$ rpki-client -vvf repo-rpki.idnic.net/repo/6da0cdd9-7f31-4f1f-ab09-a60cc0859cda/0/2244AB179BDE031980D325EEBEAFEC994CA8B419.mft File: 2244AB179BDE031980D325EEBEAFEC994CA8B419.mft (raw, json) Hash identifier: ioGwHCTZsOhpRfXhs04dOHSSoVkZ4cBuZ6mKPMhVHjE= Subject key identifier: BD:48:FC:B7:E5:FC:6A:8C:68:F7:D7:0E:FF:86:32:87:50:30:E5:00 Authority key identifier: 22:44:AB:17:9B:DE:03:19:80:D3:25:EE:BE:AF:EC:99:4C:A8:B4:19 Certificate issuer: /CN=2244AB179BDE031980D325EEBEAFEC994CA8B419 Certificate serial: 769DAA69BA17D66DAE2F577B2EED5F559AA1FA27 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2244AB179BDE031980D325EEBEAFEC994CA8B419.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6da0cdd9-7f31-4f1f-ab09-a60cc0859cda/0/2244AB179BDE031980D325EEBEAFEC994CA8B419.mft Manifest number: C2 Signing time: Mon 03 Nov 2025 14:20:59 +0000 Manifest this update: Mon 03 Nov 2025 14:15:59 +0000 Manifest next update: Thu 06 Nov 2025 16:08:59 +0000 Files and hashes: 1: 2244AB179BDE031980D325EEBEAFEC994CA8B419.crl (hash: kBgp9FQJL7If0nn3Khah+VpHiqfPxesFoJ2CoRIFbYg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6da0cdd9-7f31-4f1f-ab09-a60cc0859cda/0/2244AB179BDE031980D325EEBEAFEC994CA8B419.crl rsync://repo-rpki.idnic.net/repo/6da0cdd9-7f31-4f1f-ab09-a60cc0859cda/0/2244AB179BDE031980D325EEBEAFEC994CA8B419.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2244AB179BDE031980D325EEBEAFEC994CA8B419.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 16:08:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:9d:aa:69:ba:17:d6:6d:ae:2f:57:7b:2e:ed:5f:55:9a:a1:fa:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2244AB179BDE031980D325EEBEAFEC994CA8B419 Validity Not Before: Nov 3 14:15:59 2025 GMT Not After : Nov 6 16:08:59 2025 GMT Subject: CN=BD48FCB7E5FC6A8C68F7D70EFF8632875030E500 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ff:71:19:65:94:24:5e:66:18:23:d8:b8:06: 23:4b:aa:a6:5c:f2:82:72:2d:47:52:6e:0a:bc:7a: 31:7d:73:6d:2a:96:1d:d3:49:10:e0:66:82:76:20: 3c:67:4f:d8:21:be:7f:d9:da:aa:c9:48:c1:f4:65: 4e:df:56:f1:ff:19:c4:31:28:bb:68:34:4e:00:22: aa:56:e9:08:18:b4:4a:fd:00:14:76:6d:ee:42:c6: 10:c4:b9:bc:47:94:49:79:bb:af:c2:fd:58:9b:f3: 67:3b:a2:c0:29:7a:93:5f:76:7b:67:0f:66:20:34: d5:8c:54:83:05:75:cb:0d:3c:7e:d8:0a:ac:01:f6: 6b:0c:69:5a:4b:dc:03:25:14:33:b9:f7:d0:88:35: a4:fa:0b:7a:73:8e:d3:f9:ab:ae:d9:7b:43:f0:31: 88:88:65:31:56:8b:98:33:89:35:2d:09:ba:56:6f: 14:b1:0b:f1:80:e7:50:61:2a:d9:5d:f0:79:d4:9d: ef:26:7a:cc:13:d9:6c:6e:32:5d:68:25:67:b0:de: e5:98:4e:d3:fc:b1:05:bf:88:38:e4:5c:c4:46:8a: a2:fe:b7:08:37:85:8f:fe:7d:8c:2f:a9:98:49:71: b8:42:d8:a9:af:32:61:ae:77:7f:f3:ba:1d:30:cf: 4b:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:48:FC:B7:E5:FC:6A:8C:68:F7:D7:0E:FF:86:32:87:50:30:E5:00 X509v3 Authority Key Identifier: keyid:22:44:AB:17:9B:DE:03:19:80:D3:25:EE:BE:AF:EC:99:4C:A8:B4:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6da0cdd9-7f31-4f1f-ab09-a60cc0859cda/0/2244AB179BDE031980D325EEBEAFEC994CA8B419.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2244AB179BDE031980D325EEBEAFEC994CA8B419.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6da0cdd9-7f31-4f1f-ab09-a60cc0859cda/0/2244AB179BDE031980D325EEBEAFEC994CA8B419.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:c2:77:ab:5f:ac:d3:b5:c7:53:cb:e7:94:a2:94:bf:f0:9b: 96:6e:6e:df:56:48:94:af:4e:cb:0d:59:2f:ea:dc:81:27:b1: b7:93:64:19:2d:55:5d:28:67:38:0a:83:c6:ce:93:e7:62:2b: c3:8b:fb:64:36:74:eb:07:ae:97:57:e1:40:f1:17:e1:2a:5e: 53:a0:c1:91:df:73:0b:b3:a2:fc:d7:85:ed:75:e0:9f:2a:5b: cc:4a:ad:15:7a:e5:a6:0f:f1:0a:c4:99:c0:95:c9:5b:e8:90: 51:0a:62:4f:b2:e1:69:24:cf:54:64:1a:7f:1d:86:77:3f:49: b0:cf:04:9a:7f:9b:18:82:f4:49:fd:07:60:cc:01:52:2b:0f: 66:6e:24:f4:a4:43:af:71:1d:42:e5:eb:dd:1e:dd:1a:70:f5: f6:d9:3e:73:16:b9:a0:2a:21:f2:a8:2e:27:20:d3:c3:c1:75: 8d:9c:3e:68:73:88:12:fe:8c:fa:66:76:52:2e:6d:0d:4d:1e: 49:1a:33:7e:2a:fe:2f:ae:52:b1:83:4f:3d:20:c6:c2:e2:18: b6:32:62:d5:0c:21:28:40:de:5e:b0:d5:a1:d2:15:bf:52:b9: 8c:50:11:fd:eb:67:98:ef:b3:7a:da:f3:a3:1a:53:45:17:41: da:bf:cb:2d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdp2qaboX1m2uL1d7Lu1fVZqh+icwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjI0NEFCMTc5QkRFMDMxOTgwRDMyNUVFQkVBRkVDOTk0 Q0E4QjQxOTAeFw0yNTExMDMxNDE1NTlaFw0yNTExMDYxNjA4NTlaMDMxMTAvBgNV BAMTKEJENDhGQ0I3RTVGQzZBOEM2OEY3RDcwRUZGODYzMjg3NTAzMEU1MDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1/3EZZZQkXmYYI9i4BiNLqqZc 8oJyLUdSbgq8ejF9c20qlh3TSRDgZoJ2IDxnT9ghvn/Z2qrJSMH0ZU7fVvH/GcQx KLtoNE4AIqpW6QgYtEr9ABR2be5CxhDEubxHlEl5u6/C/Vib82c7osApepNfdntn D2YgNNWMVIMFdcsNPH7YCqwB9msMaVpL3AMlFDO599CINaT6C3pzjtP5q67Ze0Pw MYiIZTFWi5gziTUtCbpWbxSxC/GA51BhKtld8HnUne8meswT2WxuMl1oJWew3uWY TtP8sQW/iDjkXMRGiqL+twg3hY/+fYwvqZhJcbhC2KmvMmGud3/zuh0wz0svAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvUj8t+X8aoxo99cO/4Yyh1Aw5QAwHwYDVR0j BBgwFoAUIkSrF5veAxmA0yXuvq/smUyotBkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZGEwY2RkOS03ZjMxLTRmMWYtYWIwOS1hNjBjYzA4NTljZGEvMC8yMjQ0QUIxNzlC REUwMzE5ODBEMzI1RUVCRUFGRUM5OTRDQThCNDE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjI0NEFCMTc5QkRFMDMxOTgwRDMyNUVFQkVBRkVDOTk0Q0E4 QjQxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmRhMGNkZDktN2YzMS00ZjFmLWFi MDktYTYwY2MwODU5Y2RhLzAvMjI0NEFCMTc5QkRFMDMxOTgwRDMyNUVFQkVBRkVD OTk0Q0E4QjQxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK7Cd6tfrNO1x1PL55SilL/wm5Zubt9WSJSv TssNWS/q3IEnsbeTZBktVV0oZzgKg8bOk+diK8OL+2Q2dOsHrpdX4UDxF+EqXlOg wZHfcwuzovzXhe114J8qW8xKrRV65aYP8QrEmcCVyVvokFEKYk+y4Wkkz1RkGn8d hnc/SbDPBJp/mxiC9En9B2DMAVIrD2ZuJPSkQ69xHULl690e3Rpw9fbZPnMWuaAq IfKoLicg08PBdY2cPmhziBL+jPpmdlIubQ1NHkkaM34q/i+uUrGDTz0gxsLiGLYy YtUMIShA3l6w1aHSFb9SuYxQEf3rZ5jvs3ra86MaU0UXQdq/yy0= -----END CERTIFICATE-----Generated at Tue Nov 4 12:38:29 2025 by rpki-client