$ rpki-client -vvf repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/1/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.mft File: CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.mft (raw, json) Hash identifier: Jsx9JYWyuCImwtJuKP+nw2GesD8y+QQs5mhwnXtNnso= Subject key identifier: CF:0A:88:E0:47:76:1C:07:C9:B2:00:F4:05:BD:85:C6:F7:6D:D4:81 Authority key identifier: CF:A4:9B:8E:5D:9A:08:B7:A0:17:E5:B0:F8:87:E8:8F:99:A6:30:6C Certificate issuer: /CN=CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C Certificate serial: 157728E39872AC8B861EAB9D49E0AC729C7DDE2E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/1/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.mft Manifest number: BC Signing time: Tue 04 Nov 2025 10:01:21 +0000 Manifest this update: Tue 04 Nov 2025 09:56:21 +0000 Manifest next update: Fri 07 Nov 2025 14:04:21 +0000 Files and hashes: 1: 323030313a6466343a336134303a3a2f34382d3438203d3e20313533313132.roa (hash: jKBpF5n6aRwYVRtvawTuNUoC6fB2T5xMG66T9GHPZm8=) 2: CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.crl (hash: n86HX5qKsXY7tXlRqTplKjZHvHeMz7JuXHfWFgoeh5Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/1/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.crl rsync://repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/1/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 14:04:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:77:28:e3:98:72:ac:8b:86:1e:ab:9d:49:e0:ac:72:9c:7d:de:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C Validity Not Before: Nov 4 09:56:21 2025 GMT Not After : Nov 7 14:04:21 2025 GMT Subject: CN=CF0A88E047761C07C9B200F405BD85C6F76DD481 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:98:9b:73:11:18:30:3a:7f:7e:d4:9c:42:36: 77:5e:69:c7:b1:92:a0:39:6b:85:6c:c2:fb:0d:68: 1b:1a:cb:c1:60:63:12:cd:d9:91:51:9d:ab:d2:61: fa:ef:9b:a8:8f:86:d9:fa:17:f8:f8:01:eb:99:b6: 33:a9:ad:af:4c:24:f8:c5:37:98:6d:aa:dd:87:d5: a1:c4:a7:05:0d:a6:6b:63:64:9d:2d:b4:9a:9d:61: b9:29:51:3a:3e:0b:6e:a0:93:7c:c9:d6:aa:70:42: 77:03:2f:93:9a:9a:27:86:dd:28:c5:a1:d4:4b:87: 3f:94:29:d7:9d:09:8e:e2:5c:18:59:1a:e4:1a:20: c2:49:f2:86:c5:43:6c:ae:0b:66:1b:3f:da:5c:47: ee:d0:d9:f6:f7:04:47:28:12:a5:08:52:34:de:1d: 95:70:2e:97:90:8c:53:ef:23:cd:c5:f5:26:67:0a: 81:45:e5:ff:a9:09:8c:7d:b4:e8:df:49:c3:2e:08: d5:c8:4f:cd:07:78:11:15:18:89:e7:2f:70:4b:67: 18:66:3f:a1:e0:70:72:c2:b2:2f:01:24:98:bb:7b: d4:3d:13:11:cc:e8:37:1f:e1:29:fe:2b:c1:1a:61: b4:5e:49:12:13:fd:a0:22:59:ba:37:ac:50:fc:fa: 93:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:0A:88:E0:47:76:1C:07:C9:B2:00:F4:05:BD:85:C6:F7:6D:D4:81 X509v3 Authority Key Identifier: keyid:CF:A4:9B:8E:5D:9A:08:B7:A0:17:E5:B0:F8:87:E8:8F:99:A6:30:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/1/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/1/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:bd:58:7b:db:af:0e:25:24:d7:98:fa:24:2d:66:19:65:ab: 6f:ea:52:c6:cd:5e:ba:14:ad:0c:86:51:fc:a5:08:b1:6b:ac: c4:9a:a8:e1:92:16:25:97:bc:7d:cf:23:53:c0:31:72:1c:af: 2f:8f:13:c6:9d:86:60:61:f9:c3:68:f4:ed:e0:fd:82:89:64: 9e:6f:54:f5:80:96:14:64:4f:f5:cb:5d:6e:b4:6a:6c:89:c5: a3:e1:ab:c2:90:8b:f6:59:d4:8c:cd:59:d3:c1:a8:26:c6:bd: 95:13:c0:ff:21:cf:b9:69:21:8e:f4:f2:c6:9d:9e:b6:c1:71: 03:1a:d4:0b:de:bd:15:65:ce:fb:59:4d:82:de:e5:a6:cf:55: 39:6e:21:66:49:17:ea:4d:cb:41:d7:e1:a7:37:9c:9a:80:80: 3b:fd:8b:b6:94:10:87:85:4c:bd:6a:bd:bc:61:e3:21:f7:62: fb:80:0d:10:83:20:b8:a1:66:8d:1d:c7:39:c6:d5:76:77:33: fc:31:2c:c3:d6:39:8e:b0:70:e6:c2:be:20:1b:21:06:ca:c5: 81:07:79:a8:79:da:b1:ee:7a:aa:29:b4:76:db:31:ef:f8:8e: 1c:ce:09:28:35:b7:08:5e:78:e6:44:f1:4c:a0:d9:9f:6c:9e: 94:ee:2a:a3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFXco45hyrIuGHqudSeCscpx93i4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ZBNDlCOEU1RDlBMDhCN0EwMTdFNUIwRjg4N0U4OEY5 OUE2MzA2QzAeFw0yNTExMDQwOTU2MjFaFw0yNTExMDcxNDA0MjFaMDMxMTAvBgNV BAMTKENGMEE4OEUwNDc3NjFDMDdDOUIyMDBGNDA1QkQ4NUM2Rjc2REQ0ODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPmJtzERgwOn9+1JxCNndeacex kqA5a4VswvsNaBsay8FgYxLN2ZFRnavSYfrvm6iPhtn6F/j4AeuZtjOpra9MJPjF N5htqt2H1aHEpwUNpmtjZJ0ttJqdYbkpUTo+C26gk3zJ1qpwQncDL5OamieG3SjF odRLhz+UKdedCY7iXBhZGuQaIMJJ8obFQ2yuC2YbP9pcR+7Q2fb3BEcoEqUIUjTe HZVwLpeQjFPvI83F9SZnCoFF5f+pCYx9tOjfScMuCNXIT80HeBEVGInnL3BLZxhm P6HgcHLCsi8BJJi7e9Q9ExHM6Dcf4Sn+K8EaYbReSRIT/aAiWbo3rFD8+pNFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzwqI4Ed2HAfJsgD0Bb2Fxvdt1IEwHwYDVR0j BBgwFoAUz6Sbjl2aCLegF+Ww+Ifoj5mmMGwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NDU2NTE5ZS1hYjYxLTQ5NDMtYjNlOC0xMGJkZDYwODBmZGEvMS9DRkE0OUI4RTVE OUEwOEI3QTAxN0U1QjBGODg3RTg4Rjk5QTYzMDZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0ZBNDlCOEU1RDlBMDhCN0EwMTdFNUIwRjg4N0U4OEY5OUE2 MzA2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDQ1NjUxOWUtYWI2MS00OTQzLWIz ZTgtMTBiZGQ2MDgwZmRhLzEvQ0ZBNDlCOEU1RDlBMDhCN0EwMTdFNUIwRjg4N0U4 OEY5OUE2MzA2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACO9WHvbrw4lJNeY+iQtZhllq2/qUsbNXroU rQyGUfylCLFrrMSaqOGSFiWXvH3PI1PAMXIcry+PE8adhmBh+cNo9O3g/YKJZJ5v VPWAlhRkT/XLXW60amyJxaPhq8KQi/ZZ1IzNWdPBqCbGvZUTwP8hz7lpIY708sad nrbBcQMa1AvevRVlzvtZTYLe5abPVTluIWZJF+pNy0HX4ac3nJqAgDv9i7aUEIeF TL1qvbxh4yH3YvuADRCDILihZo0dxznG1XZ3M/wxLMPWOY6wcObCviAbIQbKxYEH eah52rHueqoptHbbMe/4jhzOCSg1twheeOZE8Uyg2Z9snpTuKqM= -----END CERTIFICATE-----Generated at Thu Nov 6 00:36:57 2025 by rpki-client