$ rpki-client -vvf repo-rpki.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/22476F90C7B08131974F5B19834906C325ABEF12.mft File: 22476F90C7B08131974F5B19834906C325ABEF12.mft (raw, json) Hash identifier: cXFR2ux/WbHE36LA1qRGKnPsh6ML8viG7fAMwzkmxBo= Subject key identifier: 99:42:64:B7:50:EB:CB:99:9A:D4:26:9D:F9:0B:8F:4C:07:0B:49:84 Authority key identifier: 22:47:6F:90:C7:B0:81:31:97:4F:5B:19:83:49:06:C3:25:AB:EF:12 Certificate issuer: /CN=22476F90C7B08131974F5B19834906C325ABEF12 Certificate serial: 49779B0687BFA3381462DE0B57336AF1988A968B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/22476F90C7B08131974F5B19834906C325ABEF12.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/22476F90C7B08131974F5B19834906C325ABEF12.mft Manifest number: C9 Signing time: Tue 04 Nov 2025 09:11:24 +0000 Manifest this update: Tue 04 Nov 2025 09:06:24 +0000 Manifest next update: Fri 07 Nov 2025 16:36:24 +0000 Files and hashes: 1: 22476F90C7B08131974F5B19834906C325ABEF12.crl (hash: LRDRUCdvMnyN/zeO1HIeemrg7wykjf6mhz09fjpdYQc=) 2: 3136302e32352e36392e302f32342d3234203d3e20313531353736.roa (hash: 80wPKmKJkybnq5BlobX/HktrEHR2US0xr2aBNpv/zlA=) 3: 3136302e32352e36382e302f32342d3234203d3e20313532383430.roa (hash: 4w2+kmxxLlJwHRO1aqXjBz7ml3HwCrINsFeyiZehHq0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/22476F90C7B08131974F5B19834906C325ABEF12.crl rsync://repo-rpki.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/22476F90C7B08131974F5B19834906C325ABEF12.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/22476F90C7B08131974F5B19834906C325ABEF12.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 10:49:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:77:9b:06:87:bf:a3:38:14:62:de:0b:57:33:6a:f1:98:8a:96:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22476F90C7B08131974F5B19834906C325ABEF12 Validity Not Before: Nov 4 09:06:24 2025 GMT Not After : Nov 7 16:36:24 2025 GMT Subject: CN=994264B750EBCB999AD4269DF90B8F4C070B4984 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:37:4f:b8:f9:1d:ee:1f:54:5b:8f:9b:28:49: f1:7d:28:28:2b:79:ec:ce:dd:61:35:9c:9f:bf:67: 57:58:93:3d:de:3c:1b:19:14:1b:e4:07:19:cf:c4: 49:4e:96:e2:17:0b:7f:27:cc:85:e1:89:4d:b6:1f: 58:57:ae:0a:43:d4:2a:ca:ce:6f:49:5c:ab:0b:5f: 1e:b4:8e:d6:e6:d6:15:f8:4e:14:86:b1:da:f4:74: e7:f4:e9:e8:35:d6:bd:4b:05:00:24:05:83:6a:60: 49:db:fa:d8:9b:02:91:ef:a6:83:30:0f:b7:04:4d: 67:17:b3:6f:7d:4e:f6:67:d8:2c:ff:0f:28:27:26: 1e:54:5b:50:7d:58:8c:5a:29:c0:7d:f7:f7:da:3f: 11:a9:7f:81:f9:ab:d6:10:14:e0:38:a0:82:42:2a: cd:b9:23:38:8d:97:4e:4f:3d:2b:c2:04:e1:b9:d4: a6:1b:2e:40:f8:37:d6:14:25:5e:2d:86:67:2c:3a: 78:11:8c:f0:87:cd:8c:41:85:22:99:13:f0:c1:6f: 9d:1f:63:14:e4:cb:e7:9f:73:21:be:1c:54:ce:28: a1:3c:30:2c:ad:1b:53:b5:c3:68:4f:94:d0:b6:08: 92:8b:7b:f7:61:4c:09:72:a6:3a:6f:6b:6d:ad:42: e4:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:42:64:B7:50:EB:CB:99:9A:D4:26:9D:F9:0B:8F:4C:07:0B:49:84 X509v3 Authority Key Identifier: keyid:22:47:6F:90:C7:B0:81:31:97:4F:5B:19:83:49:06:C3:25:AB:EF:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/22476F90C7B08131974F5B19834906C325ABEF12.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/22476F90C7B08131974F5B19834906C325ABEF12.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/22476F90C7B08131974F5B19834906C325ABEF12.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:ac:a2:ba:48:3f:0e:5a:02:f7:ae:78:a7:36:69:c2:82:df: f0:b8:6a:70:58:8f:fe:19:3d:bc:36:a1:60:6f:9d:46:00:2e: 7a:a0:66:ec:5d:c7:89:c9:11:dd:ef:6b:8f:3d:ea:5e:fb:12: 95:e3:de:23:01:f8:dc:68:20:a5:51:d2:26:05:38:d2:5e:7d: d3:8b:12:24:af:8c:3f:03:1f:64:11:94:a2:d9:2b:f8:d9:47: fa:0e:b7:40:f9:91:58:d5:41:b4:ac:57:54:69:3d:61:18:35: 64:e2:fe:51:7e:75:a6:1e:6e:2e:c4:08:60:43:bc:e1:82:c6: 57:df:91:87:c4:49:35:a0:25:7f:7a:43:d2:c0:c1:14:eb:07: cf:aa:c8:c8:c6:34:d1:de:1a:96:5b:73:3d:f9:02:15:53:2d: 94:e0:3c:84:e8:6d:64:31:cb:78:b1:83:72:07:56:8e:21:ba: f0:b7:f3:5a:d9:da:1f:5d:4a:81:51:39:fb:46:0a:57:6b:c4: f8:1c:2e:6e:82:11:9f:51:2e:8e:95:1f:9c:38:d9:28:5a:a0: 40:38:11:0b:f7:3e:b6:bd:2b:5f:e8:87:fb:9f:3c:eb:df:36: 95:c7:dd:6d:44:c3:ce:83:d9:23:ee:63:fd:a6:41:a6:1c:37: 60:e4:9a:5e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSXebBoe/ozgUYt4LVzNq8ZiKloswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjI0NzZGOTBDN0IwODEzMTk3NEY1QjE5ODM0OTA2QzMy NUFCRUYxMjAeFw0yNTExMDQwOTA2MjRaFw0yNTExMDcxNjM2MjRaMDMxMTAvBgNV BAMTKDk5NDI2NEI3NTBFQkNCOTk5QUQ0MjY5REY5MEI4RjRDMDcwQjQ5ODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1N0+4+R3uH1Rbj5soSfF9KCgr eezO3WE1nJ+/Z1dYkz3ePBsZFBvkBxnPxElOluIXC38nzIXhiU22H1hXrgpD1CrK zm9JXKsLXx60jtbm1hX4ThSGsdr0dOf06eg11r1LBQAkBYNqYEnb+tibApHvpoMw D7cETWcXs299TvZn2Cz/DygnJh5UW1B9WIxaKcB99/faPxGpf4H5q9YQFOA4oIJC Ks25IziNl05PPSvCBOG51KYbLkD4N9YUJV4thmcsOngRjPCHzYxBhSKZE/DBb50f YxTky+efcyG+HFTOKKE8MCytG1O1w2hPlNC2CJKLe/dhTAlypjpva22tQuS/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmUJkt1Dry5ma1Cad+QuPTAcLSYQwHwYDVR0j BBgwFoAUIkdvkMewgTGXT1sZg0kGwyWr7xIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MmZiYWFmYy00ZGIyLTRmYzQtYTFhOC0yZDhlNGM4YjJjZTAvMC8yMjQ3NkY5MEM3 QjA4MTMxOTc0RjVCMTk4MzQ5MDZDMzI1QUJFRjEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMjI0NzZGOTBDN0IwODEzMTk3NEY1QjE5ODM0OTA2QzMyNUFC RUYxMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjJmYmFhZmMtNGRiMi00ZmM0LWEx YTgtMmQ4ZTRjOGIyY2UwLzAvMjI0NzZGOTBDN0IwODEzMTk3NEY1QjE5ODM0OTA2 QzMyNUFCRUYxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABWsorpIPw5aAveueKc2acKC3/C4anBYj/4Z Pbw2oWBvnUYALnqgZuxdx4nJEd3va4896l77EpXj3iMB+NxoIKVR0iYFONJefdOL EiSvjD8DH2QRlKLZK/jZR/oOt0D5kVjVQbSsV1RpPWEYNWTi/lF+daYebi7ECGBD vOGCxlffkYfESTWgJX96Q9LAwRTrB8+qyMjGNNHeGpZbcz35AhVTLZTgPITobWQx y3ixg3IHVo4huvC381rZ2h9dSoFROftGCldrxPgcLm6CEZ9RLo6VH5w42ShaoEA4 EQv3Pra9K1/oh/ufPOvfNpXH3W1Ew86D2SPuY/2mQaYcN2Dkml4= -----END CERTIFICATE-----Generated at Tue Nov 4 12:11:21 2025 by rpki-client