$ rpki-client -vvf repo-rpki.idnic.net/repo/9a2bfe9a-3823-44e9-97c0-2191a56bafd3/0/4F022459BA46CF30700E070671C752B44729E249.mft File: 4F022459BA46CF30700E070671C752B44729E249.mft (raw, json) Hash identifier: A+65EerfTcR9Qeiu2ob/ULOiHDftGdEEDujaoeEyhQI= Subject key identifier: 36:C4:4C:BB:22:40:4A:DF:A3:B3:63:B4:6A:5D:7B:35:C0:F3:D1:8B Authority key identifier: 4F:02:24:59:BA:46:CF:30:70:0E:07:06:71:C7:52:B4:47:29:E2:49 Certificate issuer: /CN=4F022459BA46CF30700E070671C752B44729E249 Certificate serial: 758C4B3757230CB0F0503EADECB1CDB2FE084B0C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F022459BA46CF30700E070671C752B44729E249.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9a2bfe9a-3823-44e9-97c0-2191a56bafd3/0/4F022459BA46CF30700E070671C752B44729E249.mft Manifest number: 01BD Signing time: Sun 19 Oct 2025 22:22:13 +0000 Manifest this update: Sun 19 Oct 2025 22:17:13 +0000 Manifest next update: Wed 22 Oct 2025 23:47:13 +0000 Files and hashes: 1: 4F022459BA46CF30700E070671C752B44729E249.crl (hash: qWwfcgTkCNeaRJZfn9JXa5YX/kVlW90IhADo2KCpwqM=) 2: 3130332e36312e3233342e302f32332d3233203d3e20313530353130.roa (hash: eReb0WjJwBofXwNbDwmRqsCz1oLf4D/ET0XbS0nqqnk=) 3: 3130332e36312e3233342e302f32342d3234203d3e20313530353130.roa (hash: VvIxYiO1vpW4N2M0c206efZBd+dmDTRrTwPYKqia/UQ=) 4: 3130332e36312e3233352e302f32342d3234203d3e20313530353130.roa (hash: OWWwKr6VgMTRSl2gHvmJwedkDbcvu1lGUMF7l6U0D14=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9a2bfe9a-3823-44e9-97c0-2191a56bafd3/0/4F022459BA46CF30700E070671C752B44729E249.crl rsync://repo-rpki.idnic.net/repo/9a2bfe9a-3823-44e9-97c0-2191a56bafd3/0/4F022459BA46CF30700E070671C752B44729E249.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F022459BA46CF30700E070671C752B44729E249.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 23:47:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:8c:4b:37:57:23:0c:b0:f0:50:3e:ad:ec:b1:cd:b2:fe:08:4b:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4F022459BA46CF30700E070671C752B44729E249 Validity Not Before: Oct 19 22:17:13 2025 GMT Not After : Oct 22 23:47:13 2025 GMT Subject: CN=36C44CBB22404ADFA3B363B46A5D7B35C0F3D18B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:3e:36:d2:9e:a9:44:05:8d:e8:31:67:74:19: 17:67:8b:a9:6f:ee:ce:63:b0:d8:a6:2c:80:f7:0b: 1f:86:30:94:c0:2b:3e:a2:5c:bc:2b:e5:2a:9f:bf: 85:8e:e2:10:f4:76:87:70:28:90:d3:27:48:21:62: 0e:e8:a3:f7:63:cc:88:0d:10:8e:cb:b4:21:c0:6e: bd:0a:95:a9:05:f7:2f:67:fc:a9:39:cf:97:70:95: 17:57:35:fe:8c:97:9b:46:41:4f:41:38:5e:d3:cc: ac:28:18:87:1a:c6:e0:61:dc:ba:f6:e5:76:a0:9b: 84:32:22:00:ea:f3:24:d8:3f:b6:53:dd:1d:3e:c2: e9:33:53:5f:6e:d9:e1:47:1a:6d:ef:92:62:2e:69: b2:7b:27:28:7b:e7:3d:e1:ef:df:66:99:ab:b2:55: 64:bb:2b:e9:57:0d:db:e4:dc:2e:e1:10:e1:41:dc: 94:87:3c:9c:b7:40:ac:30:8c:fb:ca:ee:5b:a5:fc: f4:e7:f2:cb:b1:6b:94:5c:82:6f:f8:1c:80:f3:af: 89:24:ad:16:36:65:3b:5b:e3:f9:89:dd:a9:d7:cf: c7:09:71:eb:52:85:c1:3e:1f:4e:e3:69:a7:49:ae: 23:04:05:ee:7d:dd:f8:1b:48:fe:0c:61:e7:96:c9: 70:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:C4:4C:BB:22:40:4A:DF:A3:B3:63:B4:6A:5D:7B:35:C0:F3:D1:8B X509v3 Authority Key Identifier: keyid:4F:02:24:59:BA:46:CF:30:70:0E:07:06:71:C7:52:B4:47:29:E2:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9a2bfe9a-3823-44e9-97c0-2191a56bafd3/0/4F022459BA46CF30700E070671C752B44729E249.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F022459BA46CF30700E070671C752B44729E249.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9a2bfe9a-3823-44e9-97c0-2191a56bafd3/0/4F022459BA46CF30700E070671C752B44729E249.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:f5:22:88:bc:fe:9f:d1:b9:56:71:47:f7:a7:60:58:c5:2b: 50:d2:fe:38:5f:3f:cd:20:8e:b7:06:41:e3:0a:12:fa:9c:6a: bc:b4:5a:02:15:af:4d:e0:7d:5b:c3:21:44:a0:63:2f:bd:5f: 79:79:a8:cf:c8:19:28:ba:76:14:40:e6:b5:9b:36:2a:c2:4b: 38:38:15:d5:b2:0e:53:38:af:71:46:f9:19:a8:74:3d:54:85: b5:14:e6:f8:11:f7:f3:1d:05:d1:45:69:1c:64:70:f5:d6:d3: f0:a8:7d:2f:8f:ad:26:fd:5e:d2:3a:b5:6d:3c:e0:00:b8:9f: 48:19:7b:a4:aa:9d:27:52:90:47:a0:b1:79:db:9a:09:db:2b: 77:5c:ef:4e:2e:17:94:c9:3b:cf:21:d7:dd:8f:f6:b0:0e:5a: b6:7f:31:6c:b3:b3:12:d2:1c:97:c9:6a:fb:cd:87:ec:30:28: 17:21:e6:6d:2a:99:56:d5:38:a5:80:55:e1:92:fa:db:d2:db: 8f:41:a6:c3:d8:76:ea:e0:fc:84:02:91:1d:5b:a2:4f:7b:bb: c9:1b:b6:11:e2:44:49:58:ac:16:ff:7e:f8:52:41:8b:be:05: df:29:f3:6d:f5:56:48:30:61:73:19:c3:ed:c1:00:42:c9:b7: 83:ff:f9:7b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdYxLN1cjDLDwUD6t7LHNsv4ISwwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEYwMjI0NTlCQTQ2Q0YzMDcwMEUwNzA2NzFDNzUyQjQ0 NzI5RTI0OTAeFw0yNTEwMTkyMjE3MTNaFw0yNTEwMjIyMzQ3MTNaMDMxMTAvBgNV BAMTKDM2QzQ0Q0JCMjI0MDRBREZBM0IzNjNCNDZBNUQ3QjM1QzBGM0QxOEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBPjbSnqlEBY3oMWd0GRdni6lv 7s5jsNimLID3Cx+GMJTAKz6iXLwr5Sqfv4WO4hD0dodwKJDTJ0ghYg7oo/djzIgN EI7LtCHAbr0KlakF9y9n/Kk5z5dwlRdXNf6Ml5tGQU9BOF7TzKwoGIcaxuBh3Lr2 5Xagm4QyIgDq8yTYP7ZT3R0+wukzU19u2eFHGm3vkmIuabJ7Jyh75z3h799mmauy VWS7K+lXDdvk3C7hEOFB3JSHPJy3QKwwjPvK7lul/PTn8suxa5Rcgm/4HIDzr4kk rRY2ZTtb4/mJ3anXz8cJcetShcE+H07jaadJriMEBe593fgbSP4MYeeWyXDBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNsRMuyJASt+js2O0al17NcDz0YswHwYDVR0j BBgwFoAUTwIkWbpGzzBwDgcGccdStEcp4kkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YTJiZmU5YS0zODIzLTQ0ZTktOTdjMC0yMTkxYTU2YmFmZDMvMC80RjAyMjQ1OUJB NDZDRjMwNzAwRTA3MDY3MUM3NTJCNDQ3MjlFMjQ5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEYwMjI0NTlCQTQ2Q0YzMDcwMEUwNzA2NzFDNzUyQjQ0NzI5 RTI0OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWEyYmZlOWEtMzgyMy00NGU5LTk3 YzAtMjE5MWE1NmJhZmQzLzAvNEYwMjI0NTlCQTQ2Q0YzMDcwMEUwNzA2NzFDNzUy QjQ0NzI5RTI0OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH/1Ioi8/p/RuVZxR/enYFjFK1DS/jhfP80g jrcGQeMKEvqcary0WgIVr03gfVvDIUSgYy+9X3l5qM/IGSi6dhRA5rWbNirCSzg4 FdWyDlM4r3FG+RmodD1UhbUU5vgR9/MdBdFFaRxkcPXW0/CofS+PrSb9XtI6tW08 4AC4n0gZe6SqnSdSkEegsXnbmgnbK3dc704uF5TJO88h192P9rAOWrZ/MWyzsxLS HJfJavvNh+wwKBch5m0qmVbVOKWAVeGS+tvS249BpsPYdurg/IQCkR1bok97u8kb thHiRElYrBb/fvhSQYu+Bd8p8231VkgwYXMZw+3BAELJt4P/+Xs= -----END CERTIFICATE-----Generated at Mon Oct 20 12:56:50 2025 by rpki-client