$ rpki-client -vvf repo-rpki.idnic.net/repo/68184fab-0fa5-43bb-811c-2eeb0a5fe8d7/0/4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1.mft File: 4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1.mft (raw, json) Hash identifier: E020EQ2Z7VPJZ0m2B4jouG44+lGXGpw9BoCJR0c/QaM= Subject key identifier: 7C:95:96:07:2B:7C:4A:86:BB:0C:FF:D9:A5:43:22:33:E4:0E:5B:AB Authority key identifier: 4D:57:27:02:D7:7E:3A:9A:4A:FA:80:33:A2:A3:DC:59:7B:2C:8D:A1 Certificate issuer: /CN=4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1 Certificate serial: 72711FABCC21B0D37ABC2085FF74AAC109881965 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/68184fab-0fa5-43bb-811c-2eeb0a5fe8d7/0/4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1.mft Manifest number: 01FF Signing time: Sun 19 Oct 2025 19:31:45 +0000 Manifest this update: Sun 19 Oct 2025 19:26:45 +0000 Manifest next update: Thu 23 Oct 2025 03:32:45 +0000 Files and hashes: 1: 3131382e3135312e3232302e302f32322d3234203d3e2039333236.roa (hash: MqS7xa1gZ4sxYF09hDVlXuThuOKNijdrU/YubMLE0nE=) 2: 4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1.crl (hash: Lb/Wa8Sf/mLwRg0+Kk24V55DfaoGQX1j6fq6Jl4N0Io=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/68184fab-0fa5-43bb-811c-2eeb0a5fe8d7/0/4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1.crl rsync://repo-rpki.idnic.net/repo/68184fab-0fa5-43bb-811c-2eeb0a5fe8d7/0/4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 03:32:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:71:1f:ab:cc:21:b0:d3:7a:bc:20:85:ff:74:aa:c1:09:88:19:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1 Validity Not Before: Oct 19 19:26:45 2025 GMT Not After : Oct 23 03:32:45 2025 GMT Subject: CN=7C9596072B7C4A86BB0CFFD9A5432233E40E5BAB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:9f:d7:38:05:62:18:82:e4:f3:0e:a2:08:ad: 01:b4:06:b7:6b:30:59:12:7b:d3:5f:43:f7:d2:7a: dd:4b:3b:50:2b:b0:cc:fa:85:a6:58:f4:dc:93:26: f1:10:3d:93:38:1a:a7:7b:2b:97:6e:96:ef:92:c4: 84:e4:63:11:81:4a:31:84:9a:c7:53:99:08:13:a0: a3:1a:19:93:b0:16:9c:c3:e5:e2:2e:5d:67:1c:11: b8:07:8c:cf:19:18:12:8d:be:05:0c:8a:2b:ea:7a: 4e:d7:ac:de:b3:df:db:1f:f0:69:bb:a7:bc:c6:10: 1b:13:c8:54:54:17:1d:5d:f4:2b:34:4a:51:0e:a8: f9:5a:9f:36:ea:eb:5e:4b:fc:aa:b8:8e:5d:34:1e: f6:94:93:b9:ed:71:07:2c:24:a6:80:82:01:8c:13: 6d:be:3a:9f:c2:62:1b:bc:2f:3b:a3:47:e8:e3:1d: 2a:4a:85:99:72:a0:14:27:ac:c8:8a:f2:a6:c2:b8: 4f:96:c6:e1:80:19:2c:78:af:26:f1:7c:b9:cb:1c: b1:b0:e7:01:4e:09:c1:f9:39:d2:9b:0e:2e:c4:8a: 37:e2:71:ec:b1:e0:f4:76:63:02:07:14:4a:49:a2: 4a:d0:33:86:33:40:e6:7c:f0:3c:34:90:6d:e1:8d: 6c:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:95:96:07:2B:7C:4A:86:BB:0C:FF:D9:A5:43:22:33:E4:0E:5B:AB X509v3 Authority Key Identifier: keyid:4D:57:27:02:D7:7E:3A:9A:4A:FA:80:33:A2:A3:DC:59:7B:2C:8D:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/68184fab-0fa5-43bb-811c-2eeb0a5fe8d7/0/4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/68184fab-0fa5-43bb-811c-2eeb0a5fe8d7/0/4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:58:6d:dd:ed:ba:e0:04:94:8f:e8:f0:a2:d6:55:9d:2b:d6: 84:12:0d:7a:11:52:24:55:2a:bc:a8:5f:86:db:82:d9:b3:5e: 75:8e:b9:9c:0f:80:65:64:6e:bd:2e:eb:9a:6e:46:b9:7c:34: e1:c3:f7:75:36:e2:17:78:27:a0:2e:55:5b:79:d5:c9:fe:c6: 3c:74:b6:1b:74:0a:ff:f6:47:d1:2a:ff:0e:3a:db:3e:cb:a2: d4:1c:4a:c4:88:08:81:54:23:97:a6:7e:bd:97:27:6c:34:a1: bf:14:6b:83:69:c2:58:45:86:5f:e8:92:5b:4c:04:0b:74:c2: 52:71:b8:01:9d:ab:e5:a0:87:5c:a0:4b:99:86:db:80:d3:c9: 35:f4:dd:85:56:97:7b:c0:c6:78:b2:53:30:52:5f:ff:d0:65: 56:84:4c:b9:6a:f8:a4:b9:ab:10:05:2d:b9:d0:6a:a0:c7:92: 25:39:31:95:6f:c4:38:4c:be:b3:f1:60:43:4c:13:76:2d:f7: 65:82:e8:7e:63:4b:a2:39:bd:85:a7:a4:2a:2e:76:a6:0b:4b: 93:b5:d9:2c:b5:14:75:0c:d7:f2:f8:2f:0a:37:42:69:09:48: 76:3a:06:15:58:e1:b7:55:27:16:21:5b:db:72:33:56:0c:c1: c2:b8:79:51 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcnEfq8whsNN6vCCF/3SqwQmIGWUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEQ1NzI3MDJENzdFM0E5QTRBRkE4MDMzQTJBM0RDNTk3 QjJDOERBMTAeFw0yNTEwMTkxOTI2NDVaFw0yNTEwMjMwMzMyNDVaMDMxMTAvBgNV BAMTKDdDOTU5NjA3MkI3QzRBODZCQjBDRkZEOUE1NDMyMjMzRTQwRTVCQUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1n9c4BWIYguTzDqIIrQG0Brdr MFkSe9NfQ/fSet1LO1ArsMz6haZY9NyTJvEQPZM4Gqd7K5dulu+SxITkYxGBSjGE msdTmQgToKMaGZOwFpzD5eIuXWccEbgHjM8ZGBKNvgUMiivqek7XrN6z39sf8Gm7 p7zGEBsTyFRUFx1d9Cs0SlEOqPlanzbq615L/Kq4jl00HvaUk7ntcQcsJKaAggGM E22+Op/CYhu8LzujR+jjHSpKhZlyoBQnrMiK8qbCuE+WxuGAGSx4rybxfLnLHLGw 5wFOCcH5OdKbDi7Eijficeyx4PR2YwIHFEpJokrQM4YzQOZ88Dw0kG3hjWzvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfJWWByt8Soa7DP/ZpUMiM+QOW6swHwYDVR0j BBgwFoAUTVcnAtd+OppK+oAzoqPcWXssjaEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ODE4NGZhYi0wZmE1LTQzYmItODExYy0yZWViMGE1ZmU4ZDcvMC80RDU3MjcwMkQ3 N0UzQTlBNEFGQTgwMzNBMkEzREM1OTdCMkM4REExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEQ1NzI3MDJENzdFM0E5QTRBRkE4MDMzQTJBM0RDNTk3QjJD OERBMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjgxODRmYWItMGZhNS00M2JiLTgx MWMtMmVlYjBhNWZlOGQ3LzAvNEQ1NzI3MDJENzdFM0E5QTRBRkE4MDMzQTJBM0RD NTk3QjJDOERBMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJtYbd3tuuAElI/o8KLWVZ0r1oQSDXoRUiRV KryoX4bbgtmzXnWOuZwPgGVkbr0u65puRrl8NOHD93U24hd4J6AuVVt51cn+xjx0 tht0Cv/2R9Eq/w462z7LotQcSsSICIFUI5emfr2XJ2w0ob8Ua4NpwlhFhl/okltM BAt0wlJxuAGdq+Wgh1ygS5mG24DTyTX03YVWl3vAxniyUzBSX//QZVaETLlq+KS5 qxAFLbnQaqDHkiU5MZVvxDhMvrPxYENME3Yt92WC6H5jS6I5vYWnpCoudqYLS5O1 2Sy1FHUM1/L4Lwo3QmkJSHY6BhVY4bdVJxYhW9tyM1YMwcK4eVE= -----END CERTIFICATE-----Generated at Mon Oct 20 10:19:02 2025 by rpki-client