$ rpki-client -vvf repo-rpki.idnic.net/repo/81c9ce5a-6690-4901-9e0a-c27b319316be/0/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.mft File: 4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.mft (raw, json) Hash identifier: Mz91tFmUOupKpQ0XtdXsQnw62MnLeyROYCK5T3kHdUI= Subject key identifier: C1:1B:D8:C2:E2:FE:86:F7:9E:68:CD:02:1B:C9:6B:32:EE:73:08:C5 Authority key identifier: 4C:34:08:B6:E0:82:54:22:DC:2D:07:1E:49:0B:D7:CB:1F:BD:2A:3F Certificate issuer: /CN=4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F Certificate serial: 5EFC92C52259CAC30BE1F117070A73280F41A25D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/81c9ce5a-6690-4901-9e0a-c27b319316be/0/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.mft Manifest number: 0492 Signing time: Sat 18 Oct 2025 18:22:20 +0000 Manifest this update: Sat 18 Oct 2025 18:17:20 +0000 Manifest next update: Tue 21 Oct 2025 18:30:20 +0000 Files and hashes: 1: 3130332e37312e34342e302f32332d3233203d3e203436303232.roa (hash: V3QHQK/gWQFy09rLOPxob5SyVyg/wx9t2yimUS9bwPY=) 2: 4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.crl (hash: yBiCd0MMj6JwJ8/Hysd8qIqbPKndy+MgGRRI+DdCWTE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/81c9ce5a-6690-4901-9e0a-c27b319316be/0/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.crl rsync://repo-rpki.idnic.net/repo/81c9ce5a-6690-4901-9e0a-c27b319316be/0/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 18:30:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:fc:92:c5:22:59:ca:c3:0b:e1:f1:17:07:0a:73:28:0f:41:a2:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F Validity Not Before: Oct 18 18:17:20 2025 GMT Not After : Oct 21 18:30:20 2025 GMT Subject: CN=C11BD8C2E2FE86F79E68CD021BC96B32EE7308C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:2c:37:22:d2:8f:46:2b:38:98:70:34:a8:91: bc:48:d8:30:e9:3b:67:da:da:f9:19:fd:04:d4:2c: e5:e4:9b:b3:da:29:a4:f5:c1:ee:95:42:55:66:54: bf:52:cc:39:a8:17:1e:98:ae:82:ed:05:14:d8:e2: cc:de:eb:1c:2e:5f:49:02:6d:b6:20:10:ff:c8:eb: 6b:90:cb:b6:69:58:0e:50:51:b0:f4:5d:c8:3d:ea: 4f:2e:65:59:44:c4:17:e4:c4:59:ba:f9:33:9a:c2: d9:0e:44:1f:78:6f:f9:0e:d7:03:9d:d2:c2:1c:ec: ef:22:a8:ad:85:28:76:dc:0b:f0:33:13:96:1e:b1: de:bc:d9:04:9b:ac:a5:fd:12:72:98:a8:9a:79:f3: 11:0e:df:ef:da:b8:7a:43:9a:ab:a5:05:ae:a5:00: 87:b7:11:7a:49:b0:b1:49:b2:6c:ef:59:53:75:12: aa:70:f2:0f:d1:f7:d9:7c:47:62:24:11:9e:84:11: e5:7f:a5:f8:bf:50:39:5a:02:f8:f9:ba:81:1e:33: a2:67:9f:fb:2f:20:1e:a1:99:1f:4b:a6:55:98:ca: ad:de:3a:27:23:f7:66:0d:d5:f4:42:52:d9:b9:95: 9f:9b:63:20:19:ae:1d:24:8e:22:9f:4d:0d:9c:0b: 64:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:1B:D8:C2:E2:FE:86:F7:9E:68:CD:02:1B:C9:6B:32:EE:73:08:C5 X509v3 Authority Key Identifier: keyid:4C:34:08:B6:E0:82:54:22:DC:2D:07:1E:49:0B:D7:CB:1F:BD:2A:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/81c9ce5a-6690-4901-9e0a-c27b319316be/0/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/81c9ce5a-6690-4901-9e0a-c27b319316be/0/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:51:7d:38:57:cf:71:ec:0f:61:80:f5:a1:4b:cd:36:c2:0f: e5:31:fd:90:be:87:cb:ff:d3:a1:a3:10:dc:a3:33:91:20:08: 77:98:d7:22:d9:1d:dd:ae:4d:68:4c:1f:af:a2:f0:d8:b0:40: 98:e9:c9:b5:b3:7b:22:eb:40:b3:52:36:89:3c:ff:21:ed:ad: 32:7f:bd:ce:e1:23:bb:c3:32:24:bc:cc:9b:4c:ef:91:d4:7a: 9b:0c:d7:6f:51:cf:67:50:49:9f:43:e2:a0:cb:af:a5:af:11: 62:15:aa:3d:11:2e:40:e5:7b:e0:8f:3b:68:c6:6e:9b:68:5e: 3e:cc:b0:df:24:83:eb:e8:78:f2:92:5e:f5:ee:61:26:e9:f6: 55:75:6d:76:9c:ef:b3:85:01:7d:04:77:1d:af:d3:f1:16:90: 6a:0b:02:ec:70:5a:1f:7a:75:02:a1:62:ec:5e:ac:ad:2c:dd: 40:4b:bb:ea:ec:f4:fd:30:2f:70:b2:13:0d:44:be:33:85:44: 68:f1:0b:8e:d3:79:fa:29:d9:c7:60:cf:b7:30:46:01:8c:f6: 5b:18:a1:92:08:c4:22:72:af:e1:09:ea:05:82:1d:07:54:e8: 91:a0:c7:7f:1f:be:25:97:10:b7:ce:4d:b8:a2:50:7f:22:48: 84:f6:5b:c5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXvySxSJZysML4fEXBwpzKA9Bol0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEMzNDA4QjZFMDgyNTQyMkRDMkQwNzFFNDkwQkQ3Q0Ix RkJEMkEzRjAeFw0yNTEwMTgxODE3MjBaFw0yNTEwMjExODMwMjBaMDMxMTAvBgNV BAMTKEMxMUJEOEMyRTJGRTg2Rjc5RTY4Q0QwMjFCQzk2QjMyRUU3MzA4QzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHLDci0o9GKziYcDSokbxI2DDp O2fa2vkZ/QTULOXkm7PaKaT1we6VQlVmVL9SzDmoFx6YroLtBRTY4sze6xwuX0kC bbYgEP/I62uQy7ZpWA5QUbD0Xcg96k8uZVlExBfkxFm6+TOawtkORB94b/kO1wOd 0sIc7O8iqK2FKHbcC/AzE5Yesd682QSbrKX9EnKYqJp58xEO3+/auHpDmqulBa6l AIe3EXpJsLFJsmzvWVN1Eqpw8g/R99l8R2IkEZ6EEeV/pfi/UDlaAvj5uoEeM6Jn n/svIB6hmR9LplWYyq3eOicj92YN1fRCUtm5lZ+bYyAZrh0kjiKfTQ2cC2RHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwRvYwuL+hveeaM0CG8lrMu5zCMUwHwYDVR0j BBgwFoAUTDQItuCCVCLcLQceSQvXyx+9Kj8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MWM5Y2U1YS02NjkwLTQ5MDEtOWUwYS1jMjdiMzE5MzE2YmUvMC80QzM0MDhCNkUw ODI1NDIyREMyRDA3MUU0OTBCRDdDQjFGQkQyQTNGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEMzNDA4QjZFMDgyNTQyMkRDMkQwNzFFNDkwQkQ3Q0IxRkJE MkEzRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODFjOWNlNWEtNjY5MC00OTAxLTll MGEtYzI3YjMxOTMxNmJlLzAvNEMzNDA4QjZFMDgyNTQyMkRDMkQwNzFFNDkwQkQ3 Q0IxRkJEMkEzRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIRRfThXz3HsD2GA9aFLzTbCD+Ux/ZC+h8v/ 06GjENyjM5EgCHeY1yLZHd2uTWhMH6+i8NiwQJjpybWzeyLrQLNSNok8/yHtrTJ/ vc7hI7vDMiS8zJtM75HUepsM129Rz2dQSZ9D4qDLr6WvEWIVqj0RLkDle+CPO2jG bptoXj7MsN8kg+voePKSXvXuYSbp9lV1bXac77OFAX0Edx2v0/EWkGoLAuxwWh96 dQKhYuxerK0s3UBLu+rs9P0wL3CyEw1EvjOFRGjxC47Tefop2cdgz7cwRgGM9lsY oZIIxCJyr+EJ6gWCHQdU6JGgx38fviWXELfOTbiiUH8iSIT2W8U= -----END CERTIFICATE-----Generated at Mon Oct 20 11:35:31 2025 by rpki-client