$ rpki-client -vvf repo-rpki.idnic.net/repo/f2aa2d10-3faa-4272-be1f-8102957b65e6/0/C43D9C91D389ADDD2039882757F731CAFAAC740F.mft File: C43D9C91D389ADDD2039882757F731CAFAAC740F.mft (raw, json) Hash identifier: UHSr0wiMn/vixDd8mOxQVNzEFZMSL63MIUVFjMFfdvs= Subject key identifier: 4C:EC:0A:24:5D:32:58:8B:4E:5F:95:5A:10:87:6F:92:61:CC:F1:A5 Authority key identifier: C4:3D:9C:91:D3:89:AD:DD:20:39:88:27:57:F7:31:CA:FA:AC:74:0F Certificate issuer: /CN=C43D9C91D389ADDD2039882757F731CAFAAC740F Certificate serial: 7C2AE0FBB8ABDE5E7A89052CCD99A5FEBC44CBEC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C43D9C91D389ADDD2039882757F731CAFAAC740F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f2aa2d10-3faa-4272-be1f-8102957b65e6/0/C43D9C91D389ADDD2039882757F731CAFAAC740F.mft Manifest number: 022E Signing time: Sat 18 Oct 2025 03:50:50 +0000 Manifest this update: Sat 18 Oct 2025 03:45:50 +0000 Manifest next update: Tue 21 Oct 2025 15:10:50 +0000 Files and hashes: 1: C43D9C91D389ADDD2039882757F731CAFAAC740F.crl (hash: uHAuKH7oFm3yzaO5MiaS2lmElaPNRH51lWDz++X8RHQ=) 2: 3130332e3134322e3139342e302f32342d3234203d3e20313338383636.roa (hash: O208rGlxXsDRg5ZQgFSHuXQXt753cTvrXuKq5DJTaZU=) 3: 323030313a6466313a353438303a3a2f34382d3438203d3e20313339333737.roa (hash: UhZmsK1JV2dvdlJPQwAkZ3FUoREjtD3PWxnZnEWW6L0=) 4: 3130332e3134322e3139352e302f32342d3234203d3e20313339333737.roa (hash: xXmPg+qv24jKz/eXwVHYUpUxLnyd59IGPLP0enb+4aQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f2aa2d10-3faa-4272-be1f-8102957b65e6/0/C43D9C91D389ADDD2039882757F731CAFAAC740F.crl rsync://repo-rpki.idnic.net/repo/f2aa2d10-3faa-4272-be1f-8102957b65e6/0/C43D9C91D389ADDD2039882757F731CAFAAC740F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C43D9C91D389ADDD2039882757F731CAFAAC740F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 15:10:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:2a:e0:fb:b8:ab:de:5e:7a:89:05:2c:cd:99:a5:fe:bc:44:cb:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C43D9C91D389ADDD2039882757F731CAFAAC740F Validity Not Before: Oct 18 03:45:50 2025 GMT Not After : Oct 21 15:10:50 2025 GMT Subject: CN=4CEC0A245D32588B4E5F955A10876F9261CCF1A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:38:08:f3:c9:95:67:47:11:29:8b:e4:10:fb: 60:c5:85:36:2d:be:5c:a3:85:9a:98:2a:13:3b:df: 62:6d:64:15:b3:c4:b7:00:6f:63:7f:07:9a:ca:2f: ef:a8:ca:15:a2:2a:e1:6d:2a:fb:fa:0b:df:23:c2: 6c:20:4e:0d:2e:ab:91:23:db:be:f7:3a:98:51:ee: f8:a5:bf:64:34:00:08:fa:7f:b7:92:65:f7:26:24: 7f:88:ea:8d:02:f8:16:ce:a4:b2:fb:2e:c4:6c:40: 73:4f:f2:0a:19:58:80:69:98:18:1a:4a:94:b9:9a: 5b:db:9a:7f:91:f2:2f:d5:ec:db:30:ba:06:26:5d: 4a:fd:3e:5c:56:5f:8c:05:f5:97:a3:da:1d:92:f1: 29:3c:97:bf:34:f6:cf:64:2e:68:bf:17:fc:d3:2c: 81:5a:17:5f:8c:7b:cb:96:b4:cc:8c:2f:42:03:98: 0a:c8:a2:01:de:b8:f1:c1:d7:7e:c4:84:74:d5:5c: e7:ad:63:1a:d6:15:05:a3:be:80:b8:57:f0:35:76: 89:b1:9c:2e:c9:94:e9:33:b2:e4:13:21:3b:99:d2: 97:f1:96:7c:fd:83:96:d0:fa:d4:23:3a:25:75:e9: df:ef:d7:d7:a3:5d:3c:8d:9e:60:6c:38:02:89:8e: bf:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:EC:0A:24:5D:32:58:8B:4E:5F:95:5A:10:87:6F:92:61:CC:F1:A5 X509v3 Authority Key Identifier: keyid:C4:3D:9C:91:D3:89:AD:DD:20:39:88:27:57:F7:31:CA:FA:AC:74:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f2aa2d10-3faa-4272-be1f-8102957b65e6/0/C43D9C91D389ADDD2039882757F731CAFAAC740F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C43D9C91D389ADDD2039882757F731CAFAAC740F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f2aa2d10-3faa-4272-be1f-8102957b65e6/0/C43D9C91D389ADDD2039882757F731CAFAAC740F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:74:e1:55:fe:d5:43:62:16:76:c4:be:23:36:aa:55:8c:e4: a0:2e:7a:36:c1:41:d7:67:15:ec:99:52:d3:63:6d:95:01:72: 06:f8:5b:75:b9:c4:a1:48:a5:cb:18:cd:fa:f3:9b:a5:5e:0a: b9:78:2d:0a:e6:9c:5a:d9:94:78:8b:49:03:7a:32:ab:1f:ef: 57:99:1c:3f:28:43:b2:80:3f:21:c6:51:98:c4:86:53:79:a3: d7:12:a1:46:77:4f:53:77:45:b4:18:40:e9:77:2d:17:db:3d: 2e:c5:02:df:6b:32:ac:5b:24:3c:d5:a7:bd:52:ae:e9:c1:16: a1:62:5d:5e:52:9a:46:f4:23:f1:e3:6a:e5:e1:40:1c:1c:c5: bc:32:9d:1a:7a:12:40:d2:e5:8e:f5:44:f3:f9:f1:9f:b5:ea: da:6e:d4:98:7b:af:0f:30:53:45:bc:74:72:3f:11:20:32:84: 0f:eb:4a:6c:4f:5c:60:c5:47:62:09:9a:f3:bb:af:27:de:0a: 2e:a6:0d:50:6f:3f:eb:05:e8:79:06:dc:01:32:06:d8:47:94: db:2f:b8:ec:36:09:db:b9:99:91:72:f0:a7:5a:76:1a:87:b2: 7d:e4:df:d7:51:c1:5d:ff:f7:58:56:0c:2b:98:6a:ad:bf:64: a8:c0:65:65 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfCrg+7ir3l56iQUszZml/rxEy+wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzQzRDlDOTFEMzg5QURERDIwMzk4ODI3NTdGNzMxQ0FG QUFDNzQwRjAeFw0yNTEwMTgwMzQ1NTBaFw0yNTEwMjExNTEwNTBaMDMxMTAvBgNV BAMTKDRDRUMwQTI0NUQzMjU4OEI0RTVGOTU1QTEwODc2RjkyNjFDQ0YxQTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDOAjzyZVnRxEpi+QQ+2DFhTYt vlyjhZqYKhM732JtZBWzxLcAb2N/B5rKL++oyhWiKuFtKvv6C98jwmwgTg0uq5Ej 2773OphR7vilv2Q0AAj6f7eSZfcmJH+I6o0C+BbOpLL7LsRsQHNP8goZWIBpmBga SpS5mlvbmn+R8i/V7NswugYmXUr9PlxWX4wF9Zej2h2S8Sk8l7809s9kLmi/F/zT LIFaF1+Me8uWtMyML0IDmArIogHeuPHB137EhHTVXOetYxrWFQWjvoC4V/A1domx nC7JlOkzsuQTITuZ0pfxlnz9g5bQ+tQjOiV16d/v19ejXTyNnmBsOAKJjr+rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTOwKJF0yWItOX5VaEIdvkmHM8aUwHwYDVR0j BBgwFoAUxD2ckdOJrd0gOYgnV/cxyvqsdA8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MmFhMmQxMC0zZmFhLTQyNzItYmUxZi04MTAyOTU3YjY1ZTYvMC9DNDNEOUM5MUQz ODlBREREMjAzOTg4Mjc1N0Y3MzFDQUZBQUM3NDBGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzQzRDlDOTFEMzg5QURERDIwMzk4ODI3NTdGNzMxQ0FGQUFD NzQwRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjJhYTJkMTAtM2ZhYS00MjcyLWJl MWYtODEwMjk1N2I2NWU2LzAvQzQzRDlDOTFEMzg5QURERDIwMzk4ODI3NTdGNzMx Q0FGQUFDNzQwRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHJ04VX+1UNiFnbEviM2qlWM5KAuejbBQddn FeyZUtNjbZUBcgb4W3W5xKFIpcsYzfrzm6VeCrl4LQrmnFrZlHiLSQN6Mqsf71eZ HD8oQ7KAPyHGUZjEhlN5o9cSoUZ3T1N3RbQYQOl3LRfbPS7FAt9rMqxbJDzVp71S runBFqFiXV5Smkb0I/HjauXhQBwcxbwynRp6EkDS5Y71RPP58Z+16tpu1Jh7rw8w U0W8dHI/ESAyhA/rSmxPXGDFR2IJmvO7ryfeCi6mDVBvP+sF6HkG3AEyBthHlNsv uOw2Cdu5mZFy8KdadhqHsn3k39dRwV3/91hWDCuYaq2/ZKjAZWU= -----END CERTIFICATE-----Generated at Mon Oct 20 06:27:45 2025 by rpki-client