$ rpki-client -vvf repo-rpki.idnic.net/repo/e0620cfc-b46c-457c-9fde-297710c546a9/0/473225269441779F80E443B1EA516CC99E4ED4DA.mft File: 473225269441779F80E443B1EA516CC99E4ED4DA.mft (raw, json) Hash identifier: PWvy1zjZ2GVV601Pr3wXkhshfOPoRKojbRbY2TJDWFw= Subject key identifier: 80:B6:98:A1:8A:CA:99:BF:03:A4:AC:C8:9F:A3:4D:11:F0:2A:68:FA Authority key identifier: 47:32:25:26:94:41:77:9F:80:E4:43:B1:EA:51:6C:C9:9E:4E:D4:DA Certificate issuer: /CN=473225269441779F80E443B1EA516CC99E4ED4DA Certificate serial: 6909A5DEF9AA6521F2235AE9EEC62FFE45AE82DD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/473225269441779F80E443B1EA516CC99E4ED4DA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e0620cfc-b46c-457c-9fde-297710c546a9/0/473225269441779F80E443B1EA516CC99E4ED4DA.mft Manifest number: 0191 Signing time: Sat 18 Oct 2025 13:13:46 +0000 Manifest this update: Sat 18 Oct 2025 13:08:46 +0000 Manifest next update: Tue 21 Oct 2025 18:22:46 +0000 Files and hashes: 1: 3130332e3132312e3138372e302f32342d3234203d3e20313431393039.roa (hash: ICTrr1zawcyGxqE9qaGBu/NO12Zp3KpSJLdHGzxMVFA=) 2: 3130332e3132312e3138362e302f32342d3234203d3e20313431393039.roa (hash: opCF0u3jko4hNWDE/2pVcJdIdU0FHQiXsJlqg5I4v5U=) 3: 473225269441779F80E443B1EA516CC99E4ED4DA.crl (hash: OpfSXrYHUvH28HzleduJyXebrv52RDB8KBpl+73eZBo=) 4: 3130332e3132312e3138362e302f32332d3233203d3e20313431393039.roa (hash: oAysGbdydhifr7l/UknID+HyQ/T/iVxBHJ4DGeZc8gQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e0620cfc-b46c-457c-9fde-297710c546a9/0/473225269441779F80E443B1EA516CC99E4ED4DA.crl rsync://repo-rpki.idnic.net/repo/e0620cfc-b46c-457c-9fde-297710c546a9/0/473225269441779F80E443B1EA516CC99E4ED4DA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/473225269441779F80E443B1EA516CC99E4ED4DA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 18:22:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:09:a5:de:f9:aa:65:21:f2:23:5a:e9:ee:c6:2f:fe:45:ae:82:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=473225269441779F80E443B1EA516CC99E4ED4DA Validity Not Before: Oct 18 13:08:46 2025 GMT Not After : Oct 21 18:22:46 2025 GMT Subject: CN=80B698A18ACA99BF03A4ACC89FA34D11F02A68FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:ff:21:58:46:c7:41:22:4e:2c:dd:fa:c7:21: da:16:a4:4c:84:98:c1:24:5a:c3:28:98:81:f0:0a: 36:af:7f:8f:1c:b2:e1:f9:4b:9e:aa:37:97:29:c0: cb:ea:e8:85:14:7e:92:bc:fd:94:a3:7b:80:84:70: 97:8b:cb:74:2d:13:48:af:65:c2:d7:57:c9:12:98: 52:96:cc:9b:32:b8:f8:73:a4:0e:e5:32:d4:97:8e: 12:6f:7b:c8:0f:6c:de:ba:22:3d:ce:cb:bd:45:ff: 30:95:1b:d5:49:01:3f:98:32:ec:e8:3c:da:b9:8f: b3:9e:bb:ed:e2:bb:56:6d:a3:f1:20:86:c7:8d:5a: 1d:9a:dc:90:b1:85:26:d2:ff:73:cc:57:3a:f9:b0: 16:61:30:31:e8:e0:5b:f0:54:bc:08:6a:2d:53:4c: 62:45:cd:88:ea:d2:49:27:17:dc:56:2e:c5:6f:62: e5:b6:f2:7a:13:39:94:a9:8b:93:1e:bb:e0:b5:06: 7c:84:fd:56:c6:94:b6:d9:0d:9b:84:3d:a0:41:4d: 51:7d:2e:d9:fd:0b:c9:90:b1:e6:83:9a:fb:a8:cd: 86:c6:be:fc:81:61:e4:78:62:58:fd:f3:0e:2e:08: 60:5a:37:9d:5a:2b:cd:16:c3:31:b5:17:e5:52:d4: 84:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:B6:98:A1:8A:CA:99:BF:03:A4:AC:C8:9F:A3:4D:11:F0:2A:68:FA X509v3 Authority Key Identifier: keyid:47:32:25:26:94:41:77:9F:80:E4:43:B1:EA:51:6C:C9:9E:4E:D4:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e0620cfc-b46c-457c-9fde-297710c546a9/0/473225269441779F80E443B1EA516CC99E4ED4DA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/473225269441779F80E443B1EA516CC99E4ED4DA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e0620cfc-b46c-457c-9fde-297710c546a9/0/473225269441779F80E443B1EA516CC99E4ED4DA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:d9:bf:56:ed:b9:a3:c8:8c:e7:0c:81:8a:41:51:74:54:9f: 25:8f:eb:ce:bc:a9:c4:04:c8:08:38:06:c6:ca:6f:4b:13:47: 59:e9:3e:c4:78:6d:3d:03:eb:b6:62:1d:45:e2:bd:b8:25:f9: f4:86:ad:2e:ca:96:69:97:3c:22:96:7b:08:14:b5:58:92:8a: 13:db:cd:f5:86:06:b0:a1:91:45:15:f9:88:43:5c:2a:b1:86: b1:2b:19:5b:e7:8c:71:b7:34:00:e2:4c:57:9b:aa:fd:bc:9a: ba:75:6d:07:85:e5:54:91:17:65:31:85:1b:d7:0e:08:c6:05: 1e:9b:26:26:fc:c5:26:c7:97:b9:25:fc:24:3c:0d:cc:5f:df: 1f:09:f0:66:6c:8c:0c:d4:e4:34:53:72:3e:9e:9f:b0:61:8c: 6d:cc:01:04:88:7a:0d:1c:01:1d:68:81:8b:40:3e:5b:97:71: 7f:87:2c:4c:fd:52:39:ef:11:e2:cd:a7:a8:46:a2:4a:df:de: b1:8a:64:15:1b:29:9e:7b:34:18:45:df:4e:b8:20:b3:0d:15: da:bb:1f:4f:11:2f:48:74:89:aa:ab:77:a8:e2:55:fa:90:8e: 92:8e:b1:26:82:b2:cd:ec:c8:8a:fc:eb:fe:84:4c:da:e6:a6: 5a:62:bb:dc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaQml3vmqZSHyI1rp7sYv/kWugt0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDczMjI1MjY5NDQxNzc5RjgwRTQ0M0IxRUE1MTZDQzk5 RTRFRDREQTAeFw0yNTEwMTgxMzA4NDZaFw0yNTEwMjExODIyNDZaMDMxMTAvBgNV BAMTKDgwQjY5OEExOEFDQTk5QkYwM0E0QUNDODlGQTM0RDExRjAyQTY4RkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCV/yFYRsdBIk4s3frHIdoWpEyE mMEkWsMomIHwCjavf48csuH5S56qN5cpwMvq6IUUfpK8/ZSje4CEcJeLy3QtE0iv ZcLXV8kSmFKWzJsyuPhzpA7lMtSXjhJve8gPbN66Ij3Oy71F/zCVG9VJAT+YMuzo PNq5j7Oeu+3iu1Zto/EghseNWh2a3JCxhSbS/3PMVzr5sBZhMDHo4FvwVLwIai1T TGJFzYjq0kknF9xWLsVvYuW28noTOZSpi5Meu+C1BnyE/VbGlLbZDZuEPaBBTVF9 Ltn9C8mQseaDmvuozYbGvvyBYeR4Ylj98w4uCGBaN51aK80WwzG1F+VS1ISXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgLaYoYrKmb8DpKzIn6NNEfAqaPowHwYDVR0j BBgwFoAURzIlJpRBd5+A5EOx6lFsyZ5O1NowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MDYyMGNmYy1iNDZjLTQ1N2MtOWZkZS0yOTc3MTBjNTQ2YTkvMC80NzMyMjUyNjk0 NDE3NzlGODBFNDQzQjFFQTUxNkNDOTlFNEVENERBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDczMjI1MjY5NDQxNzc5RjgwRTQ0M0IxRUE1MTZDQzk5RTRF RDREQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTA2MjBjZmMtYjQ2Yy00NTdjLTlm ZGUtMjk3NzEwYzU0NmE5LzAvNDczMjI1MjY5NDQxNzc5RjgwRTQ0M0IxRUE1MTZD Qzk5RTRFRDREQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGjZv1btuaPIjOcMgYpBUXRUnyWP6868qcQE yAg4BsbKb0sTR1npPsR4bT0D67ZiHUXivbgl+fSGrS7KlmmXPCKWewgUtViSihPb zfWGBrChkUUV+YhDXCqxhrErGVvnjHG3NADiTFebqv28mrp1bQeF5VSRF2UxhRvX DgjGBR6bJib8xSbHl7kl/CQ8Dcxf3x8J8GZsjAzU5DRTcj6en7BhjG3MAQSIeg0c AR1ogYtAPluXcX+HLEz9UjnvEeLNp6hGokrf3rGKZBUbKZ57NBhF3064ILMNFdq7 H08RL0h0iaqrd6jiVfqQjpKOsSaCss3syIr86/6ETNrmplpiu9w= -----END CERTIFICATE-----Generated at Mon Oct 20 13:45:43 2025 by rpki-client