$ rpki-client -vvf repo-rpki.idnic.net/repo/a56eccb7-e917-40f5-acee-03d68be5fd97/0/2246015FFF2FC55FEFB9C44A8AD416B55FA5E73F.mft File: 2246015FFF2FC55FEFB9C44A8AD416B55FA5E73F.mft (raw, json) Hash identifier: rB9ILZA+AA6Mo9796USU9dK1SZcJWA7ug1INEZiwQSk= Subject key identifier: E5:BB:0A:2F:E1:21:6E:03:7B:FA:BA:5C:F6:3A:61:4C:24:B4:68:0B Authority key identifier: 22:46:01:5F:FF:2F:C5:5F:EF:B9:C4:4A:8A:D4:16:B5:5F:A5:E7:3F Certificate issuer: /CN=2246015FFF2FC55FEFB9C44A8AD416B55FA5E73F Certificate serial: 35066139D29D1E778E8D899F37AA9A4BAB32DA96 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2246015FFF2FC55FEFB9C44A8AD416B55FA5E73F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a56eccb7-e917-40f5-acee-03d68be5fd97/0/2246015FFF2FC55FEFB9C44A8AD416B55FA5E73F.mft Manifest number: F5 Signing time: Mon 20 Oct 2025 21:52:06 +0000 Manifest this update: Mon 20 Oct 2025 21:47:06 +0000 Manifest next update: Fri 24 Oct 2025 06:09:06 +0000 Files and hashes: 1: 3135372e31352e3134342e302f32342d3234203d3e20313532333736.roa (hash: SBNjwJJYCJHvL2QmCRz+yZ8PvTB10n4BHiXO1+hrRxM=) 2: 3135372e31352e3134342e302f32332d3233203d3e20313532333736.roa (hash: cWyOKWctYlbVooNMHms1H1vDLL9MPLPoRH1H2TKVIAo=) 3: 2246015FFF2FC55FEFB9C44A8AD416B55FA5E73F.crl (hash: bfrEO4GcjJ6Yb6/QV7GkBA5MbB4th9azHanjnVHhNFQ=) 4: 3135372e31352e3134352e302f32342d3234203d3e20313532333736.roa (hash: bbNh5IhzL1rNJLyhy7hiFZkFXcVeHuBdSs69IB8xXPA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a56eccb7-e917-40f5-acee-03d68be5fd97/0/2246015FFF2FC55FEFB9C44A8AD416B55FA5E73F.crl rsync://repo-rpki.idnic.net/repo/a56eccb7-e917-40f5-acee-03d68be5fd97/0/2246015FFF2FC55FEFB9C44A8AD416B55FA5E73F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2246015FFF2FC55FEFB9C44A8AD416B55FA5E73F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 03:04:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:06:61:39:d2:9d:1e:77:8e:8d:89:9f:37:aa:9a:4b:ab:32:da:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2246015FFF2FC55FEFB9C44A8AD416B55FA5E73F Validity Not Before: Oct 20 21:47:06 2025 GMT Not After : Oct 24 06:09:06 2025 GMT Subject: CN=E5BB0A2FE1216E037BFABA5CF63A614C24B4680B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:d3:36:a7:fe:12:d4:42:d9:c0:ac:f1:c6:a9: 61:f9:79:2e:d4:95:82:d6:86:97:cf:4a:d7:d3:c2: 24:e3:62:bc:bb:51:10:74:df:03:34:9f:b9:b2:55: 4c:7b:e3:fe:21:12:e7:99:da:5e:55:cc:e5:9e:2f: 95:f0:83:30:1a:08:fa:f0:aa:86:0b:60:0b:57:34: a3:48:d9:af:08:5d:61:70:9a:19:ff:ca:d1:1b:ad: ac:c6:e9:9c:2d:17:ab:15:a6:54:9b:ba:cc:82:e9: f3:30:81:ff:22:79:e2:c6:63:b7:2e:39:33:99:e3: e6:1c:4c:5c:4f:7a:e5:04:d5:9e:c6:e9:f7:75:c1: 5c:96:e0:5a:44:f8:97:14:b8:24:b9:bd:9c:15:dd: 03:56:43:04:fa:24:21:bd:97:45:e4:27:a4:d0:df: 69:b8:55:57:82:c3:b8:31:f4:60:ab:cd:7a:8e:01: f2:5d:c4:a4:67:ec:c7:0c:04:18:df:3e:4b:54:b8: 3e:2a:d3:3a:e8:08:46:76:b2:41:05:6b:d3:30:82: 98:4c:df:4c:4d:06:80:0d:a3:15:a4:d3:ae:5f:90: 26:cc:26:7e:e2:22:cd:b4:7a:53:a5:c9:39:b5:8b: a8:67:23:be:ec:7a:70:2a:78:d8:84:18:d8:a7:d6: 13:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:BB:0A:2F:E1:21:6E:03:7B:FA:BA:5C:F6:3A:61:4C:24:B4:68:0B X509v3 Authority Key Identifier: keyid:22:46:01:5F:FF:2F:C5:5F:EF:B9:C4:4A:8A:D4:16:B5:5F:A5:E7:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a56eccb7-e917-40f5-acee-03d68be5fd97/0/2246015FFF2FC55FEFB9C44A8AD416B55FA5E73F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2246015FFF2FC55FEFB9C44A8AD416B55FA5E73F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a56eccb7-e917-40f5-acee-03d68be5fd97/0/2246015FFF2FC55FEFB9C44A8AD416B55FA5E73F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:8c:d0:88:f4:65:11:e4:86:16:2a:87:24:f3:ef:25:64:28: 28:fa:a0:0c:aa:47:e1:cc:a7:25:e4:44:dc:48:96:be:29:ee: 7b:9c:39:74:9f:b9:f4:ec:16:45:0c:14:b4:1f:79:d7:16:26: d5:a0:bd:9d:45:44:fe:24:0b:6d:07:ce:eb:7a:00:91:7f:d6: 24:51:15:c9:5f:a4:e5:70:7c:04:b8:99:9b:ab:c0:f7:e6:89: 98:37:48:d2:e3:0b:82:9c:98:81:bd:a4:0f:fb:b2:92:98:eb: ef:fb:68:bb:3b:89:91:55:ca:bb:c5:bd:87:a9:df:1f:68:15: ad:01:80:d1:ae:d6:f6:1b:92:28:13:01:3e:51:a0:80:3d:23: d5:9d:15:60:9d:ac:cb:10:95:e3:55:00:30:33:f0:12:96:ff: 68:4b:20:6b:cf:42:e6:a8:7a:88:7c:59:a7:d4:a9:0d:9f:a6: 3c:4d:ff:6a:ec:e4:76:3d:be:72:77:57:23:86:da:c9:33:b1: 0f:55:68:d7:14:13:c4:cc:16:db:37:6f:29:81:87:7d:5b:68: 08:d4:13:0a:e9:ad:41:d9:21:78:3b:a5:4e:45:c4:ac:14:8a: 70:dc:c9:42:90:5a:86:b0:65:7d:47:bd:34:ea:c9:11:b8:6f: f8:90:14:42 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNQZhOdKdHneOjYmfN6qaS6sy2pYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjI0NjAxNUZGRjJGQzU1RkVGQjlDNDRBOEFENDE2QjU1 RkE1RTczRjAeFw0yNTEwMjAyMTQ3MDZaFw0yNTEwMjQwNjA5MDZaMDMxMTAvBgNV BAMTKEU1QkIwQTJGRTEyMTZFMDM3QkZBQkE1Q0Y2M0E2MTRDMjRCNDY4MEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD50zan/hLUQtnArPHGqWH5eS7U lYLWhpfPStfTwiTjYry7URB03wM0n7myVUx74/4hEueZ2l5VzOWeL5XwgzAaCPrw qoYLYAtXNKNI2a8IXWFwmhn/ytEbrazG6ZwtF6sVplSbusyC6fMwgf8ieeLGY7cu OTOZ4+YcTFxPeuUE1Z7G6fd1wVyW4FpE+JcUuCS5vZwV3QNWQwT6JCG9l0XkJ6TQ 32m4VVeCw7gx9GCrzXqOAfJdxKRn7McMBBjfPktUuD4q0zroCEZ2skEFa9MwgphM 30xNBoANoxWk065fkCbMJn7iIs20elOlyTm1i6hnI77senAqeNiEGNin1hOFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5bsKL+EhbgN7+rpc9jphTCS0aAswHwYDVR0j BBgwFoAUIkYBX/8vxV/vucRKitQWtV+l5z8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NTZlY2NiNy1lOTE3LTQwZjUtYWNlZS0wM2Q2OGJlNWZkOTcvMC8yMjQ2MDE1RkZG MkZDNTVGRUZCOUM0NEE4QUQ0MTZCNTVGQTVFNzNGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMjI0NjAxNUZGRjJGQzU1RkVGQjlDNDRBOEFENDE2QjU1RkE1 RTczRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTU2ZWNjYjctZTkxNy00MGY1LWFj ZWUtMDNkNjhiZTVmZDk3LzAvMjI0NjAxNUZGRjJGQzU1RkVGQjlDNDRBOEFENDE2 QjU1RkE1RTczRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB2M0Ij0ZRHkhhYqhyTz7yVkKCj6oAyqR+HM pyXkRNxIlr4p7nucOXSfufTsFkUMFLQfedcWJtWgvZ1FRP4kC20Hzut6AJF/1iRR FclfpOVwfAS4mZurwPfmiZg3SNLjC4KcmIG9pA/7spKY6+/7aLs7iZFVyrvFvYep 3x9oFa0BgNGu1vYbkigTAT5RoIA9I9WdFWCdrMsQleNVADAz8BKW/2hLIGvPQuao eoh8WafUqQ2fpjxN/2rs5HY9vnJ3VyOG2skzsQ9VaNcUE8TMFts3bymBh31baAjU EwrprUHZIXg7pU5FxKwUinDcyUKQWoawZX1HvTTqyRG4b/iQFEI= -----END CERTIFICATE-----Generated at Tue Oct 21 04:18:58 2025 by rpki-client