$ rpki-client -vvf repo-rpki.idnic.net/repo/96b1ab7f-e451-40d1-9b70-3a4022a9b4ec/0/1631B9A0997CBC975099A6FF7E27DCA3FDC649BA.mft File: 1631B9A0997CBC975099A6FF7E27DCA3FDC649BA.mft (raw, json) Hash identifier: 77hQuQaq/RkauHcZ1IceR4kf5QPG3+C2WKapCgjBSCI= Subject key identifier: EE:72:A9:6A:A5:BA:E1:E7:7F:C4:16:0F:96:68:90:81:0F:6E:FB:E1 Authority key identifier: 16:31:B9:A0:99:7C:BC:97:50:99:A6:FF:7E:27:DC:A3:FD:C6:49:BA Certificate issuer: /CN=1631B9A0997CBC975099A6FF7E27DCA3FDC649BA Certificate serial: 05B7CA9E6BD0E17C584AD5D027DB51D644F46CA5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1631B9A0997CBC975099A6FF7E27DCA3FDC649BA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/96b1ab7f-e451-40d1-9b70-3a4022a9b4ec/0/1631B9A0997CBC975099A6FF7E27DCA3FDC649BA.mft Manifest number: 017E Signing time: Sun 19 Oct 2025 23:31:36 +0000 Manifest this update: Sun 19 Oct 2025 23:26:36 +0000 Manifest next update: Thu 23 Oct 2025 03:54:36 +0000 Files and hashes: 1: 3230322e35382e3233382e302f32332d3234203d3e203436303237.roa (hash: TVHLoA6S/RXowJVfDxEwT3G/jcn7qgjqSJZOEgaAkds=) 2: 1631B9A0997CBC975099A6FF7E27DCA3FDC649BA.crl (hash: f8ygo1ZHK2L2IdGT2N6ayjBytS/GJjmgI4hTDgfxW6w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/96b1ab7f-e451-40d1-9b70-3a4022a9b4ec/0/1631B9A0997CBC975099A6FF7E27DCA3FDC649BA.crl rsync://repo-rpki.idnic.net/repo/96b1ab7f-e451-40d1-9b70-3a4022a9b4ec/0/1631B9A0997CBC975099A6FF7E27DCA3FDC649BA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1631B9A0997CBC975099A6FF7E27DCA3FDC649BA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 03:54:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:b7:ca:9e:6b:d0:e1:7c:58:4a:d5:d0:27:db:51:d6:44:f4:6c:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1631B9A0997CBC975099A6FF7E27DCA3FDC649BA Validity Not Before: Oct 19 23:26:36 2025 GMT Not After : Oct 23 03:54:36 2025 GMT Subject: CN=EE72A96AA5BAE1E77FC4160F966890810F6EFBE1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:f8:25:b3:7d:aa:5f:35:70:1c:38:e9:c2:21: 8d:6f:be:fe:a8:78:d1:fe:4f:e6:db:f4:f0:63:7f: ed:58:9e:ce:e1:9f:03:ca:e5:5d:50:1b:f4:8f:5f: db:0e:ad:b9:a9:98:c3:c5:06:e4:1b:81:26:d4:58: b3:a9:0b:34:81:e2:c0:8f:b8:d2:16:16:c3:23:dc: 48:b8:27:7d:38:e6:52:76:ee:53:78:2e:f7:cd:3b: c2:5a:67:a9:7f:ea:1f:dc:ad:ee:2a:09:a1:98:23: fe:dd:c3:3b:65:69:39:2c:79:d5:eb:51:f4:80:8d: 05:be:96:30:ce:9b:f0:fa:df:14:cb:69:78:4b:7d: 7e:9b:e5:cb:f9:58:a0:57:eb:ca:60:2b:86:ac:0b: 08:57:41:9f:6e:62:07:75:1f:dc:67:66:56:5f:72: 93:b2:0f:4b:86:81:ea:98:ca:c3:cb:36:c6:01:8b: ca:22:92:fd:4a:2e:32:9f:2c:17:e7:21:a9:bb:30: 46:ca:dc:d6:9b:0a:2c:18:c4:ed:7d:cc:30:ee:b3: a6:b2:79:d2:78:23:a7:7e:43:52:b8:39:26:0f:eb: ed:7a:ef:07:ba:e7:2a:13:b6:56:6b:7e:82:e8:9c: 6e:c1:de:63:b0:fd:fd:08:03:72:93:4e:4b:be:11: b5:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:72:A9:6A:A5:BA:E1:E7:7F:C4:16:0F:96:68:90:81:0F:6E:FB:E1 X509v3 Authority Key Identifier: keyid:16:31:B9:A0:99:7C:BC:97:50:99:A6:FF:7E:27:DC:A3:FD:C6:49:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/96b1ab7f-e451-40d1-9b70-3a4022a9b4ec/0/1631B9A0997CBC975099A6FF7E27DCA3FDC649BA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1631B9A0997CBC975099A6FF7E27DCA3FDC649BA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/96b1ab7f-e451-40d1-9b70-3a4022a9b4ec/0/1631B9A0997CBC975099A6FF7E27DCA3FDC649BA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:86:28:ea:e4:2c:c3:25:be:44:55:48:83:50:35:09:8e:6d: 4f:f3:93:ab:4e:da:68:03:45:0c:30:00:24:95:c0:4f:1d:23: 65:b8:f1:21:cf:d2:ab:09:7d:ec:fa:95:54:b9:ee:6a:7c:6c: 16:a1:94:ce:da:1b:da:9c:44:12:a7:ec:1d:0a:7d:9c:db:ab: 4a:a5:f2:f5:c1:40:50:6a:00:62:a7:da:b8:0a:53:26:d3:40: 82:7e:94:12:56:0e:50:09:dc:90:31:e6:69:e1:c2:20:16:3a: ee:e2:e3:90:9f:9a:8a:18:6c:1b:2e:95:0c:17:50:64:da:4d: d2:7c:88:44:ad:e6:9b:ef:c1:e6:b5:68:ca:71:c1:08:a1:29: 68:07:93:33:5a:3f:ba:78:9d:02:c4:1a:a4:84:35:9a:7c:36: 3f:85:0f:c2:0c:ee:19:ba:b8:dc:95:b9:26:73:46:04:14:cf: d4:1d:0b:78:63:f7:d0:8c:c0:a5:3a:94:8f:f7:4a:a7:26:23: c3:df:6a:83:09:a6:bd:32:3d:14:a1:cd:54:be:f8:7f:37:9c: 06:48:8c:4f:cb:c0:fa:d1:53:fc:7c:9b:8f:b2:aa:7b:8a:77: 39:d9:0e:34:67:8e:49:68:9e:90:3c:dc:40:3b:e4:1b:0b:0a: d4:11:e4:3c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBbfKnmvQ4XxYStXQJ9tR1kT0bKUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTYzMUI5QTA5OTdDQkM5NzUwOTlBNkZGN0UyN0RDQTNG REM2NDlCQTAeFw0yNTEwMTkyMzI2MzZaFw0yNTEwMjMwMzU0MzZaMDMxMTAvBgNV BAMTKEVFNzJBOTZBQTVCQUUxRTc3RkM0MTYwRjk2Njg5MDgxMEY2RUZCRTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG+CWzfapfNXAcOOnCIY1vvv6o eNH+T+bb9PBjf+1Yns7hnwPK5V1QG/SPX9sOrbmpmMPFBuQbgSbUWLOpCzSB4sCP uNIWFsMj3Ei4J3045lJ27lN4LvfNO8JaZ6l/6h/cre4qCaGYI/7dwztlaTksedXr UfSAjQW+ljDOm/D63xTLaXhLfX6b5cv5WKBX68pgK4asCwhXQZ9uYgd1H9xnZlZf cpOyD0uGgeqYysPLNsYBi8oikv1KLjKfLBfnIam7MEbK3NabCiwYxO19zDDus6ay edJ4I6d+Q1K4OSYP6+167we65yoTtlZrfoLonG7B3mOw/f0IA3KTTku+EbVRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7nKpaqW64ed/xBYPlmiQgQ9u++EwHwYDVR0j BBgwFoAUFjG5oJl8vJdQmab/fifco/3GSbowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NmIxYWI3Zi1lNDUxLTQwZDEtOWI3MC0zYTQwMjJhOWI0ZWMvMC8xNjMxQjlBMDk5 N0NCQzk3NTA5OUE2RkY3RTI3RENBM0ZEQzY0OUJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTYzMUI5QTA5OTdDQkM5NzUwOTlBNkZGN0UyN0RDQTNGREM2 NDlCQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTZiMWFiN2YtZTQ1MS00MGQxLTli NzAtM2E0MDIyYTliNGVjLzAvMTYzMUI5QTA5OTdDQkM5NzUwOTlBNkZGN0UyN0RD QTNGREM2NDlCQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHSGKOrkLMMlvkRVSINQNQmObU/zk6tO2mgD RQwwACSVwE8dI2W48SHP0qsJfez6lVS57mp8bBahlM7aG9qcRBKn7B0KfZzbq0ql 8vXBQFBqAGKn2rgKUybTQIJ+lBJWDlAJ3JAx5mnhwiAWOu7i45CfmooYbBsulQwX UGTaTdJ8iESt5pvvwea1aMpxwQihKWgHkzNaP7p4nQLEGqSENZp8Nj+FD8IM7hm6 uNyVuSZzRgQUz9QdC3hj99CMwKU6lI/3SqcmI8PfaoMJpr0yPRShzVS++H83nAZI jE/LwPrRU/x8m4+yqnuKdznZDjRnjklonpA83EA75BsLCtQR5Dw= -----END CERTIFICATE-----Generated at Mon Oct 20 09:27:44 2025 by rpki-client