$ rpki-client -vvf repo-rpki.idnic.net/repo/c998195f-14bb-41fd-b6ed-7a967c8e43df/0/312D6572B0C104C0D51834C1B01CB0C593DAE8B4.mft File: 312D6572B0C104C0D51834C1B01CB0C593DAE8B4.mft (raw, json) Hash identifier: t6HYuB862IYL18TYOhfKkmlYMv4zAyqhkFUK0gViPmk= Subject key identifier: A9:5C:00:85:23:70:16:90:45:5D:1D:E6:44:9D:51:71:E8:A6:15:99 Authority key identifier: 31:2D:65:72:B0:C1:04:C0:D5:18:34:C1:B0:1C:B0:C5:93:DA:E8:B4 Certificate issuer: /CN=312D6572B0C104C0D51834C1B01CB0C593DAE8B4 Certificate serial: 487641883C2512B8385D28B86B459C674E50BE01 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/312D6572B0C104C0D51834C1B01CB0C593DAE8B4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c998195f-14bb-41fd-b6ed-7a967c8e43df/0/312D6572B0C104C0D51834C1B01CB0C593DAE8B4.mft Manifest number: 013A Signing time: Sun 19 Oct 2025 05:12:17 +0000 Manifest this update: Sun 19 Oct 2025 05:07:17 +0000 Manifest next update: Wed 22 Oct 2025 05:34:17 +0000 Files and hashes: 1: 3230332e3137352e3130302e302f32332d3234203d3e20313532303132.roa (hash: Via8twfYiTOYYUS4MnDOw8zvlMb40Ue2urMBm24mYnU=) 2: 312D6572B0C104C0D51834C1B01CB0C593DAE8B4.crl (hash: UdByn60wLn6PC62zhWGXL5jVC+ooh72y72Qg96gDzgM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c998195f-14bb-41fd-b6ed-7a967c8e43df/0/312D6572B0C104C0D51834C1B01CB0C593DAE8B4.crl rsync://repo-rpki.idnic.net/repo/c998195f-14bb-41fd-b6ed-7a967c8e43df/0/312D6572B0C104C0D51834C1B01CB0C593DAE8B4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/312D6572B0C104C0D51834C1B01CB0C593DAE8B4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 05:34:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:76:41:88:3c:25:12:b8:38:5d:28:b8:6b:45:9c:67:4e:50:be:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=312D6572B0C104C0D51834C1B01CB0C593DAE8B4 Validity Not Before: Oct 19 05:07:17 2025 GMT Not After : Oct 22 05:34:17 2025 GMT Subject: CN=A95C008523701690455D1DE6449D5171E8A61599 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:d9:9f:c0:45:f6:ac:e9:88:62:b7:20:fb:67: 17:3d:5f:d5:f9:2e:79:5c:7f:b9:66:fa:f6:63:5d: 54:bc:70:5f:7c:79:65:b1:84:eb:31:21:44:cb:0f: e7:09:7f:79:2d:67:e7:45:37:60:25:6e:0f:a5:78: b3:42:f0:95:34:a8:a0:62:62:fa:dd:1c:42:8a:da: 1e:32:4d:f1:da:14:6b:4a:03:d8:eb:3d:fa:0b:c3: dc:1e:a8:17:3a:d2:52:27:ad:d7:0d:32:03:24:93: 6d:78:5f:79:43:9b:5c:1b:00:3b:e7:da:f0:69:ac: 7a:08:be:96:ed:61:cf:21:60:c3:43:c7:aa:7d:71: f1:81:0f:93:5b:13:53:da:e4:59:24:25:2d:e9:bc: ab:59:71:48:b0:fa:71:c4:7a:cb:ce:44:34:ce:6e: 26:97:f7:cc:73:a2:1a:5c:ed:8d:21:a9:36:8c:f6: 43:c5:ea:67:a4:5c:70:77:05:a1:0f:2b:43:da:31: fd:54:5c:0e:41:72:36:3e:ab:e1:9a:31:b5:59:f0: 9a:fc:b4:df:52:f3:cf:b3:b2:d6:d2:9f:01:69:25: fa:d9:cb:6f:67:4a:15:ca:fc:4f:68:cf:e7:2d:cd: 17:84:13:89:e9:78:8d:12:46:fd:94:dc:ac:d3:ad: b7:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:5C:00:85:23:70:16:90:45:5D:1D:E6:44:9D:51:71:E8:A6:15:99 X509v3 Authority Key Identifier: keyid:31:2D:65:72:B0:C1:04:C0:D5:18:34:C1:B0:1C:B0:C5:93:DA:E8:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c998195f-14bb-41fd-b6ed-7a967c8e43df/0/312D6572B0C104C0D51834C1B01CB0C593DAE8B4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/312D6572B0C104C0D51834C1B01CB0C593DAE8B4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c998195f-14bb-41fd-b6ed-7a967c8e43df/0/312D6572B0C104C0D51834C1B01CB0C593DAE8B4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:fd:cd:90:9a:5e:2d:15:5f:d3:aa:d2:aa:45:e4:97:52:9d: b6:0b:13:c8:bf:fd:db:af:33:bf:f9:f8:0f:09:9d:53:1d:99: d0:8c:bb:b9:82:5a:a0:7a:42:17:81:6b:26:1a:fb:0c:6d:4e: 04:f4:c1:20:0e:bb:6f:6f:22:cb:da:a4:8c:dc:06:a6:05:d7: 18:74:2b:ea:76:0d:7a:ca:56:14:fa:cb:3c:ac:31:44:21:19: 56:be:34:1a:58:91:b7:0e:92:e2:95:86:2d:f9:ae:a9:2b:d1: 66:ae:49:8a:c9:49:03:24:69:d2:d1:c4:aa:24:f1:dc:de:8e: bb:bb:f8:9d:0c:6f:d5:6d:0b:99:55:5e:e4:6b:77:db:a9:5f: fe:3a:ee:08:73:1f:cc:32:47:6c:e8:b6:14:3d:eb:ae:c9:e8: 31:3d:fd:e7:10:8b:8a:e9:9e:c8:05:8d:81:e5:c2:1d:12:fb: 22:2e:b3:e2:b9:db:c6:25:7c:37:a5:fe:84:ef:ba:0a:ae:00: b5:a3:0b:21:d3:86:4f:d8:6a:d5:70:79:a9:70:15:b9:1d:c2: af:a8:81:61:72:bb:53:51:31:ad:2b:80:79:95:40:a3:34:06: 90:90:7d:a8:1f:40:9c:c6:96:65:da:fe:21:13:f1:b8:1a:16: 3e:ae:06:cc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSHZBiDwlErg4XSi4a0WcZ05QvgEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzEyRDY1NzJCMEMxMDRDMEQ1MTgzNEMxQjAxQ0IwQzU5 M0RBRThCNDAeFw0yNTEwMTkwNTA3MTdaFw0yNTEwMjIwNTM0MTdaMDMxMTAvBgNV BAMTKEE5NUMwMDg1MjM3MDE2OTA0NTVEMURFNjQ0OUQ1MTcxRThBNjE1OTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDz2Z/ARfas6YhityD7Zxc9X9X5 Lnlcf7lm+vZjXVS8cF98eWWxhOsxIUTLD+cJf3ktZ+dFN2Albg+leLNC8JU0qKBi YvrdHEKK2h4yTfHaFGtKA9jrPfoLw9weqBc60lInrdcNMgMkk214X3lDm1wbADvn 2vBprHoIvpbtYc8hYMNDx6p9cfGBD5NbE1Pa5FkkJS3pvKtZcUiw+nHEesvORDTO biaX98xzohpc7Y0hqTaM9kPF6mekXHB3BaEPK0PaMf1UXA5BcjY+q+GaMbVZ8Jr8 tN9S88+zstbSnwFpJfrZy29nShXK/E9oz+ctzReEE4npeI0SRv2U3KzTrbcNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqVwAhSNwFpBFXR3mRJ1RceimFZkwHwYDVR0j BBgwFoAUMS1lcrDBBMDVGDTBsBywxZPa6LQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OTk4MTk1Zi0xNGJiLTQxZmQtYjZlZC03YTk2N2M4ZTQzZGYvMC8zMTJENjU3MkIw QzEwNEMwRDUxODM0QzFCMDFDQjBDNTkzREFFOEI0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzEyRDY1NzJCMEMxMDRDMEQ1MTgzNEMxQjAxQ0IwQzU5M0RB RThCNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzk5ODE5NWYtMTRiYi00MWZkLWI2 ZWQtN2E5NjdjOGU0M2RmLzAvMzEyRDY1NzJCMEMxMDRDMEQ1MTgzNEMxQjAxQ0Iw QzU5M0RBRThCNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABb9zZCaXi0VX9Oq0qpF5JdSnbYLE8i//duv M7/5+A8JnVMdmdCMu7mCWqB6QheBayYa+wxtTgT0wSAOu29vIsvapIzcBqYF1xh0 K+p2DXrKVhT6yzysMUQhGVa+NBpYkbcOkuKVhi35rqkr0WauSYrJSQMkadLRxKok 8dzejru7+J0Mb9VtC5lVXuRrd9upX/467ghzH8wyR2zothQ9667J6DE9/ecQi4rp nsgFjYHlwh0S+yIus+K528YlfDel/oTvugquALWjCyHThk/YatVwealwFbkdwq+o gWFyu1NRMa0rgHmVQKM0BpCQfagfQJzGlmXa/iET8bgaFj6uBsw= -----END CERTIFICATE-----Generated at Mon Oct 20 17:55:08 2025 by rpki-client