$ rpki-client -vvf repo-rpki.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.mft File: 131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.mft (raw, json) Hash identifier: Ipq9T/2lA/4L3TUp7bF9x/FtLVDVoriLMwLpY7jzFxk= Subject key identifier: 21:34:B2:2E:BD:06:4F:48:C7:0C:13:5F:40:F1:72:71:32:91:4B:51 Authority key identifier: 13:18:07:BD:DA:AF:97:ED:72:21:4D:FB:C5:C5:39:AC:B0:4F:DC:BE Certificate issuer: /CN=131807BDDAAF97ED72214DFBC5C539ACB04FDCBE Certificate serial: 6AB09D9BB37712AC44BEBC625F73EF408251390E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.mft Manifest number: 0323 Signing time: Sat 01 Nov 2025 13:10:55 +0000 Manifest this update: Sat 01 Nov 2025 13:05:55 +0000 Manifest next update: Tue 04 Nov 2025 14:22:55 +0000 Files and hashes: 1: 3130332e3137342e32342e302f32332d3234203d3e20313331313131.roa (hash: IcV/PuSEjSNsy6cbDUeXZVgPYs8xhMimlvvll5vTiXU=) 2: 131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.crl (hash: jOs5Q5A1aOSRk+dh4G6Xf1jUTeJB/FSLh8LzmBYvMC0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.crl rsync://repo-rpki.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Nov 2025 09:50:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:b0:9d:9b:b3:77:12:ac:44:be:bc:62:5f:73:ef:40:82:51:39:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=131807BDDAAF97ED72214DFBC5C539ACB04FDCBE Validity Not Before: Nov 1 13:05:55 2025 GMT Not After : Nov 4 14:22:55 2025 GMT Subject: CN=2134B22EBD064F48C70C135F40F1727132914B51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:1b:21:e7:e9:96:a6:15:9c:d9:f8:51:0a:5a: f8:dc:cc:9f:fd:c5:d8:a8:cb:93:bf:1e:68:7d:ce: cb:e6:20:06:d6:35:df:1a:a8:26:97:f7:22:c5:36: 52:4c:12:95:14:2d:83:dc:91:a4:f3:9b:ef:80:4b: b9:cb:65:aa:55:3a:e2:5a:14:82:25:d3:c9:71:7e: e8:82:65:bd:02:04:e3:c7:13:d9:fb:6d:f2:41:2b: 1b:71:f3:d9:38:9a:0a:35:ab:5a:7e:fd:b7:14:1c: 9d:3b:76:b0:03:b1:ea:48:71:0b:fe:72:1f:67:42: b1:e1:18:e0:5d:c5:bf:c1:62:8b:23:da:94:1b:c6: 8e:9b:41:f8:68:c9:de:60:c4:60:26:e4:d0:a8:b2: ab:ab:a8:3c:41:57:68:35:9c:63:29:e8:d3:8c:0d: f2:cb:38:bf:0a:52:f3:61:64:c6:50:35:04:fe:12: b9:fa:47:0f:10:bc:12:ce:cd:d9:4f:3f:7a:a3:f1: 71:3a:d7:29:3e:76:07:ef:3a:e7:fc:26:7a:c0:4e: 01:cb:74:30:ff:58:27:08:3f:ab:1d:63:8b:0e:e6: 72:cd:d7:74:0e:aa:9b:aa:41:8d:f0:d2:02:a0:e8: e1:0e:05:e9:91:4c:a4:14:c7:8f:6f:38:c7:fb:2e: f7:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:34:B2:2E:BD:06:4F:48:C7:0C:13:5F:40:F1:72:71:32:91:4B:51 X509v3 Authority Key Identifier: keyid:13:18:07:BD:DA:AF:97:ED:72:21:4D:FB:C5:C5:39:AC:B0:4F:DC:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:55:26:67:b5:08:34:e0:39:0a:77:43:11:41:6b:90:4b:c0: 60:b3:0b:b6:cc:90:81:bd:26:b7:a1:23:4c:92:b0:82:31:32: f2:d0:8e:8f:c8:10:d2:81:29:3e:51:b0:ae:b4:ce:43:36:10: 7e:1b:8d:9c:b9:01:31:6d:29:68:56:3d:07:76:54:94:9d:56: b8:be:62:87:c0:56:47:e4:a1:64:b9:b6:c5:5a:37:e8:bc:1e: 14:2f:d0:3d:65:b6:b6:bb:9d:17:d3:47:56:98:75:25:c3:66: ad:69:a2:34:1f:c6:63:88:5b:02:41:6b:09:65:ed:e9:a1:b6: c1:56:ca:e9:20:f4:e6:3a:cd:9c:0f:16:65:90:5c:32:f2:d8: 9d:99:98:89:55:22:a3:01:df:8e:53:82:c4:a3:bf:87:d2:7e: a0:4a:e5:93:3e:60:28:ed:a9:ec:67:d2:6b:cc:4d:f2:cc:80: bb:93:28:09:44:8e:76:dd:f9:9b:cb:a3:23:3f:5d:8d:7b:d3: cf:f9:c5:61:7c:cf:e5:64:cd:76:cc:8a:b4:49:31:aa:2b:76: c9:53:2e:ae:e0:e0:04:52:fa:89:2c:4b:8d:ce:67:6b:99:40: 06:1a:12:59:c6:98:ca:6b:25:94:5a:20:27:b9:53:b3:cf:d8: 5e:ad:87:39 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUarCdm7N3EqxEvrxiX3PvQIJROQ4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTMxODA3QkREQUFGOTdFRDcyMjE0REZCQzVDNTM5QUNC MDRGRENCRTAeFw0yNTExMDExMzA1NTVaFw0yNTExMDQxNDIyNTVaMDMxMTAvBgNV BAMTKDIxMzRCMjJFQkQwNjRGNDhDNzBDMTM1RjQwRjE3MjcxMzI5MTRCNTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChGyHn6ZamFZzZ+FEKWvjczJ/9 xdioy5O/Hmh9zsvmIAbWNd8aqCaX9yLFNlJMEpUULYPckaTzm++AS7nLZapVOuJa FIIl08lxfuiCZb0CBOPHE9n7bfJBKxtx89k4mgo1q1p+/bcUHJ07drADsepIcQv+ ch9nQrHhGOBdxb/BYosj2pQbxo6bQfhoyd5gxGAm5NCosqurqDxBV2g1nGMp6NOM DfLLOL8KUvNhZMZQNQT+Ern6Rw8QvBLOzdlPP3qj8XE61yk+dgfvOuf8JnrATgHL dDD/WCcIP6sdY4sO5nLN13QOqpuqQY3w0gKg6OEOBemRTKQUx49vOMf7LvdVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUITSyLr0GT0jHDBNfQPFycTKRS1EwHwYDVR0j BBgwFoAUExgHvdqvl+1yIU37xcU5rLBP3L4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZjI1Yjk2OC0wOTI3LTQ1OTQtODg3ZS02N2Y1M2Y5NjdiMTIvMC8xMzE4MDdCRERB QUY5N0VENzIyMTRERkJDNUM1MzlBQ0IwNEZEQ0JFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTMxODA3QkREQUFGOTdFRDcyMjE0REZCQzVDNTM5QUNCMDRG RENCRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmYyNWI5NjgtMDkyNy00NTk0LTg4 N2UtNjdmNTNmOTY3YjEyLzAvMTMxODA3QkREQUFGOTdFRDcyMjE0REZCQzVDNTM5 QUNCMDRGRENCRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH9VJme1CDTgOQp3QxFBa5BLwGCzC7bMkIG9 JrehI0ySsIIxMvLQjo/IENKBKT5RsK60zkM2EH4bjZy5ATFtKWhWPQd2VJSdVri+ YofAVkfkoWS5tsVaN+i8HhQv0D1ltra7nRfTR1aYdSXDZq1pojQfxmOIWwJBawll 7emhtsFWyukg9OY6zZwPFmWQXDLy2J2ZmIlVIqMB345TgsSjv4fSfqBK5ZM+YCjt qexn0mvMTfLMgLuTKAlEjnbd+ZvLoyM/XY1708/5xWF8z+VkzXbMirRJMaordslT Lq7g4ARS+oksS43OZ2uZQAYaElnGmMprJZRaICe5U7PP2F6thzk= -----END CERTIFICATE-----Generated at Sun Nov 2 05:08:10 2025 by rpki-client