$ rpki-client -vvf repo-rpki.idnic.net/repo/d6c8b3a9-4eff-460d-b01d-6ba5d99dadb9/0/4443E43239D3F5B9674F2F5B5A37711434C48AF2.mft File: 4443E43239D3F5B9674F2F5B5A37711434C48AF2.mft (raw, json) Hash identifier: WDY4bvItC52r/TGAoNW/ASjgWIuqJ7pEmTVjcTDucSo= Subject key identifier: 6C:4E:80:7E:1E:7B:89:EA:79:BF:BA:0F:57:10:A7:F7:14:A6:B7:2C Authority key identifier: 44:43:E4:32:39:D3:F5:B9:67:4F:2F:5B:5A:37:71:14:34:C4:8A:F2 Certificate issuer: /CN=4443E43239D3F5B9674F2F5B5A37711434C48AF2 Certificate serial: 257C1158A8171BD0264834270118686B7F19923B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4443E43239D3F5B9674F2F5B5A37711434C48AF2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d6c8b3a9-4eff-460d-b01d-6ba5d99dadb9/0/4443E43239D3F5B9674F2F5B5A37711434C48AF2.mft Manifest number: BB Signing time: Mon 20 Oct 2025 19:02:01 +0000 Manifest this update: Mon 20 Oct 2025 18:57:01 +0000 Manifest next update: Fri 24 Oct 2025 04:52:01 +0000 Files and hashes: 1: 4443E43239D3F5B9674F2F5B5A37711434C48AF2.crl (hash: 3vIR8Cj4gSyK5Yw+F7cEi7iL032Re3neoArnDJz/qJ8=) 2: 323430353a356534303a3a2f33322d3332203d3e20313339343038.roa (hash: sRyhu6fDfcemdhV/NAA1n4G4NdnybRSnokvW0ioWtBY=) 3: 3130332e3134332e3233322e302f32332d3233203d3e20313339343038.roa (hash: Sds95Ss3ilJlMKDO38Rkj40VQdzRD9GgP564MrRxXGU=) 4: 3130332e3134332e3233332e302f32342d3234203d3e20313339343038.roa (hash: mDFd08tPILLw1T3gAXQau9nwubN6g+t2GLdqlL1NiMc=) 5: 3130332e3134332e3233322e302f32342d3234203d3e20313339343038.roa (hash: IGC+YzF7hbNTh+lU4Xp4ZN99v7lUHzjLqU8mpRmWZMw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d6c8b3a9-4eff-460d-b01d-6ba5d99dadb9/0/4443E43239D3F5B9674F2F5B5A37711434C48AF2.crl rsync://repo-rpki.idnic.net/repo/d6c8b3a9-4eff-460d-b01d-6ba5d99dadb9/0/4443E43239D3F5B9674F2F5B5A37711434C48AF2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4443E43239D3F5B9674F2F5B5A37711434C48AF2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:7c:11:58:a8:17:1b:d0:26:48:34:27:01:18:68:6b:7f:19:92:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4443E43239D3F5B9674F2F5B5A37711434C48AF2 Validity Not Before: Oct 20 18:57:01 2025 GMT Not After : Oct 24 04:52:01 2025 GMT Subject: CN=6C4E807E1E7B89EA79BFBA0F5710A7F714A6B72C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:78:79:37:53:7b:32:f2:f5:d3:1a:6f:76:04: d2:ad:56:12:d0:f6:e6:71:dc:2b:26:9c:ab:81:68: 67:aa:e0:29:f0:f0:8c:ca:c2:32:c2:90:f3:87:b9: 97:d3:cb:c2:b1:6e:8d:01:55:0f:64:56:72:66:96: 46:2e:5a:bf:73:d6:be:3a:a8:88:6c:4e:f2:cf:8b: b4:b6:33:04:e8:40:ee:c4:34:cb:27:7d:b2:75:0a: ac:b1:02:51:2b:c5:0a:fc:db:ad:ce:d6:a9:69:0a: 62:ba:5f:f1:07:c3:94:57:28:25:9e:5c:cd:24:4d: 33:f6:df:12:af:ba:85:18:31:14:a9:6a:aa:32:f1: 8d:60:d6:b9:ab:ca:69:7a:dc:0c:6c:95:62:dc:22: d8:17:ed:3e:90:b0:bc:59:29:84:47:03:f9:d1:18: d1:95:b6:d0:25:14:88:e8:79:63:20:34:d0:b4:dc: 3f:55:9b:9b:f0:92:4b:b5:56:c8:0b:7c:86:73:0e: 15:a2:03:b9:e4:3c:b9:f7:8c:4c:0b:43:fa:a4:55: 39:58:90:74:0a:7b:99:2b:14:7a:51:d3:d0:43:2d: 47:10:41:4a:cd:ea:9f:4b:d6:f4:d2:f8:5b:08:5e: c3:31:b4:a6:9d:49:3c:b4:9c:b5:95:bd:9f:4e:37: 25:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:4E:80:7E:1E:7B:89:EA:79:BF:BA:0F:57:10:A7:F7:14:A6:B7:2C X509v3 Authority Key Identifier: keyid:44:43:E4:32:39:D3:F5:B9:67:4F:2F:5B:5A:37:71:14:34:C4:8A:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d6c8b3a9-4eff-460d-b01d-6ba5d99dadb9/0/4443E43239D3F5B9674F2F5B5A37711434C48AF2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4443E43239D3F5B9674F2F5B5A37711434C48AF2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d6c8b3a9-4eff-460d-b01d-6ba5d99dadb9/0/4443E43239D3F5B9674F2F5B5A37711434C48AF2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:cc:a8:d4:63:2d:0f:dc:6c:fd:a7:77:f2:3e:19:7f:1e:82: 89:77:aa:7c:21:4d:a1:c8:22:6f:1d:bb:47:37:59:d4:84:fc: 23:95:29:ab:6a:af:b8:4c:0e:94:0d:1f:b5:76:cf:31:48:18: 49:88:48:99:45:92:da:cf:fe:cb:c4:f6:8b:04:28:e1:c4:03: b1:8b:ff:81:f1:42:ef:91:62:09:64:39:b4:bc:9b:02:c2:07: bc:3f:e3:32:f6:33:01:d2:c4:b3:c9:fc:19:ad:1e:4c:58:02: c2:2f:16:e1:87:e9:08:12:99:8d:b7:58:44:1e:89:87:63:2c: 1f:7c:25:5e:f4:74:71:5e:74:32:f1:1d:7e:64:af:2d:d1:08: 4e:be:d6:a4:3a:9f:15:1e:eb:5a:31:32:76:fc:27:09:39:bd: 45:a9:0b:59:54:f7:4f:b9:fb:92:48:f1:d9:19:22:7b:0b:7c: ff:3d:cf:e4:64:52:14:08:82:b1:a0:35:2c:9f:3a:b2:de:3d: 5d:bd:6e:c3:c5:14:b3:2f:08:90:55:f3:d6:80:67:02:0e:6c: 93:e3:af:91:8e:f2:28:96:2d:42:38:c9:ce:63:b2:31:f1:62: 40:0b:5d:45:17:77:70:ba:00:db:29:f2:6f:61:f0:d7:d3:26: 5e:d0:c2:c9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJXwRWKgXG9AmSDQnARhoa38ZkjswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDQ0M0U0MzIzOUQzRjVCOTY3NEYyRjVCNUEzNzcxMTQz NEM0OEFGMjAeFw0yNTEwMjAxODU3MDFaFw0yNTEwMjQwNDUyMDFaMDMxMTAvBgNV BAMTKDZDNEU4MDdFMUU3Qjg5RUE3OUJGQkEwRjU3MTBBN0Y3MTRBNkI3MkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYeHk3U3sy8vXTGm92BNKtVhLQ 9uZx3CsmnKuBaGeq4Cnw8IzKwjLCkPOHuZfTy8Kxbo0BVQ9kVnJmlkYuWr9z1r46 qIhsTvLPi7S2MwToQO7ENMsnfbJ1CqyxAlErxQr8263O1qlpCmK6X/EHw5RXKCWe XM0kTTP23xKvuoUYMRSpaqoy8Y1g1rmryml63AxslWLcItgX7T6QsLxZKYRHA/nR GNGVttAlFIjoeWMgNNC03D9Vm5vwkku1VsgLfIZzDhWiA7nkPLn3jEwLQ/qkVTlY kHQKe5krFHpR09BDLUcQQUrN6p9L1vTS+FsIXsMxtKadSTy0nLWVvZ9ONyUBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbE6Afh57iep5v7oPVxCn9xSmtywwHwYDVR0j BBgwFoAUREPkMjnT9blnTy9bWjdxFDTEivIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NmM4YjNhOS00ZWZmLTQ2MGQtYjAxZC02YmE1ZDk5ZGFkYjkvMC80NDQzRTQzMjM5 RDNGNUI5Njc0RjJGNUI1QTM3NzExNDM0QzQ4QUYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDQ0M0U0MzIzOUQzRjVCOTY3NEYyRjVCNUEzNzcxMTQzNEM0 OEFGMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDZjOGIzYTktNGVmZi00NjBkLWIw MWQtNmJhNWQ5OWRhZGI5LzAvNDQ0M0U0MzIzOUQzRjVCOTY3NEYyRjVCNUEzNzcx MTQzNEM0OEFGMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGzMqNRjLQ/cbP2nd/I+GX8egol3qnwhTaHI Im8du0c3WdSE/COVKatqr7hMDpQNH7V2zzFIGEmISJlFktrP/svE9osEKOHEA7GL /4HxQu+RYglkObS8mwLCB7w/4zL2MwHSxLPJ/BmtHkxYAsIvFuGH6QgSmY23WEQe iYdjLB98JV70dHFedDLxHX5kry3RCE6+1qQ6nxUe61oxMnb8Jwk5vUWpC1lU90+5 +5JI8dkZInsLfP89z+RkUhQIgrGgNSyfOrLePV29bsPFFLMvCJBV89aAZwIObJPj r5GO8iiWLUI4yc5jsjHxYkALXUUXd3C6ANsp8m9h8NfTJl7Qwsk= -----END CERTIFICATE-----Generated at Mon Oct 20 20:41:56 2025 by rpki-client