$ rpki-client -vvf repo-rpki.idnic.net/repo/ea47231f-02dd-49e8-aa25-2d54c0a999ca/0/439A4981549ABB151B12D6EC85FC8D0DBF99A81E.mft File: 439A4981549ABB151B12D6EC85FC8D0DBF99A81E.mft (raw, json) Hash identifier: P0yoAeJyXQo2q/roOaSyZ0RdbQLO+dAWb1tIrLKohUE= Subject key identifier: 48:81:F8:7A:74:E3:7E:C0:A5:F7:0F:2D:A9:DA:74:24:E6:25:BE:21 Authority key identifier: 43:9A:49:81:54:9A:BB:15:1B:12:D6:EC:85:FC:8D:0D:BF:99:A8:1E Certificate issuer: /CN=439A4981549ABB151B12D6EC85FC8D0DBF99A81E Certificate serial: 3BAD9D611AD01557EEF4BA8A37B52C9BADEE5B47 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/439A4981549ABB151B12D6EC85FC8D0DBF99A81E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ea47231f-02dd-49e8-aa25-2d54c0a999ca/0/439A4981549ABB151B12D6EC85FC8D0DBF99A81E.mft Manifest number: 0464 Signing time: Sun 19 Oct 2025 01:10:43 +0000 Manifest this update: Sun 19 Oct 2025 01:05:43 +0000 Manifest next update: Wed 22 Oct 2025 02:15:43 +0000 Files and hashes: 1: 439A4981549ABB151B12D6EC85FC8D0DBF99A81E.crl (hash: 8xSpEYlDHjOYa4w3EqkbWgDY/wcBwTLmy0t5wTOYGBk=) 2: 3130332e3131322e3234342e302f32332d3234203d3e20313336313037.roa (hash: iey0oG1qHYOzJhbqWTH39EDQ0pZ3GLohA4EPTGiKvsg=) 3: 3130332e3233332e3130322e302f32332d3234203d3e20313336313037.roa (hash: D5BixYr4AJU/MS7TZCW/5jRqwcOMx/QjB3M/Uu6XanU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ea47231f-02dd-49e8-aa25-2d54c0a999ca/0/439A4981549ABB151B12D6EC85FC8D0DBF99A81E.crl rsync://repo-rpki.idnic.net/repo/ea47231f-02dd-49e8-aa25-2d54c0a999ca/0/439A4981549ABB151B12D6EC85FC8D0DBF99A81E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/439A4981549ABB151B12D6EC85FC8D0DBF99A81E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 02:15:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:ad:9d:61:1a:d0:15:57:ee:f4:ba:8a:37:b5:2c:9b:ad:ee:5b:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=439A4981549ABB151B12D6EC85FC8D0DBF99A81E Validity Not Before: Oct 19 01:05:43 2025 GMT Not After : Oct 22 02:15:43 2025 GMT Subject: CN=4881F87A74E37EC0A5F70F2DA9DA7424E625BE21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:6b:cf:f6:8d:df:40:ee:22:3d:fc:47:0c:c2: ab:a8:e5:fa:8b:bd:5b:08:bc:c5:be:fb:06:c4:99: 7b:ed:67:3a:ae:b2:45:b6:d7:cc:73:74:95:9f:f1: 29:b5:91:8d:3c:8d:51:a0:11:8b:e6:9e:0a:87:d5: 70:b7:9f:6a:11:29:2e:dd:c2:44:33:97:db:4c:09: e7:83:34:f4:ef:1e:11:9b:b7:2f:41:b8:bd:98:8a: d2:dd:e5:09:58:20:6e:ea:4f:9b:6a:32:2d:9f:36: a5:ce:62:b5:53:3d:09:d6:4c:35:4a:50:47:fc:93: fb:c6:f4:98:cf:8f:a7:00:ab:ff:3d:b0:26:34:5b: 2f:00:1b:13:c8:f3:59:f3:e0:ad:c0:05:a0:40:7d: 04:4c:9e:53:0f:89:aa:47:d8:ee:44:7a:22:53:41: e3:d5:10:cf:b9:39:e4:29:fa:10:5d:4b:1e:c6:43: 32:13:1c:28:1b:6c:9a:6a:bb:96:78:2a:6c:b6:8c: e2:4f:ed:dc:af:0a:39:47:1b:e7:e4:ad:b1:a0:41: d4:cc:75:90:b4:30:f3:28:39:93:50:7a:22:fd:03: 4d:17:65:95:f9:82:9f:0e:00:fd:d6:50:ea:72:7f: 35:52:8e:e8:b0:6e:30:59:ad:2a:65:67:d4:f9:e0: 0c:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:81:F8:7A:74:E3:7E:C0:A5:F7:0F:2D:A9:DA:74:24:E6:25:BE:21 X509v3 Authority Key Identifier: keyid:43:9A:49:81:54:9A:BB:15:1B:12:D6:EC:85:FC:8D:0D:BF:99:A8:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ea47231f-02dd-49e8-aa25-2d54c0a999ca/0/439A4981549ABB151B12D6EC85FC8D0DBF99A81E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/439A4981549ABB151B12D6EC85FC8D0DBF99A81E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea47231f-02dd-49e8-aa25-2d54c0a999ca/0/439A4981549ABB151B12D6EC85FC8D0DBF99A81E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:eb:db:06:ef:9a:55:7c:51:db:cb:3d:7c:6c:cb:31:a4:54: c4:59:f0:0d:b8:34:8c:16:e6:5f:06:22:f9:cf:33:d4:80:db: e4:e6:ee:4c:ea:71:9e:18:07:b1:d4:84:54:eb:ea:ec:f7:5b: 0b:2c:0c:b1:cb:39:1e:12:aa:70:95:7c:ee:c2:e7:2f:20:12: 37:da:3d:67:3a:5d:a4:2d:08:b0:3e:d3:8c:e0:a7:e1:a8:cb: de:aa:ab:58:99:85:42:71:a2:65:e5:9c:95:f7:50:b2:3b:27: 38:77:e8:8b:46:4b:00:bf:d8:0c:5f:eb:a6:7c:9f:9b:5c:86: 1d:9b:97:6c:99:83:a1:d7:51:da:da:89:61:04:1f:ab:01:b6: e6:21:27:1f:38:8e:63:2c:fb:3d:ce:73:0f:8a:f1:2a:18:25: 0e:15:83:ed:5c:8a:89:2a:22:cb:3e:f8:ca:d9:10:9b:2f:41: 04:e0:50:95:fe:c2:14:fd:c1:35:6e:40:0e:6f:64:74:01:62: 42:85:01:2a:ec:c4:01:9c:aa:13:f5:4a:ec:7c:fc:4a:4b:37: f6:8a:21:14:8b:5d:11:22:5b:c4:30:ad:67:07:dd:c0:74:7f: 02:1a:56:00:fe:63:94:ec:d3:72:32:84:26:eb:9e:2c:94:69: a4:b9:c8:f6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO62dYRrQFVfu9LqKN7Usm63uW0cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDM5QTQ5ODE1NDlBQkIxNTFCMTJENkVDODVGQzhEMERC Rjk5QTgxRTAeFw0yNTEwMTkwMTA1NDNaFw0yNTEwMjIwMjE1NDNaMDMxMTAvBgNV BAMTKDQ4ODFGODdBNzRFMzdFQzBBNUY3MEYyREE5REE3NDI0RTYyNUJFMjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDea8/2jd9A7iI9/EcMwquo5fqL vVsIvMW++wbEmXvtZzquskW218xzdJWf8Sm1kY08jVGgEYvmngqH1XC3n2oRKS7d wkQzl9tMCeeDNPTvHhGbty9BuL2YitLd5QlYIG7qT5tqMi2fNqXOYrVTPQnWTDVK UEf8k/vG9JjPj6cAq/89sCY0Wy8AGxPI81nz4K3ABaBAfQRMnlMPiapH2O5EeiJT QePVEM+5OeQp+hBdSx7GQzITHCgbbJpqu5Z4Kmy2jOJP7dyvCjlHG+fkrbGgQdTM dZC0MPMoOZNQeiL9A00XZZX5gp8OAP3WUOpyfzVSjuiwbjBZrSplZ9T54Ay1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSIH4enTjfsCl9w8tqdp0JOYlviEwHwYDVR0j BBgwFoAUQ5pJgVSauxUbEtbshfyNDb+ZqB4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YTQ3MjMxZi0wMmRkLTQ5ZTgtYWEyNS0yZDU0YzBhOTk5Y2EvMC80MzlBNDk4MTU0 OUFCQjE1MUIxMkQ2RUM4NUZDOEQwREJGOTlBODFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDM5QTQ5ODE1NDlBQkIxNTFCMTJENkVDODVGQzhEMERCRjk5 QTgxRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWE0NzIzMWYtMDJkZC00OWU4LWFh MjUtMmQ1NGMwYTk5OWNhLzAvNDM5QTQ5ODE1NDlBQkIxNTFCMTJENkVDODVGQzhE MERCRjk5QTgxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIzr2wbvmlV8UdvLPXxsyzGkVMRZ8A24NIwW 5l8GIvnPM9SA2+Tm7kzqcZ4YB7HUhFTr6uz3WwssDLHLOR4SqnCVfO7C5y8gEjfa PWc6XaQtCLA+04zgp+Goy96qq1iZhUJxomXlnJX3ULI7Jzh36ItGSwC/2Axf66Z8 n5tchh2bl2yZg6HXUdraiWEEH6sBtuYhJx84jmMs+z3Ocw+K8SoYJQ4Vg+1ciokq Iss++MrZEJsvQQTgUJX+whT9wTVuQA5vZHQBYkKFASrsxAGcqhP1Sux8/EpLN/aK IRSLXREiW8QwrWcH3cB0fwIaVgD+Y5Ts03IyhCbrniyUaaS5yPY= -----END CERTIFICATE-----Generated at Mon Oct 20 12:35:36 2025 by rpki-client