$ rpki-client -vvf repo-rpki.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/4DF415D2DB760C39855B3F3D9CF3CE441A783E36.mft File: 4DF415D2DB760C39855B3F3D9CF3CE441A783E36.mft (raw, json) Hash identifier: xLncwdm2936RljUjZt6cza5Ul4LB6pEAMLiuEol5TBk= Subject key identifier: AE:4B:09:A2:F8:C7:EF:E1:0D:12:E6:E0:A4:ED:78:7E:80:A7:93:09 Authority key identifier: 4D:F4:15:D2:DB:76:0C:39:85:5B:3F:3D:9C:F3:CE:44:1A:78:3E:36 Certificate issuer: /CN=4DF415D2DB760C39855B3F3D9CF3CE441A783E36 Certificate serial: 580D8F7C2A661DC863DB8AE5A1EF107BDA323032 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF415D2DB760C39855B3F3D9CF3CE441A783E36.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/4DF415D2DB760C39855B3F3D9CF3CE441A783E36.mft Manifest number: 0518 Signing time: Sun 19 Oct 2025 15:51:54 +0000 Manifest this update: Sun 19 Oct 2025 15:46:54 +0000 Manifest next update: Wed 22 Oct 2025 16:19:54 +0000 Files and hashes: 1: 4DF415D2DB760C39855B3F3D9CF3CE441A783E36.crl (hash: BNodrXPdpXjZrvoi+gCN9fW8G+fKga/qSEld6OuUenc=) 2: 3130332e3133332e32302e302f32332d3234203d3e20313336383638.roa (hash: kKOPYDd68IbPpSS7OOzul5ii2GOnq8I9waVsMp0r138=) 3: 3130332e3130352e39392e302f32342d3234203d3e20313336383638.roa (hash: RarippCnWnMmEjTgkPvYhkG55G9O0lUfwe2+0FeUYpg=) 4: 3130332e3130352e39382e302f32332d3233203d3e20313336383638.roa (hash: KrFiIsKebuclmAnJCp7i0qAQI2dNZ1dLN7tW2prCRMk=) 5: 323030313a6466333a373130303a3a2f34382d3438203d3e20313336383638.roa (hash: gxzjhOqlSfyvVQV8GuZutKZCxMRY+U2lIgUsJNuDYjo=) 6: 3130332e3130352e39382e302f32342d3234203d3e20313336383638.roa (hash: gEF6XHOWRCqM+iWbvzjd5eE8QEvtBHMbgAap2D0U424=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/4DF415D2DB760C39855B3F3D9CF3CE441A783E36.crl rsync://repo-rpki.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/4DF415D2DB760C39855B3F3D9CF3CE441A783E36.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF415D2DB760C39855B3F3D9CF3CE441A783E36.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 16:19:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:0d:8f:7c:2a:66:1d:c8:63:db:8a:e5:a1:ef:10:7b:da:32:30:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4DF415D2DB760C39855B3F3D9CF3CE441A783E36 Validity Not Before: Oct 19 15:46:54 2025 GMT Not After : Oct 22 16:19:54 2025 GMT Subject: CN=AE4B09A2F8C7EFE10D12E6E0A4ED787E80A79309 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:30:82:90:d8:68:95:ea:e2:a4:48:2d:6b:a1: 26:fb:b2:f6:80:ed:c5:aa:ab:72:e0:c1:8a:ba:b9: 6b:5d:a3:47:e5:14:8f:eb:41:84:4b:74:04:73:ee: ad:44:72:27:1e:e6:88:e3:20:94:2f:8e:2e:16:7e: 9e:bf:e5:6c:25:82:d9:d5:f0:d2:f0:33:97:c6:64: 83:91:ff:d6:5c:44:f1:7a:c8:dd:1e:ab:46:76:b7: 07:2b:b0:b3:6a:71:1f:dc:1d:03:5a:a8:7e:41:fe: 67:d8:85:ea:b4:97:ac:94:34:d5:20:05:16:35:70: f8:e0:81:da:20:7d:9f:14:f3:68:2c:25:24:46:d4: d8:04:f1:62:84:a3:c8:9a:fd:eb:b3:4c:60:86:be: 16:5d:74:ba:44:75:23:38:30:51:21:21:a7:02:45: b6:af:6a:dd:b9:66:f6:f8:eb:52:cf:3d:94:cd:8f: 10:40:4d:be:11:6f:1e:a8:46:7a:26:06:f5:de:1b: f7:cb:d1:93:da:0c:96:b8:09:f2:59:20:38:f9:b0: 83:29:4c:86:b0:90:ff:ee:dc:84:81:3e:ff:e7:32: 2d:9a:f3:5d:43:43:d3:78:2b:82:80:f9:dc:cc:d3: 61:2c:e7:73:95:8b:b7:e6:70:c8:9f:e5:ae:9f:41: 43:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:4B:09:A2:F8:C7:EF:E1:0D:12:E6:E0:A4:ED:78:7E:80:A7:93:09 X509v3 Authority Key Identifier: keyid:4D:F4:15:D2:DB:76:0C:39:85:5B:3F:3D:9C:F3:CE:44:1A:78:3E:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/4DF415D2DB760C39855B3F3D9CF3CE441A783E36.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF415D2DB760C39855B3F3D9CF3CE441A783E36.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/4DF415D2DB760C39855B3F3D9CF3CE441A783E36.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:83:89:20:ce:8b:2d:c4:16:40:4f:d8:1d:d0:f9:8c:e7:62: 39:e6:20:c7:c2:42:c0:44:1b:60:1a:3b:a9:6f:f6:f9:76:07: 0e:a2:9b:29:04:bc:35:c3:2e:3c:5a:2e:e5:52:70:2b:a0:77: 00:7e:de:1f:d1:d7:84:b5:e0:32:25:e8:81:a6:48:4d:27:77: 0f:d6:02:1d:d5:41:48:ac:61:4b:79:67:6a:3b:42:ad:de:84: b9:9e:94:f7:37:d6:68:00:1d:95:1a:a9:bf:d1:b3:fe:e7:b2: 44:4c:04:43:55:eb:ff:a9:c2:70:a2:a2:99:3f:1a:11:25:21: 69:a2:f0:cc:e4:4c:ec:49:e3:8e:c4:be:ed:22:44:b5:e7:e8: e8:bf:6e:03:dc:62:1c:8e:6b:64:8f:4c:4f:45:56:2f:c5:93: 25:9f:b6:a3:c9:d8:8d:ce:6d:1a:37:04:d2:aa:c8:0e:a8:cc: 9b:62:17:38:c6:b3:86:b6:97:9e:c1:cf:52:ac:a8:c8:a2:cd: 49:87:b8:a2:15:f3:33:43:b1:a4:b8:bc:12:9a:c4:93:23:5d: 21:96:4b:f3:5d:d2:91:4d:3d:b7:e6:d9:08:75:2e:d8:ec:75: 32:49:be:1c:d3:93:fa:f0:fe:79:ef:bc:b6:ea:eb:a4:7a:7e: 54:d9:dc:d7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWA2PfCpmHchj24rloe8Qe9oyMDIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNERGNDE1RDJEQjc2MEMzOTg1NUIzRjNEOUNGM0NFNDQx QTc4M0UzNjAeFw0yNTEwMTkxNTQ2NTRaFw0yNTEwMjIxNjE5NTRaMDMxMTAvBgNV BAMTKEFFNEIwOUEyRjhDN0VGRTEwRDEyRTZFMEE0RUQ3ODdFODBBNzkzMDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3MIKQ2GiV6uKkSC1roSb7svaA 7cWqq3LgwYq6uWtdo0flFI/rQYRLdARz7q1Ecice5ojjIJQvji4Wfp6/5WwlgtnV 8NLwM5fGZIOR/9ZcRPF6yN0eq0Z2twcrsLNqcR/cHQNaqH5B/mfYheq0l6yUNNUg BRY1cPjggdogfZ8U82gsJSRG1NgE8WKEo8ia/euzTGCGvhZddLpEdSM4MFEhIacC Rbavat25Zvb461LPPZTNjxBATb4Rbx6oRnomBvXeG/fL0ZPaDJa4CfJZIDj5sIMp TIawkP/u3ISBPv/nMi2a811DQ9N4K4KA+dzM02Es53OVi7fmcMif5a6fQUNNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrksJovjH7+ENEubgpO14foCnkwkwHwYDVR0j BBgwFoAUTfQV0tt2DDmFWz89nPPORBp4PjYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MTI0YWE4Yy1kZWRjLTQzNzYtOTM4MS0wYTgxZTZiY2M1NjQvMC80REY0MTVEMkRC NzYwQzM5ODU1QjNGM0Q5Q0YzQ0U0NDFBNzgzRTM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNERGNDE1RDJEQjc2MEMzOTg1NUIzRjNEOUNGM0NFNDQxQTc4 M0UzNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTEyNGFhOGMtZGVkYy00Mzc2LTkz ODEtMGE4MWU2YmNjNTY0LzAvNERGNDE1RDJEQjc2MEMzOTg1NUIzRjNEOUNGM0NF NDQxQTc4M0UzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJuDiSDOiy3EFkBP2B3Q+YznYjnmIMfCQsBE G2AaO6lv9vl2Bw6imykEvDXDLjxaLuVScCugdwB+3h/R14S14DIl6IGmSE0ndw/W Ah3VQUisYUt5Z2o7Qq3ehLmelPc31mgAHZUaqb/Rs/7nskRMBENV6/+pwnCiopk/ GhElIWmi8MzkTOxJ447Evu0iRLXn6Oi/bgPcYhyOa2SPTE9FVi/FkyWftqPJ2I3O bRo3BNKqyA6ozJtiFzjGs4a2l57Bz1KsqMiizUmHuKIV8zNDsaS4vBKaxJMjXSGW S/Nd0pFNPbfm2Qh1LtjsdTJJvhzTk/rw/nnvvLbq66R6flTZ3Nc= -----END CERTIFICATE-----Generated at Mon Oct 20 18:02:53 2025 by rpki-client