$ rpki-client -vvf repo-rpki.idnic.net/repo/54242355-a7e2-4cb9-8cff-9e17c742c2ef/0/A230D664FEDFC0266349811ED3999BE5220F1DEA.mft File: A230D664FEDFC0266349811ED3999BE5220F1DEA.mft (raw, json) Hash identifier: 0c6RtYSQjYjth8oZA/IcRtM42i9pd2PXggTCmsa68CM= Subject key identifier: D7:6F:DC:E6:06:1F:3F:EF:7C:CC:0A:58:3F:BD:41:78:13:F5:D0:94 Authority key identifier: A2:30:D6:64:FE:DF:C0:26:63:49:81:1E:D3:99:9B:E5:22:0F:1D:EA Certificate issuer: /CN=A230D664FEDFC0266349811ED3999BE5220F1DEA Certificate serial: 234FC9D6BB0B835A1F594F89CDDBA2ABBDC00CAC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A230D664FEDFC0266349811ED3999BE5220F1DEA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/54242355-a7e2-4cb9-8cff-9e17c742c2ef/0/A230D664FEDFC0266349811ED3999BE5220F1DEA.mft Manifest number: 0472 Signing time: Sun 19 Oct 2025 04:50:00 +0000 Manifest this update: Sun 19 Oct 2025 04:45:00 +0000 Manifest next update: Wed 22 Oct 2025 12:08:00 +0000 Files and hashes: 1: A230D664FEDFC0266349811ED3999BE5220F1DEA.crl (hash: q31fIWjkxemdYn2Xf4/LyeR4f6IZS7lpXwIA32Vadzo=) 2: 3130332e3136322e33342e302f32342d3234203d3e20313431363337.roa (hash: rUfipM6ac+ffGR3+qAba7wAEyR1CjmGAoVaQPfsb4C4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/54242355-a7e2-4cb9-8cff-9e17c742c2ef/0/A230D664FEDFC0266349811ED3999BE5220F1DEA.crl rsync://repo-rpki.idnic.net/repo/54242355-a7e2-4cb9-8cff-9e17c742c2ef/0/A230D664FEDFC0266349811ED3999BE5220F1DEA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A230D664FEDFC0266349811ED3999BE5220F1DEA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 12:08:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:4f:c9:d6:bb:0b:83:5a:1f:59:4f:89:cd:db:a2:ab:bd:c0:0c:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A230D664FEDFC0266349811ED3999BE5220F1DEA Validity Not Before: Oct 19 04:45:00 2025 GMT Not After : Oct 22 12:08:00 2025 GMT Subject: CN=D76FDCE6061F3FEF7CCC0A583FBD417813F5D094 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a6:23:96:7c:41:a4:81:83:54:45:fe:90:f4: ef:12:ae:a9:15:d4:43:54:0f:90:04:2d:4a:ae:c0: 39:89:30:6c:d9:91:51:70:f1:20:00:3e:78:99:1c: 4f:c6:d8:3f:fe:7d:f8:f1:11:8b:36:85:b8:7f:42: 14:e1:6a:19:54:dc:e4:66:84:5f:b3:f6:a7:3a:50: 9d:9b:d0:94:6d:e4:80:77:20:7d:f3:69:47:c5:9a: c2:e0:5b:cc:ca:fd:70:81:f3:0f:6c:b3:f0:11:44: 55:c0:25:2e:84:bf:0f:60:16:77:af:bc:3f:fe:01: b3:3a:11:17:1a:d4:c6:b4:3b:1f:58:2f:c8:45:4d: 21:85:1e:af:36:4c:f9:95:e1:52:24:60:43:06:ce: 5d:fd:c6:00:ec:bf:b9:92:28:52:de:b8:b9:9a:2b: b3:52:d0:78:99:b4:ee:99:91:cf:6b:72:be:08:9e: 43:4d:a1:18:ba:4b:7a:0d:60:b1:f4:e2:0b:48:6c: 13:43:cd:76:06:cf:27:21:de:91:82:e7:e4:69:34: 02:af:e4:14:c5:fc:da:a5:16:58:ee:b0:a9:36:8b: e8:eb:05:04:9c:44:3f:10:1b:2b:b3:de:f1:4c:78: 04:8c:84:bf:3c:bf:52:43:23:67:3a:95:9f:3c:05: 0a:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:6F:DC:E6:06:1F:3F:EF:7C:CC:0A:58:3F:BD:41:78:13:F5:D0:94 X509v3 Authority Key Identifier: keyid:A2:30:D6:64:FE:DF:C0:26:63:49:81:1E:D3:99:9B:E5:22:0F:1D:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/54242355-a7e2-4cb9-8cff-9e17c742c2ef/0/A230D664FEDFC0266349811ED3999BE5220F1DEA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A230D664FEDFC0266349811ED3999BE5220F1DEA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/54242355-a7e2-4cb9-8cff-9e17c742c2ef/0/A230D664FEDFC0266349811ED3999BE5220F1DEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:3b:f0:92:9e:9c:b1:4e:bf:9d:1a:ce:eb:99:98:ce:75:33: 9d:42:9d:aa:09:72:52:15:e5:6f:45:e4:3c:3c:ce:2b:be:9e: ba:09:c9:2e:d5:45:e1:0e:b8:20:c5:76:bd:d4:be:d3:d8:7c: 55:cd:56:f4:11:40:96:00:f2:9b:1d:23:31:57:1d:de:ad:34: 15:cd:f6:ec:b5:cb:95:cb:10:b1:c9:3d:01:56:08:19:6b:35: 1b:8c:40:71:88:9c:41:d0:d6:9b:a3:06:f8:f6:14:c0:88:93: 94:eb:81:ee:71:39:98:77:98:bf:42:c4:c7:db:cd:98:b1:8c: ad:83:c8:1d:9a:69:50:28:4d:2c:45:16:d1:b9:58:a9:e5:71: 31:43:9f:43:dc:ae:62:61:0d:28:a5:1a:4c:e0:74:90:bf:98: 2d:4e:71:57:f3:1e:73:1c:79:5f:f5:6b:cd:18:e9:3b:b3:2d: 43:d6:6d:46:5b:16:17:f7:42:79:0e:72:a0:6e:c5:7d:77:1d: 3e:9b:44:56:e2:08:61:26:59:37:c4:40:2d:0c:16:c2:bc:c4: 98:9e:cd:9a:4b:88:a6:47:d8:d7:21:49:93:4e:07:ff:4d:5d: 53:72:41:88:24:ce:be:b2:4b:2e:c1:b5:80:ab:70:e4:89:c7: 3b:b6:8d:d6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI0/J1rsLg1ofWU+Jzduiq73ADKwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTIzMEQ2NjRGRURGQzAyNjYzNDk4MTFFRDM5OTlCRTUy MjBGMURFQTAeFw0yNTEwMTkwNDQ1MDBaFw0yNTEwMjIxMjA4MDBaMDMxMTAvBgNV BAMTKEQ3NkZEQ0U2MDYxRjNGRUY3Q0NDMEE1ODNGQkQ0MTc4MTNGNUQwOTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0piOWfEGkgYNURf6Q9O8SrqkV 1ENUD5AELUquwDmJMGzZkVFw8SAAPniZHE/G2D/+ffjxEYs2hbh/QhThahlU3ORm hF+z9qc6UJ2b0JRt5IB3IH3zaUfFmsLgW8zK/XCB8w9ss/ARRFXAJS6Evw9gFnev vD/+AbM6ERca1Ma0Ox9YL8hFTSGFHq82TPmV4VIkYEMGzl39xgDsv7mSKFLeuLma K7NS0HiZtO6Zkc9rcr4InkNNoRi6S3oNYLH04gtIbBNDzXYGzych3pGC5+RpNAKv 5BTF/NqlFljusKk2i+jrBQScRD8QGyuz3vFMeASMhL88v1JDI2c6lZ88BQqVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU12/c5gYfP+98zApYP71BeBP10JQwHwYDVR0j BBgwFoAUojDWZP7fwCZjSYEe05mb5SIPHeowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NDI0MjM1NS1hN2UyLTRjYjktOGNmZi05ZTE3Yzc0MmMyZWYvMC9BMjMwRDY2NEZF REZDMDI2NjM0OTgxMUVEMzk5OUJFNTIyMEYxREVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTIzMEQ2NjRGRURGQzAyNjYzNDk4MTFFRDM5OTlCRTUyMjBG MURFQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTQyNDIzNTUtYTdlMi00Y2I5LThj ZmYtOWUxN2M3NDJjMmVmLzAvQTIzMEQ2NjRGRURGQzAyNjYzNDk4MTFFRDM5OTlC RTUyMjBGMURFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF078JKenLFOv50azuuZmM51M51CnaoJclIV 5W9F5Dw8ziu+nroJyS7VReEOuCDFdr3UvtPYfFXNVvQRQJYA8psdIzFXHd6tNBXN 9uy1y5XLELHJPQFWCBlrNRuMQHGInEHQ1pujBvj2FMCIk5Trge5xOZh3mL9CxMfb zZixjK2DyB2aaVAoTSxFFtG5WKnlcTFDn0PcrmJhDSilGkzgdJC/mC1OcVfzHnMc eV/1a80Y6TuzLUPWbUZbFhf3QnkOcqBuxX13HT6bRFbiCGEmWTfEQC0MFsK8xJie zZpLiKZH2NchSZNOB/9NXVNyQYgkzr6ySy7BtYCrcOSJxzu2jdY= -----END CERTIFICATE-----Generated at Mon Oct 20 10:45:17 2025 by rpki-client