$ rpki-client -vvf repo-rpki.idnic.net/repo/ad598e99-e9ff-4abe-b08e-226fdd07f9ae/0/516450A151C5487FCC5911F4C18941CA895B07A5.mft File: 516450A151C5487FCC5911F4C18941CA895B07A5.mft (raw, json) Hash identifier: lndof4ALNXOgfVLNbGSHZXEhw91JpfYbcUEpkSYKLAw= Subject key identifier: 91:33:5D:A7:83:DA:B2:BE:45:D5:49:A2:51:19:25:48:BF:B3:85:89 Authority key identifier: 51:64:50:A1:51:C5:48:7F:CC:59:11:F4:C1:89:41:CA:89:5B:07:A5 Certificate issuer: /CN=516450A151C5487FCC5911F4C18941CA895B07A5 Certificate serial: 5D1DCA234ACAA81907B4180F66431CB8063A88E0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/516450A151C5487FCC5911F4C18941CA895B07A5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ad598e99-e9ff-4abe-b08e-226fdd07f9ae/0/516450A151C5487FCC5911F4C18941CA895B07A5.mft Manifest number: 031E Signing time: Tue 04 Nov 2025 03:10:56 +0000 Manifest this update: Tue 04 Nov 2025 03:05:56 +0000 Manifest next update: Fri 07 Nov 2025 13:36:56 +0000 Files and hashes: 1: 323430353a363263303a3a2f33322d3332203d3e20313339343138.roa (hash: z85xof54DRtz327x0y44Pw+jx9DlTvA8Q/kbbufAMJs=) 2: 3130332e3134342e31392e302f32342d3234203d3e20313339343138.roa (hash: NPTNkAFeiU4perz1lh+B9xb1IjABewQG5b/Cldme2U8=) 3: 516450A151C5487FCC5911F4C18941CA895B07A5.crl (hash: T/W+5O/JDg7bhXX8ohhFcFVPnW9HqrrYYAMe/+E9J1A=) 4: 3130332e3134342e31382e302f32342d3234203d3e20313339343138.roa (hash: +9l9/c1oHNd6x+rotlaCAqAorgvfQYB/2M8mOFajTwg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ad598e99-e9ff-4abe-b08e-226fdd07f9ae/0/516450A151C5487FCC5911F4C18941CA895B07A5.crl rsync://repo-rpki.idnic.net/repo/ad598e99-e9ff-4abe-b08e-226fdd07f9ae/0/516450A151C5487FCC5911F4C18941CA895B07A5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/516450A151C5487FCC5911F4C18941CA895B07A5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 13:36:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:1d:ca:23:4a:ca:a8:19:07:b4:18:0f:66:43:1c:b8:06:3a:88:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=516450A151C5487FCC5911F4C18941CA895B07A5 Validity Not Before: Nov 4 03:05:56 2025 GMT Not After : Nov 7 13:36:56 2025 GMT Subject: CN=91335DA783DAB2BE45D549A251192548BFB38589 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:c3:45:c9:59:01:e9:67:b1:50:ec:28:5d:9f: 71:ce:a0:38:b7:7c:0b:8a:ac:b1:1a:a6:a2:b1:fd: a1:b2:98:a3:b8:0b:53:f0:8f:0b:8a:97:0b:40:3e: 3c:9f:17:69:f5:ca:0a:a0:ba:0d:64:ce:7a:5a:57: 76:79:fc:7f:81:86:ab:7a:3d:ba:4a:9a:65:7c:ee: c4:21:ae:9b:41:35:2a:a1:bd:30:76:a5:2a:d0:b4: 55:c4:12:9e:9f:cd:10:5f:83:af:76:f1:c6:ec:e4: 4e:c9:51:a4:ae:50:c1:72:1d:02:d6:a1:ed:9d:a1: 37:15:b9:d9:a7:ff:25:07:51:78:3c:11:0e:25:2a: ab:c7:36:d4:05:81:c9:11:99:96:15:4f:61:66:e5: 4f:23:d3:f6:dd:11:1f:ef:76:1b:47:18:7c:c1:94: 90:f7:03:29:87:8f:80:ca:6d:94:e2:ec:6b:4f:25: 8a:f0:9c:8b:ba:26:df:df:08:0a:f6:aa:b6:08:50: 7f:e3:9d:3a:88:0e:a1:0d:2c:e7:63:a6:c5:4b:8a: 2d:12:54:a6:f0:5a:8a:db:85:28:b5:6e:4e:27:cb: 46:14:f7:c3:ec:fa:92:2f:46:06:b1:bb:3b:b5:9d: f1:5b:f2:ce:fd:a7:41:6e:43:02:12:9a:ab:27:ae: bf:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:33:5D:A7:83:DA:B2:BE:45:D5:49:A2:51:19:25:48:BF:B3:85:89 X509v3 Authority Key Identifier: keyid:51:64:50:A1:51:C5:48:7F:CC:59:11:F4:C1:89:41:CA:89:5B:07:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ad598e99-e9ff-4abe-b08e-226fdd07f9ae/0/516450A151C5487FCC5911F4C18941CA895B07A5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/516450A151C5487FCC5911F4C18941CA895B07A5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ad598e99-e9ff-4abe-b08e-226fdd07f9ae/0/516450A151C5487FCC5911F4C18941CA895B07A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:b6:e9:61:78:47:32:c0:06:e4:c1:3c:75:17:48:f2:6a:a7: 71:8c:83:0c:b8:53:2e:54:32:2b:d2:a2:29:cb:2e:83:db:dd: cc:bd:07:d0:0f:af:66:98:29:a7:d0:99:ca:b3:8d:45:64:6e: cf:a4:ce:c6:5a:c4:4b:35:f9:6b:ec:5f:9d:3f:a1:4f:7b:2c: 46:bf:27:a3:62:90:7f:7d:81:18:db:4d:45:6d:08:36:90:50: 3e:6b:d4:b7:60:e7:e3:da:52:6c:50:1d:1e:34:11:39:bc:f9: 74:88:c7:84:9e:92:d1:a9:7c:d2:f0:6b:05:1e:9a:ba:41:28: 7c:51:2b:44:3b:3f:e6:95:f0:d4:d8:63:e9:c0:f8:8d:22:e0: e0:18:bb:57:fc:a4:1c:93:84:4c:1f:32:6b:58:ee:d7:fa:49: 53:b1:37:0a:9e:2c:b0:bf:bd:f6:ae:95:36:ba:e1:d8:bb:fa: 05:ce:22:13:cc:f8:00:e3:3f:2a:9d:7e:fc:b7:79:43:88:72: 2a:50:b1:21:65:c2:9d:76:1b:26:c6:35:05:50:6b:3e:fe:8d: 1b:09:96:4c:3f:d0:61:f4:94:21:00:3a:15:5b:e9:45:4b:ad: d1:1e:23:fe:ea:03:dd:9c:02:ef:d0:ac:38:fd:05:b4:56:ba: 7a:2f:b5:a7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXR3KI0rKqBkHtBgPZkMcuAY6iOAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTE2NDUwQTE1MUM1NDg3RkNDNTkxMUY0QzE4OTQxQ0E4 OTVCMDdBNTAeFw0yNTExMDQwMzA1NTZaFw0yNTExMDcxMzM2NTZaMDMxMTAvBgNV BAMTKDkxMzM1REE3ODNEQUIyQkU0NUQ1NDlBMjUxMTkyNTQ4QkZCMzg1ODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiw0XJWQHpZ7FQ7Chdn3HOoDi3 fAuKrLEapqKx/aGymKO4C1PwjwuKlwtAPjyfF2n1ygqgug1kznpaV3Z5/H+Bhqt6 PbpKmmV87sQhrptBNSqhvTB2pSrQtFXEEp6fzRBfg6928cbs5E7JUaSuUMFyHQLW oe2doTcVudmn/yUHUXg8EQ4lKqvHNtQFgckRmZYVT2Fm5U8j0/bdER/vdhtHGHzB lJD3AymHj4DKbZTi7GtPJYrwnIu6Jt/fCAr2qrYIUH/jnTqIDqENLOdjpsVLii0S VKbwWorbhSi1bk4ny0YU98Ps+pIvRgaxuzu1nfFb8s79p0FuQwISmqsnrr+BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkTNdp4Pasr5F1UmiURklSL+zhYkwHwYDVR0j BBgwFoAUUWRQoVHFSH/MWRH0wYlByolbB6UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZDU5OGU5OS1lOWZmLTRhYmUtYjA4ZS0yMjZmZGQwN2Y5YWUvMC81MTY0NTBBMTUx QzU0ODdGQ0M1OTExRjRDMTg5NDFDQTg5NUIwN0E1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTE2NDUwQTE1MUM1NDg3RkNDNTkxMUY0QzE4OTQxQ0E4OTVC MDdBNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWQ1OThlOTktZTlmZi00YWJlLWIw OGUtMjI2ZmRkMDdmOWFlLzAvNTE2NDUwQTE1MUM1NDg3RkNDNTkxMUY0QzE4OTQx Q0E4OTVCMDdBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACu26WF4RzLABuTBPHUXSPJqp3GMgwy4Uy5U MivSoinLLoPb3cy9B9APr2aYKafQmcqzjUVkbs+kzsZaxEs1+WvsX50/oU97LEa/ J6NikH99gRjbTUVtCDaQUD5r1Ldg5+PaUmxQHR40ETm8+XSIx4SektGpfNLwawUe mrpBKHxRK0Q7P+aV8NTYY+nA+I0i4OAYu1f8pByThEwfMmtY7tf6SVOxNwqeLLC/ vfaulTa64di7+gXOIhPM+ADjPyqdfvy3eUOIcipQsSFlwp12GybGNQVQaz7+jRsJ lkw/0GH0lCEAOhVb6UVLrdEeI/7qA92cAu/QrDj9BbRWunovtac= -----END CERTIFICATE-----Generated at Wed Nov 5 00:21:40 2025 by rpki-client