$ rpki-client -vvf repo-rpki.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0/4617272EE875B55CD5F2A88330A95F6410A3EB1B.mft File: 4617272EE875B55CD5F2A88330A95F6410A3EB1B.mft (raw, json) Hash identifier: vLXcn0nE+S/TL0DWlRTClKscREJOT8lz2OXTeaG4Vzw= Subject key identifier: 10:3F:9A:0B:13:36:28:E8:99:FB:AD:A3:01:04:F6:FF:95:6E:B5:E9 Authority key identifier: 46:17:27:2E:E8:75:B5:5C:D5:F2:A8:83:30:A9:5F:64:10:A3:EB:1B Certificate issuer: /CN=4617272EE875B55CD5F2A88330A95F6410A3EB1B Certificate serial: 3E16A377E62ACDDB129BD2958CCF385DD72FF172 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4617272EE875B55CD5F2A88330A95F6410A3EB1B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0/4617272EE875B55CD5F2A88330A95F6410A3EB1B.mft Manifest number: 0107 Signing time: Mon 20 Oct 2025 05:11:11 +0000 Manifest this update: Mon 20 Oct 2025 05:06:11 +0000 Manifest next update: Thu 23 Oct 2025 05:21:11 +0000 Files and hashes: 1: 3135372e31352e34342e302f32332d3233203d3e20313532333931.roa (hash: O3sKicmk2yGnkx/tY8M39vxITAxZv+eItzqmfEpZHaM=) 2: 3135372e31352e34352e302f32342d3234203d3e20313532333931.roa (hash: x6ZV1Wl+WBaRGXPvArCfDSB+gNTaB80RBBLsR8syzeM=) 3: 4617272EE875B55CD5F2A88330A95F6410A3EB1B.crl (hash: Dh4Sgi19L04sfdzB/0ljI4J4SKpT3/6flRasblnBDHA=) 4: 3135372e31352e34342e302f32342d3234203d3e20313532333931.roa (hash: /J4LqqzzRfOuCjdKMN+a1hzCP36QvC7oDLsxBPgXP0g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0/4617272EE875B55CD5F2A88330A95F6410A3EB1B.crl rsync://repo-rpki.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0/4617272EE875B55CD5F2A88330A95F6410A3EB1B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4617272EE875B55CD5F2A88330A95F6410A3EB1B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 03:04:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:16:a3:77:e6:2a:cd:db:12:9b:d2:95:8c:cf:38:5d:d7:2f:f1:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4617272EE875B55CD5F2A88330A95F6410A3EB1B Validity Not Before: Oct 20 05:06:11 2025 GMT Not After : Oct 23 05:21:11 2025 GMT Subject: CN=103F9A0B133628E899FBADA30104F6FF956EB5E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:20:a8:44:0e:84:e3:5c:14:8e:52:79:b5:e7: ad:85:67:90:a0:c8:98:40:d5:48:2a:01:6a:35:d1: 95:53:ce:f3:d7:f9:fe:68:e0:8f:15:e5:f7:f3:58: 86:b5:d8:96:12:dc:93:c0:56:bd:e8:0f:71:e3:6d: a9:7d:74:ad:a4:00:2e:b3:6c:ce:38:0c:ce:54:52: 46:0a:ab:f5:70:af:e4:91:64:55:ea:14:2a:60:a5: 18:60:48:a8:94:51:ea:34:a3:87:a8:9d:cc:7e:c7: ea:80:fe:cf:d0:ea:c8:cc:29:bb:42:14:41:22:04: 77:b1:ec:1b:25:ab:c9:4b:78:e5:b2:ae:cd:b2:44: 1f:f3:d4:1d:81:1b:64:79:26:8f:72:0c:95:a3:3d: eb:ff:bf:79:f6:da:44:b9:a7:72:87:c6:71:53:01: 1c:b4:5f:c3:c0:03:52:e3:f2:81:9d:20:37:a8:0a: 9e:ad:91:2c:96:75:00:12:f3:07:21:58:24:66:b8: 50:e1:60:a1:d6:3a:d9:27:30:b6:ed:bd:36:63:ec: dd:e4:f5:b9:ed:68:b2:21:b2:ba:a5:e3:12:a9:88: a5:dc:e8:9d:82:e0:fc:fe:d0:14:a5:bb:ee:ed:7d: 80:d0:ba:12:75:61:8f:52:ab:2b:89:b2:2c:09:d3: 5e:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:3F:9A:0B:13:36:28:E8:99:FB:AD:A3:01:04:F6:FF:95:6E:B5:E9 X509v3 Authority Key Identifier: keyid:46:17:27:2E:E8:75:B5:5C:D5:F2:A8:83:30:A9:5F:64:10:A3:EB:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0/4617272EE875B55CD5F2A88330A95F6410A3EB1B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4617272EE875B55CD5F2A88330A95F6410A3EB1B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0/4617272EE875B55CD5F2A88330A95F6410A3EB1B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:d1:33:42:0e:67:9c:c4:2f:0b:c3:ff:8f:35:74:1d:6b:ac: 97:64:6a:71:83:2e:9e:b2:97:c2:e7:75:52:6e:70:d7:e5:74: 93:ce:49:4f:73:91:ce:18:cf:e1:f6:f8:32:f3:0f:97:c2:0a: 58:f4:a2:90:50:4e:f4:32:d4:d5:74:ae:c0:06:ce:82:1c:2e: 3a:06:16:6e:68:fc:02:b9:81:d4:14:99:2a:61:52:be:ca:6e: 72:3c:e6:dc:d2:9a:45:41:ac:99:4b:a5:e8:ed:6b:f2:1a:b1: af:59:14:d1:d2:59:4a:1a:1a:41:fa:fc:6a:04:c2:f1:4d:58: 94:fe:3c:2a:ee:f6:71:dc:2b:fe:3d:03:e8:bc:89:23:be:1d: db:b8:ae:bd:6a:a1:0a:ec:64:93:f0:2b:f7:61:7b:7e:8b:f0: 79:af:28:52:db:ab:2c:0a:c8:16:2b:50:6b:92:f0:52:4f:cf: 6a:0f:ff:08:c7:57:8b:0b:c9:68:a4:97:fe:a8:6c:de:08:57: 67:07:53:09:e1:87:7f:52:a8:c5:05:7f:1a:88:16:19:2f:6a: 3d:0e:87:e3:f2:7e:3d:dd:f9:99:e0:ec:97:48:4b:0c:ca:5d: ad:0c:61:b8:fc:87:53:6a:91:68:f4:7c:06:d5:3b:68:fd:63: b4:ac:e7:b7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPhajd+YqzdsSm9KVjM84Xdcv8XIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDYxNzI3MkVFODc1QjU1Q0Q1RjJBODgzMzBBOTVGNjQx MEEzRUIxQjAeFw0yNTEwMjAwNTA2MTFaFw0yNTEwMjMwNTIxMTFaMDMxMTAvBgNV BAMTKDEwM0Y5QTBCMTMzNjI4RTg5OUZCQURBMzAxMDRGNkZGOTU2RUI1RTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeIKhEDoTjXBSOUnm1562FZ5Cg yJhA1UgqAWo10ZVTzvPX+f5o4I8V5ffzWIa12JYS3JPAVr3oD3Hjbal9dK2kAC6z bM44DM5UUkYKq/Vwr+SRZFXqFCpgpRhgSKiUUeo0o4eoncx+x+qA/s/Q6sjMKbtC FEEiBHex7Bslq8lLeOWyrs2yRB/z1B2BG2R5Jo9yDJWjPev/v3n22kS5p3KHxnFT ARy0X8PAA1Lj8oGdIDeoCp6tkSyWdQAS8wchWCRmuFDhYKHWOtknMLbtvTZj7N3k 9bntaLIhsrql4xKpiKXc6J2C4Pz+0BSlu+7tfYDQuhJ1YY9SqyuJsiwJ014xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUED+aCxM2KOiZ+62jAQT2/5VutekwHwYDVR0j BBgwFoAURhcnLuh1tVzV8qiDMKlfZBCj6xswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZmRhZjA2YS1mNjI0LTQyY2YtYmIxOS1iNmJiZjkzMWFhYzgvMC80NjE3MjcyRUU4 NzVCNTVDRDVGMkE4ODMzMEE5NUY2NDEwQTNFQjFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNDYxNzI3MkVFODc1QjU1Q0Q1RjJBODgzMzBBOTVGNjQxMEEz RUIxQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWZkYWYwNmEtZjYyNC00MmNmLWJi MTktYjZiYmY5MzFhYWM4LzAvNDYxNzI3MkVFODc1QjU1Q0Q1RjJBODgzMzBBOTVG NjQxMEEzRUIxQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALnRM0IOZ5zELwvD/481dB1rrJdkanGDLp6y l8LndVJucNfldJPOSU9zkc4Yz+H2+DLzD5fCClj0opBQTvQy1NV0rsAGzoIcLjoG Fm5o/AK5gdQUmSphUr7KbnI85tzSmkVBrJlLpejta/Iasa9ZFNHSWUoaGkH6/GoE wvFNWJT+PCru9nHcK/49A+i8iSO+Hdu4rr1qoQrsZJPwK/dhe36L8HmvKFLbqywK yBYrUGuS8FJPz2oP/wjHV4sLyWikl/6obN4IV2cHUwnhh39SqMUFfxqIFhkvaj0O h+Pyfj3d+Zng7JdISwzKXa0MYbj8h1NqkWj0fAbVO2j9Y7Ss57c= -----END CERTIFICATE-----Generated at Tue Oct 21 00:25:44 2025 by rpki-client