$ rpki-client -vvf repo-rpki.idnic.net/repo/96b1ab7f-e451-40d1-9b70-3a4022a9b4ec/0/1631B9A0997CBC975099A6FF7E27DCA3FDC649BA.mft File: 1631B9A0997CBC975099A6FF7E27DCA3FDC649BA.mft (raw, json) Hash identifier: 4XDrvmtVXoqsGcgSYGUYLQpXBuH/6JKACZfsuZSRXRE= Subject key identifier: 33:04:74:D5:E3:66:11:5D:6C:68:7D:19:DE:27:28:AD:FD:AD:01:B2 Authority key identifier: 16:31:B9:A0:99:7C:BC:97:50:99:A6:FF:7E:27:DC:A3:FD:C6:49:BA Certificate issuer: /CN=1631B9A0997CBC975099A6FF7E27DCA3FDC649BA Certificate serial: 3F19506735BB8E4B0B664A79EE20BE1E6AED9ACE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1631B9A0997CBC975099A6FF7E27DCA3FDC649BA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/96b1ab7f-e451-40d1-9b70-3a4022a9b4ec/0/1631B9A0997CBC975099A6FF7E27DCA3FDC649BA.mft Manifest number: 0156 Signing time: Sat 19 Jul 2025 19:11:43 +0000 Manifest this update: Sat 19 Jul 2025 19:06:43 +0000 Manifest next update: Wed 23 Jul 2025 00:04:43 +0000 Files and hashes: 1: 3230322e35382e3233382e302f32332d3234203d3e203436303237.roa (hash: TVHLoA6S/RXowJVfDxEwT3G/jcn7qgjqSJZOEgaAkds=) 2: 1631B9A0997CBC975099A6FF7E27DCA3FDC649BA.crl (hash: n+rZ4ZwWV6cMZn2TOoxagbXGRTBYDguh0hKiaCIMbgQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/96b1ab7f-e451-40d1-9b70-3a4022a9b4ec/0/1631B9A0997CBC975099A6FF7E27DCA3FDC649BA.crl rsync://repo-rpki.idnic.net/repo/96b1ab7f-e451-40d1-9b70-3a4022a9b4ec/0/1631B9A0997CBC975099A6FF7E27DCA3FDC649BA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1631B9A0997CBC975099A6FF7E27DCA3FDC649BA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 00:04:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:19:50:67:35:bb:8e:4b:0b:66:4a:79:ee:20:be:1e:6a:ed:9a:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1631B9A0997CBC975099A6FF7E27DCA3FDC649BA Validity Not Before: Jul 19 19:06:43 2025 GMT Not After : Jul 23 00:04:43 2025 GMT Subject: CN=330474D5E366115D6C687D19DE2728ADFDAD01B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:02:58:8e:48:3b:b6:f1:ac:2d:74:cf:fb:26: 7a:3e:17:4d:b4:27:10:70:e6:d6:8b:39:a8:32:6c: e5:e6:5f:31:77:bd:69:f3:e8:7b:98:e3:e0:f3:ef: a8:df:ed:91:53:53:82:9b:2e:c1:de:81:f2:85:72: 76:28:ee:b8:89:ff:d2:5f:d6:9f:18:9f:1a:bc:c4: 0f:97:e0:fe:f7:31:90:c7:e9:d9:97:2d:c4:d6:83: 51:0d:d2:63:ba:62:f7:89:5a:26:a3:ea:f7:cc:f2: 31:b9:09:a7:b4:66:b2:c7:54:f3:24:a0:0a:fa:80: ca:97:17:ab:f6:15:c2:24:34:62:46:8f:0c:a5:b1: f1:16:bd:85:ac:db:fb:6a:1f:be:97:df:b8:61:53: 07:cc:e3:87:f4:cc:91:94:b3:a1:8d:b7:c1:65:c1: 0f:13:d2:5c:9e:8c:4b:7c:5e:73:eb:a0:a4:90:02: 68:a5:01:36:31:90:d3:98:06:dd:27:51:2c:1d:81: 69:67:6d:b7:19:46:b2:85:ff:c4:57:cc:33:c7:45: 13:26:17:4d:46:5c:8d:8b:53:ce:47:b2:8e:04:a1: 01:bf:a4:70:04:84:d9:36:bf:6a:a0:cb:8f:f0:be: ac:18:39:7b:8d:ff:74:07:e7:f2:b2:e3:59:bb:e6: 1c:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:04:74:D5:E3:66:11:5D:6C:68:7D:19:DE:27:28:AD:FD:AD:01:B2 X509v3 Authority Key Identifier: keyid:16:31:B9:A0:99:7C:BC:97:50:99:A6:FF:7E:27:DC:A3:FD:C6:49:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/96b1ab7f-e451-40d1-9b70-3a4022a9b4ec/0/1631B9A0997CBC975099A6FF7E27DCA3FDC649BA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1631B9A0997CBC975099A6FF7E27DCA3FDC649BA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/96b1ab7f-e451-40d1-9b70-3a4022a9b4ec/0/1631B9A0997CBC975099A6FF7E27DCA3FDC649BA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:60:03:ee:39:83:c8:05:fe:9f:83:31:76:2b:12:e5:d5:07: 44:ef:0b:00:85:89:6a:4d:82:35:b3:4a:99:0f:2c:5f:cd:f9: 6d:37:39:8c:13:81:9c:a2:56:86:dd:0e:9a:9a:c6:47:cd:a7: 89:10:d6:ea:2b:d7:32:a8:ce:22:13:69:a2:58:37:f6:6b:32: b8:47:11:f4:57:ad:90:8e:de:f5:65:0d:79:7c:f0:69:02:94: 90:9e:d2:1f:24:87:f6:79:03:80:cf:16:83:87:41:8b:26:aa: 8e:d4:f4:79:ce:e3:37:82:6b:83:dd:ec:24:26:4d:5b:4f:3b: 45:a7:90:b1:b0:e9:86:31:c7:c6:f4:dd:7b:71:87:ba:7a:68: f2:8f:0f:17:71:41:98:7b:d9:e0:ef:71:dd:1b:e1:a2:25:ed: f5:78:85:0b:ee:cd:d9:f6:69:0f:a1:82:7c:c9:f9:76:0c:51: 15:ab:1c:ad:d3:f4:68:57:d5:61:0b:e2:82:1c:f7:1a:8b:32: ea:be:f2:66:09:be:ec:98:06:1f:15:43:27:20:9c:d5:56:3b: fd:48:db:55:68:f1:57:17:c1:ec:b1:d7:b9:e8:b9:d1:4c:7c: 5c:07:cd:90:e9:3f:9b:ba:ae:2b:81:3a:86:33:bc:a3:e9:2d: c9:e2:3b:9f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPxlQZzW7jksLZkp57iC+Hmrtms4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTYzMUI5QTA5OTdDQkM5NzUwOTlBNkZGN0UyN0RDQTNG REM2NDlCQTAeFw0yNTA3MTkxOTA2NDNaFw0yNTA3MjMwMDA0NDNaMDMxMTAvBgNV BAMTKDMzMDQ3NEQ1RTM2NjExNUQ2QzY4N0QxOURFMjcyOEFERkRBRDAxQjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAAliOSDu28awtdM/7Jno+F020 JxBw5taLOagybOXmXzF3vWnz6HuY4+Dz76jf7ZFTU4KbLsHegfKFcnYo7riJ/9Jf 1p8Ynxq8xA+X4P73MZDH6dmXLcTWg1EN0mO6YveJWiaj6vfM8jG5Cae0ZrLHVPMk oAr6gMqXF6v2FcIkNGJGjwylsfEWvYWs2/tqH76X37hhUwfM44f0zJGUs6GNt8Fl wQ8T0lyejEt8XnProKSQAmilATYxkNOYBt0nUSwdgWlnbbcZRrKF/8RXzDPHRRMm F01GXI2LU85Hso4EoQG/pHAEhNk2v2qgy4/wvqwYOXuN/3QH5/Ky41m75hzfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMwR01eNmEV1saH0Z3icorf2tAbIwHwYDVR0j BBgwFoAUFjG5oJl8vJdQmab/fifco/3GSbowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NmIxYWI3Zi1lNDUxLTQwZDEtOWI3MC0zYTQwMjJhOWI0ZWMvMC8xNjMxQjlBMDk5 N0NCQzk3NTA5OUE2RkY3RTI3RENBM0ZEQzY0OUJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTYzMUI5QTA5OTdDQkM5NzUwOTlBNkZGN0UyN0RDQTNGREM2 NDlCQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTZiMWFiN2YtZTQ1MS00MGQxLTli NzAtM2E0MDIyYTliNGVjLzAvMTYzMUI5QTA5OTdDQkM5NzUwOTlBNkZGN0UyN0RD QTNGREM2NDlCQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHpgA+45g8gF/p+DMXYrEuXVB0TvCwCFiWpN gjWzSpkPLF/N+W03OYwTgZyiVobdDpqaxkfNp4kQ1uor1zKoziITaaJYN/ZrMrhH EfRXrZCO3vVlDXl88GkClJCe0h8kh/Z5A4DPFoOHQYsmqo7U9HnO4zeCa4Pd7CQm TVtPO0WnkLGw6YYxx8b03Xtxh7p6aPKPDxdxQZh72eDvcd0b4aIl7fV4hQvuzdn2 aQ+hgnzJ+XYMURWrHK3T9GhX1WEL4oIc9xqLMuq+8mYJvuyYBh8VQycgnNVWO/1I 21Vo8VcXweyx17noudFMfFwHzZDpP5u6riuBOoYzvKPpLcniO58= -----END CERTIFICATE-----Generated at Mon Jul 21 10:53:26 2025 by rpki-client