$ rpki-client -vvf repo-rpki.idnic.net/repo/52b38f79-26d3-4489-a47d-0a8805b448ae/0/4E4C9A47789406B9086713C5B821524B664E7C90.mft File: 4E4C9A47789406B9086713C5B821524B664E7C90.mft (raw, json) Hash identifier: NWx3Y5ZWgzcMJZAGROiLjnj4mCvpEV6BwMObMBT9a74= Subject key identifier: 5B:6F:95:FF:59:DF:D6:52:55:6D:30:6D:9E:72:A5:62:02:2C:77:B5 Authority key identifier: 4E:4C:9A:47:78:94:06:B9:08:67:13:C5:B8:21:52:4B:66:4E:7C:90 Certificate issuer: /CN=4E4C9A47789406B9086713C5B821524B664E7C90 Certificate serial: 3BF000AE482B68CE597FBA8D409EA7EB896E5944 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E4C9A47789406B9086713C5B821524B664E7C90.cer Subject info access: rsync://repo-rpki.idnic.net/repo/52b38f79-26d3-4489-a47d-0a8805b448ae/0/4E4C9A47789406B9086713C5B821524B664E7C90.mft Manifest number: 013F Signing time: Mon 20 Oct 2025 10:21:11 +0000 Manifest this update: Mon 20 Oct 2025 10:16:11 +0000 Manifest next update: Thu 23 Oct 2025 13:41:11 +0000 Files and hashes: 1: 4E4C9A47789406B9086713C5B821524B664E7C90.crl (hash: NE1hrh6OAFq5Q/IwqVRlzDAtI9dvYek8YJ00ZUfh2aI=) 2: 3230332e3137352e3132352e302f32342d3234203d3e20313339393532.roa (hash: 6++ZieIwa3uSozZCgkOKKp7p30r/ihEDLaswCcTnNnQ=) 3: 3230332e3137352e3132342e302f32342d3234203d3e20313339393532.roa (hash: H2J4JSb5UH/5sePhesBbTP5rDy1+Emy+Jg2bpdpPsu0=) 4: 3230332e3137352e3132342e302f32332d3233203d3e20313339393532.roa (hash: CTs5Uh+PUGuoZ85gWtFwiFdp4wiz7Vv/jmvFnjE17aI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/52b38f79-26d3-4489-a47d-0a8805b448ae/0/4E4C9A47789406B9086713C5B821524B664E7C90.crl rsync://repo-rpki.idnic.net/repo/52b38f79-26d3-4489-a47d-0a8805b448ae/0/4E4C9A47789406B9086713C5B821524B664E7C90.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E4C9A47789406B9086713C5B821524B664E7C90.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:f0:00:ae:48:2b:68:ce:59:7f:ba:8d:40:9e:a7:eb:89:6e:59:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4E4C9A47789406B9086713C5B821524B664E7C90 Validity Not Before: Oct 20 10:16:11 2025 GMT Not After : Oct 23 13:41:11 2025 GMT Subject: CN=5B6F95FF59DFD652556D306D9E72A562022C77B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:63:85:81:b6:c6:99:fe:ea:71:2e:cd:59:f4: ed:1f:6a:a2:24:ee:20:e1:a1:a1:e8:ef:27:88:c4: bd:8c:30:78:ae:fc:77:83:22:83:dc:83:e5:35:e6: c0:9d:d1:c1:e8:38:3f:9e:bb:af:ce:3c:84:94:a0: 1b:f3:09:96:a1:c4:62:03:b7:82:a1:f3:b5:81:a2: a3:5a:3f:c6:06:c7:97:67:3f:c2:88:ce:c5:6f:93: d5:89:5d:8d:e6:83:4d:2f:e6:d4:c1:ac:a0:e9:55: c5:6c:07:3b:cd:1c:7d:3f:30:dd:d2:8a:81:ff:bd: 9e:04:d8:30:c8:95:0b:55:8a:fb:94:34:d2:3c:e1: 62:d7:6a:d2:c8:ed:56:2f:4f:05:85:65:0d:4c:2c: 47:30:03:56:bd:d9:9b:26:61:ff:4c:c5:7f:40:0c: ab:cc:f5:7c:78:31:9a:aa:96:67:8e:5a:c8:41:a9: 86:59:b1:a2:df:a8:63:7d:09:8f:8a:eb:63:79:6e: 1d:91:03:e2:27:8f:53:07:e2:24:54:0d:55:95:2d: e0:ff:70:0d:53:58:84:d6:41:b4:78:66:d4:48:be: 74:ba:61:e3:00:db:39:cf:1d:a8:01:47:b6:71:15: c7:70:a0:a9:0a:e4:bc:85:5e:e9:67:72:77:d2:28: d5:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:6F:95:FF:59:DF:D6:52:55:6D:30:6D:9E:72:A5:62:02:2C:77:B5 X509v3 Authority Key Identifier: keyid:4E:4C:9A:47:78:94:06:B9:08:67:13:C5:B8:21:52:4B:66:4E:7C:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/52b38f79-26d3-4489-a47d-0a8805b448ae/0/4E4C9A47789406B9086713C5B821524B664E7C90.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E4C9A47789406B9086713C5B821524B664E7C90.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/52b38f79-26d3-4489-a47d-0a8805b448ae/0/4E4C9A47789406B9086713C5B821524B664E7C90.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:72:ae:61:03:96:4c:9e:ab:d7:23:83:59:bb:47:82:08:88: 2a:a0:76:a9:87:9e:9c:02:e9:df:20:65:92:24:f6:78:bc:59: 9e:db:5d:15:23:85:57:60:e2:70:1d:ac:20:94:5c:b4:1d:60: 4c:0f:02:88:15:26:18:05:f8:70:c9:bc:32:a1:9b:95:e6:2d: 47:cf:68:28:7d:9e:9a:e8:4f:ba:2d:79:8e:83:5c:04:64:56: 01:2e:70:4e:5f:8a:f4:37:6d:a6:c1:78:50:45:33:4f:2e:ff: 96:4c:8d:a9:95:90:1f:21:fe:c5:57:46:42:89:d4:97:43:53: 35:18:d0:ae:63:e4:d1:6a:19:27:ee:36:81:10:ce:26:ba:92: 07:96:bb:56:0b:ec:49:83:e4:47:27:25:5f:42:11:70:3d:c5: 78:73:e7:7a:14:30:fc:95:b3:9f:55:ae:ff:7a:e2:54:44:d7: 93:b4:d9:c2:91:d7:5a:42:1d:91:08:3e:72:e3:d4:21:3c:03: 58:ed:32:11:74:f6:8e:4e:c0:19:af:b2:e4:a9:07:8c:be:5d: 1c:5a:ae:d4:d9:20:bc:f5:42:c4:62:b6:2b:44:2b:fc:62:7f: ba:f8:77:47:a8:7c:f9:c1:a1:be:d0:fb:af:3c:1c:08:29:53: e1:73:2f:97 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO/AArkgraM5Zf7qNQJ6n64luWUQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEU0QzlBNDc3ODk0MDZCOTA4NjcxM0M1QjgyMTUyNEI2 NjRFN0M5MDAeFw0yNTEwMjAxMDE2MTFaFw0yNTEwMjMxMzQxMTFaMDMxMTAvBgNV BAMTKDVCNkY5NUZGNTlERkQ2NTI1NTZEMzA2RDlFNzJBNTYyMDIyQzc3QjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8Y4WBtsaZ/upxLs1Z9O0faqIk 7iDhoaHo7yeIxL2MMHiu/HeDIoPcg+U15sCd0cHoOD+eu6/OPISUoBvzCZahxGID t4Kh87WBoqNaP8YGx5dnP8KIzsVvk9WJXY3mg00v5tTBrKDpVcVsBzvNHH0/MN3S ioH/vZ4E2DDIlQtVivuUNNI84WLXatLI7VYvTwWFZQ1MLEcwA1a92ZsmYf9MxX9A DKvM9Xx4MZqqlmeOWshBqYZZsaLfqGN9CY+K62N5bh2RA+Inj1MH4iRUDVWVLeD/ cA1TWITWQbR4ZtRIvnS6YeMA2znPHagBR7ZxFcdwoKkK5LyFXulncnfSKNXJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUW2+V/1nf1lJVbTBtnnKlYgIsd7UwHwYDVR0j BBgwFoAUTkyaR3iUBrkIZxPFuCFSS2ZOfJAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MmIzOGY3OS0yNmQzLTQ0ODktYTQ3ZC0wYTg4MDViNDQ4YWUvMC80RTRDOUE0Nzc4 OTQwNkI5MDg2NzEzQzVCODIxNTI0QjY2NEU3QzkwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEU0QzlBNDc3ODk0MDZCOTA4NjcxM0M1QjgyMTUyNEI2NjRF N0M5MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTJiMzhmNzktMjZkMy00NDg5LWE0 N2QtMGE4ODA1YjQ0OGFlLzAvNEU0QzlBNDc3ODk0MDZCOTA4NjcxM0M1QjgyMTUy NEI2NjRFN0M5MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKRyrmEDlkyeq9cjg1m7R4IIiCqgdqmHnpwC 6d8gZZIk9ni8WZ7bXRUjhVdg4nAdrCCUXLQdYEwPAogVJhgF+HDJvDKhm5XmLUfP aCh9nproT7oteY6DXARkVgEucE5fivQ3babBeFBFM08u/5ZMjamVkB8h/sVXRkKJ 1JdDUzUY0K5j5NFqGSfuNoEQzia6kgeWu1YL7EmD5EcnJV9CEXA9xXhz53oUMPyV s59Vrv964lRE15O02cKR11pCHZEIPnLj1CE8A1jtMhF09o5OwBmvsuSpB4y+XRxa rtTZILz1QsRititEK/xif7r4d0eofPnBob7Q+688HAgpU+FzL5c= -----END CERTIFICATE-----Generated at Mon Oct 20 12:34:23 2025 by rpki-client