$ rpki-client -vvf repo-rpki.idnic.net/repo/ab88d2ca-229b-4aac-9b5c-42c15105bb82/0/4ED16B9231905A1C7A353DF749BF99487E69E313.mft File: 4ED16B9231905A1C7A353DF749BF99487E69E313.mft (raw, json) Hash identifier: HQueaceGwfDg7nMme95XvCeq0BH0z0BqX8+oWonNX0w= Subject key identifier: 3A:75:F7:F2:BD:3C:F9:19:86:86:63:0D:D4:EA:02:36:55:5A:FE:F0 Authority key identifier: 4E:D1:6B:92:31:90:5A:1C:7A:35:3D:F7:49:BF:99:48:7E:69:E3:13 Certificate issuer: /CN=4ED16B9231905A1C7A353DF749BF99487E69E313 Certificate serial: 02D9447C543BC9721F697F50F6EFA9BD2ED01919 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4ED16B9231905A1C7A353DF749BF99487E69E313.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ab88d2ca-229b-4aac-9b5c-42c15105bb82/0/4ED16B9231905A1C7A353DF749BF99487E69E313.mft Manifest number: FD Signing time: Sat 18 Oct 2025 08:31:26 +0000 Manifest this update: Sat 18 Oct 2025 08:26:26 +0000 Manifest next update: Tue 21 Oct 2025 12:05:26 +0000 Files and hashes: 1: 4ED16B9231905A1C7A353DF749BF99487E69E313.crl (hash: 7vTMoVa68riklELid6s0UJ8tcr/UvGXfVkQlDoTH2ow=) 2: 3135372e32302e3130302e302f32342d3234203d3e20313532343235.roa (hash: bm0cLaD/jg5NiXGndb/98PNppE3HSK9OAR2k8wtE41Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ab88d2ca-229b-4aac-9b5c-42c15105bb82/0/4ED16B9231905A1C7A353DF749BF99487E69E313.crl rsync://repo-rpki.idnic.net/repo/ab88d2ca-229b-4aac-9b5c-42c15105bb82/0/4ED16B9231905A1C7A353DF749BF99487E69E313.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4ED16B9231905A1C7A353DF749BF99487E69E313.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 12:05:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:d9:44:7c:54:3b:c9:72:1f:69:7f:50:f6:ef:a9:bd:2e:d0:19:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ED16B9231905A1C7A353DF749BF99487E69E313 Validity Not Before: Oct 18 08:26:26 2025 GMT Not After : Oct 21 12:05:26 2025 GMT Subject: CN=3A75F7F2BD3CF9198686630DD4EA0236555AFEF0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:2e:97:72:4b:e9:0d:50:01:aa:cf:29:3b:ba: 6b:30:f9:c7:fa:a8:05:54:b8:a6:05:4a:31:68:ee: bd:62:99:7f:65:37:28:2d:a5:23:f3:14:31:27:a1: 64:af:93:c9:51:17:98:0e:98:4b:05:7e:89:45:fc: 41:e1:1b:a4:ff:5e:cd:4f:65:54:46:d7:12:17:d5: c8:10:4e:aa:78:00:74:62:3f:e3:1a:5c:8e:5f:ed: 26:c5:c1:33:86:8b:82:cb:ed:6b:7f:4a:93:99:51: fc:6c:9e:55:24:2e:73:2d:f4:df:e3:ad:03:49:70: a9:ba:53:52:f6:68:70:6d:53:fa:84:fb:64:b8:e1: ca:01:fc:db:ae:ad:93:e2:3c:bb:c8:42:b0:30:b6: 74:8c:e6:2c:36:a8:d4:78:a6:1b:d8:31:10:89:b9: ad:d3:d8:49:5f:90:e8:70:83:9d:42:99:c3:ad:2a: 24:4e:cf:f8:7c:77:b0:f0:23:28:8f:4d:fd:2d:28: f0:cf:57:bc:9b:64:bb:86:96:da:ec:e2:f0:14:d8: 94:0f:84:24:1b:4e:3e:12:e3:0f:6d:db:ed:c1:9c: 1f:f0:12:32:03:d0:a5:e9:61:91:74:00:c7:ad:3d: ca:0f:b5:72:56:09:d6:a4:3e:7e:0a:4c:46:16:b6: 02:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:75:F7:F2:BD:3C:F9:19:86:86:63:0D:D4:EA:02:36:55:5A:FE:F0 X509v3 Authority Key Identifier: keyid:4E:D1:6B:92:31:90:5A:1C:7A:35:3D:F7:49:BF:99:48:7E:69:E3:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ab88d2ca-229b-4aac-9b5c-42c15105bb82/0/4ED16B9231905A1C7A353DF749BF99487E69E313.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4ED16B9231905A1C7A353DF749BF99487E69E313.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ab88d2ca-229b-4aac-9b5c-42c15105bb82/0/4ED16B9231905A1C7A353DF749BF99487E69E313.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:55:77:22:8f:a0:51:ec:db:89:e7:a7:0d:58:24:fa:3c:c6: 64:a7:f4:8b:22:b8:44:c9:8b:17:7c:b8:57:8c:34:db:ad:a1: 98:fb:29:77:1a:e7:9d:c1:68:84:ad:6a:d9:7c:3a:95:62:fe: cc:9a:18:75:d4:8a:4a:fc:33:50:34:2b:65:36:7c:72:53:4f: 03:75:38:4e:22:f3:4d:25:44:a0:00:74:e2:ad:d1:15:eb:ed: d5:54:53:61:21:a0:6b:e4:d3:5c:00:7c:36:0b:00:bf:3a:17: c8:12:95:20:34:ab:e9:a6:41:79:01:11:e0:9b:5c:5e:85:b4: 6b:ba:56:29:ac:a2:60:c1:bc:a2:d6:81:d0:00:56:75:43:69: c3:f1:aa:e5:1a:df:67:ed:6c:97:92:c5:3b:80:c2:10:7c:24: 7e:c4:a8:35:2c:95:d1:a6:01:d8:c7:98:1a:b8:31:a3:c9:cc: 91:4d:3e:84:89:52:37:54:71:ac:9e:9b:5e:dd:4b:a5:f8:11: 63:1d:a6:d3:6d:d8:d2:52:56:56:d4:9a:36:02:52:e0:15:a3: 8a:54:b8:ae:d2:ad:3a:8a:6e:f6:66:06:24:0b:69:88:00:78: a1:d8:c0:91:2a:74:1d:51:2a:c1:8f:8e:fd:60:2d:a9:50:a0: 66:19:c3:10 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAtlEfFQ7yXIfaX9Q9u+pvS7QGRkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEVEMTZCOTIzMTkwNUExQzdBMzUzREY3NDlCRjk5NDg3 RTY5RTMxMzAeFw0yNTEwMTgwODI2MjZaFw0yNTEwMjExMjA1MjZaMDMxMTAvBgNV BAMTKDNBNzVGN0YyQkQzQ0Y5MTk4Njg2NjMwREQ0RUEwMjM2NTU1QUZFRjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNLpdyS+kNUAGqzyk7umsw+cf6 qAVUuKYFSjFo7r1imX9lNygtpSPzFDEnoWSvk8lRF5gOmEsFfolF/EHhG6T/Xs1P ZVRG1xIX1cgQTqp4AHRiP+MaXI5f7SbFwTOGi4LL7Wt/SpOZUfxsnlUkLnMt9N/j rQNJcKm6U1L2aHBtU/qE+2S44coB/NuurZPiPLvIQrAwtnSM5iw2qNR4phvYMRCJ ua3T2ElfkOhwg51CmcOtKiROz/h8d7DwIyiPTf0tKPDPV7ybZLuGltrs4vAU2JQP hCQbTj4S4w9t2+3BnB/wEjID0KXpYZF0AMetPcoPtXJWCdakPn4KTEYWtgJtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOnX38r08+RmGhmMN1OoCNlVa/vAwHwYDVR0j BBgwFoAUTtFrkjGQWhx6NT33Sb+ZSH5p4xMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h Yjg4ZDJjYS0yMjliLTRhYWMtOWI1Yy00MmMxNTEwNWJiODIvMC80RUQxNkI5MjMx OTA1QTFDN0EzNTNERjc0OUJGOTk0ODdFNjlFMzEzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNEVEMTZCOTIzMTkwNUExQzdBMzUzREY3NDlCRjk5NDg3RTY5 RTMxMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWI4OGQyY2EtMjI5Yi00YWFjLTli NWMtNDJjMTUxMDViYjgyLzAvNEVEMTZCOTIzMTkwNUExQzdBMzUzREY3NDlCRjk5 NDg3RTY5RTMxMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADpVdyKPoFHs24nnpw1YJPo8xmSn9IsiuETJ ixd8uFeMNNutoZj7KXca553BaIStatl8OpVi/syaGHXUikr8M1A0K2U2fHJTTwN1 OE4i800lRKAAdOKt0RXr7dVUU2EhoGvk01wAfDYLAL86F8gSlSA0q+mmQXkBEeCb XF6FtGu6VimsomDBvKLWgdAAVnVDacPxquUa32ftbJeSxTuAwhB8JH7EqDUsldGm AdjHmBq4MaPJzJFNPoSJUjdUcayem17dS6X4EWMdptNt2NJSVlbUmjYCUuAVo4pU uK7SrTqKbvZmBiQLaYgAeKHYwJEqdB1RKsGPjv1gLalQoGYZwxA= -----END CERTIFICATE-----Generated at Mon Oct 20 08:50:34 2025 by rpki-client