$ rpki-client -vvf repo-rpki.idnic.net/repo/3900208b-32ac-4a26-9d92-609ad76183c1/0/22825A0BEE926683AC41A0486AEF55AF8C1C228F.mft File: 22825A0BEE926683AC41A0486AEF55AF8C1C228F.mft (raw, json) Hash identifier: FgppGvxFxC8CJb2xyYk+IR6pPeGN+zQhpuUXZNq4R2Y= Subject key identifier: 33:3D:90:EA:44:E9:6A:F6:06:01:EF:48:26:57:D4:F3:6D:87:29:C3 Authority key identifier: 22:82:5A:0B:EE:92:66:83:AC:41:A0:48:6A:EF:55:AF:8C:1C:22:8F Certificate issuer: /CN=22825A0BEE926683AC41A0486AEF55AF8C1C228F Certificate serial: 364C70E5ED08550D7A59E0E97D26EB8E15608A83 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/22825A0BEE926683AC41A0486AEF55AF8C1C228F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3900208b-32ac-4a26-9d92-609ad76183c1/0/22825A0BEE926683AC41A0486AEF55AF8C1C228F.mft Manifest number: 01B9 Signing time: Sun 19 Oct 2025 09:00:45 +0000 Manifest this update: Sun 19 Oct 2025 08:55:45 +0000 Manifest next update: Wed 22 Oct 2025 19:56:45 +0000 Files and hashes: 1: 22825A0BEE926683AC41A0486AEF55AF8C1C228F.crl (hash: Zm6enZXUUXVJ+pfIzQrVn5Ojy8SoyTf2afLHpHNyomI=) 2: 3130332e3133392e3137352e302f32342d3234203d3e20313331373435.roa (hash: /z/ZhPaw5F3TCZQvmgqcleuF3rFMMJYxb+Mr//w9yXY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3900208b-32ac-4a26-9d92-609ad76183c1/0/22825A0BEE926683AC41A0486AEF55AF8C1C228F.crl rsync://repo-rpki.idnic.net/repo/3900208b-32ac-4a26-9d92-609ad76183c1/0/22825A0BEE926683AC41A0486AEF55AF8C1C228F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/22825A0BEE926683AC41A0486AEF55AF8C1C228F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 19:56:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:4c:70:e5:ed:08:55:0d:7a:59:e0:e9:7d:26:eb:8e:15:60:8a:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22825A0BEE926683AC41A0486AEF55AF8C1C228F Validity Not Before: Oct 19 08:55:45 2025 GMT Not After : Oct 22 19:56:45 2025 GMT Subject: CN=333D90EA44E96AF60601EF482657D4F36D8729C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:78:9f:bd:aa:48:be:4f:4a:2d:23:45:ee:04: 0e:8c:27:5a:8d:71:fa:d0:99:a7:0f:8f:82:1e:cb: 39:99:6f:f3:36:3c:6c:ed:ba:45:60:1a:a6:9e:65: 72:1c:ce:88:29:b8:50:c5:1a:21:20:65:f4:28:e5: db:2a:dd:4d:f3:7d:b8:ee:87:f0:41:5c:f4:27:df: 30:0b:cc:4e:3d:84:af:92:2c:18:94:19:95:02:b7: a5:c8:fc:ca:54:11:d7:11:a3:9f:30:66:63:9b:60: fb:ac:41:85:85:4a:ac:ea:5d:1f:db:90:71:15:8e: d9:d4:11:ca:d1:a6:6d:40:3a:81:e8:f6:51:95:27: 19:dd:a4:0b:5b:ee:e8:43:65:d4:41:68:ae:fc:67: fd:8d:4e:46:77:1a:ec:88:6a:ac:79:24:33:de:0c: 0d:cc:b1:61:8c:30:d2:76:3e:01:d5:8f:4f:35:d6: cf:8d:5b:83:33:8a:91:84:50:42:33:f1:23:f2:a9: c8:38:0f:8b:c1:01:d6:4a:30:87:ff:c1:39:9d:8f: 69:e0:61:70:8c:81:44:74:f2:cd:d0:40:73:fc:04: 8f:52:c2:ab:dc:77:9e:f6:8d:99:ca:e0:51:85:21: 6d:cf:f4:49:26:e0:3c:92:c4:08:28:f1:c4:eb:ee: 40:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:3D:90:EA:44:E9:6A:F6:06:01:EF:48:26:57:D4:F3:6D:87:29:C3 X509v3 Authority Key Identifier: keyid:22:82:5A:0B:EE:92:66:83:AC:41:A0:48:6A:EF:55:AF:8C:1C:22:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3900208b-32ac-4a26-9d92-609ad76183c1/0/22825A0BEE926683AC41A0486AEF55AF8C1C228F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/22825A0BEE926683AC41A0486AEF55AF8C1C228F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3900208b-32ac-4a26-9d92-609ad76183c1/0/22825A0BEE926683AC41A0486AEF55AF8C1C228F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:ab:04:b9:9b:f8:93:f3:6c:99:ed:a0:46:19:e6:5f:e0:78: 5b:04:0f:67:6f:4e:c8:90:3c:e0:69:26:33:fb:f3:f5:9c:8f: d6:0c:c6:58:07:8a:a2:5d:2b:b8:0d:2f:11:51:02:04:1b:53: b3:a4:9c:1f:a4:35:9d:55:93:08:b6:96:f2:8c:c1:5a:77:53: 53:ac:0f:c4:3c:8f:78:f5:bb:07:cd:35:2e:ee:e9:e9:df:32: 3e:94:d1:c1:7f:16:f8:6c:09:69:28:cb:35:8c:c2:26:44:a3: bf:50:2b:6d:01:0f:51:82:23:ed:ed:31:57:3f:79:b3:59:38: ad:e4:46:85:e7:dd:07:f5:c3:5c:b1:dd:aa:a5:25:61:e2:ea: 35:b6:a0:8b:45:cd:83:fa:72:c6:10:e4:dc:f4:90:70:0a:0b: 17:f5:a1:7c:5d:8f:b8:50:84:64:8b:1d:a7:1b:bc:71:1d:a1: 05:75:d3:55:b9:18:90:84:2f:2a:14:49:27:fd:82:3b:55:62: a3:bb:9c:07:4a:ac:7e:3c:c4:46:3b:43:60:42:6e:68:75:6d: 0f:3b:b6:4d:45:08:3c:9b:d8:22:c8:ae:ec:77:be:79:f5:e2: 04:5a:fd:a0:db:cd:da:da:42:c2:7c:cc:fd:01:9c:06:39:c7: a5:5e:a9:91 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNkxw5e0IVQ16WeDpfSbrjhVgioMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjI4MjVBMEJFRTkyNjY4M0FDNDFBMDQ4NkFFRjU1QUY4 QzFDMjI4RjAeFw0yNTEwMTkwODU1NDVaFw0yNTEwMjIxOTU2NDVaMDMxMTAvBgNV BAMTKDMzM0Q5MEVBNDRFOTZBRjYwNjAxRUY0ODI2NTdENEYzNkQ4NzI5QzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2eJ+9qki+T0otI0XuBA6MJ1qN cfrQmacPj4IeyzmZb/M2PGztukVgGqaeZXIczogpuFDFGiEgZfQo5dsq3U3zfbju h/BBXPQn3zALzE49hK+SLBiUGZUCt6XI/MpUEdcRo58wZmObYPusQYWFSqzqXR/b kHEVjtnUEcrRpm1AOoHo9lGVJxndpAtb7uhDZdRBaK78Z/2NTkZ3GuyIaqx5JDPe DA3MsWGMMNJ2PgHVj0811s+NW4MzipGEUEIz8SPyqcg4D4vBAdZKMIf/wTmdj2ng YXCMgUR08s3QQHP8BI9Swqvcd572jZnK4FGFIW3P9Ekm4DySxAgo8cTr7kBRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMz2Q6kTpavYGAe9IJlfU822HKcMwHwYDVR0j BBgwFoAUIoJaC+6SZoOsQaBIau9Vr4wcIo8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z OTAwMjA4Yi0zMmFjLTRhMjYtOWQ5Mi02MDlhZDc2MTgzYzEvMC8yMjgyNUEwQkVF OTI2NjgzQUM0MUEwNDg2QUVGNTVBRjhDMUMyMjhGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjI4MjVBMEJFRTkyNjY4M0FDNDFBMDQ4NkFFRjU1QUY4QzFD MjI4Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzkwMDIwOGItMzJhYy00YTI2LTlk OTItNjA5YWQ3NjE4M2MxLzAvMjI4MjVBMEJFRTkyNjY4M0FDNDFBMDQ4NkFFRjU1 QUY4QzFDMjI4Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHarBLmb+JPzbJntoEYZ5l/geFsED2dvTsiQ POBpJjP78/Wcj9YMxlgHiqJdK7gNLxFRAgQbU7OknB+kNZ1Vkwi2lvKMwVp3U1Os D8Q8j3j1uwfNNS7u6enfMj6U0cF/FvhsCWkoyzWMwiZEo79QK20BD1GCI+3tMVc/ ebNZOK3kRoXn3Qf1w1yx3aqlJWHi6jW2oItFzYP6csYQ5Nz0kHAKCxf1oXxdj7hQ hGSLHacbvHEdoQV101W5GJCELyoUSSf9gjtVYqO7nAdKrH48xEY7Q2BCbmh1bQ87 tk1FCDyb2CLIrux3vnn14gRa/aDbzdraQsJ8zP0BnAY5x6VeqZE= -----END CERTIFICATE-----Generated at Mon Oct 20 13:58:45 2025 by rpki-client