$ rpki-client -vvf repo-rpki.idnic.net/repo/960f8461-bb2c-4d3e-a5be-700939427c8c/0/4BC6236908AF9F36A8057E2BB1A5B34BCD6B7DBA.mft File: 4BC6236908AF9F36A8057E2BB1A5B34BCD6B7DBA.mft (raw, json) Hash identifier: WQRiVveewZ8hyueM9A8RzFlgm+5H7IWotcZsWb0E/uo= Subject key identifier: 29:64:64:E0:02:95:A4:9F:61:3A:72:35:B1:66:52:45:2B:47:39:6F Authority key identifier: 4B:C6:23:69:08:AF:9F:36:A8:05:7E:2B:B1:A5:B3:4B:CD:6B:7D:BA Certificate issuer: /CN=4BC6236908AF9F36A8057E2BB1A5B34BCD6B7DBA Certificate serial: 4B3801C82E47AE1DE9BEE99516BFABC6ADF79953 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BC6236908AF9F36A8057E2BB1A5B34BCD6B7DBA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/960f8461-bb2c-4d3e-a5be-700939427c8c/0/4BC6236908AF9F36A8057E2BB1A5B34BCD6B7DBA.mft Manifest number: 01AF Signing time: Mon 20 Oct 2025 06:41:32 +0000 Manifest this update: Mon 20 Oct 2025 06:36:32 +0000 Manifest next update: Thu 23 Oct 2025 14:46:32 +0000 Files and hashes: 1: 3130332e3139392e3131372e302f32342d3234203d3e20313530393234.roa (hash: 6oB2NEdb1J8wzFdKjlXlM7HaXvyVJb+FJhi1JoqHPbo=) 2: 4BC6236908AF9F36A8057E2BB1A5B34BCD6B7DBA.crl (hash: rlWhHTldRE9LlG2tQ38DFJ0zFjIuYHtGOimcDL7pey4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/960f8461-bb2c-4d3e-a5be-700939427c8c/0/4BC6236908AF9F36A8057E2BB1A5B34BCD6B7DBA.crl rsync://repo-rpki.idnic.net/repo/960f8461-bb2c-4d3e-a5be-700939427c8c/0/4BC6236908AF9F36A8057E2BB1A5B34BCD6B7DBA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BC6236908AF9F36A8057E2BB1A5B34BCD6B7DBA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 14:07:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:38:01:c8:2e:47:ae:1d:e9:be:e9:95:16:bf:ab:c6:ad:f7:99:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4BC6236908AF9F36A8057E2BB1A5B34BCD6B7DBA Validity Not Before: Oct 20 06:36:32 2025 GMT Not After : Oct 23 14:46:32 2025 GMT Subject: CN=296464E00295A49F613A7235B16652452B47396F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:5f:00:3c:cb:66:cd:01:20:90:b4:00:df:4a: 23:02:16:67:b1:88:ab:e5:ed:f1:ad:cd:5a:f1:13: 67:8a:9f:b4:ca:a2:74:5e:a1:f8:c9:59:fd:7b:36: 7c:ae:a7:d8:db:41:6f:d9:4d:1a:ba:35:6c:1a:16: c0:f4:2f:bd:19:f4:5f:e1:8e:83:6e:a6:8e:45:af: 9f:19:1c:13:29:2a:93:02:35:4e:73:a2:be:43:b9: 7d:c7:49:2a:cc:c4:f7:63:06:48:eb:96:1d:6b:4b: 7e:4a:76:c2:70:ff:46:80:f4:bd:e5:4c:4f:32:66: a4:79:ff:94:ad:80:7b:68:e3:de:4c:16:49:7a:62: 94:83:0b:22:c5:c4:3a:e6:33:79:f0:27:db:12:ba: e8:42:f6:57:c3:21:e7:bb:be:f5:f3:c3:6f:be:7e: 21:a0:d8:65:ae:08:3d:31:40:9d:82:98:31:89:b0: c6:72:43:a7:c6:2b:a7:db:40:45:66:9a:cd:96:e2: 58:9b:53:3c:0d:b4:66:04:78:6f:78:30:4d:da:de: 2a:11:fb:6c:f4:d4:1b:b6:5f:37:75:58:ab:83:5e: 05:2b:c0:3f:18:06:cf:5c:91:ea:41:c7:a3:a2:64: a3:41:eb:49:6f:8f:ed:e9:6e:6e:a0:65:6d:31:0f: 87:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:64:64:E0:02:95:A4:9F:61:3A:72:35:B1:66:52:45:2B:47:39:6F X509v3 Authority Key Identifier: keyid:4B:C6:23:69:08:AF:9F:36:A8:05:7E:2B:B1:A5:B3:4B:CD:6B:7D:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/960f8461-bb2c-4d3e-a5be-700939427c8c/0/4BC6236908AF9F36A8057E2BB1A5B34BCD6B7DBA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BC6236908AF9F36A8057E2BB1A5B34BCD6B7DBA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/960f8461-bb2c-4d3e-a5be-700939427c8c/0/4BC6236908AF9F36A8057E2BB1A5B34BCD6B7DBA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:87:b3:26:60:9e:20:87:b6:a4:7f:ff:dc:94:f5:57:d3:da: 66:73:e2:e7:75:16:cc:58:9e:65:ac:21:d6:82:ef:50:82:7e: c0:f7:1c:53:07:a4:dc:6a:21:d5:ba:e9:7a:7f:be:65:5f:ec: 8e:9e:54:50:45:a9:ef:ed:06:31:b1:48:a3:65:2c:f4:b5:82: 7c:dc:9f:75:63:e1:cb:fc:59:1f:7b:e7:6f:9b:a9:8c:ca:8e: 14:8e:d0:79:91:3c:d4:b8:ad:a5:13:80:a7:21:4e:cc:71:16: 4b:d6:3b:98:96:81:2a:64:68:41:0a:14:be:99:19:74:d7:95: d1:a3:de:be:0a:0b:2a:79:22:8a:84:fa:c6:ae:ce:0e:56:fe: d1:ed:67:4f:06:f4:83:2d:85:29:cf:31:39:44:5c:93:05:ad: 2f:3a:ba:1d:5a:0f:f2:fd:80:1d:ae:15:69:17:6a:f3:ca:f3: 82:0e:b0:55:dc:9e:71:f1:9b:93:ab:fc:04:8f:9d:72:5d:62: 93:46:80:1f:7d:e4:1f:ff:90:0c:dd:0d:af:99:f4:fc:60:7b: 67:4b:53:1c:c4:d4:c1:88:ee:70:2f:f3:f4:d0:ec:f1:76:27: 3b:eb:46:b8:a1:8a:e8:43:a9:be:65:0b:08:76:12:52:eb:5c: 52:70:e3:99 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSzgByC5Hrh3pvumVFr+rxq33mVMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEJDNjIzNjkwOEFGOUYzNkE4MDU3RTJCQjFBNUIzNEJD RDZCN0RCQTAeFw0yNTEwMjAwNjM2MzJaFw0yNTEwMjMxNDQ2MzJaMDMxMTAvBgNV BAMTKDI5NjQ2NEUwMDI5NUE0OUY2MTNBNzIzNUIxNjY1MjQ1MkI0NzM5NkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcXwA8y2bNASCQtADfSiMCFmex iKvl7fGtzVrxE2eKn7TKonReofjJWf17Nnyup9jbQW/ZTRq6NWwaFsD0L70Z9F/h joNupo5Fr58ZHBMpKpMCNU5zor5DuX3HSSrMxPdjBkjrlh1rS35KdsJw/0aA9L3l TE8yZqR5/5StgHto495MFkl6YpSDCyLFxDrmM3nwJ9sSuuhC9lfDIee7vvXzw2++ fiGg2GWuCD0xQJ2CmDGJsMZyQ6fGK6fbQEVmms2W4libUzwNtGYEeG94ME3a3ioR +2z01Bu2Xzd1WKuDXgUrwD8YBs9ckepBx6OiZKNB60lvj+3pbm6gZW0xD4d7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKWRk4AKVpJ9hOnI1sWZSRStHOW8wHwYDVR0j BBgwFoAUS8YjaQivnzaoBX4rsaWzS81rfbowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NjBmODQ2MS1iYjJjLTRkM2UtYTViZS03MDA5Mzk0MjdjOGMvMC80QkM2MjM2OTA4 QUY5RjM2QTgwNTdFMkJCMUE1QjM0QkNENkI3REJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEJDNjIzNjkwOEFGOUYzNkE4MDU3RTJCQjFBNUIzNEJDRDZC N0RCQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTYwZjg0NjEtYmIyYy00ZDNlLWE1 YmUtNzAwOTM5NDI3YzhjLzAvNEJDNjIzNjkwOEFGOUYzNkE4MDU3RTJCQjFBNUIz NEJDRDZCN0RCQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJeHsyZgniCHtqR//9yU9VfT2mZz4ud1FsxY nmWsIdaC71CCfsD3HFMHpNxqIdW66Xp/vmVf7I6eVFBFqe/tBjGxSKNlLPS1gnzc n3Vj4cv8WR9752+bqYzKjhSO0HmRPNS4raUTgKchTsxxFkvWO5iWgSpkaEEKFL6Z GXTXldGj3r4KCyp5IoqE+sauzg5W/tHtZ08G9IMthSnPMTlEXJMFrS86uh1aD/L9 gB2uFWkXavPK84IOsFXcnnHxm5Or/ASPnXJdYpNGgB995B//kAzdDa+Z9Pxge2dL UxzE1MGI7nAv8/TQ7PF2JzvrRrihiuhDqb5lCwh2ElLrXFJw45k= -----END CERTIFICATE-----Generated at Mon Oct 20 10:06:31 2025 by rpki-client