$ rpki-client -vvf repo-rpki.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/4A4CC1D625A4519B23D73717C879F10A6173AEAB.mft File: 4A4CC1D625A4519B23D73717C879F10A6173AEAB.mft (raw, json) Hash identifier: C3ZUTAMaW99n5YwqmsXVaGXE3cS95QrZpk/9qvZHRjg= Subject key identifier: 86:00:84:C6:E7:87:A7:0B:E6:EE:66:C8:6A:F6:AC:C5:AE:D6:35:91 Authority key identifier: 4A:4C:C1:D6:25:A4:51:9B:23:D7:37:17:C8:79:F1:0A:61:73:AE:AB Certificate issuer: /CN=4A4CC1D625A4519B23D73717C879F10A6173AEAB Certificate serial: 08AE92F76D328B7164C71EBE38E86D01757C3F44 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A4CC1D625A4519B23D73717C879F10A6173AEAB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/4A4CC1D625A4519B23D73717C879F10A6173AEAB.mft Manifest number: 02CF Signing time: Tue 04 Nov 2025 04:41:33 +0000 Manifest this update: Tue 04 Nov 2025 04:36:33 +0000 Manifest next update: Fri 07 Nov 2025 13:09:33 +0000 Files and hashes: 1: 3130332e3233332e3131312e302f32342d3234203d3e203633343838.roa (hash: z/YOZWWGc41LH9oZ4KGtThI9u3npxHOn37nVJl/FSQI=) 2: 3130332e3233332e3131302e302f32342d3234203d3e203338373538.roa (hash: XkLmfviGVp2EGPILR+re9nqIYX0YPT0FpVRTvK0kmBs=) 3: 4A4CC1D625A4519B23D73717C879F10A6173AEAB.crl (hash: 5AGtTcTUoTz0PiuKMqw3YBuksmIekB0M0VeIFPEPaFo=) 4: 3130332e3233332e3130392e302f32342d3234203d3e203633343838.roa (hash: GdSTW/OHYTEI/PWuMmTToeVUXPmcixtoxCsRQug+8zk=) 5: 3130332e3233332e3130382e302f32342d3234203d3e203633343838.roa (hash: NTu0pfg5O9FNTQVT/y9O87yuBsSqMNv0sxLjGwJCf2Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/4A4CC1D625A4519B23D73717C879F10A6173AEAB.crl rsync://repo-rpki.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/4A4CC1D625A4519B23D73717C879F10A6173AEAB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A4CC1D625A4519B23D73717C879F10A6173AEAB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 13:09:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:ae:92:f7:6d:32:8b:71:64:c7:1e:be:38:e8:6d:01:75:7c:3f:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A4CC1D625A4519B23D73717C879F10A6173AEAB Validity Not Before: Nov 4 04:36:33 2025 GMT Not After : Nov 7 13:09:33 2025 GMT Subject: CN=860084C6E787A70BE6EE66C86AF6ACC5AED63591 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:6d:7d:7f:b4:7c:3f:aa:ec:48:f3:c9:7a:89: 98:80:88:aa:7a:ea:cc:28:bf:08:93:82:30:1d:3d: 67:b2:93:d4:f8:13:bb:c2:46:be:01:b1:ef:19:83: 67:bc:ef:9f:45:70:00:1b:32:98:55:9c:8d:ff:bc: 6e:82:60:f9:f6:08:b8:21:0d:bb:33:30:e7:5e:bc: bb:7d:67:2f:03:17:8d:77:50:09:f3:c7:7a:7b:bb: 1f:cc:77:fe:cf:77:8c:29:b9:a9:d5:4c:05:6b:8c: f2:ba:7b:c6:aa:63:63:0d:98:5c:a0:69:80:c9:37: 5e:f4:99:f4:92:a8:55:63:83:22:f7:33:4a:2b:02: 63:7a:a1:46:a9:ae:99:94:c7:61:77:db:11:7b:04: 2b:a8:b5:b1:b9:43:c6:df:45:bf:6e:6f:80:5e:64: cc:14:cc:77:01:98:bc:06:37:aa:c0:23:2e:9b:51: 46:0f:5b:63:43:d1:f3:c0:e4:2a:1e:c0:26:95:ef: 99:b2:cd:1e:8f:f9:3e:0c:71:34:ea:ab:2c:d7:22: 4f:d6:f1:51:e6:00:35:2a:e8:ae:bc:62:bc:ea:ca: d6:72:ee:38:39:7c:08:c2:64:72:fd:cf:bb:e1:b4: 04:23:4f:90:ec:31:eb:86:3e:75:d8:0d:a7:91:8e: bf:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:00:84:C6:E7:87:A7:0B:E6:EE:66:C8:6A:F6:AC:C5:AE:D6:35:91 X509v3 Authority Key Identifier: keyid:4A:4C:C1:D6:25:A4:51:9B:23:D7:37:17:C8:79:F1:0A:61:73:AE:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/4A4CC1D625A4519B23D73717C879F10A6173AEAB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A4CC1D625A4519B23D73717C879F10A6173AEAB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/4A4CC1D625A4519B23D73717C879F10A6173AEAB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:f8:3a:23:1f:0b:17:86:52:43:d5:5a:b9:ef:a3:57:18:89: ca:68:2a:b7:e0:d6:9b:c5:8d:03:e1:c7:40:c6:e2:2c:d2:d8: 29:5a:1d:98:34:a9:2a:07:05:42:65:dd:cc:6a:3c:ae:41:8c: 34:7f:b0:dc:b7:a2:63:40:a9:c9:75:75:25:93:5d:cf:b3:fe: df:06:03:1f:b5:61:29:47:9f:33:80:2b:71:75:a7:58:bf:ed: d0:8d:b2:45:58:9e:db:f4:0c:2b:fe:cb:b6:6a:cd:23:ba:6e: 6c:5d:f0:b5:04:2b:5e:98:83:8c:50:60:80:33:74:18:36:53: 09:2b:16:e8:d7:22:f6:52:f7:90:b1:88:26:bd:35:c4:6f:f3: 24:94:b2:ad:38:91:3a:55:5f:ff:11:cb:84:58:76:c7:bc:cd: 5a:00:50:6e:36:b8:93:dd:62:99:97:e1:ae:6a:c3:bf:f7:23: 1b:46:7b:2a:27:8c:03:38:e8:55:6c:a7:02:3b:e3:76:d0:ba: f7:a6:08:98:6a:2f:66:b2:d8:4b:58:e7:12:02:92:40:0e:d2: 03:3b:ba:d8:dd:ce:c0:b6:14:f3:1a:21:4e:73:6d:09:eb:78: 21:b2:d0:fc:56:a2:09:a9:9b:78:b8:64:86:7e:db:6f:78:7d: f1:67:a2:2d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCK6S920yi3Fkxx6+OOhtAXV8P0QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEE0Q0MxRDYyNUE0NTE5QjIzRDczNzE3Qzg3OUYxMEE2 MTczQUVBQjAeFw0yNTExMDQwNDM2MzNaFw0yNTExMDcxMzA5MzNaMDMxMTAvBgNV BAMTKDg2MDA4NEM2RTc4N0E3MEJFNkVFNjZDODZBRjZBQ0M1QUVENjM1OTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVbX1/tHw/quxI88l6iZiAiKp6 6swovwiTgjAdPWeyk9T4E7vCRr4Bse8Zg2e8759FcAAbMphVnI3/vG6CYPn2CLgh DbszMOdevLt9Zy8DF413UAnzx3p7ux/Md/7Pd4wpuanVTAVrjPK6e8aqY2MNmFyg aYDJN170mfSSqFVjgyL3M0orAmN6oUaprpmUx2F32xF7BCuotbG5Q8bfRb9ub4Be ZMwUzHcBmLwGN6rAIy6bUUYPW2ND0fPA5CoewCaV75myzR6P+T4McTTqqyzXIk/W 8VHmADUq6K68YrzqytZy7jg5fAjCZHL9z7vhtAQjT5DsMeuGPnXYDaeRjr/nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhgCExueHpwvm7mbIavasxa7WNZEwHwYDVR0j BBgwFoAUSkzB1iWkUZsj1zcXyHnxCmFzrqswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZWQ0NmY4Mi1jZjExLTRlMzItYjA1MS02YWMzMzRhOTI2MjIvMC80QTRDQzFENjI1 QTQ1MTlCMjNENzM3MTdDODc5RjEwQTYxNzNBRUFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEE0Q0MxRDYyNUE0NTE5QjIzRDczNzE3Qzg3OUYxMEE2MTcz QUVBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWVkNDZmODItY2YxMS00ZTMyLWIw NTEtNmFjMzM0YTkyNjIyLzAvNEE0Q0MxRDYyNUE0NTE5QjIzRDczNzE3Qzg3OUYx MEE2MTczQUVBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIv4OiMfCxeGUkPVWrnvo1cYicpoKrfg1pvF jQPhx0DG4izS2ClaHZg0qSoHBUJl3cxqPK5BjDR/sNy3omNAqcl1dSWTXc+z/t8G Ax+1YSlHnzOAK3F1p1i/7dCNskVYntv0DCv+y7ZqzSO6bmxd8LUEK16Yg4xQYIAz dBg2UwkrFujXIvZS95CxiCa9NcRv8ySUsq04kTpVX/8Ry4RYdse8zVoAUG42uJPd YpmX4a5qw7/3IxtGeyonjAM46FVspwI743bQuvemCJhqL2ay2EtY5xICkkAO0gM7 utjdzsC2FPMaIU5zbQnreCGy0PxWogmpm3i4ZIZ+2294ffFnoi0= -----END CERTIFICATE-----Generated at Tue Nov 4 12:54:28 2025 by rpki-client