$ rpki-client -vvf repo-rpki.idnic.net/repo/b5c9c394-fcd0-4b4b-bb1a-824770f40342/0/B4153DCEE87E15F92AABAC0DF6729C9A5DE5CFCC.mft File: B4153DCEE87E15F92AABAC0DF6729C9A5DE5CFCC.mft (raw, json) Hash identifier: FT8DXy8/8xHnmC5IWu6xib95EgcLBvsMlHyF8c1BWrk= Subject key identifier: 4F:B3:81:25:36:29:01:79:65:3C:A9:0D:77:42:43:8F:3B:D6:15:3F Authority key identifier: B4:15:3D:CE:E8:7E:15:F9:2A:AB:AC:0D:F6:72:9C:9A:5D:E5:CF:CC Certificate issuer: /CN=B4153DCEE87E15F92AABAC0DF6729C9A5DE5CFCC Certificate serial: 571A58FCF6DF849D4E2AB8F4F903F7DF39DF2981 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4153DCEE87E15F92AABAC0DF6729C9A5DE5CFCC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b5c9c394-fcd0-4b4b-bb1a-824770f40342/0/B4153DCEE87E15F92AABAC0DF6729C9A5DE5CFCC.mft Manifest number: 0518 Signing time: Sat 18 Oct 2025 23:31:13 +0000 Manifest this update: Sat 18 Oct 2025 23:26:13 +0000 Manifest next update: Wed 22 Oct 2025 10:46:13 +0000 Files and hashes: 1: 323030313a6466363a643730303a3a2f34382d3438203d3e20313338303738.roa (hash: O7ms2O+UhtZVKkE81cuQDtuTyN3BEIVlVc+cc3/gZMg=) 2: B4153DCEE87E15F92AABAC0DF6729C9A5DE5CFCC.crl (hash: ZMOOSMDE0AqHk/slK2vy8+cYWA9McAR3hspw8gzYzno=) 3: 3130332e3132332e3233362e302f32342d3234203d3e20313338303738.roa (hash: RmlnKYQXWGOfP+UEgb2aQ4Zckhx5L2Ib8Jbz3UBAKro=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b5c9c394-fcd0-4b4b-bb1a-824770f40342/0/B4153DCEE87E15F92AABAC0DF6729C9A5DE5CFCC.crl rsync://repo-rpki.idnic.net/repo/b5c9c394-fcd0-4b4b-bb1a-824770f40342/0/B4153DCEE87E15F92AABAC0DF6729C9A5DE5CFCC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4153DCEE87E15F92AABAC0DF6729C9A5DE5CFCC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 10:46:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:1a:58:fc:f6:df:84:9d:4e:2a:b8:f4:f9:03:f7:df:39:df:29:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B4153DCEE87E15F92AABAC0DF6729C9A5DE5CFCC Validity Not Before: Oct 18 23:26:13 2025 GMT Not After : Oct 22 10:46:13 2025 GMT Subject: CN=4FB3812536290179653CA90D7742438F3BD6153F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:75:39:91:96:11:19:2d:6a:c4:15:56:94:7b: 36:3a:2a:20:20:88:38:47:a9:52:94:28:0a:95:07: ee:29:d0:22:0a:95:97:ff:53:45:a8:3f:bf:4e:87: 4e:91:7d:e3:e6:ce:fc:69:c4:9a:07:38:d0:76:28: 4f:4b:85:2a:f7:2a:f6:b5:40:9f:fc:75:65:4a:c7: 9c:37:3b:3f:25:aa:b7:79:79:89:a8:1e:eb:cd:34: 7a:06:04:1d:47:ad:76:cd:ca:9e:dd:83:bb:08:6c: ff:be:d9:89:9b:67:ab:22:b5:64:09:66:d3:61:12: 0f:b8:29:87:c3:1c:a9:e3:7e:18:99:15:75:71:f1: e5:c9:98:f7:f7:1b:c5:93:95:77:8b:da:01:90:dd: 37:94:30:85:a8:8d:3a:07:c5:dc:2e:f4:c3:d9:3f: 8f:1c:2e:e9:38:06:d8:ed:d2:53:3b:3b:59:14:09: bf:26:f8:f5:e4:a2:1f:54:ce:c6:ca:af:3d:65:c6: 75:7a:fa:7c:16:5c:94:e6:19:d0:96:00:40:ca:8b: 13:c3:b4:40:e0:8e:a9:c4:b9:21:e5:79:78:90:5b: de:0c:4a:23:9c:bc:14:8b:ac:0e:4f:21:9c:4f:98: b5:c1:7b:df:51:6a:d1:52:69:71:7d:f9:ec:9d:af: 76:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:B3:81:25:36:29:01:79:65:3C:A9:0D:77:42:43:8F:3B:D6:15:3F X509v3 Authority Key Identifier: keyid:B4:15:3D:CE:E8:7E:15:F9:2A:AB:AC:0D:F6:72:9C:9A:5D:E5:CF:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b5c9c394-fcd0-4b4b-bb1a-824770f40342/0/B4153DCEE87E15F92AABAC0DF6729C9A5DE5CFCC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4153DCEE87E15F92AABAC0DF6729C9A5DE5CFCC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b5c9c394-fcd0-4b4b-bb1a-824770f40342/0/B4153DCEE87E15F92AABAC0DF6729C9A5DE5CFCC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:7d:db:c1:07:b9:0f:ff:c3:c6:b7:a2:fa:97:b6:67:61:d5: 33:a0:29:ee:d6:ef:1c:da:cb:34:e2:2a:c8:15:69:3e:bc:0a: 8c:49:23:35:62:1c:0e:92:b9:7d:50:0d:42:1f:c5:f0:d5:38: 4a:d7:5b:96:b0:df:d5:2c:cf:75:d2:ee:b6:1b:a1:e0:92:b9: 32:bd:b0:78:cb:0c:72:08:0c:fc:d5:77:dc:9b:63:3f:b5:6a: b0:cc:20:31:32:d8:56:b4:5f:2d:cc:0a:4e:b8:0d:de:3f:69: 2f:25:be:61:3d:ed:dc:d8:67:f1:16:fa:f1:c8:27:e6:c3:e2: 9c:3a:fc:6d:15:a1:65:89:0b:9e:4f:2c:46:33:77:56:17:8e: 50:f9:ca:ee:bc:d0:8d:b7:1e:57:0a:01:c1:4b:3b:39:d6:8d: b6:25:b9:ef:85:88:68:bb:cf:14:8c:f9:ae:f9:fd:80:7b:3a: 97:16:85:93:07:99:9d:27:36:b5:94:40:71:a5:8a:a1:46:3e: a1:5b:bf:1b:8c:3f:6a:a4:8d:6b:43:10:2b:d5:21:3c:9c:d8: 5b:97:59:a7:cf:2f:a7:00:ae:72:07:09:d3:4d:9d:90:57:3e: bf:bc:93:58:1e:06:3e:9b:a0:bd:e8:99:58:32:e4:7c:3b:f7: 30:09:cb:08 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVxpY/PbfhJ1OKrj0+QP33znfKYEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjQxNTNEQ0VFODdFMTVGOTJBQUJBQzBERjY3MjlDOUE1 REU1Q0ZDQzAeFw0yNTEwMTgyMzI2MTNaFw0yNTEwMjIxMDQ2MTNaMDMxMTAvBgNV BAMTKDRGQjM4MTI1MzYyOTAxNzk2NTNDQTkwRDc3NDI0MzhGM0JENjE1M0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWdTmRlhEZLWrEFVaUezY6KiAg iDhHqVKUKAqVB+4p0CIKlZf/U0WoP79Oh06RfePmzvxpxJoHONB2KE9LhSr3Kva1 QJ/8dWVKx5w3Oz8lqrd5eYmoHuvNNHoGBB1HrXbNyp7dg7sIbP++2YmbZ6sitWQJ ZtNhEg+4KYfDHKnjfhiZFXVx8eXJmPf3G8WTlXeL2gGQ3TeUMIWojToHxdwu9MPZ P48cLuk4Btjt0lM7O1kUCb8m+PXkoh9UzsbKrz1lxnV6+nwWXJTmGdCWAEDKixPD tEDgjqnEuSHleXiQW94MSiOcvBSLrA5PIZxPmLXBe99RatFSaXF9+eydr3ZxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUT7OBJTYpAXllPKkNd0JDjzvWFT8wHwYDVR0j BBgwFoAUtBU9zuh+Ffkqq6wN9nKcml3lz8wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NWM5YzM5NC1mY2QwLTRiNGItYmIxYS04MjQ3NzBmNDAzNDIvMC9CNDE1M0RDRUU4 N0UxNUY5MkFBQkFDMERGNjcyOUM5QTVERTVDRkNDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjQxNTNEQ0VFODdFMTVGOTJBQUJBQzBERjY3MjlDOUE1REU1 Q0ZDQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjVjOWMzOTQtZmNkMC00YjRiLWJi MWEtODI0NzcwZjQwMzQyLzAvQjQxNTNEQ0VFODdFMTVGOTJBQUJBQzBERjY3MjlD OUE1REU1Q0ZDQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB1928EHuQ//w8a3ovqXtmdh1TOgKe7W7xza yzTiKsgVaT68CoxJIzViHA6SuX1QDUIfxfDVOErXW5aw39Usz3XS7rYboeCSuTK9 sHjLDHIIDPzVd9ybYz+1arDMIDEy2Fa0Xy3MCk64Dd4/aS8lvmE97dzYZ/EW+vHI J+bD4pw6/G0VoWWJC55PLEYzd1YXjlD5yu680I23HlcKAcFLOznWjbYlue+FiGi7 zxSM+a75/YB7OpcWhZMHmZ0nNrWUQHGliqFGPqFbvxuMP2qkjWtDECvVITyc2FuX WafPL6cArnIHCdNNnZBXPr+8k1geBj6boL3omVgy5Hw79zAJywg= -----END CERTIFICATE-----Generated at Mon Oct 20 09:23:32 2025 by rpki-client