$ rpki-client -vvf repo-rpki.idnic.net/repo/fd3a2fdf-bcba-4757-b366-e1a0ad2d374a/0/4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.mft File: 4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.mft (raw, json) Hash identifier: ndvBTAqB6GtloZWolYuHOQsNoB53u+/iXCe7d1+osSg= Subject key identifier: 2E:98:69:99:7A:7C:92:F6:0D:D4:EE:D4:E6:B6:C6:5C:06:9D:19:44 Authority key identifier: 4A:37:76:4C:C8:0D:1B:8A:68:19:E0:F0:F1:45:46:6E:0B:E5:2C:BD Certificate issuer: /CN=4A37764CC80D1B8A6819E0F0F145466E0BE52CBD Certificate serial: 5F0C4C198406AB0173F51DDAF59982D4E3F17A59 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fd3a2fdf-bcba-4757-b366-e1a0ad2d374a/0/4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.mft Manifest number: FC Signing time: Sun 19 Oct 2025 11:31:38 +0000 Manifest this update: Sun 19 Oct 2025 11:26:38 +0000 Manifest next update: Wed 22 Oct 2025 16:39:38 +0000 Files and hashes: 1: 4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.crl (hash: g6/lIcoXePCBwUgnGNjjTLJ5tHvLbRspS0M+2nMwiYE=) 2: 3135372e31302e36332e302f32342d3234203d3e20313532303835.roa (hash: 9mpAVpAO+aHJhHpBlGcLDx3eGU5On+hoBdAGOhixT1Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fd3a2fdf-bcba-4757-b366-e1a0ad2d374a/0/4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.crl rsync://repo-rpki.idnic.net/repo/fd3a2fdf-bcba-4757-b366-e1a0ad2d374a/0/4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 16:39:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:0c:4c:19:84:06:ab:01:73:f5:1d:da:f5:99:82:d4:e3:f1:7a:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A37764CC80D1B8A6819E0F0F145466E0BE52CBD Validity Not Before: Oct 19 11:26:38 2025 GMT Not After : Oct 22 16:39:38 2025 GMT Subject: CN=2E9869997A7C92F60DD4EED4E6B6C65C069D1944 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ec:b6:e8:10:e3:cb:76:fb:e3:52:43:fb:5f: da:06:24:ce:3e:bf:22:94:90:17:49:92:2b:90:24: a0:b4:71:d3:26:a8:14:1d:6f:57:e0:ae:3c:98:6e: e8:44:f8:b2:e9:65:71:f3:d4:4a:1d:6e:11:e0:83: 03:36:ff:5f:97:6e:c9:17:7a:7e:b6:ec:0c:1c:35: 40:15:6d:7d:12:b8:c2:0a:0d:35:76:54:e3:dd:6a: 5c:69:f4:47:ff:55:db:7d:a6:bf:f2:1e:c5:df:df: 26:be:03:87:7f:4a:18:8c:b3:01:75:93:3e:a5:a8: 46:c5:c0:d1:64:c8:e5:c1:bb:72:5c:08:ad:4f:e1: 18:28:ad:55:79:34:03:3e:23:cc:a3:52:cd:8b:26: a6:61:c6:87:cf:de:93:86:92:d3:15:3f:de:5a:c2: dc:2e:6f:05:75:83:b8:41:34:9d:aa:f6:b3:4f:4d: a4:34:19:7c:f8:22:53:29:ca:6f:d2:1f:c9:e4:ad: 93:b3:8c:05:55:d8:a0:a1:1b:49:2c:fe:4c:ac:01: b1:1c:a3:3e:85:35:b1:5c:d3:d5:9a:e8:bb:89:e2: 18:4b:21:03:f8:8b:5a:2b:66:0b:69:66:5e:7f:6c: a3:8e:4f:d9:be:85:be:7e:f2:9a:33:32:81:fd:ab: 07:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:98:69:99:7A:7C:92:F6:0D:D4:EE:D4:E6:B6:C6:5C:06:9D:19:44 X509v3 Authority Key Identifier: keyid:4A:37:76:4C:C8:0D:1B:8A:68:19:E0:F0:F1:45:46:6E:0B:E5:2C:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fd3a2fdf-bcba-4757-b366-e1a0ad2d374a/0/4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fd3a2fdf-bcba-4757-b366-e1a0ad2d374a/0/4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:64:3e:27:85:01:98:90:84:b9:85:f5:60:c4:2c:5d:01:24: 3a:0b:98:eb:d6:b5:34:ec:4f:75:61:54:65:79:0c:a0:55:fb: 08:51:4b:9b:bf:91:ad:f3:c0:47:cb:5a:9b:0c:a4:db:20:b4: 12:04:b1:b9:64:36:a9:3b:4d:13:d9:81:07:12:9b:b9:39:97: 48:7e:15:70:ce:4a:a7:28:fe:da:08:e4:d4:8b:56:45:b2:a0: 61:18:23:af:57:cf:02:9a:c7:51:f2:85:2c:85:8f:ae:40:eb: 8f:09:3e:75:9f:b5:29:87:fb:24:b4:76:95:d9:ba:ce:19:78: 8d:ab:c3:cd:a1:44:4a:ec:45:b0:42:bf:0c:15:7c:da:41:5a: e4:1e:3a:3a:6e:ed:9c:6c:72:41:c8:a5:ff:a1:c9:ed:1a:85: c9:70:c2:59:b8:32:6a:00:ef:fa:cb:2c:02:75:40:9f:03:af: 01:47:7b:5a:59:c5:86:ad:90:a2:a3:1e:47:46:01:18:96:54: d0:cb:4a:16:14:6e:6c:bc:4d:2b:62:c7:33:4d:63:75:f9:e6: f1:2f:69:51:a3:5c:bb:26:dd:62:03:9f:a6:9d:6c:0a:ab:77: c7:c3:ab:07:51:c7:3e:14:ec:a2:07:c9:cb:d8:37:b8:95:82: 85:c5:77:00 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXwxMGYQGqwFz9R3a9ZmC1OPxelkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEEzNzc2NENDODBEMUI4QTY4MTlFMEYwRjE0NTQ2NkUw QkU1MkNCRDAeFw0yNTEwMTkxMTI2MzhaFw0yNTEwMjIxNjM5MzhaMDMxMTAvBgNV BAMTKDJFOTg2OTk5N0E3QzkyRjYwREQ0RUVENEU2QjZDNjVDMDY5RDE5NDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr7LboEOPLdvvjUkP7X9oGJM4+ vyKUkBdJkiuQJKC0cdMmqBQdb1fgrjyYbuhE+LLpZXHz1EodbhHggwM2/1+XbskX en627AwcNUAVbX0SuMIKDTV2VOPdalxp9Ef/Vdt9pr/yHsXf3ya+A4d/ShiMswF1 kz6lqEbFwNFkyOXBu3JcCK1P4RgorVV5NAM+I8yjUs2LJqZhxofP3pOGktMVP95a wtwubwV1g7hBNJ2q9rNPTaQ0GXz4IlMpym/SH8nkrZOzjAVV2KChG0ks/kysAbEc oz6FNbFc09Wa6LuJ4hhLIQP4i1orZgtpZl5/bKOOT9m+hb5+8pozMoH9qweVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULphpmXp8kvYN1O7U5rbGXAadGUQwHwYDVR0j BBgwFoAUSjd2TMgNG4poGeDw8UVGbgvlLL0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZDNhMmZkZi1iY2JhLTQ3NTctYjM2Ni1lMWEwYWQyZDM3NGEvMC80QTM3NzY0Q0M4 MEQxQjhBNjgxOUUwRjBGMTQ1NDY2RTBCRTUyQ0JELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNEEzNzc2NENDODBEMUI4QTY4MTlFMEYwRjE0NTQ2NkUwQkU1 MkNCRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmQzYTJmZGYtYmNiYS00NzU3LWIz NjYtZTFhMGFkMmQzNzRhLzAvNEEzNzc2NENDODBEMUI4QTY4MTlFMEYwRjE0NTQ2 NkUwQkU1MkNCRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJlkPieFAZiQhLmF9WDELF0BJDoLmOvWtTTs T3VhVGV5DKBV+whRS5u/ka3zwEfLWpsMpNsgtBIEsblkNqk7TRPZgQcSm7k5l0h+ FXDOSqco/toI5NSLVkWyoGEYI69XzwKax1HyhSyFj65A648JPnWftSmH+yS0dpXZ us4ZeI2rw82hRErsRbBCvwwVfNpBWuQeOjpu7ZxsckHIpf+hye0ahclwwlm4MmoA 7/rLLAJ1QJ8DrwFHe1pZxYatkKKjHkdGARiWVNDLShYUbmy8TStixzNNY3X55vEv aVGjXLsm3WIDn6adbAqrd8fDqwdRxz4U7KIHycvYN7iVgoXFdwA= -----END CERTIFICATE-----Generated at Tue Oct 21 04:49:34 2025 by rpki-client