$ rpki-client -vvf repo-rpki.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.mft File: 199D3D684ECEEFFBB17DD598A2688835A6F48CE7.mft (raw, json) Hash identifier: u+C0+62Tgq5dFSRIO/C14PYiDIgIkzMBwsqG8r9LXu8= Subject key identifier: 6F:28:BD:30:BA:86:C7:A7:53:BC:4A:09:C0:01:DB:DE:E1:99:35:9F Authority key identifier: 19:9D:3D:68:4E:CE:EF:FB:B1:7D:D5:98:A2:68:88:35:A6:F4:8C:E7 Certificate issuer: /CN=199D3D684ECEEFFBB17DD598A2688835A6F48CE7 Certificate serial: 41442EAC6F229B60988AF72071722080A4844DDE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.mft Manifest number: 0221 Signing time: Thu 30 Oct 2025 00:40:40 +0000 Manifest this update: Thu 30 Oct 2025 00:35:40 +0000 Manifest next update: Sun 02 Nov 2025 08:46:40 +0000 Files and hashes: 1: 3130332e3139302e35302e302f32342d3234203d3e2039333431.roa (hash: pIxViXZoycBV8A7CIi1fmiiQDu+3Ugcswhk6WPEdvN8=) 2: 199D3D684ECEEFFBB17DD598A2688835A6F48CE7.crl (hash: RMmr+DO4/Wlfsxtv+d5cIO9P42i0+D3VbYucHKftJWw=) 3: 3130332e3139302e35312e302f32342d3234203d3e2039333431.roa (hash: Alr3MmF3FComiYShgHs/7REcddrGc/AGrj1Fejo7KUI=) 4: 3130332e3139302e35302e302f32332d3233203d3e2039333431.roa (hash: b9POD8lIGTkSBPPG5UCEDWwytPa4KOI/X1gSRB0o140=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.crl rsync://repo-rpki.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Nov 2025 08:46:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:44:2e:ac:6f:22:9b:60:98:8a:f7:20:71:72:20:80:a4:84:4d:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=199D3D684ECEEFFBB17DD598A2688835A6F48CE7 Validity Not Before: Oct 30 00:35:40 2025 GMT Not After : Nov 2 08:46:40 2025 GMT Subject: CN=6F28BD30BA86C7A753BC4A09C001DBDEE199359F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:41:b5:da:7a:de:44:d9:d3:19:fe:76:95:f2: 6e:72:2d:05:ec:42:d2:61:63:3c:6d:5e:eb:3f:bb: 10:60:6c:d5:08:3a:f2:8b:5d:f6:b1:c4:42:85:1d: 57:6e:85:ad:79:1d:61:ee:d6:cb:f8:73:28:06:2d: 4f:94:23:1a:d0:f2:1a:60:8c:e5:09:43:7a:04:f9: a0:6e:c3:79:49:0a:47:7d:c9:ea:1e:c6:d1:a9:db: 20:be:e8:67:f1:d3:1b:03:af:92:57:68:bd:a9:28: 01:dc:dd:61:d1:2c:3e:6d:63:59:40:f3:a1:11:32: 4d:9a:91:7f:a5:54:3e:ff:15:f7:8c:7c:8a:67:de: e9:bf:5c:d3:e0:6d:ad:63:34:14:f9:48:02:bb:b1: 6a:64:66:1f:e1:33:87:4c:c9:cb:a0:49:f8:05:b6: ac:f3:52:fe:6e:42:91:fc:55:00:9e:00:7e:e0:10: 99:45:54:1c:0e:7f:7d:0d:5b:7d:4b:02:10:43:9b: 30:42:56:8a:47:88:94:0f:b4:99:27:0f:6b:fe:2f: 79:ed:3c:ac:bb:f5:06:0f:e1:e8:50:ca:03:9f:57: f6:53:f0:a1:77:d8:bd:12:30:a3:b4:04:d7:52:d4: 52:2d:0f:c9:dd:53:da:f5:43:74:b9:c9:b0:a5:39: 06:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:28:BD:30:BA:86:C7:A7:53:BC:4A:09:C0:01:DB:DE:E1:99:35:9F X509v3 Authority Key Identifier: keyid:19:9D:3D:68:4E:CE:EF:FB:B1:7D:D5:98:A2:68:88:35:A6:F4:8C:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:91:9c:72:41:9c:d8:ba:4e:4d:c2:31:5a:e9:25:21:27:14: 1b:0d:45:fa:09:86:be:2b:da:e8:da:dd:96:6a:72:18:21:a5: 6f:bc:6f:23:63:52:43:60:60:49:d6:67:0f:f5:fd:67:fc:f9: 65:ba:51:b9:d5:7e:4e:3d:98:52:62:bc:4a:f7:23:9b:eb:f3: 3d:c4:56:9a:a0:0e:67:88:0d:94:b0:37:31:64:f6:8c:6d:3e: 00:85:fb:02:1a:d3:79:d3:4c:a9:9c:62:26:1a:64:f7:b0:fc: b9:b5:1b:63:ef:be:08:1f:ad:0a:1c:49:41:bb:f3:af:0d:31: be:5c:01:c7:ac:f9:6f:e3:c5:b4:6a:ce:71:6e:a1:d1:67:e8: 50:38:cf:50:49:dd:e3:2d:ac:58:61:03:14:54:87:90:92:94: de:4f:54:08:13:9a:c4:d6:9a:bb:d5:28:63:06:c9:56:5e:95: ff:9a:d6:a0:ad:8e:59:8e:06:e8:0d:06:44:3a:36:db:52:d8: 7f:33:db:b4:f4:ab:bb:7e:7b:e0:06:90:73:c5:58:69:68:39: 61:f8:f0:88:b0:82:60:c2:f1:f6:7f:b2:86:bf:78:8c:e3:4e: 8a:e4:4e:7a:16:b5:17:41:99:eb:95:70:93:35:d5:1c:53:d6: aa:74:ff:0a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQUQurG8im2CYivcgcXIggKSETd4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTk5RDNENjg0RUNFRUZGQkIxN0RENTk4QTI2ODg4MzVB NkY0OENFNzAeFw0yNTEwMzAwMDM1NDBaFw0yNTExMDIwODQ2NDBaMDMxMTAvBgNV BAMTKDZGMjhCRDMwQkE4NkM3QTc1M0JDNEEwOUMwMDFEQkRFRTE5OTM1OUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcQbXaet5E2dMZ/naV8m5yLQXs QtJhYzxtXus/uxBgbNUIOvKLXfaxxEKFHVduha15HWHu1sv4cygGLU+UIxrQ8hpg jOUJQ3oE+aBuw3lJCkd9yeoextGp2yC+6Gfx0xsDr5JXaL2pKAHc3WHRLD5tY1lA 86ERMk2akX+lVD7/FfeMfIpn3um/XNPgba1jNBT5SAK7sWpkZh/hM4dMycugSfgF tqzzUv5uQpH8VQCeAH7gEJlFVBwOf30NW31LAhBDmzBCVopHiJQPtJknD2v+L3nt PKy79QYP4ehQygOfV/ZT8KF32L0SMKO0BNdS1FItD8ndU9r1Q3S5ybClOQa5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbyi9MLqGx6dTvEoJwAHb3uGZNZ8wHwYDVR0j BBgwFoAUGZ09aE7O7/uxfdWYomiINab0jOcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NTgzODNlMi0yMDZjLTRiNzQtYmE0YS1jZDhhNGQ3Y2Q4NjEvMC8xOTlEM0Q2ODRF Q0VFRkZCQjE3REQ1OThBMjY4ODgzNUE2RjQ4Q0U3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTk5RDNENjg0RUNFRUZGQkIxN0RENTk4QTI2ODg4MzVBNkY0 OENFNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjU4MzgzZTItMjA2Yy00Yjc0LWJh NGEtY2Q4YTRkN2NkODYxLzAvMTk5RDNENjg0RUNFRUZGQkIxN0RENTk4QTI2ODg4 MzVBNkY0OENFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABqRnHJBnNi6Tk3CMVrpJSEnFBsNRfoJhr4r 2uja3ZZqchghpW+8byNjUkNgYEnWZw/1/Wf8+WW6UbnVfk49mFJivEr3I5vr8z3E VpqgDmeIDZSwNzFk9oxtPgCF+wIa03nTTKmcYiYaZPew/Lm1G2PvvggfrQocSUG7 868NMb5cAces+W/jxbRqznFuodFn6FA4z1BJ3eMtrFhhAxRUh5CSlN5PVAgTmsTW mrvVKGMGyVZelf+a1qCtjlmOBugNBkQ6NttS2H8z27T0q7t+e+AGkHPFWGloOWH4 8IiwgmDC8fZ/soa/eIzjTorkTnoWtRdBmeuVcJM11RxT1qp0/wo= -----END CERTIFICATE-----Generated at Thu Oct 30 15:03:44 2025 by rpki-client