$ rpki-client -vvf repo-rpki.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.mft File: 2247520F1208C8D9AC33B3035016DC4EC62CDEB1.mft (raw, json) Hash identifier: QnCxaduPY4nfP9ozCbgBKpjZERNWLABFNKv0VKAySq4= Subject key identifier: E3:32:E9:54:88:6D:81:D5:34:1E:6C:F5:49:6D:34:5C:D8:EF:C6:21 Authority key identifier: 22:47:52:0F:12:08:C8:D9:AC:33:B3:03:50:16:DC:4E:C6:2C:DE:B1 Certificate issuer: /CN=2247520F1208C8D9AC33B3035016DC4EC62CDEB1 Certificate serial: 7F8BD4C45DE908A5EEEDAB3957D86B200F15BAE1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.mft Manifest number: 0522 Signing time: Tue 04 Nov 2025 06:50:41 +0000 Manifest this update: Tue 04 Nov 2025 06:45:41 +0000 Manifest next update: Fri 07 Nov 2025 08:19:41 +0000 Files and hashes: 1: 3130332e3130352e3231372e302f32342d3234203d3e20313431313337.roa (hash: vjgtOZ549YGHCxNz1PUrDo34FNB9oleC45Iwzg+kYuo=) 2: 3130332e3130372e37312e302f32342d3234203d3e20313336383739.roa (hash: kS4p5t1GMvH/jM8YbFoB1ZVwKWJDCBblcchgAgj/oBk=) 3: 3130332e3130372e38342e302f32342d3234203d3e20313336383739.roa (hash: XJya992fgeumEsyzLHSliCXeCsu4l890cLRsCVZbrLE=) 4: 2247520F1208C8D9AC33B3035016DC4EC62CDEB1.crl (hash: PF0pDwSAGVQR8bNHB0LAlpoTxjHbdsZ086EfPkqxAQo=) 5: 3130332e3130372e38342e302f32332d3233203d3e20313336383739.roa (hash: pEqfltHiO5idL1uFxEX2uQGcaapU/AOZ2PUbYVPk40Y=) 6: 3130332e3130372e38352e302f32342d3234203d3e20313336383739.roa (hash: 2H5831uY9aR1OjDn1Uun2zJ8vaTAjB4BokOjcc3Moq4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.crl rsync://repo-rpki.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 08:19:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:8b:d4:c4:5d:e9:08:a5:ee:ed:ab:39:57:d8:6b:20:0f:15:ba:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2247520F1208C8D9AC33B3035016DC4EC62CDEB1 Validity Not Before: Nov 4 06:45:41 2025 GMT Not After : Nov 7 08:19:41 2025 GMT Subject: CN=E332E954886D81D5341E6CF5496D345CD8EFC621 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:33:e4:84:6b:58:c4:52:2a:77:60:64:9f:47: 9c:01:1f:c6:a3:11:ae:39:38:5e:5f:f6:b0:3e:4e: 20:27:0d:fc:ff:a5:9e:e0:52:94:4b:71:57:23:1a: c4:e9:a5:10:22:c5:a9:8b:ee:46:3f:94:62:b4:e6: 4e:52:17:92:2e:83:d1:df:d9:e1:76:af:22:49:8a: bf:cd:aa:e6:ee:3b:b1:5d:eb:e7:39:09:03:fa:61: 4f:de:d8:55:f4:a7:2d:d5:c4:66:25:dc:2e:1d:c5: bd:66:9e:ec:c0:57:e1:76:96:41:00:4d:ba:b7:cd: 10:65:f7:8e:c7:af:f7:61:4e:7d:83:1d:a1:84:95: f2:95:c9:99:c4:99:b5:eb:d9:24:9d:5b:a7:5b:91: ff:ab:6e:10:0d:49:ff:39:81:f7:df:58:8c:33:2f: d6:e8:7c:19:50:ef:e0:b9:1e:b3:b6:d1:ff:14:4c: 18:79:31:ff:66:39:e5:8d:87:f3:e3:99:34:8f:c3: 32:55:3d:54:69:c6:44:20:0d:ba:1c:da:5f:f2:77: 12:93:56:b4:67:a3:fc:b8:92:00:1c:f0:8d:3d:b5: f4:72:8a:3e:17:7b:ad:f0:cc:6b:47:74:b5:82:b5: 8a:0a:bd:f1:50:08:71:2e:95:b7:e8:ab:9c:07:92: 1b:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:32:E9:54:88:6D:81:D5:34:1E:6C:F5:49:6D:34:5C:D8:EF:C6:21 X509v3 Authority Key Identifier: keyid:22:47:52:0F:12:08:C8:D9:AC:33:B3:03:50:16:DC:4E:C6:2C:DE:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:89:8b:4d:31:61:56:4c:be:ea:d0:f7:22:79:17:a5:a4:5b: 58:4e:35:f1:4e:79:f9:6c:8e:28:b0:c0:5e:3a:d1:af:2b:16: 51:c7:54:a9:b5:dc:14:e7:4b:c5:a5:d2:c0:81:c9:81:df:6c: be:7c:a4:86:53:b4:48:3e:f7:84:ba:16:10:49:6c:7c:58:7a: 68:ee:43:eb:30:85:73:dc:cc:39:ad:9b:b5:e2:52:f1:1c:89: 6c:c1:ec:86:0e:57:2c:75:65:61:b2:be:55:1c:23:02:46:f2: a3:10:5d:e4:99:71:fd:f7:39:4d:d1:61:f7:d3:13:59:40:c4: 2a:c2:9e:73:96:3f:05:25:03:c6:d2:47:f5:72:9c:e3:3f:e0: ff:2e:48:21:e7:32:d2:1a:f3:8b:c2:c5:dd:01:9e:11:2a:af: 40:00:86:41:c8:13:86:79:ba:b7:12:f7:16:3f:89:d5:16:fc: 4c:45:c5:38:d3:f5:fb:fb:2d:f9:76:7f:2e:0f:8c:9f:e4:8c: da:cb:62:5d:ce:2b:83:9d:02:32:f9:42:d2:13:23:a6:4d:27: 9a:bb:57:8b:00:88:36:84:3e:60:82:f8:2c:84:70:2b:8c:4b: 6d:6e:1c:03:9a:cf:ca:a3:63:67:7c:d0:e4:13:17:04:3f:96: ea:ae:45:89 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf4vUxF3pCKXu7as5V9hrIA8VuuEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjI0NzUyMEYxMjA4QzhEOUFDMzNCMzAzNTAxNkRDNEVD NjJDREVCMTAeFw0yNTExMDQwNjQ1NDFaFw0yNTExMDcwODE5NDFaMDMxMTAvBgNV BAMTKEUzMzJFOTU0ODg2RDgxRDUzNDFFNkNGNTQ5NkQzNDVDRDhFRkM2MjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/M+SEa1jEUip3YGSfR5wBH8aj Ea45OF5f9rA+TiAnDfz/pZ7gUpRLcVcjGsTppRAixamL7kY/lGK05k5SF5Iug9Hf 2eF2ryJJir/NqubuO7Fd6+c5CQP6YU/e2FX0py3VxGYl3C4dxb1mnuzAV+F2lkEA Tbq3zRBl947Hr/dhTn2DHaGElfKVyZnEmbXr2SSdW6dbkf+rbhANSf85gfffWIwz L9bofBlQ7+C5HrO20f8UTBh5Mf9mOeWNh/PjmTSPwzJVPVRpxkQgDboc2l/ydxKT VrRno/y4kgAc8I09tfRyij4Xe63wzGtHdLWCtYoKvfFQCHEulbfoq5wHkhtHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4zLpVIhtgdU0Hmz1SW00XNjvxiEwHwYDVR0j BBgwFoAUIkdSDxIIyNmsM7MDUBbcTsYs3rEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZGRmMTgxZi0xZTg5LTQwMjItODJmOC1lMGRiYTg1OWVlMmUvMC8yMjQ3NTIwRjEy MDhDOEQ5QUMzM0IzMDM1MDE2REM0RUM2MkNERUIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjI0NzUyMEYxMjA4QzhEOUFDMzNCMzAzNTAxNkRDNEVDNjJD REVCMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWRkZjE4MWYtMWU4OS00MDIyLTgy ZjgtZTBkYmE4NTllZTJlLzAvMjI0NzUyMEYxMjA4QzhEOUFDMzNCMzAzNTAxNkRD NEVDNjJDREVCMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ6Ji00xYVZMvurQ9yJ5F6WkW1hONfFOefls jiiwwF460a8rFlHHVKm13BTnS8Wl0sCByYHfbL58pIZTtEg+94S6FhBJbHxYemju Q+swhXPczDmtm7XiUvEciWzB7IYOVyx1ZWGyvlUcIwJG8qMQXeSZcf33OU3RYffT E1lAxCrCnnOWPwUlA8bSR/VynOM/4P8uSCHnMtIa84vCxd0BnhEqr0AAhkHIE4Z5 urcS9xY/idUW/ExFxTjT9fv7Lfl2fy4PjJ/kjNrLYl3OK4OdAjL5QtITI6ZNJ5q7 V4sAiDaEPmCC+CyEcCuMS21uHAOaz8qjY2d80OQTFwQ/luquRYk= -----END CERTIFICATE-----Generated at Wed Nov 5 00:27:38 2025 by rpki-client