$ rpki-client -vvf repo-rpki.idnic.net/repo/e543241b-cfd1-4cbb-9219-c7a36237c148/0/22504F83E378CE066AD31D32EB24280CB0F6E560.mft File: 22504F83E378CE066AD31D32EB24280CB0F6E560.mft (raw, json) Hash identifier: vrI51LjGZO+ket7n1LIY6sw4+Lmp2qlPBivwjs5YZKY= Subject key identifier: A0:03:B0:9B:9F:91:DB:3F:24:AB:6D:8E:02:99:6E:A1:82:83:1F:3A Authority key identifier: 22:50:4F:83:E3:78:CE:06:6A:D3:1D:32:EB:24:28:0C:B0:F6:E5:60 Certificate issuer: /CN=22504F83E378CE066AD31D32EB24280CB0F6E560 Certificate serial: 3584C2C4EE48F9831B8EF92C507957FFF21253B1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/22504F83E378CE066AD31D32EB24280CB0F6E560.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e543241b-cfd1-4cbb-9219-c7a36237c148/0/22504F83E378CE066AD31D32EB24280CB0F6E560.mft Manifest number: 01D1 Signing time: Mon 20 Oct 2025 08:41:16 +0000 Manifest this update: Mon 20 Oct 2025 08:36:16 +0000 Manifest next update: Thu 23 Oct 2025 13:21:16 +0000 Files and hashes: 1: 3130332e34362e3138362e302f32332d3234203d3e20313530343632.roa (hash: hIVjbSzxg7xolybOPmRi9WJz/7Vx4SmZboqu/SRlhGg=) 2: 22504F83E378CE066AD31D32EB24280CB0F6E560.crl (hash: U0Ms5uJphkxbF4aB+SVz8S7Q1ynPWoBhbXbyjc2slLQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e543241b-cfd1-4cbb-9219-c7a36237c148/0/22504F83E378CE066AD31D32EB24280CB0F6E560.crl rsync://repo-rpki.idnic.net/repo/e543241b-cfd1-4cbb-9219-c7a36237c148/0/22504F83E378CE066AD31D32EB24280CB0F6E560.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/22504F83E378CE066AD31D32EB24280CB0F6E560.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:84:c2:c4:ee:48:f9:83:1b:8e:f9:2c:50:79:57:ff:f2:12:53:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22504F83E378CE066AD31D32EB24280CB0F6E560 Validity Not Before: Oct 20 08:36:16 2025 GMT Not After : Oct 23 13:21:16 2025 GMT Subject: CN=A003B09B9F91DB3F24AB6D8E02996EA182831F3A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:81:81:d6:d5:15:67:fb:6c:61:f9:af:1b:73: 0b:9b:09:04:64:9f:a8:b4:b0:a0:64:2a:04:72:0b: 14:2d:ea:f6:14:89:1a:88:12:d1:43:2e:45:25:c7: 3d:bf:aa:16:b6:6d:e8:94:60:e4:36:24:4a:82:48: 09:30:fb:34:1e:fd:2d:e7:95:27:79:1b:9f:78:d3: 27:62:62:71:51:67:c5:da:81:33:9e:4e:e9:11:ed: 25:8d:2a:77:68:71:1e:25:38:1d:71:4f:68:12:72: 5e:19:2e:aa:5a:94:f3:81:ff:57:77:0d:d5:da:92: 34:31:6f:df:ba:38:37:12:ca:d4:b1:32:2f:32:ad: e8:62:9a:9f:9c:8c:b1:b2:67:a3:d3:25:f5:64:e2: 16:c0:08:2a:1c:4f:4f:0e:f4:cc:3c:ee:f9:32:d0: d3:3b:0d:06:ca:18:ba:be:8d:6f:5b:9a:c0:65:2e: 8a:d6:4d:37:e6:28:3b:f1:b4:28:80:c8:25:02:79: 23:aa:52:6d:da:52:58:e1:4a:cb:9f:33:6c:57:84: 86:84:f9:78:68:85:c0:a4:49:bb:24:1d:cc:7f:98: 8c:e7:8d:ce:b3:0c:89:ec:6d:30:ab:2e:b4:9a:de: 42:b2:43:8b:08:ff:16:f1:9a:76:e0:39:f8:ec:c8: 2e:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:03:B0:9B:9F:91:DB:3F:24:AB:6D:8E:02:99:6E:A1:82:83:1F:3A X509v3 Authority Key Identifier: keyid:22:50:4F:83:E3:78:CE:06:6A:D3:1D:32:EB:24:28:0C:B0:F6:E5:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e543241b-cfd1-4cbb-9219-c7a36237c148/0/22504F83E378CE066AD31D32EB24280CB0F6E560.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/22504F83E378CE066AD31D32EB24280CB0F6E560.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e543241b-cfd1-4cbb-9219-c7a36237c148/0/22504F83E378CE066AD31D32EB24280CB0F6E560.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:b5:cb:4c:49:12:fe:ca:6c:d8:c2:26:4d:21:59:1f:1e:ce: a1:2e:57:de:aa:79:46:1f:65:03:1e:a9:a5:6a:9a:65:f8:ab: 32:85:1d:22:54:c5:11:05:4d:bb:1f:b8:49:62:05:eb:dd:61: 17:b4:60:e3:06:a3:df:3c:0e:59:7a:3c:ee:dd:48:46:47:06: 7b:3d:d4:cd:8c:a6:5b:c2:f3:f8:44:f0:59:5c:f4:ce:03:51: 9b:94:d9:df:bf:9c:35:f8:9e:f7:88:6e:60:08:25:af:79:c9: 7d:84:b3:e6:15:99:85:93:2d:41:fb:bb:68:3f:67:47:d1:1d: 6b:93:5f:90:b2:a0:e6:7c:07:be:fa:7c:f3:72:ae:87:09:4a: b0:ec:f2:a6:80:6e:88:f2:21:ab:83:3c:b2:43:8b:cd:08:32: 5c:77:d4:83:8d:e7:2b:db:79:33:b6:cb:56:d4:56:de:4e:e8: f1:39:8f:8d:1b:d5:58:7e:bf:a2:93:69:c3:53:a3:ca:db:bd: 32:2b:0b:0a:7a:13:6c:53:6f:6f:95:77:8f:84:2a:1a:72:9e: 4c:06:5a:26:86:3e:a4:b3:4f:dd:75:8a:0f:bf:d1:65:d6:36: e5:a8:24:56:dc:eb:8c:12:98:ff:de:97:5a:4a:e1:c1:90:f8: b7:97:44:6c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNYTCxO5I+YMbjvksUHlX//ISU7EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjI1MDRGODNFMzc4Q0UwNjZBRDMxRDMyRUIyNDI4MENC MEY2RTU2MDAeFw0yNTEwMjAwODM2MTZaFw0yNTEwMjMxMzIxMTZaMDMxMTAvBgNV BAMTKEEwMDNCMDlCOUY5MURCM0YyNEFCNkQ4RTAyOTk2RUExODI4MzFGM0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjgYHW1RVn+2xh+a8bcwubCQRk n6i0sKBkKgRyCxQt6vYUiRqIEtFDLkUlxz2/qha2beiUYOQ2JEqCSAkw+zQe/S3n lSd5G5940ydiYnFRZ8XagTOeTukR7SWNKndocR4lOB1xT2gScl4ZLqpalPOB/1d3 DdXakjQxb9+6ODcSytSxMi8yrehimp+cjLGyZ6PTJfVk4hbACCocT08O9Mw87vky 0NM7DQbKGLq+jW9bmsBlLorWTTfmKDvxtCiAyCUCeSOqUm3aUljhSsufM2xXhIaE +XhohcCkSbskHcx/mIznjc6zDInsbTCrLrSa3kKyQ4sI/xbxmnbgOfjsyC7RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoAOwm5+R2z8kq22OApluoYKDHzowHwYDVR0j BBgwFoAUIlBPg+N4zgZq0x0y6yQoDLD25WAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NTQzMjQxYi1jZmQxLTRjYmItOTIxOS1jN2EzNjIzN2MxNDgvMC8yMjUwNEY4M0Uz NzhDRTA2NkFEMzFEMzJFQjI0MjgwQ0IwRjZFNTYwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjI1MDRGODNFMzc4Q0UwNjZBRDMxRDMyRUIyNDI4MENCMEY2 RTU2MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTU0MzI0MWItY2ZkMS00Y2JiLTky MTktYzdhMzYyMzdjMTQ4LzAvMjI1MDRGODNFMzc4Q0UwNjZBRDMxRDMyRUIyNDI4 MENCMEY2RTU2MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALK1y0xJEv7KbNjCJk0hWR8ezqEuV96qeUYf ZQMeqaVqmmX4qzKFHSJUxREFTbsfuEliBevdYRe0YOMGo988Dll6PO7dSEZHBns9 1M2MplvC8/hE8Flc9M4DUZuU2d+/nDX4nveIbmAIJa95yX2Es+YVmYWTLUH7u2g/ Z0fRHWuTX5CyoOZ8B776fPNyrocJSrDs8qaAbojyIauDPLJDi80IMlx31ION5yvb eTO2y1bUVt5O6PE5j40b1Vh+v6KTacNTo8rbvTIrCwp6E2xTb2+Vd4+EKhpynkwG WiaGPqSzT911ig+/0WXWNuWoJFbc64wSmP/el1pK4cGQ+LeXRGw= -----END CERTIFICATE-----Generated at Mon Oct 20 12:41:34 2025 by rpki-client