$ rpki-client -vvf repo-rpki.idnic.net/repo/b4dadcd0-f1a9-48e4-a2c5-de1818bffe43/0/331490A5F62E7F3FD55E137CB052AC340E403BDF.mft File: 331490A5F62E7F3FD55E137CB052AC340E403BDF.mft (raw, json) Hash identifier: ULNRo7XrVZ3bnxYrHXclFv0oFT3ceV4DqtxG8u/zKKY= Subject key identifier: 21:EC:FF:93:6F:B3:37:C2:EA:C8:A1:63:F3:BE:45:A4:BF:79:50:BE Authority key identifier: 33:14:90:A5:F6:2E:7F:3F:D5:5E:13:7C:B0:52:AC:34:0E:40:3B:DF Certificate issuer: /CN=331490A5F62E7F3FD55E137CB052AC340E403BDF Certificate serial: 57253DD9C020C8150771CAD6CEF17E7C6D89F9D6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/331490A5F62E7F3FD55E137CB052AC340E403BDF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b4dadcd0-f1a9-48e4-a2c5-de1818bffe43/0/331490A5F62E7F3FD55E137CB052AC340E403BDF.mft Manifest number: 01AF Signing time: Tue 04 Nov 2025 06:41:32 +0000 Manifest this update: Tue 04 Nov 2025 06:36:32 +0000 Manifest next update: Fri 07 Nov 2025 14:34:32 +0000 Files and hashes: 1: 331490A5F62E7F3FD55E137CB052AC340E403BDF.crl (hash: aCmIDRW/Lunfr34Hj/3GFJ+eRh/klpqm5icfPv+70UU=) 2: 3130332e3139322e3137342e302f32342d3234203d3e20313530353439.roa (hash: I/e8pz2HwtXx0PhrGgambRJs/dGIlkUlFDHx6iNzq9I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b4dadcd0-f1a9-48e4-a2c5-de1818bffe43/0/331490A5F62E7F3FD55E137CB052AC340E403BDF.crl rsync://repo-rpki.idnic.net/repo/b4dadcd0-f1a9-48e4-a2c5-de1818bffe43/0/331490A5F62E7F3FD55E137CB052AC340E403BDF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/331490A5F62E7F3FD55E137CB052AC340E403BDF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 09:01:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:25:3d:d9:c0:20:c8:15:07:71:ca:d6:ce:f1:7e:7c:6d:89:f9:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=331490A5F62E7F3FD55E137CB052AC340E403BDF Validity Not Before: Nov 4 06:36:32 2025 GMT Not After : Nov 7 14:34:32 2025 GMT Subject: CN=21ECFF936FB337C2EAC8A163F3BE45A4BF7950BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:4d:01:9f:4b:4b:6b:92:d4:62:82:2f:9d:ee: b4:55:24:2c:05:44:fb:59:18:7b:18:62:b2:0a:27: f3:0d:e1:e6:bc:d1:05:43:f1:82:01:92:c5:28:85: b3:a4:45:3e:dc:09:87:cf:6f:f6:fe:31:18:a9:b4: e0:1c:fd:cc:c8:6d:a0:66:de:f8:f0:40:89:de:48: f4:fa:69:70:90:bb:4d:a6:f9:27:cb:82:7c:6f:90: f5:2e:4c:59:db:a0:44:33:d1:2b:00:4c:d1:29:9b: b1:ec:1e:c6:82:a2:90:d6:64:60:60:6c:e6:02:45: 4b:34:ef:3a:d2:fb:53:49:d6:64:cd:4f:90:43:8c: 89:18:04:71:8d:28:47:06:76:d2:1b:59:50:41:c4: 0f:e8:0d:a3:eb:c4:5f:a6:e1:e9:a3:61:f1:3c:9a: 63:e5:26:94:6e:0a:93:7c:94:d2:0e:a7:26:28:6f: 07:ab:51:9c:1c:cc:c2:5d:c5:52:69:80:55:7a:1b: d2:72:c5:99:55:74:56:8e:ee:f0:61:3c:2c:9a:25: a8:e4:ef:97:a6:f2:20:16:38:f8:15:9a:7f:f6:bc: cf:ab:db:05:9e:47:db:82:54:48:07:ab:59:9b:7d: 80:4c:28:69:90:fb:f4:c1:9f:4d:96:0a:a5:a4:58: 01:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:EC:FF:93:6F:B3:37:C2:EA:C8:A1:63:F3:BE:45:A4:BF:79:50:BE X509v3 Authority Key Identifier: keyid:33:14:90:A5:F6:2E:7F:3F:D5:5E:13:7C:B0:52:AC:34:0E:40:3B:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b4dadcd0-f1a9-48e4-a2c5-de1818bffe43/0/331490A5F62E7F3FD55E137CB052AC340E403BDF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/331490A5F62E7F3FD55E137CB052AC340E403BDF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b4dadcd0-f1a9-48e4-a2c5-de1818bffe43/0/331490A5F62E7F3FD55E137CB052AC340E403BDF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:11:53:4f:09:bf:9b:29:bc:55:8e:ab:a7:49:48:6f:fa:86: 8e:cf:19:9c:4f:b1:a6:a8:ed:79:4c:50:53:e9:80:e8:f5:fd: 8b:d9:9b:0d:44:9b:61:fa:22:79:6f:a6:ee:19:f3:ae:55:a9: 2e:9f:bc:26:18:17:dd:4c:a5:49:73:1e:d3:03:1c:ce:2a:f7: c2:e2:36:03:8b:8c:39:91:6c:8c:4e:45:d7:3e:f0:2f:74:c3: 5a:75:3d:13:46:1c:5e:41:7d:34:2b:65:5b:5a:6f:a4:a3:35: 19:87:7b:87:b3:34:32:9b:e4:e8:ee:fe:3e:cd:1c:35:d2:ea: ed:6c:e9:23:7a:10:d0:c5:94:1c:f5:fc:86:2a:fe:bd:27:e2: 35:02:bc:d6:47:4e:b9:9f:61:41:f0:63:da:74:20:38:da:63: bf:c0:88:f1:9f:6a:2e:5e:42:01:9f:34:8d:09:8f:d9:dc:54: 2c:f1:9e:83:e5:c7:a5:28:8e:44:ed:32:30:64:a3:c3:69:15: 6a:0d:a9:c3:b8:71:07:c4:ca:3b:5d:1f:f3:4f:c5:89:d7:c6: bf:9f:5e:3c:07:a5:07:82:95:79:7b:c6:d3:7f:b0:53:22:2c: e4:af:9c:8b:7b:a4:f9:8a:8c:a3:ed:b4:cc:24:1b:31:f8:13: 2f:9f:7e:9d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVyU92cAgyBUHccrWzvF+fG2J+dYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzMxNDkwQTVGNjJFN0YzRkQ1NUUxMzdDQjA1MkFDMzQw RTQwM0JERjAeFw0yNTExMDQwNjM2MzJaFw0yNTExMDcxNDM0MzJaMDMxMTAvBgNV BAMTKDIxRUNGRjkzNkZCMzM3QzJFQUM4QTE2M0YzQkU0NUE0QkY3OTUwQkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCTQGfS0trktRigi+d7rRVJCwF RPtZGHsYYrIKJ/MN4ea80QVD8YIBksUohbOkRT7cCYfPb/b+MRiptOAc/czIbaBm 3vjwQIneSPT6aXCQu02m+SfLgnxvkPUuTFnboEQz0SsATNEpm7HsHsaCopDWZGBg bOYCRUs07zrS+1NJ1mTNT5BDjIkYBHGNKEcGdtIbWVBBxA/oDaPrxF+m4emjYfE8 mmPlJpRuCpN8lNIOpyYobwerUZwczMJdxVJpgFV6G9JyxZlVdFaO7vBhPCyaJajk 75em8iAWOPgVmn/2vM+r2wWeR9uCVEgHq1mbfYBMKGmQ+/TBn02WCqWkWAGRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIez/k2+zN8LqyKFj875FpL95UL4wHwYDVR0j BBgwFoAUMxSQpfYufz/VXhN8sFKsNA5AO98wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NGRhZGNkMC1mMWE5LTQ4ZTQtYTJjNS1kZTE4MThiZmZlNDMvMC8zMzE0OTBBNUY2 MkU3RjNGRDU1RTEzN0NCMDUyQUMzNDBFNDAzQkRGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzMxNDkwQTVGNjJFN0YzRkQ1NUUxMzdDQjA1MkFDMzQwRTQw M0JERi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjRkYWRjZDAtZjFhOS00OGU0LWEy YzUtZGUxODE4YmZmZTQzLzAvMzMxNDkwQTVGNjJFN0YzRkQ1NUUxMzdDQjA1MkFD MzQwRTQwM0JERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABERU08Jv5spvFWOq6dJSG/6ho7PGZxPsaao 7XlMUFPpgOj1/YvZmw1Em2H6Inlvpu4Z865VqS6fvCYYF91MpUlzHtMDHM4q98Li NgOLjDmRbIxORdc+8C90w1p1PRNGHF5BfTQrZVtab6SjNRmHe4ezNDKb5Oju/j7N HDXS6u1s6SN6ENDFlBz1/IYq/r0n4jUCvNZHTrmfYUHwY9p0IDjaY7/AiPGfai5e QgGfNI0Jj9ncVCzxnoPlx6UojkTtMjBko8NpFWoNqcO4cQfEyjtdH/NPxYnXxr+f XjwHpQeClXl7xtN/sFMiLOSvnIt7pPmKjKPttMwkGzH4Ey+ffp0= -----END CERTIFICATE-----Generated at Tue Nov 4 08:12:51 2025 by rpki-client