$ rpki-client -vvf repo-rpki.idnic.net/repo/f1b267a4-5030-4a4f-bb86-71fd230f53d1/0/C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.mft File: C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.mft (raw, json) Hash identifier: byrzhZBX5+6+6Jh2pA4zwZ5t0sb0rT9hdlctNmLPiOE= Subject key identifier: ED:CC:EA:36:C5:8E:F7:85:76:43:8B:40:7F:D6:F1:C7:8F:4C:07:6E Authority key identifier: C4:FC:DC:42:4C:5B:4B:2A:56:3F:0D:07:25:73:A5:49:2A:CF:8E:36 Certificate issuer: /CN=C4FCDC424C5B4B2A563F0D072573A5492ACF8E36 Certificate serial: 6A62E815DA5CEFF2227C0C5BB646FD02F341C054 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f1b267a4-5030-4a4f-bb86-71fd230f53d1/0/C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.mft Manifest number: EB Signing time: Sun 19 Oct 2025 13:41:55 +0000 Manifest this update: Sun 19 Oct 2025 13:36:55 +0000 Manifest next update: Wed 22 Oct 2025 16:51:55 +0000 Files and hashes: 1: 3135372e36362e33382e302f32332d3234203d3e203633383635.roa (hash: ul03DJPa84uV+wn7V8w/eIH5fK3BBIC1WxDMCBsM/QQ=) 2: 3135372e36362e33382e302f32342d3234203d3e203435333035.roa (hash: cD0fi1g8RJKzuqT2bKPT18EYQnEf1eQo9O4WH9FMt7c=) 3: C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.crl (hash: Sz3z8BL9I5F/juUO4pxRsD7hClS1cfdZH3FpT+voEwk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f1b267a4-5030-4a4f-bb86-71fd230f53d1/0/C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.crl rsync://repo-rpki.idnic.net/repo/f1b267a4-5030-4a4f-bb86-71fd230f53d1/0/C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 16:51:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:62:e8:15:da:5c:ef:f2:22:7c:0c:5b:b6:46:fd:02:f3:41:c0:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C4FCDC424C5B4B2A563F0D072573A5492ACF8E36 Validity Not Before: Oct 19 13:36:55 2025 GMT Not After : Oct 22 16:51:55 2025 GMT Subject: CN=EDCCEA36C58EF78576438B407FD6F1C78F4C076E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:26:61:2e:8a:ea:c7:71:83:96:c6:54:af:39: c5:68:74:5f:4e:53:56:e1:7b:05:d3:33:63:1e:84: d4:10:d6:ac:b1:20:77:bc:84:06:32:e8:9a:12:e4: b6:28:51:75:96:f7:f8:5d:e2:32:36:80:72:fe:cd: f4:9a:13:89:f0:ad:86:49:c0:62:2e:3d:2f:27:62: 01:89:41:74:97:41:b0:39:3b:f2:ce:a9:7e:06:a6: e6:ee:1f:f7:b3:f4:8e:06:dc:71:6d:9b:15:b0:34: 2b:60:51:35:17:fc:45:6f:a0:9d:7f:22:d3:f0:5f: 0a:45:7d:17:0f:1b:6d:65:0c:26:5c:44:8b:49:7f: 1c:f6:19:ee:3d:76:49:5c:3b:0a:01:fa:14:18:58: 06:09:a7:cb:27:55:12:07:a3:88:a0:80:74:22:a1: be:be:a4:a0:9d:94:e2:84:fc:44:1c:e9:b6:36:bb: e9:fc:18:36:1d:d8:a9:32:23:ce:ec:7d:08:d5:37: 84:cb:2e:fe:64:1c:b8:a1:a0:19:14:49:da:6e:0b: a7:aa:59:30:68:54:1f:bf:5c:34:06:bf:a1:00:62: 8d:4e:cb:b7:17:b0:b1:60:eb:f6:99:01:61:03:d6: 0b:68:98:a2:a5:78:32:cc:48:55:b5:7b:cc:43:bc: 69:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:CC:EA:36:C5:8E:F7:85:76:43:8B:40:7F:D6:F1:C7:8F:4C:07:6E X509v3 Authority Key Identifier: keyid:C4:FC:DC:42:4C:5B:4B:2A:56:3F:0D:07:25:73:A5:49:2A:CF:8E:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f1b267a4-5030-4a4f-bb86-71fd230f53d1/0/C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f1b267a4-5030-4a4f-bb86-71fd230f53d1/0/C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:eb:0f:c2:d4:82:df:41:86:35:03:fc:18:96:f0:39:9f:1a: c3:12:7f:e5:e7:02:90:d6:fc:f8:21:c7:88:e4:b8:46:00:4c: 4e:8e:87:59:d1:7a:28:96:ed:04:44:33:c9:4a:37:f5:af:39: 47:af:3a:10:ce:4a:00:d9:30:56:44:96:d5:0f:cc:06:30:11: 16:03:ef:cc:c3:54:f2:27:c3:d7:3e:86:c6:0a:ad:bf:80:5a: 65:a8:6e:c6:e5:94:38:67:6f:94:60:aa:0a:03:95:3c:32:3b: fd:4a:54:84:63:e7:ac:4c:f4:8f:39:4d:d5:cc:22:b5:7c:25: db:e8:3d:5d:0f:0c:59:84:4d:fc:1c:c9:f0:ef:56:96:13:84: 98:1f:75:0f:2d:e5:63:47:b3:df:de:04:7a:ca:63:db:4c:75: fc:ac:07:66:8b:7f:2a:08:8f:89:5b:e7:c0:46:7c:a9:d9:aa: 4f:e2:fb:7e:ad:bd:ce:6a:e1:f6:b6:61:a8:5a:c6:a1:f4:9d: a5:ea:f3:42:84:ae:b2:d5:58:e1:20:02:d2:e0:3c:3d:2d:f1: 2f:b3:ea:21:38:f1:f2:d9:bc:d5:01:86:2b:f8:d7:83:5d:5e: cf:be:5f:3f:9a:b4:52:38:cd:52:ac:0e:c9:35:35:36:86:68: 9d:24:e7:d8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUamLoFdpc7/IifAxbtkb9AvNBwFQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzRGQ0RDNDI0QzVCNEIyQTU2M0YwRDA3MjU3M0E1NDky QUNGOEUzNjAeFw0yNTEwMTkxMzM2NTVaFw0yNTEwMjIxNjUxNTVaMDMxMTAvBgNV BAMTKEVEQ0NFQTM2QzU4RUY3ODU3NjQzOEI0MDdGRDZGMUM3OEY0QzA3NkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClJmEuiurHcYOWxlSvOcVodF9O U1bhewXTM2MehNQQ1qyxIHe8hAYy6JoS5LYoUXWW9/hd4jI2gHL+zfSaE4nwrYZJ wGIuPS8nYgGJQXSXQbA5O/LOqX4GpubuH/ez9I4G3HFtmxWwNCtgUTUX/EVvoJ1/ ItPwXwpFfRcPG21lDCZcRItJfxz2Ge49dklcOwoB+hQYWAYJp8snVRIHo4iggHQi ob6+pKCdlOKE/EQc6bY2u+n8GDYd2KkyI87sfQjVN4TLLv5kHLihoBkUSdpuC6eq WTBoVB+/XDQGv6EAYo1Oy7cXsLFg6/aZAWED1gtomKKleDLMSFW1e8xDvGn7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7czqNsWO94V2Q4tAf9bxx49MB24wHwYDVR0j BBgwFoAUxPzcQkxbSypWPw0HJXOlSSrPjjYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MWIyNjdhNC01MDMwLTRhNGYtYmI4Ni03MWZkMjMwZjUzZDEvMC9DNEZDREM0MjRD NUI0QjJBNTYzRjBEMDcyNTczQTU0OTJBQ0Y4RTM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQzRGQ0RDNDI0QzVCNEIyQTU2M0YwRDA3MjU3M0E1NDkyQUNG OEUzNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjFiMjY3YTQtNTAzMC00YTRmLWJi ODYtNzFmZDIzMGY1M2QxLzAvQzRGQ0RDNDI0QzVCNEIyQTU2M0YwRDA3MjU3M0E1 NDkyQUNGOEUzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMXrD8LUgt9BhjUD/BiW8DmfGsMSf+XnApDW /Pghx4jkuEYATE6Oh1nReiiW7QREM8lKN/WvOUevOhDOSgDZMFZEltUPzAYwERYD 78zDVPInw9c+hsYKrb+AWmWobsbllDhnb5RgqgoDlTwyO/1KVIRj56xM9I85TdXM IrV8JdvoPV0PDFmETfwcyfDvVpYThJgfdQ8t5WNHs9/eBHrKY9tMdfysB2aLfyoI j4lb58BGfKnZqk/i+36tvc5q4fa2YahaxqH0naXq80KErrLVWOEgAtLgPD0t8S+z 6iE48fLZvNUBhiv414NdXs++Xz+atFI4zVKsDsk1NTaGaJ0k59g= -----END CERTIFICATE-----Generated at Mon Oct 20 11:35:29 2025 by rpki-client