$ rpki-client -vvf repo-rpki.idnic.net/repo/b3991f7a-0a71-4f0d-933f-ecf813530274/0/A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.mft File: A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.mft (raw, json) Hash identifier: VBVifaXCeC5dbBXIow2JBOPr4/lTGp26cAWie0I06r0= Subject key identifier: C9:03:BF:41:47:2E:83:8F:4A:F5:56:B4:5D:4E:6B:F9:2D:36:ED:37 Authority key identifier: A4:B6:31:C8:CF:E0:EE:72:AC:D5:F2:08:FC:12:39:06:4F:6C:DE:44 Certificate issuer: /CN=A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44 Certificate serial: 0D9E96718638FCE629105A72CBB6A096737D1ACF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b3991f7a-0a71-4f0d-933f-ecf813530274/0/A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.mft Manifest number: DB Signing time: Mon 20 Oct 2025 06:11:11 +0000 Manifest this update: Mon 20 Oct 2025 06:06:11 +0000 Manifest next update: Thu 23 Oct 2025 13:46:11 +0000 Files and hashes: 1: A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.crl (hash: 8gvSTz4NMEcbV56QeziM4taGWQpvOJA+FeR16Pnt0vU=) 2: 3135372e36362e3234382e302f32332d3234203d3e20313532373937.roa (hash: vC1sLrROQammNbgh64OVHa3goyUf/oRsNt6WGQKKJQo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b3991f7a-0a71-4f0d-933f-ecf813530274/0/A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.crl rsync://repo-rpki.idnic.net/repo/b3991f7a-0a71-4f0d-933f-ecf813530274/0/A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 03:04:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:9e:96:71:86:38:fc:e6:29:10:5a:72:cb:b6:a0:96:73:7d:1a:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44 Validity Not Before: Oct 20 06:06:11 2025 GMT Not After : Oct 23 13:46:11 2025 GMT Subject: CN=C903BF41472E838F4AF556B45D4E6BF92D36ED37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:04:eb:00:80:a5:19:c6:bf:e3:c7:09:2d:6d: 09:f1:e8:87:07:5a:93:d5:75:00:a6:27:b7:a9:c6: 66:83:21:d4:72:53:12:af:12:a8:4a:d7:e0:40:80: af:8d:1a:2b:6b:0b:cb:b6:ac:7b:5d:dc:87:75:0a: 45:4c:ca:a7:6c:d9:78:14:05:bb:e3:73:b5:51:dc: 30:b7:04:52:20:25:00:ed:3c:55:46:47:fd:df:d1: ad:86:7d:e2:82:a0:ae:4c:cd:9f:57:9e:3e:f8:74: db:f5:69:80:8a:50:2e:51:7f:5e:82:b2:fd:d8:7b: 7d:64:b8:76:d9:bc:06:0d:9c:96:b4:15:f9:b0:46: b7:c6:2a:e7:44:66:78:21:e0:9d:84:59:26:16:d1: 87:dd:28:1b:2d:aa:ec:7a:3d:0c:72:c9:9d:da:c5: 6e:c3:9e:fa:aa:10:1d:09:59:17:61:b0:85:8b:a0: 53:71:82:89:e9:a6:9e:a5:b3:32:10:49:4f:3a:f0: a0:cf:f8:2a:72:62:42:4d:e3:c6:ef:13:db:6d:6f: eb:15:90:56:4a:f3:1b:f3:67:21:ac:dd:a7:66:2e: 91:72:4b:88:66:1b:87:df:99:f5:93:3f:06:9a:73: 8c:3e:c4:a1:9a:4d:6e:d7:9c:e8:d0:8d:3f:ed:b3: 59:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:03:BF:41:47:2E:83:8F:4A:F5:56:B4:5D:4E:6B:F9:2D:36:ED:37 X509v3 Authority Key Identifier: keyid:A4:B6:31:C8:CF:E0:EE:72:AC:D5:F2:08:FC:12:39:06:4F:6C:DE:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b3991f7a-0a71-4f0d-933f-ecf813530274/0/A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b3991f7a-0a71-4f0d-933f-ecf813530274/0/A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:d5:6a:9a:4d:6d:0d:a9:45:17:26:55:7c:bb:aa:d3:ae:a1: 88:97:6b:a2:2d:2b:83:d7:c5:1e:4e:65:62:c3:68:36:70:e4: cd:79:f7:80:54:39:a7:1d:e6:ee:2f:be:15:7c:e3:96:01:5f: dc:4c:a7:51:47:99:74:3a:ac:6e:d9:a4:ff:de:fa:4c:52:f6: 31:9a:03:01:38:52:68:8f:f9:ba:e7:da:3a:88:91:0b:1d:ce: 24:30:6b:74:49:79:5f:8b:50:13:b5:e5:2c:a8:10:9e:9b:32: 51:14:dd:bc:48:26:df:56:d7:89:5d:bf:78:18:e3:2a:d5:a6: 94:93:fe:4c:40:a8:1a:47:c9:50:23:fe:66:91:45:37:9f:af: d8:b2:09:42:b3:0c:24:03:75:56:16:15:7e:a8:fb:44:d1:a6: 99:17:b2:f7:db:7f:45:f6:04:9d:db:d0:34:cb:0b:6e:d9:d2: 44:4a:f1:e9:3d:39:1d:9a:3d:be:de:1f:c1:6d:0b:20:52:f9: 77:3b:8f:44:76:60:39:46:16:a0:be:6d:0f:77:d7:14:c8:7f: 67:7d:dc:19:15:42:4d:da:d1:e7:68:89:18:a4:16:c7:b9:b4: 8c:e3:34:cc:be:13:26:03:47:c9:d8:e0:82:6a:af:df:58:ed: 6f:b9:f5:13 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDZ6WcYY4/OYpEFpyy7aglnN9Gs8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTRCNjMxQzhDRkUwRUU3MkFDRDVGMjA4RkMxMjM5MDY0 RjZDREU0NDAeFw0yNTEwMjAwNjA2MTFaFw0yNTEwMjMxMzQ2MTFaMDMxMTAvBgNV BAMTKEM5MDNCRjQxNDcyRTgzOEY0QUY1NTZCNDVENEU2QkY5MkQzNkVEMzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOBOsAgKUZxr/jxwktbQnx6IcH WpPVdQCmJ7epxmaDIdRyUxKvEqhK1+BAgK+NGitrC8u2rHtd3Id1CkVMyqds2XgU Bbvjc7VR3DC3BFIgJQDtPFVGR/3f0a2GfeKCoK5MzZ9Xnj74dNv1aYCKUC5Rf16C sv3Ye31kuHbZvAYNnJa0FfmwRrfGKudEZngh4J2EWSYW0YfdKBstqux6PQxyyZ3a xW7DnvqqEB0JWRdhsIWLoFNxgonppp6lszIQSU868KDP+CpyYkJN48bvE9ttb+sV kFZK8xvzZyGs3admLpFyS4hmG4ffmfWTPwaac4w+xKGaTW7XnOjQjT/ts1kFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyQO/QUcug49K9Va0XU5r+S027TcwHwYDVR0j BBgwFoAUpLYxyM/g7nKs1fII/BI5Bk9s3kQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i Mzk5MWY3YS0wYTcxLTRmMGQtOTMzZi1lY2Y4MTM1MzAyNzQvMC9BNEI2MzFDOENG RTBFRTcyQUNENUYyMDhGQzEyMzkwNjRGNkNERTQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQTRCNjMxQzhDRkUwRUU3MkFDRDVGMjA4RkMxMjM5MDY0RjZD REU0NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjM5OTFmN2EtMGE3MS00ZjBkLTkz M2YtZWNmODEzNTMwMjc0LzAvQTRCNjMxQzhDRkUwRUU3MkFDRDVGMjA4RkMxMjM5 MDY0RjZDREU0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFLVappNbQ2pRRcmVXy7qtOuoYiXa6ItK4PX xR5OZWLDaDZw5M1594BUOacd5u4vvhV845YBX9xMp1FHmXQ6rG7ZpP/e+kxS9jGa AwE4UmiP+brn2jqIkQsdziQwa3RJeV+LUBO15SyoEJ6bMlEU3bxIJt9W14ldv3gY 4yrVppST/kxAqBpHyVAj/maRRTefr9iyCUKzDCQDdVYWFX6o+0TRppkXsvfbf0X2 BJ3b0DTLC27Z0kRK8ek9OR2aPb7eH8FtCyBS+Xc7j0R2YDlGFqC+bQ931xTIf2d9 3BkVQk3a0edoiRikFse5tIzjNMy+EyYDR8nY4IJqr99Y7W+59RM= -----END CERTIFICATE-----Generated at Mon Oct 20 08:50:16 2025 by rpki-client