$ rpki-client -vvf repo-rpki.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.mft File: 199D3D684ECEEFFBB17DD598A2688835A6F48CE7.mft (raw, json) Hash identifier: Zf383wOZCHE4ROegd30uCZnKtbq7RKeNp6XhPaXSE1E= Subject key identifier: C3:B9:B5:6D:F4:88:A2:9C:2A:85:6B:64:A4:B8:D3:50:36:98:EB:8E Authority key identifier: 19:9D:3D:68:4E:CE:EF:FB:B1:7D:D5:98:A2:68:88:35:A6:F4:8C:E7 Certificate issuer: /CN=199D3D684ECEEFFBB17DD598A2688835A6F48CE7 Certificate serial: 56BA47D0AE54392878D9BC4BF242A0D659B30D84 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.mft Manifest number: 021C Signing time: Sat 18 Oct 2025 20:30:41 +0000 Manifest this update: Sat 18 Oct 2025 20:25:41 +0000 Manifest next update: Wed 22 Oct 2025 00:15:41 +0000 Files and hashes: 1: 3130332e3139302e35312e302f32342d3234203d3e2039333431.roa (hash: Alr3MmF3FComiYShgHs/7REcddrGc/AGrj1Fejo7KUI=) 2: 3130332e3139302e35302e302f32332d3233203d3e2039333431.roa (hash: b9POD8lIGTkSBPPG5UCEDWwytPa4KOI/X1gSRB0o140=) 3: 3130332e3139302e35302e302f32342d3234203d3e2039333431.roa (hash: pIxViXZoycBV8A7CIi1fmiiQDu+3Ugcswhk6WPEdvN8=) 4: 199D3D684ECEEFFBB17DD598A2688835A6F48CE7.crl (hash: 9AgygNgeBAdH07A1UoVy2L4q/zXB4sIjphvg9Nsk85M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.crl rsync://repo-rpki.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 00:15:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:ba:47:d0:ae:54:39:28:78:d9:bc:4b:f2:42:a0:d6:59:b3:0d:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=199D3D684ECEEFFBB17DD598A2688835A6F48CE7 Validity Not Before: Oct 18 20:25:41 2025 GMT Not After : Oct 22 00:15:41 2025 GMT Subject: CN=C3B9B56DF488A29C2A856B64A4B8D3503698EB8E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:37:7d:7f:3a:f6:20:61:00:91:c8:28:64:9a: e6:af:c3:4a:0d:27:a0:e5:7d:2f:78:bf:f3:07:de: 02:1f:fd:7f:43:d8:42:22:6e:f0:40:ca:e2:a8:69: 04:58:38:46:f9:76:c2:9b:81:5b:86:fe:50:3b:67: fa:30:c5:0e:b5:cb:25:6f:d8:1c:8b:33:58:b0:17: 61:4d:1f:f7:60:66:78:8d:81:27:cd:61:44:d3:0f: af:82:db:37:c8:f8:6a:2d:f3:4f:7a:29:e3:03:1e: c3:9f:0d:19:16:81:06:b5:c0:14:20:45:84:3a:d4: b1:9a:75:8f:8e:7e:73:83:3c:c0:d3:48:f1:28:31: 4b:78:f1:b2:05:e3:b1:b7:6d:44:29:7c:cf:5b:20: 4f:78:9d:8b:ba:a7:f8:52:7f:40:4f:01:9e:d9:73: 7e:09:47:2e:9a:f8:50:ad:8d:c4:88:c6:24:8b:68: 21:fc:07:d0:e5:2e:b7:26:c2:28:e3:58:ea:00:46: ee:b0:b8:3f:af:cf:e2:68:ef:24:a5:cd:a6:1d:3e: 2e:cd:2a:ab:e4:02:cf:69:60:f7:dd:c4:f8:38:0f: 8b:b2:b6:f5:5a:72:9f:c9:d2:ad:db:13:75:22:8c: 03:fd:14:86:20:00:e6:72:00:58:78:d2:dd:9a:9c: 11:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:B9:B5:6D:F4:88:A2:9C:2A:85:6B:64:A4:B8:D3:50:36:98:EB:8E X509v3 Authority Key Identifier: keyid:19:9D:3D:68:4E:CE:EF:FB:B1:7D:D5:98:A2:68:88:35:A6:F4:8C:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:b0:53:ec:9b:ed:f7:d2:56:0f:3d:9c:bf:61:81:b2:1e:8d: 13:55:af:cf:48:57:ac:44:da:15:6b:66:2b:1e:0d:b8:fb:88: 5b:b2:4d:fb:fe:67:54:85:a9:d1:c3:94:ec:27:10:2a:14:2a: ba:a7:46:9b:f2:41:fb:72:ac:ea:1c:52:25:a6:47:d8:59:ba: a8:1f:83:e0:de:85:60:2d:fa:9a:25:43:09:d8:ae:a9:33:a8: 9e:6e:5d:9a:49:6d:ab:cf:5c:80:15:b5:6b:0a:e9:60:ab:36: 0e:81:63:c5:e2:93:af:b2:01:16:93:a4:f9:40:87:59:44:4a: fa:f8:8a:3c:ad:47:fe:60:f9:2b:6a:56:e5:55:45:a7:c6:56: bc:51:ed:e5:45:2b:26:27:64:25:01:e7:03:a8:5c:d0:bd:3a: 0e:64:cd:25:6e:f0:ee:44:13:0d:4d:3c:62:9d:74:eb:6f:31: e7:00:9d:eb:b0:a5:b1:b8:12:e4:0d:1a:bc:7a:44:04:24:2a: a8:19:23:41:26:d4:1f:e3:d4:23:23:3a:64:ef:fc:0e:a9:c6: 94:78:ba:45:c0:ce:2b:bb:f8:35:b3:d9:37:f2:ab:6a:e8:02: 3f:39:ef:2f:1c:f3:4a:33:9c:60:9c:77:ae:a4:7e:93:77:f1: 28:7b:d0:86 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVrpH0K5UOSh42bxL8kKg1lmzDYQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTk5RDNENjg0RUNFRUZGQkIxN0RENTk4QTI2ODg4MzVB NkY0OENFNzAeFw0yNTEwMTgyMDI1NDFaFw0yNTEwMjIwMDE1NDFaMDMxMTAvBgNV BAMTKEMzQjlCNTZERjQ4OEEyOUMyQTg1NkI2NEE0QjhEMzUwMzY5OEVCOEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEN31/OvYgYQCRyChkmuavw0oN J6DlfS94v/MH3gIf/X9D2EIibvBAyuKoaQRYOEb5dsKbgVuG/lA7Z/owxQ61yyVv 2ByLM1iwF2FNH/dgZniNgSfNYUTTD6+C2zfI+Got8096KeMDHsOfDRkWgQa1wBQg RYQ61LGadY+OfnODPMDTSPEoMUt48bIF47G3bUQpfM9bIE94nYu6p/hSf0BPAZ7Z c34JRy6a+FCtjcSIxiSLaCH8B9DlLrcmwijjWOoARu6wuD+vz+Jo7ySlzaYdPi7N KqvkAs9pYPfdxPg4D4uytvVacp/J0q3bE3UijAP9FIYgAOZyAFh40t2anBHRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUw7m1bfSIopwqhWtkpLjTUDaY644wHwYDVR0j BBgwFoAUGZ09aE7O7/uxfdWYomiINab0jOcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NTgzODNlMi0yMDZjLTRiNzQtYmE0YS1jZDhhNGQ3Y2Q4NjEvMC8xOTlEM0Q2ODRF Q0VFRkZCQjE3REQ1OThBMjY4ODgzNUE2RjQ4Q0U3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTk5RDNENjg0RUNFRUZGQkIxN0RENTk4QTI2ODg4MzVBNkY0 OENFNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjU4MzgzZTItMjA2Yy00Yjc0LWJh NGEtY2Q4YTRkN2NkODYxLzAvMTk5RDNENjg0RUNFRUZGQkIxN0RENTk4QTI2ODg4 MzVBNkY0OENFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJSwU+yb7ffSVg89nL9hgbIejRNVr89IV6xE 2hVrZiseDbj7iFuyTfv+Z1SFqdHDlOwnECoUKrqnRpvyQftyrOocUiWmR9hZuqgf g+DehWAt+polQwnYrqkzqJ5uXZpJbavPXIAVtWsK6WCrNg6BY8Xik6+yARaTpPlA h1lESvr4ijytR/5g+StqVuVVRafGVrxR7eVFKyYnZCUB5wOoXNC9Og5kzSVu8O5E Ew1NPGKddOtvMecAneuwpbG4EuQNGrx6RAQkKqgZI0Em1B/j1CMjOmTv/A6pxpR4 ukXAziu7+DWz2Tfyq2roAj857y8c80oznGCcd66kfpN38Sh70IY= -----END CERTIFICATE-----Generated at Mon Oct 20 15:49:46 2025 by rpki-client