$ rpki-client -vvf repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.mft File: 229866508D6D624523EDAD2A0DE1E82AE2C3B512.mft (raw, json) Hash identifier: +BlxSJud9zTZXc4h2SBBQWGjteKhqkk4Ncb6+elMocg= Subject key identifier: BE:F3:0E:A7:9A:69:64:D3:BD:F6:13:96:73:9F:CA:10:10:C6:D8:1C Authority key identifier: 22:98:66:50:8D:6D:62:45:23:ED:AD:2A:0D:E1:E8:2A:E2:C3:B5:12 Certificate issuer: /CN=229866508D6D624523EDAD2A0DE1E82AE2C3B512 Certificate serial: 0AAE093C98731F46488C68D03CC7892A8080847F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.mft Manifest number: 0337 Signing time: Sat 18 Oct 2025 23:11:21 +0000 Manifest this update: Sat 18 Oct 2025 23:06:21 +0000 Manifest next update: Tue 21 Oct 2025 23:45:21 +0000 Files and hashes: 1: AS10217.roa (hash: JJQedycT2rxuZ0WKBIVY+WZbOwVugUFQzwOutSTR+VY=) 2: 229866508D6D624523EDAD2A0DE1E82AE2C3B512.crl (hash: 9L0R+2xI6LsxtestYUAa1hpFCAA3OFwKa/16frbvVAk=) 3: AS45700.roa (hash: BXkE0BXqN50iJBAlAe18i/nlvwrKk+4GRFc684uKAn8=) 4: AS147168.roa (hash: SfwVcPhlkwWs3fgP+tbn9sWqgzMndeGhqXYvwXPNvxY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.crl rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 23:45:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:ae:09:3c:98:73:1f:46:48:8c:68:d0:3c:c7:89:2a:80:80:84:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=229866508D6D624523EDAD2A0DE1E82AE2C3B512 Validity Not Before: Oct 18 23:06:21 2025 GMT Not After : Oct 21 23:45:21 2025 GMT Subject: CN=BEF30EA79A6964D3BDF61396739FCA1010C6D81C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:55:c6:19:1c:77:50:ca:66:33:71:0e:28:76: 28:5a:9a:37:a7:14:4f:25:21:0e:98:fb:be:2c:66: 6f:b4:4e:31:0f:29:13:82:a3:b8:94:2e:78:78:43: f6:9a:da:ad:7a:83:9a:ac:53:4e:50:74:37:60:03: 00:5b:47:fc:91:4a:04:eb:71:6f:22:ba:34:be:5d: d1:a6:16:33:8c:74:2a:b3:b6:5f:37:21:86:0c:7d: 6e:af:c6:45:90:27:a6:fc:a2:2a:49:e2:a9:c6:94: 47:dc:2b:0b:07:e0:21:c6:14:f4:fa:22:1b:60:d7: d8:e5:f6:83:ef:41:9c:75:eb:ce:df:42:38:b0:21: a0:a1:f1:73:30:f8:bd:f6:e0:66:47:7a:eb:cb:fe: 58:49:cf:93:fa:6e:49:1e:eb:f7:91:70:11:18:fc: 56:93:1b:a0:c7:14:ec:6d:bc:fc:ca:4a:96:bd:c0: f1:71:fc:15:95:3c:73:c8:97:8c:0c:01:14:2c:53: 0f:14:9d:61:56:a3:d2:ed:cb:e3:15:fa:77:13:ef: 1b:57:2d:d9:ad:ce:dc:3a:83:62:55:5b:ca:f5:0a: 1e:11:52:97:00:3d:bc:30:92:71:27:a6:7e:8f:6e: 10:54:1f:fd:93:5b:b6:c8:48:34:0d:59:64:c9:ca: ac:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:F3:0E:A7:9A:69:64:D3:BD:F6:13:96:73:9F:CA:10:10:C6:D8:1C X509v3 Authority Key Identifier: keyid:22:98:66:50:8D:6D:62:45:23:ED:AD:2A:0D:E1:E8:2A:E2:C3:B5:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:fe:fe:dd:00:b0:d4:60:83:12:f1:f7:1d:bd:a4:12:53:a5: f1:63:72:8f:ec:ec:ba:0d:2a:ca:9e:2b:ec:4f:39:50:a1:b1: 8b:04:76:10:24:32:16:b0:a3:f4:c1:5a:55:7e:80:cb:4e:d4: 23:af:ff:28:47:6c:a5:e3:73:e9:d2:a1:d2:7f:0e:bd:93:83: 5a:dd:38:99:58:2b:b6:f5:6b:27:f4:d6:70:bc:5d:c9:8f:46: c4:c7:ef:ea:cc:3e:7f:84:68:30:f6:5f:49:ef:08:5f:31:a5: c2:cf:6c:19:2d:77:09:d8:35:be:d2:63:85:1b:2b:61:62:81: a2:9a:8a:de:98:88:89:2e:d1:45:64:16:65:16:76:3f:8e:e8: 60:03:d6:de:fb:aa:a4:de:9a:7d:d3:3f:f0:c9:0a:e5:be:65: b8:f2:bc:98:d1:fc:1d:fc:ae:54:4e:8b:5b:46:85:82:cf:2e: 6d:4e:95:44:d4:e3:35:7e:b5:53:2a:64:5c:96:53:23:24:2e: 28:19:ba:60:21:71:8e:61:89:a5:fc:bc:54:f6:34:66:ab:34: a0:eb:c3:6b:96:21:e5:c2:6c:0f:2d:1e:1c:a4:e8:33:60:06: 7b:dc:e9:17:55:35:db:10:3e:9d:59:ce:97:7f:ab:5a:5b:a5: f8:e4:ef:68 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCq4JPJhzH0ZIjGjQPMeJKoCAhH8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjI5ODY2NTA4RDZENjI0NTIzRURBRDJBMERFMUU4MkFF MkMzQjUxMjAeFw0yNTEwMTgyMzA2MjFaFw0yNTEwMjEyMzQ1MjFaMDMxMTAvBgNV BAMTKEJFRjMwRUE3OUE2OTY0RDNCREY2MTM5NjczOUZDQTEwMTBDNkQ4MUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVVcYZHHdQymYzcQ4odihamjen FE8lIQ6Y+74sZm+0TjEPKROCo7iULnh4Q/aa2q16g5qsU05QdDdgAwBbR/yRSgTr cW8iujS+XdGmFjOMdCqztl83IYYMfW6vxkWQJ6b8oipJ4qnGlEfcKwsH4CHGFPT6 Ihtg19jl9oPvQZx1687fQjiwIaCh8XMw+L324GZHeuvL/lhJz5P6bkke6/eRcBEY /FaTG6DHFOxtvPzKSpa9wPFx/BWVPHPIl4wMARQsUw8UnWFWo9Lty+MV+ncT7xtX Ldmtztw6g2JVW8r1Ch4RUpcAPbwwknEnpn6PbhBUH/2TW7bISDQNWWTJyqzTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvvMOp5ppZNO99hOWc5/KEBDG2BwwHwYDVR0j BBgwFoAUIphmUI1tYkUj7a0qDeHoKuLDtRIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZmI3MDgxOC0yMzY2LTQyZTAtOWRiZC0yNTQzODEwNjllNTcvMC8yMjk4NjY1MDhE NkQ2MjQ1MjNFREFEMkEwREUxRTgyQUUyQzNCNTEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjI5ODY2NTA4RDZENjI0NTIzRURBRDJBMERFMUU4MkFFMkMz QjUxMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmZiNzA4MTgtMjM2Ni00MmUwLTlk YmQtMjU0MzgxMDY5ZTU3LzAvMjI5ODY2NTA4RDZENjI0NTIzRURBRDJBMERFMUU4 MkFFMkMzQjUxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAD+/t0AsNRggxLx9x29pBJTpfFjco/s7LoN KsqeK+xPOVChsYsEdhAkMhawo/TBWlV+gMtO1COv/yhHbKXjc+nSodJ/Dr2Tg1rd OJlYK7b1ayf01nC8XcmPRsTH7+rMPn+EaDD2X0nvCF8xpcLPbBktdwnYNb7SY4Ub K2FigaKait6YiIku0UVkFmUWdj+O6GAD1t77qqTemn3TP/DJCuW+ZbjyvJjR/B38 rlROi1tGhYLPLm1OlUTU4zV+tVMqZFyWUyMkLigZumAhcY5hiaX8vFT2NGarNKDr w2uWIeXCbA8tHhyk6DNgBnvc6RdVNdsQPp1Zzpd/q1pbpfjk72g= -----END CERTIFICATE-----Generated at Mon Oct 20 17:24:35 2025 by rpki-client