$ rpki-client -vvf repo-rpki.idnic.net/repo/8392f899-e83c-4706-a9a1-82256bd48236/0/1C49A098778B751B36DDC816E9E5106C08F3E99E.mft File: 1C49A098778B751B36DDC816E9E5106C08F3E99E.mft (raw, json) Hash identifier: xXnzNYWq+7wikJsobkgeT16dIQXYdR3r+/XBkzv2onQ= Subject key identifier: 28:3F:CC:C8:F4:95:87:88:87:1B:19:0D:D3:14:63:69:E9:70:3E:89 Authority key identifier: 1C:49:A0:98:77:8B:75:1B:36:DD:C8:16:E9:E5:10:6C:08:F3:E9:9E Certificate issuer: /CN=1C49A098778B751B36DDC816E9E5106C08F3E99E Certificate serial: 6ADA449CBB82BB370404BC4EAB6B78647BF73F99 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C49A098778B751B36DDC816E9E5106C08F3E99E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8392f899-e83c-4706-a9a1-82256bd48236/0/1C49A098778B751B36DDC816E9E5106C08F3E99E.mft Manifest number: 0225 Signing time: Mon 20 Oct 2025 15:00:39 +0000 Manifest this update: Mon 20 Oct 2025 14:55:39 +0000 Manifest next update: Fri 24 Oct 2025 02:14:39 +0000 Files and hashes: 1: 3130332e3137372e3138382e302f32342d3234203d3e20313439333533.roa (hash: tnbiCaMjB/wcfly5HgYg5Hs8RqnmeGK4G33+Ng72LlI=) 2: 1C49A098778B751B36DDC816E9E5106C08F3E99E.crl (hash: M7PaCNmF/QBlgqIws9Rs+Kb8SanxSPQfIDFadaaiHks=) 3: 3130332e3137372e3138382e302f32332d3233203d3e20313439333533.roa (hash: SC3nnyfsyA5bEyARFBloY8n1qyf6YOcVCdvguQUIDxI=) 4: 3130332e3137372e3138392e302f32342d3234203d3e20313439333533.roa (hash: puq2H8zvnhoSbMetrd+BHkvHPZyYcgU1qmlh4ZB0qEo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8392f899-e83c-4706-a9a1-82256bd48236/0/1C49A098778B751B36DDC816E9E5106C08F3E99E.crl rsync://repo-rpki.idnic.net/repo/8392f899-e83c-4706-a9a1-82256bd48236/0/1C49A098778B751B36DDC816E9E5106C08F3E99E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C49A098778B751B36DDC816E9E5106C08F3E99E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:da:44:9c:bb:82:bb:37:04:04:bc:4e:ab:6b:78:64:7b:f7:3f:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1C49A098778B751B36DDC816E9E5106C08F3E99E Validity Not Before: Oct 20 14:55:39 2025 GMT Not After : Oct 24 02:14:39 2025 GMT Subject: CN=283FCCC8F4958788871B190DD3146369E9703E89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:05:68:58:5c:fa:ca:39:16:31:e7:ba:99:51: fb:b7:62:03:53:de:ea:64:45:1e:de:ac:5d:90:b0: db:37:32:a4:95:5d:7b:0b:44:62:de:d1:f6:86:99: 6f:6b:62:72:d6:55:5a:86:62:02:1e:5a:d4:25:a8: 1d:80:f4:4b:dc:dc:25:03:6f:ea:8d:f5:40:d8:76: de:43:44:9c:50:29:af:29:35:8f:b8:7c:6f:5e:bf: 35:5b:ec:8e:25:94:e9:17:29:b5:8e:04:ed:72:a2: 2a:92:18:49:63:a9:29:2a:ed:d6:b6:79:07:b1:6b: 4a:55:af:1e:d8:75:e4:87:a2:b7:c9:49:7e:11:84: 02:cc:f2:3e:b4:e3:58:b1:ca:3f:38:8a:7e:08:f9: ee:95:70:d3:38:b5:59:1d:0c:21:60:05:6d:90:d2: 27:e6:bb:24:9c:c6:76:9d:d9:25:0b:bb:59:93:43: e7:e1:bd:65:2e:26:ba:8c:5d:73:11:b8:97:03:a3: 34:9e:34:44:8a:df:94:0e:a0:f2:80:ba:92:09:dc: d2:61:a9:af:88:8b:3f:12:20:03:66:71:8f:d1:05: 1d:89:5f:fb:b6:ff:a4:3f:27:77:8e:37:b1:65:bc: 58:fe:e5:48:a0:9a:c7:20:39:3c:81:a0:16:c4:e6: 80:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:3F:CC:C8:F4:95:87:88:87:1B:19:0D:D3:14:63:69:E9:70:3E:89 X509v3 Authority Key Identifier: keyid:1C:49:A0:98:77:8B:75:1B:36:DD:C8:16:E9:E5:10:6C:08:F3:E9:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8392f899-e83c-4706-a9a1-82256bd48236/0/1C49A098778B751B36DDC816E9E5106C08F3E99E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C49A098778B751B36DDC816E9E5106C08F3E99E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8392f899-e83c-4706-a9a1-82256bd48236/0/1C49A098778B751B36DDC816E9E5106C08F3E99E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:50:e7:62:9b:80:be:3e:b5:51:d7:06:38:64:f5:78:4b:4b: ae:a9:93:1b:7c:63:eb:a9:fd:df:9d:c0:0e:10:5b:56:29:83: 34:be:7b:5f:88:59:f2:8f:5d:28:16:ba:fb:cc:65:99:95:69: 2b:c1:fa:07:e1:22:c0:83:df:e8:cd:e5:5b:08:37:4b:5e:a4: 17:9d:c2:71:f0:00:1b:31:e6:b4:03:ad:f0:3d:b4:84:b9:7c: 50:2b:de:4f:aa:ca:c3:91:8c:48:72:62:07:0b:3d:79:10:f6: 39:29:8d:13:a6:25:96:69:80:ed:17:26:c7:c4:39:c6:d2:3a: 80:29:3b:fb:f3:2a:4f:52:e1:61:3e:5c:6b:b5:1c:9e:f1:8e: fa:39:cc:5d:57:1d:c7:eb:6d:1b:6d:4e:67:fe:f3:73:87:f3: 1f:25:86:31:11:94:ea:20:6d:cc:fd:6d:98:47:a9:0e:f8:c5: e0:c1:0c:3a:e6:16:c6:7e:0b:87:73:c6:45:4e:b4:59:d5:ad: f4:7d:a1:17:58:29:f0:4c:cc:22:e9:4d:db:56:ab:e7:8b:a0: b2:06:53:16:1f:62:e9:0d:72:3f:cb:e6:58:7d:2c:80:39:26: f8:0f:f7:3e:60:8b:e8:75:33:e0:5c:7c:c3:5f:23:79:bb:15: fe:b9:70:81 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUatpEnLuCuzcEBLxOq2t4ZHv3P5kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUM0OUEwOTg3NzhCNzUxQjM2RERDODE2RTlFNTEwNkMw OEYzRTk5RTAeFw0yNTEwMjAxNDU1MzlaFw0yNTEwMjQwMjE0MzlaMDMxMTAvBgNV BAMTKDI4M0ZDQ0M4RjQ5NTg3ODg4NzFCMTkwREQzMTQ2MzY5RTk3MDNFODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9BWhYXPrKORYx57qZUfu3YgNT 3upkRR7erF2QsNs3MqSVXXsLRGLe0faGmW9rYnLWVVqGYgIeWtQlqB2A9Evc3CUD b+qN9UDYdt5DRJxQKa8pNY+4fG9evzVb7I4llOkXKbWOBO1yoiqSGEljqSkq7da2 eQexa0pVrx7YdeSHorfJSX4RhALM8j6041ixyj84in4I+e6VcNM4tVkdDCFgBW2Q 0ifmuyScxnad2SULu1mTQ+fhvWUuJrqMXXMRuJcDozSeNESK35QOoPKAupIJ3NJh qa+Iiz8SIANmcY/RBR2JX/u2/6Q/J3eON7FlvFj+5UigmscgOTyBoBbE5oBlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKD/MyPSVh4iHGxkN0xRjaelwPokwHwYDVR0j BBgwFoAUHEmgmHeLdRs23cgW6eUQbAjz6Z4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MzkyZjg5OS1lODNjLTQ3MDYtYTlhMS04MjI1NmJkNDgyMzYvMC8xQzQ5QTA5ODc3 OEI3NTFCMzZEREM4MTZFOUU1MTA2QzA4RjNFOTlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUM0OUEwOTg3NzhCNzUxQjM2RERDODE2RTlFNTEwNkMwOEYz RTk5RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODM5MmY4OTktZTgzYy00NzA2LWE5 YTEtODIyNTZiZDQ4MjM2LzAvMUM0OUEwOTg3NzhCNzUxQjM2RERDODE2RTlFNTEw NkMwOEYzRTk5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEBQ52KbgL4+tVHXBjhk9XhLS66pkxt8Y+up /d+dwA4QW1YpgzS+e1+IWfKPXSgWuvvMZZmVaSvB+gfhIsCD3+jN5VsIN0tepBed wnHwABsx5rQDrfA9tIS5fFAr3k+qysORjEhyYgcLPXkQ9jkpjROmJZZpgO0XJsfE OcbSOoApO/vzKk9S4WE+XGu1HJ7xjvo5zF1XHcfrbRttTmf+83OH8x8lhjERlOog bcz9bZhHqQ74xeDBDDrmFsZ+C4dzxkVOtFnVrfR9oRdYKfBMzCLpTdtWq+eLoLIG UxYfYukNcj/L5lh9LIA5JvgP9z5gi+h1M+BcfMNfI3m7Ff65cIE= -----END CERTIFICATE-----Generated at Mon Oct 20 19:06:49 2025 by rpki-client