$ rpki-client -vvf repo-rpki.idnic.net/repo/b4dadcd0-f1a9-48e4-a2c5-de1818bffe43/0/331490A5F62E7F3FD55E137CB052AC340E403BDF.mft File: 331490A5F62E7F3FD55E137CB052AC340E403BDF.mft (raw, json) Hash identifier: 9jrurYmLMpJ00Om3ffmYxXbpQ2yLn65u9RB6IukCHhY= Subject key identifier: 23:FC:49:79:1F:B7:C3:D6:AF:38:EE:A7:85:2F:7C:BE:96:32:61:FB Authority key identifier: 33:14:90:A5:F6:2E:7F:3F:D5:5E:13:7C:B0:52:AC:34:0E:40:3B:DF Certificate issuer: /CN=331490A5F62E7F3FD55E137CB052AC340E403BDF Certificate serial: 17C0C59C86385E7DB64612CB94D427432ACC9F5F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/331490A5F62E7F3FD55E137CB052AC340E403BDF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b4dadcd0-f1a9-48e4-a2c5-de1818bffe43/0/331490A5F62E7F3FD55E137CB052AC340E403BDF.mft Manifest number: 0193 Signing time: Wed 03 Sep 2025 16:01:30 +0000 Manifest this update: Wed 03 Sep 2025 15:56:30 +0000 Manifest next update: Sat 06 Sep 2025 16:54:30 +0000 Files and hashes: 1: 331490A5F62E7F3FD55E137CB052AC340E403BDF.crl (hash: hhFNmmakZ9hgg919zbUbedLzNTGrdIBZWVsD3QZnGws=) 2: 3130332e3139322e3137342e302f32342d3234203d3e20313530353439.roa (hash: I/e8pz2HwtXx0PhrGgambRJs/dGIlkUlFDHx6iNzq9I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b4dadcd0-f1a9-48e4-a2c5-de1818bffe43/0/331490A5F62E7F3FD55E137CB052AC340E403BDF.crl rsync://repo-rpki.idnic.net/repo/b4dadcd0-f1a9-48e4-a2c5-de1818bffe43/0/331490A5F62E7F3FD55E137CB052AC340E403BDF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/331490A5F62E7F3FD55E137CB052AC340E403BDF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 16:54:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:c0:c5:9c:86:38:5e:7d:b6:46:12:cb:94:d4:27:43:2a:cc:9f:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=331490A5F62E7F3FD55E137CB052AC340E403BDF Validity Not Before: Sep 3 15:56:30 2025 GMT Not After : Sep 6 16:54:30 2025 GMT Subject: CN=23FC49791FB7C3D6AF38EEA7852F7CBE963261FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e1:ae:8e:47:16:c2:9a:7e:b9:bd:86:ee:44: fb:c1:89:5a:bc:7b:00:4a:76:9c:0e:f5:9f:b5:41: 09:c6:3b:3f:e3:8c:f0:f5:15:ad:20:b8:d9:9a:64: fc:5b:f2:d7:ef:4c:0b:3b:dc:77:87:b7:e6:e0:4f: 0d:c6:86:03:75:0a:b2:66:1b:ed:92:2c:dd:de:83: cb:25:f7:6a:4c:5e:a0:86:d0:c6:d8:42:18:2c:ca: c9:17:8f:b8:4d:e9:0e:12:d5:6e:ba:e1:7f:d7:91: 3a:47:06:cd:8c:86:d3:94:5b:aa:80:b7:2b:79:1a: a1:00:db:4a:74:11:d0:e8:19:e7:92:d3:ab:a1:7c: 9d:5b:a0:b7:ff:44:26:8e:4c:ec:bb:06:60:0f:ed: b3:75:6a:93:0d:68:d1:49:9c:11:74:2f:53:24:43: 66:84:52:81:3b:b6:ff:bb:e6:22:65:52:61:9d:0a: 8f:a9:92:2d:07:d2:bf:4d:4a:07:65:43:c0:4c:ab: 6c:8a:32:a1:ae:d3:98:c3:3b:80:7d:fa:d8:4c:1e: a7:b7:f1:f4:5a:2e:dc:ba:11:22:c2:6a:7e:4a:aa: 95:e1:10:ca:9a:8c:34:6a:69:aa:aa:31:4a:da:b6: 91:e4:07:cf:24:11:0c:37:5d:a3:51:aa:16:f9:50: ab:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:FC:49:79:1F:B7:C3:D6:AF:38:EE:A7:85:2F:7C:BE:96:32:61:FB X509v3 Authority Key Identifier: keyid:33:14:90:A5:F6:2E:7F:3F:D5:5E:13:7C:B0:52:AC:34:0E:40:3B:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b4dadcd0-f1a9-48e4-a2c5-de1818bffe43/0/331490A5F62E7F3FD55E137CB052AC340E403BDF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/331490A5F62E7F3FD55E137CB052AC340E403BDF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b4dadcd0-f1a9-48e4-a2c5-de1818bffe43/0/331490A5F62E7F3FD55E137CB052AC340E403BDF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:07:f3:f7:48:0d:8a:98:cd:8c:f5:4b:c1:c9:b2:85:e0:b4: 33:b2:9f:2b:60:68:d9:3a:27:9b:1d:85:84:ce:2a:7b:97:3c: 39:56:c3:b0:96:0a:c8:7c:f8:5b:ed:c0:2c:38:00:c0:2f:a8: eb:0f:08:14:40:83:27:b0:4b:22:61:cb:43:91:86:5d:5e:1d: 72:fd:0d:18:cc:c8:ee:b4:87:6b:cb:fa:40:53:27:9b:08:c3: cf:6a:59:44:17:8d:31:25:75:19:ec:dc:4a:78:08:ef:80:39: 82:22:8a:64:77:32:c4:a6:30:b7:3c:2d:65:e5:9b:3d:fc:e2: 8d:a4:2e:fb:10:d1:d0:7e:38:fa:22:6e:3f:ca:63:e5:50:9c: e8:c4:37:7f:a2:31:12:2e:75:76:cf:d2:7e:4d:be:b2:45:e0: ec:df:31:d8:60:66:51:f8:11:dd:4b:da:8a:84:c9:0d:b6:cd: 3c:74:b4:fb:15:45:14:fa:12:e0:d5:0f:d1:ea:2e:d6:a8:23: 28:af:3e:7f:9a:07:b0:93:3d:32:c8:35:2c:e6:32:36:16:6d: ba:eb:42:0d:f7:49:bf:c2:f7:51:ea:29:4e:7a:08:15:8c:86: ce:1f:79:1f:23:66:9b:a4:55:85:6e:c8:7d:c5:03:78:23:b9: 7e:81:76:37 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF8DFnIY4Xn22RhLLlNQnQyrMn18wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzMxNDkwQTVGNjJFN0YzRkQ1NUUxMzdDQjA1MkFDMzQw RTQwM0JERjAeFw0yNTA5MDMxNTU2MzBaFw0yNTA5MDYxNjU0MzBaMDMxMTAvBgNV BAMTKDIzRkM0OTc5MUZCN0MzRDZBRjM4RUVBNzg1MkY3Q0JFOTYzMjYxRkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC44a6ORxbCmn65vYbuRPvBiVq8 ewBKdpwO9Z+1QQnGOz/jjPD1Fa0guNmaZPxb8tfvTAs73HeHt+bgTw3GhgN1CrJm G+2SLN3eg8sl92pMXqCG0MbYQhgsyskXj7hN6Q4S1W664X/XkTpHBs2MhtOUW6qA tyt5GqEA20p0EdDoGeeS06uhfJ1boLf/RCaOTOy7BmAP7bN1apMNaNFJnBF0L1Mk Q2aEUoE7tv+75iJlUmGdCo+pki0H0r9NSgdlQ8BMq2yKMqGu05jDO4B9+thMHqe3 8fRaLty6ESLCan5KqpXhEMqajDRqaaqqMUratpHkB88kEQw3XaNRqhb5UKt9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUI/xJeR+3w9avOO6nhS98vpYyYfswHwYDVR0j BBgwFoAUMxSQpfYufz/VXhN8sFKsNA5AO98wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NGRhZGNkMC1mMWE5LTQ4ZTQtYTJjNS1kZTE4MThiZmZlNDMvMC8zMzE0OTBBNUY2 MkU3RjNGRDU1RTEzN0NCMDUyQUMzNDBFNDAzQkRGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzMxNDkwQTVGNjJFN0YzRkQ1NUUxMzdDQjA1MkFDMzQwRTQw M0JERi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjRkYWRjZDAtZjFhOS00OGU0LWEy YzUtZGUxODE4YmZmZTQzLzAvMzMxNDkwQTVGNjJFN0YzRkQ1NUUxMzdDQjA1MkFD MzQwRTQwM0JERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA4H8/dIDYqYzYz1S8HJsoXgtDOynytgaNk6 J5sdhYTOKnuXPDlWw7CWCsh8+FvtwCw4AMAvqOsPCBRAgyewSyJhy0ORhl1eHXL9 DRjMyO60h2vL+kBTJ5sIw89qWUQXjTEldRns3Ep4CO+AOYIiimR3MsSmMLc8LWXl mz384o2kLvsQ0dB+OPoibj/KY+VQnOjEN3+iMRIudXbP0n5NvrJF4OzfMdhgZlH4 Ed1L2oqEyQ22zTx0tPsVRRT6EuDVD9HqLtaoIyivPn+aB7CTPTLINSzmMjYWbbrr Qg33Sb/C91HqKU56CBWMhs4feR8jZpukVYVuyH3FA3gjuX6Bdjc= -----END CERTIFICATE-----Generated at Fri Sep 5 12:12:14 2025 by rpki-client