$ rpki-client -vvf repo-rpki.idnic.net/repo/b4dadcd0-f1a9-48e4-a2c5-de1818bffe43/0/331490A5F62E7F3FD55E137CB052AC340E403BDF.mft File: 331490A5F62E7F3FD55E137CB052AC340E403BDF.mft (raw, json) Hash identifier: 9eKeeRD3UDLyr4HBqNTFCFoDuV6BWpLZnWOL3Gso0Gw= Subject key identifier: 93:38:4B:16:D0:6D:F2:4C:BC:5C:AA:9E:17:3A:F7:A0:49:80:68:3B Authority key identifier: 33:14:90:A5:F6:2E:7F:3F:D5:5E:13:7C:B0:52:AC:34:0E:40:3B:DF Certificate issuer: /CN=331490A5F62E7F3FD55E137CB052AC340E403BDF Certificate serial: 284A4E22D654E2AD5DD519DAEC9EECD84FD33BE6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/331490A5F62E7F3FD55E137CB052AC340E403BDF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b4dadcd0-f1a9-48e4-a2c5-de1818bffe43/0/331490A5F62E7F3FD55E137CB052AC340E403BDF.mft Manifest number: 0186 Signing time: Tue 05 Aug 2025 23:41:31 +0000 Manifest this update: Tue 05 Aug 2025 23:36:31 +0000 Manifest next update: Sat 09 Aug 2025 09:26:31 +0000 Files and hashes: 1: 331490A5F62E7F3FD55E137CB052AC340E403BDF.crl (hash: l4ZprCPvBgsUdsGDRCJNfuOAoIywWZQzkaox2WQYVUE=) 2: 3130332e3139322e3137342e302f32342d3234203d3e20313530353439.roa (hash: I/e8pz2HwtXx0PhrGgambRJs/dGIlkUlFDHx6iNzq9I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b4dadcd0-f1a9-48e4-a2c5-de1818bffe43/0/331490A5F62E7F3FD55E137CB052AC340E403BDF.crl rsync://repo-rpki.idnic.net/repo/b4dadcd0-f1a9-48e4-a2c5-de1818bffe43/0/331490A5F62E7F3FD55E137CB052AC340E403BDF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/331490A5F62E7F3FD55E137CB052AC340E403BDF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 09:26:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:4a:4e:22:d6:54:e2:ad:5d:d5:19:da:ec:9e:ec:d8:4f:d3:3b:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=331490A5F62E7F3FD55E137CB052AC340E403BDF Validity Not Before: Aug 5 23:36:31 2025 GMT Not After : Aug 9 09:26:31 2025 GMT Subject: CN=93384B16D06DF24CBC5CAA9E173AF7A04980683B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:e5:1f:db:ea:44:84:af:a6:42:20:14:49:9c: 94:aa:e8:47:97:fb:2e:ee:05:7c:71:30:44:24:17: d5:d6:3b:6f:1e:58:b2:8c:6f:48:a7:ad:3d:00:26: 12:ab:ec:06:56:11:50:af:0c:62:4e:fb:95:c6:74: ed:cb:65:5d:ee:13:f8:cf:f8:52:1f:cc:c1:f6:9f: d3:b8:26:5b:65:d1:d1:6d:f5:db:52:8e:30:81:38: 94:9b:29:c0:a7:46:b8:05:8c:a2:a9:8d:d5:af:38: c9:a5:b2:32:e9:16:22:46:05:0d:0f:39:a2:bf:db: f5:c9:d7:0c:27:cd:38:b8:bb:db:00:9d:21:b4:34: 75:b1:db:96:e6:70:44:34:c2:b4:dd:c7:88:f8:5b: e2:80:59:f9:cd:e6:11:11:27:ea:5f:92:b9:58:c4: 55:30:c9:fe:1b:2f:04:c5:b8:c0:ce:c2:28:d1:40: 96:74:dd:6f:a9:d4:f6:54:4d:76:b1:2d:1b:af:46: 6f:88:b5:1e:c3:e3:ce:ea:7a:d7:32:13:21:78:2a: 7e:93:82:ca:01:4d:d6:e1:5a:8c:26:89:f1:bd:aa: 13:72:ef:f6:96:79:cd:5a:d0:20:4d:48:1a:e9:51: e7:30:7b:a8:26:b1:88:49:4a:01:a2:f6:2d:29:84: b4:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:38:4B:16:D0:6D:F2:4C:BC:5C:AA:9E:17:3A:F7:A0:49:80:68:3B X509v3 Authority Key Identifier: keyid:33:14:90:A5:F6:2E:7F:3F:D5:5E:13:7C:B0:52:AC:34:0E:40:3B:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b4dadcd0-f1a9-48e4-a2c5-de1818bffe43/0/331490A5F62E7F3FD55E137CB052AC340E403BDF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/331490A5F62E7F3FD55E137CB052AC340E403BDF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b4dadcd0-f1a9-48e4-a2c5-de1818bffe43/0/331490A5F62E7F3FD55E137CB052AC340E403BDF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:d7:79:b2:be:f0:12:8b:aa:74:7e:6d:bd:f1:27:4f:97:f6: b1:2f:bd:57:27:44:5c:ce:3c:62:dd:0d:c2:88:c3:b9:42:91: d3:fe:e3:e7:41:3d:50:f3:e8:ca:ca:8e:83:15:58:92:81:4e: 0f:64:41:4b:e2:fa:7a:e0:0b:a2:07:fa:71:58:c7:e8:3b:20: 10:99:03:c0:74:55:7b:8b:f5:05:9e:5e:6c:45:6a:f3:be:51: 51:d4:7f:3b:57:8d:69:fa:eb:83:38:34:12:95:3b:ef:7b:24: 07:20:f9:b5:e7:1a:bf:2d:cf:c2:7e:0c:e3:f2:19:53:b1:9a: 61:da:13:ab:6d:cc:f2:10:57:08:fb:31:73:10:45:01:67:36: 59:53:51:29:19:9f:05:b9:06:0d:aa:60:ca:fe:b7:ec:4b:d6: ba:49:d3:2e:da:20:cd:1a:ce:94:f8:88:4d:63:73:24:d3:19: bd:c4:1e:41:ee:d8:c2:27:be:fe:28:46:7c:52:ed:95:9f:f4: 7b:8c:e3:21:5e:57:5c:50:a8:11:42:43:b0:3b:25:f6:cc:c8: b8:3b:09:4f:e5:3a:e8:6c:21:70:d4:63:37:99:9c:11:66:87: 1f:dc:0a:87:e1:0d:fa:5a:54:5c:c4:ca:ba:44:eb:bf:52:dc: 1f:a2:31:f9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKEpOItZU4q1d1Rna7J7s2E/TO+YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzMxNDkwQTVGNjJFN0YzRkQ1NUUxMzdDQjA1MkFDMzQw RTQwM0JERjAeFw0yNTA4MDUyMzM2MzFaFw0yNTA4MDkwOTI2MzFaMDMxMTAvBgNV BAMTKDkzMzg0QjE2RDA2REYyNENCQzVDQUE5RTE3M0FGN0EwNDk4MDY4M0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw5R/b6kSEr6ZCIBRJnJSq6EeX +y7uBXxxMEQkF9XWO28eWLKMb0inrT0AJhKr7AZWEVCvDGJO+5XGdO3LZV3uE/jP +FIfzMH2n9O4Jltl0dFt9dtSjjCBOJSbKcCnRrgFjKKpjdWvOMmlsjLpFiJGBQ0P OaK/2/XJ1wwnzTi4u9sAnSG0NHWx25bmcEQ0wrTdx4j4W+KAWfnN5hERJ+pfkrlY xFUwyf4bLwTFuMDOwijRQJZ03W+p1PZUTXaxLRuvRm+ItR7D487qetcyEyF4Kn6T gsoBTdbhWowmifG9qhNy7/aWec1a0CBNSBrpUecwe6gmsYhJSgGi9i0phLRBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkzhLFtBt8ky8XKqeFzr3oEmAaDswHwYDVR0j BBgwFoAUMxSQpfYufz/VXhN8sFKsNA5AO98wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NGRhZGNkMC1mMWE5LTQ4ZTQtYTJjNS1kZTE4MThiZmZlNDMvMC8zMzE0OTBBNUY2 MkU3RjNGRDU1RTEzN0NCMDUyQUMzNDBFNDAzQkRGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzMxNDkwQTVGNjJFN0YzRkQ1NUUxMzdDQjA1MkFDMzQwRTQw M0JERi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjRkYWRjZDAtZjFhOS00OGU0LWEy YzUtZGUxODE4YmZmZTQzLzAvMzMxNDkwQTVGNjJFN0YzRkQ1NUUxMzdDQjA1MkFD MzQwRTQwM0JERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHTXebK+8BKLqnR+bb3xJ0+X9rEvvVcnRFzO PGLdDcKIw7lCkdP+4+dBPVDz6MrKjoMVWJKBTg9kQUvi+nrgC6IH+nFYx+g7IBCZ A8B0VXuL9QWeXmxFavO+UVHUfztXjWn664M4NBKVO+97JAcg+bXnGr8tz8J+DOPy GVOxmmHaE6ttzPIQVwj7MXMQRQFnNllTUSkZnwW5Bg2qYMr+t+xL1rpJ0y7aIM0a zpT4iE1jcyTTGb3EHkHu2MInvv4oRnxS7ZWf9HuM4yFeV1xQqBFCQ7A7JfbMyLg7 CU/lOuhsIXDUYzeZnBFmhx/cCofhDfpaVFzEyrpE679S3B+iMfk= -----END CERTIFICATE-----Generated at Wed Aug 6 18:25:24 2025 by rpki-client