$ rpki-client -vvf repo-rpki.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.mft File: C1C0233DC07302E86D114AB772AB6566ED7F5FBB.mft (raw, json) Hash identifier: F3Fd3irVY5mzkpuDtxwnWo6dh61xKVvxpMgpJv0cj1M= Subject key identifier: 74:D4:A1:11:2B:A3:38:29:A6:6D:E1:3C:F7:0B:97:51:F8:7C:5E:2F Authority key identifier: C1:C0:23:3D:C0:73:02:E8:6D:11:4A:B7:72:AB:65:66:ED:7F:5F:BB Certificate issuer: /CN=C1C0233DC07302E86D114AB772AB6566ED7F5FBB Certificate serial: 6E4749FB8D55D157E21573BBCF703B229DD75EF1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.mft Manifest number: 0203 Signing time: Fri 31 Oct 2025 11:51:49 +0000 Manifest this update: Fri 31 Oct 2025 11:46:49 +0000 Manifest next update: Mon 03 Nov 2025 15:03:49 +0000 Files and hashes: 1: 323430373a373263303a3a2f33322d3438203d3e203538383230.roa (hash: t1SEps+PxNqj4zacSf/7DBl+MO9xjw/dSKyX8w5YIzQ=) 2: C1C0233DC07302E86D114AB772AB6566ED7F5FBB.crl (hash: fe+++YNOHDL1Ksy9M+NP9pmoz0VdXJqFWQFdQz2105k=) 3: 3130332e3135322e39322e302f32332d3234203d3e20313338383630.roa (hash: bltZi0XDvzmwgyzEl66AozT5pKIvx60Z1RNoNEbNdrk=) 4: 323430373a373263303a3a2f33322d3332203d3e203538383230.roa (hash: DEQ6i2fIqhrPJGH2IFEMi8YnzTrgKlP6WPrpjEcp18o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.crl rsync://repo-rpki.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Nov 2025 15:03:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:47:49:fb:8d:55:d1:57:e2:15:73:bb:cf:70:3b:22:9d:d7:5e:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C1C0233DC07302E86D114AB772AB6566ED7F5FBB Validity Not Before: Oct 31 11:46:49 2025 GMT Not After : Nov 3 15:03:49 2025 GMT Subject: CN=74D4A1112BA33829A66DE13CF70B9751F87C5E2F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:6a:f9:4a:51:e2:43:4f:d7:53:b9:60:4a:27: ea:f2:ad:fc:59:b7:8d:d9:f9:16:62:cb:82:d8:46: a5:2d:ca:b6:29:2e:0d:2b:91:4c:97:e9:35:97:ef: 38:ef:8f:b9:8e:c7:c8:a2:fc:59:6c:17:97:1f:6b: 3e:7a:c5:ba:ea:74:31:e0:81:a4:f9:1f:0a:42:42: b7:80:a7:04:43:9f:7e:36:25:8e:b2:fa:87:06:ef: 85:22:71:55:94:90:2e:0f:28:2c:bd:44:4f:20:e8: d8:cf:a4:35:7e:84:d9:40:9f:9a:b4:94:0e:92:fe: cb:32:9f:bd:48:1b:66:ee:8b:8f:7d:25:8e:4f:97: 6d:c4:0d:f5:20:9d:07:fc:16:6d:5c:26:ad:62:8f: 04:b1:da:9c:14:2a:22:76:d6:fe:da:6a:ec:ca:89: c6:c9:8e:1a:ea:e2:4a:44:ee:fe:df:1a:eb:cb:67: f4:7c:31:96:5d:56:5c:c3:19:c1:0b:e6:ed:2e:23: be:3a:a5:66:ac:4a:1f:63:70:b8:5e:5a:34:c1:22: 9b:ff:2a:ba:1b:ea:4f:6f:f2:06:56:01:69:b6:cc: 35:1f:44:e8:46:57:0c:70:7f:e3:b6:96:eb:de:a6: ef:b8:92:c8:b5:4d:45:f4:27:85:e6:c1:3f:f5:c7: 1f:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:D4:A1:11:2B:A3:38:29:A6:6D:E1:3C:F7:0B:97:51:F8:7C:5E:2F X509v3 Authority Key Identifier: keyid:C1:C0:23:3D:C0:73:02:E8:6D:11:4A:B7:72:AB:65:66:ED:7F:5F:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:2a:91:bb:32:ba:ff:ab:2d:9f:05:5d:12:6c:10:6f:89:90: 4c:cc:ee:64:1b:8a:3e:fa:a5:00:f9:cd:b8:61:2f:e1:59:08: 2e:21:99:09:58:24:4f:ae:d8:d6:f6:bf:a3:07:f6:d1:68:bd: 1e:74:96:56:7e:83:c7:a6:8e:4d:99:55:0f:9f:36:eb:df:f4: 9f:65:39:2a:e3:4c:88:a6:13:c6:48:35:d8:47:7c:90:ff:02: 0c:22:e4:86:31:0b:2e:91:6f:10:ef:97:3a:06:80:fe:21:93: 23:79:25:6b:ea:00:b6:86:b1:51:7e:d5:92:61:0b:06:1c:43: 08:51:a0:22:93:8c:3d:69:a7:c6:b0:eb:4e:93:ae:c8:5b:e8: c4:99:7d:4f:49:3f:02:e2:33:6c:77:d5:9c:bc:57:9a:74:b3: 7a:63:48:83:04:73:61:42:f4:6f:f4:7f:fe:1e:9a:21:3a:7b: bc:ac:15:8f:f9:cb:64:57:59:ae:84:30:0c:48:8e:82:00:b0: 26:3a:35:20:c4:21:d3:da:f0:3c:25:00:f5:b7:c7:5c:3a:8f: 0c:21:9c:66:5b:42:7e:ce:d5:a4:13:c9:3d:b6:aa:b7:76:10: 0c:d6:8e:4a:61:5d:f4:2a:73:80:17:50:2f:54:8a:57:fa:77: 99:63:f3:df -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbkdJ+41V0VfiFXO7z3A7Ip3XXvEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzFDMDIzM0RDMDczMDJFODZEMTE0QUI3NzJBQjY1NjZF RDdGNUZCQjAeFw0yNTEwMzExMTQ2NDlaFw0yNTExMDMxNTAzNDlaMDMxMTAvBgNV BAMTKDc0RDRBMTExMkJBMzM4MjlBNjZERTEzQ0Y3MEI5NzUxRjg3QzVFMkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjavlKUeJDT9dTuWBKJ+ryrfxZ t43Z+RZiy4LYRqUtyrYpLg0rkUyX6TWX7zjvj7mOx8ii/FlsF5cfaz56xbrqdDHg gaT5HwpCQreApwRDn342JY6y+ocG74UicVWUkC4PKCy9RE8g6NjPpDV+hNlAn5q0 lA6S/ssyn71IG2bui499JY5Pl23EDfUgnQf8Fm1cJq1ijwSx2pwUKiJ21v7aauzK icbJjhrq4kpE7v7fGuvLZ/R8MZZdVlzDGcEL5u0uI746pWasSh9jcLheWjTBIpv/ Krob6k9v8gZWAWm2zDUfROhGVwxwf+O2luvepu+4ksi1TUX0J4XmwT/1xx+FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdNShESujOCmmbeE89wuXUfh8Xi8wHwYDVR0j BBgwFoAUwcAjPcBzAuhtEUq3cqtlZu1/X7swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z OGM5YzI1Mi1mN2NhLTRkZDUtODhmNi0yMmFkZGM4OTM0YjMvMC9DMUMwMjMzREMw NzMwMkU4NkQxMTRBQjc3MkFCNjU2NkVEN0Y1RkJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzFDMDIzM0RDMDczMDJFODZEMTE0QUI3NzJBQjY1NjZFRDdG NUZCQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzhjOWMyNTItZjdjYS00ZGQ1LTg4 ZjYtMjJhZGRjODkzNGIzLzAvQzFDMDIzM0RDMDczMDJFODZEMTE0QUI3NzJBQjY1 NjZFRDdGNUZCQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMMqkbsyuv+rLZ8FXRJsEG+JkEzM7mQbij76 pQD5zbhhL+FZCC4hmQlYJE+u2Nb2v6MH9tFovR50llZ+g8emjk2ZVQ+fNuvf9J9l OSrjTIimE8ZINdhHfJD/Agwi5IYxCy6RbxDvlzoGgP4hkyN5JWvqALaGsVF+1ZJh CwYcQwhRoCKTjD1pp8aw606Trshb6MSZfU9JPwLiM2x31Zy8V5p0s3pjSIMEc2FC 9G/0f/4emiE6e7ysFY/5y2RXWa6EMAxIjoIAsCY6NSDEIdPa8DwlAPW3x1w6jwwh nGZbQn7O1aQTyT22qrd2EAzWjkphXfQqc4AXUC9Uilf6d5lj898= -----END CERTIFICATE-----Generated at Sat Nov 1 18:50:19 2025 by rpki-client