$ rpki-client -vvf repo-rpki.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.mft File: F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.mft (raw, json) Hash identifier: oKZTzU3STTFDWY+9TY6k9Nk8th/MtUPl4lIhkVYFaa8= Subject key identifier: 54:F4:A9:F0:C4:3A:F9:22:49:FE:B1:3A:EF:EA:5D:D7:85:8C:E8:D6 Authority key identifier: F4:D9:C6:C3:E2:65:3E:53:E4:54:9E:CD:7B:0E:43:26:FE:95:6B:4C Certificate issuer: /CN=F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C Certificate serial: 7492C046F73C40DE5922F95901BFC845856F8EEF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.mft Manifest number: E8 Signing time: Sun 19 Oct 2025 22:31:04 +0000 Manifest this update: Sun 19 Oct 2025 22:26:04 +0000 Manifest next update: Thu 23 Oct 2025 00:54:04 +0000 Files and hashes: 1: 3135372e36362e38342e302f32332d3234203d3e20313339393831.roa (hash: QVcLKReR3vobx/sEHPLJR2ePOo16P1H8K2UkUuXxUL8=) 2: F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.crl (hash: Ugwg3pZZHBdZ5RIOI+S+m/RbJrPf1Eld1jK32GCP7eM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.crl rsync://repo-rpki.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 00:54:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:92:c0:46:f7:3c:40:de:59:22:f9:59:01:bf:c8:45:85:6f:8e:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C Validity Not Before: Oct 19 22:26:04 2025 GMT Not After : Oct 23 00:54:04 2025 GMT Subject: CN=54F4A9F0C43AF92249FEB13AEFEA5DD7858CE8D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:19:6e:65:a7:d6:2f:cd:59:3e:a4:c1:0d:68: 48:be:94:a5:d2:89:ed:99:2f:91:fc:3d:f7:aa:c7: 97:ad:c4:b2:56:aa:1f:b0:d2:31:d0:d6:1b:fb:ef: 12:d4:7b:29:ad:4c:69:32:10:f8:4f:61:d7:9b:57: 07:73:d3:f3:4e:3d:a5:18:75:df:73:84:77:6e:63: ca:46:82:b3:70:27:8c:f9:c5:7c:51:9c:9b:a7:af: 0c:fa:a3:72:30:b0:ff:da:76:c3:25:09:81:25:fa: 1d:c3:15:ed:9e:19:63:ef:e1:f8:8a:76:7e:64:92: c2:da:ad:34:ef:6d:16:82:f3:86:1c:52:fe:eb:3d: 62:0b:bd:c7:74:a5:c7:11:b8:e8:09:ad:77:43:cb: b4:35:87:4d:22:37:35:a0:83:ee:44:11:3e:e2:9d: c5:1a:ab:ad:ef:97:47:e1:03:cd:a6:1f:63:ec:46: 2c:cb:aa:30:33:82:b6:2f:63:2f:42:54:0f:3d:ad: af:88:80:74:c6:68:ca:cb:7b:aa:07:f8:c3:17:9a: cc:0a:44:d4:42:a3:fe:76:3d:d0:18:ff:f7:f3:f7: e8:7a:c6:ed:cb:3c:34:97:bf:84:a3:64:87:1a:fb: d2:8d:42:79:ee:fa:7f:5f:4b:92:03:cd:a8:3d:a6: 30:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:F4:A9:F0:C4:3A:F9:22:49:FE:B1:3A:EF:EA:5D:D7:85:8C:E8:D6 X509v3 Authority Key Identifier: keyid:F4:D9:C6:C3:E2:65:3E:53:E4:54:9E:CD:7B:0E:43:26:FE:95:6B:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:d4:d6:7b:8d:f4:e9:b9:cc:b6:4b:e2:fd:aa:97:a5:61:69: e9:2b:8b:43:06:e4:e2:18:f0:11:46:fb:8f:c0:2d:fc:31:68: 94:34:b9:05:9e:f8:b3:e8:09:b4:c6:75:0e:2b:26:3c:4a:4f: 4a:39:1a:91:9d:b4:c8:50:80:1a:bc:15:f2:bf:51:e2:83:57: 7b:a9:de:73:ee:a1:a8:79:07:02:d0:c2:95:23:96:6e:fe:f9: 54:ab:28:f8:7b:5c:7f:f4:fc:a1:23:f3:9a:61:a1:5c:be:01: 29:64:d5:80:27:87:c0:09:56:07:fa:6e:08:11:79:90:da:24: 4c:d4:5b:2d:85:e7:d5:c2:aa:e7:43:34:60:7f:7f:10:5e:7b: f3:0a:e2:f7:32:5e:b5:e0:a0:11:71:c4:d3:41:f0:0f:34:77: 8d:c6:0a:16:b1:a6:41:25:59:04:c3:38:ce:a6:a8:06:36:95: c1:1e:c8:0d:34:7c:87:78:e6:2a:03:6c:cf:0e:63:23:6d:59: 97:a4:38:87:99:8d:e5:48:13:04:48:cf:5d:05:25:dc:5f:bd: b3:b6:e2:82:98:fd:5a:15:69:2b:4c:98:1d:88:08:a4:0b:e6: 04:e4:3d:c0:4e:27:ee:4e:60:ca:6d:a2:41:96:c3:a9:60:b1: 39:d4:20:c3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdJLARvc8QN5ZIvlZAb/IRYVvju8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjREOUM2QzNFMjY1M0U1M0U0NTQ5RUNEN0IwRTQzMjZG RTk1NkI0QzAeFw0yNTEwMTkyMjI2MDRaFw0yNTEwMjMwMDU0MDRaMDMxMTAvBgNV BAMTKDU0RjRBOUYwQzQzQUY5MjI0OUZFQjEzQUVGRUE1REQ3ODU4Q0U4RDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4GW5lp9YvzVk+pMENaEi+lKXS ie2ZL5H8Pfeqx5etxLJWqh+w0jHQ1hv77xLUeymtTGkyEPhPYdebVwdz0/NOPaUY dd9zhHduY8pGgrNwJ4z5xXxRnJunrwz6o3IwsP/adsMlCYEl+h3DFe2eGWPv4fiK dn5kksLarTTvbRaC84YcUv7rPWILvcd0pccRuOgJrXdDy7Q1h00iNzWgg+5EET7i ncUaq63vl0fhA82mH2PsRizLqjAzgrYvYy9CVA89ra+IgHTGaMrLe6oH+MMXmswK RNRCo/52PdAY//fz9+h6xu3LPDSXv4SjZIca+9KNQnnu+n9fS5IDzag9pjAlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVPSp8MQ6+SJJ/rE67+pd14WM6NYwHwYDVR0j BBgwFoAU9NnGw+JlPlPkVJ7New5DJv6Va0wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l OTdjNjgyYS00NDhiLTQwZTItYTg4Zi0xNmRmODNkZDMzMzcvMC9GNEQ5QzZDM0Uy NjUzRTUzRTQ1NDlFQ0Q3QjBFNDMyNkZFOTU2QjRDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRjREOUM2QzNFMjY1M0U1M0U0NTQ5RUNEN0IwRTQzMjZGRTk1 NkI0Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTk3YzY4MmEtNDQ4Yi00MGUyLWE4 OGYtMTZkZjgzZGQzMzM3LzAvRjREOUM2QzNFMjY1M0U1M0U0NTQ5RUNEN0IwRTQz MjZGRTk1NkI0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEPU1nuN9Om5zLZL4v2ql6Vhaekri0MG5OIY 8BFG+4/ALfwxaJQ0uQWe+LPoCbTGdQ4rJjxKT0o5GpGdtMhQgBq8FfK/UeKDV3up 3nPuoah5BwLQwpUjlm7++VSrKPh7XH/0/KEj85phoVy+ASlk1YAnh8AJVgf6bggR eZDaJEzUWy2F59XCqudDNGB/fxBee/MK4vcyXrXgoBFxxNNB8A80d43GChaxpkEl WQTDOM6mqAY2lcEeyA00fId45ioDbM8OYyNtWZekOIeZjeVIEwRIz10FJdxfvbO2 4oKY/VoVaStMmB2ICKQL5gTkPcBOJ+5OYMptokGWw6lgsTnUIMM= -----END CERTIFICATE-----Generated at Mon Oct 20 20:36:46 2025 by rpki-client