$ rpki-client -vvf repo-rpki.idnic.net/repo/a56eccb7-e917-40f5-acee-03d68be5fd97/0/2246015FFF2FC55FEFB9C44A8AD416B55FA5E73F.mft File: 2246015FFF2FC55FEFB9C44A8AD416B55FA5E73F.mft (raw, json) Hash identifier: utLtPTa0L4NiIHu24LbYhlr525y9HbESPV0fxr0+Euo= Subject key identifier: 7E:92:02:0A:8B:BA:D6:53:82:0C:44:1A:EE:F4:B3:FB:47:5F:C2:7F Authority key identifier: 22:46:01:5F:FF:2F:C5:5F:EF:B9:C4:4A:8A:D4:16:B5:5F:A5:E7:3F Certificate issuer: /CN=2246015FFF2FC55FEFB9C44A8AD416B55FA5E73F Certificate serial: 399940186F2EA93774446661EDD97C5BC7476BEA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2246015FFF2FC55FEFB9C44A8AD416B55FA5E73F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a56eccb7-e917-40f5-acee-03d68be5fd97/0/2246015FFF2FC55FEFB9C44A8AD416B55FA5E73F.mft Manifest number: F4 Signing time: Sat 18 Oct 2025 11:32:05 +0000 Manifest this update: Sat 18 Oct 2025 11:27:05 +0000 Manifest next update: Tue 21 Oct 2025 21:47:05 +0000 Files and hashes: 1: 2246015FFF2FC55FEFB9C44A8AD416B55FA5E73F.crl (hash: 9NRg7oENBdPqkg0k0suj+E/Yhe1Z7vVMWahB2fEnXkk=) 2: 3135372e31352e3134352e302f32342d3234203d3e20313532333736.roa (hash: bbNh5IhzL1rNJLyhy7hiFZkFXcVeHuBdSs69IB8xXPA=) 3: 3135372e31352e3134342e302f32332d3233203d3e20313532333736.roa (hash: cWyOKWctYlbVooNMHms1H1vDLL9MPLPoRH1H2TKVIAo=) 4: 3135372e31352e3134342e302f32342d3234203d3e20313532333736.roa (hash: SBNjwJJYCJHvL2QmCRz+yZ8PvTB10n4BHiXO1+hrRxM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a56eccb7-e917-40f5-acee-03d68be5fd97/0/2246015FFF2FC55FEFB9C44A8AD416B55FA5E73F.crl rsync://repo-rpki.idnic.net/repo/a56eccb7-e917-40f5-acee-03d68be5fd97/0/2246015FFF2FC55FEFB9C44A8AD416B55FA5E73F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2246015FFF2FC55FEFB9C44A8AD416B55FA5E73F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 21:47:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:99:40:18:6f:2e:a9:37:74:44:66:61:ed:d9:7c:5b:c7:47:6b:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2246015FFF2FC55FEFB9C44A8AD416B55FA5E73F Validity Not Before: Oct 18 11:27:05 2025 GMT Not After : Oct 21 21:47:05 2025 GMT Subject: CN=7E92020A8BBAD653820C441AEEF4B3FB475FC27F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:0e:ae:bd:87:72:8a:71:0b:c9:9b:4f:50:0e: 48:0a:85:db:55:e2:eb:a8:40:1b:dc:e7:30:d3:91: 8e:df:bf:0d:90:a9:9e:6d:26:1b:b1:e7:89:87:cb: 82:77:5a:ff:44:f4:13:f7:2c:41:ed:cd:9c:f2:9c: 09:c8:f6:4f:ca:05:c8:d5:99:42:3a:6b:4b:b0:72: 10:f5:66:7c:c6:f6:99:cd:11:91:28:5c:b0:cb:63: a6:72:f5:48:9f:cf:2e:f3:cb:a4:6f:0e:42:7e:85: 18:f2:d1:02:85:e5:d5:de:39:ab:87:fb:95:f0:dc: f7:52:f2:d3:1b:29:4b:c2:1e:dd:c5:a6:39:4d:f4: f8:84:c6:56:b2:af:60:17:b9:93:d3:e6:f4:a1:73: 56:03:62:2c:2d:71:c3:84:3a:40:21:76:51:91:6d: 01:0d:26:8d:8d:ac:0a:50:17:0a:f5:49:fc:a7:c8: 47:61:39:c0:e3:14:56:7b:66:76:b9:6a:1c:ed:ed: a7:8e:d1:43:6d:e1:af:de:29:43:f1:5f:10:3e:b5: a4:66:0f:55:9b:07:d0:54:b5:b6:de:9f:0b:00:2f: 6a:8f:0a:28:24:99:01:65:69:0a:ca:28:3f:ed:33: 6f:83:a9:70:aa:da:01:5a:5d:b6:a8:90:cc:2c:eb: 43:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:92:02:0A:8B:BA:D6:53:82:0C:44:1A:EE:F4:B3:FB:47:5F:C2:7F X509v3 Authority Key Identifier: keyid:22:46:01:5F:FF:2F:C5:5F:EF:B9:C4:4A:8A:D4:16:B5:5F:A5:E7:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a56eccb7-e917-40f5-acee-03d68be5fd97/0/2246015FFF2FC55FEFB9C44A8AD416B55FA5E73F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2246015FFF2FC55FEFB9C44A8AD416B55FA5E73F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a56eccb7-e917-40f5-acee-03d68be5fd97/0/2246015FFF2FC55FEFB9C44A8AD416B55FA5E73F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:e6:c6:53:5b:99:76:b8:ef:be:dc:31:ef:84:0a:09:26:07: c1:af:b4:4c:98:57:a6:dc:d2:00:70:d0:6f:6c:9e:eb:10:9b: 7b:95:87:39:46:c2:d4:71:21:8c:55:62:c4:c2:76:5b:83:3f: 2b:3d:ea:b0:b7:02:9f:60:8d:82:f8:1d:c4:e2:aa:c2:a5:62: e9:bf:16:99:d1:c1:49:79:24:f9:65:40:12:5a:34:e3:32:6b: 97:be:d2:7a:5d:04:3b:90:33:e5:c0:db:10:3d:6a:6c:1c:8a: 53:03:cf:18:91:bc:1b:38:4f:13:61:9d:5f:a2:f4:d2:61:01: 9a:d4:be:bb:d6:c6:ff:e0:b7:a2:59:dc:6f:8c:5c:f8:dc:91: f2:b8:3d:a0:eb:33:ff:2d:26:34:5c:1d:1c:99:68:90:6e:58: d4:72:e3:7c:1c:7f:70:c2:8f:93:ed:20:6a:ed:c4:7e:be:28: 4f:9f:40:16:95:18:d7:4a:bd:73:8c:9c:80:6b:14:f0:4d:68: 95:70:6a:77:e3:3e:e7:7f:53:df:86:42:b7:c4:dc:1c:ed:ac: e9:59:db:7d:1d:4c:a0:ba:f5:ba:4c:82:76:9c:a2:0c:83:e3: 40:61:81:8c:5f:3c:4d:8b:7c:b5:55:66:dd:99:e3:97:99:bc: 2f:31:3a:bd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOZlAGG8uqTd0RGZh7dl8W8dHa+owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjI0NjAxNUZGRjJGQzU1RkVGQjlDNDRBOEFENDE2QjU1 RkE1RTczRjAeFw0yNTEwMTgxMTI3MDVaFw0yNTEwMjEyMTQ3MDVaMDMxMTAvBgNV BAMTKDdFOTIwMjBBOEJCQUQ2NTM4MjBDNDQxQUVFRjRCM0ZCNDc1RkMyN0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1Dq69h3KKcQvJm09QDkgKhdtV 4uuoQBvc5zDTkY7fvw2QqZ5tJhux54mHy4J3Wv9E9BP3LEHtzZzynAnI9k/KBcjV mUI6a0uwchD1ZnzG9pnNEZEoXLDLY6Zy9Uifzy7zy6RvDkJ+hRjy0QKF5dXeOauH +5Xw3PdS8tMbKUvCHt3FpjlN9PiExlayr2AXuZPT5vShc1YDYiwtccOEOkAhdlGR bQENJo2NrApQFwr1SfynyEdhOcDjFFZ7Zna5ahzt7aeO0UNt4a/eKUPxXxA+taRm D1WbB9BUtbbenwsAL2qPCigkmQFlaQrKKD/tM2+DqXCq2gFaXbaokMws60MdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfpICCou61lOCDEQa7vSz+0dfwn8wHwYDVR0j BBgwFoAUIkYBX/8vxV/vucRKitQWtV+l5z8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NTZlY2NiNy1lOTE3LTQwZjUtYWNlZS0wM2Q2OGJlNWZkOTcvMC8yMjQ2MDE1RkZG MkZDNTVGRUZCOUM0NEE4QUQ0MTZCNTVGQTVFNzNGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMjI0NjAxNUZGRjJGQzU1RkVGQjlDNDRBOEFENDE2QjU1RkE1 RTczRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTU2ZWNjYjctZTkxNy00MGY1LWFj ZWUtMDNkNjhiZTVmZDk3LzAvMjI0NjAxNUZGRjJGQzU1RkVGQjlDNDRBOEFENDE2 QjU1RkE1RTczRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH7mxlNbmXa4777cMe+ECgkmB8GvtEyYV6bc 0gBw0G9snusQm3uVhzlGwtRxIYxVYsTCdluDPys96rC3Ap9gjYL4HcTiqsKlYum/ FpnRwUl5JPllQBJaNOMya5e+0npdBDuQM+XA2xA9amwcilMDzxiRvBs4TxNhnV+i 9NJhAZrUvrvWxv/gt6JZ3G+MXPjckfK4PaDrM/8tJjRcHRyZaJBuWNRy43wcf3DC j5PtIGrtxH6+KE+fQBaVGNdKvXOMnIBrFPBNaJVwanfjPud/U9+GQrfE3BztrOlZ 230dTKC69bpMgnacogyD40BhgYxfPE2LfLVVZt2Z45eZvC8xOr0= -----END CERTIFICATE-----Generated at Mon Oct 20 23:58:30 2025 by rpki-client