$ rpki-client -vvf repo-rpki.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.mft File: 314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.mft (raw, json) Hash identifier: 1xedz8byPKvi/pLJluLebWfSJojq6RPoBufCHLGlVu4= Subject key identifier: 61:C5:FF:CF:0F:1F:AB:B8:E9:74:5D:50:EA:BA:AE:86:17:B7:7F:E3 Authority key identifier: 31:49:88:A7:9F:2A:52:2D:2E:D1:D4:AC:99:C4:AB:DF:DC:DB:B4:00 Certificate issuer: /CN=314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400 Certificate serial: 6C1C17FF8DE63EF1B65FBA3B5FC2D407DA7F0D6F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.cer Subject info access: rsync://repo-rpki.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.mft Manifest number: 019C Signing time: Sat 18 Oct 2025 16:30:35 +0000 Manifest this update: Sat 18 Oct 2025 16:25:35 +0000 Manifest next update: Wed 22 Oct 2025 01:59:35 +0000 Files and hashes: 1: 323430373a373234303a3a2f33322d3332203d3e203538383230.roa (hash: ozUo4nr2ZiT2mHAD8ioZ2hPWQXjTqtcohKzFBlHP+7Q=) 2: 3130332e3135322e3234322e302f32332d3234203d3e20313339343536.roa (hash: 89pUQxfl5rXIPDrZqajzc7VGVg5FDLEc5hZANvDFm/0=) 3: 314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.crl (hash: fm2nPLUqYzDXXi1eWO5B2ftjaM3s3UgOiXKcl0lIEHA=) 4: 323430373a373234303a3a2f33322d3438203d3e203538383230.roa (hash: 9stbxrDkNUm3gzp6A8jjd9QQ8Ao52PCfqM2rcZOO6+U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.crl rsync://repo-rpki.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 01:59:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:1c:17:ff:8d:e6:3e:f1:b6:5f:ba:3b:5f:c2:d4:07:da:7f:0d:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400 Validity Not Before: Oct 18 16:25:35 2025 GMT Not After : Oct 22 01:59:35 2025 GMT Subject: CN=61C5FFCF0F1FABB8E9745D50EABAAE8617B77FE3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:c8:79:c3:aa:cf:5b:e4:40:e8:d7:ce:e7:c8: 5f:90:ff:46:18:7d:04:5a:ec:fb:d7:09:d4:3a:a5: 12:67:28:c9:4c:34:9f:4b:a9:4b:03:37:f7:77:9f: 69:bf:a4:0e:f0:ed:d7:8b:6a:ae:34:8b:db:09:55: 85:23:95:31:3e:6a:37:b0:34:12:14:6e:ef:1d:f0: 20:4b:58:36:e2:0b:96:6c:32:e8:a5:3a:05:12:1b: a0:65:4f:5c:2c:cd:a8:d4:a1:f4:6b:39:32:12:fa: b9:6b:4c:6f:05:f2:2e:06:1f:a7:f7:65:15:7b:f7: 47:73:89:77:0a:36:cf:d6:15:d0:fd:ad:c5:f5:4e: 0b:6a:06:7a:7d:02:ae:be:b1:6e:6a:04:5a:76:cf: 3c:2b:f2:45:93:db:53:9f:e0:88:b8:55:e6:56:e4: 1e:bf:9d:52:87:f0:d3:a4:fb:3d:97:5f:19:2d:ac: 27:6d:d8:74:46:a9:19:68:ab:29:80:a1:ab:40:70: 9c:a3:2b:12:bd:61:a2:56:cd:8e:c6:89:05:51:22: 91:73:57:ee:fd:bf:f7:15:ce:b3:46:f1:fa:c2:3d: 93:62:80:46:a9:5e:f2:f8:c7:70:27:8d:c7:68:9d: ea:94:92:e6:64:58:ea:29:82:7f:8a:c8:92:d8:30: bf:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:C5:FF:CF:0F:1F:AB:B8:E9:74:5D:50:EA:BA:AE:86:17:B7:7F:E3 X509v3 Authority Key Identifier: keyid:31:49:88:A7:9F:2A:52:2D:2E:D1:D4:AC:99:C4:AB:DF:DC:DB:B4:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:09:fa:63:4b:d7:79:71:0f:8e:4c:dd:22:96:f4:26:c5:83: 72:1a:84:e0:00:64:13:17:e7:8f:da:69:7c:88:33:b2:61:02: c4:81:92:1c:c2:e4:9c:82:51:a8:cd:ce:6b:d4:c6:c4:92:18: b8:0a:74:b0:0e:c5:ec:d4:ad:dc:b0:af:65:cd:4d:e8:d0:f9: 1d:ab:2f:90:16:35:d0:cc:b4:05:c4:60:01:aa:8f:7d:76:9b: dd:e2:28:d1:1d:c9:d7:e3:af:50:d7:b3:b2:08:be:79:89:42: 34:ad:06:f6:bb:d2:85:b6:cb:cb:7c:db:10:f7:9a:99:8d:4e: 4b:c6:42:0b:89:8b:19:8d:47:9d:ce:bf:ad:42:ad:ba:7f:ba: e1:cc:2e:d8:b0:10:8d:46:06:11:28:c6:4c:15:e6:27:c0:af: fb:8f:60:2a:ae:0c:d1:4e:b9:33:89:23:d2:b2:30:e6:89:b0: 7b:b0:41:b5:28:63:04:20:b0:1b:fe:6b:a7:d2:c5:21:d9:c4: db:2a:c0:2d:1f:7c:88:26:d0:d6:01:6b:a9:9b:6a:e0:9c:68: 7d:0c:7a:09:b5:f6:67:44:be:c9:b9:95:9d:cf:2f:e2:a2:37: a6:c5:6a:b0:38:83:24:32:e4:ae:f8:04:e1:ae:31:21:8a:ae: 86:ea:82:74 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbBwX/43mPvG2X7o7X8LUB9p/DW8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzE0OTg4QTc5RjJBNTIyRDJFRDFENEFDOTlDNEFCREZE Q0RCQjQwMDAeFw0yNTEwMTgxNjI1MzVaFw0yNTEwMjIwMTU5MzVaMDMxMTAvBgNV BAMTKDYxQzVGRkNGMEYxRkFCQjhFOTc0NUQ1MEVBQkFBRTg2MTdCNzdGRTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcyHnDqs9b5EDo187nyF+Q/0YY fQRa7PvXCdQ6pRJnKMlMNJ9LqUsDN/d3n2m/pA7w7deLaq40i9sJVYUjlTE+ajew NBIUbu8d8CBLWDbiC5ZsMuilOgUSG6BlT1wszajUofRrOTIS+rlrTG8F8i4GH6f3 ZRV790dziXcKNs/WFdD9rcX1TgtqBnp9Aq6+sW5qBFp2zzwr8kWT21Of4Ii4VeZW 5B6/nVKH8NOk+z2XXxktrCdt2HRGqRloqymAoatAcJyjKxK9YaJWzY7GiQVRIpFz V+79v/cVzrNG8frCPZNigEapXvL4x3AnjcdoneqUkuZkWOopgn+KyJLYML/NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYcX/zw8fq7jpdF1Q6rquhhe3f+MwHwYDVR0j BBgwFoAUMUmIp58qUi0u0dSsmcSr39zbtAAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NGJhNjc3OC1iMTZkLTRiYTgtOTg0Zi0zNGU0MTlmYzljNDkvMC8zMTQ5ODhBNzlG MkE1MjJEMkVEMUQ0QUM5OUM0QUJERkRDREJCNDAwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzE0OTg4QTc5RjJBNTIyRDJFRDFENEFDOTlDNEFCREZEQ0RC QjQwMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjRiYTY3NzgtYjE2ZC00YmE4LTk4 NGYtMzRlNDE5ZmM5YzQ5LzAvMzE0OTg4QTc5RjJBNTIyRDJFRDFENEFDOTlDNEFC REZEQ0RCQjQwMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHUJ+mNL13lxD45M3SKW9CbFg3IahOAAZBMX 54/aaXyIM7JhAsSBkhzC5JyCUajNzmvUxsSSGLgKdLAOxezUrdywr2XNTejQ+R2r L5AWNdDMtAXEYAGqj312m93iKNEdydfjr1DXs7IIvnmJQjStBva70oW2y8t82xD3 mpmNTkvGQguJixmNR53Ov61Crbp/uuHMLtiwEI1GBhEoxkwV5ifAr/uPYCquDNFO uTOJI9KyMOaJsHuwQbUoYwQgsBv+a6fSxSHZxNsqwC0ffIgm0NYBa6mbauCcaH0M egm19mdEvsm5lZ3PL+KiN6bFarA4gyQy5K74BOGuMSGKrobqgnQ= -----END CERTIFICATE-----Generated at Mon Oct 20 11:59:39 2025 by rpki-client