$ rpki-client -vvf repo-rpki.idnic.net/repo/c77de013-9b56-49ff-8b79-3667a345cb8d/0/4B35C20AD3085CF1B9FAEA049AD742539E090205.mft File: 4B35C20AD3085CF1B9FAEA049AD742539E090205.mft (raw, json) Hash identifier: gnl/wzQsK4tKgVPPTwMuAxde8dZoVRR3B1u+/Rnxtjk= Subject key identifier: DB:A4:F5:48:4A:2C:8E:CB:D5:AF:F0:CA:49:AB:2C:3E:EB:90:9B:04 Authority key identifier: 4B:35:C2:0A:D3:08:5C:F1:B9:FA:EA:04:9A:D7:42:53:9E:09:02:05 Certificate issuer: /CN=4B35C20AD3085CF1B9FAEA049AD742539E090205 Certificate serial: 241F0C71C11E557E46C0DAAEC95DBC189CEE2C04 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4B35C20AD3085CF1B9FAEA049AD742539E090205.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c77de013-9b56-49ff-8b79-3667a345cb8d/0/4B35C20AD3085CF1B9FAEA049AD742539E090205.mft Manifest number: 0277 Signing time: Sat 18 Oct 2025 06:51:11 +0000 Manifest this update: Sat 18 Oct 2025 06:46:11 +0000 Manifest next update: Tue 21 Oct 2025 11:19:11 +0000 Files and hashes: 1: 3130332e3137392e36342e302f32332d3233203d3e20313439333335.roa (hash: lOzsBAzFryNZCB+/jSigc4I1GSMJcpM/tHVhQtqL83s=) 2: 4B35C20AD3085CF1B9FAEA049AD742539E090205.crl (hash: GgxSIdMnk4/uw1pHJZgF3voDr4OtGCZHuy3MH1TsMy8=) 3: 3130332e3137392e36352e302f32342d3234203d3e20313439333335.roa (hash: JkbWHivPhJsD3g1oehsQXHSkUe1IApwcb1eZRN7L4oQ=) 4: 3130332e3137392e36342e302f32342d3234203d3e20313439333335.roa (hash: V8A5qvlja2NYXpcRnbKxugWJ4eOJeRmdBpf3sJh4ueQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c77de013-9b56-49ff-8b79-3667a345cb8d/0/4B35C20AD3085CF1B9FAEA049AD742539E090205.crl rsync://repo-rpki.idnic.net/repo/c77de013-9b56-49ff-8b79-3667a345cb8d/0/4B35C20AD3085CF1B9FAEA049AD742539E090205.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4B35C20AD3085CF1B9FAEA049AD742539E090205.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 11:19:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:1f:0c:71:c1:1e:55:7e:46:c0:da:ae:c9:5d:bc:18:9c:ee:2c:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4B35C20AD3085CF1B9FAEA049AD742539E090205 Validity Not Before: Oct 18 06:46:11 2025 GMT Not After : Oct 21 11:19:11 2025 GMT Subject: CN=DBA4F5484A2C8ECBD5AFF0CA49AB2C3EEB909B04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:3c:27:8f:d6:8f:21:06:a5:d2:48:a7:16:37: ba:ce:e5:5c:64:c7:b1:45:14:11:ba:d2:11:b4:29: 67:24:5c:db:91:82:d3:13:68:62:e8:b4:10:3a:96: 9e:b7:cd:13:51:bf:f8:b1:3b:d6:6c:f9:ed:57:cb: 55:c9:be:3d:35:c8:ac:de:ef:f5:83:85:f7:cb:86: 56:e9:5d:c5:77:b0:a4:88:d8:39:b0:d8:61:07:d9: 97:74:14:6d:0a:1b:76:80:25:05:ce:cd:86:1a:c4: b4:f5:77:09:65:ba:5e:1a:52:7e:a8:a1:2c:83:f0: 0e:87:92:f4:ab:3d:d7:50:9e:e5:89:db:bc:d0:57: 45:62:de:7a:5a:9f:c5:f4:3e:78:86:3b:66:7b:76: 34:b8:fb:bc:c9:c2:77:b6:b4:c6:f1:1e:17:36:17: c0:dc:fb:ff:0f:0d:98:b1:69:c4:42:73:ed:d5:a9: 59:cb:47:9b:4d:c0:4c:39:3a:e7:39:3e:ab:ae:81: 71:cc:5c:d7:4a:eb:f8:0a:ab:a7:c1:bc:b3:d1:1d: 38:09:ef:d8:c3:a6:80:34:7b:e2:d4:aa:d6:a3:eb: 55:bc:a7:2f:66:ae:61:3d:1f:04:7c:a9:e2:98:20: 7c:83:29:65:cf:fb:8c:ee:5b:41:ba:a4:43:1f:5a: 43:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:A4:F5:48:4A:2C:8E:CB:D5:AF:F0:CA:49:AB:2C:3E:EB:90:9B:04 X509v3 Authority Key Identifier: keyid:4B:35:C2:0A:D3:08:5C:F1:B9:FA:EA:04:9A:D7:42:53:9E:09:02:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c77de013-9b56-49ff-8b79-3667a345cb8d/0/4B35C20AD3085CF1B9FAEA049AD742539E090205.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4B35C20AD3085CF1B9FAEA049AD742539E090205.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c77de013-9b56-49ff-8b79-3667a345cb8d/0/4B35C20AD3085CF1B9FAEA049AD742539E090205.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:5f:11:fe:27:d7:c2:cc:b2:87:35:e4:88:6b:83:0f:df:b3: 91:02:0b:97:8b:0e:dc:13:c5:99:96:98:f4:d0:ca:5c:b4:22: 02:12:b8:a3:b8:96:19:3c:5c:b4:75:9e:fb:d4:7f:bc:6b:77: a9:db:66:87:e5:1c:a8:5c:00:bc:d5:4b:13:af:7c:4f:25:84: a1:b6:e1:7d:d8:fb:a5:0c:1b:f6:93:44:4e:cb:6d:43:f9:83: 69:e8:e8:2d:1b:86:47:4f:ae:bd:13:70:4f:8a:11:78:27:0e: 81:a0:df:28:d9:c4:47:0c:03:88:a6:06:4e:3f:0c:e2:23:56: 4b:b5:68:2b:72:75:ea:b6:0d:62:e1:21:48:7f:ba:be:fc:c6: 5d:eb:74:a3:e1:f5:2d:e4:11:40:3d:d3:51:f9:d9:5e:ec:97: 34:a9:01:12:5a:99:87:f1:14:46:a0:ca:c4:72:34:50:e4:f5: 1b:10:0d:ce:26:87:1d:84:93:6c:81:1a:43:a3:01:86:c6:9d: c9:80:56:fb:aa:11:7b:17:fb:91:87:a5:b7:ca:1b:d6:66:7a: 88:86:33:af:a7:c2:25:0b:a3:de:44:55:d3:51:50:ad:28:b7: 5b:55:bc:a2:cf:4a:33:73:72:5a:65:d4:a9:c8:8a:df:5b:b5: 20:ed:19:4c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJB8MccEeVX5GwNquyV28GJzuLAQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEIzNUMyMEFEMzA4NUNGMUI5RkFFQTA0OUFENzQyNTM5 RTA5MDIwNTAeFw0yNTEwMTgwNjQ2MTFaFw0yNTEwMjExMTE5MTFaMDMxMTAvBgNV BAMTKERCQTRGNTQ4NEEyQzhFQ0JENUFGRjBDQTQ5QUIyQzNFRUI5MDlCMDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIPCeP1o8hBqXSSKcWN7rO5Vxk x7FFFBG60hG0KWckXNuRgtMTaGLotBA6lp63zRNRv/ixO9Zs+e1Xy1XJvj01yKze 7/WDhffLhlbpXcV3sKSI2Dmw2GEH2Zd0FG0KG3aAJQXOzYYaxLT1dwllul4aUn6o oSyD8A6HkvSrPddQnuWJ27zQV0Vi3npan8X0PniGO2Z7djS4+7zJwne2tMbxHhc2 F8Dc+/8PDZixacRCc+3VqVnLR5tNwEw5Ouc5PquugXHMXNdK6/gKq6fBvLPRHTgJ 79jDpoA0e+LUqtaj61W8py9mrmE9HwR8qeKYIHyDKWXP+4zuW0G6pEMfWkMPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU26T1SEosjsvVr/DKSassPuuQmwQwHwYDVR0j BBgwFoAUSzXCCtMIXPG5+uoEmtdCU54JAgUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NzdkZTAxMy05YjU2LTQ5ZmYtOGI3OS0zNjY3YTM0NWNiOGQvMC80QjM1QzIwQUQz MDg1Q0YxQjlGQUVBMDQ5QUQ3NDI1MzlFMDkwMjA1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEIzNUMyMEFEMzA4NUNGMUI5RkFFQTA0OUFENzQyNTM5RTA5 MDIwNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzc3ZGUwMTMtOWI1Ni00OWZmLThi NzktMzY2N2EzNDVjYjhkLzAvNEIzNUMyMEFEMzA4NUNGMUI5RkFFQTA0OUFENzQy NTM5RTA5MDIwNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKVfEf4n18LMsoc15Ihrgw/fs5ECC5eLDtwT xZmWmPTQyly0IgISuKO4lhk8XLR1nvvUf7xrd6nbZoflHKhcALzVSxOvfE8lhKG2 4X3Y+6UMG/aTRE7LbUP5g2no6C0bhkdPrr0TcE+KEXgnDoGg3yjZxEcMA4imBk4/ DOIjVku1aCtydeq2DWLhIUh/ur78xl3rdKPh9S3kEUA901H52V7slzSpARJamYfx FEagysRyNFDk9RsQDc4mhx2Ek2yBGkOjAYbGncmAVvuqEXsX+5GHpbfKG9ZmeoiG M6+nwiULo95EVdNRUK0ot1tVvKLPSjNzclpl1KnIit9btSDtGUw= -----END CERTIFICATE-----Generated at Mon Oct 20 12:34:28 2025 by rpki-client