$ rpki-client -vvf repo-rpki.idnic.net/repo/1ce8da9c-bdbd-4908-ba92-d90fea9c8f05/0/722D23AD0F959CE5CBFF927C152517F07060D195.mft File: 722D23AD0F959CE5CBFF927C152517F07060D195.mft (raw, json) Hash identifier: guLbz0W0heiXHY5T3iAYHt5PiiNzEv1Qp8f3OSRj7fQ= Subject key identifier: 8B:82:2B:23:7D:59:F9:E8:E1:55:AC:1F:2E:CA:AB:DF:C8:00:B8:D3 Authority key identifier: 72:2D:23:AD:0F:95:9C:E5:CB:FF:92:7C:15:25:17:F0:70:60:D1:95 Certificate issuer: /CN=722D23AD0F959CE5CBFF927C152517F07060D195 Certificate serial: 61C570530E0DEBE2B13C2FC52552575D87C646BE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/722D23AD0F959CE5CBFF927C152517F07060D195.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1ce8da9c-bdbd-4908-ba92-d90fea9c8f05/0/722D23AD0F959CE5CBFF927C152517F07060D195.mft Manifest number: 01D7 Signing time: Mon 20 Oct 2025 01:21:46 +0000 Manifest this update: Mon 20 Oct 2025 01:16:46 +0000 Manifest next update: Thu 23 Oct 2025 02:09:46 +0000 Files and hashes: 1: 722D23AD0F959CE5CBFF927C152517F07060D195.crl (hash: uoxx9UeyY/e5vwWzPceAMjEOc5fACjGjstIxci/SCeI=) 2: 3130332e34392e35302e302f32332d3234203d3e20313530343830.roa (hash: IgvUit+JVnRvJOkjIYlvNPAALXRaIVBYKC5WzTyMkfQ=) 3: 3130332e34392e35312e302f32342d3234203d3e20313530343830.roa (hash: bai8drpp5Ou2lflIGmVUiQ7O559qS/qew2SdTRLBcyQ=) 4: 3130332e34392e35302e302f32342d3234203d3e20313530343830.roa (hash: +d+a4LcNz5DaR0KSjaxaW7ITfbOW0ZExk6wH6uzqtS4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1ce8da9c-bdbd-4908-ba92-d90fea9c8f05/0/722D23AD0F959CE5CBFF927C152517F07060D195.crl rsync://repo-rpki.idnic.net/repo/1ce8da9c-bdbd-4908-ba92-d90fea9c8f05/0/722D23AD0F959CE5CBFF927C152517F07060D195.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/722D23AD0F959CE5CBFF927C152517F07060D195.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 02:09:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:c5:70:53:0e:0d:eb:e2:b1:3c:2f:c5:25:52:57:5d:87:c6:46:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=722D23AD0F959CE5CBFF927C152517F07060D195 Validity Not Before: Oct 20 01:16:46 2025 GMT Not After : Oct 23 02:09:46 2025 GMT Subject: CN=8B822B237D59F9E8E155AC1F2ECAABDFC800B8D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:00:2a:0c:42:3e:12:a2:f1:34:c5:b1:52:a3: 5d:25:f8:dc:80:85:b8:11:53:8c:ba:d8:e3:2b:24: 12:bc:dc:9d:0e:5f:be:7f:2c:0e:d4:ba:4b:66:0f: af:88:43:bf:38:6b:3a:4c:36:c8:79:e6:24:64:79: c6:b0:81:84:7d:8f:21:ee:f4:e7:53:cd:c6:12:55: c2:97:9e:bb:77:de:85:4d:38:f3:c3:84:15:f9:83: 7a:a5:0d:f4:f7:41:62:e6:ee:e8:cd:b3:72:f7:ff: fa:18:e4:99:d6:a8:b4:1f:b2:1e:26:1d:57:62:6b: 26:b1:67:a4:f6:3c:91:73:79:27:dd:df:2b:89:d6: 2c:41:13:5b:13:67:82:7e:9a:5d:1d:5e:11:63:1c: 0d:3d:7f:8c:6f:9a:62:e8:2a:59:57:db:78:b5:89: 5d:33:db:85:20:96:0b:59:e8:a5:d2:c9:e0:b7:0d: e1:86:2d:34:ba:55:82:12:d2:6d:32:ae:95:74:b6: 0b:98:67:1c:7f:a6:bc:20:b3:87:bf:a6:eb:77:67: 9b:99:c6:ed:18:67:d8:a0:b6:85:e4:b6:89:74:3b: e2:03:63:99:cc:71:c1:a3:d6:64:9e:af:3c:c8:9e: 15:d7:c3:38:62:93:4c:fc:04:35:88:e9:21:f3:20: 8a:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:82:2B:23:7D:59:F9:E8:E1:55:AC:1F:2E:CA:AB:DF:C8:00:B8:D3 X509v3 Authority Key Identifier: keyid:72:2D:23:AD:0F:95:9C:E5:CB:FF:92:7C:15:25:17:F0:70:60:D1:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1ce8da9c-bdbd-4908-ba92-d90fea9c8f05/0/722D23AD0F959CE5CBFF927C152517F07060D195.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/722D23AD0F959CE5CBFF927C152517F07060D195.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ce8da9c-bdbd-4908-ba92-d90fea9c8f05/0/722D23AD0F959CE5CBFF927C152517F07060D195.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:96:af:b4:2d:b6:b4:fb:28:f0:70:57:00:d7:81:5f:6c:55: 1e:99:02:e6:ec:15:56:4e:10:27:58:70:48:e5:cc:ef:94:20: c4:4a:e9:13:9d:26:89:05:4c:d3:16:56:9c:74:b0:38:c9:4d: 02:e6:32:c6:a1:99:2b:b8:13:25:ed:3e:74:b9:14:d7:26:d2: 63:10:79:74:fd:d1:ed:68:71:93:ed:8a:7c:f1:8a:bb:f7:79: ae:1d:ce:12:82:c4:db:4b:38:9b:30:1b:b1:9c:22:77:57:ec: 6e:71:12:3b:15:bc:dc:2b:7d:d0:44:b7:9f:a7:3a:9f:69:68: 59:1c:86:1c:89:be:f9:05:3e:a8:62:f1:62:99:3a:dc:fc:db: 69:16:0b:5d:85:fd:86:e1:98:8b:9c:0f:27:6c:5a:39:bd:d9: 36:eb:b6:8a:5a:d2:8e:3c:0e:cf:71:de:22:da:65:ce:96:20: 0f:96:7e:55:58:7d:70:5e:2d:ec:7b:e6:70:cf:5f:3b:af:a4: 74:18:b9:15:2e:8a:d4:48:bb:b9:78:9e:ae:dc:71:ab:b1:12: 3c:84:9e:7a:c0:b4:bf:f6:43:a8:7d:bf:c5:41:0a:05:1a:37: fb:56:7f:e3:e9:3e:da:77:18:7c:ce:51:d5:c3:f4:b1:aa:e2: 8a:79:cb:96 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYcVwUw4N6+KxPC/FJVJXXYfGRr4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzIyRDIzQUQwRjk1OUNFNUNCRkY5MjdDMTUyNTE3RjA3 MDYwRDE5NTAeFw0yNTEwMjAwMTE2NDZaFw0yNTEwMjMwMjA5NDZaMDMxMTAvBgNV BAMTKDhCODIyQjIzN0Q1OUY5RThFMTU1QUMxRjJFQ0FBQkRGQzgwMEI4RDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD3ACoMQj4SovE0xbFSo10l+NyA hbgRU4y62OMrJBK83J0OX75/LA7UuktmD6+IQ784azpMNsh55iRkecawgYR9jyHu 9OdTzcYSVcKXnrt33oVNOPPDhBX5g3qlDfT3QWLm7ujNs3L3//oY5JnWqLQfsh4m HVdiayaxZ6T2PJFzeSfd3yuJ1ixBE1sTZ4J+ml0dXhFjHA09f4xvmmLoKllX23i1 iV0z24UglgtZ6KXSyeC3DeGGLTS6VYIS0m0yrpV0tguYZxx/prwgs4e/put3Z5uZ xu0YZ9igtoXktol0O+IDY5nMccGj1mSerzzInhXXwzhik0z8BDWI6SHzIIpNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUi4IrI31Z+ejhVawfLsqr38gAuNMwHwYDVR0j BBgwFoAUci0jrQ+VnOXL/5J8FSUX8HBg0ZUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x Y2U4ZGE5Yy1iZGJkLTQ5MDgtYmE5Mi1kOTBmZWE5YzhmMDUvMC83MjJEMjNBRDBG OTU5Q0U1Q0JGRjkyN0MxNTI1MTdGMDcwNjBEMTk1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzIyRDIzQUQwRjk1OUNFNUNCRkY5MjdDMTUyNTE3RjA3MDYw RDE5NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWNlOGRhOWMtYmRiZC00OTA4LWJh OTItZDkwZmVhOWM4ZjA1LzAvNzIyRDIzQUQwRjk1OUNFNUNCRkY5MjdDMTUyNTE3 RjA3MDYwRDE5NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEuWr7QttrT7KPBwVwDXgV9sVR6ZAubsFVZO ECdYcEjlzO+UIMRK6ROdJokFTNMWVpx0sDjJTQLmMsahmSu4EyXtPnS5FNcm0mMQ eXT90e1ocZPtinzxirv3ea4dzhKCxNtLOJswG7GcIndX7G5xEjsVvNwrfdBEt5+n Op9paFkchhyJvvkFPqhi8WKZOtz822kWC12F/YbhmIucDydsWjm92Tbrtopa0o48 Ds9x3iLaZc6WIA+WflVYfXBeLex75nDPXzuvpHQYuRUuitRIu7l4nq7ccauxEjyE nnrAtL/2Q6h9v8VBCgUaN/tWf+PpPtp3GHzOUdXD9LGq4op5y5Y= -----END CERTIFICATE-----Generated at Mon Oct 20 18:07:32 2025 by rpki-client