$ rpki-client -vvf repo-rpki.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/4F679A207D2588B709C82CDAB000736182F881E1.mft File: 4F679A207D2588B709C82CDAB000736182F881E1.mft (raw, json) Hash identifier: NYQyw6xGxaXp6/Ovkqz79YokQPwJ2KeJSd+Xtqja+Js= Subject key identifier: 68:18:B5:0D:09:FA:23:D4:3E:E7:C0:B5:8D:19:32:1F:F1:B9:78:B3 Authority key identifier: 4F:67:9A:20:7D:25:88:B7:09:C8:2C:DA:B0:00:73:61:82:F8:81:E1 Certificate issuer: /CN=4F679A207D2588B709C82CDAB000736182F881E1 Certificate serial: 05DA275641FE881A61C73A83C7F7AB60522849FB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F679A207D2588B709C82CDAB000736182F881E1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/4F679A207D2588B709C82CDAB000736182F881E1.mft Manifest number: 0212 Signing time: Mon 20 Oct 2025 04:51:08 +0000 Manifest this update: Mon 20 Oct 2025 04:46:08 +0000 Manifest next update: Thu 23 Oct 2025 09:21:08 +0000 Files and hashes: 1: 3130332e3139342e34362e302f32332d3234203d3e20313439393731.roa (hash: ibNTSX4YXpvUj4AJgfecXLMI8i0TnCNMvaVKKjw+4v8=) 2: 4F679A207D2588B709C82CDAB000736182F881E1.crl (hash: 8iNyNEc/SObV2atKL9ZBrKjFewqkcVX81/NA+MBhpuQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/4F679A207D2588B709C82CDAB000736182F881E1.crl rsync://repo-rpki.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/4F679A207D2588B709C82CDAB000736182F881E1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F679A207D2588B709C82CDAB000736182F881E1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 09:21:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:da:27:56:41:fe:88:1a:61:c7:3a:83:c7:f7:ab:60:52:28:49:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4F679A207D2588B709C82CDAB000736182F881E1 Validity Not Before: Oct 20 04:46:08 2025 GMT Not After : Oct 23 09:21:08 2025 GMT Subject: CN=6818B50D09FA23D43EE7C0B58D19321FF1B978B3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:09:1f:56:c9:09:17:56:02:8e:de:b1:b5:c2: e2:cb:af:53:38:ed:4d:41:02:df:fe:ed:2a:5d:d6: 46:d6:67:01:84:6f:4c:5b:a0:a3:fd:f1:35:ec:02: 2a:f1:a9:ee:f1:22:44:4f:65:13:07:86:5b:33:7a: 02:69:9a:43:a9:13:a7:36:14:61:91:bb:a0:bf:e1: c9:cf:6e:a2:79:f8:58:07:b7:3a:5a:1c:d7:e5:67: 59:38:1d:70:c4:2c:b9:48:b2:a8:91:72:86:ee:a8: 7e:ef:6f:08:fe:03:22:2a:18:dd:79:f2:77:4e:68: e9:14:94:a0:04:60:79:90:7a:9c:a4:a8:b0:78:9a: aa:71:8b:e2:d0:ff:c9:df:61:ab:6d:1a:4c:58:91: 22:c5:67:ec:20:1f:cc:91:4f:93:db:41:09:07:96: c5:a3:81:0b:dc:a5:cd:4e:6c:4e:43:4b:c0:76:5b: f5:3d:82:2e:f7:21:12:ef:c1:17:74:06:04:7c:33: 0d:19:72:59:94:04:ba:4f:6a:37:ea:28:b1:e7:9e: 26:03:56:3a:34:f3:b3:48:42:39:77:ac:76:bf:38: 90:e0:b8:9d:94:ce:77:80:f4:67:9a:7f:6d:12:ba: 33:6c:75:eb:7f:1d:75:b0:2c:36:6e:92:fe:66:1d: ca:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:18:B5:0D:09:FA:23:D4:3E:E7:C0:B5:8D:19:32:1F:F1:B9:78:B3 X509v3 Authority Key Identifier: keyid:4F:67:9A:20:7D:25:88:B7:09:C8:2C:DA:B0:00:73:61:82:F8:81:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/4F679A207D2588B709C82CDAB000736182F881E1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F679A207D2588B709C82CDAB000736182F881E1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/4F679A207D2588B709C82CDAB000736182F881E1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:3e:c2:25:aa:d2:20:37:87:89:a7:e0:2e:69:03:51:a8:40: 34:10:95:00:65:41:84:a2:9e:f7:92:38:08:ca:e1:64:89:7b: 93:fd:ed:4f:8c:39:bd:9e:08:54:23:71:b2:77:14:1d:3a:5f: ee:70:b7:bd:05:f2:c3:55:41:6d:3e:b7:45:ef:c0:59:7c:6a: cf:b6:26:f3:39:bc:c1:01:d0:25:9b:d8:6f:27:14:70:35:12: db:02:42:0c:9d:12:b0:9d:df:5c:50:49:e7:93:cd:93:2f:7e: e0:e2:1a:b3:a1:00:e4:43:cf:7b:f7:a8:b9:22:03:88:7d:93: 9f:45:b4:6f:9f:48:88:7d:a4:f4:d7:2c:57:78:cf:7d:bd:a9: 8b:18:77:39:70:64:93:cf:e3:17:72:f7:f5:4f:dd:b3:d9:9f: f5:e0:60:30:f2:06:53:b2:3d:d2:c3:36:21:00:16:6f:61:47: e8:77:a0:56:0a:87:dd:1d:c0:e5:ce:38:2a:70:e3:41:8a:32: 55:28:96:91:45:12:c7:8d:65:d1:ff:50:80:2c:2c:7b:7a:1d: 40:f3:93:0c:47:87:82:ab:37:b0:5c:c4:21:46:bc:b7:1f:d2: 2b:78:82:34:e8:c9:ec:fe:8b:2f:94:db:26:e1:05:cd:8d:56: 6e:4b:ba:28 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBdonVkH+iBphxzqDx/erYFIoSfswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEY2NzlBMjA3RDI1ODhCNzA5QzgyQ0RBQjAwMDczNjE4 MkY4ODFFMTAeFw0yNTEwMjAwNDQ2MDhaFw0yNTEwMjMwOTIxMDhaMDMxMTAvBgNV BAMTKDY4MThCNTBEMDlGQTIzRDQzRUU3QzBCNThEMTkzMjFGRjFCOTc4QjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmCR9WyQkXVgKO3rG1wuLLr1M4 7U1BAt/+7Spd1kbWZwGEb0xboKP98TXsAirxqe7xIkRPZRMHhlszegJpmkOpE6c2 FGGRu6C/4cnPbqJ5+FgHtzpaHNflZ1k4HXDELLlIsqiRcobuqH7vbwj+AyIqGN15 8ndOaOkUlKAEYHmQepykqLB4mqpxi+LQ/8nfYattGkxYkSLFZ+wgH8yRT5PbQQkH lsWjgQvcpc1ObE5DS8B2W/U9gi73IRLvwRd0BgR8Mw0ZclmUBLpPajfqKLHnniYD Vjo087NIQjl3rHa/OJDguJ2UzneA9Geaf20SujNsdet/HXWwLDZukv5mHcpVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaBi1DQn6I9Q+58C1jRkyH/G5eLMwHwYDVR0j BBgwFoAUT2eaIH0liLcJyCzasABzYYL4geEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ODk5M2E5My01ODg5LTRlMDItOWU5NS03NjljYjg5ZTAwMzUvMC80RjY3OUEyMDdE MjU4OEI3MDlDODJDREFCMDAwNzM2MTgyRjg4MUUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEY2NzlBMjA3RDI1ODhCNzA5QzgyQ0RBQjAwMDczNjE4MkY4 ODFFMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjg5OTNhOTMtNTg4OS00ZTAyLTll OTUtNzY5Y2I4OWUwMDM1LzAvNEY2NzlBMjA3RDI1ODhCNzA5QzgyQ0RBQjAwMDcz NjE4MkY4ODFFMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIU+wiWq0iA3h4mn4C5pA1GoQDQQlQBlQYSi nveSOAjK4WSJe5P97U+MOb2eCFQjcbJ3FB06X+5wt70F8sNVQW0+t0XvwFl8as+2 JvM5vMEB0CWb2G8nFHA1EtsCQgydErCd31xQSeeTzZMvfuDiGrOhAORDz3v3qLki A4h9k59FtG+fSIh9pPTXLFd4z329qYsYdzlwZJPP4xdy9/VP3bPZn/XgYDDyBlOy PdLDNiEAFm9hR+h3oFYKh90dwOXOOCpw40GKMlUolpFFEseNZdH/UIAsLHt6HUDz kwxHh4KrN7BcxCFGvLcf0it4gjToyez+iy+U2ybhBc2NVm5Luig= -----END CERTIFICATE-----Generated at Mon Oct 20 16:19:00 2025 by rpki-client