$ rpki-client -vvf repo-rpki.idnic.net/repo/3900208b-32ac-4a26-9d92-609ad76183c1/0/22825A0BEE926683AC41A0486AEF55AF8C1C228F.mft File: 22825A0BEE926683AC41A0486AEF55AF8C1C228F.mft (raw, json) Hash identifier: nZYfeS8P48IJDHbSoZh8sOo4Ztl+iEmPDvZdv/yERsE= Subject key identifier: 4F:64:BA:CC:C0:C0:C8:7F:69:B5:D0:1E:2F:4B:27:AA:A9:5D:FE:A3 Authority key identifier: 22:82:5A:0B:EE:92:66:83:AC:41:A0:48:6A:EF:55:AF:8C:1C:22:8F Certificate issuer: /CN=22825A0BEE926683AC41A0486AEF55AF8C1C228F Certificate serial: 5D3A7BA33E3544DF6E947238B97A48BC436A46B9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/22825A0BEE926683AC41A0486AEF55AF8C1C228F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3900208b-32ac-4a26-9d92-609ad76183c1/0/22825A0BEE926683AC41A0486AEF55AF8C1C228F.mft Manifest number: 01C0 Signing time: Tue 04 Nov 2025 16:50:45 +0000 Manifest this update: Tue 04 Nov 2025 16:45:45 +0000 Manifest next update: Fri 07 Nov 2025 23:06:45 +0000 Files and hashes: 1: 22825A0BEE926683AC41A0486AEF55AF8C1C228F.crl (hash: 9I9Mg7RMfyKdLChAgW0gM1oElxCsJpstX0Vspa6g2rs=) 2: 3130332e3133392e3137352e302f32342d3234203d3e20313331373435.roa (hash: /z/ZhPaw5F3TCZQvmgqcleuF3rFMMJYxb+Mr//w9yXY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3900208b-32ac-4a26-9d92-609ad76183c1/0/22825A0BEE926683AC41A0486AEF55AF8C1C228F.crl rsync://repo-rpki.idnic.net/repo/3900208b-32ac-4a26-9d92-609ad76183c1/0/22825A0BEE926683AC41A0486AEF55AF8C1C228F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/22825A0BEE926683AC41A0486AEF55AF8C1C228F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 13:50:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:3a:7b:a3:3e:35:44:df:6e:94:72:38:b9:7a:48:bc:43:6a:46:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22825A0BEE926683AC41A0486AEF55AF8C1C228F Validity Not Before: Nov 4 16:45:45 2025 GMT Not After : Nov 7 23:06:45 2025 GMT Subject: CN=4F64BACCC0C0C87F69B5D01E2F4B27AAA95DFEA3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:35:fb:57:17:64:8d:cd:02:aa:91:ef:70:3f: 75:97:4b:51:5c:81:d3:f7:59:7c:c8:46:1a:0a:5a: 78:1b:e8:38:dd:3d:e5:87:ce:fd:4d:1a:c4:5f:43: 9d:8a:2e:7a:05:b8:f2:ed:1a:b4:f1:7c:10:98:c5: 27:55:78:8c:2d:48:b1:72:88:8c:28:ed:0d:25:84: e5:4d:bc:b1:fc:d2:9f:1c:10:e2:71:b7:d0:43:43: 0d:0d:92:af:df:d7:b5:5d:b9:51:d8:bf:83:7e:ac: 1f:41:e0:5e:b3:8b:b3:45:d8:75:ce:77:0d:e3:5e: 77:91:49:f6:5f:19:93:fd:6d:14:e4:cc:e4:e7:fd: 75:cc:41:f2:8d:b9:75:d6:b9:18:b2:09:60:37:e8: ec:31:8b:b1:5e:89:2d:90:57:d4:95:bf:b0:46:f3: 3a:90:55:12:6e:01:74:33:fc:e6:49:84:12:86:4a: fd:a0:84:a7:85:bf:b8:36:1e:41:62:66:9a:dd:ca: ef:7f:9c:fb:a2:02:02:ec:75:06:85:6d:93:7b:85: 95:8b:80:f7:ad:e7:0b:76:20:f3:12:e9:22:28:f2: d8:9a:77:aa:53:e0:1c:70:b6:08:05:f4:0a:14:20: ee:60:6d:fd:d3:7f:15:a4:07:62:90:af:56:e0:3d: de:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:64:BA:CC:C0:C0:C8:7F:69:B5:D0:1E:2F:4B:27:AA:A9:5D:FE:A3 X509v3 Authority Key Identifier: keyid:22:82:5A:0B:EE:92:66:83:AC:41:A0:48:6A:EF:55:AF:8C:1C:22:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3900208b-32ac-4a26-9d92-609ad76183c1/0/22825A0BEE926683AC41A0486AEF55AF8C1C228F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/22825A0BEE926683AC41A0486AEF55AF8C1C228F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3900208b-32ac-4a26-9d92-609ad76183c1/0/22825A0BEE926683AC41A0486AEF55AF8C1C228F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:77:15:11:73:05:18:c3:4c:5e:13:6f:af:dd:0a:3f:6f:1e: c6:6e:c6:23:e6:71:6e:a7:5b:93:e9:02:a3:b0:43:5e:74:9e: 06:eb:11:42:88:e4:48:15:0e:a8:03:10:1f:e7:0c:1f:fa:05: 0f:d0:e1:28:06:56:b1:92:ce:e8:36:ff:35:d3:bc:9f:9f:7b: b3:72:37:50:0b:e1:99:da:ae:2e:dd:92:bc:ad:c4:b5:4a:96: 76:ef:e6:ca:a2:c1:cd:3a:68:87:a1:dd:bd:10:5b:7e:84:39: 82:95:b3:ee:04:95:89:e8:ad:e3:af:58:58:61:ba:f7:95:0d: 69:03:7a:88:2d:e6:62:1a:16:68:fd:51:71:55:17:8b:88:2c: 9d:5d:77:5c:70:4d:bf:62:fb:dc:4c:6d:db:97:3f:60:0f:76: 8a:de:1c:ef:f1:91:06:31:29:cc:a4:12:f6:d2:6e:08:ff:9e: 7f:bc:5c:81:30:e2:b6:9d:ff:00:58:ef:51:5c:88:f1:86:87: 75:4e:e5:e5:64:7d:36:7a:a1:68:f5:63:fe:43:ee:a5:cc:0a: ea:16:aa:19:1b:2f:c5:5e:fa:27:dc:bf:8a:9a:09:0b:d1:b1: a9:1c:5e:3b:82:53:3e:39:3b:51:4f:00:1f:6f:bf:40:5c:e8: e2:42:a5:26 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXTp7oz41RN9ulHI4uXpIvENqRrkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjI4MjVBMEJFRTkyNjY4M0FDNDFBMDQ4NkFFRjU1QUY4 QzFDMjI4RjAeFw0yNTExMDQxNjQ1NDVaFw0yNTExMDcyMzA2NDVaMDMxMTAvBgNV BAMTKDRGNjRCQUNDQzBDMEM4N0Y2OUI1RDAxRTJGNEIyN0FBQTk1REZFQTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbNftXF2SNzQKqke9wP3WXS1Fc gdP3WXzIRhoKWngb6DjdPeWHzv1NGsRfQ52KLnoFuPLtGrTxfBCYxSdVeIwtSLFy iIwo7Q0lhOVNvLH80p8cEOJxt9BDQw0Nkq/f17VduVHYv4N+rB9B4F6zi7NF2HXO dw3jXneRSfZfGZP9bRTkzOTn/XXMQfKNuXXWuRiyCWA36Owxi7FeiS2QV9SVv7BG 8zqQVRJuAXQz/OZJhBKGSv2ghKeFv7g2HkFiZprdyu9/nPuiAgLsdQaFbZN7hZWL gPet5wt2IPMS6SIo8tiad6pT4BxwtggF9AoUIO5gbf3TfxWkB2KQr1bgPd7PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUT2S6zMDAyH9ptdAeL0snqqld/qMwHwYDVR0j BBgwFoAUIoJaC+6SZoOsQaBIau9Vr4wcIo8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z OTAwMjA4Yi0zMmFjLTRhMjYtOWQ5Mi02MDlhZDc2MTgzYzEvMC8yMjgyNUEwQkVF OTI2NjgzQUM0MUEwNDg2QUVGNTVBRjhDMUMyMjhGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjI4MjVBMEJFRTkyNjY4M0FDNDFBMDQ4NkFFRjU1QUY4QzFD MjI4Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzkwMDIwOGItMzJhYy00YTI2LTlk OTItNjA5YWQ3NjE4M2MxLzAvMjI4MjVBMEJFRTkyNjY4M0FDNDFBMDQ4NkFFRjU1 QUY4QzFDMjI4Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALh3FRFzBRjDTF4Tb6/dCj9vHsZuxiPmcW6n W5PpAqOwQ150ngbrEUKI5EgVDqgDEB/nDB/6BQ/Q4SgGVrGSzug2/zXTvJ+fe7Ny N1AL4Znari7dkrytxLVKlnbv5sqiwc06aIeh3b0QW36EOYKVs+4ElYnoreOvWFhh uveVDWkDeogt5mIaFmj9UXFVF4uILJ1dd1xwTb9i+9xMbduXP2APdoreHO/xkQYx KcykEvbSbgj/nn+8XIEw4rad/wBY71FciPGGh3VO5eVkfTZ6oWj1Y/5D7qXMCuoW qhkbL8Ve+ifcv4qaCQvRsakcXjuCUz45O1FPAB9vv0Bc6OJCpSY= -----END CERTIFICATE-----Generated at Tue Nov 4 21:29:16 2025 by rpki-client