$ rpki-client -vvf repo-rpki.idnic.net/repo/f7180704-6b64-4a40-8f3d-ffdfd5e37def/0/22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C.mft File: 22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C.mft (raw, json) Hash identifier: GWV/9pdT9I6kowWhwBykukFUSQf63oVMQVbIp7XurG8= Subject key identifier: 35:8C:12:BB:C9:FA:F8:BA:A0:58:F9:25:B6:22:2A:6A:1D:C6:C1:38 Authority key identifier: 22:CD:3A:20:CF:62:1A:5B:0B:99:E4:28:C8:E5:73:19:C0:A9:CE:2C Certificate issuer: /CN=22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C Certificate serial: 542F0DF26468D0032DDDF3D6DA9C3DB04B083FCB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f7180704-6b64-4a40-8f3d-ffdfd5e37def/0/22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C.mft Manifest number: 010D Signing time: Mon 20 Oct 2025 01:21:02 +0000 Manifest this update: Mon 20 Oct 2025 01:16:02 +0000 Manifest next update: Thu 23 Oct 2025 01:21:02 +0000 Files and hashes: 1: 22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C.crl (hash: TmgpnEAmf0/lrQihplvV/eglgqhrUfPlZAYA394n+us=) 2: 3130332e32332e3130302e302f32322d3234203d3e203538343030.roa (hash: X1zuW7ewqOs7galNtjkQMnHEEBdiMyZOmIpDqdwYj+Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f7180704-6b64-4a40-8f3d-ffdfd5e37def/0/22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C.crl rsync://repo-rpki.idnic.net/repo/f7180704-6b64-4a40-8f3d-ffdfd5e37def/0/22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 01:21:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:2f:0d:f2:64:68:d0:03:2d:dd:f3:d6:da:9c:3d:b0:4b:08:3f:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C Validity Not Before: Oct 20 01:16:02 2025 GMT Not After : Oct 23 01:21:02 2025 GMT Subject: CN=358C12BBC9FAF8BAA058F925B6222A6A1DC6C138 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:32:25:fd:19:72:f7:d9:eb:40:7a:aa:0f:00: 28:99:9f:c9:c9:28:44:c5:f1:a3:88:78:7a:85:54: ee:1b:29:40:e7:4a:20:c2:6d:4e:7f:6d:98:aa:a8: 31:5e:b2:f8:b4:bd:82:46:36:f1:09:75:e6:78:1b: 21:f3:4d:25:a8:e7:09:41:13:19:ce:7c:5d:f7:d4: ae:4d:0a:c7:ca:24:2f:72:d8:6c:2d:bd:21:67:70: 2a:19:38:99:93:00:85:d1:2b:15:3f:e0:cd:2f:8a: d6:ee:6f:f9:a7:99:1c:8a:3c:d1:ae:9c:0b:9b:12: 68:86:49:5d:3d:95:f2:a7:fa:da:97:08:f2:e3:19: 3a:16:8d:15:bd:af:33:d8:e5:29:51:57:d3:0a:ec: 9c:82:a4:7f:3a:ab:d6:bd:0b:64:70:b1:93:a1:c6: 4d:5a:14:cf:c4:2a:a8:86:7f:f9:13:70:d3:0c:37: 94:9a:7b:7c:ac:7e:25:38:53:3d:dc:dd:97:fa:89: de:e3:da:f9:1b:46:e2:31:de:34:b2:ef:dd:c1:9d: c1:7e:44:b9:f6:e4:56:c9:3c:23:64:57:b7:79:8f: aa:d9:34:e0:9f:87:88:43:ee:20:b2:be:e5:31:09: d7:02:3b:f1:18:97:bd:cd:b9:20:43:00:20:38:72: 62:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:8C:12:BB:C9:FA:F8:BA:A0:58:F9:25:B6:22:2A:6A:1D:C6:C1:38 X509v3 Authority Key Identifier: keyid:22:CD:3A:20:CF:62:1A:5B:0B:99:E4:28:C8:E5:73:19:C0:A9:CE:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f7180704-6b64-4a40-8f3d-ffdfd5e37def/0/22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f7180704-6b64-4a40-8f3d-ffdfd5e37def/0/22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:9c:bf:cf:89:6b:01:c4:b7:a3:6e:7d:07:ea:de:91:1f:0f: 9a:92:d3:cd:f6:3d:ef:96:b5:7b:29:bb:b4:45:39:93:29:b4: 68:47:9b:a4:ae:f8:f9:df:de:1b:e1:53:a9:49:c7:ed:e5:3f: 52:e4:c5:ab:9e:59:c9:07:2a:a0:bd:12:09:91:a2:fd:f9:a1: e2:b6:7d:af:10:15:d4:5a:65:12:3e:43:a7:b9:1f:b3:c1:9c: b3:11:7c:64:a0:35:25:b5:45:22:b6:b4:31:29:9d:91:9e:3b: 84:72:9f:6e:6c:e9:46:fe:73:e4:f8:c0:0e:1a:b4:09:5f:56: f4:e2:61:37:91:2b:44:6c:cb:fe:ad:0b:73:4c:f5:0e:d2:25: e5:bf:2f:10:46:b1:f7:b8:b5:6c:da:35:93:49:cf:fe:d5:7f: fe:61:2f:0a:a5:d2:be:45:51:3c:c3:04:df:1a:64:15:85:05: 6e:13:af:7b:c9:cb:b8:40:38:3d:6a:4f:3f:0e:dc:1b:92:d0: 96:a0:5d:31:89:df:46:de:e2:76:e1:d5:aa:ba:bb:0f:2a:f8: 7b:d2:f1:7e:3c:04:5c:97:9c:d3:6f:7f:8f:54:66:7b:7d:1a: ea:b0:89:c2:1d:bf:57:47:5d:e6:08:be:dd:27:db:ea:9e:a3: 86:3f:6c:e0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVC8N8mRo0AMt3fPW2pw9sEsIP8swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjJDRDNBMjBDRjYyMUE1QjBCOTlFNDI4QzhFNTczMTlD MEE5Q0UyQzAeFw0yNTEwMjAwMTE2MDJaFw0yNTEwMjMwMTIxMDJaMDMxMTAvBgNV BAMTKDM1OEMxMkJCQzlGQUY4QkFBMDU4RjkyNUI2MjIyQTZBMURDNkMxMzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6MiX9GXL32etAeqoPACiZn8nJ KETF8aOIeHqFVO4bKUDnSiDCbU5/bZiqqDFesvi0vYJGNvEJdeZ4GyHzTSWo5wlB ExnOfF331K5NCsfKJC9y2GwtvSFncCoZOJmTAIXRKxU/4M0vitbub/mnmRyKPNGu nAubEmiGSV09lfKn+tqXCPLjGToWjRW9rzPY5SlRV9MK7JyCpH86q9a9C2RwsZOh xk1aFM/EKqiGf/kTcNMMN5Sae3ysfiU4Uz3c3Zf6id7j2vkbRuIx3jSy793BncF+ RLn25FbJPCNkV7d5j6rZNOCfh4hD7iCyvuUxCdcCO/EYl73NuSBDACA4cmITAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNYwSu8n6+LqgWPkltiIqah3GwTgwHwYDVR0j BBgwFoAUIs06IM9iGlsLmeQoyOVzGcCpziwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NzE4MDcwNC02YjY0LTRhNDAtOGYzZC1mZmRmZDVlMzdkZWYvMC8yMkNEM0EyMENG NjIxQTVCMEI5OUU0MjhDOEU1NzMxOUMwQTlDRTJDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjJDRDNBMjBDRjYyMUE1QjBCOTlFNDI4QzhFNTczMTlDMEE5 Q0UyQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjcxODA3MDQtNmI2NC00YTQwLThm M2QtZmZkZmQ1ZTM3ZGVmLzAvMjJDRDNBMjBDRjYyMUE1QjBCOTlFNDI4QzhFNTcz MTlDMEE5Q0UyQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAKcv8+JawHEt6NufQfq3pEfD5qS0832Pe+W tXspu7RFOZMptGhHm6Su+Pnf3hvhU6lJx+3lP1LkxaueWckHKqC9EgmRov35oeK2 fa8QFdRaZRI+Q6e5H7PBnLMRfGSgNSW1RSK2tDEpnZGeO4Ryn25s6Ub+c+T4wA4a tAlfVvTiYTeRK0Rsy/6tC3NM9Q7SJeW/LxBGsfe4tWzaNZNJz/7Vf/5hLwql0r5F UTzDBN8aZBWFBW4Tr3vJy7hAOD1qTz8O3BuS0JagXTGJ30be4nbh1aq6uw8q+HvS 8X48BFyXnNNvf49UZnt9GuqwicIdv1dHXeYIvt0n2+qeo4Y/bOA= -----END CERTIFICATE-----Generated at Tue Oct 21 03:06:29 2025 by rpki-client