$ rpki-client -vvf repo-rpki.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.mft File: 4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.mft (raw, json) Hash identifier: 0X4xmQxdiM6xuBFM7D0YI7WNIMdo2fnw0ROL/Ff7UKA= Subject key identifier: C8:BF:EC:5D:9B:07:CE:0A:EE:A6:72:12:D1:57:3E:20:49:8E:D5:67 Authority key identifier: 4E:CF:7D:FB:09:FB:3B:5C:21:DD:E6:61:15:0B:95:76:8B:6B:D3:19 Certificate issuer: /CN=4ECF7DFB09FB3B5C21DDE661150B95768B6BD319 Certificate serial: 0A30700448F0C1A15565AEB05010BD80581C798B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.mft Manifest number: 0225 Signing time: Sat 18 Oct 2025 23:51:22 +0000 Manifest this update: Sat 18 Oct 2025 23:46:22 +0000 Manifest next update: Wed 22 Oct 2025 07:03:22 +0000 Files and hashes: 1: 3130332e3136332e3233302e302f32342d3234203d3e20313431393037.roa (hash: BplHdHRvA1GeP43VsiSGj8a+Gmuq6dP6VgR2vhuZ0uU=) 2: 3130332e3136332e3233302e302f32332d3233203d3e20313431393037.roa (hash: TWsMpo4cWVJOgLuAED46zFpQBaqLsvvEiv7xGtW44bE=) 3: 4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.crl (hash: Izy6UmiIxiGj/a7mzjYg5KzDzOVxS497lYqdY2UIVVs=) 4: 3130332e3136332e3233312e302f32342d3234203d3e20313431393037.roa (hash: yg4jobWhxttigVY/iZoK6bsKdtykwi2az+8aCa0nyW4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.crl rsync://repo-rpki.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 07:03:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:30:70:04:48:f0:c1:a1:55:65:ae:b0:50:10:bd:80:58:1c:79:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ECF7DFB09FB3B5C21DDE661150B95768B6BD319 Validity Not Before: Oct 18 23:46:22 2025 GMT Not After : Oct 22 07:03:22 2025 GMT Subject: CN=C8BFEC5D9B07CE0AEEA67212D1573E20498ED567 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:94:99:ce:30:76:b7:5f:47:fb:d5:8f:ee:7d: 00:16:63:1f:02:a2:7a:b8:e9:ed:97:1a:d3:f5:77: 08:e5:a3:d3:d3:7a:15:ff:19:3d:d2:16:0d:34:5f: 29:71:1f:af:0a:b5:f0:ee:22:61:02:db:74:b8:2f: 61:da:1a:5b:24:fb:b2:33:6a:54:dc:89:8c:5b:66: c7:61:da:f5:fd:9b:8c:f5:76:bd:f0:1f:31:ac:b0: 4b:9f:f7:b8:32:21:67:45:a8:90:45:8a:15:2d:25: f3:7e:0e:99:e4:f6:44:15:3b:4c:70:98:21:44:49: 95:d6:ce:39:e8:d9:c9:85:63:b0:94:76:b5:06:ed: 61:32:73:ad:d2:96:e4:57:51:19:25:01:8f:c3:59: bc:c4:76:50:ca:d3:93:bb:05:8c:27:f7:55:59:36: bc:11:6d:7c:b9:df:a3:55:b7:6f:d8:c6:e1:fb:1a: f3:ae:29:20:8c:ee:9a:c4:1d:bf:fc:d0:75:66:03: a3:c4:11:a3:49:93:62:b0:35:6f:15:28:c5:aa:bf: a5:48:57:df:1a:48:7b:05:cb:ba:e4:47:cf:e5:d9: 81:e7:9b:d8:3d:e1:52:be:22:f6:37:26:f8:1a:78: d1:66:c3:c9:af:23:79:fc:42:bd:7f:3c:30:de:f5: ee:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:BF:EC:5D:9B:07:CE:0A:EE:A6:72:12:D1:57:3E:20:49:8E:D5:67 X509v3 Authority Key Identifier: keyid:4E:CF:7D:FB:09:FB:3B:5C:21:DD:E6:61:15:0B:95:76:8B:6B:D3:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:1c:f7:9e:33:cf:bf:94:4a:cd:d3:64:3f:2e:49:8e:ed:56: 83:1e:04:ac:33:5f:37:a3:6e:f9:9a:e2:d4:09:94:85:52:63: 06:91:c2:40:06:25:98:3b:60:7c:f2:b4:9a:9b:38:be:e8:3b: c7:e6:a6:41:f6:d0:89:38:5d:a4:6b:79:0c:18:52:67:2d:f6: 50:4e:fc:93:f4:67:11:0c:22:ec:73:8f:a2:de:ce:a6:5d:0a: 7c:ed:d3:f1:7a:22:61:81:6a:cb:35:38:d6:75:d2:54:a1:9f: 05:c1:ac:da:bc:f3:d2:d1:a8:a4:3f:3c:c1:19:c1:a0:29:2b: 91:24:82:88:69:c9:d8:80:78:0e:bd:ac:8f:89:09:99:72:4b: 39:94:5e:24:99:c0:d0:4b:57:47:c3:63:6d:e6:0f:92:03:08: b5:b5:51:45:07:fc:36:43:6a:d9:c8:49:f3:27:fa:8d:d1:a2: 99:b7:29:6e:00:25:6d:17:0e:44:75:35:f1:73:63:25:0c:90: b3:0e:b9:ef:2e:13:af:fe:1b:24:4f:89:01:79:36:3f:80:78: f1:fe:51:54:ce:3a:be:b9:d9:9a:bb:8c:90:ec:7e:2f:0f:77: f3:e7:96:05:41:e2:9d:f1:e3:b0:0f:28:9b:5b:e3:b5:43:40: 21:e8:45:db -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCjBwBEjwwaFVZa6wUBC9gFgceYswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEVDRjdERkIwOUZCM0I1QzIxRERFNjYxMTUwQjk1NzY4 QjZCRDMxOTAeFw0yNTEwMTgyMzQ2MjJaFw0yNTEwMjIwNzAzMjJaMDMxMTAvBgNV BAMTKEM4QkZFQzVEOUIwN0NFMEFFRUE2NzIxMkQxNTczRTIwNDk4RUQ1NjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+lJnOMHa3X0f71Y/ufQAWYx8C onq46e2XGtP1dwjlo9PTehX/GT3SFg00XylxH68KtfDuImEC23S4L2HaGlsk+7Iz alTciYxbZsdh2vX9m4z1dr3wHzGssEuf97gyIWdFqJBFihUtJfN+Dpnk9kQVO0xw mCFESZXWzjno2cmFY7CUdrUG7WEyc63SluRXURklAY/DWbzEdlDK05O7BYwn91VZ NrwRbXy536NVt2/YxuH7GvOuKSCM7prEHb/80HVmA6PEEaNJk2KwNW8VKMWqv6VI V98aSHsFy7rkR8/l2YHnm9g94VK+IvY3JvgaeNFmw8mvI3n8Qr1/PDDe9e5rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyL/sXZsHzgrupnIS0Vc+IEmO1WcwHwYDVR0j BBgwFoAUTs99+wn7O1wh3eZhFQuVdotr0xkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZDAzNWIzYi1lNmM1LTQ3ZjgtOTliNC0xY2IwMzI2ZWRhZTUvMC80RUNGN0RGQjA5 RkIzQjVDMjFEREU2NjExNTBCOTU3NjhCNkJEMzE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEVDRjdERkIwOUZCM0I1QzIxRERFNjYxMTUwQjk1NzY4QjZC RDMxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2QwMzViM2ItZTZjNS00N2Y4LTk5 YjQtMWNiMDMyNmVkYWU1LzAvNEVDRjdERkIwOUZCM0I1QzIxRERFNjYxMTUwQjk1 NzY4QjZCRDMxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE0c954zz7+USs3TZD8uSY7tVoMeBKwzXzej bvma4tQJlIVSYwaRwkAGJZg7YHzytJqbOL7oO8fmpkH20Ik4XaRreQwYUmct9lBO /JP0ZxEMIuxzj6LezqZdCnzt0/F6ImGBass1ONZ10lShnwXBrNq889LRqKQ/PMEZ waApK5EkgohpydiAeA69rI+JCZlySzmUXiSZwNBLV0fDY23mD5IDCLW1UUUH/DZD atnISfMn+o3Ropm3KW4AJW0XDkR1NfFzYyUMkLMOue8uE6/+GyRPiQF5Nj+AePH+ UVTOOr652Zq7jJDsfi8Pd/PnlgVB4p3x47APKJtb47VDQCHoRds= -----END CERTIFICATE-----Generated at Mon Oct 20 19:42:57 2025 by rpki-client