$ rpki-client -vvf repo-rpki.idnic.net/repo/0450f0f5-b883-4b24-9792-7e957af88bf8/0/322B7BBC7BE2A84D8D644A6B68333963517CAFFA.mft File: 322B7BBC7BE2A84D8D644A6B68333963517CAFFA.mft (raw, json) Hash identifier: eIQl4FoLGUiexi3qV65qqeAXWhEWaaY5o2WJ4/VS0PU= Subject key identifier: C3:5A:19:21:97:47:99:86:0F:EC:FB:32:33:45:03:AC:19:91:3E:0B Authority key identifier: 32:2B:7B:BC:7B:E2:A8:4D:8D:64:4A:6B:68:33:39:63:51:7C:AF:FA Certificate issuer: /CN=322B7BBC7BE2A84D8D644A6B68333963517CAFFA Certificate serial: 03C501669913163B0E54CE002F71AECA780E44C7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/322B7BBC7BE2A84D8D644A6B68333963517CAFFA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0450f0f5-b883-4b24-9792-7e957af88bf8/0/322B7BBC7BE2A84D8D644A6B68333963517CAFFA.mft Manifest number: 0209 Signing time: Sun 19 Oct 2025 05:02:24 +0000 Manifest this update: Sun 19 Oct 2025 04:57:24 +0000 Manifest next update: Wed 22 Oct 2025 13:44:24 +0000 Files and hashes: 1: 322B7BBC7BE2A84D8D644A6B68333963517CAFFA.crl (hash: GN6Lz9LV2NtIGgSQanYR5V1/zJbbBY90md3toWsZANE=) 2: 3130332e3138372e38382e302f32332d3233203d3e20313439393439.roa (hash: XbN3LxifTwY+vVTUMpMOqOr29jBN2u/bmUS0N8LyhH0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0450f0f5-b883-4b24-9792-7e957af88bf8/0/322B7BBC7BE2A84D8D644A6B68333963517CAFFA.crl rsync://repo-rpki.idnic.net/repo/0450f0f5-b883-4b24-9792-7e957af88bf8/0/322B7BBC7BE2A84D8D644A6B68333963517CAFFA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/322B7BBC7BE2A84D8D644A6B68333963517CAFFA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 13:44:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:c5:01:66:99:13:16:3b:0e:54:ce:00:2f:71:ae:ca:78:0e:44:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=322B7BBC7BE2A84D8D644A6B68333963517CAFFA Validity Not Before: Oct 19 04:57:24 2025 GMT Not After : Oct 22 13:44:24 2025 GMT Subject: CN=C35A1921974799860FECFB32334503AC19913E0B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:7e:cd:de:1c:61:a7:0a:ab:df:b3:91:a1:b4: e9:33:96:6a:10:5e:db:f5:13:25:56:d9:70:4b:ab: 02:ac:81:7e:d5:8d:ad:e1:ab:38:41:3d:9a:cf:b4: 8a:98:a9:2d:92:71:45:4e:fd:16:40:59:6e:34:43: 33:8e:1d:d2:6a:ad:8a:54:d9:98:3c:75:37:d0:1d: c7:44:2d:94:b1:aa:4d:38:ef:c0:f0:9a:9d:d7:5d: ab:b4:07:4c:be:6b:3f:17:c6:d6:0f:02:6b:d4:5e: 8d:6e:9c:dd:63:79:0c:b6:44:bb:c3:02:c6:2b:59: 7b:5e:a9:78:e1:9e:9e:65:b9:e1:91:b2:5d:e8:01: 82:54:c8:d4:cf:a3:5f:72:5b:0a:c9:1d:67:0b:df: 5b:d0:3c:55:be:63:3f:99:c5:29:d6:0f:12:38:98: f8:1d:05:4a:78:9c:20:b9:a7:1a:01:b3:f2:6e:f6: e3:59:b9:74:91:6f:c0:7a:85:c1:95:89:5c:5e:7b: 08:e3:9c:97:07:cf:6f:9d:0a:f3:7f:47:ab:1c:ef: a6:a7:74:eb:2b:65:20:73:76:52:54:46:6d:a0:d8: 32:36:21:7f:b6:cb:b5:7b:af:49:96:dc:f0:89:97: d7:4d:8e:04:22:39:6c:f4:e9:13:00:bf:d8:9f:36: e7:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:5A:19:21:97:47:99:86:0F:EC:FB:32:33:45:03:AC:19:91:3E:0B X509v3 Authority Key Identifier: keyid:32:2B:7B:BC:7B:E2:A8:4D:8D:64:4A:6B:68:33:39:63:51:7C:AF:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0450f0f5-b883-4b24-9792-7e957af88bf8/0/322B7BBC7BE2A84D8D644A6B68333963517CAFFA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/322B7BBC7BE2A84D8D644A6B68333963517CAFFA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0450f0f5-b883-4b24-9792-7e957af88bf8/0/322B7BBC7BE2A84D8D644A6B68333963517CAFFA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:7f:53:f5:d9:f7:5c:b2:9f:78:ae:35:a3:9f:2e:7f:de:32: 34:41:88:f3:78:d5:7f:82:07:c7:6c:58:74:d4:d1:42:b5:06: 04:74:b3:5f:2f:94:5b:81:43:0e:c7:41:c7:95:19:5f:b8:79: ef:00:f0:d8:47:30:6b:96:91:e5:3c:0b:f8:d0:50:04:03:78: 19:c4:8f:f2:67:2d:6d:1d:93:95:72:d0:ad:85:d6:57:61:ad: 3b:a7:d1:25:6f:b9:25:21:16:46:55:6f:f2:32:54:6f:47:1b: 2d:d5:4e:18:83:d4:ab:28:cb:77:d0:90:b5:b6:f7:55:46:2a: 5a:f8:9b:3d:73:28:6c:6b:31:66:07:05:31:18:68:76:e1:bf: 4f:77:9b:99:e0:40:cb:9b:74:0b:5c:07:19:98:af:67:39:db: 14:64:4a:b4:14:ba:82:b3:35:4a:22:01:40:3a:60:80:74:c9: 2b:80:59:7d:ee:14:f6:52:f0:0c:c7:b1:58:d5:22:aa:43:0b: d8:cb:d1:8f:80:fd:09:c4:6d:15:24:4c:19:7d:a6:3f:d9:22: 3e:fb:3a:cb:20:90:de:15:65:e1:46:da:fb:f2:f4:52:ac:6d: f2:7a:90:3f:b1:32:fc:66:26:06:9f:1b:52:19:a5:e8:36:32: 30:38:11:c1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA8UBZpkTFjsOVM4AL3GuyngORMcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzIyQjdCQkM3QkUyQTg0RDhENjQ0QTZCNjgzMzM5NjM1 MTdDQUZGQTAeFw0yNTEwMTkwNDU3MjRaFw0yNTEwMjIxMzQ0MjRaMDMxMTAvBgNV BAMTKEMzNUExOTIxOTc0Nzk5ODYwRkVDRkIzMjMzNDUwM0FDMTk5MTNFMEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6fs3eHGGnCqvfs5GhtOkzlmoQ Xtv1EyVW2XBLqwKsgX7Vja3hqzhBPZrPtIqYqS2ScUVO/RZAWW40QzOOHdJqrYpU 2Zg8dTfQHcdELZSxqk0478Dwmp3XXau0B0y+az8XxtYPAmvUXo1unN1jeQy2RLvD AsYrWXteqXjhnp5lueGRsl3oAYJUyNTPo19yWwrJHWcL31vQPFW+Yz+ZxSnWDxI4 mPgdBUp4nCC5pxoBs/Ju9uNZuXSRb8B6hcGViVxeewjjnJcHz2+dCvN/R6sc76an dOsrZSBzdlJURm2g2DI2IX+2y7V7r0mW3PCJl9dNjgQiOWz06RMAv9ifNufHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUw1oZIZdHmYYP7PsyM0UDrBmRPgswHwYDVR0j BBgwFoAUMit7vHviqE2NZEpraDM5Y1F8r/owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NDUwZjBmNS1iODgzLTRiMjQtOTc5Mi03ZTk1N2FmODhiZjgvMC8zMjJCN0JCQzdC RTJBODREOEQ2NDRBNkI2ODMzMzk2MzUxN0NBRkZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzIyQjdCQkM3QkUyQTg0RDhENjQ0QTZCNjgzMzM5NjM1MTdD QUZGQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDQ1MGYwZjUtYjg4My00YjI0LTk3 OTItN2U5NTdhZjg4YmY4LzAvMzIyQjdCQkM3QkUyQTg0RDhENjQ0QTZCNjgzMzM5 NjM1MTdDQUZGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALR/U/XZ91yyn3iuNaOfLn/eMjRBiPN41X+C B8dsWHTU0UK1BgR0s18vlFuBQw7HQceVGV+4ee8A8NhHMGuWkeU8C/jQUAQDeBnE j/JnLW0dk5Vy0K2F1ldhrTun0SVvuSUhFkZVb/IyVG9HGy3VThiD1Ksoy3fQkLW2 91VGKlr4mz1zKGxrMWYHBTEYaHbhv093m5ngQMubdAtcBxmYr2c52xRkSrQUuoKz NUoiAUA6YIB0ySuAWX3uFPZS8AzHsVjVIqpDC9jL0Y+A/QnEbRUkTBl9pj/ZIj77 OssgkN4VZeFG2vvy9FKsbfJ6kD+xMvxmJgafG1IZpeg2MjA4EcE= -----END CERTIFICATE-----Generated at Mon Oct 20 10:06:51 2025 by rpki-client