$ rpki-client -vvf repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.mft File: 229866508D6D624523EDAD2A0DE1E82AE2C3B512.mft (raw, json) Hash identifier: NtOhmXCOK1079obLAd+kpo/T8V4kKqh7Flyl3UelmEw= Subject key identifier: 96:D0:C8:91:E6:F1:13:B4:A1:28:33:6A:F9:05:87:88:C9:6D:8B:60 Authority key identifier: 22:98:66:50:8D:6D:62:45:23:ED:AD:2A:0D:E1:E8:2A:E2:C3:B5:12 Certificate issuer: /CN=229866508D6D624523EDAD2A0DE1E82AE2C3B512 Certificate serial: 12AB6E83A2AE190D93C84189E7A639BC33050154 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.mft Manifest number: 033B Signing time: Mon 27 Oct 2025 07:41:22 +0000 Manifest this update: Mon 27 Oct 2025 07:36:22 +0000 Manifest next update: Thu 30 Oct 2025 15:05:22 +0000 Files and hashes: 1: AS10217.roa (hash: JJQedycT2rxuZ0WKBIVY+WZbOwVugUFQzwOutSTR+VY=) 2: 229866508D6D624523EDAD2A0DE1E82AE2C3B512.crl (hash: HtzOqypbVliJ/hqMY8EVWdLRA68fx1joWr9xhvU58E8=) 3: AS45700.roa (hash: BXkE0BXqN50iJBAlAe18i/nlvwrKk+4GRFc684uKAn8=) 4: AS147168.roa (hash: SfwVcPhlkwWs3fgP+tbn9sWqgzMndeGhqXYvwXPNvxY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.crl rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Oct 2025 15:05:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:ab:6e:83:a2:ae:19:0d:93:c8:41:89:e7:a6:39:bc:33:05:01:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=229866508D6D624523EDAD2A0DE1E82AE2C3B512 Validity Not Before: Oct 27 07:36:22 2025 GMT Not After : Oct 30 15:05:22 2025 GMT Subject: CN=96D0C891E6F113B4A128336AF9058788C96D8B60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:52:1b:66:e1:57:f0:6f:b0:a7:2e:f7:e5:46: f2:ee:76:8f:11:95:85:b2:cd:d4:d6:62:01:0c:cc: 73:c8:a9:35:d9:0a:19:01:68:48:73:be:d7:d8:4b: f3:06:0e:b6:4e:e5:59:cb:0f:a9:d7:6e:b7:0f:9c: 34:1f:a3:0a:ac:78:53:bb:44:49:2e:dd:3d:06:23: 71:04:a2:5a:f0:b5:81:e9:80:a5:4a:95:a1:fa:a2: 36:82:de:7d:a2:54:67:5d:dd:d5:b9:78:82:e0:18: bf:60:c4:c0:1e:e2:53:d6:f0:45:24:33:ab:4c:b9: 61:bf:3a:0f:c3:21:ff:cb:8b:34:5b:e4:2a:c3:7a: 45:c5:b8:91:ff:86:d6:f2:f2:f5:25:ba:d1:a5:25: 9d:c9:5b:f9:c6:f6:87:9a:06:1f:33:1b:b0:41:5b: f5:fb:81:8c:09:90:f0:96:22:a0:e7:ca:ed:75:10: c8:46:29:51:9f:5c:de:92:d1:e0:d1:37:a0:fc:77: be:a8:4e:d7:23:d2:45:b2:e6:ce:62:df:35:09:b6: 71:80:13:ff:71:14:73:9b:79:11:93:f2:7a:7f:2c: 90:d5:b5:92:1e:df:3a:41:82:23:67:76:a1:a2:a4: 99:8c:6d:71:c0:34:84:b2:eb:0b:1d:f2:88:19:e2: 30:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:D0:C8:91:E6:F1:13:B4:A1:28:33:6A:F9:05:87:88:C9:6D:8B:60 X509v3 Authority Key Identifier: keyid:22:98:66:50:8D:6D:62:45:23:ED:AD:2A:0D:E1:E8:2A:E2:C3:B5:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:fb:1a:04:ff:71:7f:be:ef:b6:c8:50:cb:7d:96:a1:2c:8d: a9:8e:3b:31:0e:f1:aa:d8:0e:bf:16:2e:22:7d:71:17:4e:f8: e6:d8:d4:6f:c1:dc:27:6b:0e:3a:e7:e3:67:d0:26:35:60:4f: cc:a2:8f:8a:d9:47:a7:14:66:96:2b:94:68:75:68:3e:40:5a: 51:c9:dd:99:6b:4f:ff:d2:fa:e9:5d:a7:cc:c4:7c:3c:4b:38: 08:db:02:18:b2:0f:53:57:99:d1:27:f5:f2:19:6b:10:94:71: 63:60:d0:0f:c9:16:0a:58:80:ed:a5:f4:86:06:56:b3:45:5c: 37:85:66:6b:9c:e0:53:54:41:42:5a:80:bb:c0:2a:c1:34:fa: 85:e8:7c:fa:ce:d9:5d:2f:b5:7d:22:0b:e4:54:68:2a:6b:13: 66:4b:17:06:49:46:f3:9e:bb:c7:ad:9c:12:0c:e4:b5:42:ff: 0a:b3:a0:9a:47:81:9e:5d:6c:48:dd:9e:c6:1e:91:38:d2:26: 99:ef:79:e4:4a:91:18:2c:07:2a:c9:0a:5b:14:69:13:c6:8b: fc:e6:3f:9e:ba:66:9c:0b:62:eb:ff:e7:8c:f1:72:44:89:86: 6e:ca:82:b2:25:b1:93:71:11:59:7f:16:62:65:c7:96:af:5f: 37:8d:fe:67 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEqtug6KuGQ2TyEGJ56Y5vDMFAVQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjI5ODY2NTA4RDZENjI0NTIzRURBRDJBMERFMUU4MkFF MkMzQjUxMjAeFw0yNTEwMjcwNzM2MjJaFw0yNTEwMzAxNTA1MjJaMDMxMTAvBgNV BAMTKDk2RDBDODkxRTZGMTEzQjRBMTI4MzM2QUY5MDU4Nzg4Qzk2RDhCNjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXUhtm4Vfwb7CnLvflRvLudo8R lYWyzdTWYgEMzHPIqTXZChkBaEhzvtfYS/MGDrZO5VnLD6nXbrcPnDQfowqseFO7 REku3T0GI3EEolrwtYHpgKVKlaH6ojaC3n2iVGdd3dW5eILgGL9gxMAe4lPW8EUk M6tMuWG/Og/DIf/LizRb5CrDekXFuJH/htby8vUlutGlJZ3JW/nG9oeaBh8zG7BB W/X7gYwJkPCWIqDnyu11EMhGKVGfXN6S0eDRN6D8d76oTtcj0kWy5s5i3zUJtnGA E/9xFHObeRGT8np/LJDVtZIe3zpBgiNndqGipJmMbXHANISy6wsd8ogZ4jARAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUltDIkebxE7ShKDNq+QWHiMlti2AwHwYDVR0j BBgwFoAUIphmUI1tYkUj7a0qDeHoKuLDtRIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZmI3MDgxOC0yMzY2LTQyZTAtOWRiZC0yNTQzODEwNjllNTcvMC8yMjk4NjY1MDhE NkQ2MjQ1MjNFREFEMkEwREUxRTgyQUUyQzNCNTEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjI5ODY2NTA4RDZENjI0NTIzRURBRDJBMERFMUU4MkFFMkMz QjUxMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmZiNzA4MTgtMjM2Ni00MmUwLTlk YmQtMjU0MzgxMDY5ZTU3LzAvMjI5ODY2NTA4RDZENjI0NTIzRURBRDJBMERFMUU4 MkFFMkMzQjUxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGD7GgT/cX++77bIUMt9lqEsjamOOzEO8arY Dr8WLiJ9cRdO+ObY1G/B3CdrDjrn42fQJjVgT8yij4rZR6cUZpYrlGh1aD5AWlHJ 3ZlrT//S+uldp8zEfDxLOAjbAhiyD1NXmdEn9fIZaxCUcWNg0A/JFgpYgO2l9IYG VrNFXDeFZmuc4FNUQUJagLvAKsE0+oXofPrO2V0vtX0iC+RUaCprE2ZLFwZJRvOe u8etnBIM5LVC/wqzoJpHgZ5dbEjdnsYekTjSJpnveeRKkRgsByrJClsUaRPGi/zm P566ZpwLYuv/54zxckSJhm7KgrIlsZNxEVl/FmJlx5avXzeN/mc= -----END CERTIFICATE-----Generated at Tue Oct 28 13:52:14 2025 by rpki-client