$ rpki-client -vvf repo-rpki.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.mft File: C1C0233DC07302E86D114AB772AB6566ED7F5FBB.mft (raw, json) Hash identifier: Rt7ahZs6qL4R7SmUtkaTCwJCEiiDqIJ1fymT8VaHLpM= Subject key identifier: 49:B6:B2:14:F8:81:C8:68:8F:04:42:F6:CB:34:53:14:54:D0:44:47 Authority key identifier: C1:C0:23:3D:C0:73:02:E8:6D:11:4A:B7:72:AB:65:66:ED:7F:5F:BB Certificate issuer: /CN=C1C0233DC07302E86D114AB772AB6566ED7F5FBB Certificate serial: 30BE6358A55121F6D78F51ECB72F8B0F39C98428 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.mft Manifest number: 01FE Signing time: Mon 20 Oct 2025 01:51:57 +0000 Manifest this update: Mon 20 Oct 2025 01:46:57 +0000 Manifest next update: Thu 23 Oct 2025 06:03:57 +0000 Files and hashes: 1: C1C0233DC07302E86D114AB772AB6566ED7F5FBB.crl (hash: +eTlDy+TM/8AbFhjbxfUGfrYIzXrPM2EIpb80cudMLg=) 2: 323430373a373263303a3a2f33322d3332203d3e203538383230.roa (hash: DEQ6i2fIqhrPJGH2IFEMi8YnzTrgKlP6WPrpjEcp18o=) 3: 3130332e3135322e39322e302f32332d3234203d3e20313338383630.roa (hash: bltZi0XDvzmwgyzEl66AozT5pKIvx60Z1RNoNEbNdrk=) 4: 323430373a373263303a3a2f33322d3438203d3e203538383230.roa (hash: t1SEps+PxNqj4zacSf/7DBl+MO9xjw/dSKyX8w5YIzQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.crl rsync://repo-rpki.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 06:03:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:be:63:58:a5:51:21:f6:d7:8f:51:ec:b7:2f:8b:0f:39:c9:84:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C1C0233DC07302E86D114AB772AB6566ED7F5FBB Validity Not Before: Oct 20 01:46:57 2025 GMT Not After : Oct 23 06:03:57 2025 GMT Subject: CN=49B6B214F881C8688F0442F6CB34531454D04447 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:c8:36:e7:3c:4a:de:50:bc:67:20:6b:32:a7: 25:03:46:ea:f4:52:95:15:f6:8e:04:fc:a2:fe:8d: 8e:57:8d:26:b2:62:bd:af:41:2e:01:aa:08:f0:bb: 0f:14:31:c7:e8:39:af:56:7f:96:5e:c6:7d:b8:3a: f3:ea:cf:4a:b0:f8:53:d6:f3:ad:2d:9a:fe:5e:a4: c5:7b:43:d1:1f:0f:e4:4a:e9:7a:80:eb:94:f7:71: af:08:59:f1:ce:de:21:da:71:99:8f:62:25:9c:39: df:1f:fd:31:21:57:b6:fc:3a:38:fd:03:b3:55:3f: 29:26:9d:03:fd:28:89:75:0b:01:9a:84:05:80:5c: cb:b4:d7:0e:1c:f1:cf:b8:49:f6:ff:0d:79:33:56: 95:20:76:52:b7:2c:86:b7:ed:cf:af:d6:d3:85:a9: ca:4f:84:96:69:dc:c6:a7:f0:a0:09:18:82:29:63: 27:eb:2d:ae:aa:3e:8d:aa:45:bc:3b:3b:f8:20:79: 84:e8:dd:6c:87:b1:d1:9f:8f:a6:1d:68:08:e9:76: 05:9f:a1:02:35:9b:81:78:6d:b8:cd:bf:21:c5:b5: 80:c4:22:62:97:f4:f0:9e:10:fb:3b:b6:62:7e:52: 2b:18:55:40:d1:59:7a:16:d6:d8:ff:0c:3d:ec:58: ca:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:B6:B2:14:F8:81:C8:68:8F:04:42:F6:CB:34:53:14:54:D0:44:47 X509v3 Authority Key Identifier: keyid:C1:C0:23:3D:C0:73:02:E8:6D:11:4A:B7:72:AB:65:66:ED:7F:5F:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c8:ef:24:4f:0a:24:cd:06:ca:93:40:40:24:bc:e9:7a:a4:3d: fe:12:60:89:b0:d8:38:0b:45:63:1b:11:1d:d5:92:7f:5d:53: 4e:83:b4:2a:e8:9f:d1:8e:b2:d9:06:3c:9d:a4:a0:f4:5c:5b: f9:13:4c:c1:86:b0:2c:30:b9:c4:8b:5a:b1:1e:50:c1:a7:26: 59:81:42:e0:ab:5f:c0:96:27:9c:f6:19:00:95:9c:b5:71:82: 1c:82:22:a8:f6:cb:65:84:41:e4:75:9b:f7:89:27:f3:bc:79: 08:14:b0:b7:3f:2d:42:2f:4f:b2:21:9e:d8:fd:97:ba:98:92: 5d:a3:c8:8f:d1:c3:40:34:fa:27:3e:96:d7:39:2a:27:1d:5e: f4:fb:68:96:4f:a7:97:18:db:4a:83:f2:35:c4:d5:e0:55:f6: 4b:84:0d:a5:86:99:af:7e:b7:ec:2a:ba:f1:56:fe:c5:58:1a: 52:cd:b8:ca:66:f7:59:ac:f6:da:c9:6e:57:1e:69:7c:5c:e6: 47:30:07:98:90:94:b2:ad:c7:57:ea:0c:30:88:9b:ab:da:e4: 09:d9:9d:18:07:1f:f9:71:28:3e:10:87:6a:0b:6d:48:be:95: 52:d0:3a:35:25:3b:97:7e:c8:28:1a:8e:b1:e8:07:01:d1:70: fc:15:39:f6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUML5jWKVRIfbXj1Hsty+LDznJhCgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzFDMDIzM0RDMDczMDJFODZEMTE0QUI3NzJBQjY1NjZF RDdGNUZCQjAeFw0yNTEwMjAwMTQ2NTdaFw0yNTEwMjMwNjAzNTdaMDMxMTAvBgNV BAMTKDQ5QjZCMjE0Rjg4MUM4Njg4RjA0NDJGNkNCMzQ1MzE0NTREMDQ0NDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXyDbnPEreULxnIGsypyUDRur0 UpUV9o4E/KL+jY5XjSayYr2vQS4Bqgjwuw8UMcfoOa9Wf5Zexn24OvPqz0qw+FPW 860tmv5epMV7Q9EfD+RK6XqA65T3ca8IWfHO3iHacZmPYiWcOd8f/TEhV7b8Ojj9 A7NVPykmnQP9KIl1CwGahAWAXMu01w4c8c+4Sfb/DXkzVpUgdlK3LIa37c+v1tOF qcpPhJZp3Man8KAJGIIpYyfrLa6qPo2qRbw7O/ggeYTo3WyHsdGfj6YdaAjpdgWf oQI1m4F4bbjNvyHFtYDEImKX9PCeEPs7tmJ+UisYVUDRWXoW1tj/DD3sWMpvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSbayFPiByGiPBEL2yzRTFFTQREcwHwYDVR0j BBgwFoAUwcAjPcBzAuhtEUq3cqtlZu1/X7swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z OGM5YzI1Mi1mN2NhLTRkZDUtODhmNi0yMmFkZGM4OTM0YjMvMC9DMUMwMjMzREMw NzMwMkU4NkQxMTRBQjc3MkFCNjU2NkVEN0Y1RkJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzFDMDIzM0RDMDczMDJFODZEMTE0QUI3NzJBQjY1NjZFRDdG NUZCQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzhjOWMyNTItZjdjYS00ZGQ1LTg4 ZjYtMjJhZGRjODkzNGIzLzAvQzFDMDIzM0RDMDczMDJFODZEMTE0QUI3NzJBQjY1 NjZFRDdGNUZCQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMjvJE8KJM0GypNAQCS86XqkPf4SYImw2DgL RWMbER3Vkn9dU06DtCron9GOstkGPJ2koPRcW/kTTMGGsCwwucSLWrEeUMGnJlmB QuCrX8CWJ5z2GQCVnLVxghyCIqj2y2WEQeR1m/eJJ/O8eQgUsLc/LUIvT7Ihntj9 l7qYkl2jyI/Rw0A0+ic+ltc5KicdXvT7aJZPp5cY20qD8jXE1eBV9kuEDaWGma9+ t+wquvFW/sVYGlLNuMpm91ms9trJblceaXxc5kcwB5iQlLKtx1fqDDCIm6va5AnZ nRgHH/lxKD4Qh2oLbUi+lVLQOjUlO5d+yCgajrHoBwHRcPwVOfY= -----END CERTIFICATE-----Generated at Mon Oct 20 15:50:33 2025 by rpki-client