$ rpki-client -vvf repo-rpki.idnic.net/repo/b8b441ad-f1aa-48d3-9edb-b9a5d5ce9ba8/0/F2441731A38F6F03ED8BFDB14F3CF89CED26A880.mft File: F2441731A38F6F03ED8BFDB14F3CF89CED26A880.mft (raw, json) Hash identifier: ym63dE6vGZjS6l1TJN9VRaocybHSOuRijd1fbcuEto8= Subject key identifier: E7:46:76:0F:06:1A:CF:81:7B:4F:4F:03:5F:23:FB:CF:B9:26:87:47 Authority key identifier: F2:44:17:31:A3:8F:6F:03:ED:8B:FD:B1:4F:3C:F8:9C:ED:26:A8:80 Certificate issuer: /CN=F2441731A38F6F03ED8BFDB14F3CF89CED26A880 Certificate serial: 444E31B910B2AF81787A4DAC0A700083210C6823 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2441731A38F6F03ED8BFDB14F3CF89CED26A880.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b8b441ad-f1aa-48d3-9edb-b9a5d5ce9ba8/0/F2441731A38F6F03ED8BFDB14F3CF89CED26A880.mft Manifest number: 0518 Signing time: Mon 20 Oct 2025 11:51:20 +0000 Manifest this update: Mon 20 Oct 2025 11:46:20 +0000 Manifest next update: Thu 23 Oct 2025 13:17:20 +0000 Files and hashes: 1: F2441731A38F6F03ED8BFDB14F3CF89CED26A880.crl (hash: ZiGlEZ81lAe/hAYR71YbaDRJUh0kRkSJGXLNP0pgj2A=) 2: 3230322e39342e38332e302f32342d3234203d3e203535363732.roa (hash: XIFruI1ighCiBN1KxhqbA4Dl9kZx4Bi5WaQ0ju1y2JQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b8b441ad-f1aa-48d3-9edb-b9a5d5ce9ba8/0/F2441731A38F6F03ED8BFDB14F3CF89CED26A880.crl rsync://repo-rpki.idnic.net/repo/b8b441ad-f1aa-48d3-9edb-b9a5d5ce9ba8/0/F2441731A38F6F03ED8BFDB14F3CF89CED26A880.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2441731A38F6F03ED8BFDB14F3CF89CED26A880.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:4e:31:b9:10:b2:af:81:78:7a:4d:ac:0a:70:00:83:21:0c:68:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F2441731A38F6F03ED8BFDB14F3CF89CED26A880 Validity Not Before: Oct 20 11:46:20 2025 GMT Not After : Oct 23 13:17:20 2025 GMT Subject: CN=E746760F061ACF817B4F4F035F23FBCFB9268747 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:f5:66:0d:3d:28:5e:28:6e:81:d9:e6:af:3e: ab:7d:b9:30:94:6f:be:b0:5a:38:81:c0:88:2d:c1: 81:66:42:20:a1:8a:0a:51:87:b0:d0:6d:b4:1f:12: a8:03:6a:c7:51:b9:98:e2:04:e8:b8:a1:a6:bb:c0: 96:1d:9a:71:5a:6d:bc:b8:fa:3a:b3:7a:39:f8:80: 53:88:48:81:57:25:76:56:5e:14:54:21:c6:44:4a: 39:97:55:9e:1f:fd:13:6a:70:cd:0e:8a:19:73:5b: 10:8a:a7:d4:73:2e:f0:2e:19:de:1d:44:e0:b3:fb: 42:81:e2:3b:59:97:20:c0:c0:21:7d:22:60:37:80: 2c:ba:34:18:87:04:d6:e3:86:a6:5e:cd:49:44:7e: 5b:2a:ad:07:3d:5f:04:50:47:5d:9e:e6:04:56:40: ce:59:5d:11:4f:93:10:c1:c5:68:8e:8c:ee:88:fd: b3:da:70:9f:bd:b8:76:af:a3:e4:47:40:e0:97:20: 25:23:a6:95:ba:eb:13:c6:94:95:82:49:09:c9:f7: 51:bc:d4:75:8b:01:ca:07:f0:26:e4:03:9d:70:41: 6f:07:11:78:7a:ba:57:d8:68:5a:e4:ac:1d:72:a4: 65:ce:cc:36:e3:ca:e9:e1:07:ba:37:6f:a7:91:7a: 1a:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:46:76:0F:06:1A:CF:81:7B:4F:4F:03:5F:23:FB:CF:B9:26:87:47 X509v3 Authority Key Identifier: keyid:F2:44:17:31:A3:8F:6F:03:ED:8B:FD:B1:4F:3C:F8:9C:ED:26:A8:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b8b441ad-f1aa-48d3-9edb-b9a5d5ce9ba8/0/F2441731A38F6F03ED8BFDB14F3CF89CED26A880.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2441731A38F6F03ED8BFDB14F3CF89CED26A880.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b8b441ad-f1aa-48d3-9edb-b9a5d5ce9ba8/0/F2441731A38F6F03ED8BFDB14F3CF89CED26A880.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:38:e7:02:b5:a6:74:05:b0:66:bc:fb:84:c6:e5:25:16:24: 22:ea:16:70:02:54:c3:16:14:fa:7b:cb:64:03:5b:e9:89:06: 91:fa:8a:2c:d3:f2:79:6b:08:b7:8f:6f:fd:80:30:c2:4c:02: 37:40:f1:c2:8b:8e:a8:a4:05:b6:3c:22:ac:09:91:28:ca:00: 25:42:af:19:88:f3:7b:0c:cc:63:49:38:cd:16:f0:d2:4e:7f: ae:d2:a9:3d:2f:e5:db:29:b0:d4:e8:76:a3:b9:db:c6:a6:d7: 0a:b2:6a:bb:63:62:01:9a:42:7c:d6:35:49:93:d7:2c:69:13: f4:81:d2:ae:d0:a1:93:1c:44:97:ae:90:9d:e7:72:27:65:30: fc:50:6a:80:de:dd:d6:83:5e:f8:f4:22:59:ab:0c:b1:ba:9a: 4d:92:f9:b7:e0:87:05:43:a5:45:ca:b5:35:6f:25:29:e0:46: 91:a3:e7:eb:8f:ef:39:b6:4e:bb:16:c5:86:ad:48:7f:2c:08: 09:02:64:6b:5f:11:9a:ea:ca:c5:ef:24:1c:be:08:b1:a1:2e: b6:0a:e4:9d:ad:c8:3c:2f:e4:8d:b2:1f:8e:a4:f5:90:51:44: 32:dd:ea:6d:67:24:bf:f7:73:96:19:2f:e8:b1:dd:d3:f4:fe: 34:b8:b0:92 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURE4xuRCyr4F4ek2sCnAAgyEMaCMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI0NDE3MzFBMzhGNkYwM0VEOEJGREIxNEYzQ0Y4OUNF RDI2QTg4MDAeFw0yNTEwMjAxMTQ2MjBaFw0yNTEwMjMxMzE3MjBaMDMxMTAvBgNV BAMTKEU3NDY3NjBGMDYxQUNGODE3QjRGNEYwMzVGMjNGQkNGQjkyNjg3NDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG9WYNPSheKG6B2eavPqt9uTCU b76wWjiBwIgtwYFmQiChigpRh7DQbbQfEqgDasdRuZjiBOi4oaa7wJYdmnFabby4 +jqzejn4gFOISIFXJXZWXhRUIcZESjmXVZ4f/RNqcM0OihlzWxCKp9RzLvAuGd4d ROCz+0KB4jtZlyDAwCF9ImA3gCy6NBiHBNbjhqZezUlEflsqrQc9XwRQR12e5gRW QM5ZXRFPkxDBxWiOjO6I/bPacJ+9uHavo+RHQOCXICUjppW66xPGlJWCSQnJ91G8 1HWLAcoH8CbkA51wQW8HEXh6ulfYaFrkrB1ypGXOzDbjyunhB7o3b6eRehpVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU50Z2DwYaz4F7T08DXyP7z7kmh0cwHwYDVR0j BBgwFoAU8kQXMaOPbwPti/2xTzz4nO0mqIAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i OGI0NDFhZC1mMWFhLTQ4ZDMtOWVkYi1iOWE1ZDVjZTliYTgvMC9GMjQ0MTczMUEz OEY2RjAzRUQ4QkZEQjE0RjNDRjg5Q0VEMjZBODgwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjI0NDE3MzFBMzhGNkYwM0VEOEJGREIxNEYzQ0Y4OUNFRDI2 QTg4MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjhiNDQxYWQtZjFhYS00OGQzLTll ZGItYjlhNWQ1Y2U5YmE4LzAvRjI0NDE3MzFBMzhGNkYwM0VEOEJGREIxNEYzQ0Y4 OUNFRDI2QTg4MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACc45wK1pnQFsGa8+4TG5SUWJCLqFnACVMMW FPp7y2QDW+mJBpH6iizT8nlrCLePb/2AMMJMAjdA8cKLjqikBbY8IqwJkSjKACVC rxmI83sMzGNJOM0W8NJOf67SqT0v5dspsNTodqO528am1wqyartjYgGaQnzWNUmT 1yxpE/SB0q7QoZMcRJeukJ3ncidlMPxQaoDe3daDXvj0IlmrDLG6mk2S+bfghwVD pUXKtTVvJSngRpGj5+uP7zm2TrsWxYatSH8sCAkCZGtfEZrqysXvJBy+CLGhLrYK 5J2tyDwv5I2yH46k9ZBRRDLd6m1nJL/3c5YZL+ix3dP0/jS4sJI= -----END CERTIFICATE-----Generated at Mon Oct 20 18:02:51 2025 by rpki-client