$ rpki-client -vvf repo-rpki.idnic.net/repo/cc09e13c-cea0-47ff-9c96-f49b39d43920/0/4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A.mft File: 4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A.mft (raw, json) Hash identifier: 4Anbd7VZFCJXJEEf2M+BzhGlRZ1DAC47/usByNc7zHo= Subject key identifier: E3:F1:B3:7E:C6:65:1A:1A:0B:AD:28:2A:97:71:BA:D5:6E:3C:B7:E6 Authority key identifier: 4A:6F:D7:E0:79:F5:43:A5:D5:FD:E4:43:3F:7B:D5:3D:CE:42:6E:5A Certificate issuer: /CN=4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A Certificate serial: 72D41F5511D0DA73A11B2475077C9FD8583F3369 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cc09e13c-cea0-47ff-9c96-f49b39d43920/0/4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A.mft Manifest number: 0517 Signing time: Sat 18 Oct 2025 22:11:40 +0000 Manifest this update: Sat 18 Oct 2025 22:06:40 +0000 Manifest next update: Wed 22 Oct 2025 08:17:40 +0000 Files and hashes: 1: 4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A.crl (hash: 3gH1xp3MhFftVbPalYPBFtjKnYWsebEAJu+sOl5Kyo4=) 2: 3130332e3231312e34392e302f32342d3234203d3e203633353035.roa (hash: jSA7+l89fySFyM7Bs9jzEHqShE9HEzseLTVhKTYttZk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cc09e13c-cea0-47ff-9c96-f49b39d43920/0/4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A.crl rsync://repo-rpki.idnic.net/repo/cc09e13c-cea0-47ff-9c96-f49b39d43920/0/4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 08:17:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:d4:1f:55:11:d0:da:73:a1:1b:24:75:07:7c:9f:d8:58:3f:33:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A Validity Not Before: Oct 18 22:06:40 2025 GMT Not After : Oct 22 08:17:40 2025 GMT Subject: CN=E3F1B37EC6651A1A0BAD282A9771BAD56E3CB7E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:4d:cd:77:3c:27:2c:aa:41:79:0f:f3:97:23: 17:a3:2d:46:58:7b:b7:33:c0:13:84:84:69:5c:a7: 03:b2:6d:7f:cd:82:df:00:b4:3a:6c:4e:73:29:e9: 15:d5:f0:dd:43:e6:4d:e8:d8:ac:13:f9:bf:63:e7: f3:4f:14:5f:e5:29:a2:25:7b:f0:5a:ca:92:36:87: 31:f3:e7:ce:e1:0e:18:24:e9:d0:68:c3:27:ba:e4: 18:75:3e:f7:36:a9:da:fa:84:4a:cc:7d:fa:6f:0b: ef:a9:4a:5e:72:20:b5:65:c2:c6:26:24:00:f3:0c: 15:b8:88:b9:8b:5f:fc:a1:d4:60:e7:eb:8b:2c:4c: 46:ca:95:bc:8e:bf:c5:7b:c1:48:c3:3d:db:7c:e3: 8b:4f:df:32:e6:e3:37:28:df:02:32:cf:6c:ba:ad: 2b:42:77:9f:5c:18:a3:94:1a:fb:c4:ec:76:53:22: f6:7f:b8:56:a8:78:7c:7e:3f:7a:67:02:bd:2b:3a: 07:06:8e:c0:b2:b3:08:be:ae:36:57:5e:d1:65:06: 37:00:2b:ad:fa:33:0c:a4:5c:7a:09:40:36:ea:6c: 1b:1d:fb:96:4e:c8:2a:de:10:a0:b9:af:6a:78:76: bb:10:ff:88:67:7b:af:4b:54:fa:2d:d1:db:c7:1b: ce:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:F1:B3:7E:C6:65:1A:1A:0B:AD:28:2A:97:71:BA:D5:6E:3C:B7:E6 X509v3 Authority Key Identifier: keyid:4A:6F:D7:E0:79:F5:43:A5:D5:FD:E4:43:3F:7B:D5:3D:CE:42:6E:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cc09e13c-cea0-47ff-9c96-f49b39d43920/0/4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cc09e13c-cea0-47ff-9c96-f49b39d43920/0/4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:0b:7d:4a:8f:b3:b4:4e:90:d8:56:f6:70:b9:d2:4d:5b:98: 6e:bf:10:0a:c4:6d:e5:76:3c:c2:e5:a0:09:e0:7b:33:f7:64: bc:62:61:cf:9f:9d:d7:95:d4:d0:2f:78:53:6b:2f:95:d7:94: 65:2b:fc:e4:b3:c3:f1:91:da:ad:9e:47:82:f1:eb:3e:a6:e8: 74:40:59:fb:62:3a:a8:8e:d8:23:9e:7b:55:59:96:de:04:21: 39:84:61:60:99:db:d7:96:e4:e6:f6:9e:4a:a4:67:e6:a3:1c: 09:c6:88:02:a6:34:67:0b:da:34:3d:8d:39:f5:a1:57:24:ae: 10:9f:db:05:ee:14:c2:e9:41:47:76:62:d0:15:3a:16:62:e8: 8b:84:a2:db:6a:2d:4d:05:19:75:b6:3b:1e:ce:77:03:be:7b: e7:0f:f4:ff:c2:e3:ed:c9:c4:16:73:39:ca:58:e0:df:a0:68: f0:75:ec:e6:f3:89:9d:67:7c:bb:cb:87:f4:f3:5e:dc:37:ef: bc:af:19:0d:43:fe:1c:50:3c:65:12:d6:aa:db:df:f3:ac:83: da:90:83:63:be:84:e5:20:96:3b:1d:e5:31:cd:1d:cd:12:7e: da:50:76:5f:30:f2:f0:b8:22:e3:e5:4e:73:f4:f4:59:65:ca: 62:00:36:f3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUctQfVRHQ2nOhGyR1B3yf2Fg/M2kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEE2RkQ3RTA3OUY1NDNBNUQ1RkRFNDQzM0Y3QkQ1M0RD RTQyNkU1QTAeFw0yNTEwMTgyMjA2NDBaFw0yNTEwMjIwODE3NDBaMDMxMTAvBgNV BAMTKEUzRjFCMzdFQzY2NTFBMUEwQkFEMjgyQTk3NzFCQUQ1NkUzQ0I3RTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9Tc13PCcsqkF5D/OXIxejLUZY e7czwBOEhGlcpwOybX/Ngt8AtDpsTnMp6RXV8N1D5k3o2KwT+b9j5/NPFF/lKaIl e/BaypI2hzHz587hDhgk6dBowye65Bh1Pvc2qdr6hErMffpvC++pSl5yILVlwsYm JADzDBW4iLmLX/yh1GDn64ssTEbKlbyOv8V7wUjDPdt844tP3zLm4zco3wIyz2y6 rStCd59cGKOUGvvE7HZTIvZ/uFaoeHx+P3pnAr0rOgcGjsCyswi+rjZXXtFlBjcA K636MwykXHoJQDbqbBsd+5ZOyCreEKC5r2p4drsQ/4hne69LVPot0dvHG87bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4/GzfsZlGhoLrSgql3G61W48t+YwHwYDVR0j BBgwFoAUSm/X4Hn1Q6XV/eRDP3vVPc5CblowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YzA5ZTEzYy1jZWEwLTQ3ZmYtOWM5Ni1mNDliMzlkNDM5MjAvMC80QTZGRDdFMDc5 RjU0M0E1RDVGREU0NDMzRjdCRDUzRENFNDI2RTVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEE2RkQ3RTA3OUY1NDNBNUQ1RkRFNDQzM0Y3QkQ1M0RDRTQy NkU1QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2MwOWUxM2MtY2VhMC00N2ZmLTlj OTYtZjQ5YjM5ZDQzOTIwLzAvNEE2RkQ3RTA3OUY1NDNBNUQ1RkRFNDQzM0Y3QkQ1 M0RDRTQyNkU1QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMMLfUqPs7ROkNhW9nC50k1bmG6/EArEbeV2 PMLloAngezP3ZLxiYc+fndeV1NAveFNrL5XXlGUr/OSzw/GR2q2eR4Lx6z6m6HRA WftiOqiO2COee1VZlt4EITmEYWCZ29eW5Ob2nkqkZ+ajHAnGiAKmNGcL2jQ9jTn1 oVckrhCf2wXuFMLpQUd2YtAVOhZi6IuEottqLU0FGXW2Ox7OdwO+e+cP9P/C4+3J xBZzOcpY4N+gaPB17ObziZ1nfLvLh/TzXtw377yvGQ1D/hxQPGUS1qrb3/Osg9qQ g2O+hOUgljsd5THNHc0SftpQdl8w8vC4IuPlTnP09FllymIANvM= -----END CERTIFICATE-----Generated at Mon Oct 20 09:47:30 2025 by rpki-client