$ rpki-client -vvf repo-rpki.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.mft File: 131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.mft (raw, json) Hash identifier: 6KzEcdNpELTBj3vSESApekFi5meW1t3VJg9AOKmJ8cc= Subject key identifier: 77:03:05:56:39:A2:2F:AC:E6:F8:4F:F2:94:8B:14:30:F1:6B:4C:53 Authority key identifier: 13:18:07:BD:DA:AF:97:ED:72:21:4D:FB:C5:C5:39:AC:B0:4F:DC:BE Certificate issuer: /CN=131807BDDAAF97ED72214DFBC5C539ACB04FDCBE Certificate serial: 75F50C4ABCF6945B4C5A348FA4340DB29B7434ED Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.mft Manifest number: 0324 Signing time: Mon 03 Nov 2025 14:30:56 +0000 Manifest this update: Mon 03 Nov 2025 14:25:56 +0000 Manifest next update: Thu 06 Nov 2025 21:11:56 +0000 Files and hashes: 1: 131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.crl (hash: R6VGrGBpiQLKR0FYa4pvOUa22Q4ag8T+wcVhCOjbyKQ=) 2: 3130332e3137342e32342e302f32332d3234203d3e20313331313131.roa (hash: IcV/PuSEjSNsy6cbDUeXZVgPYs8xhMimlvvll5vTiXU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.crl rsync://repo-rpki.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 21:11:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:f5:0c:4a:bc:f6:94:5b:4c:5a:34:8f:a4:34:0d:b2:9b:74:34:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=131807BDDAAF97ED72214DFBC5C539ACB04FDCBE Validity Not Before: Nov 3 14:25:56 2025 GMT Not After : Nov 6 21:11:56 2025 GMT Subject: CN=7703055639A22FACE6F84FF2948B1430F16B4C53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:b4:e6:75:52:39:4c:8e:58:f6:08:49:d1:dc: 76:40:0f:8b:a3:04:9b:b0:42:cd:d1:81:6e:6e:12: 25:10:62:19:79:e1:55:07:18:40:56:74:f9:9b:da: 5e:57:b4:b3:e6:d9:66:ca:9e:45:95:65:b4:37:53: 4d:89:d9:53:6c:ce:d3:ba:95:d0:76:a5:24:4e:ec: 34:7d:11:65:0b:c2:00:07:1f:8b:d3:42:a8:07:cb: a2:bb:03:71:f6:3b:a3:53:d8:4b:01:87:e4:f9:b1: c2:11:d5:a8:da:9c:a9:a0:1c:1b:55:af:56:0b:ad: 7b:81:d2:4f:91:cd:f3:42:ac:93:f0:6c:17:12:fc: ba:88:08:15:88:a4:ea:3a:0a:32:ef:cf:17:3e:0a: 42:6c:77:6f:aa:c2:cf:34:d8:2f:4d:0b:a5:2f:a4: 7e:7c:1f:46:ea:9e:2c:dc:23:47:7f:9a:a0:56:70: 73:01:e2:0f:d5:a1:96:18:c7:21:8a:98:70:77:73: b4:72:fd:79:d3:b8:f4:cb:09:f8:94:1d:7f:54:0d: c2:9c:f8:91:ed:d6:9c:50:04:5f:87:04:d5:ed:08: 95:c2:7a:b3:e9:1c:e2:a5:61:7d:03:98:51:e1:88: 66:7c:fa:24:7e:df:29:a3:cc:97:f3:81:7c:cc:1a: 5f:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:03:05:56:39:A2:2F:AC:E6:F8:4F:F2:94:8B:14:30:F1:6B:4C:53 X509v3 Authority Key Identifier: keyid:13:18:07:BD:DA:AF:97:ED:72:21:4D:FB:C5:C5:39:AC:B0:4F:DC:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:3f:0e:ef:92:70:37:48:90:e4:bc:4c:cb:86:ce:c4:6b:70: 19:a2:db:6b:63:23:66:66:1f:f2:95:35:e8:e5:3b:22:e1:a1: df:84:e1:88:5b:3f:75:8e:24:db:29:95:01:7c:aa:80:6e:74: 31:fb:89:cd:61:8e:1c:ce:ce:b5:07:44:2b:65:c1:95:30:70: 47:2b:6f:e2:e5:56:86:1f:28:0f:d6:3d:fb:84:13:83:e3:d8: a9:a7:2d:2c:59:f7:3c:20:89:31:90:a7:de:11:88:fe:cd:34: 8c:cc:2d:07:f6:5f:8a:e0:e3:9e:4e:73:77:b3:9d:d7:d8:78: df:e0:5c:54:98:5f:fe:b3:95:3b:8a:2d:de:c3:5e:fb:13:a5: be:e6:be:71:4d:b7:47:da:99:5d:bd:3c:f5:34:38:8c:7c:83: 61:bc:01:60:8d:dc:94:78:19:54:2d:3c:59:7c:5e:b6:d7:a2: dc:88:0c:2f:04:8e:75:71:d4:40:fb:6d:ad:82:8a:f1:ca:10: 8a:0b:cb:0e:2b:54:e5:e7:c5:e2:66:d5:47:d8:35:18:fc:4b: e8:ca:c4:d0:05:9b:7f:73:1c:03:77:93:7a:63:bc:3d:fa:af: d8:79:b0:a4:b1:3e:0b:46:74:60:fa:20:46:ea:08:9b:61:95: 80:a9:a2:13 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdfUMSrz2lFtMWjSPpDQNspt0NO0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTMxODA3QkREQUFGOTdFRDcyMjE0REZCQzVDNTM5QUNC MDRGRENCRTAeFw0yNTExMDMxNDI1NTZaFw0yNTExMDYyMTExNTZaMDMxMTAvBgNV BAMTKDc3MDMwNTU2MzlBMjJGQUNFNkY4NEZGMjk0OEIxNDMwRjE2QjRDNTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqtOZ1UjlMjlj2CEnR3HZAD4uj BJuwQs3RgW5uEiUQYhl54VUHGEBWdPmb2l5XtLPm2WbKnkWVZbQ3U02J2VNsztO6 ldB2pSRO7DR9EWULwgAHH4vTQqgHy6K7A3H2O6NT2EsBh+T5scIR1ajanKmgHBtV r1YLrXuB0k+RzfNCrJPwbBcS/LqICBWIpOo6CjLvzxc+CkJsd2+qws802C9NC6Uv pH58H0bqnizcI0d/mqBWcHMB4g/VoZYYxyGKmHB3c7Ry/XnTuPTLCfiUHX9UDcKc +JHt1pxQBF+HBNXtCJXCerPpHOKlYX0DmFHhiGZ8+iR+3ymjzJfzgXzMGl8dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdwMFVjmiL6zm+E/ylIsUMPFrTFMwHwYDVR0j BBgwFoAUExgHvdqvl+1yIU37xcU5rLBP3L4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZjI1Yjk2OC0wOTI3LTQ1OTQtODg3ZS02N2Y1M2Y5NjdiMTIvMC8xMzE4MDdCRERB QUY5N0VENzIyMTRERkJDNUM1MzlBQ0IwNEZEQ0JFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTMxODA3QkREQUFGOTdFRDcyMjE0REZCQzVDNTM5QUNCMDRG RENCRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmYyNWI5NjgtMDkyNy00NTk0LTg4 N2UtNjdmNTNmOTY3YjEyLzAvMTMxODA3QkREQUFGOTdFRDcyMjE0REZCQzVDNTM5 QUNCMDRGRENCRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD8/Du+ScDdIkOS8TMuGzsRrcBmi22tjI2Zm H/KVNejlOyLhod+E4YhbP3WOJNsplQF8qoBudDH7ic1hjhzOzrUHRCtlwZUwcEcr b+LlVoYfKA/WPfuEE4Pj2KmnLSxZ9zwgiTGQp94RiP7NNIzMLQf2X4rg455Oc3ez ndfYeN/gXFSYX/6zlTuKLd7DXvsTpb7mvnFNt0famV29PPU0OIx8g2G8AWCN3JR4 GVQtPFl8XrbXotyIDC8EjnVx1ED7ba2CivHKEIoLyw4rVOXnxeJm1UfYNRj8S+jK xNAFm39zHAN3k3pjvD36r9h5sKSxPgtGdGD6IEbqCJthlYCpohM= -----END CERTIFICATE-----Generated at Wed Nov 5 01:12:22 2025 by rpki-client