$ rpki-client -vvf repo-rpki.idnic.net/repo/5e4aba0a-1c2c-4f8a-a4b4-ea72d9b2a60a/0/C4632299E016D269164FA40AEF99CC8602E2B7C1.mft File: C4632299E016D269164FA40AEF99CC8602E2B7C1.mft (raw, json) Hash identifier: bju6i+DVPgErDcm7cZDXnM1QFJSovWly9YGps7oLEVc= Subject key identifier: A0:1A:3C:5F:CF:F2:A2:1E:3F:C1:68:58:65:D0:F4:52:56:3A:EA:00 Authority key identifier: C4:63:22:99:E0:16:D2:69:16:4F:A4:0A:EF:99:CC:86:02:E2:B7:C1 Certificate issuer: /CN=C4632299E016D269164FA40AEF99CC8602E2B7C1 Certificate serial: 0621243C62D4A4BE4E79857CD4BD0D1DC18D8318 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C4632299E016D269164FA40AEF99CC8602E2B7C1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5e4aba0a-1c2c-4f8a-a4b4-ea72d9b2a60a/0/C4632299E016D269164FA40AEF99CC8602E2B7C1.mft Manifest number: D2 Signing time: Sat 18 Oct 2025 07:51:35 +0000 Manifest this update: Sat 18 Oct 2025 07:46:35 +0000 Manifest next update: Tue 21 Oct 2025 12:38:35 +0000 Files and hashes: 1: 3136302e32322e36342e302f32332d3234203d3e203435333035.roa (hash: gDEeaK4MqvoH1/Rybnd4HP4RdLEQVc8gkFhCRcLn6ys=) 2: C4632299E016D269164FA40AEF99CC8602E2B7C1.crl (hash: yq88OBWmldazgaeGDFF5rV99ds1DYumKW5xycp+X/6E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5e4aba0a-1c2c-4f8a-a4b4-ea72d9b2a60a/0/C4632299E016D269164FA40AEF99CC8602E2B7C1.crl rsync://repo-rpki.idnic.net/repo/5e4aba0a-1c2c-4f8a-a4b4-ea72d9b2a60a/0/C4632299E016D269164FA40AEF99CC8602E2B7C1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C4632299E016D269164FA40AEF99CC8602E2B7C1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 12:38:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:21:24:3c:62:d4:a4:be:4e:79:85:7c:d4:bd:0d:1d:c1:8d:83:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C4632299E016D269164FA40AEF99CC8602E2B7C1 Validity Not Before: Oct 18 07:46:35 2025 GMT Not After : Oct 21 12:38:35 2025 GMT Subject: CN=A01A3C5FCFF2A21E3FC1685865D0F452563AEA00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:01:31:00:b4:9b:15:03:48:ab:04:1a:11:dc: d1:19:21:8e:c5:79:69:c5:3d:6f:b4:bf:7d:1d:3b: b5:2f:28:80:08:88:69:fd:41:46:f7:6f:ef:71:33: 3e:56:83:3e:a0:1e:d0:f1:a5:65:90:ee:11:c0:a8: 9f:ee:e5:5d:d3:f9:df:2a:28:79:eb:2b:e8:f0:1c: 6c:0d:eb:d3:61:d6:e1:5a:85:7e:13:ac:a8:1e:9e: b6:ba:88:98:ec:80:5e:ab:ae:95:2d:51:94:61:c2: 45:01:55:87:6a:3a:b7:75:d8:50:62:06:52:79:ba: c0:ce:e6:ef:3e:46:a8:bc:a1:73:79:a2:8f:a4:a6: d5:55:50:80:12:1b:87:e7:8c:58:8c:ed:75:6b:a0: 60:59:4a:ff:94:d5:9e:f2:b8:42:84:be:7d:32:cf: 97:bd:28:71:91:18:2b:88:ab:f2:83:73:1a:6a:05: 5e:74:cc:f4:e5:4b:56:ea:b8:88:8a:35:e9:3c:e0: 6b:be:3f:74:c8:8a:d4:7e:84:5c:3c:5c:ea:3b:b1: 0c:c5:cf:d2:16:3c:9c:b9:0c:7d:ec:0e:e7:8c:46: 90:f4:98:9f:68:23:31:72:0a:76:cb:e6:92:61:1b: 79:c7:63:e2:df:81:4e:aa:30:18:f4:a8:35:09:73: 8f:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:1A:3C:5F:CF:F2:A2:1E:3F:C1:68:58:65:D0:F4:52:56:3A:EA:00 X509v3 Authority Key Identifier: keyid:C4:63:22:99:E0:16:D2:69:16:4F:A4:0A:EF:99:CC:86:02:E2:B7:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5e4aba0a-1c2c-4f8a-a4b4-ea72d9b2a60a/0/C4632299E016D269164FA40AEF99CC8602E2B7C1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C4632299E016D269164FA40AEF99CC8602E2B7C1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5e4aba0a-1c2c-4f8a-a4b4-ea72d9b2a60a/0/C4632299E016D269164FA40AEF99CC8602E2B7C1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:c6:34:54:ee:df:46:aa:73:27:9a:e7:86:df:55:98:c6:eb: a9:66:31:8c:a1:11:c9:a9:8a:38:dd:6e:c1:a0:1c:d1:3d:59: ec:9d:e3:22:4a:5d:fa:fe:c0:5a:77:65:5e:f0:e7:75:4d:1b: f2:30:50:8f:62:72:fc:3f:c7:68:ca:8b:ab:42:f4:95:dd:9b: 1a:7f:6a:f6:cf:01:0a:36:e5:46:46:f0:b8:bc:bd:2a:d5:59: 01:2b:b1:4a:94:0c:07:57:40:d1:c1:89:f1:23:f3:c7:67:f2: 6b:06:61:47:cd:22:c6:57:32:7d:c4:6a:38:c6:6a:6e:62:fb: c6:a8:da:8a:da:72:bb:c6:61:4d:e9:8e:02:64:f7:b3:1b:d1: b0:98:9f:d5:dc:69:2d:55:29:10:a6:73:02:db:98:c7:bb:c0: 64:b8:80:10:a9:b3:b5:36:5d:47:91:a8:4e:da:f7:df:26:66: 2f:c3:9d:97:9f:d6:f7:dd:b7:85:69:b4:24:13:07:e2:04:35: af:4b:06:96:9a:1b:3d:2d:da:6e:6f:22:07:65:21:71:d3:05: f1:55:b7:3b:20:5c:8d:ed:b5:c6:20:92:bf:af:5a:88:72:91: cf:94:fb:1e:68:72:9c:d6:c6:84:5e:5c:b5:31:38:72:01:4d: ca:9f:2f:29 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBiEkPGLUpL5OeYV81L0NHcGNgxgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzQ2MzIyOTlFMDE2RDI2OTE2NEZBNDBBRUY5OUNDODYw MkUyQjdDMTAeFw0yNTEwMTgwNzQ2MzVaFw0yNTEwMjExMjM4MzVaMDMxMTAvBgNV BAMTKEEwMUEzQzVGQ0ZGMkEyMUUzRkMxNjg1ODY1RDBGNDUyNTYzQUVBMDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8ATEAtJsVA0irBBoR3NEZIY7F eWnFPW+0v30dO7UvKIAIiGn9QUb3b+9xMz5Wgz6gHtDxpWWQ7hHAqJ/u5V3T+d8q KHnrK+jwHGwN69Nh1uFahX4TrKgenra6iJjsgF6rrpUtUZRhwkUBVYdqOrd12FBi BlJ5usDO5u8+Rqi8oXN5oo+kptVVUIASG4fnjFiM7XVroGBZSv+U1Z7yuEKEvn0y z5e9KHGRGCuIq/KDcxpqBV50zPTlS1bquIiKNek84Gu+P3TIitR+hFw8XOo7sQzF z9IWPJy5DH3sDueMRpD0mJ9oIzFyCnbL5pJhG3nHY+LfgU6qMBj0qDUJc4+tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoBo8X8/yoh4/wWhYZdD0UlY66gAwHwYDVR0j BBgwFoAUxGMimeAW0mkWT6QK75nMhgLit8EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZTRhYmEwYS0xYzJjLTRmOGEtYTRiNC1lYTcyZDliMmE2MGEvMC9DNDYzMjI5OUUw MTZEMjY5MTY0RkE0MEFFRjk5Q0M4NjAyRTJCN0MxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQzQ2MzIyOTlFMDE2RDI2OTE2NEZBNDBBRUY5OUNDODYwMkUy QjdDMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWU0YWJhMGEtMWMyYy00ZjhhLWE0 YjQtZWE3MmQ5YjJhNjBhLzAvQzQ2MzIyOTlFMDE2RDI2OTE2NEZBNDBBRUY5OUND ODYwMkUyQjdDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKLGNFTu30aqcyea54bfVZjG66lmMYyhEcmp ijjdbsGgHNE9Weyd4yJKXfr+wFp3ZV7w53VNG/IwUI9icvw/x2jKi6tC9JXdmxp/ avbPAQo25UZG8Li8vSrVWQErsUqUDAdXQNHBifEj88dn8msGYUfNIsZXMn3EajjG am5i+8ao2oracrvGYU3pjgJk97Mb0bCYn9XcaS1VKRCmcwLbmMe7wGS4gBCps7U2 XUeRqE7a998mZi/DnZef1vfdt4VptCQTB+IENa9LBpaaGz0t2m5vIgdlIXHTBfFV tzsgXI3ttcYgkr+vWohykc+U+x5ocpzWxoReXLUxOHIBTcqfLyk= -----END CERTIFICATE-----Generated at Mon Oct 20 08:45:28 2025 by rpki-client