$ rpki-client -vvf repo-rpki.idnic.net/repo/570c1bab-13f4-4ce6-85f7-c388737f6d19/0/00B4ECFCCAE90A9463FD71822A3CEE4C8C145AD4.mft File: 00B4ECFCCAE90A9463FD71822A3CEE4C8C145AD4.mft (raw, json) Hash identifier: V6UHj28t9e6NPJzdC7gp+aMVSE/nF0ArZSnCOzTjPIM= Subject key identifier: F8:F4:44:7F:ED:F4:F3:5F:33:DF:2F:31:13:DF:AD:4A:11:21:DE:20 Authority key identifier: 00:B4:EC:FC:CA:E9:0A:94:63:FD:71:82:2A:3C:EE:4C:8C:14:5A:D4 Certificate issuer: /CN=00B4ECFCCAE90A9463FD71822A3CEE4C8C145AD4 Certificate serial: 486920BD99C3CF889914FB07EBF46DB5083F75A6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00B4ECFCCAE90A9463FD71822A3CEE4C8C145AD4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/570c1bab-13f4-4ce6-85f7-c388737f6d19/0/00B4ECFCCAE90A9463FD71822A3CEE4C8C145AD4.mft Manifest number: CF Signing time: Sun 19 Oct 2025 12:21:35 +0000 Manifest this update: Sun 19 Oct 2025 12:16:35 +0000 Manifest next update: Wed 22 Oct 2025 21:18:35 +0000 Files and hashes: 1: 323030313a6466323a663334303a3a2f34382d3438203d3e20313432333333.roa (hash: TsqNIUGKVArIBEGfFPOQj0RJMusrdrLAysbKak+tetA=) 2: 00B4ECFCCAE90A9463FD71822A3CEE4C8C145AD4.crl (hash: r0UG810NTy0kEUfBUEzEtK/9x4/f3lftfbXSoN50tlw=) 3: 3130332e3136392e33322e302f32332d3234203d3e20313432333333.roa (hash: K+l/g4p9y6cTiWHXp9qbhWcap/gI8HD7/DZcp0av7uY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/570c1bab-13f4-4ce6-85f7-c388737f6d19/0/00B4ECFCCAE90A9463FD71822A3CEE4C8C145AD4.crl rsync://repo-rpki.idnic.net/repo/570c1bab-13f4-4ce6-85f7-c388737f6d19/0/00B4ECFCCAE90A9463FD71822A3CEE4C8C145AD4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00B4ECFCCAE90A9463FD71822A3CEE4C8C145AD4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 21:18:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:69:20:bd:99:c3:cf:88:99:14:fb:07:eb:f4:6d:b5:08:3f:75:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00B4ECFCCAE90A9463FD71822A3CEE4C8C145AD4 Validity Not Before: Oct 19 12:16:35 2025 GMT Not After : Oct 22 21:18:35 2025 GMT Subject: CN=F8F4447FEDF4F35F33DF2F3113DFAD4A1121DE20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:37:76:72:52:3d:7e:6f:3b:b5:12:4f:64:bd: cd:b7:b3:2b:d0:a5:9d:f5:e1:b2:ed:b6:f3:ba:e1: d7:52:2c:78:fe:9a:34:f0:93:2f:9c:26:98:50:be: e2:dc:b8:ad:14:e1:e1:ba:2d:a4:97:ba:ac:50:c8: f0:3a:86:fc:e9:57:e9:86:1d:ad:d5:30:41:33:0d: bf:d9:7c:02:95:e5:f9:1d:f3:3c:8e:b9:06:d7:c2: be:62:e7:cd:8a:87:34:74:62:93:83:4b:49:c4:d1: ba:57:0f:3c:06:32:7a:c9:b1:4d:3b:5f:57:1e:d8: 20:bb:e3:0d:37:7f:8e:5d:ab:e0:bf:bb:0a:a0:fc: 27:17:b3:40:65:54:14:23:5b:84:a5:1a:0c:92:24: 8e:2e:57:8a:23:d0:c6:50:77:47:fe:f4:d2:ff:ac: f6:f6:92:3e:2b:91:8a:24:46:2b:51:e5:c8:0f:70: de:34:df:7a:5e:ee:b8:de:e3:b3:62:3a:d7:88:98: d1:5f:aa:09:a9:c9:6b:5c:21:61:8f:3e:5c:d5:a5: fd:96:65:3e:b6:e9:16:5d:d4:2c:e5:65:2c:fd:e6: 67:bc:c8:3a:69:ba:a9:11:3c:61:09:3d:6c:98:f8: 39:3f:09:70:c9:5c:07:60:69:2b:7c:f4:0f:60:93: f1:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:F4:44:7F:ED:F4:F3:5F:33:DF:2F:31:13:DF:AD:4A:11:21:DE:20 X509v3 Authority Key Identifier: keyid:00:B4:EC:FC:CA:E9:0A:94:63:FD:71:82:2A:3C:EE:4C:8C:14:5A:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/570c1bab-13f4-4ce6-85f7-c388737f6d19/0/00B4ECFCCAE90A9463FD71822A3CEE4C8C145AD4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00B4ECFCCAE90A9463FD71822A3CEE4C8C145AD4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/570c1bab-13f4-4ce6-85f7-c388737f6d19/0/00B4ECFCCAE90A9463FD71822A3CEE4C8C145AD4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:21:8d:a5:97:ed:9c:05:88:8f:ec:79:38:f4:3a:b9:49:3c: 45:19:a4:82:19:db:48:27:6c:cf:64:2c:d3:6b:67:85:a6:d6: 2e:44:db:ef:b3:41:26:a1:b2:1a:69:e8:8e:fc:f6:10:76:50: fc:49:ae:85:77:59:73:29:eb:51:ae:bf:d1:65:23:8b:80:6c: 67:76:ef:f2:9b:ca:97:f1:7d:b9:1c:24:0d:95:2f:6c:57:41: 38:7c:8b:a8:03:e4:91:1d:fc:56:0d:21:b6:6c:f1:31:ec:d5: e4:b6:2a:8b:17:d7:14:81:d1:60:26:08:b2:56:f2:55:ca:89: 35:b6:55:40:b1:17:be:a8:ef:4b:1f:08:33:d7:37:f2:01:20: fa:46:94:3d:08:d2:4a:90:f6:f0:9e:12:f6:e7:48:03:aa:c5: 89:8a:81:a9:3b:65:f5:69:fc:43:46:c5:3b:78:b6:8f:ac:15: 8f:b4:63:ac:ec:b4:30:c7:08:12:6d:d2:77:65:0e:9c:eb:4b: 1c:cb:03:d9:2b:d9:b8:09:f9:77:05:30:71:70:6c:d8:7c:1f: 15:76:47:c0:b1:b9:3c:c7:6f:3f:f8:06:d1:c4:48:f8:55:85: 0f:de:28:3f:2e:6d:59:9f:3b:2d:69:29:c6:93:4f:17:c9:53: 68:be:bd:85 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSGkgvZnDz4iZFPsH6/RttQg/daYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDBCNEVDRkNDQUU5MEE5NDYzRkQ3MTgyMkEzQ0VFNEM4 QzE0NUFENDAeFw0yNTEwMTkxMjE2MzVaFw0yNTEwMjIyMTE4MzVaMDMxMTAvBgNV BAMTKEY4RjQ0NDdGRURGNEYzNUYzM0RGMkYzMTEzREZBRDRBMTEyMURFMjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyN3ZyUj1+bzu1Ek9kvc23syvQ pZ314bLttvO64ddSLHj+mjTwky+cJphQvuLcuK0U4eG6LaSXuqxQyPA6hvzpV+mG Ha3VMEEzDb/ZfAKV5fkd8zyOuQbXwr5i582KhzR0YpODS0nE0bpXDzwGMnrJsU07 X1ce2CC74w03f45dq+C/uwqg/CcXs0BlVBQjW4SlGgySJI4uV4oj0MZQd0f+9NL/ rPb2kj4rkYokRitR5cgPcN4033pe7rje47NiOteImNFfqgmpyWtcIWGPPlzVpf2W ZT626RZd1CzlZSz95me8yDppuqkRPGEJPWyY+Dk/CXDJXAdgaSt89A9gk/HBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+PREf+30818z3y8xE9+tShEh3iAwHwYDVR0j BBgwFoAUALTs/MrpCpRj/XGCKjzuTIwUWtQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NzBjMWJhYi0xM2Y0LTRjZTYtODVmNy1jMzg4NzM3ZjZkMTkvMC8wMEI0RUNGQ0NB RTkwQTk0NjNGRDcxODIyQTNDRUU0QzhDMTQ1QUQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDBCNEVDRkNDQUU5MEE5NDYzRkQ3MTgyMkEzQ0VFNEM4QzE0 NUFENC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTcwYzFiYWItMTNmNC00Y2U2LTg1 ZjctYzM4ODczN2Y2ZDE5LzAvMDBCNEVDRkNDQUU5MEE5NDYzRkQ3MTgyMkEzQ0VF NEM4QzE0NUFENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABwhjaWX7ZwFiI/seTj0OrlJPEUZpIIZ20gn bM9kLNNrZ4Wm1i5E2++zQSahshpp6I789hB2UPxJroV3WXMp61Guv9FlI4uAbGd2 7/KbypfxfbkcJA2VL2xXQTh8i6gD5JEd/FYNIbZs8THs1eS2KosX1xSB0WAmCLJW 8lXKiTW2VUCxF76o70sfCDPXN/IBIPpGlD0I0kqQ9vCeEvbnSAOqxYmKgak7ZfVp /ENGxTt4to+sFY+0Y6zstDDHCBJt0ndlDpzrSxzLA9kr2bgJ+XcFMHFwbNh8HxV2 R8CxuTzHbz/4BtHESPhVhQ/eKD8ubVmfOy1pKcaTTxfJU2i+vYU= -----END CERTIFICATE-----Generated at Mon Oct 20 09:47:15 2025 by rpki-client