$ rpki-client -vvf repo-rpki.idnic.net/repo/8392f899-e83c-4706-a9a1-82256bd48236/0/1C49A098778B751B36DDC816E9E5106C08F3E99E.mft File: 1C49A098778B751B36DDC816E9E5106C08F3E99E.mft (raw, json) Hash identifier: 6YCjrZd3w2TLqXdubkLZcM2jpKAJ4Cyfor9kTdj5qEU= Subject key identifier: 87:80:9A:32:7F:3D:F6:F1:C2:D5:D7:94:10:87:E2:08:B5:DA:1D:FC Authority key identifier: 1C:49:A0:98:77:8B:75:1B:36:DD:C8:16:E9:E5:10:6C:08:F3:E9:9E Certificate issuer: /CN=1C49A098778B751B36DDC816E9E5106C08F3E99E Certificate serial: 7C098162C976D8AE42AAD307C7DE139D49A1C4B6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C49A098778B751B36DDC816E9E5106C08F3E99E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8392f899-e83c-4706-a9a1-82256bd48236/0/1C49A098778B751B36DDC816E9E5106C08F3E99E.mft Manifest number: 022B Signing time: Sun 02 Nov 2025 22:30:38 +0000 Manifest this update: Sun 02 Nov 2025 22:25:38 +0000 Manifest next update: Thu 06 Nov 2025 01:09:38 +0000 Files and hashes: 1: 3130332e3137372e3138382e302f32332d3233203d3e20313439333533.roa (hash: SC3nnyfsyA5bEyARFBloY8n1qyf6YOcVCdvguQUIDxI=) 2: 3130332e3137372e3138382e302f32342d3234203d3e20313439333533.roa (hash: tnbiCaMjB/wcfly5HgYg5Hs8RqnmeGK4G33+Ng72LlI=) 3: 1C49A098778B751B36DDC816E9E5106C08F3E99E.crl (hash: dOBrQJ5RLUcrtMExzZ/b1FnNHtpNsnKc7Y41kD3K5+E=) 4: 3130332e3137372e3138392e302f32342d3234203d3e20313439333533.roa (hash: puq2H8zvnhoSbMetrd+BHkvHPZyYcgU1qmlh4ZB0qEo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8392f899-e83c-4706-a9a1-82256bd48236/0/1C49A098778B751B36DDC816E9E5106C08F3E99E.crl rsync://repo-rpki.idnic.net/repo/8392f899-e83c-4706-a9a1-82256bd48236/0/1C49A098778B751B36DDC816E9E5106C08F3E99E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C49A098778B751B36DDC816E9E5106C08F3E99E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 01:09:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:09:81:62:c9:76:d8:ae:42:aa:d3:07:c7:de:13:9d:49:a1:c4:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1C49A098778B751B36DDC816E9E5106C08F3E99E Validity Not Before: Nov 2 22:25:38 2025 GMT Not After : Nov 6 01:09:38 2025 GMT Subject: CN=87809A327F3DF6F1C2D5D7941087E208B5DA1DFC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:bf:fb:81:30:14:28:95:b8:fc:d2:67:f5:16: 13:6a:ad:4a:d6:7f:b0:22:1b:47:fa:c8:08:83:76: 12:5e:85:65:e0:44:ea:19:a4:fa:f3:8d:c1:45:dd: 17:60:03:2f:28:94:32:1d:86:53:3f:54:a6:00:b9: 96:23:4b:85:2e:e8:db:59:a6:ff:17:ca:56:96:7b: 5e:b0:86:c1:e6:4a:ab:33:27:16:fd:91:61:af:f6: db:84:7d:77:d6:08:f1:2c:7f:4a:6f:99:0d:37:4c: 1e:2c:c4:d1:37:1a:88:cb:47:e4:e6:a5:2b:67:ac: 65:6d:7f:41:ad:69:b8:47:17:cc:0a:d4:8e:fe:de: bb:01:22:6c:70:77:d6:50:f6:f9:6c:d9:89:1c:8e: f5:99:c5:b4:e7:b3:e6:65:4f:72:fa:9c:bd:eb:33: fe:1a:d1:7e:c6:b8:3c:9c:39:be:ad:90:95:d8:9c: 71:cb:51:00:71:ad:59:22:e6:de:b0:21:ad:12:96: 54:fa:83:76:2d:fb:5e:a3:f0:8b:41:02:6c:b9:99: 7d:a2:75:d5:f7:fb:3c:80:5e:fe:45:2e:88:ca:34: 6a:2e:06:77:99:16:15:af:a7:71:aa:e8:81:ef:f5: 83:a8:d9:47:f4:c2:89:7e:fa:61:9c:55:da:39:ab: 95:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:80:9A:32:7F:3D:F6:F1:C2:D5:D7:94:10:87:E2:08:B5:DA:1D:FC X509v3 Authority Key Identifier: keyid:1C:49:A0:98:77:8B:75:1B:36:DD:C8:16:E9:E5:10:6C:08:F3:E9:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8392f899-e83c-4706-a9a1-82256bd48236/0/1C49A098778B751B36DDC816E9E5106C08F3E99E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C49A098778B751B36DDC816E9E5106C08F3E99E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8392f899-e83c-4706-a9a1-82256bd48236/0/1C49A098778B751B36DDC816E9E5106C08F3E99E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:20:7c:c8:d9:5a:90:87:7d:8e:7b:50:95:e7:38:1d:8f:85: 69:71:0e:03:7c:ae:de:81:7d:3f:9a:53:4b:01:dc:fb:3f:1d: ae:ec:7a:68:a6:05:26:37:fa:3f:28:86:e5:20:63:7b:b7:02: 8c:bb:58:24:17:f3:e3:1b:e7:67:65:7a:0e:0f:f6:17:11:b6: ff:20:0c:e8:cf:11:7f:e6:60:db:1a:87:d3:8f:ee:46:1c:dc: 06:2b:b3:37:53:a4:63:77:f0:94:51:57:f7:f3:0e:89:1e:54: c0:e2:ee:f2:65:a9:14:df:f4:23:96:e9:d9:1e:da:ed:2d:44: 84:38:dc:ac:57:d8:b9:4f:b4:e3:e9:b6:b6:f0:60:22:60:e7: 6c:20:9d:0f:e8:57:d5:be:4e:5f:d8:f4:65:8c:a1:d1:c8:36: a3:69:66:95:53:2e:a0:93:f0:74:24:9a:90:d0:ce:6f:67:bb: af:ca:01:3b:c4:40:c4:37:ac:81:04:b4:6a:cb:a4:55:28:4e: 62:5b:fb:0a:f2:45:7c:37:f6:f5:97:08:23:de:b6:38:59:35: af:8f:38:54:ad:e6:16:c7:d9:12:d8:5a:c7:7b:c8:4f:4c:43: a5:83:80:e0:08:3e:cd:7f:23:59:f6:28:7a:e7:7b:84:c8:11: e8:ab:f8:ed -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfAmBYsl22K5CqtMHx94TnUmhxLYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUM0OUEwOTg3NzhCNzUxQjM2RERDODE2RTlFNTEwNkMw OEYzRTk5RTAeFw0yNTExMDIyMjI1MzhaFw0yNTExMDYwMTA5MzhaMDMxMTAvBgNV BAMTKDg3ODA5QTMyN0YzREY2RjFDMkQ1RDc5NDEwODdFMjA4QjVEQTFERkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPv/uBMBQolbj80mf1FhNqrUrW f7AiG0f6yAiDdhJehWXgROoZpPrzjcFF3RdgAy8olDIdhlM/VKYAuZYjS4Uu6NtZ pv8XylaWe16whsHmSqszJxb9kWGv9tuEfXfWCPEsf0pvmQ03TB4sxNE3GojLR+Tm pStnrGVtf0GtabhHF8wK1I7+3rsBImxwd9ZQ9vls2YkcjvWZxbTns+ZlT3L6nL3r M/4a0X7GuDycOb6tkJXYnHHLUQBxrVki5t6wIa0SllT6g3Yt+16j8ItBAmy5mX2i ddX3+zyAXv5FLojKNGouBneZFhWvp3Gq6IHv9YOo2Uf0wol++mGcVdo5q5WdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUh4CaMn899vHC1deUEIfiCLXaHfwwHwYDVR0j BBgwFoAUHEmgmHeLdRs23cgW6eUQbAjz6Z4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MzkyZjg5OS1lODNjLTQ3MDYtYTlhMS04MjI1NmJkNDgyMzYvMC8xQzQ5QTA5ODc3 OEI3NTFCMzZEREM4MTZFOUU1MTA2QzA4RjNFOTlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUM0OUEwOTg3NzhCNzUxQjM2RERDODE2RTlFNTEwNkMwOEYz RTk5RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODM5MmY4OTktZTgzYy00NzA2LWE5 YTEtODIyNTZiZDQ4MjM2LzAvMUM0OUEwOTg3NzhCNzUxQjM2RERDODE2RTlFNTEw NkMwOEYzRTk5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIQgfMjZWpCHfY57UJXnOB2PhWlxDgN8rt6B fT+aU0sB3Ps/Ha7semimBSY3+j8ohuUgY3u3Aoy7WCQX8+Mb52dleg4P9hcRtv8g DOjPEX/mYNsah9OP7kYc3AYrszdTpGN38JRRV/fzDokeVMDi7vJlqRTf9COW6dke 2u0tRIQ43KxX2LlPtOPptrbwYCJg52wgnQ/oV9W+Tl/Y9GWModHINqNpZpVTLqCT 8HQkmpDQzm9nu6/KATvEQMQ3rIEEtGrLpFUoTmJb+wryRXw39vWXCCPetjhZNa+P OFSt5hbH2RLYWsd7yE9MQ6WDgOAIPs1/I1n2KHrne4TIEeir+O0= -----END CERTIFICATE-----Generated at Tue Nov 4 19:09:03 2025 by rpki-client