$ rpki-client -vvf repo-rpki.idnic.net/repo/96b1ab7f-e451-40d1-9b70-3a4022a9b4ec/0/1631B9A0997CBC975099A6FF7E27DCA3FDC649BA.mft File: 1631B9A0997CBC975099A6FF7E27DCA3FDC649BA.mft (raw, json) Hash identifier: P667Tbni3qbqHQMUq1IpEhyvrPOnoB4o1Ae7/p8APrE= Subject key identifier: AB:4B:5A:26:A7:27:25:EB:DA:7F:9D:3C:86:0D:77:CD:66:5E:96:3B Authority key identifier: 16:31:B9:A0:99:7C:BC:97:50:99:A6:FF:7E:27:DC:A3:FD:C6:49:BA Certificate issuer: /CN=1631B9A0997CBC975099A6FF7E27DCA3FDC649BA Certificate serial: 1841A7120875F1F20FBC3E7B53520DD8F8E981EE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1631B9A0997CBC975099A6FF7E27DCA3FDC649BA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/96b1ab7f-e451-40d1-9b70-3a4022a9b4ec/0/1631B9A0997CBC975099A6FF7E27DCA3FDC649BA.mft Manifest number: 016B Signing time: Fri 05 Sep 2025 19:51:35 +0000 Manifest this update: Fri 05 Sep 2025 19:46:35 +0000 Manifest next update: Tue 09 Sep 2025 04:10:35 +0000 Files and hashes: 1: 3230322e35382e3233382e302f32332d3234203d3e203436303237.roa (hash: TVHLoA6S/RXowJVfDxEwT3G/jcn7qgjqSJZOEgaAkds=) 2: 1631B9A0997CBC975099A6FF7E27DCA3FDC649BA.crl (hash: /KJjWe75vLBm7g3NQLVqF39G4ztJr56xzkbjioCAGFw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/96b1ab7f-e451-40d1-9b70-3a4022a9b4ec/0/1631B9A0997CBC975099A6FF7E27DCA3FDC649BA.crl rsync://repo-rpki.idnic.net/repo/96b1ab7f-e451-40d1-9b70-3a4022a9b4ec/0/1631B9A0997CBC975099A6FF7E27DCA3FDC649BA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1631B9A0997CBC975099A6FF7E27DCA3FDC649BA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 04:10:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:41:a7:12:08:75:f1:f2:0f:bc:3e:7b:53:52:0d:d8:f8:e9:81:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1631B9A0997CBC975099A6FF7E27DCA3FDC649BA Validity Not Before: Sep 5 19:46:35 2025 GMT Not After : Sep 9 04:10:35 2025 GMT Subject: CN=AB4B5A26A72725EBDA7F9D3C860D77CD665E963B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:e9:62:75:72:ec:5b:02:9a:73:76:b4:3c:33: 6c:6c:a9:81:f8:33:20:44:66:cc:83:c6:da:71:09: 01:70:a9:c4:c9:f7:f1:98:ef:e2:fa:53:75:7c:5f: 06:03:7c:8d:4b:74:7d:85:2c:fc:a9:d0:46:fb:d6: 79:4f:3e:de:b5:f0:e7:58:c6:78:58:65:38:d5:1e: f4:9a:d4:f3:23:45:82:c9:89:37:b9:3d:4c:68:16: 0e:be:f2:e2:57:a4:13:ae:d7:10:c0:8c:10:9e:d1: 9b:61:dc:5a:d7:f5:6a:e8:86:aa:b0:b9:48:d5:bf: b7:7e:5d:e5:04:b3:9d:b9:90:21:90:7d:89:49:fc: 2f:55:b2:f7:dc:7d:92:b8:7e:67:7c:93:92:78:1b: d4:56:a3:0f:7a:8d:ce:c4:27:eb:6c:66:75:bf:66: a1:2b:5b:27:8e:eb:9f:d9:62:76:36:24:d6:7f:d3: ce:da:31:bb:4b:8e:9d:60:9c:cd:59:f5:b9:f6:c3: eb:4f:df:c0:df:18:7b:7f:92:53:89:8c:df:44:15: 3f:d3:19:e6:31:a7:9d:0d:91:c5:bb:ca:95:74:de: c5:c8:42:98:84:9d:50:80:54:64:4d:20:1a:18:42: e7:86:f5:6e:d4:71:2a:d2:bd:8c:3f:1e:3f:a0:fe: bd:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:4B:5A:26:A7:27:25:EB:DA:7F:9D:3C:86:0D:77:CD:66:5E:96:3B X509v3 Authority Key Identifier: keyid:16:31:B9:A0:99:7C:BC:97:50:99:A6:FF:7E:27:DC:A3:FD:C6:49:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/96b1ab7f-e451-40d1-9b70-3a4022a9b4ec/0/1631B9A0997CBC975099A6FF7E27DCA3FDC649BA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1631B9A0997CBC975099A6FF7E27DCA3FDC649BA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/96b1ab7f-e451-40d1-9b70-3a4022a9b4ec/0/1631B9A0997CBC975099A6FF7E27DCA3FDC649BA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:2c:5b:cd:ea:d9:45:54:03:8c:6d:14:d2:fb:4c:5f:b0:37: 3f:f7:49:7a:60:06:a6:d1:ea:c8:b5:bc:51:15:4f:ec:6e:60: 4c:7b:7f:e9:78:e4:6a:e2:87:65:6f:0d:db:f3:bb:4d:e8:95: f8:7c:7e:c4:27:21:9e:dc:1f:1d:71:b3:50:72:b6:91:46:78: 5f:eb:6a:e1:ae:56:92:7f:9b:91:92:e3:cc:e2:06:32:02:f7: 78:f0:20:3b:72:09:66:eb:dc:a9:93:f4:c0:38:b9:21:7f:d1: 53:78:bd:ae:80:ac:b1:f1:49:93:65:82:6b:10:56:55:b1:bf: 67:fd:c3:e5:eb:56:04:be:28:a4:66:09:41:50:55:bf:d2:73: e8:d2:75:b1:19:ea:90:d6:c7:32:7e:60:b0:0a:15:fc:3d:57: 72:41:28:27:34:ef:d8:57:2e:47:88:cf:0b:28:d9:76:99:19: 9c:12:53:60:6c:cf:1e:9b:49:48:7b:05:a9:6d:b5:b0:78:7f: ee:f2:37:31:e7:17:22:6c:8c:62:76:72:d5:af:78:a4:df:8d: 99:45:9f:b9:9c:3c:76:91:01:a4:44:d6:85:8d:f3:59:42:a6: 84:e0:c2:9f:6b:61:a4:3d:87:42:bc:96:b3:3b:09:ac:0a:86: 49:b6:62:38 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGEGnEgh18fIPvD57U1IN2Pjpge4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTYzMUI5QTA5OTdDQkM5NzUwOTlBNkZGN0UyN0RDQTNG REM2NDlCQTAeFw0yNTA5MDUxOTQ2MzVaFw0yNTA5MDkwNDEwMzVaMDMxMTAvBgNV BAMTKEFCNEI1QTI2QTcyNzI1RUJEQTdGOUQzQzg2MEQ3N0NENjY1RTk2M0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn6WJ1cuxbAppzdrQ8M2xsqYH4 MyBEZsyDxtpxCQFwqcTJ9/GY7+L6U3V8XwYDfI1LdH2FLPyp0Eb71nlPPt618OdY xnhYZTjVHvSa1PMjRYLJiTe5PUxoFg6+8uJXpBOu1xDAjBCe0Zth3FrX9Wrohqqw uUjVv7d+XeUEs525kCGQfYlJ/C9VsvfcfZK4fmd8k5J4G9RWow96jc7EJ+tsZnW/ ZqErWyeO65/ZYnY2JNZ/087aMbtLjp1gnM1Z9bn2w+tP38DfGHt/klOJjN9EFT/T GeYxp50NkcW7ypV03sXIQpiEnVCAVGRNIBoYQueG9W7UcSrSvYw/Hj+g/r1NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUq0taJqcnJevaf508hg13zWZeljswHwYDVR0j BBgwFoAUFjG5oJl8vJdQmab/fifco/3GSbowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NmIxYWI3Zi1lNDUxLTQwZDEtOWI3MC0zYTQwMjJhOWI0ZWMvMC8xNjMxQjlBMDk5 N0NCQzk3NTA5OUE2RkY3RTI3RENBM0ZEQzY0OUJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTYzMUI5QTA5OTdDQkM5NzUwOTlBNkZGN0UyN0RDQTNGREM2 NDlCQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTZiMWFiN2YtZTQ1MS00MGQxLTli NzAtM2E0MDIyYTliNGVjLzAvMTYzMUI5QTA5OTdDQkM5NzUwOTlBNkZGN0UyN0RD QTNGREM2NDlCQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKEsW83q2UVUA4xtFNL7TF+wNz/3SXpgBqbR 6si1vFEVT+xuYEx7f+l45Grih2VvDdvzu03olfh8fsQnIZ7cHx1xs1BytpFGeF/r auGuVpJ/m5GS48ziBjIC93jwIDtyCWbr3KmT9MA4uSF/0VN4va6ArLHxSZNlgmsQ VlWxv2f9w+XrVgS+KKRmCUFQVb/Sc+jSdbEZ6pDWxzJ+YLAKFfw9V3JBKCc079hX LkeIzwso2XaZGZwSU2Bszx6bSUh7BalttbB4f+7yNzHnFyJsjGJ2ctWveKTfjZlF n7mcPHaRAaRE1oWN81lCpoTgwp9rYaQ9h0K8lrM7CawKhkm2Yjg= -----END CERTIFICATE-----Generated at Sun Sep 7 15:25:41 2025 by rpki-client