$ rpki-client -vvf repo-rpki.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/4A243A1EC4991C40D3A6148515E3C51981B425F7.mft File: 4A243A1EC4991C40D3A6148515E3C51981B425F7.mft (raw, json) Hash identifier: y4dhMKH2ORAl3HAUgRqirGEM+6nA0jwDxw/YKUjkr2A= Subject key identifier: 3B:6C:7D:C7:BE:B3:A1:41:76:57:76:AA:46:D3:41:42:C7:30:14:EA Authority key identifier: 4A:24:3A:1E:C4:99:1C:40:D3:A6:14:85:15:E3:C5:19:81:B4:25:F7 Certificate issuer: /CN=4A243A1EC4991C40D3A6148515E3C51981B425F7 Certificate serial: 5036456E58612EB480B5C50A3C8198AF4A5674B8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A243A1EC4991C40D3A6148515E3C51981B425F7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/4A243A1EC4991C40D3A6148515E3C51981B425F7.mft Manifest number: 01B0 Signing time: Sun 19 Oct 2025 15:40:59 +0000 Manifest this update: Sun 19 Oct 2025 15:35:59 +0000 Manifest next update: Wed 22 Oct 2025 23:09:59 +0000 Files and hashes: 1: 4A243A1EC4991C40D3A6148515E3C51981B425F7.crl (hash: jKIckUqiW6UE/5LV4du+Ri6l5+Czz8BswF2tQdplLqU=) 2: 3130332e3130392e3230362e302f32342d3234203d3e20313530393335.roa (hash: Rcu96XphgA8WvPbRK/1ptZ3CZTir4MCBj7MHKlWlNMw=) 3: 3130332e3130392e3230372e302f32342d3234203d3e20313530393335.roa (hash: W7qNwUKI6yVYK0QKsHqMQf5TpfiakU3FHDTDzkx2y0k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/4A243A1EC4991C40D3A6148515E3C51981B425F7.crl rsync://repo-rpki.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/4A243A1EC4991C40D3A6148515E3C51981B425F7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A243A1EC4991C40D3A6148515E3C51981B425F7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 23:09:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:36:45:6e:58:61:2e:b4:80:b5:c5:0a:3c:81:98:af:4a:56:74:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A243A1EC4991C40D3A6148515E3C51981B425F7 Validity Not Before: Oct 19 15:35:59 2025 GMT Not After : Oct 22 23:09:59 2025 GMT Subject: CN=3B6C7DC7BEB3A141765776AA46D34142C73014EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e4:4a:bc:65:a2:63:e5:50:53:2c:87:cc:52: fc:91:45:ba:69:bd:14:d9:7d:13:d9:0f:57:87:23: 00:57:66:7b:95:85:b2:8d:a1:07:5d:c9:16:17:bd: 1e:db:ce:94:a1:c9:33:f1:6a:57:0c:9f:0a:04:77: 07:90:cf:8d:a2:f4:e9:ca:de:c2:11:9b:9f:55:01: be:1e:50:44:be:b4:c1:88:94:3f:bc:78:43:5d:78: 7b:94:63:3d:18:17:bd:ba:e5:ba:0a:88:22:c5:79: bd:f0:05:91:6b:2a:08:b7:12:95:6f:9c:ba:89:e4: bb:f3:58:e3:0c:11:9d:af:65:40:fe:6e:5a:cd:7b: 43:2b:60:3e:9d:13:88:ed:51:8c:bd:a9:e6:2b:59: c4:12:78:ae:68:47:8e:55:11:ef:14:73:19:f9:b2: af:1b:39:b7:51:cb:5c:fa:0c:3c:ba:3c:30:e9:7a: 22:ab:17:60:7f:9f:b1:2c:99:d9:f2:1b:5a:75:b8: 70:35:26:05:31:a7:b5:a9:18:78:96:e3:ed:d5:0e: 5a:ca:e9:f8:a0:d6:b0:88:e2:76:3f:10:47:c7:35: 2d:d4:e2:2a:09:20:77:79:c9:be:c6:2d:63:5e:6b: 3e:6b:92:d5:b2:50:b9:20:2f:1f:7f:e9:b8:ed:e1: 1e:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:6C:7D:C7:BE:B3:A1:41:76:57:76:AA:46:D3:41:42:C7:30:14:EA X509v3 Authority Key Identifier: keyid:4A:24:3A:1E:C4:99:1C:40:D3:A6:14:85:15:E3:C5:19:81:B4:25:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/4A243A1EC4991C40D3A6148515E3C51981B425F7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A243A1EC4991C40D3A6148515E3C51981B425F7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/4A243A1EC4991C40D3A6148515E3C51981B425F7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:3b:21:31:9f:4a:72:59:20:e5:90:a2:ff:88:df:43:f1:44: 59:5a:35:41:cc:23:21:8b:bf:f6:8a:f6:3f:b3:dd:36:05:e4: e0:5d:dd:94:df:b4:16:95:7e:18:52:da:f9:12:ff:94:c4:03: 2b:20:43:17:01:33:71:aa:75:cc:86:78:83:2e:e7:3e:a6:cc: 24:89:14:ce:08:d2:78:c4:ae:a4:7b:e3:e0:ca:34:2e:bd:74: 71:76:c0:68:62:7d:4b:74:c7:33:30:6a:55:75:65:f9:93:29: a5:4f:b9:02:58:80:af:d5:f9:fc:b9:47:9e:2a:6e:1c:47:b9: 49:24:f2:27:2a:0d:27:0f:1e:bc:7d:54:58:76:88:ba:c2:a3: 24:82:60:3b:31:e7:59:a2:8a:9b:a2:a0:51:af:8c:68:1b:cd: 8f:c5:b9:ae:9c:4b:36:c0:99:5e:8a:4e:64:91:ba:fc:f6:03: 58:70:e7:76:e8:01:6b:0e:f1:9a:d5:f9:fa:eb:3f:bf:18:95: 3a:ac:96:e5:a6:fb:2e:24:ca:42:12:56:e9:c2:57:15:bb:89: 46:29:5b:92:36:53:6d:59:ba:84:3a:cb:a4:39:d3:e0:7b:b1: 25:a9:44:13:f3:1e:46:0c:72:6c:9a:0b:ba:09:88:65:c7:2b: f6:97:2d:e1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUDZFblhhLrSAtcUKPIGYr0pWdLgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEEyNDNBMUVDNDk5MUM0MEQzQTYxNDg1MTVFM0M1MTk4 MUI0MjVGNzAeFw0yNTEwMTkxNTM1NTlaFw0yNTEwMjIyMzA5NTlaMDMxMTAvBgNV BAMTKDNCNkM3REM3QkVCM0ExNDE3NjU3NzZBQTQ2RDM0MTQyQzczMDE0RUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC05Eq8ZaJj5VBTLIfMUvyRRbpp vRTZfRPZD1eHIwBXZnuVhbKNoQddyRYXvR7bzpShyTPxalcMnwoEdweQz42i9OnK 3sIRm59VAb4eUES+tMGIlD+8eENdeHuUYz0YF7265boKiCLFeb3wBZFrKgi3EpVv nLqJ5LvzWOMMEZ2vZUD+blrNe0MrYD6dE4jtUYy9qeYrWcQSeK5oR45VEe8Ucxn5 sq8bObdRy1z6DDy6PDDpeiKrF2B/n7EsmdnyG1p1uHA1JgUxp7WpGHiW4+3VDlrK 6fig1rCI4nY/EEfHNS3U4ioJIHd5yb7GLWNeaz5rktWyULkgLx9/6bjt4R4HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUO2x9x76zoUF2V3aqRtNBQscwFOowHwYDVR0j BBgwFoAUSiQ6HsSZHEDTphSFFePFGYG0JfcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l Yzg4OTJlYi1kZGMwLTRjYjYtOTU3Yy1iNjUzZjI4YmJmMzkvMC80QTI0M0ExRUM0 OTkxQzQwRDNBNjE0ODUxNUUzQzUxOTgxQjQyNUY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEEyNDNBMUVDNDk5MUM0MEQzQTYxNDg1MTVFM0M1MTk4MUI0 MjVGNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWM4ODkyZWItZGRjMC00Y2I2LTk1 N2MtYjY1M2YyOGJiZjM5LzAvNEEyNDNBMUVDNDk5MUM0MEQzQTYxNDg1MTVFM0M1 MTk4MUI0MjVGNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACg7ITGfSnJZIOWQov+I30PxRFlaNUHMIyGL v/aK9j+z3TYF5OBd3ZTftBaVfhhS2vkS/5TEAysgQxcBM3GqdcyGeIMu5z6mzCSJ FM4I0njErqR74+DKNC69dHF2wGhifUt0xzMwalV1ZfmTKaVPuQJYgK/V+fy5R54q bhxHuUkk8icqDScPHrx9VFh2iLrCoySCYDsx51miipuioFGvjGgbzY/Fua6cSzbA mV6KTmSRuvz2A1hw53boAWsO8ZrV+frrP78YlTqsluWm+y4kykISVunCVxW7iUYp W5I2U21ZuoQ6y6Q50+B7sSWpRBPzHkYMcmyaC7oJiGXHK/aXLeE= -----END CERTIFICATE-----Generated at Mon Oct 20 20:28:44 2025 by rpki-client