$ rpki-client -vvf repo-rpki.idnic.net/repo/faa6a67d-cba3-427b-9055-5f528f2d232f/0/4A688B72A804A426A9096ECA60105A4D831C5FA8.mft File: 4A688B72A804A426A9096ECA60105A4D831C5FA8.mft (raw, json) Hash identifier: p2QIKvjCsbAIDa0LlvqwQYbA4w5oJF4OjnX8bRZuxeQ= Subject key identifier: 2B:81:6C:67:0B:30:47:36:6F:70:14:12:17:6A:24:58:14:90:A1:52 Authority key identifier: 4A:68:8B:72:A8:04:A4:26:A9:09:6E:CA:60:10:5A:4D:83:1C:5F:A8 Certificate issuer: /CN=4A688B72A804A426A9096ECA60105A4D831C5FA8 Certificate serial: 7E08849A8FF33480C038007C6CB67A2396C24FCE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A688B72A804A426A9096ECA60105A4D831C5FA8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/faa6a67d-cba3-427b-9055-5f528f2d232f/0/4A688B72A804A426A9096ECA60105A4D831C5FA8.mft Manifest number: 02F7 Signing time: Mon 20 Oct 2025 11:04:09 +0000 Manifest this update: Mon 20 Oct 2025 10:59:09 +0000 Manifest next update: Thu 23 Oct 2025 15:19:09 +0000 Files and hashes: 1: 4A688B72A804A426A9096ECA60105A4D831C5FA8.crl (hash: lpRiWEA9w4pwqWO9AmL9OtvVMC2QS3P1RNf2JJufkek=) 2: 3130332e3137352e3230362e302f32332d3234203d3e20313437313234.roa (hash: eGEsrGBto/hQncn3YcGePX27GH/UT48OX+sETIcZ17o=) 3: 3130332e3137352e3230372e302f32342d3234203d3e20313437313234.roa (hash: aQ3bZ8U/53lOgq6IbJ4jaeEks7cypqeVb0bEi+y+Pus=) 4: 3130332e3137352e3230362e302f32342d3234203d3e20313437313234.roa (hash: eQ2W59Sl25b9+tbhRBYK+eiWkdxaKDr4YfWFXlk9jXI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/faa6a67d-cba3-427b-9055-5f528f2d232f/0/4A688B72A804A426A9096ECA60105A4D831C5FA8.crl rsync://repo-rpki.idnic.net/repo/faa6a67d-cba3-427b-9055-5f528f2d232f/0/4A688B72A804A426A9096ECA60105A4D831C5FA8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A688B72A804A426A9096ECA60105A4D831C5FA8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:08:84:9a:8f:f3:34:80:c0:38:00:7c:6c:b6:7a:23:96:c2:4f:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A688B72A804A426A9096ECA60105A4D831C5FA8 Validity Not Before: Oct 20 10:59:09 2025 GMT Not After : Oct 23 15:19:09 2025 GMT Subject: CN=2B816C670B3047366F701412176A24581490A152 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f4:db:bf:2b:e5:e3:7e:52:4c:84:ab:28:3a: 76:08:83:59:b9:98:7b:3e:b1:b3:cd:50:65:1e:d2: f8:f2:28:18:20:bf:72:e7:f0:f9:35:bc:bc:bf:c0: aa:82:d3:80:e2:36:b3:0d:5f:22:c1:d6:74:bd:21: 6b:5f:44:43:37:52:4a:ce:c2:52:bd:e7:94:6b:0c: a1:17:3e:c7:c1:83:9a:06:2f:d8:f3:c3:de:1c:1a: ac:7a:ef:33:5c:ed:e7:75:00:99:70:a4:1d:a4:2e: 1a:95:e9:f9:78:3b:be:5b:0c:db:0d:4e:f6:d5:80: fc:d8:0d:05:6e:d5:b1:e2:b8:56:49:70:32:c9:70: 4f:4f:41:df:a5:bf:b6:c1:2f:37:05:95:0c:9e:e8: 53:52:37:1f:06:99:c1:df:06:40:b2:9d:ff:00:b2: 48:a4:c5:76:de:fb:12:a8:57:d6:60:11:ae:ff:22: fe:17:98:f2:25:b0:e7:66:e9:e9:8c:03:bf:34:ed: 05:7d:23:64:a2:3d:41:2c:23:7b:39:5a:09:9b:1a: 0d:57:06:b7:ab:fd:92:a8:b1:16:e0:52:53:fb:2e: f7:5d:da:23:7b:a5:fa:11:ff:76:8e:2b:a2:61:0c: 0b:94:69:05:82:82:4e:d1:03:ea:b9:31:1a:82:29: 3e:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:81:6C:67:0B:30:47:36:6F:70:14:12:17:6A:24:58:14:90:A1:52 X509v3 Authority Key Identifier: keyid:4A:68:8B:72:A8:04:A4:26:A9:09:6E:CA:60:10:5A:4D:83:1C:5F:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/faa6a67d-cba3-427b-9055-5f528f2d232f/0/4A688B72A804A426A9096ECA60105A4D831C5FA8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A688B72A804A426A9096ECA60105A4D831C5FA8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/faa6a67d-cba3-427b-9055-5f528f2d232f/0/4A688B72A804A426A9096ECA60105A4D831C5FA8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:31:f0:cd:cf:3e:da:23:9e:12:c3:b8:b8:42:0e:49:39:b0: 74:7f:49:e0:0e:cf:d5:10:99:37:04:35:28:b7:13:2c:31:c0: 87:4a:4d:dc:16:26:d6:81:80:91:a4:f3:d2:d0:f3:e4:00:51: 5c:0f:0d:00:94:30:e5:0b:ce:21:d2:37:bc:91:9f:d9:0a:3a: 0b:13:82:eb:33:98:04:ca:9e:c2:c7:2f:34:f4:e1:c8:06:9a: 40:a0:4c:37:5b:66:3e:49:61:d0:4d:f5:f6:50:c7:d3:d0:98: 73:69:cf:d6:9b:3b:44:93:e2:dd:9a:32:cc:f2:4c:89:d3:73: 5d:f9:d0:6b:fb:7b:df:21:16:41:e1:c3:08:d5:bf:68:a7:c6: d9:fd:d3:53:e3:99:e6:5a:8a:eb:a1:1f:9a:54:34:ea:a6:4c: e2:04:cb:e2:80:68:ad:94:82:ac:55:dc:4f:ca:54:7b:38:ed: bd:fb:2d:96:b1:36:d5:c3:09:b3:70:1f:20:56:e6:80:df:56: ac:fd:c2:5a:d6:f5:ff:e1:62:f7:dd:d1:ea:67:28:fb:c4:75: 36:55:9c:1d:e9:76:32:5a:db:b5:cf:ad:9f:a5:65:64:bd:89: 23:81:da:02:d3:0d:a5:38:5c:4b:99:b1:e8:bc:c8:d9:42:2a: 88:98:10:57 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfgiEmo/zNIDAOAB8bLZ6I5bCT84wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEE2ODhCNzJBODA0QTQyNkE5MDk2RUNBNjAxMDVBNEQ4 MzFDNUZBODAeFw0yNTEwMjAxMDU5MDlaFw0yNTEwMjMxNTE5MDlaMDMxMTAvBgNV BAMTKDJCODE2QzY3MEIzMDQ3MzY2RjcwMTQxMjE3NkEyNDU4MTQ5MEExNTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC59Nu/K+XjflJMhKsoOnYIg1m5 mHs+sbPNUGUe0vjyKBggv3Ln8Pk1vLy/wKqC04DiNrMNXyLB1nS9IWtfREM3UkrO wlK955RrDKEXPsfBg5oGL9jzw94cGqx67zNc7ed1AJlwpB2kLhqV6fl4O75bDNsN TvbVgPzYDQVu1bHiuFZJcDLJcE9PQd+lv7bBLzcFlQye6FNSNx8GmcHfBkCynf8A skikxXbe+xKoV9ZgEa7/Iv4XmPIlsOdm6emMA7807QV9I2SiPUEsI3s5WgmbGg1X Brer/ZKosRbgUlP7Lvdd2iN7pfoR/3aOK6JhDAuUaQWCgk7RA+q5MRqCKT5dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUK4FsZwswRzZvcBQSF2okWBSQoVIwHwYDVR0j BBgwFoAUSmiLcqgEpCapCW7KYBBaTYMcX6gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YWE2YTY3ZC1jYmEzLTQyN2ItOTA1NS01ZjUyOGYyZDIzMmYvMC80QTY4OEI3MkE4 MDRBNDI2QTkwOTZFQ0E2MDEwNUE0RDgzMUM1RkE4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEE2ODhCNzJBODA0QTQyNkE5MDk2RUNBNjAxMDVBNEQ4MzFD NUZBOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmFhNmE2N2QtY2JhMy00MjdiLTkw NTUtNWY1MjhmMmQyMzJmLzAvNEE2ODhCNzJBODA0QTQyNkE5MDk2RUNBNjAxMDVB NEQ4MzFDNUZBOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJsx8M3PPtojnhLDuLhCDkk5sHR/SeAOz9UQ mTcENSi3EywxwIdKTdwWJtaBgJGk89LQ8+QAUVwPDQCUMOULziHSN7yRn9kKOgsT guszmATKnsLHLzT04cgGmkCgTDdbZj5JYdBN9fZQx9PQmHNpz9abO0ST4t2aMszy TInTc1350Gv7e98hFkHhwwjVv2inxtn901PjmeZaiuuhH5pUNOqmTOIEy+KAaK2U gqxV3E/KVHs47b37LZaxNtXDCbNwHyBW5oDfVqz9wlrW9f/hYvfd0epnKPvEdTZV nB3pdjJa27XPrZ+lZWS9iSOB2gLTDaU4XEuZsei8yNlCKoiYEFc= -----END CERTIFICATE-----Generated at Mon Oct 20 17:01:01 2025 by rpki-client