$ rpki-client -vvf repo-rpki.idnic.net/repo/0041b48d-73c4-4cdd-bcac-a59699bcbbc1/0/1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.mft File: 1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.mft (raw, json) Hash identifier: sQmm9qwKd9pGu/lqM1yp92HP4GrAtM5iDbpAnYddhKE= Subject key identifier: 33:3C:8D:ED:B9:AA:5C:EF:5B:D9:98:55:18:C4:49:B3:9F:3F:A4:6A Authority key identifier: 1C:22:CD:3D:77:91:A7:91:87:DA:9D:03:4E:B4:BB:5E:D5:E4:64:2A Certificate issuer: /CN=1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A Certificate serial: 1512C6C1BD89C294AC513D4141B96AEB84E46B36 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0041b48d-73c4-4cdd-bcac-a59699bcbbc1/0/1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.mft Manifest number: 039D Signing time: Mon 03 Nov 2025 21:41:06 +0000 Manifest this update: Mon 03 Nov 2025 21:36:06 +0000 Manifest next update: Fri 07 Nov 2025 02:17:06 +0000 Files and hashes: 1: 3130332e3136342e3234382e302f32332d3234203d3e203137393935.roa (hash: LTBEQvAXAeuY0KH0kB6kKvzSEQh0r1sAqnbQ1uPtbW4=) 2: 1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.crl (hash: +LKzKCeoM4+/sCcyaPA28mS83RJInHcOnWNOhW6vkY8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0041b48d-73c4-4cdd-bcac-a59699bcbbc1/0/1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.crl rsync://repo-rpki.idnic.net/repo/0041b48d-73c4-4cdd-bcac-a59699bcbbc1/0/1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 02:17:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:12:c6:c1:bd:89:c2:94:ac:51:3d:41:41:b9:6a:eb:84:e4:6b:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A Validity Not Before: Nov 3 21:36:06 2025 GMT Not After : Nov 7 02:17:06 2025 GMT Subject: CN=333C8DEDB9AA5CEF5BD9985518C449B39F3FA46A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:c6:29:dc:d9:da:9d:d9:59:92:54:30:90:94: 38:98:9c:c5:0e:af:9c:2d:46:16:cb:c7:43:b4:23: ef:75:1c:89:35:4c:b3:97:2a:87:c8:66:0b:b8:86: 2e:27:0c:8f:48:08:0e:86:82:7f:d8:0c:48:12:31: 6c:74:96:03:2f:cc:ac:86:7a:b8:83:33:bd:a9:cb: 6c:e8:3f:5f:3c:c3:3d:0c:87:82:84:1f:03:99:d4: be:eb:93:b5:a9:6d:00:03:61:83:2c:47:9b:87:e7: b9:7a:c3:86:b4:bd:de:3a:52:9b:fb:21:f1:cb:8f: dc:e8:57:22:14:63:dc:1d:fc:04:7c:02:b6:2b:cc: 25:c9:8a:7d:ea:26:6a:96:a9:b2:07:e2:94:94:cd: 7e:e4:cb:fd:83:99:85:ab:52:0c:08:66:8e:de:83: f2:72:6b:4a:7d:86:7f:6b:18:18:77:33:33:55:9e: 3f:20:97:c8:ea:fa:09:33:d6:69:be:b8:aa:b2:d4: 9f:cb:61:72:c9:5b:5a:71:16:31:af:eb:d3:9e:a8: 14:72:30:72:53:04:bb:77:07:a6:e0:4e:14:7a:e7: 25:c4:a7:14:52:f9:63:4c:1c:3d:2f:25:ed:e9:0f: 18:e4:31:f0:c6:1e:2e:f4:1f:22:a0:43:9d:ab:4c: c9:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:3C:8D:ED:B9:AA:5C:EF:5B:D9:98:55:18:C4:49:B3:9F:3F:A4:6A X509v3 Authority Key Identifier: keyid:1C:22:CD:3D:77:91:A7:91:87:DA:9D:03:4E:B4:BB:5E:D5:E4:64:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0041b48d-73c4-4cdd-bcac-a59699bcbbc1/0/1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0041b48d-73c4-4cdd-bcac-a59699bcbbc1/0/1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:6a:25:6d:46:8d:d2:93:98:5b:9f:06:d0:22:98:a8:16:c3: b5:a5:8b:d0:58:a7:84:f2:75:d3:4a:29:47:4a:6f:98:9a:e4: 07:0b:9e:71:55:3f:5d:41:d7:9a:38:7f:db:6c:b8:67:d7:5c: 92:a3:06:3a:cf:dc:eb:3b:25:b8:04:61:f7:b5:19:94:f6:4a: 8d:91:5b:d2:ab:43:78:ad:c2:35:7a:a9:03:14:6a:ce:30:1b: b7:48:f5:48:c2:ae:79:db:4c:9c:0c:10:0e:c6:fb:fa:c4:03: 41:a5:06:55:09:7c:45:2b:0e:1f:fb:ef:27:76:9d:e0:01:94: a6:9f:cb:37:fc:93:62:2c:67:2c:3e:10:34:ad:fd:4b:f0:3a: 18:9c:a2:1c:b2:ce:44:e7:01:ef:fd:f1:26:00:80:b2:95:48: d2:10:fe:89:4d:a4:22:ba:7f:9b:d1:c4:4b:6d:10:4d:6e:70: 7d:f6:85:76:5e:66:44:0b:ea:4e:87:5a:4e:ae:c1:4b:02:4e: 7a:af:b1:81:4d:a7:3f:17:10:6c:2f:37:fd:ba:c0:a4:fd:9f: 65:8f:10:a2:25:1e:ed:6a:15:8e:ea:3d:d3:dc:fa:53:91:65: 33:c9:93:4c:5e:1e:22:59:3a:f4:72:b5:94:3f:89:2b:b6:2a: da:a0:d0:6c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFRLGwb2JwpSsUT1BQblq64TkazYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUMyMkNEM0Q3NzkxQTc5MTg3REE5RDAzNEVCNEJCNUVE NUU0NjQyQTAeFw0yNTExMDMyMTM2MDZaFw0yNTExMDcwMjE3MDZaMDMxMTAvBgNV BAMTKDMzM0M4REVEQjlBQTVDRUY1QkQ5OTg1NTE4QzQ0OUIzOUYzRkE0NkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUxinc2dqd2VmSVDCQlDiYnMUO r5wtRhbLx0O0I+91HIk1TLOXKofIZgu4hi4nDI9ICA6Ggn/YDEgSMWx0lgMvzKyG eriDM72py2zoP188wz0Mh4KEHwOZ1L7rk7WpbQADYYMsR5uH57l6w4a0vd46Upv7 IfHLj9zoVyIUY9wd/AR8ArYrzCXJin3qJmqWqbIH4pSUzX7ky/2DmYWrUgwIZo7e g/Jya0p9hn9rGBh3MzNVnj8gl8jq+gkz1mm+uKqy1J/LYXLJW1pxFjGv69OeqBRy MHJTBLt3B6bgThR65yXEpxRS+WNMHD0vJe3pDxjkMfDGHi70HyKgQ52rTMnfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMzyN7bmqXO9b2ZhVGMRJs58/pGowHwYDVR0j BBgwFoAUHCLNPXeRp5GH2p0DTrS7XtXkZCowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MDQxYjQ4ZC03M2M0LTRjZGQtYmNhYy1hNTk2OTliY2JiYzEvMC8xQzIyQ0QzRDc3 OTFBNzkxODdEQTlEMDM0RUI0QkI1RUQ1RTQ2NDJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUMyMkNEM0Q3NzkxQTc5MTg3REE5RDAzNEVCNEJCNUVENUU0 NjQyQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDA0MWI0OGQtNzNjNC00Y2RkLWJj YWMtYTU5Njk5YmNiYmMxLzAvMUMyMkNEM0Q3NzkxQTc5MTg3REE5RDAzNEVCNEJC NUVENUU0NjQyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADFqJW1GjdKTmFufBtAimKgWw7Wli9BYp4Ty ddNKKUdKb5ia5AcLnnFVP11B15o4f9tsuGfXXJKjBjrP3Os7JbgEYfe1GZT2So2R W9KrQ3itwjV6qQMUas4wG7dI9UjCrnnbTJwMEA7G+/rEA0GlBlUJfEUrDh/77yd2 neABlKafyzf8k2IsZyw+EDSt/UvwOhicohyyzkTnAe/98SYAgLKVSNIQ/olNpCK6 f5vRxEttEE1ucH32hXZeZkQL6k6HWk6uwUsCTnqvsYFNpz8XEGwvN/26wKT9n2WP EKIlHu1qFY7qPdPc+lORZTPJk0xeHiJZOvRytZQ/iSu2Ktqg0Gw= -----END CERTIFICATE-----Generated at Tue Nov 4 01:56:42 2025 by rpki-client