$ rpki-client -vvf repo-rpki.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.mft File: 4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.mft (raw, json) Hash identifier: E5sm0KAYWR9ZpJrF8IBmIpJFnUfrLO9xTpVje1WKACo= Subject key identifier: 19:F7:04:B1:0F:3F:3B:9B:55:F1:CE:98:9F:5F:DA:35:48:2B:95:DD Authority key identifier: 4D:D0:C9:5B:43:B8:B6:53:60:1F:ED:39:AB:01:0E:1D:D0:DC:17:F2 Certificate issuer: /CN=4DD0C95B43B8B653601FED39AB010E1DD0DC17F2 Certificate serial: 32E62D3A24E42A1A67ED5448F61880DA89DA0482 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.mft Manifest number: 051A Signing time: Sun 19 Oct 2025 15:41:09 +0000 Manifest this update: Sun 19 Oct 2025 15:36:09 +0000 Manifest next update: Thu 23 Oct 2025 02:30:09 +0000 Files and hashes: 1: 323030313a6466323a626530303a3a2f34382d3438203d3e20313335343537.roa (hash: Y9NxdO2uUmExgp5HT4f9RxRPtt01n/EQdy4OmAOBACk=) 2: 3130332e36362e35352e302f32342d3234203d3e20313335343537.roa (hash: ljnKYF4WQqtb0yfOcUdymtJM6+GnXJyNyFLsK7GZ494=) 3: 4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.crl (hash: UewikpSFUERX2gDnZS732I4C45QKCrjmZOjLQkU0hCE=) 4: 34352e3132302e3234342e302f32322d3234203d3e20313335343537.roa (hash: PuA0O7on+Tv+yi4m5sFC8JVnpsZv77062xaCNSQ10PY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.crl rsync://repo-rpki.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 02:30:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:e6:2d:3a:24:e4:2a:1a:67:ed:54:48:f6:18:80:da:89:da:04:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4DD0C95B43B8B653601FED39AB010E1DD0DC17F2 Validity Not Before: Oct 19 15:36:09 2025 GMT Not After : Oct 23 02:30:09 2025 GMT Subject: CN=19F704B10F3F3B9B55F1CE989F5FDA35482B95DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:c5:91:bd:d8:d9:df:81:72:55:2f:e5:c9:64: 9e:d5:70:1d:78:bf:9f:14:f7:c9:c0:a1:e3:a4:83: b5:9d:86:ed:ea:5b:d4:2b:0b:64:1f:c5:36:01:05: 26:dd:34:8c:92:f4:b0:c8:1f:6a:15:81:cb:e1:dd: 38:98:9a:d1:8e:ab:06:95:aa:eb:83:c9:ee:fe:a3: f0:b1:2d:ed:ee:cc:03:c3:78:ce:02:8f:10:12:0a: 04:12:1f:d9:c5:d0:cc:20:d9:5b:66:6c:d1:19:c2: df:5f:ea:9c:3c:6b:8c:0f:d1:fe:63:12:3c:5a:96: ac:c3:bb:f7:1c:0f:33:51:2d:77:ea:4d:c3:79:d2: 9c:20:31:0b:08:d7:83:71:70:d8:d3:1f:f3:4e:fb: 3f:e0:1e:3a:c4:c7:c6:46:37:ff:a1:90:23:00:f5: 28:59:16:00:23:a5:78:91:5d:0b:75:7d:68:b3:69: af:f3:88:d0:23:d0:ec:9e:23:bf:8d:b8:75:d0:26: 37:56:14:fc:a4:f7:43:45:62:6e:fe:25:cf:ae:54: cf:bb:5a:e6:48:c7:b4:37:00:06:78:73:62:0a:c1: d8:3b:24:d1:a2:58:d9:13:84:24:43:43:85:05:4f: 03:2b:9f:4e:71:8c:2d:4c:6f:e2:be:c4:dd:cb:b8: b3:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:F7:04:B1:0F:3F:3B:9B:55:F1:CE:98:9F:5F:DA:35:48:2B:95:DD X509v3 Authority Key Identifier: keyid:4D:D0:C9:5B:43:B8:B6:53:60:1F:ED:39:AB:01:0E:1D:D0:DC:17:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:49:ba:ba:5d:20:1c:09:2c:2a:71:e4:2b:23:ce:8d:69:17: 9f:11:a8:5b:81:ee:b0:0f:a2:f4:b5:e1:8e:d5:f6:05:11:b3: 8b:0b:2d:2d:dd:94:40:0a:f4:10:cc:7c:29:db:6c:15:3c:ee: 63:98:20:17:e9:c9:9b:53:d4:61:e9:ef:60:ba:52:f1:ea:60: 62:aa:85:7c:28:77:dd:3c:d1:af:09:2c:86:92:ce:66:45:7b: d3:32:d6:6b:76:24:96:50:17:e5:bf:d4:50:96:74:b1:85:02: 76:47:af:3c:21:73:01:99:d3:8f:32:c3:2d:1a:c6:25:69:64: c1:24:6f:63:f4:10:e5:8f:f8:f4:2a:37:3a:79:06:dc:ba:29: 40:9a:ed:2d:ac:fb:94:c0:ad:fd:b2:a3:1a:96:d8:1f:f3:04: 76:21:2e:9c:29:95:b4:d2:e8:15:04:90:c2:7f:ea:96:00:93: db:d2:9d:05:b1:d3:a4:14:4f:63:10:56:5b:8e:ed:6e:82:30: 74:bc:ce:63:ad:0a:ed:16:41:af:13:b1:c1:bd:ee:0f:28:92: 30:68:05:49:3b:5c:e8:6e:38:c8:36:9e:46:a2:38:ae:2b:8e: e0:63:05:d4:c3:48:4b:a6:3a:e7:02:83:a2:48:03:31:33:83: 95:f6:68:64 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMuYtOiTkKhpn7VRI9hiA2onaBIIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEREMEM5NUI0M0I4QjY1MzYwMUZFRDM5QUIwMTBFMURE MERDMTdGMjAeFw0yNTEwMTkxNTM2MDlaFw0yNTEwMjMwMjMwMDlaMDMxMTAvBgNV BAMTKDE5RjcwNEIxMEYzRjNCOUI1NUYxQ0U5ODlGNUZEQTM1NDgyQjk1REQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDExZG92NnfgXJVL+XJZJ7VcB14 v58U98nAoeOkg7Wdhu3qW9QrC2QfxTYBBSbdNIyS9LDIH2oVgcvh3TiYmtGOqwaV quuDye7+o/CxLe3uzAPDeM4CjxASCgQSH9nF0Mwg2VtmbNEZwt9f6pw8a4wP0f5j EjxalqzDu/ccDzNRLXfqTcN50pwgMQsI14NxcNjTH/NO+z/gHjrEx8ZGN/+hkCMA 9ShZFgAjpXiRXQt1fWizaa/ziNAj0OyeI7+NuHXQJjdWFPyk90NFYm7+Jc+uVM+7 WuZIx7Q3AAZ4c2IKwdg7JNGiWNkThCRDQ4UFTwMrn05xjC1Mb+K+xN3LuLNrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGfcEsQ8/O5tV8c6Yn1/aNUgrld0wHwYDVR0j BBgwFoAUTdDJW0O4tlNgH+05qwEOHdDcF/IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 Mjc4MGY4NS1lZjJmLTRjZjgtYTRiOC01MjI1YzQ1Yjk2YTEvMC80REQwQzk1QjQz QjhCNjUzNjAxRkVEMzlBQjAxMEUxREQwREMxN0YyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEREMEM5NUI0M0I4QjY1MzYwMUZFRDM5QUIwMTBFMUREMERD MTdGMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODI3ODBmODUtZWYyZi00Y2Y4LWE0 YjgtNTIyNWM0NWI5NmExLzAvNEREMEM5NUI0M0I4QjY1MzYwMUZFRDM5QUIwMTBF MUREMERDMTdGMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ9JurpdIBwJLCpx5Csjzo1pF58RqFuB7rAP ovS14Y7V9gURs4sLLS3dlEAK9BDMfCnbbBU87mOYIBfpyZtT1GHp72C6UvHqYGKq hXwod9080a8JLIaSzmZFe9My1mt2JJZQF+W/1FCWdLGFAnZHrzwhcwGZ048ywy0a xiVpZMEkb2P0EOWP+PQqNzp5Bty6KUCa7S2s+5TArf2yoxqW2B/zBHYhLpwplbTS 6BUEkMJ/6pYAk9vSnQWx06QUT2MQVluO7W6CMHS8zmOtCu0WQa8TscG97g8okjBo BUk7XOhuOMg2nkaiOK4rjuBjBdTDSEumOucCg6JIAzEzg5X2aGQ= -----END CERTIFICATE-----Generated at Mon Oct 20 13:11:48 2025 by rpki-client