$ rpki-client -vvf repo-rpki.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.mft File: C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.mft (raw, json) Hash identifier: UtNHHmRk5wSTAX9FZqqrXd0fwhMaB3yHyUFww+7kBmU= Subject key identifier: 71:F0:1E:E0:6F:39:9E:F1:61:6E:C5:90:18:FF:FB:0F:0D:98:11:59 Authority key identifier: C4:CE:1B:D3:CB:FB:01:5E:60:96:5A:65:E2:FB:31:A6:BA:26:18:9B Certificate issuer: /CN=C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B Certificate serial: 187BECEFC6F2DABDC06432ADD50BF6DD86CFB2BD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.mft Manifest number: 0517 Signing time: Mon 20 Oct 2025 10:42:03 +0000 Manifest this update: Mon 20 Oct 2025 10:37:03 +0000 Manifest next update: Thu 23 Oct 2025 16:30:03 +0000 Files and hashes: 1: C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.crl (hash: pfLngd3lfHDChiEVsbLm312cd+VGaN8ZOOc1hTN9Ozg=) 2: 3130332e3135352e3136362e302f32342d3234203d3e20313431303634.roa (hash: sI3bqifKZVIOhDY6Sh1Zbn3Bg29Wg0wSaItyUUWUok4=) 3: 3130332e3135352e3136372e302f32342d3234203d3e20313431303634.roa (hash: bjlsGk5J7SvEO5IoZ47H9V39bFhtmZq3wwyih52cSks=) 4: 3130332e3135352e3136362e302f32332d3233203d3e20313431303634.roa (hash: eyzaiFvv4c1HmHtA1p4wBBlGeENQrifGbWD1MbCWveE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.crl rsync://repo-rpki.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:7b:ec:ef:c6:f2:da:bd:c0:64:32:ad:d5:0b:f6:dd:86:cf:b2:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B Validity Not Before: Oct 20 10:37:03 2025 GMT Not After : Oct 23 16:30:03 2025 GMT Subject: CN=71F01EE06F399EF1616EC59018FFFB0F0D981159 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:91:0a:36:1e:eb:c9:a2:62:fe:ac:d5:9c:cd: e6:b7:1f:c5:48:ca:39:09:a8:0e:f3:56:55:2b:30: aa:73:a7:bd:94:18:83:6a:50:ab:52:bf:76:af:08: 0d:a4:bf:7f:d4:dd:a7:f4:36:f5:e0:7d:a1:95:e9: d1:e0:aa:34:fa:b3:2d:cb:66:7f:ae:45:e4:b9:4d: 83:3a:a3:e1:f6:37:c7:1a:c0:11:03:f8:fd:a2:e9: e3:d2:29:c2:f6:74:2f:5e:1d:8b:02:6c:6a:43:e6: ce:26:29:46:17:6b:db:5f:34:83:dc:a6:9a:e1:78: 47:37:75:96:8a:2d:22:c1:91:4e:f1:26:d4:8f:20: c7:3e:3e:d1:bb:00:59:cc:3f:03:d4:43:4e:21:73: 1f:f3:96:56:df:e9:08:1d:7a:d1:c8:56:c8:39:0a: bb:e7:b2:d5:a2:45:1f:ed:80:31:90:6d:22:6c:9c: 18:e4:72:3a:5b:95:3d:db:52:71:5a:93:5f:90:2a: 37:70:c0:15:b4:76:53:62:49:04:fd:cf:eb:93:34: 5b:62:2f:14:6f:00:87:2e:1c:40:c7:f1:3d:21:e5: 73:b4:9b:82:84:7a:2a:5e:82:87:e6:a9:40:a4:84: c8:59:13:7a:15:75:6c:80:03:2a:cc:50:4b:f5:16: 67:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:F0:1E:E0:6F:39:9E:F1:61:6E:C5:90:18:FF:FB:0F:0D:98:11:59 X509v3 Authority Key Identifier: keyid:C4:CE:1B:D3:CB:FB:01:5E:60:96:5A:65:E2:FB:31:A6:BA:26:18:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:3c:d7:f7:a5:a0:d3:c2:d6:ea:93:38:fa:53:30:ac:4b:b9: 36:81:c8:8b:85:4d:00:1b:cf:63:35:b3:a8:f0:9b:e4:02:35: 81:91:31:e9:95:00:f5:1c:4f:ed:5d:89:15:0b:36:b3:35:df: c6:8f:16:e7:35:b6:a6:e2:04:12:d3:9c:db:23:12:b4:6d:62: c1:23:57:d5:b6:03:be:5f:13:f3:77:b8:b6:7d:c8:ee:01:42: 98:8d:cb:09:f6:96:12:85:07:1e:1f:90:47:c3:bf:77:4b:a4: 48:57:d5:5b:32:f4:38:ab:a7:f0:fb:54:25:5f:c1:76:9c:8c: 37:5e:5e:c7:4a:81:67:e5:c7:9f:2f:6e:ba:18:b6:6a:66:f1: 34:a2:11:72:1d:ad:c5:66:b3:51:49:1c:87:e9:c6:ba:01:e4: cd:5e:56:0f:67:86:eb:f2:89:00:d9:8d:3f:c2:20:ec:93:fc: 49:21:f4:ae:75:09:6f:c2:57:f6:fe:00:4f:86:2e:62:06:6d: 5c:50:cb:0b:08:ce:3e:8f:60:f1:a2:28:c8:4c:e3:fc:23:a3: 6f:de:10:7b:d8:f3:6f:d3:25:a9:92:d7:7a:e7:df:f0:54:fb: 75:10:a8:44:78:21:12:dc:7e:fd:43:b0:8a:60:b7:65:14:56: 34:69:1a:17 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGHvs78by2r3AZDKt1Qv23YbPsr0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzRDRTFCRDNDQkZCMDE1RTYwOTY1QTY1RTJGQjMxQTZC QTI2MTg5QjAeFw0yNTEwMjAxMDM3MDNaFw0yNTEwMjMxNjMwMDNaMDMxMTAvBgNV BAMTKDcxRjAxRUUwNkYzOTlFRjE2MTZFQzU5MDE4RkZGQjBGMEQ5ODExNTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCkQo2HuvJomL+rNWczea3H8VI yjkJqA7zVlUrMKpzp72UGINqUKtSv3avCA2kv3/U3af0NvXgfaGV6dHgqjT6sy3L Zn+uReS5TYM6o+H2N8cawBED+P2i6ePSKcL2dC9eHYsCbGpD5s4mKUYXa9tfNIPc pprheEc3dZaKLSLBkU7xJtSPIMc+PtG7AFnMPwPUQ04hcx/zllbf6QgdetHIVsg5 CrvnstWiRR/tgDGQbSJsnBjkcjpblT3bUnFak1+QKjdwwBW0dlNiSQT9z+uTNFti LxRvAIcuHEDH8T0h5XO0m4KEeipegofmqUCkhMhZE3oVdWyAAyrMUEv1Fme/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcfAe4G85nvFhbsWQGP/7Dw2YEVkwHwYDVR0j BBgwFoAUxM4b08v7AV5gllpl4vsxpromGJswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YzZiMmJkNy1kN2YxLTQ4MTUtYTYwYS1jYWQ1NDAyOWNlODgvMC9DNENFMUJEM0NC RkIwMTVFNjA5NjVBNjVFMkZCMzFBNkJBMjYxODlCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzRDRTFCRDNDQkZCMDE1RTYwOTY1QTY1RTJGQjMxQTZCQTI2 MTg5Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGM2YjJiZDctZDdmMS00ODE1LWE2 MGEtY2FkNTQwMjljZTg4LzAvQzRDRTFCRDNDQkZCMDE1RTYwOTY1QTY1RTJGQjMx QTZCQTI2MTg5Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACw81/eloNPC1uqTOPpTMKxLuTaByIuFTQAb z2M1s6jwm+QCNYGRMemVAPUcT+1diRULNrM138aPFuc1tqbiBBLTnNsjErRtYsEj V9W2A75fE/N3uLZ9yO4BQpiNywn2lhKFBx4fkEfDv3dLpEhX1Vsy9Dirp/D7VCVf wXacjDdeXsdKgWflx58vbroYtmpm8TSiEXIdrcVms1FJHIfpxroB5M1eVg9nhuvy iQDZjT/CIOyT/Ekh9K51CW/CV/b+AE+GLmIGbVxQywsIzj6PYPGiKMhM4/wjo2/e EHvY82/TJamS13rn3/BU+3UQqER4IRLcfv1DsIpgt2UUVjRpGhc= -----END CERTIFICATE-----Generated at Mon Oct 20 22:41:08 2025 by rpki-client