$ rpki-client -vvf repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.mft File: 228E752BBFB8C16B3B46F3D388ECED50CF9A6473.mft (raw, json) Hash identifier: JSJN0l+GgvzO04xFrPSrhptcK/3t40T+kFW2rK4s7fk= Subject key identifier: 34:3E:9D:90:D7:A1:E1:86:19:96:C1:96:CC:29:3C:BA:56:65:0F:8D Authority key identifier: 22:8E:75:2B:BF:B8:C1:6B:3B:46:F3:D3:88:EC:ED:50:CF:9A:64:73 Certificate issuer: /CN=228E752BBFB8C16B3B46F3D388ECED50CF9A6473 Certificate serial: 6BDED9E3881B38BC9306C02AEE2B55D17AF281D3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.cer Subject info access: rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.mft Manifest number: 01F9 Signing time: Sat 25 Oct 2025 18:51:20 +0000 Manifest this update: Sat 25 Oct 2025 18:46:20 +0000 Manifest next update: Wed 29 Oct 2025 04:24:20 +0000 Files and hashes: 1: 3131392e34372e39352e302f32342d3234203d3e20313439343039.roa (hash: IOQi+x8HL04tSdZdkybbwTiZjcbDVMFrGx/+Tn9mObQ=) 2: 3132342e3130392e32322e302f32342d3234203d3e20313339393439.roa (hash: HVWbk3IWKH+5JXE4MGQxsGy0csGyHkuWv0WX8uhGzdw=) 3: 3131392e34372e38392e302f32342d3234203d3e203338353237.roa (hash: 2N3BwgIjWHFbTQKqljv/UDzpCDNCSry44iBQjllcOAY=) 4: 3131392e34372e38382e302f32342d3234203d3e203338353237.roa (hash: gaK9TNDkDAX6rLbicLT8NaMu8dPZqEuVmgkAb8uim8M=) 5: 3132342e3130392e32302e302f32342d3234203d3e203338353237.roa (hash: ETJz1GlN0xqgrI/TiDRe3oL2wRqZlR8gI6HL/idn2yc=) 6: 3130332e32352e3130382e302f32342d3234203d3e20313332363334.roa (hash: fBDOlCYFIj49Ll99j2HPW9RAkablwrcxgHTldEFv/Jk=) 7: 3132342e3130392e32332e302f32342d3234203d3e203338353237.roa (hash: hSmHQriBgEB6G8euGPo5okmMfhhllZ1AqyrcnX9VlJE=) 8: 3131392e34372e39302e302f32342d3234203d3e203338353237.roa (hash: 2gYjkNpQS7rIhX41LQ5E9ZRuFubPcLm5+1qbHYEWbNU=) 9: 228E752BBFB8C16B3B46F3D388ECED50CF9A6473.crl (hash: egOM5zVDAGrzopOVFeXGtF3kJorMzhtn9HSCEGqmgEw=) 10: 32372e3132342e38332e302f32342d3234203d3e20313332363334.roa (hash: 2EEYdzWr91JIl7YnldqA+u9ZlAli1CH0l6dUJ+oRlZU=) 11: 3132342e3130392e32312e302f32342d3234203d3e203338353237.roa (hash: JF25GsZLyzVMqdMpnO1WYlSsjR6hM621Mtm2BRDUvVE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.crl rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Oct 2025 22:26:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:de:d9:e3:88:1b:38:bc:93:06:c0:2a:ee:2b:55:d1:7a:f2:81:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=228E752BBFB8C16B3B46F3D388ECED50CF9A6473 Validity Not Before: Oct 25 18:46:20 2025 GMT Not After : Oct 29 04:24:20 2025 GMT Subject: CN=343E9D90D7A1E1861996C196CC293CBA56650F8D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:0c:92:d5:42:cb:64:26:bb:a5:1f:41:ec:10: d2:ed:0c:02:c4:9a:8d:02:67:b7:6c:9e:22:4f:69: fa:c9:a2:c5:59:c6:8f:35:04:4e:e3:bb:5d:d7:89: a7:dc:b0:31:f7:70:43:9c:7e:6d:45:18:14:77:e5: 3b:02:a9:73:ba:96:f5:f4:65:7d:af:bc:e1:cb:74: 7f:0e:d7:da:1e:e6:52:e4:d5:32:6b:86:09:4d:c0: dd:bc:e9:a3:57:ed:b7:db:7b:fc:70:f9:45:a4:48: 53:1b:4a:9d:ef:35:16:36:ac:0b:60:f4:f8:fc:e8: 58:bc:9a:50:bd:73:40:aa:77:28:2b:e0:98:39:c2: dd:f2:a3:be:53:71:cc:e6:dd:84:21:53:ae:82:3d: 12:8c:9e:ce:dc:c2:fc:f7:50:cb:a0:b3:c4:97:e6: 11:5c:ea:cf:d5:cd:8b:ab:f3:d1:f0:82:8d:98:c4: fb:65:05:bd:6a:c3:ab:53:56:36:13:dc:93:bd:3f: 69:2c:3f:3f:30:50:38:2a:f1:e9:84:c5:60:f9:b3: 67:a0:4b:3c:4d:81:17:73:3c:42:34:5f:ae:aa:ce: 22:fd:26:46:7d:d6:5b:50:d2:58:fd:18:74:46:ae: 0f:a6:cd:2e:14:0e:36:f3:dc:db:10:ac:bb:96:18: bf:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:3E:9D:90:D7:A1:E1:86:19:96:C1:96:CC:29:3C:BA:56:65:0F:8D X509v3 Authority Key Identifier: keyid:22:8E:75:2B:BF:B8:C1:6B:3B:46:F3:D3:88:EC:ED:50:CF:9A:64:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:67:99:f0:58:09:64:06:06:2a:dd:01:3a:c1:87:4d:e8:3e: e4:47:95:71:5f:bb:89:9e:ed:5a:3e:df:b3:db:31:7e:40:7f: 9b:9c:d5:c5:b8:f3:37:81:a0:89:ef:0a:96:34:ef:35:5e:e5: f2:fc:0b:31:25:49:9d:41:6e:aa:9e:85:34:1b:81:2b:c0:5f: a3:cd:ba:5d:f7:8c:56:12:bd:49:16:80:6c:eb:b3:7c:10:b6: a3:f8:fa:85:51:39:3c:26:8c:01:96:3a:63:a5:ff:03:c7:e2: 92:66:f1:9b:e7:80:9f:83:be:4b:6b:3f:fd:c3:b2:9a:08:db: 61:a1:17:16:b7:3b:8a:48:82:d8:26:41:57:ef:2f:ed:42:08: 88:7d:cc:22:d3:fa:17:2b:a9:0d:0b:1c:77:dd:89:2e:b8:66: 6e:40:8f:38:4a:98:14:20:ac:b3:c5:f7:b2:27:43:86:be:fd: b6:ed:fe:18:4a:b7:63:5b:b3:e9:6d:e4:1e:b2:ac:68:04:4a: a2:73:2b:17:0e:5f:d6:ff:a9:18:99:03:3a:46:4b:55:5d:0d: 29:15:da:de:8f:90:86:93:27:99:f2:57:21:e7:16:67:3f:83: 52:44:90:44:da:41:87:82:6c:22:fd:06:6b:81:a9:3e:a7:7c: 4a:7d:c8:c2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa97Z44gbOLyTBsAq7itV0XrygdMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjI4RTc1MkJCRkI4QzE2QjNCNDZGM0QzODhFQ0VENTBD RjlBNjQ3MzAeFw0yNTEwMjUxODQ2MjBaFw0yNTEwMjkwNDI0MjBaMDMxMTAvBgNV BAMTKDM0M0U5RDkwRDdBMUUxODYxOTk2QzE5NkNDMjkzQ0JBNTY2NTBGOEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnDJLVQstkJrulH0HsENLtDALE mo0CZ7dsniJPafrJosVZxo81BE7ju13XiafcsDH3cEOcfm1FGBR35TsCqXO6lvX0 ZX2vvOHLdH8O19oe5lLk1TJrhglNwN286aNX7bfbe/xw+UWkSFMbSp3vNRY2rAtg 9Pj86Fi8mlC9c0Cqdygr4Jg5wt3yo75Tcczm3YQhU66CPRKMns7cwvz3UMugs8SX 5hFc6s/VzYur89Hwgo2YxPtlBb1qw6tTVjYT3JO9P2ksPz8wUDgq8emExWD5s2eg SzxNgRdzPEI0X66qziL9JkZ91ltQ0lj9GHRGrg+mzS4UDjbz3NsQrLuWGL9VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUND6dkNeh4YYZlsGWzCk8ulZlD40wHwYDVR0j BBgwFoAUIo51K7+4wWs7RvPTiOztUM+aZHMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MTdlZmQyYS0wMmFiLTQyMDItOTcwZi1mNjk5ZGZmOTdkZTUvMC8yMjhFNzUyQkJG QjhDMTZCM0I0NkYzRDM4OEVDRUQ1MENGOUE2NDczLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjI4RTc1MkJCRkI4QzE2QjNCNDZGM0QzODhFQ0VENTBDRjlB NjQ3My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzE3ZWZkMmEtMDJhYi00MjAyLTk3 MGYtZjY5OWRmZjk3ZGU1LzAvMjI4RTc1MkJCRkI4QzE2QjNCNDZGM0QzODhFQ0VE NTBDRjlBNjQ3My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACtnmfBYCWQGBirdATrBh03oPuRHlXFfu4me 7Vo+37PbMX5Af5uc1cW48zeBoInvCpY07zVe5fL8CzElSZ1BbqqehTQbgSvAX6PN ul33jFYSvUkWgGzrs3wQtqP4+oVROTwmjAGWOmOl/wPH4pJm8ZvngJ+DvktrP/3D spoI22GhFxa3O4pIgtgmQVfvL+1CCIh9zCLT+hcrqQ0LHHfdiS64Zm5AjzhKmBQg rLPF97InQ4a+/bbt/hhKt2Nbs+lt5B6yrGgESqJzKxcOX9b/qRiZAzpGS1VdDSkV 2t6PkIaTJ5nyVyHnFmc/g1JEkETaQYeCbCL9BmuBqT6nfEp9yMI= -----END CERTIFICATE-----Generated at Sun Oct 26 04:32:21 2025 by rpki-client