$ rpki-client -vvf repo-rpki.idnic.net/repo/40457d20-023a-4509-bb4a-62c86929dd97/0/4960A8427FEA5814EF9E80EF3786E0CAAE063745.mft File: 4960A8427FEA5814EF9E80EF3786E0CAAE063745.mft (raw, json) Hash identifier: KmgRKm0ki0uYWDZd1YMSk4gZC23iH/elmpr+ussi0WY= Subject key identifier: 63:26:56:29:28:DF:64:42:01:2F:D6:D9:5C:B1:28:D2:44:6F:AF:D1 Authority key identifier: 49:60:A8:42:7F:EA:58:14:EF:9E:80:EF:37:86:E0:CA:AE:06:37:45 Certificate issuer: /CN=4960A8427FEA5814EF9E80EF3786E0CAAE063745 Certificate serial: 1189074BE9F050527B4A62ABEEE375A80C32241B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4960A8427FEA5814EF9E80EF3786E0CAAE063745.cer Subject info access: rsync://repo-rpki.idnic.net/repo/40457d20-023a-4509-bb4a-62c86929dd97/0/4960A8427FEA5814EF9E80EF3786E0CAAE063745.mft Manifest number: B5 Signing time: Sun 19 Oct 2025 15:22:05 +0000 Manifest this update: Sun 19 Oct 2025 15:17:05 +0000 Manifest next update: Wed 22 Oct 2025 20:30:05 +0000 Files and hashes: 1: 4960A8427FEA5814EF9E80EF3786E0CAAE063745.crl (hash: ggTTFblMiljjNjb2UFEAel6v2INr1ytvpH0IHsau8ik=) 2: 3130332e3233302e3138382e302f32332d3234203d3e20313333333439.roa (hash: BoTluS9h9fXmYVG5ixZmkF8QGw01I8U2x/hhTczYeKA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/40457d20-023a-4509-bb4a-62c86929dd97/0/4960A8427FEA5814EF9E80EF3786E0CAAE063745.crl rsync://repo-rpki.idnic.net/repo/40457d20-023a-4509-bb4a-62c86929dd97/0/4960A8427FEA5814EF9E80EF3786E0CAAE063745.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4960A8427FEA5814EF9E80EF3786E0CAAE063745.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 20:30:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:89:07:4b:e9:f0:50:52:7b:4a:62:ab:ee:e3:75:a8:0c:32:24:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4960A8427FEA5814EF9E80EF3786E0CAAE063745 Validity Not Before: Oct 19 15:17:05 2025 GMT Not After : Oct 22 20:30:05 2025 GMT Subject: CN=6326562928DF6442012FD6D95CB128D2446FAFD1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ee:47:b0:ef:d3:60:d7:ad:94:90:eb:19:fa: 13:a1:8e:70:64:ff:0a:42:7b:c1:e8:3f:99:8e:ce: 58:09:de:2e:2d:15:f2:e5:59:87:c2:f5:2f:70:29: 1f:50:16:59:b1:bc:e8:b1:6e:f7:0f:16:af:36:2c: 57:17:79:e2:91:26:da:9b:52:eb:19:61:c9:ca:03: e9:8c:cd:eb:fa:5f:dd:0f:0b:ce:9b:cf:5a:c0:2a: 43:c9:d9:d0:79:a1:bc:80:3d:c9:44:9d:4e:ff:30: e0:9d:0e:ed:42:d2:6d:00:60:76:f6:9d:b9:34:3e: 94:23:d3:49:0f:62:30:f8:b8:b0:93:5d:51:2a:0d: 08:eb:ec:17:94:b9:7a:40:6d:5a:fb:c5:9d:64:04: b7:16:65:fc:2a:99:a3:2a:b8:c7:29:41:8c:5a:15: 32:9f:57:5c:b4:9f:f7:f5:06:44:5b:2d:39:7d:09: fe:f6:67:4d:43:42:dd:1e:bd:d0:7e:82:93:93:37: 60:26:c2:60:7e:d6:29:8c:17:4d:63:03:dc:f8:a8: 93:da:12:8b:f5:f5:90:2c:94:b9:04:b5:1e:10:10: a3:3f:c2:65:4f:ce:32:ee:20:41:0a:3f:ce:c8:7e: c8:04:7c:db:aa:4f:2a:29:8c:8c:53:35:71:b2:35: 93:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:26:56:29:28:DF:64:42:01:2F:D6:D9:5C:B1:28:D2:44:6F:AF:D1 X509v3 Authority Key Identifier: keyid:49:60:A8:42:7F:EA:58:14:EF:9E:80:EF:37:86:E0:CA:AE:06:37:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/40457d20-023a-4509-bb4a-62c86929dd97/0/4960A8427FEA5814EF9E80EF3786E0CAAE063745.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4960A8427FEA5814EF9E80EF3786E0CAAE063745.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/40457d20-023a-4509-bb4a-62c86929dd97/0/4960A8427FEA5814EF9E80EF3786E0CAAE063745.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:71:2a:f5:be:ca:be:2a:bc:5b:82:29:2b:ad:1e:d6:76:8d: e0:d3:cd:dc:1d:0f:98:9d:79:2d:0b:16:6a:52:0e:c1:d0:24: 53:89:c2:1c:15:d6:e5:b9:ca:8c:22:5c:52:ce:51:ed:48:8d: 57:e5:d4:be:bb:5f:8c:ca:96:cf:dc:98:21:61:5f:44:af:38: ae:fa:ae:30:47:03:e0:1a:10:a9:b6:6a:be:73:1c:05:67:e3: eb:98:1e:67:34:63:1f:0f:6e:3f:98:b2:8f:b4:8d:ce:3c:75: 05:c3:c2:bb:02:59:17:8c:10:d7:82:b0:b0:ba:12:7d:c8:fc: fe:f3:ab:a0:67:31:2e:52:7f:b0:d5:ae:c9:17:d8:76:50:b7: 98:4b:d9:8b:7f:52:8d:da:60:16:0b:15:01:89:e5:44:ad:0c: 2a:05:a5:fd:7d:11:f3:21:8a:ad:6b:66:8d:48:35:79:79:91: 2a:9c:69:1d:cc:bd:ee:d3:e7:80:55:72:ce:c5:84:f4:f9:44: 6e:dc:5c:8a:1b:d8:de:f3:a7:26:0f:e7:ae:11:41:4b:6e:5a: bc:0b:51:d2:05:0d:41:eb:85:69:de:f7:f5:ea:99:20:52:94: 5e:19:04:a3:51:fe:b2:36:b5:b9:08:da:dd:a5:79:6e:4f:32: b0:ee:14:8c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEYkHS+nwUFJ7SmKr7uN1qAwyJBswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDk2MEE4NDI3RkVBNTgxNEVGOUU4MEVGMzc4NkUwQ0FB RTA2Mzc0NTAeFw0yNTEwMTkxNTE3MDVaFw0yNTEwMjIyMDMwMDVaMDMxMTAvBgNV BAMTKDYzMjY1NjI5MjhERjY0NDIwMTJGRDZEOTVDQjEyOEQyNDQ2RkFGRDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx7kew79Ng162UkOsZ+hOhjnBk /wpCe8HoP5mOzlgJ3i4tFfLlWYfC9S9wKR9QFlmxvOixbvcPFq82LFcXeeKRJtqb UusZYcnKA+mMzev6X90PC86bz1rAKkPJ2dB5obyAPclEnU7/MOCdDu1C0m0AYHb2 nbk0PpQj00kPYjD4uLCTXVEqDQjr7BeUuXpAbVr7xZ1kBLcWZfwqmaMquMcpQYxa FTKfV1y0n/f1BkRbLTl9Cf72Z01DQt0evdB+gpOTN2AmwmB+1imMF01jA9z4qJPa Eov19ZAslLkEtR4QEKM/wmVPzjLuIEEKP87IfsgEfNuqTyopjIxTNXGyNZPdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYyZWKSjfZEIBL9bZXLEo0kRvr9EwHwYDVR0j BBgwFoAUSWCoQn/qWBTvnoDvN4bgyq4GN0UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MDQ1N2QyMC0wMjNhLTQ1MDktYmI0YS02MmM4NjkyOWRkOTcvMC80OTYwQTg0MjdG RUE1ODE0RUY5RTgwRUYzNzg2RTBDQUFFMDYzNzQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDk2MEE4NDI3RkVBNTgxNEVGOUU4MEVGMzc4NkUwQ0FBRTA2 Mzc0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDA0NTdkMjAtMDIzYS00NTA5LWJi NGEtNjJjODY5MjlkZDk3LzAvNDk2MEE4NDI3RkVBNTgxNEVGOUU4MEVGMzc4NkUw Q0FBRTA2Mzc0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGpxKvW+yr4qvFuCKSutHtZ2jeDTzdwdD5id eS0LFmpSDsHQJFOJwhwV1uW5yowiXFLOUe1IjVfl1L67X4zKls/cmCFhX0SvOK76 rjBHA+AaEKm2ar5zHAVn4+uYHmc0Yx8Pbj+Yso+0jc48dQXDwrsCWReMENeCsLC6 En3I/P7zq6BnMS5Sf7DVrskX2HZQt5hL2Yt/Uo3aYBYLFQGJ5UStDCoFpf19EfMh iq1rZo1INXl5kSqcaR3Mve7T54BVcs7FhPT5RG7cXIob2N7zpyYP564RQUtuWrwL UdIFDUHrhWne9/XqmSBSlF4ZBKNR/rI2tbkI2t2leW5PMrDuFIw= -----END CERTIFICATE-----Generated at Mon Oct 20 19:48:23 2025 by rpki-client