$ rpki-client -vvf repo-rpki.idnic.net/repo/d9093ad6-b115-4f10-88d7-6e57dcfd3223/0/4F50242149BE32942675690F53BF8FE81E99F74D.mft File: 4F50242149BE32942675690F53BF8FE81E99F74D.mft (raw, json) Hash identifier: x13kImu2LYjg5bA9OQLvJA8fvjDg6Jm0VYAkfxMShLI= Subject key identifier: 7C:9C:97:C0:B9:00:BB:FB:BE:3F:26:03:CB:66:C1:D9:AE:8D:10:2E Authority key identifier: 4F:50:24:21:49:BE:32:94:26:75:69:0F:53:BF:8F:E8:1E:99:F7:4D Certificate issuer: /CN=4F50242149BE32942675690F53BF8FE81E99F74D Certificate serial: 747256CFD65EA1F42BCB77CB97D833C4F08B8D62 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F50242149BE32942675690F53BF8FE81E99F74D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d9093ad6-b115-4f10-88d7-6e57dcfd3223/0/4F50242149BE32942675690F53BF8FE81E99F74D.mft Manifest number: 038C Signing time: Mon 20 Oct 2025 05:10:59 +0000 Manifest this update: Mon 20 Oct 2025 05:05:59 +0000 Manifest next update: Thu 23 Oct 2025 11:16:59 +0000 Files and hashes: 1: 3130332e3136362e33302e302f32342d3234203d3e20313431393430.roa (hash: t11QqdTM2g6bD0yLgDwQ54lubiayCOppdK4lspJl/fw=) 2: 4F50242149BE32942675690F53BF8FE81E99F74D.crl (hash: bqWcxEUruLhRIyrYuqUDMAxIq1G2qM17R1ki+80c8W0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d9093ad6-b115-4f10-88d7-6e57dcfd3223/0/4F50242149BE32942675690F53BF8FE81E99F74D.crl rsync://repo-rpki.idnic.net/repo/d9093ad6-b115-4f10-88d7-6e57dcfd3223/0/4F50242149BE32942675690F53BF8FE81E99F74D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F50242149BE32942675690F53BF8FE81E99F74D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:16:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:72:56:cf:d6:5e:a1:f4:2b:cb:77:cb:97:d8:33:c4:f0:8b:8d:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4F50242149BE32942675690F53BF8FE81E99F74D Validity Not Before: Oct 20 05:05:59 2025 GMT Not After : Oct 23 11:16:59 2025 GMT Subject: CN=7C9C97C0B900BBFBBE3F2603CB66C1D9AE8D102E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:0d:5e:55:74:14:af:0e:ed:35:68:01:5f:45: e3:94:1e:17:46:66:e6:14:64:9a:f4:5b:94:3c:18: e2:cc:9f:fe:eb:e7:f5:13:aa:a6:95:86:da:0c:44: c9:b4:25:7a:66:a7:ef:e8:4d:a4:10:31:d4:f7:f1: 27:36:36:b8:f3:5f:48:c9:74:a3:b0:9f:7d:a2:6e: 46:5a:b6:82:eb:b4:c4:08:a7:af:98:38:ab:45:c4: 6f:1f:70:58:2d:76:1b:b6:56:e3:d3:8c:15:22:22: 05:b1:a4:78:7b:82:30:26:b9:74:0b:57:7e:87:04: bc:19:1f:9c:49:29:27:d8:42:71:05:ac:77:11:de: 84:67:db:fc:e6:86:76:d0:10:a5:41:d1:aa:b3:46: 87:84:2f:43:75:41:24:ac:05:d7:11:3f:53:05:5a: ee:8b:5a:bb:cc:db:8e:9c:6f:36:1a:01:ac:9e:b2: e3:9a:bc:54:84:bf:4b:b7:5b:d1:7a:2f:1a:d3:8a: b2:ff:f2:f0:36:3b:7a:ac:a5:6b:93:ae:03:7b:4b: 1f:af:fe:98:9c:5f:dc:b7:9d:d3:1f:83:72:0f:1f: 42:65:73:90:99:f9:64:da:e1:ca:86:e3:e8:39:4c: f1:2c:e8:75:33:33:7c:02:dd:76:19:5f:78:cd:1f: 30:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:9C:97:C0:B9:00:BB:FB:BE:3F:26:03:CB:66:C1:D9:AE:8D:10:2E X509v3 Authority Key Identifier: keyid:4F:50:24:21:49:BE:32:94:26:75:69:0F:53:BF:8F:E8:1E:99:F7:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d9093ad6-b115-4f10-88d7-6e57dcfd3223/0/4F50242149BE32942675690F53BF8FE81E99F74D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F50242149BE32942675690F53BF8FE81E99F74D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d9093ad6-b115-4f10-88d7-6e57dcfd3223/0/4F50242149BE32942675690F53BF8FE81E99F74D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:02:a5:94:64:84:ab:a9:38:05:d2:c2:d7:66:bb:9f:96:9d: ae:95:f2:b2:55:8c:49:45:6e:e0:44:0b:4d:2b:6d:81:67:ab: 9f:f7:1c:86:e0:fa:40:54:dd:8a:6c:ae:3f:84:72:c2:41:61: 1a:6c:3a:36:c6:f7:12:91:8b:4f:1a:41:09:78:32:9e:92:10: 89:0b:f6:80:29:7f:b0:35:90:67:88:e1:bc:1e:45:a2:6a:29: 2b:30:46:9c:4e:eb:ed:19:82:33:53:50:14:a0:02:a0:2f:d1: 22:9f:64:f0:e1:77:4e:84:9a:97:58:b1:fb:08:62:ee:7d:d9: 8d:d3:c9:3b:a8:a8:de:01:20:50:f2:c4:23:bc:b8:5e:92:ba: 76:2d:1d:d4:94:4a:95:63:fd:2e:76:0e:f4:63:53:63:8c:0b: 7e:d9:1a:6a:16:98:f3:5f:7a:a4:ee:7d:4b:57:43:e8:5b:78: 1c:ee:4e:cb:07:89:07:5a:74:fa:f6:99:00:d7:c2:97:63:c8: e4:52:cc:86:af:bf:9d:18:5d:ec:ab:26:c9:b3:f7:5e:b4:57: 48:cd:4e:2c:66:d9:f8:14:85:f0:86:37:99:d4:fe:c6:a4:58: 33:4f:3c:ff:0b:51:fd:0d:a3:b3:9d:05:94:f7:64:93:a0:72: 6d:8f:51:1d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdHJWz9ZeofQry3fLl9gzxPCLjWIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEY1MDI0MjE0OUJFMzI5NDI2NzU2OTBGNTNCRjhGRTgx RTk5Rjc0RDAeFw0yNTEwMjAwNTA1NTlaFw0yNTEwMjMxMTE2NTlaMDMxMTAvBgNV BAMTKDdDOUM5N0MwQjkwMEJCRkJCRTNGMjYwM0NCNjZDMUQ5QUU4RDEwMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvDV5VdBSvDu01aAFfReOUHhdG ZuYUZJr0W5Q8GOLMn/7r5/UTqqaVhtoMRMm0JXpmp+/oTaQQMdT38Sc2NrjzX0jJ dKOwn32ibkZatoLrtMQIp6+YOKtFxG8fcFgtdhu2VuPTjBUiIgWxpHh7gjAmuXQL V36HBLwZH5xJKSfYQnEFrHcR3oRn2/zmhnbQEKVB0aqzRoeEL0N1QSSsBdcRP1MF Wu6LWrvM246cbzYaAayesuOavFSEv0u3W9F6LxrTirL/8vA2O3qspWuTrgN7Sx+v /picX9y3ndMfg3IPH0Jlc5CZ+WTa4cqG4+g5TPEs6HUzM3wC3XYZX3jNHzA5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfJyXwLkAu/u+PyYDy2bB2a6NEC4wHwYDVR0j BBgwFoAUT1AkIUm+MpQmdWkPU7+P6B6Z900wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OTA5M2FkNi1iMTE1LTRmMTAtODhkNy02ZTU3ZGNmZDMyMjMvMC80RjUwMjQyMTQ5 QkUzMjk0MjY3NTY5MEY1M0JGOEZFODFFOTlGNzRELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEY1MDI0MjE0OUJFMzI5NDI2NzU2OTBGNTNCRjhGRTgxRTk5 Rjc0RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDkwOTNhZDYtYjExNS00ZjEwLTg4 ZDctNmU1N2RjZmQzMjIzLzAvNEY1MDI0MjE0OUJFMzI5NDI2NzU2OTBGNTNCRjhG RTgxRTk5Rjc0RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADACpZRkhKupOAXSwtdmu5+Wna6V8rJVjElF buBEC00rbYFnq5/3HIbg+kBU3Ypsrj+EcsJBYRpsOjbG9xKRi08aQQl4Mp6SEIkL 9oApf7A1kGeI4bweRaJqKSswRpxO6+0ZgjNTUBSgAqAv0SKfZPDhd06EmpdYsfsI Yu592Y3TyTuoqN4BIFDyxCO8uF6SunYtHdSUSpVj/S52DvRjU2OMC37ZGmoWmPNf eqTufUtXQ+hbeBzuTssHiQdadPr2mQDXwpdjyORSzIavv50YXeyrJsmz9160V0jN Tixm2fgUhfCGN5nU/sakWDNPPP8LUf0No7OdBZT3ZJOgcm2PUR0= -----END CERTIFICATE-----Generated at Mon Oct 20 06:58:25 2025 by rpki-client