$ rpki-client -vvf repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.mft File: 229866508D6D624523EDAD2A0DE1E82AE2C3B512.mft (raw, json) Hash identifier: Ggdp32yOyl+5CSusMuIVxud+AIidb2zWKGhj0/wQm6M= Subject key identifier: C5:3D:4C:AB:49:AE:FB:83:6F:33:DF:02:CD:A3:5E:AA:12:71:57:A2 Authority key identifier: 22:98:66:50:8D:6D:62:45:23:ED:AD:2A:0D:E1:E8:2A:E2:C3:B5:12 Certificate issuer: /CN=229866508D6D624523EDAD2A0DE1E82AE2C3B512 Certificate serial: 3AEAD101D98BA30CB1DC3EB33BE432411B65C38F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.mft Manifest number: 033F Signing time: Wed 05 Nov 2025 15:31:21 +0000 Manifest this update: Wed 05 Nov 2025 15:26:21 +0000 Manifest next update: Sun 09 Nov 2025 03:24:21 +0000 Files and hashes: 1: AS10217.roa (hash: JJQedycT2rxuZ0WKBIVY+WZbOwVugUFQzwOutSTR+VY=) 2: AS147168.roa (hash: SfwVcPhlkwWs3fgP+tbn9sWqgzMndeGhqXYvwXPNvxY=) 3: AS45700.roa (hash: BXkE0BXqN50iJBAlAe18i/nlvwrKk+4GRFc684uKAn8=) 4: 229866508D6D624523EDAD2A0DE1E82AE2C3B512.crl (hash: HEO4pV2uUjjDjVVuSHrVkGUt3nyfxlUTzbw5iW8+dz8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.crl rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Nov 2025 23:17:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:ea:d1:01:d9:8b:a3:0c:b1:dc:3e:b3:3b:e4:32:41:1b:65:c3:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=229866508D6D624523EDAD2A0DE1E82AE2C3B512 Validity Not Before: Nov 5 15:26:21 2025 GMT Not After : Nov 9 03:24:21 2025 GMT Subject: CN=C53D4CAB49AEFB836F33DF02CDA35EAA127157A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:a0:31:c0:d7:7d:1d:99:d7:98:fe:75:fd:44: 08:00:e6:93:38:6a:1d:2b:e6:d4:d1:0e:4d:3c:12: 8e:be:13:1f:aa:77:5c:f0:44:31:41:4b:43:16:ec: f4:35:4c:7e:24:d4:3b:64:98:c9:24:bf:b2:0d:5b: 8a:3e:d9:2a:0c:91:fa:92:85:2c:08:29:63:fe:2e: 02:6d:12:a2:59:a1:00:8d:a5:6d:49:be:34:e0:54: 74:2c:32:1c:c6:6f:8b:73:51:9b:2c:42:3a:2c:10: a0:2e:01:e6:8d:03:3d:da:bb:27:fb:29:07:37:bc: 7c:56:71:60:04:77:75:7f:6a:3d:04:3a:42:56:25: b6:d3:b4:31:53:e7:f2:37:63:a4:0c:8b:02:f8:b7: 38:82:00:94:9b:29:40:e7:3e:d3:11:07:a0:76:82: 96:74:9a:aa:67:03:ec:0b:84:17:b7:5d:23:47:fe: 8a:bd:d3:da:ce:99:1d:e9:ff:38:2c:f0:c7:d6:04: a4:dc:ad:c1:8c:dd:04:38:48:08:f1:0f:b9:db:e4: 97:9a:02:38:07:b9:80:a2:98:80:f9:f1:18:92:2c: f8:44:f3:fe:44:63:f4:da:c0:12:2f:37:68:41:d1: 31:93:e4:08:6a:ce:2a:3d:31:d1:9e:e4:c5:bb:14: c0:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:3D:4C:AB:49:AE:FB:83:6F:33:DF:02:CD:A3:5E:AA:12:71:57:A2 X509v3 Authority Key Identifier: keyid:22:98:66:50:8D:6D:62:45:23:ED:AD:2A:0D:E1:E8:2A:E2:C3:B5:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:15:b5:e0:d5:5f:fd:57:4f:ac:9f:c8:41:ff:5f:d5:e3:0e: ff:a5:88:15:3d:cd:47:3a:30:f8:93:d3:e2:05:b9:f4:86:6e: 3f:b6:20:30:e9:b6:c2:94:5d:89:20:aa:fa:ea:39:e1:32:de: f4:bd:d8:fc:c7:90:1b:8e:48:cf:a1:13:38:4f:fc:98:96:63: 70:c2:c3:ea:26:ce:4b:24:71:cf:3d:17:a5:ee:44:13:17:9f: fe:84:1b:57:dc:4b:32:66:95:d4:45:c7:fd:6c:92:ae:50:5b: 3a:63:dc:15:6b:03:56:12:62:60:73:d4:71:b5:93:9d:26:ea: 26:c0:6b:0e:60:07:6c:af:60:ea:42:e7:03:dc:f2:c0:e7:9c: c6:2a:66:0b:f6:4f:36:ed:5f:71:39:21:b8:b9:33:0b:df:85: 61:f5:b3:34:ac:a9:8f:d7:33:a7:ef:63:70:55:20:fd:9b:33: 3a:a9:d6:14:5d:85:af:db:21:fb:c6:53:e3:bc:c1:b1:a7:6c: c6:2b:63:8e:39:4c:52:ef:89:5d:7c:55:cb:d8:c7:6d:e9:9c: c0:f5:9d:51:59:ed:a2:7c:e0:20:0e:6b:75:95:ac:02:07:4d: bf:13:2e:4d:ce:57:b0:c0:3d:0d:e0:12:fa:d6:fa:46:53:94: 46:b4:86:0d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOurRAdmLowyx3D6zO+QyQRtlw48wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjI5ODY2NTA4RDZENjI0NTIzRURBRDJBMERFMUU4MkFF MkMzQjUxMjAeFw0yNTExMDUxNTI2MjFaFw0yNTExMDkwMzI0MjFaMDMxMTAvBgNV BAMTKEM1M0Q0Q0FCNDlBRUZCODM2RjMzREYwMkNEQTM1RUFBMTI3MTU3QTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDoDHA130dmdeY/nX9RAgA5pM4 ah0r5tTRDk08Eo6+Ex+qd1zwRDFBS0MW7PQ1TH4k1DtkmMkkv7INW4o+2SoMkfqS hSwIKWP+LgJtEqJZoQCNpW1JvjTgVHQsMhzGb4tzUZssQjosEKAuAeaNAz3auyf7 KQc3vHxWcWAEd3V/aj0EOkJWJbbTtDFT5/I3Y6QMiwL4tziCAJSbKUDnPtMRB6B2 gpZ0mqpnA+wLhBe3XSNH/oq909rOmR3p/zgs8MfWBKTcrcGM3QQ4SAjxD7nb5Jea AjgHuYCimID58RiSLPhE8/5EY/TawBIvN2hB0TGT5Ahqzio9MdGe5MW7FMA5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxT1Mq0mu+4NvM98CzaNeqhJxV6IwHwYDVR0j BBgwFoAUIphmUI1tYkUj7a0qDeHoKuLDtRIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZmI3MDgxOC0yMzY2LTQyZTAtOWRiZC0yNTQzODEwNjllNTcvMC8yMjk4NjY1MDhE NkQ2MjQ1MjNFREFEMkEwREUxRTgyQUUyQzNCNTEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjI5ODY2NTA4RDZENjI0NTIzRURBRDJBMERFMUU4MkFFMkMz QjUxMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmZiNzA4MTgtMjM2Ni00MmUwLTlk YmQtMjU0MzgxMDY5ZTU3LzAvMjI5ODY2NTA4RDZENjI0NTIzRURBRDJBMERFMUU4 MkFFMkMzQjUxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIwVteDVX/1XT6yfyEH/X9XjDv+liBU9zUc6 MPiT0+IFufSGbj+2IDDptsKUXYkgqvrqOeEy3vS92PzHkBuOSM+hEzhP/JiWY3DC w+omzkskcc89F6XuRBMXn/6EG1fcSzJmldRFx/1skq5QWzpj3BVrA1YSYmBz1HG1 k50m6ibAaw5gB2yvYOpC5wPc8sDnnMYqZgv2TzbtX3E5Ibi5MwvfhWH1szSsqY/X M6fvY3BVIP2bMzqp1hRdha/bIfvGU+O8wbGnbMYrY445TFLviV18VcvYx23pnMD1 nVFZ7aJ84CAOa3WVrAIHTb8TLk3OV7DAPQ3gEvrW+kZTlEa0hg0= -----END CERTIFICATE-----Generated at Wed Nov 5 19:47:24 2025 by rpki-client