$ rpki-client -vvf repo-rpki.idnic.net/repo/a1ca9435-7224-47a8-951b-c1b42eb0e2f7/0/316B0D7815A87F5AA07EC9E0D8FC859AC1A76794.mft File: 316B0D7815A87F5AA07EC9E0D8FC859AC1A76794.mft (raw, json) Hash identifier: R4EjUrh6TUR0nlU0GAVDPD5pqG5wuP+buhbQmVLfBEk= Subject key identifier: 8C:1F:A3:F2:A5:9E:47:B3:BE:C9:8B:AF:55:5C:1F:F7:03:FE:0C:C1 Authority key identifier: 31:6B:0D:78:15:A8:7F:5A:A0:7E:C9:E0:D8:FC:85:9A:C1:A7:67:94 Certificate issuer: /CN=316B0D7815A87F5AA07EC9E0D8FC859AC1A76794 Certificate serial: 6098AAEE70D3D4D64F84BC0C3AEA4BAD84CC05CA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/316B0D7815A87F5AA07EC9E0D8FC859AC1A76794.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a1ca9435-7224-47a8-951b-c1b42eb0e2f7/0/316B0D7815A87F5AA07EC9E0D8FC859AC1A76794.mft Manifest number: 0486 Signing time: Tue 04 Nov 2025 04:51:45 +0000 Manifest this update: Tue 04 Nov 2025 04:46:45 +0000 Manifest next update: Fri 07 Nov 2025 15:43:45 +0000 Files and hashes: 1: 316B0D7815A87F5AA07EC9E0D8FC859AC1A76794.crl (hash: bSQNbYFuuBSfPUBlpcoSLX1e1nq5fqGfIqZiMWxyowY=) 2: 3130332e3136322e36322e302f32332d3234203d3e20313431363432.roa (hash: qCAW9RGYIwqqetHxh1sU75304B2gQRTVVqzCEK/6DVI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a1ca9435-7224-47a8-951b-c1b42eb0e2f7/0/316B0D7815A87F5AA07EC9E0D8FC859AC1A76794.crl rsync://repo-rpki.idnic.net/repo/a1ca9435-7224-47a8-951b-c1b42eb0e2f7/0/316B0D7815A87F5AA07EC9E0D8FC859AC1A76794.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/316B0D7815A87F5AA07EC9E0D8FC859AC1A76794.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 13:50:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:98:aa:ee:70:d3:d4:d6:4f:84:bc:0c:3a:ea:4b:ad:84:cc:05:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=316B0D7815A87F5AA07EC9E0D8FC859AC1A76794 Validity Not Before: Nov 4 04:46:45 2025 GMT Not After : Nov 7 15:43:45 2025 GMT Subject: CN=8C1FA3F2A59E47B3BEC98BAF555C1FF703FE0CC1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:11:65:03:4d:a9:b8:d3:25:1e:19:0e:93:4c: 05:b9:05:f0:8a:4f:0f:10:04:f4:bb:4a:07:3d:72: dc:40:6d:f3:e4:e9:ff:0e:5d:d6:ec:b9:32:1a:69: b6:6b:87:97:94:4c:8f:d3:d4:2a:ac:3e:37:76:b0: 02:02:05:24:f2:2c:10:6d:f2:2c:12:24:a4:7d:e6: 5d:ea:f1:ff:b4:fd:9e:90:9d:86:48:2b:09:f5:a0: 8c:15:2d:23:ef:52:34:8c:a0:f3:af:46:76:bb:fc: 93:d3:33:d9:32:db:67:ed:97:68:e3:4d:39:7e:7b: b0:fe:aa:b6:26:17:35:e1:11:fb:32:40:1c:48:5e: 7c:b2:0d:c7:51:7c:d0:4e:4e:7a:57:a5:90:65:da: 47:05:95:80:e7:55:c4:37:09:c2:3e:f9:a8:14:10: aa:14:71:bb:b7:cd:4f:74:83:01:9b:d8:47:60:f0: 36:f6:a7:dd:f1:8a:7a:1c:ac:18:20:2d:e1:a3:9c: b3:f1:7d:2a:e5:06:8f:68:73:0a:14:96:a5:fc:64: 8f:7a:5b:c7:8a:34:ed:d7:f6:5e:f2:03:28:50:96: 77:ca:1c:b8:0f:b3:db:51:09:c6:b1:aa:40:7b:e0: d0:12:79:bc:2b:ae:73:4a:48:a8:3a:4f:91:3e:28: f1:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:1F:A3:F2:A5:9E:47:B3:BE:C9:8B:AF:55:5C:1F:F7:03:FE:0C:C1 X509v3 Authority Key Identifier: keyid:31:6B:0D:78:15:A8:7F:5A:A0:7E:C9:E0:D8:FC:85:9A:C1:A7:67:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a1ca9435-7224-47a8-951b-c1b42eb0e2f7/0/316B0D7815A87F5AA07EC9E0D8FC859AC1A76794.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/316B0D7815A87F5AA07EC9E0D8FC859AC1A76794.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a1ca9435-7224-47a8-951b-c1b42eb0e2f7/0/316B0D7815A87F5AA07EC9E0D8FC859AC1A76794.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:49:c5:a4:44:80:27:4f:67:ad:09:e7:92:8b:95:f6:d9:a8: e4:e9:c7:b9:a5:de:7a:4a:47:a4:70:e0:ab:b2:55:27:67:08: 3b:d0:54:5f:b8:1e:f2:8d:5c:8a:cd:23:50:36:35:25:62:ad: 76:4d:15:dd:5c:0e:02:89:8a:9c:56:3b:6e:e7:9b:34:8e:70: cc:ce:e5:7c:8f:4c:93:3a:0a:f7:5b:f9:40:43:9f:b1:db:49: a4:57:e6:c6:f8:92:57:7f:c4:41:cc:69:98:9d:cc:8f:80:ca: 83:da:d7:55:f7:d1:06:4d:74:95:50:cf:29:4a:44:bb:93:0a: c9:79:8c:2c:fe:d0:67:72:6c:45:f0:77:e1:89:60:bd:bc:44: cc:7e:40:0d:8d:f7:c0:89:a6:97:ea:fc:fc:84:8b:75:4f:0f: 6e:fe:f1:e1:aa:37:c3:09:90:33:35:51:a2:c3:35:65:bb:fa: 7e:28:0e:ad:9b:3c:3f:f0:86:88:91:79:71:b8:9e:42:af:d4: 1b:9d:ec:f8:ea:d3:66:aa:46:58:3f:1b:f9:2c:6e:bd:0e:f9: 2b:06:19:94:f4:db:81:4e:29:fd:3c:04:c0:c0:65:45:99:93: 23:69:30:76:a9:d1:68:4b:68:4b:ba:34:0a:04:0b:df:3e:9a: 7f:4b:33:86 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYJiq7nDT1NZPhLwMOupLrYTMBcowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzE2QjBENzgxNUE4N0Y1QUEwN0VDOUUwRDhGQzg1OUFD MUE3Njc5NDAeFw0yNTExMDQwNDQ2NDVaFw0yNTExMDcxNTQzNDVaMDMxMTAvBgNV BAMTKDhDMUZBM0YyQTU5RTQ3QjNCRUM5OEJBRjU1NUMxRkY3MDNGRTBDQzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhEWUDTam40yUeGQ6TTAW5BfCK Tw8QBPS7Sgc9ctxAbfPk6f8OXdbsuTIaabZrh5eUTI/T1CqsPjd2sAICBSTyLBBt 8iwSJKR95l3q8f+0/Z6QnYZIKwn1oIwVLSPvUjSMoPOvRna7/JPTM9ky22ftl2jj TTl+e7D+qrYmFzXhEfsyQBxIXnyyDcdRfNBOTnpXpZBl2kcFlYDnVcQ3CcI++agU EKoUcbu3zU90gwGb2Edg8Db2p93xinocrBggLeGjnLPxfSrlBo9ocwoUlqX8ZI96 W8eKNO3X9l7yAyhQlnfKHLgPs9tRCcaxqkB74NASebwrrnNKSKg6T5E+KPGpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjB+j8qWeR7O+yYuvVVwf9wP+DMEwHwYDVR0j BBgwFoAUMWsNeBWof1qgfsng2PyFmsGnZ5QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MWNhOTQzNS03MjI0LTQ3YTgtOTUxYi1jMWI0MmViMGUyZjcvMC8zMTZCMEQ3ODE1 QTg3RjVBQTA3RUM5RTBEOEZDODU5QUMxQTc2Nzk0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzE2QjBENzgxNUE4N0Y1QUEwN0VDOUUwRDhGQzg1OUFDMUE3 Njc5NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTFjYTk0MzUtNzIyNC00N2E4LTk1 MWItYzFiNDJlYjBlMmY3LzAvMzE2QjBENzgxNUE4N0Y1QUEwN0VDOUUwRDhGQzg1 OUFDMUE3Njc5NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJJJxaREgCdPZ60J55KLlfbZqOTpx7ml3npK R6Rw4KuyVSdnCDvQVF+4HvKNXIrNI1A2NSVirXZNFd1cDgKJipxWO27nmzSOcMzO 5XyPTJM6Cvdb+UBDn7HbSaRX5sb4kld/xEHMaZidzI+AyoPa11X30QZNdJVQzylK RLuTCsl5jCz+0GdybEXwd+GJYL28RMx+QA2N98CJppfq/PyEi3VPD27+8eGqN8MJ kDM1UaLDNWW7+n4oDq2bPD/whoiReXG4nkKv1Bud7Pjq02aqRlg/G/ksbr0O+SsG GZT024FOKf08BMDAZUWZkyNpMHap0WhLaEu6NAoEC98+mn9LM4Y= -----END CERTIFICATE-----Generated at Tue Nov 4 18:59:20 2025 by rpki-client