$ rpki-client -vvf repo-rpki.idnic.net/repo/b4dadcd0-f1a9-48e4-a2c5-de1818bffe43/0/331490A5F62E7F3FD55E137CB052AC340E403BDF.mft File: 331490A5F62E7F3FD55E137CB052AC340E403BDF.mft (raw, json) Hash identifier: pVfsPHp33vdNlM2eLq62kp3cL0KF7Wn+efCkIW1mZeE= Subject key identifier: 85:10:8B:AF:E2:88:0B:7A:3D:B6:F4:D1:AF:41:85:D4:A8:EB:2F:E2 Authority key identifier: 33:14:90:A5:F6:2E:7F:3F:D5:5E:13:7C:B0:52:AC:34:0E:40:3B:DF Certificate issuer: /CN=331490A5F62E7F3FD55E137CB052AC340E403BDF Certificate serial: 457C2977A17476CD5247A2BFF3C2841B4A33D3BB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/331490A5F62E7F3FD55E137CB052AC340E403BDF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b4dadcd0-f1a9-48e4-a2c5-de1818bffe43/0/331490A5F62E7F3FD55E137CB052AC340E403BDF.mft Manifest number: 017E Signing time: Fri 18 Jul 2025 21:11:28 +0000 Manifest this update: Fri 18 Jul 2025 21:06:28 +0000 Manifest next update: Tue 22 Jul 2025 06:50:28 +0000 Files and hashes: 1: 331490A5F62E7F3FD55E137CB052AC340E403BDF.crl (hash: s1C1OtD6FxZzpKsnp7COKnW7z8N05fEX3Qw1yZObY8w=) 2: 3130332e3139322e3137342e302f32342d3234203d3e20313530353439.roa (hash: I/e8pz2HwtXx0PhrGgambRJs/dGIlkUlFDHx6iNzq9I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b4dadcd0-f1a9-48e4-a2c5-de1818bffe43/0/331490A5F62E7F3FD55E137CB052AC340E403BDF.crl rsync://repo-rpki.idnic.net/repo/b4dadcd0-f1a9-48e4-a2c5-de1818bffe43/0/331490A5F62E7F3FD55E137CB052AC340E403BDF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/331490A5F62E7F3FD55E137CB052AC340E403BDF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 06:50:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:7c:29:77:a1:74:76:cd:52:47:a2:bf:f3:c2:84:1b:4a:33:d3:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=331490A5F62E7F3FD55E137CB052AC340E403BDF Validity Not Before: Jul 18 21:06:28 2025 GMT Not After : Jul 22 06:50:28 2025 GMT Subject: CN=85108BAFE2880B7A3DB6F4D1AF4185D4A8EB2FE2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:6a:1c:59:41:01:bb:a8:4c:c0:12:d9:5c:fc: 78:43:bb:a4:5c:db:6e:d1:e1:06:4d:20:6c:4e:25: 58:47:a2:e2:b4:8f:a0:ca:89:86:2f:96:28:13:47: 9d:25:a3:3b:0a:65:4d:c2:cd:9d:53:20:ec:d4:ab: eb:85:96:f3:3d:13:21:2f:fe:ae:05:a9:b2:82:90: 26:d9:89:50:f6:ca:39:54:0a:3c:a0:5b:37:bf:5e: 7e:99:a9:25:e8:94:63:4f:69:6d:6a:29:34:19:6d: 6e:0d:14:7e:a1:d5:d4:3f:ec:66:9b:9f:4a:54:28: b7:d0:48:06:ce:09:76:d3:fe:4f:dc:e2:93:19:7b: 0f:b3:09:4a:d8:75:9d:64:3b:a2:2a:0c:63:0f:ac: 11:3d:97:78:c0:dc:da:5f:3f:fc:46:a9:8a:0e:ea: 52:4f:a9:8a:88:2b:65:b5:95:e4:7f:e8:fc:5c:f9: 68:43:81:6b:73:e7:9d:06:e6:6b:b9:c2:6c:ff:b5: dd:da:bf:1a:0c:b5:17:96:9e:1c:b6:aa:cd:20:51: 0f:bb:fe:ab:fd:59:62:f4:66:cf:d6:00:e3:34:38: bc:5e:ab:bb:b4:e2:1e:fa:68:4c:02:5f:d0:c9:7d: 29:7a:7b:36:97:dd:14:fc:06:e1:92:51:a8:e9:fc: 48:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:10:8B:AF:E2:88:0B:7A:3D:B6:F4:D1:AF:41:85:D4:A8:EB:2F:E2 X509v3 Authority Key Identifier: keyid:33:14:90:A5:F6:2E:7F:3F:D5:5E:13:7C:B0:52:AC:34:0E:40:3B:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b4dadcd0-f1a9-48e4-a2c5-de1818bffe43/0/331490A5F62E7F3FD55E137CB052AC340E403BDF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/331490A5F62E7F3FD55E137CB052AC340E403BDF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b4dadcd0-f1a9-48e4-a2c5-de1818bffe43/0/331490A5F62E7F3FD55E137CB052AC340E403BDF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:76:1b:14:b0:a8:a2:6c:d3:27:ba:26:b6:84:fd:95:cc:af: 36:44:0c:56:b5:25:f3:27:68:5f:23:e2:9c:4a:53:58:09:ed: 95:e4:70:31:16:18:ee:63:5c:af:13:4a:ec:23:28:c1:31:cf: 06:a9:14:c1:a8:f6:e6:40:62:61:04:13:65:48:9e:d1:0d:43: 27:bd:47:be:a0:75:83:65:24:1d:64:32:2f:ee:dc:a3:2a:7e: 9a:e8:08:df:4e:cf:c8:c7:bc:c5:d7:74:2a:28:9f:28:32:85: 13:90:e2:9b:9c:b0:1f:40:5b:94:8d:23:e2:6a:44:ae:1c:99: cf:5d:2b:38:58:1f:ae:f4:73:81:d0:7b:0d:64:80:82:61:d0: 4d:e6:92:00:67:18:95:5a:7c:82:06:ab:7e:d8:a3:0d:9e:62: 50:2b:b5:25:e9:ba:d1:c4:ff:96:03:b5:f0:85:73:58:05:99: 54:57:c7:23:4f:43:8f:c7:3f:40:1a:23:11:f8:00:04:82:16: e5:a6:d3:f5:0a:78:f4:00:1a:34:d0:65:a0:45:03:cb:06:41: 07:33:74:38:bd:90:e2:27:3b:9d:ea:70:0d:8e:89:a1:27:97: ca:2b:8c:71:61:16:15:4e:fb:f3:da:cf:d4:11:18:fb:69:e8: 78:5c:fd:a4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURXwpd6F0ds1SR6K/88KEG0oz07swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzMxNDkwQTVGNjJFN0YzRkQ1NUUxMzdDQjA1MkFDMzQw RTQwM0JERjAeFw0yNTA3MTgyMTA2MjhaFw0yNTA3MjIwNjUwMjhaMDMxMTAvBgNV BAMTKDg1MTA4QkFGRTI4ODBCN0EzREI2RjREMUFGNDE4NUQ0QThFQjJGRTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdahxZQQG7qEzAEtlc/HhDu6Rc 227R4QZNIGxOJVhHouK0j6DKiYYvligTR50lozsKZU3CzZ1TIOzUq+uFlvM9EyEv /q4FqbKCkCbZiVD2yjlUCjygWze/Xn6ZqSXolGNPaW1qKTQZbW4NFH6h1dQ/7Gab n0pUKLfQSAbOCXbT/k/c4pMZew+zCUrYdZ1kO6IqDGMPrBE9l3jA3NpfP/xGqYoO 6lJPqYqIK2W1leR/6Pxc+WhDgWtz550G5mu5wmz/td3avxoMtReWnhy2qs0gUQ+7 /qv9WWL0Zs/WAOM0OLxeq7u04h76aEwCX9DJfSl6ezaX3RT8BuGSUajp/EglAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhRCLr+KIC3o9tvTRr0GF1KjrL+IwHwYDVR0j BBgwFoAUMxSQpfYufz/VXhN8sFKsNA5AO98wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NGRhZGNkMC1mMWE5LTQ4ZTQtYTJjNS1kZTE4MThiZmZlNDMvMC8zMzE0OTBBNUY2 MkU3RjNGRDU1RTEzN0NCMDUyQUMzNDBFNDAzQkRGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzMxNDkwQTVGNjJFN0YzRkQ1NUUxMzdDQjA1MkFDMzQwRTQw M0JERi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjRkYWRjZDAtZjFhOS00OGU0LWEy YzUtZGUxODE4YmZmZTQzLzAvMzMxNDkwQTVGNjJFN0YzRkQ1NUUxMzdDQjA1MkFD MzQwRTQwM0JERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHR2GxSwqKJs0ye6JraE/ZXMrzZEDFa1JfMn aF8j4pxKU1gJ7ZXkcDEWGO5jXK8TSuwjKMExzwapFMGo9uZAYmEEE2VIntENQye9 R76gdYNlJB1kMi/u3KMqfproCN9Oz8jHvMXXdCoonygyhROQ4pucsB9AW5SNI+Jq RK4cmc9dKzhYH670c4HQew1kgIJh0E3mkgBnGJVafIIGq37Yow2eYlArtSXputHE /5YDtfCFc1gFmVRXxyNPQ4/HP0AaIxH4AASCFuWm0/UKePQAGjTQZaBFA8sGQQcz dDi9kOInO53qcA2OiaEnl8orjHFhFhVO+/Paz9QRGPtp6Hhc/aQ= -----END CERTIFICATE-----Generated at Mon Jul 21 02:05:13 2025 by rpki-client