$ rpki-client -vvf repo-rpki.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.mft File: 4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.mft (raw, json) Hash identifier: T+vssdl7mYlpmaHvc66jLhDlOVO4CFCJ4rMf/j1LcrM= Subject key identifier: 4D:AD:F1:31:79:A4:91:61:54:B5:BD:E9:E5:B6:35:E4:09:98:90:D7 Authority key identifier: 4B:E0:EB:AF:EF:1E:20:6C:AD:8B:4E:AD:6D:6A:08:D3:A8:C0:1B:50 Certificate issuer: /CN=4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50 Certificate serial: BE18FAF785B8D583DE9C41B1F5CC37D0CF75A8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.cer Subject info access: rsync://repo-rpki.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.mft Manifest number: 020B Signing time: Mon 20 Oct 2025 17:20:49 +0000 Manifest this update: Mon 20 Oct 2025 17:15:49 +0000 Manifest next update: Fri 24 Oct 2025 01:19:49 +0000 Files and hashes: 1: 4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.crl (hash: d87u5FesKhbLmBuyEL7Q5hqab1g16DH0eirp47E3BQM=) 2: 3130332e38362e3132382e302f32332d3234203d3e2034383030.roa (hash: D4xO8SkIE8jeNebf9M5hiqlhcLrsrkGAhopy0O7d3p0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.crl rsync://repo-rpki.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: be:18:fa:f7:85:b8:d5:83:de:9c:41:b1:f5:cc:37:d0:cf:75:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50 Validity Not Before: Oct 20 17:15:49 2025 GMT Not After : Oct 24 01:19:49 2025 GMT Subject: CN=4DADF13179A4916154B5BDE9E5B635E4099890D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:85:a9:d3:07:72:12:94:67:e9:36:8f:19:86: 6f:2b:e0:39:a9:e4:f0:74:1c:bc:ee:f8:7c:dc:21: a7:53:61:09:57:e1:61:c7:58:87:5c:c4:dc:13:5b: 98:b3:71:40:e4:05:f5:c7:5e:3b:aa:9c:87:a1:7e: f8:74:8e:0a:a7:6d:09:c3:3c:2d:7a:eb:46:0a:f9: 4e:c3:fb:7e:98:e8:0a:78:d8:6f:0a:cc:1f:17:d9: d8:a3:35:e4:c8:c4:28:55:24:72:1f:e9:06:70:e7: a6:5b:4b:06:75:72:58:1a:9e:0b:28:07:b5:40:0e: 8e:d5:d9:f3:e2:01:68:21:7a:50:5d:9d:c8:38:44: 71:5b:35:d9:3b:b9:65:25:28:83:f3:9b:e3:57:47: 0b:42:0c:95:5b:bf:d7:5d:f7:6e:75:19:2c:42:5f: 6d:5f:4d:0a:ab:86:be:1d:5c:c6:e7:fa:4c:22:c2: ab:16:8c:62:5c:db:87:2f:bc:14:6c:33:95:15:ec: 8d:62:ea:23:e3:b2:ca:a6:a9:85:be:15:80:09:03: e2:d0:8f:d3:8c:71:d2:c6:bd:c0:07:bd:d2:55:98: 2c:c3:9a:61:15:76:2f:6c:c7:1b:2a:17:d0:a1:62: 84:2f:f0:ac:5b:1a:52:4c:d1:70:13:da:25:c9:ab: 31:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:AD:F1:31:79:A4:91:61:54:B5:BD:E9:E5:B6:35:E4:09:98:90:D7 X509v3 Authority Key Identifier: keyid:4B:E0:EB:AF:EF:1E:20:6C:AD:8B:4E:AD:6D:6A:08:D3:A8:C0:1B:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:fc:04:df:e5:90:da:c3:62:ef:54:4b:ae:1b:44:73:ee:69: 58:a5:06:ea:df:b0:a5:2a:d7:69:b1:31:10:e1:bf:3b:fc:e9: 1e:78:91:f6:52:16:c0:20:4f:96:bf:2b:bc:f2:7b:f9:ce:84: e5:79:c7:58:80:2a:d1:27:59:a8:dc:16:03:fe:91:6e:90:18: b2:da:d8:8e:bd:4c:9c:1e:b3:f0:4e:4e:b7:f9:37:2a:75:d9: 2a:1a:a8:96:e5:90:c3:1f:d7:40:ba:09:02:3d:98:d7:04:c8: e5:7b:b9:ff:ec:e1:2b:01:fc:31:a7:d8:26:ec:bc:65:a9:3d: 57:4b:91:15:cb:ce:30:0c:e4:40:af:e3:85:ff:f4:e3:94:32: 11:71:29:f2:09:9b:dc:ed:b5:76:d5:ba:74:7d:69:cc:96:54: 27:59:6e:2e:92:d0:4d:43:ee:82:cf:7e:37:3f:e9:62:2a:45: 95:f0:63:a4:92:b3:e9:42:5a:97:64:43:cb:42:83:cf:00:7c: 97:c2:0b:a4:fb:b3:2f:92:ae:77:48:46:fc:9f:41:94:dc:2d: 51:66:66:d7:92:6b:76:04:59:af:78:82:2b:e4:53:1e:e4:98: 93:95:56:65:5a:2a:53:f3:f0:6b:4e:88:f3:53:d4:35:a8:fb: cb:51:48:4d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAL4Y+veFuNWD3pxBsfXMN9DPdagwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEJFMEVCQUZFRjFFMjA2Q0FEOEI0RUFENkQ2QTA4RDNB OEMwMUI1MDAeFw0yNTEwMjAxNzE1NDlaFw0yNTEwMjQwMTE5NDlaMDMxMTAvBgNV BAMTKDREQURGMTMxNzlBNDkxNjE1NEI1QkRFOUU1QjYzNUU0MDk5ODkwRDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPhanTB3ISlGfpNo8Zhm8r4Dmp 5PB0HLzu+HzcIadTYQlX4WHHWIdcxNwTW5izcUDkBfXHXjuqnIehfvh0jgqnbQnD PC1660YK+U7D+36Y6Ap42G8KzB8X2dijNeTIxChVJHIf6QZw56ZbSwZ1clgangso B7VADo7V2fPiAWghelBdncg4RHFbNdk7uWUlKIPzm+NXRwtCDJVbv9dd9251GSxC X21fTQqrhr4dXMbn+kwiwqsWjGJc24cvvBRsM5UV7I1i6iPjssqmqYW+FYAJA+LQ j9OMcdLGvcAHvdJVmCzDmmEVdi9sxxsqF9ChYoQv8KxbGlJM0XAT2iXJqzGLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTa3xMXmkkWFUtb3p5bY15AmYkNcwHwYDVR0j BBgwFoAUS+Drr+8eIGyti06tbWoI06jAG1AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OGE3ZjM1NS1mMjI1LTQ4ZjMtODdmOC0wYmZiMGM4ZTU4ZjAvMC80QkUwRUJBRkVG MUUyMDZDQUQ4QjRFQUQ2RDZBMDhEM0E4QzAxQjUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEJFMEVCQUZFRjFFMjA2Q0FEOEI0RUFENkQ2QTA4RDNBOEMw MUI1MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOThhN2YzNTUtZjIyNS00OGYzLTg3 ZjgtMGJmYjBjOGU1OGYwLzAvNEJFMEVCQUZFRjFFMjA2Q0FEOEI0RUFENkQ2QTA4 RDNBOEMwMUI1MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABL8BN/lkNrDYu9US64bRHPuaVilBurfsKUq 12mxMRDhvzv86R54kfZSFsAgT5a/K7zye/nOhOV5x1iAKtEnWajcFgP+kW6QGLLa 2I69TJwes/BOTrf5Nyp12SoaqJblkMMf10C6CQI9mNcEyOV7uf/s4SsB/DGn2Cbs vGWpPVdLkRXLzjAM5ECv44X/9OOUMhFxKfIJm9zttXbVunR9acyWVCdZbi6S0E1D 7oLPfjc/6WIqRZXwY6SSs+lCWpdkQ8tCg88AfJfCC6T7sy+SrndIRvyfQZTcLVFm ZteSa3YEWa94givkUx7kmJOVVmVaKlPz8GtOiPNT1DWo+8tRSE0= -----END CERTIFICATE-----Generated at Tue Oct 21 00:01:19 2025 by rpki-client