$ rpki-client -vvf repo-rpki.idnic.net/repo/0450f0f5-b883-4b24-9792-7e957af88bf8/0/322B7BBC7BE2A84D8D644A6B68333963517CAFFA.mft File: 322B7BBC7BE2A84D8D644A6B68333963517CAFFA.mft (raw, json) Hash identifier: z7qdRSs14eN6tL0enkNs3qFBIXSNvOpwjF2BE10200w= Subject key identifier: 28:CF:FA:51:17:3B:58:6F:B1:6C:4B:5B:3F:43:95:7A:C4:32:6D:7F Authority key identifier: 32:2B:7B:BC:7B:E2:A8:4D:8D:64:4A:6B:68:33:39:63:51:7C:AF:FA Certificate issuer: /CN=322B7BBC7BE2A84D8D644A6B68333963517CAFFA Certificate serial: 2280AA201A323AB0CDA20231A85161E406899021 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/322B7BBC7BE2A84D8D644A6B68333963517CAFFA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0450f0f5-b883-4b24-9792-7e957af88bf8/0/322B7BBC7BE2A84D8D644A6B68333963517CAFFA.mft Manifest number: 0210 Signing time: Tue 04 Nov 2025 01:32:23 +0000 Manifest this update: Tue 04 Nov 2025 01:27:23 +0000 Manifest next update: Fri 07 Nov 2025 05:13:23 +0000 Files and hashes: 1: 3130332e3138372e38382e302f32332d3233203d3e20313439393439.roa (hash: XbN3LxifTwY+vVTUMpMOqOr29jBN2u/bmUS0N8LyhH0=) 2: 322B7BBC7BE2A84D8D644A6B68333963517CAFFA.crl (hash: MrxXkd8L168CuaXrFtnCnMojoOXs9ICNnRdtAgkYDBc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0450f0f5-b883-4b24-9792-7e957af88bf8/0/322B7BBC7BE2A84D8D644A6B68333963517CAFFA.crl rsync://repo-rpki.idnic.net/repo/0450f0f5-b883-4b24-9792-7e957af88bf8/0/322B7BBC7BE2A84D8D644A6B68333963517CAFFA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/322B7BBC7BE2A84D8D644A6B68333963517CAFFA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 05:13:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:80:aa:20:1a:32:3a:b0:cd:a2:02:31:a8:51:61:e4:06:89:90:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=322B7BBC7BE2A84D8D644A6B68333963517CAFFA Validity Not Before: Nov 4 01:27:23 2025 GMT Not After : Nov 7 05:13:23 2025 GMT Subject: CN=28CFFA51173B586FB16C4B5B3F43957AC4326D7F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:1f:c9:65:cd:2e:94:e7:08:1a:cc:95:b8:83: 68:42:6c:6c:57:17:a8:1f:1b:b3:af:fb:e8:9d:1f: 4f:05:9b:9e:73:cc:0a:b7:e5:57:39:dd:fd:ac:27: 82:b5:82:ab:b5:78:6c:92:db:2e:ee:1c:f8:fd:b7: 68:d3:3c:26:1c:db:da:4c:b2:31:a5:2e:8d:16:22: 3d:6b:5f:27:0b:0a:92:80:c0:a5:2c:88:93:6c:9a: 37:bf:00:f1:1e:43:46:a9:f1:ae:b2:b0:c4:aa:9d: 11:0b:d1:c9:42:fd:1a:cf:c2:d6:8b:ab:42:e1:a5: 83:ca:82:ba:eb:fd:54:d4:a5:95:b6:64:09:79:f8: fb:94:b7:7d:08:7e:c9:a2:9b:12:05:d5:1b:e5:0e: d7:78:08:35:1f:83:01:6f:75:0c:62:52:84:b6:bd: 77:f7:1d:08:f9:d2:e0:bd:a2:03:f0:9b:0b:ad:f8: cb:72:3f:95:31:17:3d:21:eb:43:6e:71:c9:d9:55: 90:74:1a:90:d0:1a:51:15:a4:b6:5f:96:44:c4:0d: 7a:b6:5b:ee:c4:e6:52:62:82:1d:cb:94:bb:59:02: 9a:84:1d:9e:3e:fd:20:6e:6f:79:47:64:f7:30:14: bb:2a:cb:52:77:b8:4e:83:40:17:2e:98:22:81:33: 68:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:CF:FA:51:17:3B:58:6F:B1:6C:4B:5B:3F:43:95:7A:C4:32:6D:7F X509v3 Authority Key Identifier: keyid:32:2B:7B:BC:7B:E2:A8:4D:8D:64:4A:6B:68:33:39:63:51:7C:AF:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0450f0f5-b883-4b24-9792-7e957af88bf8/0/322B7BBC7BE2A84D8D644A6B68333963517CAFFA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/322B7BBC7BE2A84D8D644A6B68333963517CAFFA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0450f0f5-b883-4b24-9792-7e957af88bf8/0/322B7BBC7BE2A84D8D644A6B68333963517CAFFA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:c0:6e:6a:7e:3d:07:c5:eb:db:f6:a1:f8:a7:a5:b7:ec:ef: e6:6a:fc:7b:f8:4b:6a:3f:ab:38:7c:8a:5c:9a:fa:f8:d8:81: 75:7c:4e:00:92:f9:ee:d3:04:fa:91:38:66:13:d2:86:15:3e: 02:cb:a6:31:f7:ff:97:64:cd:f8:9f:c1:5f:fb:89:68:52:8b: 0d:c9:3c:14:51:81:2c:c2:d6:80:c8:25:84:bd:e4:ae:a7:66: 2b:fc:84:09:49:11:c9:18:81:1e:c9:4f:ba:c2:5a:5f:a8:bd: 43:89:d6:58:6b:00:de:18:ac:98:05:40:ed:14:ff:70:a9:f2: 1b:7d:cf:2e:a8:de:ba:11:e2:a2:13:bb:da:70:0d:9b:8f:53: 66:00:15:b9:72:a3:ba:9c:b8:4d:7e:e0:42:69:97:b2:48:01: ad:c4:63:d7:bb:bd:80:ba:da:24:33:1f:0b:7d:6e:00:ca:fc: 44:78:69:76:93:ca:64:b1:bf:39:68:66:15:38:6c:de:5f:4b: 62:14:44:ad:9b:67:f3:2c:e0:ee:f7:ce:12:9c:22:ea:c4:6f: f5:af:b6:17:ab:3e:fa:61:10:17:1e:a8:ed:fa:b3:0c:af:4b: d7:88:d9:56:df:74:7b:27:6b:13:47:fb:57:26:f1:26:b2:fe: 95:0a:4b:9d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIoCqIBoyOrDNogIxqFFh5AaJkCEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzIyQjdCQkM3QkUyQTg0RDhENjQ0QTZCNjgzMzM5NjM1 MTdDQUZGQTAeFw0yNTExMDQwMTI3MjNaFw0yNTExMDcwNTEzMjNaMDMxMTAvBgNV BAMTKDI4Q0ZGQTUxMTczQjU4NkZCMTZDNEI1QjNGNDM5NTdBQzQzMjZEN0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYH8llzS6U5wgazJW4g2hCbGxX F6gfG7Ov++idH08Fm55zzAq35Vc53f2sJ4K1gqu1eGyS2y7uHPj9t2jTPCYc29pM sjGlLo0WIj1rXycLCpKAwKUsiJNsmje/APEeQ0ap8a6ysMSqnREL0clC/RrPwtaL q0LhpYPKgrrr/VTUpZW2ZAl5+PuUt30IfsmimxIF1RvlDtd4CDUfgwFvdQxiUoS2 vXf3HQj50uC9ogPwmwut+MtyP5UxFz0h60NuccnZVZB0GpDQGlEVpLZflkTEDXq2 W+7E5lJigh3LlLtZApqEHZ4+/SBub3lHZPcwFLsqy1J3uE6DQBcumCKBM2inAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKM/6URc7WG+xbEtbP0OVesQybX8wHwYDVR0j BBgwFoAUMit7vHviqE2NZEpraDM5Y1F8r/owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NDUwZjBmNS1iODgzLTRiMjQtOTc5Mi03ZTk1N2FmODhiZjgvMC8zMjJCN0JCQzdC RTJBODREOEQ2NDRBNkI2ODMzMzk2MzUxN0NBRkZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzIyQjdCQkM3QkUyQTg0RDhENjQ0QTZCNjgzMzM5NjM1MTdD QUZGQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDQ1MGYwZjUtYjg4My00YjI0LTk3 OTItN2U5NTdhZjg4YmY4LzAvMzIyQjdCQkM3QkUyQTg0RDhENjQ0QTZCNjgzMzM5 NjM1MTdDQUZGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALjAbmp+PQfF69v2ofinpbfs7+Zq/Hv4S2o/ qzh8ilya+vjYgXV8TgCS+e7TBPqROGYT0oYVPgLLpjH3/5dkzfifwV/7iWhSiw3J PBRRgSzC1oDIJYS95K6nZiv8hAlJEckYgR7JT7rCWl+ovUOJ1lhrAN4YrJgFQO0U /3Cp8ht9zy6o3roR4qITu9pwDZuPU2YAFblyo7qcuE1+4EJpl7JIAa3EY9e7vYC6 2iQzHwt9bgDK/ER4aXaTymSxvzloZhU4bN5fS2IURK2bZ/Ms4O73zhKcIurEb/Wv therPvphEBceqO36swyvS9eI2VbfdHsnaxNH+1cm8Say/pUKS50= -----END CERTIFICATE-----Generated at Tue Nov 4 23:08:58 2025 by rpki-client