$ rpki-client -vvf repo-rpki.idnic.net/repo/b4dadcd0-f1a9-48e4-a2c5-de1818bffe43/0/331490A5F62E7F3FD55E137CB052AC340E403BDF.mft File: 331490A5F62E7F3FD55E137CB052AC340E403BDF.mft (raw, json) Hash identifier: elH7MGVWF05NyC1utE4GeIYyDD3Hb7Id6eFkwlNmwrk= Subject key identifier: F3:90:80:44:22:96:8C:2F:07:DD:FA:DC:D7:04:F5:84:E5:58:32:8E Authority key identifier: 33:14:90:A5:F6:2E:7F:3F:D5:5E:13:7C:B0:52:AC:34:0E:40:3B:DF Certificate issuer: /CN=331490A5F62E7F3FD55E137CB052AC340E403BDF Certificate serial: 26F880EE797F306CBCA73C1459F9EDAEA50819D1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/331490A5F62E7F3FD55E137CB052AC340E403BDF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b4dadcd0-f1a9-48e4-a2c5-de1818bffe43/0/331490A5F62E7F3FD55E137CB052AC340E403BDF.mft Manifest number: 01A8 Signing time: Sun 19 Oct 2025 17:41:31 +0000 Manifest this update: Sun 19 Oct 2025 17:36:31 +0000 Manifest next update: Wed 22 Oct 2025 19:37:31 +0000 Files and hashes: 1: 3130332e3139322e3137342e302f32342d3234203d3e20313530353439.roa (hash: I/e8pz2HwtXx0PhrGgambRJs/dGIlkUlFDHx6iNzq9I=) 2: 331490A5F62E7F3FD55E137CB052AC340E403BDF.crl (hash: gCMia00698k+Ltsxjqk2uxMaTCIIYPxnRFtWzrv5DPM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b4dadcd0-f1a9-48e4-a2c5-de1818bffe43/0/331490A5F62E7F3FD55E137CB052AC340E403BDF.crl rsync://repo-rpki.idnic.net/repo/b4dadcd0-f1a9-48e4-a2c5-de1818bffe43/0/331490A5F62E7F3FD55E137CB052AC340E403BDF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/331490A5F62E7F3FD55E137CB052AC340E403BDF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 19:37:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:f8:80:ee:79:7f:30:6c:bc:a7:3c:14:59:f9:ed:ae:a5:08:19:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=331490A5F62E7F3FD55E137CB052AC340E403BDF Validity Not Before: Oct 19 17:36:31 2025 GMT Not After : Oct 22 19:37:31 2025 GMT Subject: CN=F390804422968C2F07DDFADCD704F584E558328E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:64:7b:10:b2:60:df:44:e6:1b:eb:45:d3:04: 91:40:ff:f0:a8:a1:01:b9:e8:14:80:82:98:7a:9a: 5b:dc:b9:e5:5b:89:cf:54:6c:42:36:e5:b7:e3:f0: 06:1c:ff:7b:54:f8:40:a5:11:dd:df:f6:7f:d0:17: 80:74:b3:89:37:73:34:f8:c5:77:e1:0c:7a:0f:ac: be:ee:9e:be:1b:55:db:97:20:88:24:fa:41:77:3d: 9f:6d:5c:73:23:80:55:b2:d2:4b:b0:71:2a:9e:af: c4:7c:61:51:0e:a0:b7:2f:29:33:33:64:6c:8f:f3: 70:d6:37:22:99:a9:46:1a:4b:8a:9b:4b:fa:f1:34: a8:91:41:05:be:04:2f:eb:2d:eb:5b:32:84:85:9f: 03:8c:7e:ab:ce:6b:45:87:b4:19:87:0d:0a:3e:3c: fd:8d:5a:83:97:f4:2a:81:38:7c:87:96:9d:a5:bf: 04:86:9b:ce:40:60:fc:44:01:b6:a3:21:69:d1:6b: 8d:9d:18:d6:64:e2:96:89:8b:28:c1:f3:69:1b:6c: 91:b7:1e:69:95:25:ac:92:47:2c:47:a1:80:ad:90: 52:e9:f2:9d:c5:bd:f7:eb:e2:23:c6:8d:d3:02:33: d8:9a:f1:e4:2d:47:57:22:59:aa:97:03:c5:2e:72: b5:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:90:80:44:22:96:8C:2F:07:DD:FA:DC:D7:04:F5:84:E5:58:32:8E X509v3 Authority Key Identifier: keyid:33:14:90:A5:F6:2E:7F:3F:D5:5E:13:7C:B0:52:AC:34:0E:40:3B:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b4dadcd0-f1a9-48e4-a2c5-de1818bffe43/0/331490A5F62E7F3FD55E137CB052AC340E403BDF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/331490A5F62E7F3FD55E137CB052AC340E403BDF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b4dadcd0-f1a9-48e4-a2c5-de1818bffe43/0/331490A5F62E7F3FD55E137CB052AC340E403BDF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:f8:3b:f8:a6:00:d2:f3:3e:11:66:56:b3:55:02:3c:9d:64: 21:11:72:c2:54:7a:9a:88:ab:c5:f5:df:ff:b0:d0:c8:18:ce: 60:82:9b:60:4f:66:db:5a:53:ae:9f:c9:21:9c:8e:88:17:e7: 59:e9:73:d6:ac:9d:0c:c9:b5:3f:61:c8:9c:e1:fb:9b:a7:30: a4:41:ea:8f:c8:6d:03:ce:ec:9c:20:37:95:13:7e:98:8b:61: 43:28:35:bf:3b:28:4d:57:3e:38:51:76:d9:b8:30:d9:ad:ca: 97:78:60:52:d2:4a:8b:c6:93:21:b7:e5:2a:ab:f2:ce:fe:c1: ea:79:97:55:13:47:36:67:4c:11:f5:4e:b5:9c:0a:1e:a0:27: 7d:ee:dc:74:de:0e:83:e1:e3:1d:5b:9a:fb:b5:6c:6b:28:a5: a3:9c:ba:7e:5b:da:4c:f5:2e:f4:33:4c:bc:fa:54:08:a0:aa: 86:e4:52:63:08:e2:a1:93:16:fe:ab:80:98:ba:05:87:ce:d9: 2c:34:10:cc:c6:31:d1:a3:8c:05:02:45:d0:77:05:ad:50:19: f7:89:86:be:b9:b9:75:28:2c:ae:dd:64:85:46:c6:da:bb:3c: b0:0a:42:0f:c6:e2:bc:d3:4b:d3:bc:03:34:6b:0d:f0:84:78: 78:3f:e3:52 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJviA7nl/MGy8pzwUWfntrqUIGdEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzMxNDkwQTVGNjJFN0YzRkQ1NUUxMzdDQjA1MkFDMzQw RTQwM0JERjAeFw0yNTEwMTkxNzM2MzFaFw0yNTEwMjIxOTM3MzFaMDMxMTAvBgNV BAMTKEYzOTA4MDQ0MjI5NjhDMkYwN0RERkFEQ0Q3MDRGNTg0RTU1ODMyOEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/ZHsQsmDfROYb60XTBJFA//Co oQG56BSAgph6mlvcueVbic9UbEI25bfj8AYc/3tU+EClEd3f9n/QF4B0s4k3czT4 xXfhDHoPrL7unr4bVduXIIgk+kF3PZ9tXHMjgFWy0kuwcSqer8R8YVEOoLcvKTMz ZGyP83DWNyKZqUYaS4qbS/rxNKiRQQW+BC/rLetbMoSFnwOMfqvOa0WHtBmHDQo+ PP2NWoOX9CqBOHyHlp2lvwSGm85AYPxEAbajIWnRa42dGNZk4paJiyjB82kbbJG3 HmmVJaySRyxHoYCtkFLp8p3Fvffr4iPGjdMCM9ia8eQtR1ciWaqXA8UucrVpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU85CARCKWjC8H3frc1wT1hOVYMo4wHwYDVR0j BBgwFoAUMxSQpfYufz/VXhN8sFKsNA5AO98wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NGRhZGNkMC1mMWE5LTQ4ZTQtYTJjNS1kZTE4MThiZmZlNDMvMC8zMzE0OTBBNUY2 MkU3RjNGRDU1RTEzN0NCMDUyQUMzNDBFNDAzQkRGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzMxNDkwQTVGNjJFN0YzRkQ1NUUxMzdDQjA1MkFDMzQwRTQw M0JERi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjRkYWRjZDAtZjFhOS00OGU0LWEy YzUtZGUxODE4YmZmZTQzLzAvMzMxNDkwQTVGNjJFN0YzRkQ1NUUxMzdDQjA1MkFD MzQwRTQwM0JERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJH4O/imANLzPhFmVrNVAjydZCERcsJUepqI q8X13/+w0MgYzmCCm2BPZttaU66fySGcjogX51npc9asnQzJtT9hyJzh+5unMKRB 6o/IbQPO7JwgN5UTfpiLYUMoNb87KE1XPjhRdtm4MNmtypd4YFLSSovGkyG35Sqr 8s7+wep5l1UTRzZnTBH1TrWcCh6gJ33u3HTeDoPh4x1bmvu1bGsopaOcun5b2kz1 LvQzTLz6VAigqobkUmMI4qGTFv6rgJi6BYfO2Sw0EMzGMdGjjAUCRdB3Ba1QGfeJ hr65uXUoLK7dZIVGxtq7PLAKQg/G4rzTS9O8AzRrDfCEeHg/41I= -----END CERTIFICATE-----Generated at Mon Oct 20 09:28:51 2025 by rpki-client