$ rpki-client -vvf repo-rpki.idnic.net/repo/b4dadcd0-f1a9-48e4-a2c5-de1818bffe43/0/331490A5F62E7F3FD55E137CB052AC340E403BDF.mft File: 331490A5F62E7F3FD55E137CB052AC340E403BDF.mft (raw, json) Hash identifier: K/UeMJzC5kQPDbwpxP458R7w+tmJ50BGu9gYIqq9Jwk= Subject key identifier: B3:C1:68:F3:CC:D5:C9:59:64:4E:92:17:B4:D7:93:2C:3E:60:FB:CC Authority key identifier: 33:14:90:A5:F6:2E:7F:3F:D5:5E:13:7C:B0:52:AC:34:0E:40:3B:DF Certificate issuer: /CN=331490A5F62E7F3FD55E137CB052AC340E403BDF Certificate serial: 4BF2DBE790E1F232CFAF95ECE2977841081EEE33 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/331490A5F62E7F3FD55E137CB052AC340E403BDF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b4dadcd0-f1a9-48e4-a2c5-de1818bffe43/0/331490A5F62E7F3FD55E137CB052AC340E403BDF.mft Manifest number: 018D Signing time: Thu 21 Aug 2025 19:01:36 +0000 Manifest this update: Thu 21 Aug 2025 18:56:36 +0000 Manifest next update: Sun 24 Aug 2025 20:56:36 +0000 Files and hashes: 1: 3130332e3139322e3137342e302f32342d3234203d3e20313530353439.roa (hash: I/e8pz2HwtXx0PhrGgambRJs/dGIlkUlFDHx6iNzq9I=) 2: 331490A5F62E7F3FD55E137CB052AC340E403BDF.crl (hash: AKHXDpipxhSxw6yw5qc8DtxQ3Rj3nhCES2pMIgn/nIE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b4dadcd0-f1a9-48e4-a2c5-de1818bffe43/0/331490A5F62E7F3FD55E137CB052AC340E403BDF.crl rsync://repo-rpki.idnic.net/repo/b4dadcd0-f1a9-48e4-a2c5-de1818bffe43/0/331490A5F62E7F3FD55E137CB052AC340E403BDF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/331490A5F62E7F3FD55E137CB052AC340E403BDF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 20:56:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:f2:db:e7:90:e1:f2:32:cf:af:95:ec:e2:97:78:41:08:1e:ee:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=331490A5F62E7F3FD55E137CB052AC340E403BDF Validity Not Before: Aug 21 18:56:36 2025 GMT Not After : Aug 24 20:56:36 2025 GMT Subject: CN=B3C168F3CCD5C959644E9217B4D7932C3E60FBCC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:8d:7f:f4:cc:e8:e0:72:aa:c2:d8:ed:c9:0d: b9:44:b9:a8:ae:a7:c9:d8:3b:be:6b:f4:d1:26:ef: 18:b2:65:bf:96:e9:82:25:b3:15:5a:a0:9e:b1:bb: 4a:5d:f4:61:d1:e2:bb:62:63:45:97:0f:6f:09:bc: 6a:e8:3f:b9:ef:68:e5:35:52:48:82:fa:62:36:82: e2:a7:e7:a7:d1:33:6a:16:7e:59:53:f9:70:8f:0a: 52:bb:2c:ba:ca:c8:1f:64:15:11:c3:3f:06:fd:f9: 59:ac:1f:7e:db:f3:d0:57:d2:81:33:d5:1f:a4:68: d0:7d:31:c3:36:09:ef:f1:b6:cc:5e:32:2c:d7:ba: 38:9b:a5:b6:b8:03:2c:ef:8b:47:76:ac:45:92:b3: 9a:17:f8:c8:a1:b3:05:d5:80:73:44:4a:35:bb:d7: f5:ff:ec:eb:1b:8f:d1:90:91:01:c4:09:13:be:c4: 0d:06:97:a1:50:86:cb:ca:84:ec:a6:38:31:1a:e4: 5b:91:c0:b2:cd:78:7f:c1:eb:1e:b5:ba:c6:67:67: 10:fc:24:69:97:a6:67:8b:1a:0a:67:bc:36:c2:5b: 9b:b3:03:e8:62:bb:5b:b9:be:ce:ac:48:a9:6a:8e: 5b:24:4e:b4:7b:13:a7:2d:16:f4:bf:03:f7:e1:8c: 43:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:C1:68:F3:CC:D5:C9:59:64:4E:92:17:B4:D7:93:2C:3E:60:FB:CC X509v3 Authority Key Identifier: keyid:33:14:90:A5:F6:2E:7F:3F:D5:5E:13:7C:B0:52:AC:34:0E:40:3B:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b4dadcd0-f1a9-48e4-a2c5-de1818bffe43/0/331490A5F62E7F3FD55E137CB052AC340E403BDF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/331490A5F62E7F3FD55E137CB052AC340E403BDF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b4dadcd0-f1a9-48e4-a2c5-de1818bffe43/0/331490A5F62E7F3FD55E137CB052AC340E403BDF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:8d:ad:04:ba:3f:a6:c4:0c:e3:f8:02:b9:41:a3:e9:d7:c9: c7:35:2a:82:48:10:b3:35:0e:7f:10:70:1b:1d:59:ab:6a:75: 89:ac:ce:7b:47:b7:fc:34:3e:5b:43:18:33:95:04:a8:ea:90: 53:6a:c8:02:bb:ba:eb:e9:a8:fc:10:0b:00:97:d9:a0:ab:fd: a9:53:f7:c5:71:47:fc:31:b9:95:ab:b0:cf:d4:69:62:eb:ee: 39:80:b1:db:f2:ff:3a:0d:f7:1a:c3:fb:8c:fb:24:aa:fc:be: 9e:f1:ce:81:c9:2e:48:9b:23:2d:77:8c:c9:24:bd:10:39:6e: 53:ce:ba:ef:fb:9f:05:cc:46:2e:86:0f:7f:3f:8a:65:27:f3: b0:ee:e7:38:86:b3:cf:88:33:d3:64:35:b8:2b:f7:67:3d:16: b3:63:b9:8c:44:12:e0:46:ab:dc:cd:ee:12:b4:8f:57:ea:96: fc:92:de:78:05:e5:51:8b:c6:27:5b:d6:43:29:42:cc:83:c6: 5d:d3:52:33:86:56:72:bb:7b:98:83:d1:7e:f0:65:1a:ee:e3: 09:a1:56:ce:9b:94:e1:8d:61:76:90:ba:8b:73:50:c0:76:8e: 53:db:e9:29:8c:00:c6:35:f8:4f:d4:36:f7:11:aa:cd:fd:be: e4:03:71:0d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS/Lb55Dh8jLPr5Xs4pd4QQge7jMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzMxNDkwQTVGNjJFN0YzRkQ1NUUxMzdDQjA1MkFDMzQw RTQwM0JERjAeFw0yNTA4MjExODU2MzZaFw0yNTA4MjQyMDU2MzZaMDMxMTAvBgNV BAMTKEIzQzE2OEYzQ0NENUM5NTk2NDRFOTIxN0I0RDc5MzJDM0U2MEZCQ0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0jX/0zOjgcqrC2O3JDblEuaiu p8nYO75r9NEm7xiyZb+W6YIlsxVaoJ6xu0pd9GHR4rtiY0WXD28JvGroP7nvaOU1 UkiC+mI2guKn56fRM2oWfllT+XCPClK7LLrKyB9kFRHDPwb9+VmsH37b89BX0oEz 1R+kaNB9McM2Ce/xtsxeMizXujibpba4Ayzvi0d2rEWSs5oX+MihswXVgHNESjW7 1/X/7Osbj9GQkQHECRO+xA0Gl6FQhsvKhOymODEa5FuRwLLNeH/B6x61usZnZxD8 JGmXpmeLGgpnvDbCW5uzA+hiu1u5vs6sSKlqjlskTrR7E6ctFvS/A/fhjEO/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUs8Fo88zVyVlkTpIXtNeTLD5g+8wwHwYDVR0j BBgwFoAUMxSQpfYufz/VXhN8sFKsNA5AO98wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NGRhZGNkMC1mMWE5LTQ4ZTQtYTJjNS1kZTE4MThiZmZlNDMvMC8zMzE0OTBBNUY2 MkU3RjNGRDU1RTEzN0NCMDUyQUMzNDBFNDAzQkRGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzMxNDkwQTVGNjJFN0YzRkQ1NUUxMzdDQjA1MkFDMzQwRTQw M0JERi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjRkYWRjZDAtZjFhOS00OGU0LWEy YzUtZGUxODE4YmZmZTQzLzAvMzMxNDkwQTVGNjJFN0YzRkQ1NUUxMzdDQjA1MkFD MzQwRTQwM0JERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC2NrQS6P6bEDOP4ArlBo+nXycc1KoJIELM1 Dn8QcBsdWatqdYmszntHt/w0PltDGDOVBKjqkFNqyAK7uuvpqPwQCwCX2aCr/alT 98VxR/wxuZWrsM/UaWLr7jmAsdvy/zoN9xrD+4z7JKr8vp7xzoHJLkibIy13jMkk vRA5blPOuu/7nwXMRi6GD38/imUn87Du5ziGs8+IM9NkNbgr92c9FrNjuYxEEuBG q9zN7hK0j1fqlvyS3ngF5VGLxidb1kMpQsyDxl3TUjOGVnK7e5iD0X7wZRru4wmh Vs6blOGNYXaQuotzUMB2jlPb6SmMAMY1+E/UNvcRqs39vuQDcQ0= -----END CERTIFICATE-----Generated at Sat Aug 23 17:41:41 2025 by rpki-client