$ rpki-client -vvf repo-rpki.idnic.net/repo/581274af-7cd0-40af-a321-676898d58db8/0/842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF.mft File: 842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF.mft (raw, json) Hash identifier: Y6WvhLmU93npTS95wScSa+WXVtSswqnNsbFu8TNJZwI= Subject key identifier: 97:B5:88:70:54:A2:1E:D3:40:80:2E:8B:82:87:E8:05:C8:3D:97:DF Authority key identifier: 84:22:33:D6:E7:56:BC:93:C0:DB:9A:45:DD:2F:7B:CD:97:CB:29:AF Certificate issuer: /CN=842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF Certificate serial: 1923B82E25A9B9145B470E1C4815C5DFE91B4590 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/581274af-7cd0-40af-a321-676898d58db8/0/842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF.mft Manifest number: 013B Signing time: Sun 19 Oct 2025 06:00:44 +0000 Manifest this update: Sun 19 Oct 2025 05:55:44 +0000 Manifest next update: Wed 22 Oct 2025 16:27:44 +0000 Files and hashes: 1: 3230322e34372e3136332e302f32342d3234203d3e20313532303337.roa (hash: /URm5Kz+lOTj8/0VCDqZYq+wPeWuBT+Tq5QLg7+ZM+8=) 2: 3230322e34372e3136322e302f32332d3233203d3e20313532303337.roa (hash: 9S64FqiohF4/G4AR4prN454MPd/66wEeqEDt9vo/F+Y=) 3: 3230322e34372e3136322e302f32342d3234203d3e20313532303337.roa (hash: 8svYl0PSwXQA1Wds9/vDZkzwkfX8sX1XjqIKznjwc2w=) 4: 842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF.crl (hash: YErU6W89MVTY0VHMuwCPmE5Lws43ze6byIi3f98RcNc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/581274af-7cd0-40af-a321-676898d58db8/0/842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF.crl rsync://repo-rpki.idnic.net/repo/581274af-7cd0-40af-a321-676898d58db8/0/842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 16:27:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:23:b8:2e:25:a9:b9:14:5b:47:0e:1c:48:15:c5:df:e9:1b:45:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF Validity Not Before: Oct 19 05:55:44 2025 GMT Not After : Oct 22 16:27:44 2025 GMT Subject: CN=97B5887054A21ED340802E8B8287E805C83D97DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:20:07:5b:6f:07:cf:22:17:d6:8d:6c:1a:50: ae:dc:5e:dc:14:73:f2:e0:af:97:18:e0:6c:cd:16: c4:ba:0f:25:f1:93:49:e6:2a:fb:56:36:b4:c5:06: c8:51:69:6e:c3:0d:28:94:15:f3:17:4d:45:d6:c0: e1:bb:e4:a0:92:dc:e0:b0:a5:93:d0:a0:a7:df:2f: ec:db:93:73:70:ea:55:78:71:73:be:d5:06:13:65: c2:73:fd:0c:e8:92:d7:c4:84:bb:c5:87:ea:10:14: da:5d:92:cd:10:5a:24:ca:2b:22:d8:74:ea:86:55: 0c:fb:cd:d3:a6:15:5c:1a:54:5a:78:0c:1c:54:75: a4:ca:d1:f7:af:39:c6:8f:c2:30:39:71:af:65:74: 91:70:4f:bc:29:63:26:36:12:a3:7a:ac:da:3c:87: c8:d5:0f:c6:11:48:ec:87:60:f5:33:3c:59:9e:af: 2e:26:99:a0:77:f5:4a:77:b2:a5:63:a1:a6:ba:3e: a6:24:a5:44:4f:55:92:ef:47:8a:53:f3:2b:79:6b: c7:46:f3:ec:31:e0:41:db:f8:4b:38:83:dc:60:1b: 4f:82:57:0a:bd:fa:16:83:21:ad:8f:52:6a:c7:56: 7c:cf:19:04:83:86:38:be:4d:49:d0:eb:6c:e4:c1: 72:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:B5:88:70:54:A2:1E:D3:40:80:2E:8B:82:87:E8:05:C8:3D:97:DF X509v3 Authority Key Identifier: keyid:84:22:33:D6:E7:56:BC:93:C0:DB:9A:45:DD:2F:7B:CD:97:CB:29:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/581274af-7cd0-40af-a321-676898d58db8/0/842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/581274af-7cd0-40af-a321-676898d58db8/0/842233D6E756BC93C0DB9A45DD2F7BCD97CB29AF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:2b:98:e1:d3:eb:17:94:0f:31:a1:fa:82:0f:99:e6:df:ea: 3d:ec:64:df:e5:86:17:2b:92:17:22:ee:71:50:6a:bb:6f:4d: 9d:86:d7:e7:a7:f2:fd:75:6d:ab:b1:c7:ca:a1:0f:5e:ce:f3: e5:60:38:41:18:e2:46:7f:d2:a7:bf:40:d5:2d:c3:ef:60:3f: 37:1f:5e:9d:1d:d2:65:51:e3:88:b2:f1:c5:df:31:2f:25:54: ef:98:28:8b:d1:4b:9a:4e:d6:97:52:45:0f:91:68:92:5d:ac: 61:a0:61:ca:15:0c:a4:66:39:a0:7e:7a:c3:50:ad:6c:3c:25: d6:53:23:e9:8b:ff:29:0f:21:46:e7:85:0f:80:f3:26:86:10: 67:0d:5d:6e:1e:d3:88:d0:31:46:0f:23:96:02:60:0e:28:86: 97:c4:a0:c0:23:c2:50:cb:f8:e7:2c:1c:b7:dc:2c:65:e9:94: 98:12:6c:ce:90:bc:63:9b:37:99:e8:3a:a0:e3:58:96:05:a7: 7e:c6:ef:36:fd:36:91:d8:ff:a3:0e:1f:1d:6e:74:bd:df:96: 09:38:f7:8f:f0:2b:2c:5f:60:df:39:fe:f7:66:e0:97:c1:e4: ad:d0:15:ca:7d:eb:80:e5:9a:ec:7b:e6:e6:76:21:6a:ea:6e: 6a:64:d3:aa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGSO4LiWpuRRbRw4cSBXF3+kbRZAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQyMjMzRDZFNzU2QkM5M0MwREI5QTQ1REQyRjdCQ0Q5 N0NCMjlBRjAeFw0yNTEwMTkwNTU1NDRaFw0yNTEwMjIxNjI3NDRaMDMxMTAvBgNV BAMTKDk3QjU4ODcwNTRBMjFFRDM0MDgwMkU4QjgyODdFODA1QzgzRDk3REYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBIAdbbwfPIhfWjWwaUK7cXtwU c/Lgr5cY4GzNFsS6DyXxk0nmKvtWNrTFBshRaW7DDSiUFfMXTUXWwOG75KCS3OCw pZPQoKffL+zbk3Nw6lV4cXO+1QYTZcJz/QzoktfEhLvFh+oQFNpdks0QWiTKKyLY dOqGVQz7zdOmFVwaVFp4DBxUdaTK0fevOcaPwjA5ca9ldJFwT7wpYyY2EqN6rNo8 h8jVD8YRSOyHYPUzPFmery4mmaB39Up3sqVjoaa6PqYkpURPVZLvR4pT8yt5a8dG 8+wx4EHb+Es4g9xgG0+CVwq9+haDIa2PUmrHVnzPGQSDhji+TUnQ62zkwXLjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUl7WIcFSiHtNAgC6LgofoBcg9l98wHwYDVR0j BBgwFoAUhCIz1udWvJPA25pF3S97zZfLKa8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ODEyNzRhZi03Y2QwLTQwYWYtYTMyMS02NzY4OThkNThkYjgvMC84NDIyMzNENkU3 NTZCQzkzQzBEQjlBNDVERDJGN0JDRDk3Q0IyOUFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODQyMjMzRDZFNzU2QkM5M0MwREI5QTQ1REQyRjdCQ0Q5N0NC MjlBRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTgxMjc0YWYtN2NkMC00MGFmLWEz MjEtNjc2ODk4ZDU4ZGI4LzAvODQyMjMzRDZFNzU2QkM5M0MwREI5QTQ1REQyRjdC Q0Q5N0NCMjlBRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJIrmOHT6xeUDzGh+oIPmebf6j3sZN/lhhcr khci7nFQartvTZ2G1+en8v11bauxx8qhD17O8+VgOEEY4kZ/0qe/QNUtw+9gPzcf Xp0d0mVR44iy8cXfMS8lVO+YKIvRS5pO1pdSRQ+RaJJdrGGgYcoVDKRmOaB+esNQ rWw8JdZTI+mL/ykPIUbnhQ+A8yaGEGcNXW4e04jQMUYPI5YCYA4ohpfEoMAjwlDL +OcsHLfcLGXplJgSbM6QvGObN5noOqDjWJYFp37G7zb9NpHY/6MOHx1udL3flgk4 94/wKyxfYN85/vdm4JfB5K3QFcp964Dlmux75uZ2IWrqbmpk06o= -----END CERTIFICATE-----Generated at Mon Oct 20 09:23:28 2025 by rpki-client