$ rpki-client -vvf repo-rpki.idnic.net/repo/12c511be-67a2-44c9-b182-a911ba95be00/0/4412C369832E86CF255C7255EB1ECA7938910246.mft File: 4412C369832E86CF255C7255EB1ECA7938910246.mft (raw, json) Hash identifier: oB19xm3dabCeim0KiR9+yrFDFbhSN1FNj/aWW/236Rc= Subject key identifier: E8:F5:BE:49:DA:EC:4A:0F:DC:AF:16:8E:39:92:C3:15:E3:6A:76:D4 Authority key identifier: 44:12:C3:69:83:2E:86:CF:25:5C:72:55:EB:1E:CA:79:38:91:02:46 Certificate issuer: /CN=4412C369832E86CF255C7255EB1ECA7938910246 Certificate serial: 49B41DA0E384D89456D5CC066EA68EE21AB5B251 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4412C369832E86CF255C7255EB1ECA7938910246.cer Subject info access: rsync://repo-rpki.idnic.net/repo/12c511be-67a2-44c9-b182-a911ba95be00/0/4412C369832E86CF255C7255EB1ECA7938910246.mft Manifest number: 04AB Signing time: Sun 19 Oct 2025 09:20:53 +0000 Manifest this update: Sun 19 Oct 2025 09:15:53 +0000 Manifest next update: Wed 22 Oct 2025 10:35:53 +0000 Files and hashes: 1: 323030313a6466353a353238303a3a2f34382d3438203d3e20313431313237.roa (hash: ytsbJoowjejam8im/CXHpxBx0NQjILkSC74yHsn7Jos=) 2: 3130332e3135382e3132312e302f32342d3234203d3e20313431313237.roa (hash: BsPjaPAJfoOsDEE1I3aoHNDcatuZ5kuXKVlMx6806B8=) 3: 4412C369832E86CF255C7255EB1ECA7938910246.crl (hash: pzXerVGC0+47b7EMUY6Ocay5vFQuhGTEeAtGXJkjSxw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/12c511be-67a2-44c9-b182-a911ba95be00/0/4412C369832E86CF255C7255EB1ECA7938910246.crl rsync://repo-rpki.idnic.net/repo/12c511be-67a2-44c9-b182-a911ba95be00/0/4412C369832E86CF255C7255EB1ECA7938910246.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4412C369832E86CF255C7255EB1ECA7938910246.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 10:35:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:b4:1d:a0:e3:84:d8:94:56:d5:cc:06:6e:a6:8e:e2:1a:b5:b2:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4412C369832E86CF255C7255EB1ECA7938910246 Validity Not Before: Oct 19 09:15:53 2025 GMT Not After : Oct 22 10:35:53 2025 GMT Subject: CN=E8F5BE49DAEC4A0FDCAF168E3992C315E36A76D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:f6:80:6d:10:8a:36:b2:80:b4:5a:c6:c3:9f: 51:58:5d:f9:ea:f4:22:11:0e:a0:5e:c7:a3:58:95: 6b:7b:48:18:30:dd:cf:20:8c:89:b3:9a:19:58:c5: 32:57:28:d6:b3:da:56:10:d5:4a:26:b1:21:b5:25: 9e:91:a0:1d:b2:4e:97:68:4d:41:75:d1:8e:5f:af: 7e:95:47:63:1f:44:f1:df:2d:9b:69:4e:95:f4:d2: 73:6d:4d:10:0d:c3:ac:a1:40:27:b5:29:51:05:bc: bd:61:dd:e2:b0:18:f4:5f:f2:ae:e1:51:b0:47:bc: ac:46:a4:d4:77:5a:c4:4c:80:cc:22:bb:93:e0:04: a3:1d:dc:ce:d8:d6:d8:82:0d:30:37:91:4a:5b:f9: 7b:41:9c:dd:28:18:9f:cf:53:a2:55:f0:dc:7b:7d: fd:73:e4:4c:dc:9d:74:9d:fb:24:30:c9:b8:6e:af: bc:84:ff:06:07:1c:77:da:9c:83:28:92:15:79:d9: e1:d5:cb:f1:21:02:6c:2b:3f:dc:5e:5e:99:f7:ae: ad:43:9f:4c:f8:45:4d:5d:6b:35:6a:c6:88:69:f9: d4:8c:60:0c:d7:c4:29:ac:94:c2:69:4c:cc:92:bb: 65:5c:1f:e6:94:41:c9:d8:0a:8d:ce:a9:dd:fe:8a: 44:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:F5:BE:49:DA:EC:4A:0F:DC:AF:16:8E:39:92:C3:15:E3:6A:76:D4 X509v3 Authority Key Identifier: keyid:44:12:C3:69:83:2E:86:CF:25:5C:72:55:EB:1E:CA:79:38:91:02:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/12c511be-67a2-44c9-b182-a911ba95be00/0/4412C369832E86CF255C7255EB1ECA7938910246.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4412C369832E86CF255C7255EB1ECA7938910246.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/12c511be-67a2-44c9-b182-a911ba95be00/0/4412C369832E86CF255C7255EB1ECA7938910246.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:ba:11:be:72:23:78:2d:b1:c5:c2:ba:0d:57:3d:42:6b:3e: 03:ab:7b:d5:b9:77:c7:51:fd:90:64:11:f9:30:2b:18:d5:fc: d1:be:eb:7a:2d:71:c5:4f:eb:00:8d:36:22:9b:7b:98:ac:44: 16:c8:73:17:3f:1f:65:cb:6c:05:93:f1:fa:c9:86:fc:3f:c3: 4e:73:a9:91:31:37:30:cd:98:13:ff:7b:d4:02:8c:99:64:e8: 16:dd:50:46:e8:fd:af:c3:17:92:7c:70:a0:6a:cd:ea:e0:9b: 69:16:31:57:93:aa:de:68:ed:d0:cf:10:84:aa:b7:88:38:c3: 08:dd:1a:58:75:2a:38:cb:f1:c0:08:93:ec:c9:bb:35:3d:93: eb:a4:64:1f:79:1d:55:a8:34:8d:f7:13:0f:15:68:28:0b:50: b6:ac:41:ec:0f:98:e8:3c:a0:47:4a:52:f0:6b:d6:1b:39:f9: 4c:53:68:6f:ce:f4:f4:14:c0:dc:a8:32:b3:ef:e8:29:c6:40: 5c:c7:36:24:a0:0b:52:84:6c:45:a9:05:c0:0c:62:84:70:46: 48:91:49:a4:7a:72:c9:e8:28:64:69:65:d4:f9:1c:af:ea:5b: cf:df:fc:7f:8a:83:90:b0:b6:1f:b7:09:d5:58:c9:60:e0:e1: 18:98:f0:c1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSbQdoOOE2JRW1cwGbqaO4hq1slEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDQxMkMzNjk4MzJFODZDRjI1NUM3MjU1RUIxRUNBNzkz ODkxMDI0NjAeFw0yNTEwMTkwOTE1NTNaFw0yNTEwMjIxMDM1NTNaMDMxMTAvBgNV BAMTKEU4RjVCRTQ5REFFQzRBMEZEQ0FGMTY4RTM5OTJDMzE1RTM2QTc2RDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDf9oBtEIo2soC0WsbDn1FYXfnq 9CIRDqBex6NYlWt7SBgw3c8gjImzmhlYxTJXKNaz2lYQ1UomsSG1JZ6RoB2yTpdo TUF10Y5fr36VR2MfRPHfLZtpTpX00nNtTRANw6yhQCe1KVEFvL1h3eKwGPRf8q7h UbBHvKxGpNR3WsRMgMwiu5PgBKMd3M7Y1tiCDTA3kUpb+XtBnN0oGJ/PU6JV8Nx7 ff1z5EzcnXSd+yQwybhur7yE/wYHHHfanIMokhV52eHVy/EhAmwrP9xeXpn3rq1D n0z4RU1dazVqxohp+dSMYAzXxCmslMJpTMySu2VcH+aUQcnYCo3Oqd3+ikQbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6PW+SdrsSg/crxaOOZLDFeNqdtQwHwYDVR0j BBgwFoAURBLDaYMuhs8lXHJV6x7KeTiRAkYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MmM1MTFiZS02N2EyLTQ0YzktYjE4Mi1hOTExYmE5NWJlMDAvMC80NDEyQzM2OTgz MkU4NkNGMjU1QzcyNTVFQjFFQ0E3OTM4OTEwMjQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDQxMkMzNjk4MzJFODZDRjI1NUM3MjU1RUIxRUNBNzkzODkx MDI0Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTJjNTExYmUtNjdhMi00NGM5LWIx ODItYTkxMWJhOTViZTAwLzAvNDQxMkMzNjk4MzJFODZDRjI1NUM3MjU1RUIxRUNB NzkzODkxMDI0Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHW6Eb5yI3gtscXCug1XPUJrPgOre9W5d8dR /ZBkEfkwKxjV/NG+63otccVP6wCNNiKbe5isRBbIcxc/H2XLbAWT8frJhvw/w05z qZExNzDNmBP/e9QCjJlk6BbdUEbo/a/DF5J8cKBqzergm2kWMVeTqt5o7dDPEISq t4g4wwjdGlh1KjjL8cAIk+zJuzU9k+ukZB95HVWoNI33Ew8VaCgLULasQewPmOg8 oEdKUvBr1hs5+UxTaG/O9PQUwNyoMrPv6CnGQFzHNiSgC1KEbEWpBcAMYoRwRkiR SaR6csnoKGRpZdT5HK/qW8/f/H+Kg5Cwth+3CdVYyWDg4RiY8ME= -----END CERTIFICATE-----Generated at Mon Oct 20 09:44:18 2025 by rpki-client