$ rpki-client -vvf repo-rpki.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/22476F90C7B08131974F5B19834906C325ABEF12.mft File: 22476F90C7B08131974F5B19834906C325ABEF12.mft (raw, json) Hash identifier: yU9icAE7dGHlOydMBysVShNt2BVOJG3QAFRZII8VkWQ= Subject key identifier: FF:9E:C7:67:6C:64:22:F4:F4:F4:BB:92:30:89:D8:5B:57:69:14:20 Authority key identifier: 22:47:6F:90:C7:B0:81:31:97:4F:5B:19:83:49:06:C3:25:AB:EF:12 Certificate issuer: /CN=22476F90C7B08131974F5B19834906C325ABEF12 Certificate serial: 0C5D53360C81A5FC508179A72CF3CDCD5DA61992 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/22476F90C7B08131974F5B19834906C325ABEF12.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/22476F90C7B08131974F5B19834906C325ABEF12.mft Manifest number: C2 Signing time: Sun 19 Oct 2025 18:41:25 +0000 Manifest this update: Sun 19 Oct 2025 18:36:25 +0000 Manifest next update: Wed 22 Oct 2025 22:58:25 +0000 Files and hashes: 1: 3136302e32352e36382e302f32342d3234203d3e20313532383430.roa (hash: 4w2+kmxxLlJwHRO1aqXjBz7ml3HwCrINsFeyiZehHq0=) 2: 3136302e32352e36392e302f32342d3234203d3e20313531353736.roa (hash: 80wPKmKJkybnq5BlobX/HktrEHR2US0xr2aBNpv/zlA=) 3: 22476F90C7B08131974F5B19834906C325ABEF12.crl (hash: Cumy8EhwBZsZ28kBsWj/2XnEcHMo6sde9zsPol5BWeM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/22476F90C7B08131974F5B19834906C325ABEF12.crl rsync://repo-rpki.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/22476F90C7B08131974F5B19834906C325ABEF12.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/22476F90C7B08131974F5B19834906C325ABEF12.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 22:58:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:5d:53:36:0c:81:a5:fc:50:81:79:a7:2c:f3:cd:cd:5d:a6:19:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22476F90C7B08131974F5B19834906C325ABEF12 Validity Not Before: Oct 19 18:36:25 2025 GMT Not After : Oct 22 22:58:25 2025 GMT Subject: CN=FF9EC7676C6422F4F4F4BB923089D85B57691420 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:a6:37:7d:39:d7:60:85:3c:6b:e4:e0:7c:40: ee:e9:a9:1d:dd:b7:bd:c5:66:fe:9f:fd:24:80:a3: 39:33:fa:a3:11:24:42:02:e3:3f:3f:fe:1d:94:fe: ae:bf:57:3a:7e:2d:ea:f0:4e:91:7d:b6:dc:f7:40: 2e:83:1e:14:cd:d3:de:db:0a:a1:30:0f:22:9f:14: 0e:55:11:56:a7:61:75:85:92:35:5a:e8:3f:4d:62: 53:33:5d:1e:22:e1:5e:2c:ea:13:80:38:9d:d3:5c: 55:ac:bc:13:f2:2e:4b:23:29:fe:2d:75:8f:63:65: 5b:24:c3:47:f5:08:0d:7c:45:87:d5:5d:d5:08:94: 07:73:95:03:8a:9b:ff:5f:5d:85:e5:f0:c3:f0:a6: 82:30:3e:97:e4:ae:ef:9c:23:94:b5:ab:62:8f:3e: c0:b1:09:ae:18:36:9d:c5:c8:c7:86:48:fa:a8:ce: 26:48:71:88:f8:45:2c:61:cc:40:a7:8a:dd:b9:9a: 67:8e:7f:45:2a:38:2c:d4:3e:f8:d9:10:a1:58:dc: 71:4e:ee:1d:f2:b9:f8:d9:e4:90:02:40:21:ca:16: 20:27:06:2d:fa:8a:3f:01:e3:b2:37:34:53:4b:c2: f8:a3:5a:7a:16:8c:1c:07:70:ae:70:cb:67:ac:83: 8d:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:9E:C7:67:6C:64:22:F4:F4:F4:BB:92:30:89:D8:5B:57:69:14:20 X509v3 Authority Key Identifier: keyid:22:47:6F:90:C7:B0:81:31:97:4F:5B:19:83:49:06:C3:25:AB:EF:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/22476F90C7B08131974F5B19834906C325ABEF12.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/22476F90C7B08131974F5B19834906C325ABEF12.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/22476F90C7B08131974F5B19834906C325ABEF12.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:99:e7:e9:35:92:ee:3d:40:e5:2b:00:29:e6:d0:95:83:bb: 18:c5:a5:0a:37:2d:21:5f:5f:cb:0c:e2:35:47:1f:24:a9:66: a8:ed:7f:7f:9b:23:26:9f:b9:58:b8:06:a4:e3:8b:3e:94:5b: 02:57:cd:9d:f5:aa:b1:36:32:85:89:14:cf:1f:92:dc:bf:11: 34:0e:a5:8a:5b:1f:e3:5a:4f:fc:bb:75:76:22:99:f6:26:c9: e2:d6:e4:7c:0a:59:40:9d:dd:92:08:f3:cc:4b:78:7b:e3:aa: b3:ed:fc:a1:5e:b8:08:b2:55:dc:a7:91:3c:e9:98:72:cb:9a: 5e:f8:6d:67:3e:77:e2:0e:0e:c3:fb:2c:5a:84:d1:42:74:7c: 4a:bf:fe:c9:9d:ae:aa:27:be:e1:47:bd:f8:f8:3e:28:25:e4: c8:0e:6c:ca:cc:b1:3c:8a:bf:41:13:0c:0a:8a:30:d6:42:7c: e8:ef:57:4c:48:53:ef:c3:d7:a6:17:53:02:cc:53:82:7e:0a: 7a:55:a1:53:ef:7a:03:7b:78:94:d2:47:6c:77:3c:12:86:34: 2f:7e:bf:06:c1:ff:b4:50:e4:3b:63:9a:75:e7:17:0e:7f:fa: e6:06:91:c1:7a:18:90:14:cc:74:7b:2e:31:90:b0:62:4c:fc: a1:67:4d:34 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDF1TNgyBpfxQgXmnLPPNzV2mGZIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjI0NzZGOTBDN0IwODEzMTk3NEY1QjE5ODM0OTA2QzMy NUFCRUYxMjAeFw0yNTEwMTkxODM2MjVaFw0yNTEwMjIyMjU4MjVaMDMxMTAvBgNV BAMTKEZGOUVDNzY3NkM2NDIyRjRGNEY0QkI5MjMwODlEODVCNTc2OTE0MjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrpjd9OddghTxr5OB8QO7pqR3d t73FZv6f/SSAozkz+qMRJEIC4z8//h2U/q6/Vzp+LerwTpF9ttz3QC6DHhTN097b CqEwDyKfFA5VEVanYXWFkjVa6D9NYlMzXR4i4V4s6hOAOJ3TXFWsvBPyLksjKf4t dY9jZVskw0f1CA18RYfVXdUIlAdzlQOKm/9fXYXl8MPwpoIwPpfkru+cI5S1q2KP PsCxCa4YNp3FyMeGSPqoziZIcYj4RSxhzECnit25mmeOf0UqOCzUPvjZEKFY3HFO 7h3yufjZ5JACQCHKFiAnBi36ij8B47I3NFNLwvijWnoWjBwHcK5wy2esg41lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/57HZ2xkIvT09LuSMInYW1dpFCAwHwYDVR0j BBgwFoAUIkdvkMewgTGXT1sZg0kGwyWr7xIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MmZiYWFmYy00ZGIyLTRmYzQtYTFhOC0yZDhlNGM4YjJjZTAvMC8yMjQ3NkY5MEM3 QjA4MTMxOTc0RjVCMTk4MzQ5MDZDMzI1QUJFRjEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMjI0NzZGOTBDN0IwODEzMTk3NEY1QjE5ODM0OTA2QzMyNUFC RUYxMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjJmYmFhZmMtNGRiMi00ZmM0LWEx YTgtMmQ4ZTRjOGIyY2UwLzAvMjI0NzZGOTBDN0IwODEzMTk3NEY1QjE5ODM0OTA2 QzMyNUFCRUYxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD2Z5+k1ku49QOUrACnm0JWDuxjFpQo3LSFf X8sM4jVHHySpZqjtf3+bIyafuVi4BqTjiz6UWwJXzZ31qrE2MoWJFM8fkty/ETQO pYpbH+NaT/y7dXYimfYmyeLW5HwKWUCd3ZII88xLeHvjqrPt/KFeuAiyVdynkTzp mHLLml74bWc+d+IODsP7LFqE0UJ0fEq//smdrqonvuFHvfj4Pigl5MgObMrMsTyK v0ETDAqKMNZCfOjvV0xIU+/D16YXUwLMU4J+CnpVoVPvegN7eJTSR2x3PBKGNC9+ vwbB/7RQ5DtjmnXnFw5/+uYGkcF6GJAUzHR7LjGQsGJM/KFnTTQ= -----END CERTIFICATE-----Generated at Tue Oct 21 08:16:06 2025 by rpki-client