After : Nov 6 14:33:35 2025 GMT Subject: CN=BE79FC6E6BE4FEED8F974227EB76E48E5BA22F74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:7f:03:71:79:10:c0:86:78:a0:60:71:c3:dc: 7e:11:27:fd:7e:81:50:8f:a4:0b:50:c0:af:56:18: bd:fa:87:41:f2:83:e9:0e:30:a3:b9:09:36:67:4e: 95:33:0a:71:da:18:64:10:19:03:de:54:45:61:47: e5:ce:c0:d0:0a:46:18:77:e0:94:8b:22:8d:e4:75: 97:ee:5a:29:06:2e:8a:23:04:7c:27:41:32:d2:59: 45:c0:19:c5:0f:92:48:10:ee:82:fb:d3:ca:f9:5f: 01:28:80:61:f7:f3:f5:3f:63:94:90:47:f2:8b:8a: 05:4d:95:b3:20:47:09:86:14:ca:f6:14:dc:ce:b5: f3:a5:8b:c6:ef:c2:be:71:52:15:db:bc:01:37:ee: 9a:c0:4b:8b:5b:5e:db:c1:56:38:60:ac:21:16:c2: ea:6c:c1:d7:6f:1a:16:d8:26:9d:41:36:fd:af:c1: 0a:8c:02:c5:54:4c:3e:69:14:b6:6e:cb:3f:7e:96: a8:1f:df:4e:f2:0a:8e:5c:6c:8b:0b:56:dd:4c:4c: 9c:77:2f:91:02:0a:b1:76:80:1f:13:a3:14:7b:01: a6:ff:90:5f:e3:a2:ab:01:27:52:ba:57:49:79:00: 68:2a:16:d8:a5:2e:34:ec:70:b7:2f:f4:e2:61:05: fe:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:79:FC:6E:6B:E4:FE:ED:8F:97:42:27:EB:76:E4:8E:5B:A2:2F:74 X509v3 Authority Key Identifier: keyid:31:49:88:A7:9F:2A:52:2D:2E:D1:D4:AC:99:C4:AB:DF:DC:DB:B4:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:31:c5:77:bc:19:7a:7d:33:4a:03:2b:34:d2:f5:20:b4:4a: 48:02:0d:3d:72:84:b6:54:59:88:e5:85:0a:81:77:be:78:14: fb:ef:cd:40:fe:ca:7c:f0:ac:6b:e2:b6:cb:16:ed:b4:51:ac: 9b:50:69:e6:9a:27:c4:62:3d:cd:b2:ad:07:79:2f:19:ed:aa: db:1c:54:8d:ae:1e:8f:e3:bf:8d:be:4a:c6:86:51:c5:84:89: 06:aa:cf:73:1c:e5:56:63:33:1e:0a:2c:8d:1c:61:5f:dd:13: b1:6d:39:de:52:73:95:1f:ad:7c:b6:ae:a6:52:a9:54:00:31: 72:67:70:73:76:32:46:37:60:47:be:6b:fc:b3:96:15:de:1c: 1d:1f:76:fd:27:a3:5b:42:31:d2:d0:b4:95:c7:b1:61:56:a8: b7:41:9b:c7:c0:ce:5b:71:00:e2:4e:f2:d8:ec:1f:d6:ff:ec: 60:02:d6:7b:b7:1f:d8:28:b4:ca:f3:b9:a7:e5:92:f4:71:76: 1b:ec:46:22:11:f6:e4:a5:8f:c9:47:cc:8d:05:e2:33:bd:a2: 71:1b:e0:aa:8f:49:5c:03:df:a5:0b:f3:df:9f:9e:43:de:db: a0:55:a1:c5:3f:d5:be:fe:29:7e:1e:a6:8f:80:50:c5:11:51: f9:b5:1c:08 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc8tVDVLo5g7XbWTRE/ZTICKd1OYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzE0OTg4QTc5RjJBNTIyRDJFRDFENEFDOTlDNEFCREZE Q0RCQjQwMDAeFw0yNTExMDMxMDI1MzVaFw0yNTExMDYxNDMzMzVaMDMxMTAvBgNV BAMTKEJFNzlGQzZFNkJFNEZFRUQ4Rjk3NDIyN0VCNzZFNDhFNUJBMjJGNzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNfwNxeRDAhnigYHHD3H4RJ/1+ gVCPpAtQwK9WGL36h0Hyg+kOMKO5CTZnTpUzCnHaGGQQGQPeVEVhR+XOwNAKRhh3 4JSLIo3kdZfuWikGLoojBHwnQTLSWUXAGcUPkkgQ7oL708r5XwEogGH38/U/Y5SQ R/KLigVNlbMgRwmGFMr2FNzOtfOli8bvwr5xUhXbvAE37prAS4tbXtvBVjhgrCEW wupswddvGhbYJp1BNv2vwQqMAsVUTD5pFLZuyz9+lqgf307yCo5cbIsLVt1MTJx3 L5ECCrF2gB8ToxR7Aab/kF/joqsBJ1K6V0l5AGgqFtilLjTscLcv9OJhBf71AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvnn8bmvk/u2Pl0In63bkjluiL3QwHwYDVR0j BBgwFoAUMUmIp58qUi0u0dSsmcSr39zbtAAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NGJhNjc3OC1iMTZkLTRiYTgtOTg0Zi0zNGU0MTlmYzljNDkvMC8zMTQ5ODhBNzlG MkE1MjJEMkVEMUQ0QUM5OUM0QUJERkRDREJCNDAwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzE0OTg4QTc5RjJBNTIyRDJFRDFENEFDOTlDNEFCREZEQ0RC QjQwMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjRiYTY3NzgtYjE2ZC00YmE4LTk4 NGYtMzRlNDE5ZmM5YzQ5LzAvMzE0OTg4QTc5RjJBNTIyRDJFRDFENEFDOTlDNEFC REZEQ0RCQjQwMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB8xxXe8GXp9M0oDKzTS9SC0SkgCDT1yhLZU WYjlhQqBd754FPvvzUD+ynzwrGvitssW7bRRrJtQaeaaJ8RiPc2yrQd5Lxntqtsc VI2uHo/jv42+SsaGUcWEiQaqz3Mc5VZjMx4KLI0cYV/dE7FtOd5Sc5UfrXy2rqZS qVQAMXJncHN2MkY3YEe+a/yzlhXeHB0fdv0no1tCMdLQtJXHsWFWqLdBm8fAzltx AOJO8tjsH9b/7GAC1nu3H9gotMrzuaflkvRxdhvsRiIR9uSlj8lHzI0F4jO9onEb 4KqPSVwD36UL89+fnkPe26BVocU/1b7+KX4epo+AUMURUfm1HAg= -----END CERTIFICATE-----Generated at Tue Nov 4 19:00:12 2025 by rpki-client