$ rpki-client -vvf repo-rpki.idnic.net/repo/a1ca9435-7224-47a8-951b-c1b42eb0e2f7/0/316B0D7815A87F5AA07EC9E0D8FC859AC1A76794.mft File: 316B0D7815A87F5AA07EC9E0D8FC859AC1A76794.mft (raw, json) Hash identifier: ylQYo0FD0urgC3CN99Z1rOtY4H9GC9QSkSWE4bfyi7U= Subject key identifier: 1F:0A:EC:C2:CB:04:C1:F2:72:B4:B3:70:C2:5D:1E:6B:91:92:48:E2 Authority key identifier: 31:6B:0D:78:15:A8:7F:5A:A0:7E:C9:E0:D8:FC:85:9A:C1:A7:67:94 Certificate issuer: /CN=316B0D7815A87F5AA07EC9E0D8FC859AC1A76794 Certificate serial: 2DF8BD5C787CA2DBDDC11D958AB426412C7605E2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/316B0D7815A87F5AA07EC9E0D8FC859AC1A76794.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a1ca9435-7224-47a8-951b-c1b42eb0e2f7/0/316B0D7815A87F5AA07EC9E0D8FC859AC1A76794.mft Manifest number: 047F Signing time: Sat 18 Oct 2025 13:10:46 +0000 Manifest this update: Sat 18 Oct 2025 13:05:46 +0000 Manifest next update: Tue 21 Oct 2025 22:12:46 +0000 Files and hashes: 1: 3130332e3136322e36322e302f32332d3234203d3e20313431363432.roa (hash: qCAW9RGYIwqqetHxh1sU75304B2gQRTVVqzCEK/6DVI=) 2: 316B0D7815A87F5AA07EC9E0D8FC859AC1A76794.crl (hash: X5u+XKZemaNJPBBSC65ReyRyYYPaqczR5cWMtZyDxKs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a1ca9435-7224-47a8-951b-c1b42eb0e2f7/0/316B0D7815A87F5AA07EC9E0D8FC859AC1A76794.crl rsync://repo-rpki.idnic.net/repo/a1ca9435-7224-47a8-951b-c1b42eb0e2f7/0/316B0D7815A87F5AA07EC9E0D8FC859AC1A76794.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/316B0D7815A87F5AA07EC9E0D8FC859AC1A76794.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 22:12:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:f8:bd:5c:78:7c:a2:db:dd:c1:1d:95:8a:b4:26:41:2c:76:05:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=316B0D7815A87F5AA07EC9E0D8FC859AC1A76794 Validity Not Before: Oct 18 13:05:46 2025 GMT Not After : Oct 21 22:12:46 2025 GMT Subject: CN=1F0AECC2CB04C1F272B4B370C25D1E6B919248E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:3e:07:8a:3e:68:87:e1:6b:f5:c8:f7:bc:15: 60:56:f0:ed:ff:ed:37:05:11:02:8e:27:38:59:f2: f6:4c:b6:ad:2a:bd:b9:71:d7:47:3f:58:53:08:fa: d2:97:c8:27:e2:14:c2:d1:ec:47:9a:bf:1e:c9:97: 0b:4a:42:71:6a:83:93:31:93:1a:3e:cc:76:98:45: f1:cb:ff:30:aa:c5:0b:77:a0:8b:e6:d2:db:1f:11: 1c:d9:26:8e:a3:2c:dd:e1:a0:e8:c1:88:be:41:78: d9:1f:d4:4d:ff:c6:ce:79:aa:45:cc:27:9b:5d:02: ee:fd:00:a4:eb:5e:c8:76:87:60:bc:9e:d5:1e:60: a2:9f:05:56:e8:45:eb:ae:ec:17:37:47:3b:34:63: e2:84:e3:83:c4:c6:a0:cd:a6:9b:20:a7:01:1e:ea: f5:27:48:0f:1d:ea:a6:04:1b:85:f3:65:53:6c:82: a3:f5:40:a9:1a:d9:f6:02:2c:07:02:ae:64:36:c8: 11:e3:88:76:2c:83:13:51:96:03:56:18:b6:02:a8: b6:4a:b1:b3:0a:65:74:c6:d3:9e:c7:77:c0:b2:21: 51:40:68:f1:50:b6:81:66:44:6c:16:4e:d6:10:47: f7:fe:ee:de:42:79:e6:3f:d4:bc:e9:67:14:45:d7: 4e:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:0A:EC:C2:CB:04:C1:F2:72:B4:B3:70:C2:5D:1E:6B:91:92:48:E2 X509v3 Authority Key Identifier: keyid:31:6B:0D:78:15:A8:7F:5A:A0:7E:C9:E0:D8:FC:85:9A:C1:A7:67:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a1ca9435-7224-47a8-951b-c1b42eb0e2f7/0/316B0D7815A87F5AA07EC9E0D8FC859AC1A76794.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/316B0D7815A87F5AA07EC9E0D8FC859AC1A76794.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a1ca9435-7224-47a8-951b-c1b42eb0e2f7/0/316B0D7815A87F5AA07EC9E0D8FC859AC1A76794.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:6d:65:c4:9c:b3:19:93:b0:ba:e6:6d:80:03:f0:a9:64:53: 59:3a:f7:56:46:48:7a:39:52:0b:e2:1d:82:8f:43:e8:cf:92: fb:82:6f:39:9b:35:2f:3a:80:7a:ae:91:f2:25:c6:f5:27:c8: 0e:01:1c:4c:8e:8d:7c:c4:d5:78:73:43:ea:c8:7f:0b:67:0d: d7:e6:ec:3b:08:e5:ce:49:c4:cb:f6:f5:0b:a7:e2:c5:fa:54: 9a:c8:a0:4e:5b:4b:51:cc:2e:53:3d:e9:cc:01:26:68:12:b2: cb:53:3e:e7:0d:fb:d0:de:a8:94:b7:10:14:08:d9:1f:dd:fe: 81:d7:c5:d3:3c:bd:0d:41:2a:9e:0d:c4:d1:b1:c4:6f:08:7a: 9a:56:16:e0:20:79:b8:88:d9:9f:18:0e:d4:a8:5a:be:6f:17: 8f:11:85:ae:cc:84:12:ef:98:e0:73:07:bf:64:fc:6c:d9:a5: 47:79:05:d6:09:7d:4c:02:20:ba:3f:3c:54:e9:7b:75:c0:a5: 12:5f:df:4f:3d:35:b7:e7:18:77:34:84:ee:da:28:17:de:38: ed:07:31:49:02:b3:8f:7d:0e:9f:98:fb:4b:f6:ad:73:49:1d: d7:be:77:09:25:45:29:71:29:2f:44:98:8d:90:e6:5b:74:32: 01:77:77:79 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULfi9XHh8otvdwR2VirQmQSx2BeIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzE2QjBENzgxNUE4N0Y1QUEwN0VDOUUwRDhGQzg1OUFD MUE3Njc5NDAeFw0yNTEwMTgxMzA1NDZaFw0yNTEwMjEyMjEyNDZaMDMxMTAvBgNV BAMTKDFGMEFFQ0MyQ0IwNEMxRjI3MkI0QjM3MEMyNUQxRTZCOTE5MjQ4RTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTPgeKPmiH4Wv1yPe8FWBW8O3/ 7TcFEQKOJzhZ8vZMtq0qvblx10c/WFMI+tKXyCfiFMLR7Eeavx7JlwtKQnFqg5Mx kxo+zHaYRfHL/zCqxQt3oIvm0tsfERzZJo6jLN3hoOjBiL5BeNkf1E3/xs55qkXM J5tdAu79AKTrXsh2h2C8ntUeYKKfBVboReuu7Bc3Rzs0Y+KE44PExqDNppsgpwEe 6vUnSA8d6qYEG4XzZVNsgqP1QKka2fYCLAcCrmQ2yBHjiHYsgxNRlgNWGLYCqLZK sbMKZXTG057Hd8CyIVFAaPFQtoFmRGwWTtYQR/f+7t5CeeY/1LzpZxRF106TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHwrswssEwfJytLNwwl0ea5GSSOIwHwYDVR0j BBgwFoAUMWsNeBWof1qgfsng2PyFmsGnZ5QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MWNhOTQzNS03MjI0LTQ3YTgtOTUxYi1jMWI0MmViMGUyZjcvMC8zMTZCMEQ3ODE1 QTg3RjVBQTA3RUM5RTBEOEZDODU5QUMxQTc2Nzk0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzE2QjBENzgxNUE4N0Y1QUEwN0VDOUUwRDhGQzg1OUFDMUE3 Njc5NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTFjYTk0MzUtNzIyNC00N2E4LTk1 MWItYzFiNDJlYjBlMmY3LzAvMzE2QjBENzgxNUE4N0Y1QUEwN0VDOUUwRDhGQzg1 OUFDMUE3Njc5NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK9tZcScsxmTsLrmbYAD8KlkU1k691ZGSHo5 UgviHYKPQ+jPkvuCbzmbNS86gHqukfIlxvUnyA4BHEyOjXzE1XhzQ+rIfwtnDdfm 7DsI5c5JxMv29Qun4sX6VJrIoE5bS1HMLlM96cwBJmgSsstTPucN+9DeqJS3EBQI 2R/d/oHXxdM8vQ1BKp4NxNGxxG8IeppWFuAgebiI2Z8YDtSoWr5vF48Rha7MhBLv mOBzB79k/GzZpUd5BdYJfUwCILo/PFTpe3XApRJf3089NbfnGHc0hO7aKBfeOO0H MUkCs499Dp+Y+0v2rXNJHde+dwklRSlxKS9EmI2Q5lt0MgF3d3k= -----END CERTIFICATE-----Generated at Mon Oct 20 13:06:09 2025 by rpki-client