$ rpki-client -vvf repo-rpki.idnic.net/repo/e0620cfc-b46c-457c-9fde-297710c546a9/0/473225269441779F80E443B1EA516CC99E4ED4DA.mft File: 473225269441779F80E443B1EA516CC99E4ED4DA.mft (raw, json) Hash identifier: Y7GsEodO3yQ5K+bp5VVhi873qAWfU0SA3VIM4uUvdmQ= Subject key identifier: C1:CA:C0:5D:07:C5:E3:34:7D:39:F0:25:AB:46:24:92:A8:4A:26:91 Authority key identifier: 47:32:25:26:94:41:77:9F:80:E4:43:B1:EA:51:6C:C9:9E:4E:D4:DA Certificate issuer: /CN=473225269441779F80E443B1EA516CC99E4ED4DA Certificate serial: 36C0F392A24CEB1CD56A1D5A9C89562135F88789 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/473225269441779F80E443B1EA516CC99E4ED4DA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e0620cfc-b46c-457c-9fde-297710c546a9/0/473225269441779F80E443B1EA516CC99E4ED4DA.mft Manifest number: 0198 Signing time: Mon 03 Nov 2025 07:22:17 +0000 Manifest this update: Mon 03 Nov 2025 07:17:17 +0000 Manifest next update: Thu 06 Nov 2025 19:00:17 +0000 Files and hashes: 1: 3130332e3132312e3138372e302f32342d3234203d3e20313431393039.roa (hash: ICTrr1zawcyGxqE9qaGBu/NO12Zp3KpSJLdHGzxMVFA=) 2: 3130332e3132312e3138362e302f32342d3234203d3e20313431393039.roa (hash: opCF0u3jko4hNWDE/2pVcJdIdU0FHQiXsJlqg5I4v5U=) 3: 473225269441779F80E443B1EA516CC99E4ED4DA.crl (hash: 36Hudjel0xMLym2Qwe7x9FQXO0fqzSsaCLIaYVGxKd4=) 4: 3130332e3132312e3138362e302f32332d3233203d3e20313431393039.roa (hash: oAysGbdydhifr7l/UknID+HyQ/T/iVxBHJ4DGeZc8gQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e0620cfc-b46c-457c-9fde-297710c546a9/0/473225269441779F80E443B1EA516CC99E4ED4DA.crl rsync://repo-rpki.idnic.net/repo/e0620cfc-b46c-457c-9fde-297710c546a9/0/473225269441779F80E443B1EA516CC99E4ED4DA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/473225269441779F80E443B1EA516CC99E4ED4DA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 19:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:c0:f3:92:a2:4c:eb:1c:d5:6a:1d:5a:9c:89:56:21:35:f8:87:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=473225269441779F80E443B1EA516CC99E4ED4DA Validity Not Before: Nov 3 07:17:17 2025 GMT Not After : Nov 6 19:00:17 2025 GMT Subject: CN=C1CAC05D07C5E3347D39F025AB462492A84A2691 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:9f:89:95:16:69:8e:51:43:66:c1:bc:68:58: e8:af:24:3a:e8:bf:b7:f4:c3:89:13:a3:e8:c8:b0: 2e:10:11:69:fb:6c:c8:82:7d:b0:58:5f:a2:c0:1e: 0b:41:98:68:e8:ee:ba:c1:aa:1d:e8:96:8f:75:98: 9e:3e:af:c0:60:63:b8:c9:5a:c4:8b:fb:e9:ab:4f: 0e:cb:7a:e8:90:ac:be:47:96:9e:af:a1:29:16:a5: d3:37:31:e6:40:51:e3:9b:d6:13:ac:1c:fc:3f:06: d9:7a:bb:f0:bc:e5:5d:e9:de:6d:0f:81:40:57:07: c0:52:3b:09:36:f2:da:ed:9b:a4:3b:ef:3a:4f:7e: bf:4b:ae:a2:79:cc:7c:2b:07:aa:89:8b:b1:e5:44: 47:4d:73:50:bf:97:ee:89:2d:cf:54:39:19:d9:fc: dd:6e:65:8d:bc:11:85:c5:dd:c5:31:6c:9c:11:55: 2a:42:59:0a:34:83:48:97:4a:58:39:3a:9b:9e:56: 51:e3:07:e0:cc:5f:9b:06:4d:b9:53:c2:99:b1:bf: ef:97:80:29:fd:4c:8c:6c:4f:7a:c2:89:50:ff:95: 34:68:1d:41:58:13:35:f6:96:44:b2:3d:46:50:1f: bf:1e:db:23:dc:8f:e5:1e:f4:9f:30:77:29:0b:67: dd:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:CA:C0:5D:07:C5:E3:34:7D:39:F0:25:AB:46:24:92:A8:4A:26:91 X509v3 Authority Key Identifier: keyid:47:32:25:26:94:41:77:9F:80:E4:43:B1:EA:51:6C:C9:9E:4E:D4:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e0620cfc-b46c-457c-9fde-297710c546a9/0/473225269441779F80E443B1EA516CC99E4ED4DA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/473225269441779F80E443B1EA516CC99E4ED4DA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e0620cfc-b46c-457c-9fde-297710c546a9/0/473225269441779F80E443B1EA516CC99E4ED4DA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:ca:12:8d:2d:f1:fe:bc:77:a3:2e:0f:5f:85:b8:cd:38:a8: f7:8f:24:16:5e:a2:af:dc:17:67:1a:09:30:56:1c:af:9b:91: 85:5d:53:1e:58:08:06:c4:7a:7c:5f:f7:fb:9c:43:73:b4:c6: 38:5b:c2:2d:93:76:81:5f:2f:0c:95:c9:55:f9:45:41:a4:38: 2c:16:22:10:b9:96:a6:90:cf:31:3e:b7:5f:21:a6:63:b1:54: 5c:c6:41:41:72:b1:02:ea:19:60:0a:d8:76:64:5b:ab:5d:89: e3:4e:a6:68:5a:57:4a:52:2c:4a:d6:fb:48:09:2f:43:4c:17: c9:ca:27:ee:5a:35:4e:4a:ad:cd:f6:bc:b0:bb:8f:f7:9a:2e: 83:a2:f8:aa:54:a4:03:c3:f5:e9:2a:d7:32:b6:9c:60:00:0b: b9:c6:27:31:81:5c:d0:39:6c:dc:75:72:01:ab:a4:2c:f1:cf: 1e:d1:61:c9:fd:8e:f1:68:29:e8:a0:68:bc:93:13:d4:20:e9: bc:cc:b4:8e:c5:cf:11:36:2c:5c:4d:2b:8a:9f:06:8a:79:19: a6:51:f6:de:e4:13:84:95:a5:21:9c:d4:2b:40:d5:d9:3c:ba: e4:57:a7:c1:c9:d4:ce:6d:de:ed:e3:95:3a:ef:67:87:18:a8: 4b:c2:b9:d6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNsDzkqJM6xzVah1anIlWITX4h4kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDczMjI1MjY5NDQxNzc5RjgwRTQ0M0IxRUE1MTZDQzk5 RTRFRDREQTAeFw0yNTExMDMwNzE3MTdaFw0yNTExMDYxOTAwMTdaMDMxMTAvBgNV BAMTKEMxQ0FDMDVEMDdDNUUzMzQ3RDM5RjAyNUFCNDYyNDkyQTg0QTI2OTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7n4mVFmmOUUNmwbxoWOivJDro v7f0w4kTo+jIsC4QEWn7bMiCfbBYX6LAHgtBmGjo7rrBqh3olo91mJ4+r8BgY7jJ WsSL++mrTw7LeuiQrL5Hlp6voSkWpdM3MeZAUeOb1hOsHPw/Btl6u/C85V3p3m0P gUBXB8BSOwk28trtm6Q77zpPfr9LrqJ5zHwrB6qJi7HlREdNc1C/l+6JLc9UORnZ /N1uZY28EYXF3cUxbJwRVSpCWQo0g0iXSlg5OpueVlHjB+DMX5sGTblTwpmxv++X gCn9TIxsT3rCiVD/lTRoHUFYEzX2lkSyPUZQH78e2yPcj+Ue9J8wdykLZ91dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwcrAXQfF4zR9OfAlq0YkkqhKJpEwHwYDVR0j BBgwFoAURzIlJpRBd5+A5EOx6lFsyZ5O1NowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MDYyMGNmYy1iNDZjLTQ1N2MtOWZkZS0yOTc3MTBjNTQ2YTkvMC80NzMyMjUyNjk0 NDE3NzlGODBFNDQzQjFFQTUxNkNDOTlFNEVENERBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDczMjI1MjY5NDQxNzc5RjgwRTQ0M0IxRUE1MTZDQzk5RTRF RDREQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTA2MjBjZmMtYjQ2Yy00NTdjLTlm ZGUtMjk3NzEwYzU0NmE5LzAvNDczMjI1MjY5NDQxNzc5RjgwRTQ0M0IxRUE1MTZD Qzk5RTRFRDREQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAInKEo0t8f68d6MuD1+FuM04qPePJBZeoq/c F2caCTBWHK+bkYVdUx5YCAbEenxf9/ucQ3O0xjhbwi2TdoFfLwyVyVX5RUGkOCwW IhC5lqaQzzE+t18hpmOxVFzGQUFysQLqGWAK2HZkW6tdieNOpmhaV0pSLErW+0gJ L0NMF8nKJ+5aNU5Krc32vLC7j/eaLoOi+KpUpAPD9ekq1zK2nGAAC7nGJzGBXNA5 bNx1cgGrpCzxzx7RYcn9jvFoKeigaLyTE9Qg6bzMtI7FzxE2LFxNK4qfBop5GaZR 9t7kE4SVpSGc1CtA1dk8uuRXp8HJ1M5t3u3jlTrvZ4cYqEvCudY= -----END CERTIFICATE-----Generated at Tue Nov 4 08:12:35 2025 by rpki-client