$ rpki-client -vvf repo-rpki.idnic.net/repo/6da0cdd9-7f31-4f1f-ab09-a60cc0859cda/0/2244AB179BDE031980D325EEBEAFEC994CA8B419.mft File: 2244AB179BDE031980D325EEBEAFEC994CA8B419.mft (raw, json) Hash identifier: I8lBwETpPaLgZFILQWf+nVCxCklQumeO1+qkNvcRoLg= Subject key identifier: EE:A9:EA:6C:EB:80:AA:3D:62:15:80:9C:60:70:BD:5E:DA:76:03:4D Authority key identifier: 22:44:AB:17:9B:DE:03:19:80:D3:25:EE:BE:AF:EC:99:4C:A8:B4:19 Certificate issuer: /CN=2244AB179BDE031980D325EEBEAFEC994CA8B419 Certificate serial: 3806E30849D671112D5FEA1D178640850D404AE8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2244AB179BDE031980D325EEBEAFEC994CA8B419.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6da0cdd9-7f31-4f1f-ab09-a60cc0859cda/0/2244AB179BDE031980D325EEBEAFEC994CA8B419.mft Manifest number: BB Signing time: Sun 19 Oct 2025 18:40:59 +0000 Manifest this update: Sun 19 Oct 2025 18:35:59 +0000 Manifest next update: Wed 22 Oct 2025 19:49:59 +0000 Files and hashes: 1: 2244AB179BDE031980D325EEBEAFEC994CA8B419.crl (hash: fkkMWr420HhksGD8Tv2Xrk337igaKQfjaQdM2TnGyYE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6da0cdd9-7f31-4f1f-ab09-a60cc0859cda/0/2244AB179BDE031980D325EEBEAFEC994CA8B419.crl rsync://repo-rpki.idnic.net/repo/6da0cdd9-7f31-4f1f-ab09-a60cc0859cda/0/2244AB179BDE031980D325EEBEAFEC994CA8B419.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2244AB179BDE031980D325EEBEAFEC994CA8B419.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 19:49:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:06:e3:08:49:d6:71:11:2d:5f:ea:1d:17:86:40:85:0d:40:4a:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2244AB179BDE031980D325EEBEAFEC994CA8B419 Validity Not Before: Oct 19 18:35:59 2025 GMT Not After : Oct 22 19:49:59 2025 GMT Subject: CN=EEA9EA6CEB80AA3D6215809C6070BD5EDA76034D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:17:f8:b7:cf:a8:23:f3:f3:93:73:62:a3:69: ff:e9:d7:68:8f:72:bf:37:dd:b7:69:74:0b:fd:ac: 6f:60:3a:c2:b9:f3:ed:32:df:ec:0f:06:e8:61:69: f0:a2:03:36:8a:95:31:75:d6:6a:c1:2e:a4:70:70: d7:0b:0a:42:dd:c3:82:79:28:ac:9b:99:3f:1d:b4: c4:a9:8b:27:4c:48:82:f6:5c:74:19:0b:f0:aa:35: 86:07:b5:d7:77:89:6c:90:9f:76:0e:11:d4:b8:7b: 13:96:7b:6b:61:0d:9b:da:9b:71:f5:4f:bd:5b:ae: ae:4a:eb:ab:06:84:78:b9:1a:e5:77:c0:46:d6:33: 74:ab:0e:b8:1b:4d:67:11:e6:7a:02:32:db:b9:c0: cd:44:2f:84:28:bb:99:f7:7d:7a:dc:4b:80:10:3a: 20:12:32:d3:2a:c5:13:f3:13:b6:64:4f:1f:8b:71: 3b:87:e4:2f:42:95:e7:4f:3c:d1:16:2c:03:6e:2b: 3d:7e:87:92:20:7b:93:f8:fa:c0:28:07:9a:c6:f8: 9d:ff:15:18:1c:cd:fe:5c:98:2b:7b:1a:66:8c:6f: 08:c9:fa:25:b2:c8:e4:3d:45:6e:29:b6:21:3a:5d: 79:4e:aa:5f:e2:ed:19:83:82:bd:7e:de:f2:47:9d: 93:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:A9:EA:6C:EB:80:AA:3D:62:15:80:9C:60:70:BD:5E:DA:76:03:4D X509v3 Authority Key Identifier: keyid:22:44:AB:17:9B:DE:03:19:80:D3:25:EE:BE:AF:EC:99:4C:A8:B4:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6da0cdd9-7f31-4f1f-ab09-a60cc0859cda/0/2244AB179BDE031980D325EEBEAFEC994CA8B419.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2244AB179BDE031980D325EEBEAFEC994CA8B419.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6da0cdd9-7f31-4f1f-ab09-a60cc0859cda/0/2244AB179BDE031980D325EEBEAFEC994CA8B419.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:bf:a6:a2:57:c9:14:97:0f:9e:40:76:ad:6b:0d:b8:65:60: 49:21:00:f0:e2:48:44:ce:a3:83:0d:05:93:e2:8b:1f:24:4f: a3:f2:6b:0c:1f:13:90:c8:12:90:ac:f5:32:a0:2c:3a:9d:cf: a9:22:1b:ba:4d:97:b8:57:7a:25:84:f5:48:7f:a4:71:9d:e4: ba:b1:dd:b2:ab:fe:0c:4d:aa:b7:e8:59:d9:d4:f1:c6:db:39: 02:86:1c:d8:9c:e7:08:d5:40:9e:0f:1d:f4:73:62:87:dd:f8: 55:22:ff:07:e0:96:31:c0:ae:18:c3:cb:fd:99:0d:cc:02:f9: a6:3f:33:04:ca:56:a4:63:b7:ea:e8:45:59:77:57:b0:f0:b0: 40:88:b1:a2:b9:48:8c:3c:ff:ee:b5:b4:03:f2:f6:e6:14:0b: 43:70:bb:6c:86:88:64:5b:27:51:78:a1:3e:48:f3:c9:09:6e: 46:fd:d7:0e:ab:ff:82:a0:f7:00:34:54:cb:3d:93:d7:28:b2: 0a:05:36:0f:9c:4b:36:1f:6e:32:34:5f:bf:06:f4:e2:cf:3b: 9a:f9:75:e5:20:c5:a8:9f:ad:e0:dd:1f:ae:b4:29:06:b2:06: e6:7e:ae:60:a0:ef:9d:66:79:c7:f2:56:a8:9e:5a:07:b1:a0: 82:81:d6:98 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOAbjCEnWcREtX+odF4ZAhQ1ASugwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjI0NEFCMTc5QkRFMDMxOTgwRDMyNUVFQkVBRkVDOTk0 Q0E4QjQxOTAeFw0yNTEwMTkxODM1NTlaFw0yNTEwMjIxOTQ5NTlaMDMxMTAvBgNV BAMTKEVFQTlFQTZDRUI4MEFBM0Q2MjE1ODA5QzYwNzBCRDVFREE3NjAzNEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDF/i3z6gj8/OTc2Kjaf/p12iP cr833bdpdAv9rG9gOsK58+0y3+wPBuhhafCiAzaKlTF11mrBLqRwcNcLCkLdw4J5 KKybmT8dtMSpiydMSIL2XHQZC/CqNYYHtdd3iWyQn3YOEdS4exOWe2thDZvam3H1 T71brq5K66sGhHi5GuV3wEbWM3SrDrgbTWcR5noCMtu5wM1EL4Qou5n3fXrcS4AQ OiASMtMqxRPzE7ZkTx+LcTuH5C9CledPPNEWLANuKz1+h5Ige5P4+sAoB5rG+J3/ FRgczf5cmCt7GmaMbwjJ+iWyyOQ9RW4ptiE6XXlOql/i7RmDgr1+3vJHnZOlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7qnqbOuAqj1iFYCcYHC9Xtp2A00wHwYDVR0j BBgwFoAUIkSrF5veAxmA0yXuvq/smUyotBkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZGEwY2RkOS03ZjMxLTRmMWYtYWIwOS1hNjBjYzA4NTljZGEvMC8yMjQ0QUIxNzlC REUwMzE5ODBEMzI1RUVCRUFGRUM5OTRDQThCNDE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjI0NEFCMTc5QkRFMDMxOTgwRDMyNUVFQkVBRkVDOTk0Q0E4 QjQxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmRhMGNkZDktN2YzMS00ZjFmLWFi MDktYTYwY2MwODU5Y2RhLzAvMjI0NEFCMTc5QkRFMDMxOTgwRDMyNUVFQkVBRkVD OTk0Q0E4QjQxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFq/pqJXyRSXD55Adq1rDbhlYEkhAPDiSETO o4MNBZPiix8kT6PyawwfE5DIEpCs9TKgLDqdz6kiG7pNl7hXeiWE9Uh/pHGd5Lqx 3bKr/gxNqrfoWdnU8cbbOQKGHNic5wjVQJ4PHfRzYofd+FUi/wfgljHArhjDy/2Z DcwC+aY/MwTKVqRjt+roRVl3V7DwsECIsaK5SIw8/+61tAPy9uYUC0Nwu2yGiGRb J1F4oT5I88kJbkb91w6r/4Kg9wA0VMs9k9cosgoFNg+cSzYfbjI0X78G9OLPO5r5 deUgxaifreDdH660KQayBuZ+rmCg751mecfyVqieWgexoIKB1pg= -----END CERTIFICATE-----Generated at Mon Oct 20 15:22:32 2025 by rpki-client