$ rpki-client -vvf repo-rpki.idnic.net/repo/96b1ab7f-e451-40d1-9b70-3a4022a9b4ec/0/1631B9A0997CBC975099A6FF7E27DCA3FDC649BA.mft File: 1631B9A0997CBC975099A6FF7E27DCA3FDC649BA.mft (raw, json) Hash identifier: QeL5YIiQ35bMImiTiSp+4ZapxqPFsN/YpxRhAZr6jKw= Subject key identifier: 9F:71:37:13:D5:23:55:2B:34:EF:B1:3B:D6:50:93:A6:09:17:72:41 Authority key identifier: 16:31:B9:A0:99:7C:BC:97:50:99:A6:FF:7E:27:DC:A3:FD:C6:49:BA Certificate issuer: /CN=1631B9A0997CBC975099A6FF7E27DCA3FDC649BA Certificate serial: 481152E5DD49E0B78B9848A529040A661FAD7FF6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1631B9A0997CBC975099A6FF7E27DCA3FDC649BA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/96b1ab7f-e451-40d1-9b70-3a4022a9b4ec/0/1631B9A0997CBC975099A6FF7E27DCA3FDC649BA.mft Manifest number: 0184 Signing time: Sun 02 Nov 2025 14:41:34 +0000 Manifest this update: Sun 02 Nov 2025 14:36:34 +0000 Manifest next update: Wed 05 Nov 2025 20:45:34 +0000 Files and hashes: 1: 1631B9A0997CBC975099A6FF7E27DCA3FDC649BA.crl (hash: Cj20IhTibhVQ76fpwQtQKnzgPuh0lCsP5v3CBXnkDhg=) 2: 3230322e35382e3233382e302f32332d3234203d3e203436303237.roa (hash: TVHLoA6S/RXowJVfDxEwT3G/jcn7qgjqSJZOEgaAkds=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/96b1ab7f-e451-40d1-9b70-3a4022a9b4ec/0/1631B9A0997CBC975099A6FF7E27DCA3FDC649BA.crl rsync://repo-rpki.idnic.net/repo/96b1ab7f-e451-40d1-9b70-3a4022a9b4ec/0/1631B9A0997CBC975099A6FF7E27DCA3FDC649BA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1631B9A0997CBC975099A6FF7E27DCA3FDC649BA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 20:45:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:11:52:e5:dd:49:e0:b7:8b:98:48:a5:29:04:0a:66:1f:ad:7f:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1631B9A0997CBC975099A6FF7E27DCA3FDC649BA Validity Not Before: Nov 2 14:36:34 2025 GMT Not After : Nov 5 20:45:34 2025 GMT Subject: CN=9F713713D523552B34EFB13BD65093A609177241 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:6d:fd:d9:1f:84:93:15:22:48:55:d4:aa:d1: 2e:98:89:7b:d8:71:b7:a1:45:55:d6:1d:19:86:ce: c1:a5:46:44:84:d4:9b:71:29:d2:34:e5:75:83:47: fa:85:f4:95:75:ac:6b:83:97:23:7e:d6:27:28:27: f4:7c:b9:a2:73:a6:48:8e:41:ca:94:f4:b8:66:31: 46:f8:c9:61:9c:7c:c3:2a:d4:1f:c9:e2:d9:53:64: 4e:d1:db:af:02:bf:dd:55:e4:be:b0:d6:b1:e6:42: 3c:e5:27:6e:7f:ff:36:51:bf:ef:72:2f:84:c4:cc: 9d:50:19:80:9c:09:68:05:a9:d0:c7:57:5e:81:ea: 73:55:bc:07:23:8c:07:96:ec:fc:c6:a1:5e:26:13: 83:ab:69:d8:8f:25:af:9d:9b:de:c6:02:92:a3:23: e7:ce:58:bc:eb:f2:60:37:7c:ab:38:33:05:11:7b: 1f:15:68:82:e1:f4:2d:a4:b9:26:cd:c0:97:a0:7e: 67:ab:e7:9c:80:66:a3:9b:f3:f2:22:32:8d:a9:8d: 07:1e:90:25:5e:54:c0:9b:3b:9b:5b:dd:d7:f4:fa: 30:2a:c4:bd:68:53:a0:ad:c7:dd:9c:a8:f2:8f:ce: 25:dd:19:13:72:e3:0b:4f:a5:5a:59:39:71:e4:c7: c4:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:71:37:13:D5:23:55:2B:34:EF:B1:3B:D6:50:93:A6:09:17:72:41 X509v3 Authority Key Identifier: keyid:16:31:B9:A0:99:7C:BC:97:50:99:A6:FF:7E:27:DC:A3:FD:C6:49:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/96b1ab7f-e451-40d1-9b70-3a4022a9b4ec/0/1631B9A0997CBC975099A6FF7E27DCA3FDC649BA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1631B9A0997CBC975099A6FF7E27DCA3FDC649BA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/96b1ab7f-e451-40d1-9b70-3a4022a9b4ec/0/1631B9A0997CBC975099A6FF7E27DCA3FDC649BA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:eb:36:a6:03:35:fd:63:15:3e:2d:12:85:45:23:33:f8:4d: f4:ca:12:f0:c2:37:7b:80:88:c3:19:38:5b:93:93:15:d2:ea: 77:e8:5b:ec:8d:b3:12:50:14:09:45:97:f3:14:01:1f:23:9d: 0a:fa:a4:9f:ac:05:1f:c3:f0:be:32:a3:f2:35:f5:b7:9a:f9: c6:d5:61:9e:c3:0b:1c:84:69:ca:1e:bc:c2:07:36:3f:ec:59: 42:b5:f6:51:84:99:12:1a:da:2d:31:f3:39:65:ad:2f:04:66: 40:22:80:cc:31:6c:1e:0b:78:64:cd:f9:d1:7e:2d:20:46:15: 01:0b:10:bd:dd:ce:98:6c:cc:e4:be:ba:96:5f:1e:ff:e3:3f: 30:f8:59:9d:f4:84:53:af:91:1e:f8:40:22:7e:51:16:37:a8: 82:0d:c7:b0:51:af:6b:2d:0a:5a:b3:de:8f:e6:0c:4f:49:bd: 5c:14:4c:c0:03:79:15:cf:6d:82:e9:d6:c3:e3:20:cc:df:c4: c4:9b:9f:49:d5:19:df:f7:d8:8f:3a:32:50:f7:04:e8:7c:ff: bd:db:47:dd:94:ca:c4:f3:9f:6e:aa:5d:db:31:b4:8f:c2:01: 1a:5e:ef:c3:18:f8:b1:95:d8:70:dd:9e:82:e4:ad:c6:b3:68: 7e:24:5a:6e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSBFS5d1J4LeLmEilKQQKZh+tf/YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTYzMUI5QTA5OTdDQkM5NzUwOTlBNkZGN0UyN0RDQTNG REM2NDlCQTAeFw0yNTExMDIxNDM2MzRaFw0yNTExMDUyMDQ1MzRaMDMxMTAvBgNV BAMTKDlGNzEzNzEzRDUyMzU1MkIzNEVGQjEzQkQ2NTA5M0E2MDkxNzcyNDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvbf3ZH4STFSJIVdSq0S6YiXvY cbehRVXWHRmGzsGlRkSE1JtxKdI05XWDR/qF9JV1rGuDlyN+1icoJ/R8uaJzpkiO QcqU9LhmMUb4yWGcfMMq1B/J4tlTZE7R268Cv91V5L6w1rHmQjzlJ25//zZRv+9y L4TEzJ1QGYCcCWgFqdDHV16B6nNVvAcjjAeW7PzGoV4mE4OradiPJa+dm97GApKj I+fOWLzr8mA3fKs4MwURex8VaILh9C2kuSbNwJegfmer55yAZqOb8/IiMo2pjQce kCVeVMCbO5tb3df0+jAqxL1oU6Ctx92cqPKPziXdGRNy4wtPpVpZOXHkx8TvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUn3E3E9UjVSs077E71lCTpgkXckEwHwYDVR0j BBgwFoAUFjG5oJl8vJdQmab/fifco/3GSbowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NmIxYWI3Zi1lNDUxLTQwZDEtOWI3MC0zYTQwMjJhOWI0ZWMvMC8xNjMxQjlBMDk5 N0NCQzk3NTA5OUE2RkY3RTI3RENBM0ZEQzY0OUJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTYzMUI5QTA5OTdDQkM5NzUwOTlBNkZGN0UyN0RDQTNGREM2 NDlCQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTZiMWFiN2YtZTQ1MS00MGQxLTli NzAtM2E0MDIyYTliNGVjLzAvMTYzMUI5QTA5OTdDQkM5NzUwOTlBNkZGN0UyN0RD QTNGREM2NDlCQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJHrNqYDNf1jFT4tEoVFIzP4TfTKEvDCN3uA iMMZOFuTkxXS6nfoW+yNsxJQFAlFl/MUAR8jnQr6pJ+sBR/D8L4yo/I19bea+cbV YZ7DCxyEacoevMIHNj/sWUK19lGEmRIa2i0x8zllrS8EZkAigMwxbB4LeGTN+dF+ LSBGFQELEL3dzphszOS+upZfHv/jPzD4WZ30hFOvkR74QCJ+URY3qIINx7BRr2st Clqz3o/mDE9JvVwUTMADeRXPbYLp1sPjIMzfxMSbn0nVGd/32I86MlD3BOh8/73b R92UysTzn26qXdsxtI/CARpe78MY+LGV2HDdnoLkrcazaH4kWm4= -----END CERTIFICATE-----Generated at Tue Nov 4 01:58:43 2025 by rpki-client