$ rpki-client -vvf repo-rpki.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.mft File: 131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.mft (raw, json) Hash identifier: 7wh/ZojFCGLVixRD9TGGgU7LIjY0anjquocwU5E5oJc= Subject key identifier: A8:94:8C:E0:8E:A6:D1:4A:26:69:02:39:5B:E5:89:DD:5B:7B:2A:97 Authority key identifier: 13:18:07:BD:DA:AF:97:ED:72:21:4D:FB:C5:C5:39:AC:B0:4F:DC:BE Certificate issuer: /CN=131807BDDAAF97ED72214DFBC5C539ACB04FDCBE Certificate serial: 5F0A0448CC6E4F71939A70D834F85E782EEA3986 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.mft Manifest number: 031D Signing time: Sat 18 Oct 2025 23:40:55 +0000 Manifest this update: Sat 18 Oct 2025 23:35:55 +0000 Manifest next update: Wed 22 Oct 2025 09:50:55 +0000 Files and hashes: 1: 131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.crl (hash: jJUwmuy87KEatBHrQ4MVg8wkrUiEjojA+p50plvDoR0=) 2: 3130332e3137342e32342e302f32332d3234203d3e20313331313131.roa (hash: IcV/PuSEjSNsy6cbDUeXZVgPYs8xhMimlvvll5vTiXU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.crl rsync://repo-rpki.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 09:50:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:0a:04:48:cc:6e:4f:71:93:9a:70:d8:34:f8:5e:78:2e:ea:39:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=131807BDDAAF97ED72214DFBC5C539ACB04FDCBE Validity Not Before: Oct 18 23:35:55 2025 GMT Not After : Oct 22 09:50:55 2025 GMT Subject: CN=A8948CE08EA6D14A266902395BE589DD5B7B2A97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:10:ea:fa:03:01:90:bc:03:ab:80:1d:07:f0: f2:87:c7:ba:a4:36:e9:58:27:25:da:ed:39:6e:3e: 9c:29:52:6f:31:71:cd:30:a9:b7:24:10:1b:fe:d0: fc:ea:a0:31:ae:97:95:6f:cc:bb:41:08:ed:57:73: 9e:2f:99:c0:34:f5:5b:34:dd:e2:ea:da:05:ce:3b: f6:df:7b:52:09:ae:f1:a5:d0:39:52:a3:4c:89:04: 47:99:0f:93:b5:77:ff:d6:8a:26:d0:5d:ff:a3:f6: b4:a5:34:c1:88:59:4d:4d:48:50:67:7c:b2:1c:aa: ac:a5:2a:b6:e4:e2:3d:64:34:e7:77:a0:8b:49:89: c9:da:43:4e:79:9e:6d:c1:fb:b7:14:9c:00:06:52: 7c:04:3b:c3:09:6b:ef:77:0c:da:48:28:b5:9b:d6: a1:32:8f:e9:83:c8:f4:ab:ce:89:d5:fc:c8:23:12: c1:bf:ef:4a:ce:67:00:11:6b:0c:ca:c7:1a:f8:1a: 49:42:0e:23:3c:da:47:a9:a2:e2:c2:9a:f2:41:67: aa:f0:7c:76:47:fc:e0:5f:24:9f:2d:83:3b:ed:be: 6a:ae:ec:29:40:6d:f0:62:48:72:19:db:ad:74:2d: 25:d3:e4:cb:f4:5d:fa:cc:bc:ba:49:6e:64:66:a0: 13:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:94:8C:E0:8E:A6:D1:4A:26:69:02:39:5B:E5:89:DD:5B:7B:2A:97 X509v3 Authority Key Identifier: keyid:13:18:07:BD:DA:AF:97:ED:72:21:4D:FB:C5:C5:39:AC:B0:4F:DC:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:2f:4b:87:24:3b:d1:6e:cd:3a:96:99:0c:48:83:ba:f1:59: f0:88:0c:78:2a:81:bf:73:67:52:11:74:a3:2d:06:d3:f4:5d: c1:94:17:6d:51:04:8c:fe:07:d4:a6:21:ad:4a:73:57:c2:9c: 26:bb:52:79:a1:05:a0:98:f8:f2:a8:50:4c:cb:f3:3e:e4:07: e1:cb:af:e9:aa:11:56:f2:95:43:f8:9d:c5:0c:49:c6:ba:05: 0d:a0:ca:16:5a:d3:fc:97:c0:2e:37:7e:4e:9b:d2:75:a1:75: 50:ad:07:ec:cf:2d:51:9e:e1:d9:c3:03:45:c4:df:ea:c5:c9: b1:fa:31:2b:44:4e:f2:26:f6:fd:ed:15:ee:a2:51:25:1a:ce: 65:0e:b5:c1:1e:6f:8a:7e:18:d5:5c:d0:dc:e0:bf:94:de:56: 31:ba:6b:27:9d:5a:50:23:db:1d:e8:7b:c6:d7:64:e0:1c:98: 64:c3:8e:72:bd:b8:41:1c:3b:ad:e7:f1:19:6f:2d:44:58:d5: b5:36:b1:b5:9b:d3:66:9d:e0:9d:95:99:35:a0:d7:31:c9:20: 9d:0d:d0:a7:67:bc:79:7f:da:dc:1b:d1:97:6a:51:be:10:8e: d8:6d:2a:d8:59:1a:d3:d7:ab:4c:c4:5a:ed:1d:d3:4c:34:bd: 78:cf:95:fd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXwoESMxuT3GTmnDYNPheeC7qOYYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTMxODA3QkREQUFGOTdFRDcyMjE0REZCQzVDNTM5QUNC MDRGRENCRTAeFw0yNTEwMTgyMzM1NTVaFw0yNTEwMjIwOTUwNTVaMDMxMTAvBgNV BAMTKEE4OTQ4Q0UwOEVBNkQxNEEyNjY5MDIzOTVCRTU4OURENUI3QjJBOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQEOr6AwGQvAOrgB0H8PKHx7qk NulYJyXa7TluPpwpUm8xcc0wqbckEBv+0PzqoDGul5VvzLtBCO1Xc54vmcA09Vs0 3eLq2gXOO/bfe1IJrvGl0DlSo0yJBEeZD5O1d//WiibQXf+j9rSlNMGIWU1NSFBn fLIcqqylKrbk4j1kNOd3oItJicnaQ055nm3B+7cUnAAGUnwEO8MJa+93DNpIKLWb 1qEyj+mDyPSrzonV/MgjEsG/70rOZwARawzKxxr4GklCDiM82kepouLCmvJBZ6rw fHZH/OBfJJ8tgzvtvmqu7ClAbfBiSHIZ2610LSXT5Mv0XfrMvLpJbmRmoBO7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqJSM4I6m0UomaQI5W+WJ3Vt7KpcwHwYDVR0j BBgwFoAUExgHvdqvl+1yIU37xcU5rLBP3L4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZjI1Yjk2OC0wOTI3LTQ1OTQtODg3ZS02N2Y1M2Y5NjdiMTIvMC8xMzE4MDdCRERB QUY5N0VENzIyMTRERkJDNUM1MzlBQ0IwNEZEQ0JFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTMxODA3QkREQUFGOTdFRDcyMjE0REZCQzVDNTM5QUNCMDRG RENCRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmYyNWI5NjgtMDkyNy00NTk0LTg4 N2UtNjdmNTNmOTY3YjEyLzAvMTMxODA3QkREQUFGOTdFRDcyMjE0REZCQzVDNTM5 QUNCMDRGRENCRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMAvS4ckO9FuzTqWmQxIg7rxWfCIDHgqgb9z Z1IRdKMtBtP0XcGUF21RBIz+B9SmIa1Kc1fCnCa7UnmhBaCY+PKoUEzL8z7kB+HL r+mqEVbylUP4ncUMSca6BQ2gyhZa0/yXwC43fk6b0nWhdVCtB+zPLVGe4dnDA0XE 3+rFybH6MStETvIm9v3tFe6iUSUazmUOtcEeb4p+GNVc0Nzgv5TeVjG6ayedWlAj 2x3oe8bXZOAcmGTDjnK9uEEcO63n8RlvLURY1bU2sbWb02ad4J2VmTWg1zHJIJ0N 0KdnvHl/2twb0ZdqUb4QjthtKthZGtPXq0zEWu0d00w0vXjPlf0= -----END CERTIFICATE-----Generated at Mon Oct 20 12:38:35 2025 by rpki-client