
$ rpki-client -vvf repo-rpki.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/229F9618AE3F0667EC17C977F266B2BE74C81AB7.mft
File:                     229F9618AE3F0667EC17C977F266B2BE74C81AB7.mft (raw, json)
Hash identifier:          bCYfB9l5ZVrd2IcRGnn8BswRm+nXm7TwnkYfs4VVDVw=
Subject key identifier:   B9:D6:55:C4:ED:3E:31:29:02:3E:AB:7E:4A:7F:CF:97:B7:C4:C8:DF
Authority key identifier: 22:9F:96:18:AE:3F:06:67:EC:17:C9:77:F2:66:B2:BE:74:C8:1A:B7
Certificate issuer:       /CN=229F9618AE3F0667EC17C977F266B2BE74C81AB7
Certificate serial:       7427DE405F4414F1E8681F8F1D80343F6D0108DB
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229F9618AE3F0667EC17C977F266B2BE74C81AB7.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/229F9618AE3F0667EC17C977F266B2BE74C81AB7.mft
Manifest number:          0535
Signing time:             Mon 03 Nov 2025 03:42:48 +0000
Manifest this update:     Mon 03 Nov 2025 03:37:48 +0000
Manifest next update:     Thu 06 Nov 2025 08:12:48 +0000
Files and hashes:         1: 34352e3131362e3135372e302f32342d3234203d3e20313333383233.roa (hash: murX+k5R8h8ESiT+QSuCpzrPj9+7vb21yxp17P+JmVI=)
                          2: 229F9618AE3F0667EC17C977F266B2BE74C81AB7.crl (hash: Ce7/91qSjpqqbgG2m6tpv6P07y0G94MCJIP9t7o+b7A=)
                          3: 3130332e3130342e3133342e302f32342d3234203d3e20313333383233.roa (hash: L9PlBnHs/i4t9NLRoSomC1O2F1YqU8jz1M3b0qQhUUw=)
                          4: 323430373a646630303a3a2f34382d3438203d3e203338353136.roa (hash: mKxNfIZaogpqoGD1v/HbTG1n+WMSkSPY8mtudPgnTgU=)
                          5: 323430373a646630303a313a3a2f34382d3438203d3e20313333383233.roa (hash: /OpJo01cDRJlGfeBvyqLHyVTpWA1fZyMWTJSJbd+gCM=)
                          6: 34352e3131362e3135382e302f32342d3234203d3e20313333383233.roa (hash: ULCLP9kZZOxNVrlIu58ZSD+j7UQRNK4nHv2XMRgGLuc=)
                          7: 3130332e3130342e3133332e302f32342d3234203d3e20313333383233.roa (hash: nHLhFUO3/d1KOlnJCoDhfh5DYlPgmeAohfDNtzLOH9U=)
                          8: 3130332e3130342e3133322e302f32342d3234203d3e20313333383233.roa (hash: hNHUUdaz/xmcgWweg8dc6qW4ZUh/HEb8USitKT+fel0=)
                          9: 3130332e35342e39322e302f32342d3234203d3e203338353136.roa (hash: OmHs2Hv0f8cTnPoIf5TvFj4+r1fzYXa48KbgCWe5XYI=)
                          10: 3130332e35342e39342e302f32342d3234203d3e20313333383233.roa (hash: zOhjFfZYvz6en5SX0bt2bwJN0UbIougWGwAhrOcMWOE=)
                          11: 3130332e3130342e3133352e302f32342d3234203d3e20313333383233.roa (hash: g58vS0uRqifjFt5po4KOpHYFCF7u3ZSdJUV7sz9xKFc=)
                          12: 34352e3131362e3135362e302f32322d3234203d3e20313333383233.roa (hash: GS0aH+aUalB2W4NZhY06VBijkeZAuZQtiCtdElAwgAA=)
                          13: 3130332e35342e39352e302f32342d3234203d3e20313333383233.roa (hash: vAWo/sMha9Axd+Jk89itnwJrd2zfg2QgA6Bw5YCPuyc=)
                          14: 3130332e35342e39332e302f32342d3234203d3e20313333383233.roa (hash: iU0rA2I2pdwjPlY87B+mW81OhT+cYHrzR6Mi5MNimIA=)
                          15: 3130332e3130342e3133322e302f32322d3234203d3e20313333383233.roa (hash: t0Vruq6Bebds9v5l8uxecejF/a/jD2OLoFvWrnd+8qs=)
                          16: 34352e3131362e3135392e302f32342d3234203d3e20313333383233.roa (hash: 9vKmERWi+/y+esKTTFswCbGkU/rG05yleJxXiPBZcSM=)
                          17: 34352e3131362e3135362e302f32342d3234203d3e20313333383233.roa (hash: gvli+HahlWwpXT6MXiB6a1x0yRZFhPDWq/40wV3mRrM=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/229F9618AE3F0667EC17C977F266B2BE74C81AB7.crl
                          rsync://repo-rpki.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/229F9618AE3F0667EC17C977F266B2BE74C81AB7.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229F9618AE3F0667EC17C977F266B2BE74C81AB7.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 06 Nov 2025 08:12:48 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:27:de:40:5f:44:14:f1:e8:68:1f:8f:1d:80:34:3f:6d:01:08:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=229F9618AE3F0667EC17C977F266B2BE74C81AB7
        Validity
            Not Before: Nov  3 03:37:48 2025 GMT
            Not After : Nov  6 08:12:48 2025 GMT
        Subject: CN=B9D655C4ED3E3129023EAB7E4A7FCF97B7C4C8DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:6e:60:44:7e:3f:3a:cf:c6:cb:d3:c4:e2:9f:
                    d6:1c:52:f9:81:b5:27:76:67:df:35:3d:b1:25:78:
                    f7:2c:cd:5c:30:67:c0:b5:68:55:2a:aa:6c:7d:0f:
                    4a:bf:eb:e7:53:58:07:fe:2a:f9:44:82:a4:47:23:
                    3a:d1:a9:28:bc:9e:8b:95:e4:cd:ab:cd:a6:40:c8:
                    13:b0:10:ad:95:5f:c4:65:05:62:fe:ce:83:ff:c0:
                    12:db:0b:7d:39:bc:f3:c6:5c:8f:a0:cc:44:1f:f6:
                    ed:5c:2a:1f:8e:45:b0:82:ee:b6:2a:36:0c:25:29:
                    e0:96:ef:6c:c5:3a:96:f6:71:8a:69:50:df:91:6c:
                    f1:b7:56:ad:d6:5d:11:73:25:9e:93:25:85:fa:92:
                    e1:af:b7:2a:9b:dd:f2:f1:bb:d1:ee:fd:96:d5:fd:
                    72:a4:97:16:99:73:89:bd:3a:48:96:4d:73:a1:a4:
                    0b:37:b0:e7:0c:1f:b4:19:46:0a:64:06:ce:02:90:
                    ff:a6:ab:a5:fb:d5:d1:b3:53:11:8c:ea:b5:20:ab:
                    d6:c3:90:80:3c:c7:99:f6:b9:91:24:bb:5a:1f:4c:
                    49:5a:d6:34:35:03:94:ab:d4:85:49:4d:9e:59:8d:
                    f6:b6:62:66:07:fb:68:67:89:8b:13:b8:bf:eb:aa:
                    0b:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:D6:55:C4:ED:3E:31:29:02:3E:AB:7E:4A:7F:CF:97:B7:C4:C8:DF
            X509v3 Authority Key Identifier:
                keyid:22:9F:96:18:AE:3F:06:67:EC:17:C9:77:F2:66:B2:BE:74:C8:1A:B7
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/229F9618AE3F0667EC17C977F266B2BE74C81AB7.crl
            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229F9618AE3F0667EC17C977F266B2BE74C81AB7.cer
            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/229F9618AE3F0667EC17C977F266B2BE74C81AB7.mft
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         56:52:ef:c1:a9:cb:6c:be:55:3a:52:6e:8d:a8:f0:05:ab:05:
         30:5d:ac:ed:5d:f3:b7:9a:9c:1d:11:e7:19:41:3b:80:ee:cd:
         74:8e:07:53:6c:8c:00:c9:7e:b1:f8:1f:28:a8:bb:1f:c1:b8:
         37:6b:3e:44:09:52:55:95:e0:8a:a8:c0:ee:db:85:9f:be:4f:
         1a:7f:9f:d4:6f:05:0d:04:97:90:7a:c7:79:42:25:c4:46:c0:
         36:72:69:33:95:e5:83:69:05:95:a5:5b:2b:13:ef:49:28:32:
         f3:d1:93:45:64:be:88:92:1f:f6:6a:b4:dd:cb:ff:c6:d8:3b:
         8d:c2:65:a0:42:e2:ff:cf:da:d6:ba:06:93:d6:b6:72:ff:d1:
         88:d1:4f:8b:92:65:eb:6f:b8:2b:52:a1:51:44:75:a8:a3:61:
         c3:af:f1:dd:27:b5:34:75:bd:ec:a5:f7:8c:55:ca:49:a1:57:
         cf:e7:ae:6f:02:a2:2e:e4:2e:40:01:f7:d5:cd:3c:c3:1a:8d:
         2b:4f:38:57:ac:35:c0:c5:a0:f2:bb:6b:cb:68:40:ae:70:8b:
         12:f4:dc:5a:86:99:a5:a1:52:15:6a:49:2b:ae:29:2c:dc:d1:
         3b:2e:10:e3:a9:c4:05:7c:4a:25:17:92:85:5c:b1:a3:1d:22:
         e6:5d:f7:30
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUdCfeQF9EFPHoaB+PHYA0P20BCNswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjI5Rjk2MThBRTNGMDY2N0VDMTdDOTc3RjI2NkIyQkU3
NEM4MUFCNzAeFw0yNTExMDMwMzM3NDhaFw0yNTExMDYwODEyNDhaMDMxMTAvBgNV
BAMTKEI5RDY1NUM0RUQzRTMxMjkwMjNFQUI3RTRBN0ZDRjk3QjdDNEM4REYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxbmBEfj86z8bL08Tin9YcUvmB
tSd2Z981PbElePcszVwwZ8C1aFUqqmx9D0q/6+dTWAf+KvlEgqRHIzrRqSi8nouV
5M2rzaZAyBOwEK2VX8RlBWL+zoP/wBLbC305vPPGXI+gzEQf9u1cKh+ORbCC7rYq
NgwlKeCW72zFOpb2cYppUN+RbPG3Vq3WXRFzJZ6TJYX6kuGvtyqb3fLxu9Hu/ZbV
/XKklxaZc4m9OkiWTXOhpAs3sOcMH7QZRgpkBs4CkP+mq6X71dGzUxGM6rUgq9bD
kIA8x5n2uZEku1ofTEla1jQ1A5Sr1IVJTZ5Zjfa2YmYH+2hniYsTuL/rqgsfAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUudZVxO0+MSkCPqt+Sn/Pl7fEyN8wHwYDVR0j
BBgwFoAUIp+WGK4/BmfsF8l38mayvnTIGrcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80
NDc5MWIxZi02ZGE5LTQwMGQtOGIxNC05OTJhYWU2Mzc0NmMvMC8yMjlGOTYxOEFF
M0YwNjY3RUMxN0M5NzdGMjY2QjJCRTc0QzgxQUI3LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMjI5Rjk2MThBRTNGMDY2N0VDMTdDOTc3RjI2NkIyQkU3NEM4
MUFCNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDQ3OTFiMWYtNmRhOS00MDBkLThi
MTQtOTkyYWFlNjM3NDZjLzAvMjI5Rjk2MThBRTNGMDY2N0VDMTdDOTc3RjI2NkIy
QkU3NEM4MUFCNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAFZS78Gpy2y+VTpSbo2o8AWrBTBdrO1d87ea
nB0R5xlBO4DuzXSOB1NsjADJfrH4Hyioux/BuDdrPkQJUlWV4IqowO7bhZ++Txp/
n9RvBQ0El5B6x3lCJcRGwDZyaTOV5YNpBZWlWysT70koMvPRk0VkvoiSH/ZqtN3L
/8bYO43CZaBC4v/P2ta6BpPWtnL/0YjRT4uSZetvuCtSoVFEdaijYcOv8d0ntTR1
veyl94xVykmhV8/nrm8Coi7kLkAB99XNPMMajStPOFesNcDFoPK7a8toQK5wixL0
3FqGmaWhUhVqSSuuKSzc0TsuEOOpxAV8SiUXkoVcsaMdIuZd9zA=
-----END CERTIFICATE-----
Generated at Tue Nov  4 12:56:40 2025 by rpki-client