$ rpki-client -vvf repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.mft File: 4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.mft (raw, json) Hash identifier: VIbwN33Ki+iBSpBFfCkRO+y5RDq7RcES5K6vcHhQ3qA= Subject key identifier: 88:CE:24:C4:52:92:40:35:C9:EB:F4:0C:30:D6:18:20:AB:84:1C:85 Authority key identifier: 4B:F1:DC:C0:BC:C5:B1:A4:B6:BE:52:6A:75:FF:33:39:7F:C3:87:87 Certificate issuer: /CN=4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787 Certificate serial: 29ECF8B4347F3762806E0103B5A4CF834AE43D59 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.mft Manifest number: 0528 Signing time: Sun 19 Oct 2025 19:00:57 +0000 Manifest this update: Sun 19 Oct 2025 18:55:57 +0000 Manifest next update: Thu 23 Oct 2025 00:02:57 +0000 Files and hashes: 1: 3232332e32352e3131302e302f32342d3234203d3e20313336383733.roa (hash: d7TlxPMnZWo9NiIWBhiGrIW1xBkbQUYDXZcwgsom8Dk=) 2: 4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.crl (hash: l8XyhYXfcY2ARsmsm7fR4yV85UBQLoklrYxJiK7atro=) 3: 3232332e32352e3131312e302f32342d3234203d3e20313431363037.roa (hash: ZqT27QjOP9C+x+HxEBPLWbwm+mlgqdclma4hL/DLOAM=) 4: 3232332e32352e3130342e302f32342d3234203d3e20313530323238.roa (hash: 5Yjn1xzYUyXHAIu8ieYmhhXRGkoBPybJZRq7aWT18y0=) 5: 323430323a613530303a3a2f33322d3332203d3e2034383231.roa (hash: moNwAWlPkj0rtokbSnZwVDheKPDbut9HTHNYooRQM7Q=) 6: 3232332e32352e39362e302f32312d3234203d3e2039333431.roa (hash: Qjv/mGfQRB5AB46dWcHhxxNcs3aS1PJFtKLeGoBkxi0=) 7: 3232332e32352e3130392e302f32342d3234203d3e20313439373138.roa (hash: d3eM98YfiQHd35IoK+KK/VXjFcXTY4k6PTjZu1TQR90=) 8: 3232332e32352e3130352e302f32342d3234203d3e2034383231.roa (hash: 8gu4g1bdcjin/i0TEIycNgxzwZksIdfr4ERNzQVV1jI=) 9: 3232332e32352e3130382e302f32342d3234203d3e2034383231.roa (hash: kXwkhbJ+oGBQpIPdrmdbXU4UMfG2qJFbyPtaW45RBFo=) 10: 3232332e32352e3130362e302f32342d3234203d3e20313336383733.roa (hash: S8lyObQBOuPDRueBj8YjzK0Yqke0dcnMl7Vcc48vuVs=) 11: 3232332e32352e3130372e302f32342d3234203d3e20313439373138.roa (hash: DrBIeEQt6yULPW0r6792EagtEDf0ZZCsQyk/153rumY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.crl rsync://repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 00:02:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:ec:f8:b4:34:7f:37:62:80:6e:01:03:b5:a4:cf:83:4a:e4:3d:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787 Validity Not Before: Oct 19 18:55:57 2025 GMT Not After : Oct 23 00:02:57 2025 GMT Subject: CN=88CE24C452924035C9EBF40C30D61820AB841C85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:12:d1:96:de:4a:0a:e0:0b:8e:e4:64:67:f2: 22:0b:7c:81:ea:87:4b:d0:31:f8:5c:ef:fc:10:83: 04:bd:c1:9f:60:3d:b1:74:91:56:ec:3f:98:31:ed: 52:1f:cd:8c:d6:8b:c5:9e:80:83:81:62:c4:ef:24: c3:7f:46:6f:ba:c9:25:55:01:20:51:29:6a:63:92: e0:a9:64:bf:72:75:4d:99:b7:6b:55:e0:20:dd:ae: fb:2f:1f:c1:b0:24:75:48:70:38:3e:98:7a:08:f1: a9:6e:f3:2e:a9:a1:75:61:c7:fa:e5:41:0e:fb:47: e0:2f:a6:de:e8:19:0f:98:51:b0:41:59:bb:ad:43: a1:12:d4:00:47:d0:02:7c:f0:ae:ca:12:26:7a:57: 4b:ca:d8:a9:ac:e5:2c:d3:d4:0c:46:82:a5:50:76: a3:a2:f7:2a:d6:23:c7:59:15:1a:6e:f5:ba:41:09: fb:48:c4:db:52:74:b4:b5:e8:ef:7f:c8:1c:24:f2: ec:eb:54:56:ee:75:13:98:19:68:f5:d8:e0:36:17: aa:ef:9a:1c:8c:f3:8b:12:8f:1d:55:26:b4:06:b3: bb:89:2a:8a:fd:57:ec:fd:7a:68:73:e7:d4:77:81: dd:17:ed:1e:b6:74:73:22:ae:fb:8f:06:1d:89:d8: c2:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:CE:24:C4:52:92:40:35:C9:EB:F4:0C:30:D6:18:20:AB:84:1C:85 X509v3 Authority Key Identifier: keyid:4B:F1:DC:C0:BC:C5:B1:A4:B6:BE:52:6A:75:FF:33:39:7F:C3:87:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:3f:26:57:e9:64:de:6c:98:46:ea:54:57:63:13:dd:ac:aa: 8b:bf:bc:f1:58:09:0e:43:aa:73:40:ef:a6:c2:73:88:f9:7c: ca:6e:6b:e4:cf:e2:42:81:07:f1:8f:11:37:aa:69:f2:cd:15: e5:74:48:07:89:84:8b:38:de:1c:f6:be:cb:49:ca:e7:3f:99: ce:87:85:8d:80:22:03:53:05:e1:c5:56:b1:e5:21:f2:31:3e: d9:48:4e:ea:2d:41:98:06:90:88:cb:9b:2b:12:1a:a0:85:54: b6:a4:aa:53:98:38:d9:15:bd:7a:33:72:d0:68:ae:38:ad:63: 18:46:39:48:32:5d:b7:bb:b7:37:2c:c5:81:cf:5b:bd:b1:47: 8d:db:84:45:91:12:2e:cb:35:d0:e0:f3:aa:5a:e0:6e:dc:db: 20:d1:84:6f:03:1e:1f:63:65:47:61:42:a6:9d:8b:60:a2:92: 9a:5d:51:ac:4c:f6:6b:39:cf:2b:2d:df:0a:7f:0b:10:79:62: 97:cd:88:fd:96:e1:4f:2e:57:37:3e:21:77:55:d6:4d:34:76: 9e:9e:cf:7c:4e:36:46:76:f3:c2:68:1a:8a:cd:a0:17:29:df: 66:57:f3:b6:21:ec:24:6a:31:5d:cc:c6:33:fd:04:31:b9:2b: 8a:7b:15:af -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKez4tDR/N2KAbgEDtaTPg0rkPVkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEJGMURDQzBCQ0M1QjFBNEI2QkU1MjZBNzVGRjMzMzk3 RkMzODc4NzAeFw0yNTEwMTkxODU1NTdaFw0yNTEwMjMwMDAyNTdaMDMxMTAvBgNV BAMTKDg4Q0UyNEM0NTI5MjQwMzVDOUVCRjQwQzMwRDYxODIwQUI4NDFDODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoEtGW3koK4AuO5GRn8iILfIHq h0vQMfhc7/wQgwS9wZ9gPbF0kVbsP5gx7VIfzYzWi8WegIOBYsTvJMN/Rm+6ySVV ASBRKWpjkuCpZL9ydU2Zt2tV4CDdrvsvH8GwJHVIcDg+mHoI8alu8y6poXVhx/rl QQ77R+Avpt7oGQ+YUbBBWbutQ6ES1ABH0AJ88K7KEiZ6V0vK2Kms5SzT1AxGgqVQ dqOi9yrWI8dZFRpu9bpBCftIxNtSdLS16O9/yBwk8uzrVFbudROYGWj12OA2F6rv mhyM84sSjx1VJrQGs7uJKor9V+z9emhz59R3gd0X7R62dHMirvuPBh2J2MKdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiM4kxFKSQDXJ6/QMMNYYIKuEHIUwHwYDVR0j BBgwFoAUS/HcwLzFsaS2vlJqdf8zOX/Dh4cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZDI1NDQxOS01M2JlLTRhZDQtYmY3Zi0yOWY4OTEyNTIzZDAvMC80QkYxRENDMEJD QzVCMUE0QjZCRTUyNkE3NUZGMzMzOTdGQzM4Nzg3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEJGMURDQzBCQ0M1QjFBNEI2QkU1MjZBNzVGRjMzMzk3RkMz ODc4Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGQyNTQ0MTktNTNiZS00YWQ0LWJm N2YtMjlmODkxMjUyM2QwLzAvNEJGMURDQzBCQ0M1QjFBNEI2QkU1MjZBNzVGRjMz Mzk3RkMzODc4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJg/JlfpZN5smEbqVFdjE92sqou/vPFYCQ5D qnNA76bCc4j5fMpua+TP4kKBB/GPETeqafLNFeV0SAeJhIs43hz2vstJyuc/mc6H hY2AIgNTBeHFVrHlIfIxPtlITuotQZgGkIjLmysSGqCFVLakqlOYONkVvXozctBo rjitYxhGOUgyXbe7tzcsxYHPW72xR43bhEWREi7LNdDg86pa4G7c2yDRhG8DHh9j ZUdhQqadi2CikppdUaxM9ms5zyst3wp/CxB5YpfNiP2W4U8uVzc+IXdV1k00dp6e z3xONkZ288JoGorNoBcp32ZX87Yh7CRqMV3MxjP9BDG5K4p7Fa8= -----END CERTIFICATE-----Generated at Mon Oct 20 15:53:02 2025 by rpki-client