$ rpki-client -vvf repo-rpki.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.mft File: 4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.mft (raw, json) Hash identifier: k3r0fNIOdQpo1Z9ugsYvMh70cZAuYaIa1qDLilasNCk= Subject key identifier: EC:47:0F:68:49:8F:93:97:7F:0A:20:78:F3:29:FA:B7:4D:B1:E4:07 Authority key identifier: 4F:29:04:EA:E6:6A:DD:5D:3A:C5:3C:6A:CC:B9:21:33:B4:26:DF:48 Certificate issuer: /CN=4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48 Certificate serial: 76D1AFDFD638A48F9097A2635178A6BEEE458160 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.cer Subject info access: rsync://repo-rpki.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.mft Manifest number: 051A Signing time: Sun 19 Oct 2025 13:32:14 +0000 Manifest this update: Sun 19 Oct 2025 13:27:14 +0000 Manifest next update: Wed 22 Oct 2025 22:24:14 +0000 Files and hashes: 1: 3130332e3134362e3138342e302f32332d3234203d3e20313339393637.roa (hash: RvVL0eKqhvW5Nd9pF2jqsL2iAerie+UOp2Ou6UGubqQ=) 2: 4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.crl (hash: n7h0016BbeRjpY0RGxstyqbbnRHMj6NIz3R5oeeVfAs=) 3: 323430353a396363303a3a2f33322d3438203d3e20313339393637.roa (hash: M/EH2rI4ldQhZaUe9MI4EQP0BkiCCMhjU2Ci0XOya8Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.crl rsync://repo-rpki.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 22:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:d1:af:df:d6:38:a4:8f:90:97:a2:63:51:78:a6:be:ee:45:81:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48 Validity Not Before: Oct 19 13:27:14 2025 GMT Not After : Oct 22 22:24:14 2025 GMT Subject: CN=EC470F68498F93977F0A2078F329FAB74DB1E407 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:5b:7e:12:f9:bf:f6:74:f1:54:ed:5f:b4:d5: f8:46:52:04:e6:a5:e3:9d:56:c7:4f:49:d1:d5:ae: dd:aa:b3:dc:ff:76:31:c7:cc:37:6c:32:16:76:3c: 8e:60:01:9f:8a:70:74:88:78:9e:e5:e6:23:42:f3: dc:c1:80:f1:94:a3:ba:50:b0:4f:ea:0f:02:ee:31: 3c:b3:8f:ae:93:43:bb:e8:6a:99:26:a9:64:86:b1: 86:ac:27:f3:74:b0:e1:49:26:2a:f5:a9:66:41:5c: 44:4e:47:a3:ca:c8:d4:6f:01:cb:db:93:ee:e7:6e: 73:e9:90:e9:74:53:a6:c4:d9:49:4c:a8:87:d1:6a: 7f:d6:69:2f:f7:47:10:b0:11:2c:93:ba:cc:e2:23: 86:0a:6e:83:36:e7:f5:4d:f6:8f:3e:b7:b7:76:f8: e4:82:ed:ee:d5:9c:c7:ce:d8:92:c5:42:9a:ad:b5: 83:5d:0c:e8:14:9b:6f:61:56:64:f0:8b:81:74:90: 3d:36:ca:e5:37:e9:98:9c:92:ea:42:24:1b:dc:0e: 0d:97:c9:80:0f:5d:18:d7:3d:61:5c:16:b6:4e:2e: b8:eb:bd:28:a5:28:b0:54:1d:da:f4:6c:c1:53:b1: 60:30:47:90:28:5c:be:54:98:1d:20:02:0f:90:82: de:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:47:0F:68:49:8F:93:97:7F:0A:20:78:F3:29:FA:B7:4D:B1:E4:07 X509v3 Authority Key Identifier: keyid:4F:29:04:EA:E6:6A:DD:5D:3A:C5:3C:6A:CC:B9:21:33:B4:26:DF:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:e7:a8:53:51:24:b4:18:66:3f:8e:19:7e:b2:25:32:a2:42: 68:83:7e:af:4f:4f:18:a5:d3:53:39:83:3d:75:29:4f:64:dc: bd:8b:8a:a5:92:0b:1d:2a:6a:e7:7f:24:f5:2c:0a:f2:dd:de: 1a:e1:36:8c:1b:fd:f7:6f:30:52:e3:46:e0:d1:44:eb:1e:0c: 39:dd:a6:e8:27:06:1f:ca:a1:a4:2d:3e:a0:3d:4e:15:3b:91: f8:77:2d:33:81:e7:14:be:fa:6f:1f:d4:e2:30:6b:65:0a:fd: 20:93:d6:30:28:e8:b3:ad:43:5d:a8:24:55:a6:c2:01:17:8b: 3f:6a:38:9e:84:8d:96:35:1a:bb:71:13:4e:71:91:0d:8e:ce: eb:73:b6:6d:a6:15:67:20:70:94:7d:3c:71:47:ea:38:42:66: 09:38:0b:89:89:a9:6f:60:43:89:6e:c7:da:4d:a1:2a:47:79: f2:3f:16:09:c7:ec:10:c8:bc:3a:7a:b0:d2:83:a7:6c:db:d8: 0a:70:7e:78:75:88:70:67:67:23:71:ce:3c:38:68:4f:89:9e: e2:11:01:de:a3:73:b7:8b:2e:9a:1e:c2:0e:96:24:b4:e1:e1: ae:45:0d:fa:c7:8e:18:b5:54:06:6b:53:21:e8:66:bd:f0:54: a8:93:0b:66 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdtGv39Y4pI+Ql6JjUXimvu5FgWAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEYyOTA0RUFFNjZBREQ1RDNBQzUzQzZBQ0NCOTIxMzNC NDI2REY0ODAeFw0yNTEwMTkxMzI3MTRaFw0yNTEwMjIyMjI0MTRaMDMxMTAvBgNV BAMTKEVDNDcwRjY4NDk4RjkzOTc3RjBBMjA3OEYzMjlGQUI3NERCMUU0MDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSW34S+b/2dPFU7V+01fhGUgTm peOdVsdPSdHVrt2qs9z/djHHzDdsMhZ2PI5gAZ+KcHSIeJ7l5iNC89zBgPGUo7pQ sE/qDwLuMTyzj66TQ7voapkmqWSGsYasJ/N0sOFJJir1qWZBXEROR6PKyNRvAcvb k+7nbnPpkOl0U6bE2UlMqIfRan/WaS/3RxCwESyTusziI4YKboM25/VN9o8+t7d2 +OSC7e7VnMfO2JLFQpqttYNdDOgUm29hVmTwi4F0kD02yuU36ZickupCJBvcDg2X yYAPXRjXPWFcFrZOLrjrvSilKLBUHdr0bMFTsWAwR5AoXL5UmB0gAg+Qgt4pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7EcPaEmPk5d/CiB48yn6t02x5AcwHwYDVR0j BBgwFoAUTykE6uZq3V06xTxqzLkhM7Qm30gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y OWM1MzI3Zi0xMGZkLTRjZjAtODUxYy0wY2ZjZDNjM2M2OTcvMC80RjI5MDRFQUU2 NkFERDVEM0FDNTNDNkFDQ0I5MjEzM0I0MjZERjQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEYyOTA0RUFFNjZBREQ1RDNBQzUzQzZBQ0NCOTIxMzNCNDI2 REY0OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjljNTMyN2YtMTBmZC00Y2YwLTg1 MWMtMGNmY2QzYzNjNjk3LzAvNEYyOTA0RUFFNjZBREQ1RDNBQzUzQzZBQ0NCOTIx MzNCNDI2REY0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALfnqFNRJLQYZj+OGX6yJTKiQmiDfq9PTxil 01M5gz11KU9k3L2LiqWSCx0qaud/JPUsCvLd3hrhNowb/fdvMFLjRuDRROseDDnd pugnBh/KoaQtPqA9ThU7kfh3LTOB5xS++m8f1OIwa2UK/SCT1jAo6LOtQ12oJFWm wgEXiz9qOJ6EjZY1GrtxE05xkQ2Ozutztm2mFWcgcJR9PHFH6jhCZgk4C4mJqW9g Q4lux9pNoSpHefI/FgnH7BDIvDp6sNKDp2zb2Apwfnh1iHBnZyNxzjw4aE+JnuIR Ad6jc7eLLpoewg6WJLTh4a5FDfrHjhi1VAZrUyHoZr3wVKiTC2Y= -----END CERTIFICATE-----Generated at Mon Oct 20 14:38:39 2025 by rpki-client