$ rpki-client -vvf repo-rpki.idnic.net/repo/e1f29aba-6d7c-4435-953c-604988731596/0/4AA75AF77EC48924696455B9F02192353D9C4014.mft File: 4AA75AF77EC48924696455B9F02192353D9C4014.mft (raw, json) Hash identifier: KK+JYGRAQNdMroRViRVHbOP0OJ2spf3YwE+fwKa8HLk= Subject key identifier: 7D:93:50:58:3E:1A:1D:FC:46:90:80:46:19:B7:18:D9:67:22:6D:8C Authority key identifier: 4A:A7:5A:F7:7E:C4:89:24:69:64:55:B9:F0:21:92:35:3D:9C:40:14 Certificate issuer: /CN=4AA75AF77EC48924696455B9F02192353D9C4014 Certificate serial: 5BDFD4C54F482B04E556CD803594CEA8DD53B516 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AA75AF77EC48924696455B9F02192353D9C4014.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e1f29aba-6d7c-4435-953c-604988731596/0/4AA75AF77EC48924696455B9F02192353D9C4014.mft Manifest number: CD Signing time: Sat 18 Oct 2025 14:31:15 +0000 Manifest this update: Sat 18 Oct 2025 14:26:15 +0000 Manifest next update: Wed 22 Oct 2025 00:16:15 +0000 Files and hashes: 1: 4AA75AF77EC48924696455B9F02192353D9C4014.crl (hash: Xl5D8aafB23Y0BqSe+mk1u28zCQkEh0iTKnT6x1ZbxY=) 2: 3130332e3136322e37322e302f32342d3234203d3e20313431363436.roa (hash: AbwriW0SgoijAVFc1a2C3A7Illyl/gL1e8q6s9TC+bw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e1f29aba-6d7c-4435-953c-604988731596/0/4AA75AF77EC48924696455B9F02192353D9C4014.crl rsync://repo-rpki.idnic.net/repo/e1f29aba-6d7c-4435-953c-604988731596/0/4AA75AF77EC48924696455B9F02192353D9C4014.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AA75AF77EC48924696455B9F02192353D9C4014.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 00:16:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:df:d4:c5:4f:48:2b:04:e5:56:cd:80:35:94:ce:a8:dd:53:b5:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4AA75AF77EC48924696455B9F02192353D9C4014 Validity Not Before: Oct 18 14:26:15 2025 GMT Not After : Oct 22 00:16:15 2025 GMT Subject: CN=7D9350583E1A1DFC4690804619B718D967226D8C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ff:34:81:93:fa:67:35:00:3d:09:0a:a6:94: 44:3c:f8:02:bc:57:72:2d:45:86:c2:51:14:2d:24: 4e:51:20:e0:22:02:67:21:d6:53:9a:0f:6a:f2:b8: 0d:c3:7a:c9:4d:6d:f0:55:62:72:16:3b:67:a7:90: 78:cc:20:69:b2:c5:10:aa:21:18:89:79:09:24:3b: 4d:95:98:90:bd:81:f5:b6:c1:b8:a8:18:ce:35:47: 54:22:3b:ac:7f:f7:03:30:a1:8f:2a:39:7c:6c:d3: 05:13:b3:ff:43:27:e6:83:e7:0e:06:eb:96:64:c2: 92:6a:fd:2a:22:bb:f9:f3:0d:98:5a:90:ae:bf:64: ee:47:df:28:63:99:f6:c2:05:3d:27:b9:9a:d9:21: ba:a7:5f:25:63:de:ed:e7:ea:1f:39:40:d3:19:04: 6a:ce:b7:31:3a:8c:b1:3c:b6:d7:d2:70:04:3c:cc: 17:98:43:c3:fd:1a:9a:f3:e2:ae:2e:23:8f:5b:6f: 6d:6c:3a:dc:91:15:95:fb:ad:ef:4a:a8:6a:49:45: 5c:56:20:05:da:fc:a7:e7:b8:5b:fd:f0:f5:28:28: f0:ad:fa:a2:2d:2c:d0:7f:cc:6b:c7:98:f7:be:71: cf:e1:c4:ad:8d:55:ec:27:69:77:12:73:11:37:a6: e2:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:93:50:58:3E:1A:1D:FC:46:90:80:46:19:B7:18:D9:67:22:6D:8C X509v3 Authority Key Identifier: keyid:4A:A7:5A:F7:7E:C4:89:24:69:64:55:B9:F0:21:92:35:3D:9C:40:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e1f29aba-6d7c-4435-953c-604988731596/0/4AA75AF77EC48924696455B9F02192353D9C4014.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AA75AF77EC48924696455B9F02192353D9C4014.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e1f29aba-6d7c-4435-953c-604988731596/0/4AA75AF77EC48924696455B9F02192353D9C4014.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:ca:be:37:02:3d:a3:3f:33:a0:c2:e5:5f:85:25:63:3a:27: 7e:fb:4a:4c:e5:04:f9:2e:30:bb:76:5d:23:9a:04:4a:50:69: 14:b7:e7:91:98:cd:21:25:81:d2:0c:a8:a6:ee:1e:40:6c:40: c9:21:c8:e4:0b:58:7d:57:1d:c0:3f:c8:f1:cb:73:4d:24:5d: a8:b7:54:42:5d:6e:e7:09:0b:59:e6:35:01:ba:c4:7a:3e:96: 0c:7d:69:b8:d2:22:e0:84:19:ef:47:b8:73:df:be:df:da:0b: 93:57:72:76:3b:ab:98:9e:a8:7b:99:4f:28:24:91:88:4d:76: f9:bc:9a:bc:d7:31:54:5c:e9:c4:70:9c:ae:fd:d5:15:81:86: 6c:39:11:93:dc:d8:48:fb:91:c8:ef:a1:17:bd:07:24:b7:21: ae:5e:1f:7a:c3:53:0e:b8:6d:93:65:48:96:b7:ca:e4:e0:01: a9:35:36:29:5d:60:27:ef:bb:b8:5f:1b:86:a2:26:e2:12:cd: a0:46:79:6c:4e:f9:d0:19:b9:bd:c3:ad:2a:9d:4b:3d:79:00: 2c:58:25:fa:85:0f:9d:69:1c:9a:17:df:95:c0:28:92:ff:d0: de:8d:cc:56:26:f5:51:9a:6f:8a:75:90:05:cc:32:41:0b:86: 0b:86:44:2a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW9/UxU9IKwTlVs2ANZTOqN1TtRYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEFBNzVBRjc3RUM0ODkyNDY5NjQ1NUI5RjAyMTkyMzUz RDlDNDAxNDAeFw0yNTEwMTgxNDI2MTVaFw0yNTEwMjIwMDE2MTVaMDMxMTAvBgNV BAMTKDdEOTM1MDU4M0UxQTFERkM0NjkwODA0NjE5QjcxOEQ5NjcyMjZEOEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2/zSBk/pnNQA9CQqmlEQ8+AK8 V3ItRYbCURQtJE5RIOAiAmch1lOaD2ryuA3DeslNbfBVYnIWO2enkHjMIGmyxRCq IRiJeQkkO02VmJC9gfW2wbioGM41R1QiO6x/9wMwoY8qOXxs0wUTs/9DJ+aD5w4G 65ZkwpJq/Soiu/nzDZhakK6/ZO5H3yhjmfbCBT0nuZrZIbqnXyVj3u3n6h85QNMZ BGrOtzE6jLE8ttfScAQ8zBeYQ8P9Gprz4q4uI49bb21sOtyRFZX7re9KqGpJRVxW IAXa/KfnuFv98PUoKPCt+qItLNB/zGvHmPe+cc/hxK2NVewnaXcScxE3puIpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfZNQWD4aHfxGkIBGGbcY2WcibYwwHwYDVR0j BBgwFoAUSqda937EiSRpZFW58CGSNT2cQBQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MWYyOWFiYS02ZDdjLTQ0MzUtOTUzYy02MDQ5ODg3MzE1OTYvMC80QUE3NUFGNzdF QzQ4OTI0Njk2NDU1QjlGMDIxOTIzNTNEOUM0MDE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEFBNzVBRjc3RUM0ODkyNDY5NjQ1NUI5RjAyMTkyMzUzRDlD NDAxNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTFmMjlhYmEtNmQ3Yy00NDM1LTk1 M2MtNjA0OTg4NzMxNTk2LzAvNEFBNzVBRjc3RUM0ODkyNDY5NjQ1NUI5RjAyMTky MzUzRDlDNDAxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF7KvjcCPaM/M6DC5V+FJWM6J377SkzlBPku MLt2XSOaBEpQaRS355GYzSElgdIMqKbuHkBsQMkhyOQLWH1XHcA/yPHLc00kXai3 VEJdbucJC1nmNQG6xHo+lgx9abjSIuCEGe9HuHPfvt/aC5NXcnY7q5ieqHuZTygk kYhNdvm8mrzXMVRc6cRwnK791RWBhmw5EZPc2Ej7kcjvoRe9ByS3Ia5eH3rDUw64 bZNlSJa3yuTgAak1NildYCfvu7hfG4aiJuISzaBGeWxO+dAZub3DrSqdSz15ACxY JfqFD51pHJoX35XAKJL/0N6NzFYm9VGab4p1kAXMMkELhguGRCo= -----END CERTIFICATE-----Generated at Tue Oct 21 01:58:27 2025 by rpki-client