$ rpki-client -vvf repo-rpki.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/4EE959798755CD4BA407AEB6EBDD3100261EAA55.mft File: 4EE959798755CD4BA407AEB6EBDD3100261EAA55.mft (raw, json) Hash identifier: hxBd+MUhuIzhVwY7OYDGZrgeG2M7G1Ag+w/wZ0zp5tU= Subject key identifier: 34:23:0F:46:1D:89:2D:9F:10:9D:0D:CC:12:52:E7:EE:ED:11:E5:83 Authority key identifier: 4E:E9:59:79:87:55:CD:4B:A4:07:AE:B6:EB:DD:31:00:26:1E:AA:55 Certificate issuer: /CN=4EE959798755CD4BA407AEB6EBDD3100261EAA55 Certificate serial: 5EFCE0A37E154DAED07E459FD552D42AEB1C5240 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4EE959798755CD4BA407AEB6EBDD3100261EAA55.cer Subject info access: rsync://repo-rpki.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/4EE959798755CD4BA407AEB6EBDD3100261EAA55.mft Manifest number: 033B Signing time: Mon 20 Oct 2025 00:02:13 +0000 Manifest this update: Sun 19 Oct 2025 23:57:13 +0000 Manifest next update: Thu 23 Oct 2025 07:38:13 +0000 Files and hashes: 1: 3130332e3136382e3235302e302f32332d3233203d3e20313432333237.roa (hash: ik9rrWYA9D4GBjhetTFAP4k0XQKOPTBWebSo28sOHb8=) 2: 3130332e3136382e3235302e302f32342d3234203d3e20313432333237.roa (hash: vUWQBZ0/r7vI2v8KbhMfVsf4gR9LmNP6bUrY9mudCfU=) 3: 4EE959798755CD4BA407AEB6EBDD3100261EAA55.crl (hash: TJfxAlQfrDCot57rMzREG3OAR9YMQMwO15Lmr5hm+CA=) 4: 3130332e3136382e3235312e302f32342d3234203d3e20313432333237.roa (hash: mP3dXLTjkrRr0prh2Jzplj5CirAMZtpiVu7s//8AY3w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/4EE959798755CD4BA407AEB6EBDD3100261EAA55.crl rsync://repo-rpki.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/4EE959798755CD4BA407AEB6EBDD3100261EAA55.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4EE959798755CD4BA407AEB6EBDD3100261EAA55.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 07:38:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:fc:e0:a3:7e:15:4d:ae:d0:7e:45:9f:d5:52:d4:2a:eb:1c:52:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4EE959798755CD4BA407AEB6EBDD3100261EAA55 Validity Not Before: Oct 19 23:57:13 2025 GMT Not After : Oct 23 07:38:13 2025 GMT Subject: CN=34230F461D892D9F109D0DCC1252E7EEED11E583 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:76:02:82:f9:54:57:a6:db:55:ff:e6:cc:65: 02:23:4d:03:b0:ef:db:30:09:6e:11:9c:ed:0c:67: 9f:6c:bd:2d:16:ea:42:6e:fe:5b:b3:64:74:a4:60: b8:b4:28:d1:64:a4:4d:22:95:ac:57:bc:50:a5:09: 9c:5f:8e:8f:3a:e3:65:14:02:6d:fc:9b:e5:f4:db: 53:b7:10:90:be:8b:72:4d:d8:fa:e8:15:61:b8:34: f6:b6:05:d4:a6:b9:e9:c2:2a:1d:d8:81:30:f8:8d: 8d:0a:8a:d6:ef:16:42:d3:de:69:59:66:8b:97:13: 17:4f:3b:0f:84:1a:21:d4:3e:f0:e6:bb:52:c0:e0: 9e:55:09:4d:f1:19:c1:ae:bb:bd:b6:52:1e:46:71: da:76:34:77:4e:db:f0:b2:4e:76:54:dd:11:07:3a: 89:0e:f1:87:50:22:ee:c6:c6:12:ae:45:b1:75:11: cb:8d:1c:91:ce:9d:ed:be:64:97:53:6e:ce:9e:e1: 81:d1:e4:cd:41:22:6d:14:26:3b:2d:69:2f:85:2d: 37:db:46:44:3f:3d:59:b3:44:61:9c:8f:29:67:e4: 4b:04:15:74:1c:4b:ef:fb:e0:3d:12:71:1c:c7:27: 03:a3:63:4f:45:35:25:60:7e:5e:64:cb:81:b6:71: 57:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:23:0F:46:1D:89:2D:9F:10:9D:0D:CC:12:52:E7:EE:ED:11:E5:83 X509v3 Authority Key Identifier: keyid:4E:E9:59:79:87:55:CD:4B:A4:07:AE:B6:EB:DD:31:00:26:1E:AA:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/4EE959798755CD4BA407AEB6EBDD3100261EAA55.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4EE959798755CD4BA407AEB6EBDD3100261EAA55.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/4EE959798755CD4BA407AEB6EBDD3100261EAA55.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:76:cb:b4:83:36:29:8c:8a:d8:7c:91:ce:86:5e:27:d8:14: 8c:8a:8a:92:46:ae:e3:4e:51:7f:6f:3f:52:4e:49:01:d8:37: 0e:b0:5d:a3:82:c4:36:03:62:f0:c7:e6:d4:fc:9b:2e:30:0a: e2:e3:d6:c6:64:a3:03:06:55:a8:95:09:4a:c6:b1:33:08:10: b9:8e:2b:0a:74:f3:bd:a9:3c:0e:2f:08:d7:e8:8d:30:bc:9f: 0f:da:ab:e3:8e:55:f9:5c:6a:7b:d1:83:89:8f:f4:15:88:b6: 8f:73:7b:ff:5f:3e:6e:13:cb:2a:ab:96:c8:9d:e0:a8:5c:65: c2:a7:a3:12:08:c6:86:a6:76:09:b8:2c:84:67:b7:b7:44:9a: 1a:69:76:f5:ae:e0:13:84:cc:2c:2a:ba:43:f3:8e:76:51:51: 63:74:a6:35:56:3f:77:2d:a7:b5:fd:e5:ac:82:19:3b:c4:c2: 0a:9b:eb:d4:de:0c:df:2f:3b:8c:16:5f:f1:d8:37:64:b0:f1: 17:30:92:5c:0a:cb:78:ec:ba:75:be:e8:8b:51:d2:29:0b:3e: eb:5f:ce:da:62:1c:e0:d9:e9:d6:9a:58:7a:5f:61:20:41:90: 7c:79:99:5c:92:06:e7:ed:69:04:54:c7:65:c6:6a:7f:7c:22: 10:fa:8d:5c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXvzgo34VTa7QfkWf1VLUKuscUkAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEVFOTU5Nzk4NzU1Q0Q0QkE0MDdBRUI2RUJERDMxMDAy NjFFQUE1NTAeFw0yNTEwMTkyMzU3MTNaFw0yNTEwMjMwNzM4MTNaMDMxMTAvBgNV BAMTKDM0MjMwRjQ2MUQ4OTJEOUYxMDlEMERDQzEyNTJFN0VFRUQxMUU1ODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2dgKC+VRXpttV/+bMZQIjTQOw 79swCW4RnO0MZ59svS0W6kJu/luzZHSkYLi0KNFkpE0ilaxXvFClCZxfjo8642UU Am38m+X021O3EJC+i3JN2ProFWG4NPa2BdSmuenCKh3YgTD4jY0KitbvFkLT3mlZ ZouXExdPOw+EGiHUPvDmu1LA4J5VCU3xGcGuu722Uh5Gcdp2NHdO2/CyTnZU3REH OokO8YdQIu7GxhKuRbF1EcuNHJHOne2+ZJdTbs6e4YHR5M1BIm0UJjstaS+FLTfb RkQ/PVmzRGGcjyln5EsEFXQcS+/74D0ScRzHJwOjY09FNSVgfl5ky4G2cVc9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNCMPRh2JLZ8QnQ3MElLn7u0R5YMwHwYDVR0j BBgwFoAUTulZeYdVzUukB662690xACYeqlUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MzhkNTgwYi00NTJlLTQyZDctYjA0MS05MDFkYzMzZDY4NTcvMC80RUU5NTk3OTg3 NTVDRDRCQTQwN0FFQjZFQkREMzEwMDI2MUVBQTU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEVFOTU5Nzk4NzU1Q0Q0QkE0MDdBRUI2RUJERDMxMDAyNjFF QUE1NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDM4ZDU4MGItNDUyZS00MmQ3LWIw NDEtOTAxZGMzM2Q2ODU3LzAvNEVFOTU5Nzk4NzU1Q0Q0QkE0MDdBRUI2RUJERDMx MDAyNjFFQUE1NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGd2y7SDNimMith8kc6GXifYFIyKipJGruNO UX9vP1JOSQHYNw6wXaOCxDYDYvDH5tT8my4wCuLj1sZkowMGVaiVCUrGsTMIELmO Kwp0872pPA4vCNfojTC8nw/aq+OOVflcanvRg4mP9BWIto9ze/9fPm4Tyyqrlsid 4KhcZcKnoxIIxoamdgm4LIRnt7dEmhppdvWu4BOEzCwqukPzjnZRUWN0pjVWP3ct p7X95ayCGTvEwgqb69TeDN8vO4wWX/HYN2Sw8RcwklwKy3jsunW+6ItR0ikLPutf ztpiHODZ6daaWHpfYSBBkHx5mVySBuftaQRUx2XGan98IhD6jVw= -----END CERTIFICATE-----Generated at Mon Oct 20 12:39:22 2025 by rpki-client