
$ rpki-client -vvf repo-rpki.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/229F9618AE3F0667EC17C977F266B2BE74C81AB7.mft
File: 229F9618AE3F0667EC17C977F266B2BE74C81AB7.mft (raw, json)
Hash identifier: DoNdyNQEAIOGb/vxWdNcAD7hwczj8aVYy6rjxkomfbM=
Subject key identifier: AF:89:C2:5F:24:5C:24:4C:2F:E2:EE:0C:CC:77:3F:65:88:5E:AC:7F
Authority key identifier: 22:9F:96:18:AE:3F:06:67:EC:17:C9:77:F2:66:B2:BE:74:C8:1A:B7
Certificate issuer: /CN=229F9618AE3F0667EC17C977F266B2BE74C81AB7
Certificate serial: 305C6E7A69FD0C58810FC419AD213D020A033824
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229F9618AE3F0667EC17C977F266B2BE74C81AB7.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/229F9618AE3F0667EC17C977F266B2BE74C81AB7.mft
Manifest number: 0532
Signing time: Mon 27 Oct 2025 15:11:49 +0000
Manifest this update: Mon 27 Oct 2025 15:06:49 +0000
Manifest next update: Thu 30 Oct 2025 18:51:49 +0000
Files and hashes: 1: 3130332e3130342e3133342e302f32342d3234203d3e20313333383233.roa (hash: L9PlBnHs/i4t9NLRoSomC1O2F1YqU8jz1M3b0qQhUUw=)
2: 3130332e3130342e3133322e302f32342d3234203d3e20313333383233.roa (hash: hNHUUdaz/xmcgWweg8dc6qW4ZUh/HEb8USitKT+fel0=)
3: 34352e3131362e3135372e302f32342d3234203d3e20313333383233.roa (hash: murX+k5R8h8ESiT+QSuCpzrPj9+7vb21yxp17P+JmVI=)
4: 323430373a646630303a313a3a2f34382d3438203d3e20313333383233.roa (hash: /OpJo01cDRJlGfeBvyqLHyVTpWA1fZyMWTJSJbd+gCM=)
5: 3130332e3130342e3133332e302f32342d3234203d3e20313333383233.roa (hash: nHLhFUO3/d1KOlnJCoDhfh5DYlPgmeAohfDNtzLOH9U=)
6: 34352e3131362e3135362e302f32342d3234203d3e20313333383233.roa (hash: gvli+HahlWwpXT6MXiB6a1x0yRZFhPDWq/40wV3mRrM=)
7: 3130332e3130342e3133352e302f32342d3234203d3e20313333383233.roa (hash: g58vS0uRqifjFt5po4KOpHYFCF7u3ZSdJUV7sz9xKFc=)
8: 3130332e3130342e3133322e302f32322d3234203d3e20313333383233.roa (hash: t0Vruq6Bebds9v5l8uxecejF/a/jD2OLoFvWrnd+8qs=)
9: 34352e3131362e3135362e302f32322d3234203d3e20313333383233.roa (hash: GS0aH+aUalB2W4NZhY06VBijkeZAuZQtiCtdElAwgAA=)
10: 3130332e35342e39332e302f32342d3234203d3e20313333383233.roa (hash: iU0rA2I2pdwjPlY87B+mW81OhT+cYHrzR6Mi5MNimIA=)
11: 3130332e35342e39342e302f32342d3234203d3e20313333383233.roa (hash: zOhjFfZYvz6en5SX0bt2bwJN0UbIougWGwAhrOcMWOE=)
12: 3130332e35342e39322e302f32342d3234203d3e203338353136.roa (hash: OmHs2Hv0f8cTnPoIf5TvFj4+r1fzYXa48KbgCWe5XYI=)
13: 229F9618AE3F0667EC17C977F266B2BE74C81AB7.crl (hash: Ii5F8w9jM+v3OQKW9O8bMislwwcv+cVPs1XJeHA5Hio=)
14: 34352e3131362e3135392e302f32342d3234203d3e20313333383233.roa (hash: 9vKmERWi+/y+esKTTFswCbGkU/rG05yleJxXiPBZcSM=)
15: 323430373a646630303a3a2f34382d3438203d3e203338353136.roa (hash: mKxNfIZaogpqoGD1v/HbTG1n+WMSkSPY8mtudPgnTgU=)
16: 34352e3131362e3135382e302f32342d3234203d3e20313333383233.roa (hash: ULCLP9kZZOxNVrlIu58ZSD+j7UQRNK4nHv2XMRgGLuc=)
17: 3130332e35342e39352e302f32342d3234203d3e20313333383233.roa (hash: vAWo/sMha9Axd+Jk89itnwJrd2zfg2QgA6Bw5YCPuyc=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/229F9618AE3F0667EC17C977F266B2BE74C81AB7.crl
rsync://repo-rpki.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/229F9618AE3F0667EC17C977F266B2BE74C81AB7.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229F9618AE3F0667EC17C977F266B2BE74C81AB7.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Oct 2025 18:51:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:5c:6e:7a:69:fd:0c:58:81:0f:c4:19:ad:21:3d:02:0a:03:38:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=229F9618AE3F0667EC17C977F266B2BE74C81AB7
Validity
Not Before: Oct 27 15:06:49 2025 GMT
Not After : Oct 30 18:51:49 2025 GMT
Subject: CN=AF89C25F245C244C2FE2EE0CCC773F65885EAC7F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:32:f3:c1:d3:e4:14:da:19:27:a0:ae:1b:a8:
57:2e:a3:5e:c2:66:e5:8e:68:ac:9c:ec:b0:17:96:
31:f7:e5:c9:06:28:9b:ad:02:4a:8b:f0:90:ba:a9:
c2:c9:eb:9c:61:06:c0:65:4d:0c:bf:ee:16:18:7f:
36:77:24:a7:ac:17:fb:fd:06:f7:6f:b6:b4:b9:a4:
8f:7f:e2:4c:07:44:06:29:ea:44:8b:49:c0:a1:ac:
16:5c:1a:b1:a3:31:7e:b0:bc:c0:11:7f:6f:a3:da:
7e:dc:f5:62:2b:87:58:e2:0b:80:ca:83:da:46:5f:
f8:76:f7:97:99:45:42:8d:82:31:e3:ec:9d:c7:4c:
db:40:08:22:19:0a:ab:ca:b7:89:a1:a9:69:2f:2d:
08:d7:3f:de:40:47:75:17:c6:d5:ad:41:68:8b:de:
d8:aa:4e:9e:f6:bb:1b:1a:e7:fe:a8:c8:c7:df:60:
ce:da:02:d7:95:79:c0:0b:f8:cc:8a:35:17:e0:ac:
1d:76:b4:e5:61:8f:d0:57:67:2a:a1:aa:80:e1:84:
d3:65:90:64:ee:0d:48:77:35:d3:07:a3:0c:85:9d:
02:5b:70:e9:f7:54:61:c5:e6:0a:f9:28:bc:f0:d2:
77:35:80:71:23:ed:29:ed:ec:3a:bf:08:71:e8:b9:
8f:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:89:C2:5F:24:5C:24:4C:2F:E2:EE:0C:CC:77:3F:65:88:5E:AC:7F
X509v3 Authority Key Identifier:
keyid:22:9F:96:18:AE:3F:06:67:EC:17:C9:77:F2:66:B2:BE:74:C8:1A:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/229F9618AE3F0667EC17C977F266B2BE74C81AB7.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229F9618AE3F0667EC17C977F266B2BE74C81AB7.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/229F9618AE3F0667EC17C977F266B2BE74C81AB7.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:7a:2e:ff:d2:fd:ce:96:c8:5c:c3:14:c3:ca:b5:20:2e:1e:
76:73:f0:a1:c1:d0:b4:d2:3d:c5:1b:f0:c4:17:aa:6f:2b:b8:
9f:07:85:77:a8:c7:b1:d0:fb:8e:62:d7:66:8b:98:32:01:16:
d9:6e:d2:e3:83:de:17:f8:83:e5:46:8d:c3:7c:9c:59:8e:88:
2a:73:a7:a3:15:cf:4d:66:c5:2b:14:f7:61:90:95:b6:e3:41:
49:e7:9f:18:82:6a:ab:e3:15:de:84:48:e4:2d:74:c2:12:2d:
e6:c8:50:a4:5b:03:c2:bf:e8:dc:46:ea:3a:73:07:e1:a8:6c:
84:a6:a4:61:72:ea:d0:cd:80:99:80:7f:e3:d9:95:7e:fe:e6:
8f:0c:c3:87:0c:32:1b:7a:63:d9:a7:c8:ab:23:79:e1:04:fa:
ee:cc:1a:13:01:09:31:39:1f:6e:b6:54:9c:7f:b5:06:7b:5c:
75:0f:f8:5a:85:5a:41:bf:b9:4e:3c:8e:31:33:cc:b7:20:61:
00:24:55:72:fa:4d:9b:95:12:4b:3b:cd:4f:57:73:e6:3f:37:
c1:36:30:65:6d:5d:87:7d:17:63:2c:da:e7:b8:30:37:12:c9:
a8:06:34:0b:70:1d:28:b1:36:ba:20:7e:12:31:43:e0:82:83:
5e:66:32:92
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUMFxuemn9DFiBD8QZrSE9AgoDOCQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjI5Rjk2MThBRTNGMDY2N0VDMTdDOTc3RjI2NkIyQkU3
NEM4MUFCNzAeFw0yNTEwMjcxNTA2NDlaFw0yNTEwMzAxODUxNDlaMDMxMTAvBgNV
BAMTKEFGODlDMjVGMjQ1QzI0NEMyRkUyRUUwQ0NDNzczRjY1ODg1RUFDN0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJMvPB0+QU2hknoK4bqFcuo17C
ZuWOaKyc7LAXljH35ckGKJutAkqL8JC6qcLJ65xhBsBlTQy/7hYYfzZ3JKesF/v9
BvdvtrS5pI9/4kwHRAYp6kSLScChrBZcGrGjMX6wvMARf2+j2n7c9WIrh1jiC4DK
g9pGX/h295eZRUKNgjHj7J3HTNtACCIZCqvKt4mhqWkvLQjXP95AR3UXxtWtQWiL
3tiqTp72uxsa5/6oyMffYM7aAteVecAL+MyKNRfgrB12tOVhj9BXZyqhqoDhhNNl
kGTuDUh3NdMHowyFnQJbcOn3VGHF5gr5KLzw0nc1gHEj7Snt7Dq/CHHouY+bAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUr4nCXyRcJEwv4u4MzHc/ZYherH8wHwYDVR0j
BBgwFoAUIp+WGK4/BmfsF8l38mayvnTIGrcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80
NDc5MWIxZi02ZGE5LTQwMGQtOGIxNC05OTJhYWU2Mzc0NmMvMC8yMjlGOTYxOEFF
M0YwNjY3RUMxN0M5NzdGMjY2QjJCRTc0QzgxQUI3LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMjI5Rjk2MThBRTNGMDY2N0VDMTdDOTc3RjI2NkIyQkU3NEM4
MUFCNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDQ3OTFiMWYtNmRhOS00MDBkLThi
MTQtOTkyYWFlNjM3NDZjLzAvMjI5Rjk2MThBRTNGMDY2N0VDMTdDOTc3RjI2NkIy
QkU3NEM4MUFCNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAAV6Lv/S/c6WyFzDFMPKtSAuHnZz8KHB0LTS
PcUb8MQXqm8ruJ8HhXeox7HQ+45i12aLmDIBFtlu0uOD3hf4g+VGjcN8nFmOiCpz
p6MVz01mxSsU92GQlbbjQUnnnxiCaqvjFd6ESOQtdMISLebIUKRbA8K/6NxG6jpz
B+GobISmpGFy6tDNgJmAf+PZlX7+5o8Mw4cMMht6Y9mnyKsjeeEE+u7MGhMBCTE5
H262VJx/tQZ7XHUP+FqFWkG/uU48jjEzzLcgYQAkVXL6TZuVEks7zU9Xc+Y/N8E2
MGVtXYd9F2Ms2ue4MDcSyagGNAtwHSixNrogfhIxQ+CCg15mMpI=
-----END CERTIFICATE-----
Generated at Tue Oct 28 08:07:12 2025 by rpki-client