$ rpki-client -vvf repo-rpki.idnic.net/repo/9eab0a01-8ee4-4825-840d-112daef0aca8/0/4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.mft File: 4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.mft (raw, json) Hash identifier: gyevKHBbYwg91OVYI3qxe1uFqj/llx+H1y/fiEVYoto= Subject key identifier: AC:D9:B7:7E:33:8B:DA:E5:7B:21:63:5B:88:3F:EC:3D:74:99:8D:A1 Authority key identifier: 4E:2A:A9:ED:35:DB:0F:27:6A:5F:F0:D4:02:0D:BE:A1:3E:04:C6:23 Certificate issuer: /CN=4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623 Certificate serial: 2AE212F88ED604FD7FC35D599B26028D34D3B99F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9eab0a01-8ee4-4825-840d-112daef0aca8/0/4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.mft Manifest number: 01B7 Signing time: Sun 19 Oct 2025 20:11:32 +0000 Manifest this update: Sun 19 Oct 2025 20:06:32 +0000 Manifest next update: Wed 22 Oct 2025 22:14:32 +0000 Files and hashes: 1: 3130332e3137342e31342e302f32332d3234203d3e20313439333532.roa (hash: cJjmG0CdhjaR+QAVA5ZLIDFXiWwjI5yTIKuxLgCeRRg=) 2: 4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.crl (hash: k0E7SeXq2RF9CPbb4BUR12FDjHGR4oc+5vH887Vz784=) 3: 323030313a6466303a6134303a3a2f34382d3438203d3e20313439333532.roa (hash: lidUKpIUI42q8veE3vysCaBMTq0HxAiYVl6H5XafxIU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9eab0a01-8ee4-4825-840d-112daef0aca8/0/4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.crl rsync://repo-rpki.idnic.net/repo/9eab0a01-8ee4-4825-840d-112daef0aca8/0/4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 22:14:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:e2:12:f8:8e:d6:04:fd:7f:c3:5d:59:9b:26:02:8d:34:d3:b9:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623 Validity Not Before: Oct 19 20:06:32 2025 GMT Not After : Oct 22 22:14:32 2025 GMT Subject: CN=ACD9B77E338BDAE57B21635B883FEC3D74998DA1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:a8:36:25:29:fc:74:4f:0e:45:4d:1d:c4:d8: d4:14:d4:a6:05:f7:3c:7c:bc:bd:54:48:03:b1:0d: 24:62:c0:7e:80:26:5f:82:62:84:64:22:64:eb:c7: 1e:d4:1f:40:59:fd:af:98:ca:c3:69:e2:47:94:41: 12:28:64:21:2b:0b:d0:7f:64:0b:69:f6:54:6c:c9: 27:67:53:98:f1:b5:56:06:4c:38:10:e2:89:c1:be: 24:27:b8:f9:3f:cb:48:18:15:15:92:b0:6e:3b:b7: 6b:ec:42:f6:fb:8c:46:9a:c0:5e:14:f6:a0:eb:d6: fd:fb:55:24:eb:af:23:16:e9:f2:74:b7:ef:52:8d: 20:55:56:7e:9f:ac:c3:b9:bc:27:48:37:dc:d8:39: a5:9e:97:94:7e:d1:6b:40:07:1e:0d:ff:af:5a:b3: 5f:f1:25:8d:90:5f:52:39:58:01:47:9d:79:14:9b: 45:c9:20:6b:e7:3d:4f:38:0f:a5:17:49:e9:66:1d: fc:a7:f3:df:87:1a:3b:72:ae:1a:5a:c8:84:3f:1e: 25:04:df:b4:3b:d5:96:73:05:66:17:f8:0a:03:20: 4a:26:b2:cb:70:a7:ce:ab:b1:3b:f9:f1:00:17:99: d2:cf:57:b6:bb:62:02:db:39:ec:ed:fc:b5:95:1f: a8:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:D9:B7:7E:33:8B:DA:E5:7B:21:63:5B:88:3F:EC:3D:74:99:8D:A1 X509v3 Authority Key Identifier: keyid:4E:2A:A9:ED:35:DB:0F:27:6A:5F:F0:D4:02:0D:BE:A1:3E:04:C6:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9eab0a01-8ee4-4825-840d-112daef0aca8/0/4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9eab0a01-8ee4-4825-840d-112daef0aca8/0/4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:5b:17:eb:b2:2c:5b:3a:e5:c0:02:8a:71:ba:a0:eb:bb:35: 68:66:5c:e9:92:9d:b1:2a:61:dd:e9:39:63:49:f3:a7:6c:dc: 6f:05:26:48:71:c4:dd:08:d3:50:fa:45:54:fa:a2:fe:d2:7d: cf:ce:87:a4:30:85:d3:df:39:17:1f:b1:a3:f6:86:0d:76:19: 8d:fc:b8:fc:21:c2:f2:c8:40:24:08:da:c5:d9:7c:fd:3f:a0: fc:ed:a2:fb:13:78:1d:87:55:a9:98:bf:22:27:48:59:16:87: be:2b:cc:bc:78:60:94:3b:22:51:08:5a:bb:c1:42:11:e8:87: b9:96:6e:cb:1b:05:2f:4f:62:7b:58:fa:3d:ba:66:24:ae:b8: ae:2a:b7:db:93:61:9b:52:b6:6e:2c:c6:66:eb:2c:29:12:97: b1:2b:b0:62:37:50:47:14:0e:5b:00:2e:98:99:b7:97:0a:e2: c3:ea:e7:43:ac:ba:38:d9:50:f9:4a:35:55:fe:eb:78:d0:09: e3:00:98:c6:f5:7c:a0:23:ff:4d:b2:ec:92:09:be:4b:8a:6d: 96:b4:d3:c2:e3:af:0a:f7:aa:56:17:6b:96:76:f3:d9:53:79: ba:24:8f:19:64:52:83:3a:00:35:52:cd:a2:ca:6c:57:6b:9a: b7:db:66:46 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKuIS+I7WBP1/w11ZmyYCjTTTuZ8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEUyQUE5RUQzNURCMEYyNzZBNUZGMEQ0MDIwREJFQTEz RTA0QzYyMzAeFw0yNTEwMTkyMDA2MzJaFw0yNTEwMjIyMjE0MzJaMDMxMTAvBgNV BAMTKEFDRDlCNzdFMzM4QkRBRTU3QjIxNjM1Qjg4M0ZFQzNENzQ5OThEQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLqDYlKfx0Tw5FTR3E2NQU1KYF 9zx8vL1USAOxDSRiwH6AJl+CYoRkImTrxx7UH0BZ/a+YysNp4keUQRIoZCErC9B/ ZAtp9lRsySdnU5jxtVYGTDgQ4onBviQnuPk/y0gYFRWSsG47t2vsQvb7jEaawF4U 9qDr1v37VSTrryMW6fJ0t+9SjSBVVn6frMO5vCdIN9zYOaWel5R+0WtABx4N/69a s1/xJY2QX1I5WAFHnXkUm0XJIGvnPU84D6UXSelmHfyn89+HGjtyrhpayIQ/HiUE 37Q71ZZzBWYX+AoDIEomsstwp86rsTv58QAXmdLPV7a7YgLbOezt/LWVH6grAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrNm3fjOL2uV7IWNbiD/sPXSZjaEwHwYDVR0j BBgwFoAUTiqp7TXbDydqX/DUAg2+oT4ExiMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZWFiMGEwMS04ZWU0LTQ4MjUtODQwZC0xMTJkYWVmMGFjYTgvMC80RTJBQTlFRDM1 REIwRjI3NkE1RkYwRDQwMjBEQkVBMTNFMDRDNjIzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEUyQUE5RUQzNURCMEYyNzZBNUZGMEQ0MDIwREJFQTEzRTA0 QzYyMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWVhYjBhMDEtOGVlNC00ODI1LTg0 MGQtMTEyZGFlZjBhY2E4LzAvNEUyQUE5RUQzNURCMEYyNzZBNUZGMEQ0MDIwREJF QTEzRTA0QzYyMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFBbF+uyLFs65cACinG6oOu7NWhmXOmSnbEq Yd3pOWNJ86ds3G8FJkhxxN0I01D6RVT6ov7Sfc/Oh6QwhdPfORcfsaP2hg12GY38 uPwhwvLIQCQI2sXZfP0/oPztovsTeB2HVamYvyInSFkWh74rzLx4YJQ7IlEIWrvB QhHoh7mWbssbBS9PYntY+j26ZiSuuK4qt9uTYZtStm4sxmbrLCkSl7ErsGI3UEcU DlsALpiZt5cK4sPq50OsujjZUPlKNVX+63jQCeMAmMb1fKAj/02y7JIJvkuKbZa0 08Ljrwr3qlYXa5Z289lTebokjxlkUoM6ADVSzaLKbFdrmrfbZkY= -----END CERTIFICATE-----Generated at Mon Oct 20 18:45:40 2025 by rpki-client