$ rpki-client -vvf repo-rpki.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/03315D0E966A85B878EA9058B8CF03EAF2881889.mft File: 03315D0E966A85B878EA9058B8CF03EAF2881889.mft (raw, json) Hash identifier: DNG6v4RYfItA8x5x7NIYH+sH+9tWg2juHTcn3QgaMUM= Subject key identifier: 07:C9:16:F6:AD:4E:D1:BA:88:ED:1D:6A:78:69:CB:E0:20:92:C8:B6 Authority key identifier: 03:31:5D:0E:96:6A:85:B8:78:EA:90:58:B8:CF:03:EA:F2:88:18:89 Certificate issuer: /CN=03315D0E966A85B878EA9058B8CF03EAF2881889 Certificate serial: 68BA98A578F4B879EE396D1CD88BCEAFF874C10E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03315D0E966A85B878EA9058B8CF03EAF2881889.cer Subject info access: rsync://repo-rpki.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/03315D0E966A85B878EA9058B8CF03EAF2881889.mft Manifest number: 0517 Signing time: Sun 19 Oct 2025 11:51:53 +0000 Manifest this update: Sun 19 Oct 2025 11:46:53 +0000 Manifest next update: Wed 22 Oct 2025 17:49:53 +0000 Files and hashes: 1: 3133392e352e34302e302f32322d3234203d3e20313335343438.roa (hash: FiOfMQpB+2gj2/QXJXJKgiwN/buCJemHWYRysKfxPV0=) 2: 34352e3132352e37322e302f32322d3234203d3e20313335343438.roa (hash: 0xR4iUHdKDDCOxdGEjjw5dfszyruo+MDrchNeNEqs2w=) 3: 03315D0E966A85B878EA9058B8CF03EAF2881889.crl (hash: 8qv9zobbhpLEdH5KnEgtq8t18vu7b62A3OP0QFQnjrE=) 4: 34352e3132322e35322e302f32322d3234203d3e20313335343438.roa (hash: DkpLk9wjtee+olEloYKtXa5HH1pKUw3+B87062+6qXc=) 5: 3130332e36342e31342e302f32342d3234203d3e20313335343438.roa (hash: QC8bpRsjoPax2VeFVISF7pou7WEj+SsbxVAbvHu+cPo=) 6: 3130332e3131372e38322e302f32332d3234203d3e20313335343438.roa (hash: FQaLrXQaTAavmrBmVo9QPPvdOGdpfu5PAx/qFXOh+QY=) 7: 3132352e36322e39322e302f32322d3234203d3e20313338383032.roa (hash: /mrf9uGudGqcY2xOJDkK2ay/Dazo8lduBDgmiiL0FaY=) 8: 3130332e39372e3235312e302f32342d3234203d3e20313335343438.roa (hash: hoLbivleHtt89cCReqbvfZYyTkoCRfwcqA081C1+9Gw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/03315D0E966A85B878EA9058B8CF03EAF2881889.crl rsync://repo-rpki.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/03315D0E966A85B878EA9058B8CF03EAF2881889.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03315D0E966A85B878EA9058B8CF03EAF2881889.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 17:49:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:ba:98:a5:78:f4:b8:79:ee:39:6d:1c:d8:8b:ce:af:f8:74:c1:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03315D0E966A85B878EA9058B8CF03EAF2881889 Validity Not Before: Oct 19 11:46:53 2025 GMT Not After : Oct 22 17:49:53 2025 GMT Subject: CN=07C916F6AD4ED1BA88ED1D6A7869CBE02092C8B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:d1:52:fb:09:e1:a5:c6:19:22:6d:eb:e7:35: 65:53:06:9f:c2:59:3c:7d:6b:85:3d:ee:de:ca:ee: f8:eb:42:bc:eb:4e:ec:b8:37:ea:dc:e2:66:28:7f: 5f:30:16:2e:04:b0:82:6b:26:e4:72:50:bb:90:e7: f8:e6:ae:ca:90:ed:be:b3:ae:2d:a7:ad:52:5d:82: 72:8b:af:a0:69:73:06:f1:53:20:fd:92:0a:cc:6b: 75:60:d4:c4:7f:f4:17:c9:a9:6e:af:39:b3:3a:66: b3:2e:6b:b7:da:dc:6a:46:6a:6e:58:e0:06:41:43: 37:9d:5a:18:ad:41:00:98:dc:03:95:af:be:fe:66: c5:b3:ed:ce:95:18:4a:d2:80:b3:79:26:52:e9:97: 55:c3:3d:50:5d:75:d1:59:49:44:08:e8:e6:07:dd: 46:5c:61:f4:24:33:a8:38:83:ed:43:c4:12:12:73: c8:50:1d:fa:2c:50:ce:6e:44:2d:46:cf:a7:de:37: 18:88:3f:87:ba:2f:cc:cf:f5:04:62:e7:99:a1:09: a0:d0:ac:21:ff:a3:10:48:dc:bd:26:97:68:a4:7f: ad:d0:48:23:87:4a:b3:cd:f1:64:a9:dc:a7:3a:65: 70:ea:b5:6b:d8:b9:95:ad:84:97:c6:94:b7:4d:41: b4:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:C9:16:F6:AD:4E:D1:BA:88:ED:1D:6A:78:69:CB:E0:20:92:C8:B6 X509v3 Authority Key Identifier: keyid:03:31:5D:0E:96:6A:85:B8:78:EA:90:58:B8:CF:03:EA:F2:88:18:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/03315D0E966A85B878EA9058B8CF03EAF2881889.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03315D0E966A85B878EA9058B8CF03EAF2881889.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/03315D0E966A85B878EA9058B8CF03EAF2881889.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:98:ac:2b:0a:9c:dd:0e:bd:97:12:3b:10:cc:0c:47:d0:2e: 20:31:d5:34:15:35:b2:e4:60:45:74:ce:fd:95:ee:28:9c:4e: e9:1a:1b:83:fc:f3:c3:cc:29:7d:4e:b4:7e:6e:ef:53:da:ca: 54:8a:dc:35:76:3c:83:23:10:9c:21:0a:3f:27:86:1d:cd:d1: a2:cd:53:e4:2d:d6:8a:75:05:cc:06:4c:ef:59:fd:43:cc:8d: 21:64:33:c4:ee:07:ee:03:40:cb:84:4b:97:ec:33:a8:1c:2f: 2d:6b:e1:da:85:b5:62:57:ca:d2:e2:1b:0f:a8:fb:8e:91:cb: cf:87:db:08:4b:45:18:0a:c0:4d:36:71:d6:6f:8a:27:66:76: 4d:e3:f2:69:07:5f:a3:df:8a:d3:7f:fe:20:59:1e:76:89:c0: be:44:ef:96:64:54:1c:e1:7b:ad:db:ba:9a:b8:b8:00:7c:7f: 56:2e:aa:3f:96:8e:47:2d:e8:7f:7d:06:24:90:11:ad:ef:89: 73:37:04:86:6b:d4:4d:be:95:11:0c:32:46:24:c3:b0:56:69: d3:aa:77:32:2c:a2:c3:ba:9b:49:ec:56:d3:90:b1:23:2a:4a: 09:84:14:62:25:5c:d7:56:3c:f9:c8:0e:72:ae:9c:12:f8:0a: 24:05:f2:2e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaLqYpXj0uHnuOW0c2IvOr/h0wQ4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDMzMTVEMEU5NjZBODVCODc4RUE5MDU4QjhDRjAzRUFG Mjg4MTg4OTAeFw0yNTEwMTkxMTQ2NTNaFw0yNTEwMjIxNzQ5NTNaMDMxMTAvBgNV BAMTKDA3QzkxNkY2QUQ0RUQxQkE4OEVEMUQ2QTc4NjlDQkUwMjA5MkM4QjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCa0VL7CeGlxhkibevnNWVTBp/C WTx9a4U97t7K7vjrQrzrTuy4N+rc4mYof18wFi4EsIJrJuRyULuQ5/jmrsqQ7b6z ri2nrVJdgnKLr6BpcwbxUyD9kgrMa3Vg1MR/9BfJqW6vObM6ZrMua7fa3GpGam5Y 4AZBQzedWhitQQCY3AOVr77+ZsWz7c6VGErSgLN5JlLpl1XDPVBdddFZSUQI6OYH 3UZcYfQkM6g4g+1DxBISc8hQHfosUM5uRC1Gz6feNxiIP4e6L8zP9QRi55mhCaDQ rCH/oxBI3L0ml2ikf63QSCOHSrPN8WSp3Kc6ZXDqtWvYuZWthJfGlLdNQbRJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUB8kW9q1O0bqI7R1qeGnL4CCSyLYwHwYDVR0j BBgwFoAUAzFdDpZqhbh46pBYuM8D6vKIGIkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NTlhY2I5Ny02ZTg3LTRlMzEtYTU2OS1hMjY2MGRmNGYyYjgvMC8wMzMxNUQwRTk2 NkE4NUI4NzhFQTkwNThCOENGMDNFQUYyODgxODg5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDMzMTVEMEU5NjZBODVCODc4RUE5MDU4QjhDRjAzRUFGMjg4 MTg4OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDU5YWNiOTctNmU4Ny00ZTMxLWE1 NjktYTI2NjBkZjRmMmI4LzAvMDMzMTVEMEU5NjZBODVCODc4RUE5MDU4QjhDRjAz RUFGMjg4MTg4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKaYrCsKnN0OvZcSOxDMDEfQLiAx1TQVNbLk YEV0zv2V7iicTukaG4P888PMKX1OtH5u71PaylSK3DV2PIMjEJwhCj8nhh3N0aLN U+Qt1op1BcwGTO9Z/UPMjSFkM8TuB+4DQMuES5fsM6gcLy1r4dqFtWJXytLiGw+o +46Ry8+H2whLRRgKwE02cdZviidmdk3j8mkHX6PfitN//iBZHnaJwL5E75ZkVBzh e63bupq4uAB8f1Yuqj+Wjkct6H99BiSQEa3viXM3BIZr1E2+lREMMkYkw7BWadOq dzIsosO6m0nsVtOQsSMqSgmEFGIlXNdWPPnIDnKunBL4CiQF8i4= -----END CERTIFICATE-----Generated at Tue Oct 21 00:14:05 2025 by rpki-client