$ rpki-client -vvf repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/4F40845626DE4E373F550B654EA4E833B6EB4D27.mft File: 4F40845626DE4E373F550B654EA4E833B6EB4D27.mft (raw, json) Hash identifier: 5Xbk3GKrgm4kqxuBvNvVhSHb+RtQXPXArAm5mHWfNHo= Subject key identifier: DF:FF:5C:88:E0:75:EB:38:D5:2D:A5:79:3E:74:20:5E:90:E0:32:A6 Authority key identifier: 4F:40:84:56:26:DE:4E:37:3F:55:0B:65:4E:A4:E8:33:B6:EB:4D:27 Certificate issuer: /CN=4F40845626DE4E373F550B654EA4E833B6EB4D27 Certificate serial: 1B73A095B78E63813D0CBD8437357DCC00AAA351 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F40845626DE4E373F550B654EA4E833B6EB4D27.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/4F40845626DE4E373F550B654EA4E833B6EB4D27.mft Manifest number: 03BE Signing time: Sun 19 Oct 2025 19:20:01 +0000 Manifest this update: Sun 19 Oct 2025 19:15:01 +0000 Manifest next update: Thu 23 Oct 2025 06:58:01 +0000 Files and hashes: 1: 3130332e3136382e3134362e302f32342d3234203d3e20313430343433.roa (hash: fuK+11s2WzcqL7Onn6Tm/NBVUUPod7SmDLox9Y+iIpg=) 2: 3130332e3136382e3134362e302f32332d3233203d3e20313430343433.roa (hash: gb5iQXmVJxzms9P45gaXkbTb5EFMl0u9BkF63p+v5Kk=) 3: 4F40845626DE4E373F550B654EA4E833B6EB4D27.crl (hash: r35Hmbv45cQJZY75PGA48y8zZ2Dpjbg7bOSvehBaa/M=) 4: 3130332e3136382e3134372e302f32342d3234203d3e20313430343433.roa (hash: vfImiFEds0caJl5aBP0MxYhFkdq8Ac7hTgD2QgZXO/g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/4F40845626DE4E373F550B654EA4E833B6EB4D27.crl rsync://repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/4F40845626DE4E373F550B654EA4E833B6EB4D27.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F40845626DE4E373F550B654EA4E833B6EB4D27.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 06:58:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:73:a0:95:b7:8e:63:81:3d:0c:bd:84:37:35:7d:cc:00:aa:a3:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4F40845626DE4E373F550B654EA4E833B6EB4D27 Validity Not Before: Oct 19 19:15:01 2025 GMT Not After : Oct 23 06:58:01 2025 GMT Subject: CN=DFFF5C88E075EB38D52DA5793E74205E90E032A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:92:bd:2a:cf:c8:19:18:7d:95:17:e9:84:bd: f9:63:67:c3:72:6a:4d:44:5c:47:84:8b:10:b9:58: f2:96:3c:5c:2d:9a:11:c0:67:70:bb:19:78:d9:f5: 29:f4:50:31:2a:f1:c7:a2:ce:38:f6:5d:28:f6:94: bc:32:9c:8e:f0:25:57:74:42:df:12:dd:b6:06:0a: 94:e8:5e:79:0c:10:97:19:6e:9d:a6:a7:e9:6c:4f: de:d1:b2:94:98:e3:a4:24:f4:66:aa:1e:fc:79:3f: a9:50:ac:3d:3b:2a:10:e7:c5:85:32:17:b8:2a:de: 2d:3a:52:ca:ab:9d:3c:6b:9e:f2:5a:9e:ad:2b:e5: 3d:48:37:28:42:cf:33:a5:39:f0:b4:0d:4d:08:ec: a8:cd:f5:a9:17:38:44:70:92:3a:42:af:cd:fa:71: 38:b5:b0:9a:b3:35:d2:a0:a2:0e:5b:6b:63:00:87: b6:a4:59:60:32:bb:0d:4e:b1:c4:e5:79:fd:bf:63: 5e:7d:f1:ba:95:ff:78:d3:d3:3a:72:81:ff:ab:a9: 99:03:24:85:26:ec:4b:b4:56:16:99:86:e2:2e:1d: bb:ff:c1:53:0b:1b:90:42:ae:14:de:33:9f:4c:09: 18:9c:77:80:e5:66:20:22:ae:dc:f7:55:ec:69:c9: 3e:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:FF:5C:88:E0:75:EB:38:D5:2D:A5:79:3E:74:20:5E:90:E0:32:A6 X509v3 Authority Key Identifier: keyid:4F:40:84:56:26:DE:4E:37:3F:55:0B:65:4E:A4:E8:33:B6:EB:4D:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/4F40845626DE4E373F550B654EA4E833B6EB4D27.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F40845626DE4E373F550B654EA4E833B6EB4D27.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/4F40845626DE4E373F550B654EA4E833B6EB4D27.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:fd:b1:cd:a3:8a:f2:48:27:48:33:2d:8f:d2:5b:5d:f0:70: 92:a8:9b:6e:cf:27:53:6f:17:e0:16:ca:18:b6:54:a7:de:7c: 91:6c:31:1a:6f:10:6b:0a:8a:c5:06:5f:ef:e7:80:53:c9:f3: 6c:ee:a4:67:a3:c7:f5:bc:40:1b:d6:01:6a:f1:1c:de:f2:55: 56:df:1d:5f:7a:87:a4:c0:a4:70:3a:41:8e:7f:da:76:68:29: 72:39:4b:4c:5f:83:3f:7b:7e:96:ee:d8:0a:1c:1d:e4:17:b2: 0c:d1:21:75:39:ec:7d:63:42:d2:cc:6f:59:75:8e:8a:55:80: 8c:2f:8b:ba:b8:7d:55:91:9b:e3:26:35:3c:11:52:f5:08:8c: 03:99:8d:e0:4c:c2:91:e5:ae:72:fc:42:66:4e:f5:b2:7e:f1: b5:6a:ec:0e:fc:9e:79:bb:16:28:ab:82:18:af:cc:8b:3e:aa: 50:77:4f:ec:8f:16:d7:41:db:13:37:c2:9b:62:a1:60:2c:f8: 8e:bf:8c:61:22:0a:a6:83:82:3f:5b:44:61:3b:94:68:63:73: b5:c9:59:e4:89:c5:58:af:26:18:2d:1e:52:a1:df:56:14:3e: 96:d1:e9:78:78:85:ad:93:14:9f:a5:46:a7:cf:cb:9e:10:b6: a5:e4:5e:89 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG3OglbeOY4E9DL2ENzV9zACqo1EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEY0MDg0NTYyNkRFNEUzNzNGNTUwQjY1NEVBNEU4MzNC NkVCNEQyNzAeFw0yNTEwMTkxOTE1MDFaFw0yNTEwMjMwNjU4MDFaMDMxMTAvBgNV BAMTKERGRkY1Qzg4RTA3NUVCMzhENTJEQTU3OTNFNzQyMDVFOTBFMDMyQTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChkr0qz8gZGH2VF+mEvfljZ8Ny ak1EXEeEixC5WPKWPFwtmhHAZ3C7GXjZ9Sn0UDEq8ceizjj2XSj2lLwynI7wJVd0 Qt8S3bYGCpToXnkMEJcZbp2mp+lsT97RspSY46Qk9GaqHvx5P6lQrD07KhDnxYUy F7gq3i06UsqrnTxrnvJanq0r5T1INyhCzzOlOfC0DU0I7KjN9akXOERwkjpCr836 cTi1sJqzNdKgog5ba2MAh7akWWAyuw1OscTlef2/Y1598bqV/3jT0zpygf+rqZkD JIUm7Eu0VhaZhuIuHbv/wVMLG5BCrhTeM59MCRicd4DlZiAirtz3VexpyT6XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3/9ciOB16zjVLaV5PnQgXpDgMqYwHwYDVR0j BBgwFoAUT0CEVibeTjc/VQtlTqToM7brTScwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YTQ2MzYwZC02NjJiLTRmN2QtYmIxNy1kODYwODIxNTI0NzEvMC80RjQwODQ1NjI2 REU0RTM3M0Y1NTBCNjU0RUE0RTgzM0I2RUI0RDI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEY0MDg0NTYyNkRFNEUzNzNGNTUwQjY1NEVBNEU4MzNCNkVC NEQyNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2E0NjM2MGQtNjYyYi00ZjdkLWJi MTctZDg2MDgyMTUyNDcxLzAvNEY0MDg0NTYyNkRFNEUzNzNGNTUwQjY1NEVBNEU4 MzNCNkVCNEQyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAP9sc2jivJIJ0gzLY/SW13wcJKom27PJ1Nv F+AWyhi2VKfefJFsMRpvEGsKisUGX+/ngFPJ82zupGejx/W8QBvWAWrxHN7yVVbf HV96h6TApHA6QY5/2nZoKXI5S0xfgz97fpbu2AocHeQXsgzRIXU57H1jQtLMb1l1 jopVgIwvi7q4fVWRm+MmNTwRUvUIjAOZjeBMwpHlrnL8QmZO9bJ+8bVq7A78nnm7 FiirghivzIs+qlB3T+yPFtdB2xM3wptioWAs+I6/jGEiCqaDgj9bRGE7lGhjc7XJ WeSJxVivJhgtHlKh31YUPpbR6Xh4ha2TFJ+lRqfPy54QtqXkXok= -----END CERTIFICATE-----Generated at Mon Oct 20 18:22:55 2025 by rpki-client