$ rpki-client -vvf repo-rpki.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.mft File: 4A9E8C61BE3670D865B8A79D7D32798550E64F2B.mft (raw, json) Hash identifier: K92HiBELsFjygpeGpAvyiDhj30d4etLhx3Fam8LEarM= Subject key identifier: 58:23:23:D8:52:57:4D:CC:4D:F0:71:84:EA:4A:BB:F1:AC:1E:0F:28 Authority key identifier: 4A:9E:8C:61:BE:36:70:D8:65:B8:A7:9D:7D:32:79:85:50:E6:4F:2B Certificate issuer: /CN=4A9E8C61BE3670D865B8A79D7D32798550E64F2B Certificate serial: 2D777ADBF65B48112D99AB179A751E473DC5D8DD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.mft Manifest number: 0143 Signing time: Sun 19 Oct 2025 03:23:32 +0000 Manifest this update: Sun 19 Oct 2025 03:18:32 +0000 Manifest next update: Wed 22 Oct 2025 12:15:32 +0000 Files and hashes: 1: 3130332e3234352e33382e302f32332d3234203d3e203535363838.roa (hash: BXIKEbp3orzobWDQOxRP4yZHbZeEm5j1Qo8aYx25BZE=) 2: 4A9E8C61BE3670D865B8A79D7D32798550E64F2B.crl (hash: bLjfDJYZ6t78z72ZV4LNrFbTxR63mpji3pB66y2h43Y=) 3: 323030313a6466323a656434303a3a2f34382d3438203d3e203535363838.roa (hash: EjIlnJwLN6tob8lWzuv6YJeMCHTcSGWnYIQOvyIdVqQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.crl rsync://repo-rpki.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 12:15:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:77:7a:db:f6:5b:48:11:2d:99:ab:17:9a:75:1e:47:3d:c5:d8:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A9E8C61BE3670D865B8A79D7D32798550E64F2B Validity Not Before: Oct 19 03:18:32 2025 GMT Not After : Oct 22 12:15:32 2025 GMT Subject: CN=582323D852574DCC4DF07184EA4ABBF1AC1E0F28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:6d:34:89:0b:c8:86:2a:a6:3b:ed:2b:f2:4f: df:bb:f7:c1:70:f6:db:8c:ab:4e:49:9f:11:d8:35: fe:ff:c4:f1:ba:11:27:cd:5b:53:5f:48:5a:bf:8d: ee:62:b9:a2:4d:c5:08:33:1b:39:b0:1e:62:4e:3d: 78:b7:f0:eb:e8:b1:64:bb:73:20:fc:f2:dc:ed:1d: 20:c7:72:f3:2b:93:d5:e8:a8:3a:6e:26:21:29:cc: 30:e4:b8:e1:4f:b8:e6:da:60:ec:40:b3:8c:d4:75: 7c:7a:7d:ee:18:7d:c0:68:cb:67:bf:87:94:63:83: 29:c7:4e:ea:51:f7:2a:51:94:b7:3c:61:b3:4d:1a: eb:d1:43:8b:fe:2a:09:d4:61:97:8c:be:81:9a:81: 40:a6:c5:f7:66:df:35:1f:ff:46:d0:0c:3b:be:6f: d9:15:0b:f6:0b:b2:92:ff:6a:2c:c2:94:b6:7d:a1: 79:2c:26:fd:9c:81:d4:c7:d8:11:9c:68:24:c1:fc: 27:cb:3a:2d:a9:29:8a:d3:98:78:0d:3b:5b:5e:60: 36:62:02:69:70:19:63:02:71:a2:a2:26:5a:84:12: d5:c7:fa:70:d3:26:71:1e:ed:35:38:f3:30:78:e6: f7:bc:d8:93:d7:73:de:e4:f9:25:dc:90:9d:48:06: 4b:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:23:23:D8:52:57:4D:CC:4D:F0:71:84:EA:4A:BB:F1:AC:1E:0F:28 X509v3 Authority Key Identifier: keyid:4A:9E:8C:61:BE:36:70:D8:65:B8:A7:9D:7D:32:79:85:50:E6:4F:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:97:d1:c7:39:f9:e4:f9:a8:51:cf:b7:85:46:1e:2a:04:f8: aa:9f:30:02:0a:a6:12:e8:00:c1:0c:02:e1:e5:c0:22:be:da: 93:61:be:13:c7:3d:ee:b0:05:6f:56:be:d5:70:1a:f8:bb:ef: 03:7e:97:a3:41:cc:21:c8:e5:09:f9:ae:e1:ad:f1:e1:ab:fb: bc:4e:29:12:57:b1:c4:36:cc:5e:ae:36:d7:fd:ec:c3:6d:4e: d0:0d:33:77:1d:61:99:2a:f5:94:89:75:60:c7:10:24:ec:0a: f8:a2:1a:51:02:f2:f3:7e:66:1f:c2:e2:3c:9b:be:1f:66:5a: 67:ea:3d:a0:5c:3b:dc:23:f8:c9:9b:46:2e:6c:bd:ba:86:b8: 32:6a:e2:e0:ea:99:00:27:5a:d9:07:6c:ca:50:c1:a6:db:c0: 1c:f9:8d:ee:cc:c7:83:f8:48:33:e6:03:55:0a:21:57:14:90: 03:05:f4:2f:a3:20:1d:30:f8:01:8f:a0:bb:06:b4:30:19:a8: cc:70:62:29:fd:e5:9c:a4:a6:61:9a:ad:da:a8:4e:96:81:36: d1:3c:06:e9:a7:e5:b6:d3:01:5b:c4:cb:95:a8:24:b9:e9:0e: 63:8c:70:99:23:24:c5:8c:d9:e0:6a:a2:09:9e:e2:16:21:e8: 6e:ab:bf:db -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULXd62/ZbSBEtmasXmnUeRz3F2N0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEE5RThDNjFCRTM2NzBEODY1QjhBNzlEN0QzMjc5ODU1 MEU2NEYyQjAeFw0yNTEwMTkwMzE4MzJaFw0yNTEwMjIxMjE1MzJaMDMxMTAvBgNV BAMTKDU4MjMyM0Q4NTI1NzREQ0M0REYwNzE4NEVBNEFCQkYxQUMxRTBGMjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRbTSJC8iGKqY77SvyT9+798Fw 9tuMq05JnxHYNf7/xPG6ESfNW1NfSFq/je5iuaJNxQgzGzmwHmJOPXi38OvosWS7 cyD88tztHSDHcvMrk9XoqDpuJiEpzDDkuOFPuObaYOxAs4zUdXx6fe4YfcBoy2e/ h5RjgynHTupR9ypRlLc8YbNNGuvRQ4v+KgnUYZeMvoGagUCmxfdm3zUf/0bQDDu+ b9kVC/YLspL/aizClLZ9oXksJv2cgdTH2BGcaCTB/CfLOi2pKYrTmHgNO1teYDZi AmlwGWMCcaKiJlqEEtXH+nDTJnEe7TU48zB45ve82JPXc97k+SXckJ1IBkslAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWCMj2FJXTcxN8HGE6kq78aweDygwHwYDVR0j BBgwFoAUSp6MYb42cNhluKedfTJ5hVDmTyswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YzQ5MzVkOC05NmEyLTQ1NjQtODVhMy0zMmE1MzE4OTM2N2UvMC80QTlFOEM2MUJF MzY3MEQ4NjVCOEE3OUQ3RDMyNzk4NTUwRTY0RjJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEE5RThDNjFCRTM2NzBEODY1QjhBNzlEN0QzMjc5ODU1MEU2 NEYyQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2M0OTM1ZDgtOTZhMi00NTY0LTg1 YTMtMzJhNTMxODkzNjdlLzAvNEE5RThDNjFCRTM2NzBEODY1QjhBNzlEN0QzMjc5 ODU1MEU2NEYyQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGiX0cc5+eT5qFHPt4VGHioE+KqfMAIKphLo AMEMAuHlwCK+2pNhvhPHPe6wBW9WvtVwGvi77wN+l6NBzCHI5Qn5ruGt8eGr+7xO KRJXscQ2zF6uNtf97MNtTtANM3cdYZkq9ZSJdWDHECTsCviiGlEC8vN+Zh/C4jyb vh9mWmfqPaBcO9wj+MmbRi5svbqGuDJq4uDqmQAnWtkHbMpQwabbwBz5je7Mx4P4 SDPmA1UKIVcUkAMF9C+jIB0w+AGPoLsGtDAZqMxwYin95ZykpmGardqoTpaBNtE8 Bumn5bbTAVvEy5WoJLnpDmOMcJkjJMWM2eBqogme4hYh6G6rv9s= -----END CERTIFICATE-----Generated at Mon Oct 20 06:49:30 2025 by rpki-client