$ rpki-client -vvf repo-rpki.idnic.net/repo/ad598e99-e9ff-4abe-b08e-226fdd07f9ae/0/516450A151C5487FCC5911F4C18941CA895B07A5.mft File: 516450A151C5487FCC5911F4C18941CA895B07A5.mft (raw, json) Hash identifier: 40359SHEDab3UQJaacu/OoqLYwLyHNS5roZUz7ziHAE= Subject key identifier: 49:7B:1A:89:F9:05:A4:E7:E8:E4:C8:10:28:F1:7A:F6:A5:F0:B4:60 Authority key identifier: 51:64:50:A1:51:C5:48:7F:CC:59:11:F4:C1:89:41:CA:89:5B:07:A5 Certificate issuer: /CN=516450A151C5487FCC5911F4C18941CA895B07A5 Certificate serial: 3B6ED4C4BDF1740C5BC031382746BBCB4C57D2A1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/516450A151C5487FCC5911F4C18941CA895B07A5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ad598e99-e9ff-4abe-b08e-226fdd07f9ae/0/516450A151C5487FCC5911F4C18941CA895B07A5.mft Manifest number: 031B Signing time: Tue 28 Oct 2025 09:00:55 +0000 Manifest this update: Tue 28 Oct 2025 08:55:55 +0000 Manifest next update: Fri 31 Oct 2025 12:55:55 +0000 Files and hashes: 1: 3130332e3134342e31392e302f32342d3234203d3e20313339343138.roa (hash: NPTNkAFeiU4perz1lh+B9xb1IjABewQG5b/Cldme2U8=) 2: 3130332e3134342e31382e302f32342d3234203d3e20313339343138.roa (hash: +9l9/c1oHNd6x+rotlaCAqAorgvfQYB/2M8mOFajTwg=) 3: 323430353a363263303a3a2f33322d3332203d3e20313339343138.roa (hash: z85xof54DRtz327x0y44Pw+jx9DlTvA8Q/kbbufAMJs=) 4: 516450A151C5487FCC5911F4C18941CA895B07A5.crl (hash: wOC7fVHLvadIoRkwRDA7AkjMG/gKHS5VpWGP6znbbvI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ad598e99-e9ff-4abe-b08e-226fdd07f9ae/0/516450A151C5487FCC5911F4C18941CA895B07A5.crl rsync://repo-rpki.idnic.net/repo/ad598e99-e9ff-4abe-b08e-226fdd07f9ae/0/516450A151C5487FCC5911F4C18941CA895B07A5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/516450A151C5487FCC5911F4C18941CA895B07A5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 Oct 2025 12:55:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:6e:d4:c4:bd:f1:74:0c:5b:c0:31:38:27:46:bb:cb:4c:57:d2:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=516450A151C5487FCC5911F4C18941CA895B07A5 Validity Not Before: Oct 28 08:55:55 2025 GMT Not After : Oct 31 12:55:55 2025 GMT Subject: CN=497B1A89F905A4E7E8E4C81028F17AF6A5F0B460 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:98:23:9f:3a:7a:76:cc:3b:5d:df:59:50:c8: 81:7d:a1:de:2b:4b:ea:59:c2:fe:7d:c6:69:17:fd: 44:33:2f:36:ad:79:d9:9f:4e:86:e3:dd:85:27:ed: 69:a5:c4:ef:81:6f:0f:87:8e:61:3a:6a:85:7c:d2: 59:9a:32:1e:91:05:92:46:ad:a3:36:b9:7d:2c:6a: 6f:70:cf:68:77:a9:e7:ec:f6:04:1a:b8:38:3c:ff: ff:24:b7:ab:2f:d1:bd:f2:a0:69:6c:69:3c:4b:6d: 50:8a:e2:72:68:87:20:e7:54:25:1d:08:10:0e:c5: ba:25:c6:fa:ef:7f:75:01:58:06:35:06:9c:17:89: d6:50:73:f2:66:c6:98:3a:33:a6:76:30:91:88:cd: 17:87:05:37:2b:d5:38:51:47:14:a9:a1:80:54:a6: b9:a8:88:59:e6:b5:00:d0:66:5b:b7:c3:f1:9a:5c: 11:b0:4d:19:c5:bd:2c:26:63:be:76:33:3b:1a:b9: f5:c8:38:76:9a:3f:5a:c4:b1:ec:02:76:80:c4:57: ed:4c:36:d7:85:aa:1c:a0:9d:52:e1:fd:d1:e7:c4: d5:f8:3f:8d:d6:e2:5b:46:20:16:b3:ae:cf:26:e8: 19:d8:d2:3e:e0:35:4e:d6:8e:e9:83:a6:26:87:df: c6:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:7B:1A:89:F9:05:A4:E7:E8:E4:C8:10:28:F1:7A:F6:A5:F0:B4:60 X509v3 Authority Key Identifier: keyid:51:64:50:A1:51:C5:48:7F:CC:59:11:F4:C1:89:41:CA:89:5B:07:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ad598e99-e9ff-4abe-b08e-226fdd07f9ae/0/516450A151C5487FCC5911F4C18941CA895B07A5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/516450A151C5487FCC5911F4C18941CA895B07A5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ad598e99-e9ff-4abe-b08e-226fdd07f9ae/0/516450A151C5487FCC5911F4C18941CA895B07A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:69:b8:40:89:6e:84:16:49:8c:ef:34:54:05:54:db:61:f3: 3f:69:90:95:fb:da:73:dd:35:ec:ca:77:0d:e3:92:91:06:8f: bc:c9:5f:20:9f:ab:36:a8:ff:3a:7c:de:ac:39:68:f2:4f:ea: 08:98:f4:c0:3b:7a:a5:23:0c:6b:ec:58:22:8d:3f:a9:83:fe: df:ce:53:b6:0d:62:8e:20:34:07:26:3f:ae:e7:e7:9c:23:44: 3f:78:54:10:38:6f:1c:51:e5:a8:bf:a8:96:61:73:28:d6:e4: 8f:91:91:95:76:37:b5:5c:94:c6:17:f6:cb:92:c1:39:3d:a3: f1:42:4a:7b:71:74:bc:86:f0:e2:2a:61:98:de:2f:39:7d:29: 9e:9e:b1:d7:9e:fe:e2:c6:da:24:8f:cd:c9:24:0e:cf:54:f8: 87:d9:8a:6f:57:8a:91:6b:21:b7:32:44:96:12:84:78:c7:37: b0:dd:7d:c0:3d:06:45:41:02:e4:0b:33:87:68:a4:45:22:33: 04:8f:04:ef:84:e3:ba:15:42:d3:89:63:e4:e3:9d:9c:17:db: 77:7f:77:2c:4f:4d:87:47:32:13:d0:b0:75:72:a0:72:ad:94: f4:56:4a:0c:7a:26:ab:31:0b:d6:8a:14:c1:22:a4:a1:f3:3f: 65:43:bf:e2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO27UxL3xdAxbwDE4J0a7y0xX0qEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTE2NDUwQTE1MUM1NDg3RkNDNTkxMUY0QzE4OTQxQ0E4 OTVCMDdBNTAeFw0yNTEwMjgwODU1NTVaFw0yNTEwMzExMjU1NTVaMDMxMTAvBgNV BAMTKDQ5N0IxQTg5RjkwNUE0RTdFOEU0QzgxMDI4RjE3QUY2QTVGMEI0NjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAmCOfOnp2zDtd31lQyIF9od4r S+pZwv59xmkX/UQzLzatedmfTobj3YUn7WmlxO+Bbw+HjmE6aoV80lmaMh6RBZJG raM2uX0sam9wz2h3qefs9gQauDg8//8kt6sv0b3yoGlsaTxLbVCK4nJohyDnVCUd CBAOxbolxvrvf3UBWAY1BpwXidZQc/Jmxpg6M6Z2MJGIzReHBTcr1ThRRxSpoYBU prmoiFnmtQDQZlu3w/GaXBGwTRnFvSwmY752MzsaufXIOHaaP1rEsewCdoDEV+1M NteFqhygnVLh/dHnxNX4P43W4ltGIBazrs8m6BnY0j7gNU7WjumDpiaH38bPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSXsaifkFpOfo5MgQKPF69qXwtGAwHwYDVR0j BBgwFoAUUWRQoVHFSH/MWRH0wYlByolbB6UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZDU5OGU5OS1lOWZmLTRhYmUtYjA4ZS0yMjZmZGQwN2Y5YWUvMC81MTY0NTBBMTUx QzU0ODdGQ0M1OTExRjRDMTg5NDFDQTg5NUIwN0E1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTE2NDUwQTE1MUM1NDg3RkNDNTkxMUY0QzE4OTQxQ0E4OTVC MDdBNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWQ1OThlOTktZTlmZi00YWJlLWIw OGUtMjI2ZmRkMDdmOWFlLzAvNTE2NDUwQTE1MUM1NDg3RkNDNTkxMUY0QzE4OTQx Q0E4OTVCMDdBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF1puECJboQWSYzvNFQFVNth8z9pkJX72nPd NezKdw3jkpEGj7zJXyCfqzao/zp83qw5aPJP6giY9MA7eqUjDGvsWCKNP6mD/t/O U7YNYo4gNAcmP67n55wjRD94VBA4bxxR5ai/qJZhcyjW5I+RkZV2N7VclMYX9suS wTk9o/FCSntxdLyG8OIqYZjeLzl9KZ6esdee/uLG2iSPzckkDs9U+IfZim9XipFr IbcyRJYShHjHN7DdfcA9BkVBAuQLM4dopEUiMwSPBO+E47oVQtOJY+TjnZwX23d/ dyxPTYdHMhPQsHVyoHKtlPRWSgx6JqsxC9aKFMEipKHzP2VDv+I= -----END CERTIFICATE-----Generated at Tue Oct 28 16:05:15 2025 by rpki-client