$ rpki-client -vvf repo-rpki.idnic.net/repo/533f60e6-afdd-4e10-83b4-e8cbd641c52f/0/4EB8521D8427720F50A3F65249F2D26C6CD22F13.mft File: 4EB8521D8427720F50A3F65249F2D26C6CD22F13.mft (raw, json) Hash identifier: RmQSEK5hx2NV1kaWaRFsqsUK4V/YXtDd0CtzPfNm34s= Subject key identifier: 1A:72:D1:14:F3:69:2D:96:86:BA:CA:0D:8B:F6:63:5D:58:50:3E:40 Authority key identifier: 4E:B8:52:1D:84:27:72:0F:50:A3:F6:52:49:F2:D2:6C:6C:D2:2F:13 Certificate issuer: /CN=4EB8521D8427720F50A3F65249F2D26C6CD22F13 Certificate serial: 5C7D03C62B4489EA3172E17DE64E9A2997359D1D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4EB8521D8427720F50A3F65249F2D26C6CD22F13.cer Subject info access: rsync://repo-rpki.idnic.net/repo/533f60e6-afdd-4e10-83b4-e8cbd641c52f/0/4EB8521D8427720F50A3F65249F2D26C6CD22F13.mft Manifest number: 0205 Signing time: Sun 19 Oct 2025 10:01:31 +0000 Manifest this update: Sun 19 Oct 2025 09:56:31 +0000 Manifest next update: Wed 22 Oct 2025 11:42:31 +0000 Files and hashes: 1: 3130332e3135382e3135342e302f32332d3233203d3e20313431313236.roa (hash: KoxYk2ZRPcbgpF7xh9ACZAj2oe0zktHzsGiH4v0qag8=) 2: 3130332e3135382e3135352e302f32342d3234203d3e20313431313236.roa (hash: OpAGSXy4nDXjC/N8zkYIDwXuoKZWJrsqeYGg4c9hm6U=) 3: 4EB8521D8427720F50A3F65249F2D26C6CD22F13.crl (hash: 27AZYxhCxjllm8yzMSmuaPgQ0CcVcIVEOBzaS7lzhCU=) 4: 3130332e3135382e3135342e302f32342d3234203d3e20313431313236.roa (hash: lpElssmpxfbgKNNgmUzWoL87GOZos951RTYVyi3dLoQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/533f60e6-afdd-4e10-83b4-e8cbd641c52f/0/4EB8521D8427720F50A3F65249F2D26C6CD22F13.crl rsync://repo-rpki.idnic.net/repo/533f60e6-afdd-4e10-83b4-e8cbd641c52f/0/4EB8521D8427720F50A3F65249F2D26C6CD22F13.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4EB8521D8427720F50A3F65249F2D26C6CD22F13.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 11:42:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:7d:03:c6:2b:44:89:ea:31:72:e1:7d:e6:4e:9a:29:97:35:9d:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4EB8521D8427720F50A3F65249F2D26C6CD22F13 Validity Not Before: Oct 19 09:56:31 2025 GMT Not After : Oct 22 11:42:31 2025 GMT Subject: CN=1A72D114F3692D9686BACA0D8BF6635D58503E40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:da:a0:94:f9:8c:82:44:d7:70:a9:4a:90:aa: 81:6d:3e:d2:82:d3:81:5f:76:78:ce:73:b2:ab:b1: e4:63:98:60:74:60:fe:62:70:1c:3d:4c:70:4a:17: df:33:1e:26:01:e6:4d:79:50:3e:7e:f6:48:92:0d: b8:ca:8d:2e:00:d6:db:2e:98:1c:d8:c0:44:1d:9d: 1b:09:f9:b1:fc:7e:3a:01:29:37:0c:31:12:0a:31: 61:87:13:6e:9f:5a:36:b5:0b:3b:cc:0f:e5:55:ea: 87:a6:3a:7b:08:2a:65:c2:e6:c7:e4:b7:09:51:0c: 5c:a1:ef:cb:53:d9:b5:00:cb:94:9a:32:ff:0a:1e: ea:3b:3e:3c:27:c1:b8:75:87:08:50:75:48:3f:9d: 6c:5f:99:b2:65:1b:fd:ec:9f:eb:d3:ab:d5:2d:16: 76:d5:8c:37:ef:76:1b:56:16:28:6d:a9:f8:07:34: 68:e4:17:69:22:7c:2b:be:f3:d3:d6:ae:9c:c5:ac: 47:5a:a3:1f:99:63:ba:7b:41:85:2d:fa:47:a7:af: b6:27:64:e9:2a:0b:c4:b1:88:4a:54:ae:09:d1:0b: 27:85:f4:73:43:75:d7:b2:6e:91:fd:86:d1:eb:86: e4:b4:2e:46:c7:2b:37:8c:77:18:8e:71:98:97:a0: 1a:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:72:D1:14:F3:69:2D:96:86:BA:CA:0D:8B:F6:63:5D:58:50:3E:40 X509v3 Authority Key Identifier: keyid:4E:B8:52:1D:84:27:72:0F:50:A3:F6:52:49:F2:D2:6C:6C:D2:2F:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/533f60e6-afdd-4e10-83b4-e8cbd641c52f/0/4EB8521D8427720F50A3F65249F2D26C6CD22F13.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4EB8521D8427720F50A3F65249F2D26C6CD22F13.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/533f60e6-afdd-4e10-83b4-e8cbd641c52f/0/4EB8521D8427720F50A3F65249F2D26C6CD22F13.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:6c:09:e0:4e:bf:94:b7:a4:c3:b2:ff:c3:cd:68:7e:be:1a: c7:c0:16:6f:3b:c2:21:fb:c2:bb:44:b9:ff:ce:a9:af:16:21: 27:e6:7e:5a:74:07:fd:56:59:ba:46:92:45:8b:78:ca:13:2d: 47:3b:c4:bf:f8:63:9e:44:6e:17:7f:ef:dc:5c:e8:c2:5d:63: 73:84:fe:9a:0a:2e:b4:a1:83:84:d5:75:90:7f:e5:f5:e2:12: 8b:ff:e4:92:3c:9b:2f:d1:5b:08:de:25:4d:db:e3:24:63:c5: 67:18:d1:34:4b:9b:52:d2:ec:b6:ac:ea:7f:55:63:ae:a1:89: c2:0e:45:48:40:eb:d3:e8:94:ce:e6:96:58:3c:80:96:57:d5: af:62:c7:76:5d:76:ab:ca:b2:15:bd:8b:7b:f1:84:4c:e0:0a: 6a:ec:66:6a:1a:da:ae:e4:59:fa:90:cb:6b:cf:cc:44:33:84: ce:a9:99:31:fe:3b:bb:1b:5e:c4:e1:78:09:a1:9e:cb:c9:7c: 87:b8:22:dc:9f:3a:1a:89:c3:49:1f:7c:c8:82:8e:b4:f8:60: 97:42:87:c5:a8:d9:1e:04:ad:fc:b9:cb:36:8e:81:08:41:0a: 2b:26:35:cb:4a:70:1a:41:c4:4e:55:48:0d:0c:4f:0b:f5:39: 8e:6a:bc:8a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXH0DxitEieoxcuF95k6aKZc1nR0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEVCODUyMUQ4NDI3NzIwRjUwQTNGNjUyNDlGMkQyNkM2 Q0QyMkYxMzAeFw0yNTEwMTkwOTU2MzFaFw0yNTEwMjIxMTQyMzFaMDMxMTAvBgNV BAMTKDFBNzJEMTE0RjM2OTJEOTY4NkJBQ0EwRDhCRjY2MzVENTg1MDNFNDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDz2qCU+YyCRNdwqUqQqoFtPtKC 04FfdnjOc7KrseRjmGB0YP5icBw9THBKF98zHiYB5k15UD5+9kiSDbjKjS4A1tsu mBzYwEQdnRsJ+bH8fjoBKTcMMRIKMWGHE26fWja1CzvMD+VV6oemOnsIKmXC5sfk twlRDFyh78tT2bUAy5SaMv8KHuo7Pjwnwbh1hwhQdUg/nWxfmbJlG/3sn+vTq9Ut FnbVjDfvdhtWFihtqfgHNGjkF2kifCu+89PWrpzFrEdaox+ZY7p7QYUt+kenr7Yn ZOkqC8SxiEpUrgnRCyeF9HNDddeybpH9htHrhuS0LkbHKzeMdxiOcZiXoBrBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGnLRFPNpLZaGusoNi/ZjXVhQPkAwHwYDVR0j BBgwFoAUTrhSHYQncg9Qo/ZSSfLSbGzSLxMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MzNmNjBlNi1hZmRkLTRlMTAtODNiNC1lOGNiZDY0MWM1MmYvMC80RUI4NTIxRDg0 Mjc3MjBGNTBBM0Y2NTI0OUYyRDI2QzZDRDIyRjEzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEVCODUyMUQ4NDI3NzIwRjUwQTNGNjUyNDlGMkQyNkM2Q0Qy MkYxMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTMzZjYwZTYtYWZkZC00ZTEwLTgz YjQtZThjYmQ2NDFjNTJmLzAvNEVCODUyMUQ4NDI3NzIwRjUwQTNGNjUyNDlGMkQy NkM2Q0QyMkYxMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH5sCeBOv5S3pMOy/8PNaH6+GsfAFm87wiH7 wrtEuf/Oqa8WISfmflp0B/1WWbpGkkWLeMoTLUc7xL/4Y55Ebhd/79xc6MJdY3OE /poKLrShg4TVdZB/5fXiEov/5JI8my/RWwjeJU3b4yRjxWcY0TRLm1LS7Las6n9V Y66hicIORUhA69PolM7mllg8gJZX1a9ix3ZddqvKshW9i3vxhEzgCmrsZmoa2q7k WfqQy2vPzEQzhM6pmTH+O7sbXsTheAmhnsvJfIe4ItyfOhqJw0kffMiCjrT4YJdC h8Wo2R4Erfy5yzaOgQhBCismNctKcBpBxE5VSA0MTwv1OY5qvIo= -----END CERTIFICATE-----Generated at Tue Oct 21 01:32:54 2025 by rpki-client