$ rpki-client -vvf repo-rpki.idnic.net/repo/378bbfd4-67b4-498d-8411-e964c5fe1172/0/CD4EAC0306D06F2109F2679DC9F52F7DE597590D.mft File: CD4EAC0306D06F2109F2679DC9F52F7DE597590D.mft (raw, json) Hash identifier: N/e+e4vlMoG8c+H97tPS3lRYBC23xGRlHIAGDCvaGuk= Subject key identifier: 72:F9:53:30:78:85:BD:F2:E8:52:F9:D3:37:E4:B2:73:47:2B:77:DB Authority key identifier: CD:4E:AC:03:06:D0:6F:21:09:F2:67:9D:C9:F5:2F:7D:E5:97:59:0D Certificate issuer: /CN=CD4EAC0306D06F2109F2679DC9F52F7DE597590D Certificate serial: 4C27F520554CBDD2D9A8DE29855921B48BB6A0BB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD4EAC0306D06F2109F2679DC9F52F7DE597590D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/378bbfd4-67b4-498d-8411-e964c5fe1172/0/CD4EAC0306D06F2109F2679DC9F52F7DE597590D.mft Manifest number: 0181 Signing time: Sun 19 Oct 2025 14:42:05 +0000 Manifest this update: Sun 19 Oct 2025 14:37:05 +0000 Manifest next update: Wed 22 Oct 2025 20:59:05 +0000 Files and hashes: 1: CD4EAC0306D06F2109F2679DC9F52F7DE597590D.crl (hash: nitc+GwnCSYgnZe3t0nuScE70aSB57dgqxdws9YiEAs=) 2: 3130332e3135362e35372e302f32342d3234203d3e20313431303833.roa (hash: YU44qqt6xQCwxLXA5jfaKyr8+7F8xFDqnBfx8dtxJPU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/378bbfd4-67b4-498d-8411-e964c5fe1172/0/CD4EAC0306D06F2109F2679DC9F52F7DE597590D.crl rsync://repo-rpki.idnic.net/repo/378bbfd4-67b4-498d-8411-e964c5fe1172/0/CD4EAC0306D06F2109F2679DC9F52F7DE597590D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD4EAC0306D06F2109F2679DC9F52F7DE597590D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 20:59:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:27:f5:20:55:4c:bd:d2:d9:a8:de:29:85:59:21:b4:8b:b6:a0:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD4EAC0306D06F2109F2679DC9F52F7DE597590D Validity Not Before: Oct 19 14:37:05 2025 GMT Not After : Oct 22 20:59:05 2025 GMT Subject: CN=72F953307885BDF2E852F9D337E4B273472B77DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:85:3f:ea:3f:1c:60:fe:a5:65:f4:e8:c4:64: b3:58:cb:88:02:67:4d:fa:4d:14:f8:66:da:54:5a: 61:62:e7:c8:ec:fa:02:3b:fb:50:13:27:01:9f:46: f4:0b:8f:82:94:c7:f9:85:79:d2:99:04:96:bc:70: cb:78:82:45:91:7f:1a:fc:a8:0d:f1:10:35:31:bc: ad:72:47:9a:25:3b:6f:10:5c:ce:89:81:af:20:33: a2:94:ef:13:cf:57:fa:b1:8f:05:10:f1:3e:9f:8f: cb:d4:93:ad:a2:97:bf:cc:0b:99:e6:68:81:72:b8: 42:63:11:89:a6:79:e7:43:ec:de:6d:52:01:df:23: 6e:1f:d8:f1:a0:d3:1b:66:46:f6:97:d9:5c:76:5d: 21:45:45:cf:58:19:e6:8e:6d:06:53:94:ec:1d:81: 94:f3:8c:56:af:85:d2:ec:ee:4b:af:3b:be:66:5f: e3:a3:7e:18:64:4b:05:c0:c5:4d:d3:cd:75:fd:ce: b5:91:63:af:b9:0b:18:e6:e8:57:ec:9d:f9:3a:44: 07:da:5f:9b:d6:39:b5:4f:dc:90:e7:87:19:99:f4: 4a:31:00:54:55:07:76:1c:8b:1b:95:bd:af:0f:9f: 9a:3a:f4:02:2f:07:7a:e6:08:0e:05:0b:ee:67:79: 96:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:F9:53:30:78:85:BD:F2:E8:52:F9:D3:37:E4:B2:73:47:2B:77:DB X509v3 Authority Key Identifier: keyid:CD:4E:AC:03:06:D0:6F:21:09:F2:67:9D:C9:F5:2F:7D:E5:97:59:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/378bbfd4-67b4-498d-8411-e964c5fe1172/0/CD4EAC0306D06F2109F2679DC9F52F7DE597590D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD4EAC0306D06F2109F2679DC9F52F7DE597590D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/378bbfd4-67b4-498d-8411-e964c5fe1172/0/CD4EAC0306D06F2109F2679DC9F52F7DE597590D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:f5:ed:80:6c:c5:a1:c3:a7:58:93:b8:59:72:99:ca:a7:75: 7b:9d:a2:a2:9b:87:96:9a:93:cf:da:85:9b:e5:28:f0:ac:8c: 71:2c:0e:ab:91:27:64:02:d5:df:8f:84:a2:2b:b8:e4:dd:c0: 0b:5b:d1:e2:8c:87:ae:f0:b5:7f:2d:04:a6:de:c9:57:cd:1e: a0:2a:f4:8d:41:4f:31:f2:f6:4a:4b:91:a0:41:d8:48:79:85: 93:98:e1:64:21:0c:6a:a8:41:17:1e:0a:0c:9b:88:7c:60:2d: 0d:a9:f2:de:84:e7:ae:69:35:8e:2e:f4:2f:47:f9:20:b6:ea: 84:2a:1d:a0:3c:0a:3b:92:78:96:4d:23:68:81:95:ce:61:df: 3c:d5:f6:8a:03:5c:a4:66:ce:23:de:51:9a:88:51:d8:76:a2: b7:a7:42:66:7d:55:e4:97:ca:68:5b:06:0f:58:bc:19:3b:fd: b9:09:59:f5:5b:1f:d2:a5:46:9c:62:dc:5b:c6:2a:33:b3:6d: 20:d9:65:f9:83:1d:d4:e8:21:9f:31:ec:04:83:ce:29:d1:13: 7e:fb:de:1c:ec:a7:aa:d0:5e:fd:75:b6:d0:f1:23:4d:c6:c3: 09:49:c8:57:20:6e:8a:23:0a:3d:04:bb:bb:40:ab:c3:6a:be: a5:5b:ed:ad -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTCf1IFVMvdLZqN4phVkhtIu2oLswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0Q0RUFDMDMwNkQwNkYyMTA5RjI2NzlEQzlGNTJGN0RF NTk3NTkwRDAeFw0yNTEwMTkxNDM3MDVaFw0yNTEwMjIyMDU5MDVaMDMxMTAvBgNV BAMTKDcyRjk1MzMwNzg4NUJERjJFODUyRjlEMzM3RTRCMjczNDcyQjc3REIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRhT/qPxxg/qVl9OjEZLNYy4gC Z036TRT4ZtpUWmFi58js+gI7+1ATJwGfRvQLj4KUx/mFedKZBJa8cMt4gkWRfxr8 qA3xEDUxvK1yR5olO28QXM6Jga8gM6KU7xPPV/qxjwUQ8T6fj8vUk62il7/MC5nm aIFyuEJjEYmmeedD7N5tUgHfI24f2PGg0xtmRvaX2Vx2XSFFRc9YGeaObQZTlOwd gZTzjFavhdLs7kuvO75mX+OjfhhkSwXAxU3TzXX9zrWRY6+5Cxjm6Ffsnfk6RAfa X5vWObVP3JDnhxmZ9EoxAFRVB3YcixuVva8Pn5o69AIvB3rmCA4FC+5neZZxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcvlTMHiFvfLoUvnTN+Syc0crd9swHwYDVR0j BBgwFoAUzU6sAwbQbyEJ8medyfUvfeWXWQ0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NzhiYmZkNC02N2I0LTQ5OGQtODQxMS1lOTY0YzVmZTExNzIvMC9DRDRFQUMwMzA2 RDA2RjIxMDlGMjY3OURDOUY1MkY3REU1OTc1OTBELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0Q0RUFDMDMwNkQwNkYyMTA5RjI2NzlEQzlGNTJGN0RFNTk3 NTkwRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzc4YmJmZDQtNjdiNC00OThkLTg0 MTEtZTk2NGM1ZmUxMTcyLzAvQ0Q0RUFDMDMwNkQwNkYyMTA5RjI2NzlEQzlGNTJG N0RFNTk3NTkwRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACz17YBsxaHDp1iTuFlymcqndXudoqKbh5aa k8/ahZvlKPCsjHEsDquRJ2QC1d+PhKIruOTdwAtb0eKMh67wtX8tBKbeyVfNHqAq 9I1BTzHy9kpLkaBB2Eh5hZOY4WQhDGqoQRceCgybiHxgLQ2p8t6E565pNY4u9C9H +SC26oQqHaA8CjuSeJZNI2iBlc5h3zzV9ooDXKRmziPeUZqIUdh2orenQmZ9VeSX ymhbBg9YvBk7/bkJWfVbH9KlRpxi3FvGKjOzbSDZZfmDHdToIZ8x7ASDzinRE377 3hzsp6rQXv11ttDxI03GwwlJyFcgboojCj0Eu7tAq8NqvqVb7a0= -----END CERTIFICATE-----Generated at Mon Oct 20 15:32:29 2025 by rpki-client