$ rpki-client -vvf repo-rpki.idnic.net/repo/c998195f-14bb-41fd-b6ed-7a967c8e43df/0/312D6572B0C104C0D51834C1B01CB0C593DAE8B4.mft File: 312D6572B0C104C0D51834C1B01CB0C593DAE8B4.mft (raw, json) Hash identifier: Oh530SysxA2S4Sf/gVy51eawNRq84FecSjZLX4V5XWs= Subject key identifier: 9F:A7:BD:0B:F5:3E:7D:48:1E:99:B2:8B:2F:E7:46:6E:03:C7:47:D4 Authority key identifier: 31:2D:65:72:B0:C1:04:C0:D5:18:34:C1:B0:1C:B0:C5:93:DA:E8:B4 Certificate issuer: /CN=312D6572B0C104C0D51834C1B01CB0C593DAE8B4 Certificate serial: 5A99D0556DA0D2E33B02D98C539810B56A45E7BC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/312D6572B0C104C0D51834C1B01CB0C593DAE8B4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c998195f-14bb-41fd-b6ed-7a967c8e43df/0/312D6572B0C104C0D51834C1B01CB0C593DAE8B4.mft Manifest number: 0141 Signing time: Mon 03 Nov 2025 16:02:18 +0000 Manifest this update: Mon 03 Nov 2025 15:57:18 +0000 Manifest next update: Thu 06 Nov 2025 18:45:18 +0000 Files and hashes: 1: 3230332e3137352e3130302e302f32332d3234203d3e20313532303132.roa (hash: Via8twfYiTOYYUS4MnDOw8zvlMb40Ue2urMBm24mYnU=) 2: 312D6572B0C104C0D51834C1B01CB0C593DAE8B4.crl (hash: KCUYjjgFIU6x0/rfuX+mN2R7U6nFzVOQAJe6FLHtbF0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c998195f-14bb-41fd-b6ed-7a967c8e43df/0/312D6572B0C104C0D51834C1B01CB0C593DAE8B4.crl rsync://repo-rpki.idnic.net/repo/c998195f-14bb-41fd-b6ed-7a967c8e43df/0/312D6572B0C104C0D51834C1B01CB0C593DAE8B4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/312D6572B0C104C0D51834C1B01CB0C593DAE8B4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 18:45:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:99:d0:55:6d:a0:d2:e3:3b:02:d9:8c:53:98:10:b5:6a:45:e7:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=312D6572B0C104C0D51834C1B01CB0C593DAE8B4 Validity Not Before: Nov 3 15:57:18 2025 GMT Not After : Nov 6 18:45:18 2025 GMT Subject: CN=9FA7BD0BF53E7D481E99B28B2FE7466E03C747D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:72:af:ad:55:ee:ac:d0:de:cf:31:35:41:1d: 54:e2:f2:45:cf:f3:a5:92:d9:b6:72:60:33:a9:2b: 19:f9:5d:d2:cb:21:da:f1:22:09:8d:fd:f8:e0:d3: 88:f8:27:78:b4:87:bb:46:d5:dc:4a:14:b1:1d:f8: 46:41:97:04:dc:40:8a:04:fe:d2:e9:90:50:fb:a1: f9:34:b4:94:5a:04:b3:b4:68:dd:27:96:9c:00:91: 60:ab:49:6e:df:4d:4a:7f:5a:0e:f9:22:f6:92:06: b4:a6:70:cf:da:d0:40:78:6a:b1:94:55:ea:e8:fa: 7b:be:3c:77:8c:7e:aa:e1:79:75:04:4a:f2:a2:2f: 8d:eb:28:35:63:7a:83:b2:65:a9:6f:73:36:07:ed: e7:fc:89:99:30:f6:3b:f2:61:26:ed:66:4b:ed:f4: c4:3d:6a:40:7a:98:8e:18:7e:e5:e3:ae:be:20:b0: 35:88:bf:15:85:f3:d8:19:2e:70:77:b4:69:44:6d: 39:a1:3e:4f:61:30:80:cc:f8:70:50:ea:e6:27:4c: a3:02:9b:b2:7d:58:97:56:ea:fb:ce:81:1f:9a:40: f5:d4:b7:63:c7:1d:0e:db:14:f7:67:34:e7:78:a2: 60:cf:cd:d1:73:05:9c:b0:11:fd:9d:2c:0c:f1:7e: 30:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:A7:BD:0B:F5:3E:7D:48:1E:99:B2:8B:2F:E7:46:6E:03:C7:47:D4 X509v3 Authority Key Identifier: keyid:31:2D:65:72:B0:C1:04:C0:D5:18:34:C1:B0:1C:B0:C5:93:DA:E8:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c998195f-14bb-41fd-b6ed-7a967c8e43df/0/312D6572B0C104C0D51834C1B01CB0C593DAE8B4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/312D6572B0C104C0D51834C1B01CB0C593DAE8B4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c998195f-14bb-41fd-b6ed-7a967c8e43df/0/312D6572B0C104C0D51834C1B01CB0C593DAE8B4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c7:32:46:d7:04:a9:15:94:cb:46:70:ef:d9:c1:b1:27:34:d9: 3c:7d:e9:20:76:81:f8:f7:85:e2:85:1a:df:34:73:9e:bf:97: 98:e4:36:ff:ab:53:75:72:1c:cc:f6:d3:a0:8d:5a:43:73:33: 06:2a:fa:a6:f4:ec:96:c9:e8:0d:fa:78:ff:24:8e:c5:33:35: 66:16:5e:1f:47:a6:07:24:68:70:11:d3:44:d2:e0:70:85:59: 54:8d:ab:b9:bd:6c:2f:c9:ac:7c:93:90:29:ed:5f:b9:64:84: 37:22:36:34:fd:e9:4e:13:4e:1a:7e:0c:5f:31:2b:cc:0f:5a: 08:64:a6:7e:46:88:e1:ad:18:30:7b:d3:0f:9a:32:10:bb:41: cc:dc:33:0d:b5:ba:f6:60:a3:71:36:33:de:71:52:1a:02:e0: a9:c3:69:92:5b:66:ca:34:7a:0d:ef:be:dc:2b:5a:0d:00:5c: e3:18:38:a1:a4:af:e0:03:27:38:80:36:ac:60:37:2a:3a:60: 9e:c2:fc:04:22:55:2c:eb:38:d8:4f:c1:37:2a:57:ab:58:5f: e3:38:59:65:02:57:e8:41:42:03:86:d7:20:87:c8:d9:d9:79: 5f:dc:e3:73:8d:05:e9:a0:b5:13:05:5e:63:f5:82:8c:9c:ac: 03:29:f4:49 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWpnQVW2g0uM7AtmMU5gQtWpF57wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzEyRDY1NzJCMEMxMDRDMEQ1MTgzNEMxQjAxQ0IwQzU5 M0RBRThCNDAeFw0yNTExMDMxNTU3MThaFw0yNTExMDYxODQ1MThaMDMxMTAvBgNV BAMTKDlGQTdCRDBCRjUzRTdENDgxRTk5QjI4QjJGRTc0NjZFMDNDNzQ3RDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLcq+tVe6s0N7PMTVBHVTi8kXP 86WS2bZyYDOpKxn5XdLLIdrxIgmN/fjg04j4J3i0h7tG1dxKFLEd+EZBlwTcQIoE /tLpkFD7ofk0tJRaBLO0aN0nlpwAkWCrSW7fTUp/Wg75IvaSBrSmcM/a0EB4arGU Vero+nu+PHeMfqrheXUESvKiL43rKDVjeoOyZalvczYH7ef8iZkw9jvyYSbtZkvt 9MQ9akB6mI4YfuXjrr4gsDWIvxWF89gZLnB3tGlEbTmhPk9hMIDM+HBQ6uYnTKMC m7J9WJdW6vvOgR+aQPXUt2PHHQ7bFPdnNOd4omDPzdFzBZywEf2dLAzxfjCpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUn6e9C/U+fUgembKLL+dGbgPHR9QwHwYDVR0j BBgwFoAUMS1lcrDBBMDVGDTBsBywxZPa6LQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OTk4MTk1Zi0xNGJiLTQxZmQtYjZlZC03YTk2N2M4ZTQzZGYvMC8zMTJENjU3MkIw QzEwNEMwRDUxODM0QzFCMDFDQjBDNTkzREFFOEI0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzEyRDY1NzJCMEMxMDRDMEQ1MTgzNEMxQjAxQ0IwQzU5M0RB RThCNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzk5ODE5NWYtMTRiYi00MWZkLWI2 ZWQtN2E5NjdjOGU0M2RmLzAvMzEyRDY1NzJCMEMxMDRDMEQ1MTgzNEMxQjAxQ0Iw QzU5M0RBRThCNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMcyRtcEqRWUy0Zw79nBsSc02Tx96SB2gfj3 heKFGt80c56/l5jkNv+rU3VyHMz206CNWkNzMwYq+qb07JbJ6A36eP8kjsUzNWYW Xh9HpgckaHAR00TS4HCFWVSNq7m9bC/JrHyTkCntX7lkhDciNjT96U4TThp+DF8x K8wPWghkpn5GiOGtGDB70w+aMhC7QczcMw21uvZgo3E2M95xUhoC4KnDaZJbZso0 eg3vvtwrWg0AXOMYOKGkr+ADJziANqxgNyo6YJ7C/AQiVSzrONhPwTcqV6tYX+M4 WWUCV+hBQgOG1yCHyNnZeV/c43ONBemgtRMFXmP1goycrAMp9Ek= -----END CERTIFICATE-----Generated at Tue Nov 4 12:40:45 2025 by rpki-client