$ rpki-client -vvf repo-rpki.idnic.net/repo/a1ca9435-7224-47a8-951b-c1b42eb0e2f7/0/316B0D7815A87F5AA07EC9E0D8FC859AC1A76794.mft File: 316B0D7815A87F5AA07EC9E0D8FC859AC1A76794.mft (raw, json) Hash identifier: zbzWkyhOms0Wr9N1q3ZuJE/puXyRAL7t3993ZWvS0C0= Subject key identifier: 33:D1:2D:87:7D:67:2D:66:72:49:ED:4B:B2:5E:E3:79:F5:BE:8B:EE Authority key identifier: 31:6B:0D:78:15:A8:7F:5A:A0:7E:C9:E0:D8:FC:85:9A:C1:A7:67:94 Certificate issuer: /CN=316B0D7815A87F5AA07EC9E0D8FC859AC1A76794 Certificate serial: 08BF3E74F99022EF1DD812DACE10CB3790CE3A16 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/316B0D7815A87F5AA07EC9E0D8FC859AC1A76794.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a1ca9435-7224-47a8-951b-c1b42eb0e2f7/0/316B0D7815A87F5AA07EC9E0D8FC859AC1A76794.mft Manifest number: 0465 Signing time: Sat 23 Aug 2025 09:30:46 +0000 Manifest this update: Sat 23 Aug 2025 09:25:46 +0000 Manifest next update: Tue 26 Aug 2025 17:52:46 +0000 Files and hashes: 1: 316B0D7815A87F5AA07EC9E0D8FC859AC1A76794.crl (hash: GAsrWYqXMPTPTTyR/jQX9wD2bWby5FdeynwHSlVAf8Q=) 2: 3130332e3136322e36322e302f32332d3234203d3e20313431363432.roa (hash: HlTH1oYNBnzzcEWhTrgfmDPVe5GE52Vqje71mX4vlFo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a1ca9435-7224-47a8-951b-c1b42eb0e2f7/0/316B0D7815A87F5AA07EC9E0D8FC859AC1A76794.crl rsync://repo-rpki.idnic.net/repo/a1ca9435-7224-47a8-951b-c1b42eb0e2f7/0/316B0D7815A87F5AA07EC9E0D8FC859AC1A76794.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/316B0D7815A87F5AA07EC9E0D8FC859AC1A76794.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 10:19:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:bf:3e:74:f9:90:22:ef:1d:d8:12:da:ce:10:cb:37:90:ce:3a:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=316B0D7815A87F5AA07EC9E0D8FC859AC1A76794 Validity Not Before: Aug 23 09:25:46 2025 GMT Not After : Aug 26 17:52:46 2025 GMT Subject: CN=33D12D877D672D667249ED4BB25EE379F5BE8BEE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:99:99:b0:98:12:ad:58:26:56:7f:11:cd:8b: c2:fd:db:9d:c2:bf:c7:f7:54:31:a8:75:a5:6d:b3: 11:2a:6b:e5:b7:25:a5:9f:3a:d2:e6:e1:d9:51:42: 8d:ba:4d:c1:f5:da:af:26:31:2c:94:11:d3:23:72: 13:32:fa:d8:39:99:af:e8:d2:bc:13:93:ee:f4:d3: 8a:1c:f6:a4:01:6d:ec:20:32:05:62:d2:90:69:55: fd:81:29:b1:fa:66:83:26:5a:f2:e6:01:e4:3c:5e: 3e:17:aa:f1:2d:28:82:cf:89:ce:32:6e:73:33:02: fb:4f:c6:fc:08:bd:a2:49:55:d1:bb:04:42:96:d5: e2:c8:63:47:b2:5c:48:66:0b:57:83:27:e2:2b:81: 1f:f1:62:53:cc:b8:be:82:69:d2:db:df:2d:59:49: 92:21:f0:9a:76:cf:de:02:34:83:dc:75:ce:26:41: 44:96:7b:17:43:38:27:c7:9a:da:4a:ad:37:dd:ed: ee:a0:68:d0:19:c5:23:35:96:f3:70:2c:50:1a:fc: c9:ba:7e:ee:f3:11:d1:3e:c9:28:1e:7d:90:b9:97: bf:0f:19:74:2d:e3:14:d0:99:30:61:06:f5:b0:22: cf:6f:fb:d8:6b:c5:35:c0:ea:bd:3e:02:d1:ae:46: b3:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:D1:2D:87:7D:67:2D:66:72:49:ED:4B:B2:5E:E3:79:F5:BE:8B:EE X509v3 Authority Key Identifier: keyid:31:6B:0D:78:15:A8:7F:5A:A0:7E:C9:E0:D8:FC:85:9A:C1:A7:67:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a1ca9435-7224-47a8-951b-c1b42eb0e2f7/0/316B0D7815A87F5AA07EC9E0D8FC859AC1A76794.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/316B0D7815A87F5AA07EC9E0D8FC859AC1A76794.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a1ca9435-7224-47a8-951b-c1b42eb0e2f7/0/316B0D7815A87F5AA07EC9E0D8FC859AC1A76794.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:76:ee:4b:0b:18:eb:94:14:34:66:12:e9:a4:a5:99:23:e6: 64:31:c1:ee:fa:b5:31:1c:0a:f4:38:a5:06:fd:f2:f3:f7:a6: ca:13:da:1e:cf:f1:ff:27:e9:d7:f2:61:cc:4c:21:51:09:e9: ea:a0:52:33:6e:84:b3:27:95:32:de:a3:74:d1:f9:c0:a3:5e: 30:56:19:d0:e3:79:cc:c8:75:a1:42:bc:af:a0:85:64:24:74: 02:5e:dc:96:c1:a3:70:c2:bd:50:6f:f0:b5:ac:9d:53:6f:f0: 71:77:f8:47:66:19:cb:f3:9c:59:96:6f:b9:1d:53:c3:bc:93: 41:0d:c1:90:b5:c3:ca:dc:66:f4:0c:df:95:2f:e9:99:ea:f9: 8c:e4:4e:85:cd:b6:96:e3:9c:d1:e2:42:96:93:7c:5e:c5:69: 4c:70:44:27:51:c5:f8:25:dd:dc:22:14:1b:7a:f6:72:97:60: 5b:69:4f:ba:7a:23:0e:6b:e7:09:c8:fd:a5:71:9b:2a:fd:8e: 95:bc:f3:33:bb:f9:ae:c2:06:16:fc:cc:67:af:f0:23:7f:5f: 77:65:28:ce:60:fd:4d:53:6e:e8:df:9a:ea:14:00:bd:a6:b1: 22:e7:55:97:30:11:bc:84:53:e7:91:ff:62:c2:0f:98:fb:15: c7:8d:1f:5a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCL8+dPmQIu8d2BLazhDLN5DOOhYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzE2QjBENzgxNUE4N0Y1QUEwN0VDOUUwRDhGQzg1OUFD MUE3Njc5NDAeFw0yNTA4MjMwOTI1NDZaFw0yNTA4MjYxNzUyNDZaMDMxMTAvBgNV BAMTKDMzRDEyRDg3N0Q2NzJENjY3MjQ5RUQ0QkIyNUVFMzc5RjVCRThCRUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkmZmwmBKtWCZWfxHNi8L9253C v8f3VDGodaVtsxEqa+W3JaWfOtLm4dlRQo26TcH12q8mMSyUEdMjchMy+tg5ma/o 0rwTk+7004oc9qQBbewgMgVi0pBpVf2BKbH6ZoMmWvLmAeQ8Xj4XqvEtKILPic4y bnMzAvtPxvwIvaJJVdG7BEKW1eLIY0eyXEhmC1eDJ+IrgR/xYlPMuL6CadLb3y1Z SZIh8Jp2z94CNIPcdc4mQUSWexdDOCfHmtpKrTfd7e6gaNAZxSM1lvNwLFAa/Mm6 fu7zEdE+ySgefZC5l78PGXQt4xTQmTBhBvWwIs9v+9hrxTXA6r0+AtGuRrPNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUM9Eth31nLWZySe1Lsl7jefW+i+4wHwYDVR0j BBgwFoAUMWsNeBWof1qgfsng2PyFmsGnZ5QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MWNhOTQzNS03MjI0LTQ3YTgtOTUxYi1jMWI0MmViMGUyZjcvMC8zMTZCMEQ3ODE1 QTg3RjVBQTA3RUM5RTBEOEZDODU5QUMxQTc2Nzk0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzE2QjBENzgxNUE4N0Y1QUEwN0VDOUUwRDhGQzg1OUFDMUE3 Njc5NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTFjYTk0MzUtNzIyNC00N2E4LTk1 MWItYzFiNDJlYjBlMmY3LzAvMzE2QjBENzgxNUE4N0Y1QUEwN0VDOUUwRDhGQzg1 OUFDMUE3Njc5NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEt27ksLGOuUFDRmEumkpZkj5mQxwe76tTEc CvQ4pQb98vP3psoT2h7P8f8n6dfyYcxMIVEJ6eqgUjNuhLMnlTLeo3TR+cCjXjBW GdDjeczIdaFCvK+ghWQkdAJe3JbBo3DCvVBv8LWsnVNv8HF3+EdmGcvznFmWb7kd U8O8k0ENwZC1w8rcZvQM35Uv6Znq+YzkToXNtpbjnNHiQpaTfF7FaUxwRCdRxfgl 3dwiFBt69nKXYFtpT7p6Iw5r5wnI/aVxmyr9jpW88zO7+a7CBhb8zGev8CN/X3dl KM5g/U1TbujfmuoUAL2msSLnVZcwEbyEU+eR/2LCD5j7FceNH1o= -----END CERTIFICATE-----Generated at Sat Aug 23 13:26:04 2025 by rpki-client