$ rpki-client -vvf repo-rpki.idnic.net/repo/24d108f7-08b2-409f-8a70-a9c67ae5ed22/0/4FA812FE6A4A85F790CB2740EF08836883716912.mft File: 4FA812FE6A4A85F790CB2740EF08836883716912.mft (raw, json) Hash identifier: nbxi/ML1tyjrH9JQ95UhuHlCHXGpBGWCoOW4kn4w83A= Subject key identifier: E4:DF:BB:66:98:14:F8:57:CD:37:C1:51:A3:7B:09:D2:E4:62:3D:13 Authority key identifier: 4F:A8:12:FE:6A:4A:85:F7:90:CB:27:40:EF:08:83:68:83:71:69:12 Certificate issuer: /CN=4FA812FE6A4A85F790CB2740EF08836883716912 Certificate serial: 6126CE01EB52703D2446F25607A3C7C3AF5B2FB1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4FA812FE6A4A85F790CB2740EF08836883716912.cer Subject info access: rsync://repo-rpki.idnic.net/repo/24d108f7-08b2-409f-8a70-a9c67ae5ed22/0/4FA812FE6A4A85F790CB2740EF08836883716912.mft Manifest number: 04EA Signing time: Mon 03 Nov 2025 23:00:50 +0000 Manifest this update: Mon 03 Nov 2025 22:55:50 +0000 Manifest next update: Fri 07 Nov 2025 10:28:50 +0000 Files and hashes: 1: 3137352e3130362e31362e302f32322d3234203d3e20313331373637.roa (hash: FSa5jhvEvK/r9qXQQGlnZIm8LVRjHW9YNMDzzN5f0xI=) 2: 4FA812FE6A4A85F790CB2740EF08836883716912.crl (hash: mUxfBIhv7+omXpJZfujuZ/ajuTlRCN/xTlfQkGn6ePQ=) 3: 323430303a386238303a3a2f33322d3332203d3e20313331373637.roa (hash: WzhaKVVHhW/0GGZkiM6FBwtbr9n3QYlgPERNMN1x09w=) 4: 3130332e39302e3139362e302f32322d3234203d3e20313331373637.roa (hash: 0If+6/mMOFFyP2FqyKGK3txMDLzFU3f4sqXMr4WKhzY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/24d108f7-08b2-409f-8a70-a9c67ae5ed22/0/4FA812FE6A4A85F790CB2740EF08836883716912.crl rsync://repo-rpki.idnic.net/repo/24d108f7-08b2-409f-8a70-a9c67ae5ed22/0/4FA812FE6A4A85F790CB2740EF08836883716912.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4FA812FE6A4A85F790CB2740EF08836883716912.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 10:28:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:26:ce:01:eb:52:70:3d:24:46:f2:56:07:a3:c7:c3:af:5b:2f:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4FA812FE6A4A85F790CB2740EF08836883716912 Validity Not Before: Nov 3 22:55:50 2025 GMT Not After : Nov 7 10:28:50 2025 GMT Subject: CN=E4DFBB669814F857CD37C151A37B09D2E4623D13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:70:5a:3b:b9:cc:91:f4:95:c0:d1:90:59:f8: e9:1c:14:64:b7:68:c8:88:f7:07:0b:41:d3:5b:14: 78:3f:7e:ae:e9:1d:32:2c:05:22:7b:0d:85:1c:65: 7f:dd:b5:99:b3:1f:de:b6:09:0c:9b:99:d2:e8:cd: e7:20:cc:0f:e1:7f:12:bc:38:7a:44:f1:25:01:55: 11:43:45:34:3a:db:df:01:32:73:94:64:13:86:ac: 38:56:1e:ec:cd:86:4d:63:92:59:69:1a:4c:82:bd: 9d:9c:08:9f:67:b0:e6:a3:33:6f:26:bc:98:7b:bc: 66:00:71:b9:64:ea:69:5b:d0:7f:4b:92:b4:3a:ab: ce:2d:2d:fc:00:76:1e:5f:29:66:aa:86:82:3c:9c: 27:c2:c5:40:e4:73:15:12:a4:0a:8c:9b:33:f7:5a: ef:8f:0d:09:1c:f3:f6:c2:88:b3:8d:4d:82:08:fc: 76:e0:03:22:1e:7d:1c:c2:db:fc:7e:7b:ae:11:0e: 11:1c:5a:c4:ce:42:58:1a:00:3f:3d:55:ff:3d:69: 3d:35:74:01:ac:01:26:3c:3c:37:b3:05:ea:f1:67: 21:d4:73:5d:88:88:38:6c:e8:47:db:f4:88:fe:14: 0a:76:19:99:76:0e:1a:a2:e7:a4:d5:05:72:77:84: 27:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:DF:BB:66:98:14:F8:57:CD:37:C1:51:A3:7B:09:D2:E4:62:3D:13 X509v3 Authority Key Identifier: keyid:4F:A8:12:FE:6A:4A:85:F7:90:CB:27:40:EF:08:83:68:83:71:69:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/24d108f7-08b2-409f-8a70-a9c67ae5ed22/0/4FA812FE6A4A85F790CB2740EF08836883716912.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4FA812FE6A4A85F790CB2740EF08836883716912.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/24d108f7-08b2-409f-8a70-a9c67ae5ed22/0/4FA812FE6A4A85F790CB2740EF08836883716912.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:77:e6:e6:5a:c6:14:cd:ac:09:ee:f0:69:15:19:41:2b:ff: ff:8c:75:cc:5b:d0:82:6b:c6:7c:3d:e0:34:50:73:ae:f6:a8: 81:c2:c1:87:89:d6:e5:2f:60:22:7a:1a:fb:47:cd:30:2f:42: 4a:4a:c0:16:28:98:60:75:04:69:c9:81:3c:ce:6f:a8:ed:a0: 51:d2:1a:c1:78:14:56:07:f5:99:09:a6:f7:b3:42:f8:4d:9e: d3:9d:d5:7e:13:5b:57:d9:33:4e:d4:5c:f6:83:47:50:9e:42: 33:2d:ec:ad:d6:46:f3:46:75:8a:21:42:0f:36:1e:96:2f:99: e3:ea:6c:7e:bf:f0:2c:d8:90:9a:e8:04:45:8b:7c:a3:17:a9: 73:d4:88:6c:f6:6a:aa:3a:2a:0b:6f:ce:b0:f7:0d:2a:dd:23: 45:da:11:ce:95:99:72:d8:95:c8:2b:ca:dd:36:dd:ad:7c:9d: b4:75:66:2e:c9:bd:63:f7:f5:84:9f:c5:32:15:7d:25:6e:c2: 1c:2c:20:d8:82:11:7e:8b:57:a7:56:7f:66:d1:65:5d:ec:d9: f8:5e:29:5b:5a:99:ba:19:2b:35:6c:37:a4:88:30:1c:73:7c: de:03:0b:62:ee:b6:a1:ae:de:a1:46:35:21:61:3d:42:b2:a6: be:20:05:58 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYSbOAetScD0kRvJWB6PHw69bL7EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEZBODEyRkU2QTRBODVGNzkwQ0IyNzQwRUYwODgzNjg4 MzcxNjkxMjAeFw0yNTExMDMyMjU1NTBaFw0yNTExMDcxMDI4NTBaMDMxMTAvBgNV BAMTKEU0REZCQjY2OTgxNEY4NTdDRDM3QzE1MUEzN0IwOUQyRTQ2MjNEMTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRcFo7ucyR9JXA0ZBZ+OkcFGS3 aMiI9wcLQdNbFHg/fq7pHTIsBSJ7DYUcZX/dtZmzH962CQybmdLozecgzA/hfxK8 OHpE8SUBVRFDRTQ6298BMnOUZBOGrDhWHuzNhk1jkllpGkyCvZ2cCJ9nsOajM28m vJh7vGYAcblk6mlb0H9LkrQ6q84tLfwAdh5fKWaqhoI8nCfCxUDkcxUSpAqMmzP3 Wu+PDQkc8/bCiLONTYII/HbgAyIefRzC2/x+e64RDhEcWsTOQlgaAD89Vf89aT01 dAGsASY8PDezBerxZyHUc12IiDhs6Efb9Ij+FAp2GZl2Dhqi56TVBXJ3hCctAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5N+7ZpgU+FfNN8FRo3sJ0uRiPRMwHwYDVR0j BBgwFoAUT6gS/mpKhfeQyydA7wiDaINxaRIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NGQxMDhmNy0wOGIyLTQwOWYtOGE3MC1hOWM2N2FlNWVkMjIvMC80RkE4MTJGRTZB NEE4NUY3OTBDQjI3NDBFRjA4ODM2ODgzNzE2OTEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEZBODEyRkU2QTRBODVGNzkwQ0IyNzQwRUYwODgzNjg4Mzcx NjkxMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjRkMTA4ZjctMDhiMi00MDlmLThh NzAtYTljNjdhZTVlZDIyLzAvNEZBODEyRkU2QTRBODVGNzkwQ0IyNzQwRUYwODgz Njg4MzcxNjkxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADZ35uZaxhTNrAnu8GkVGUEr//+Mdcxb0IJr xnw94DRQc672qIHCwYeJ1uUvYCJ6GvtHzTAvQkpKwBYomGB1BGnJgTzOb6jtoFHS GsF4FFYH9ZkJpvezQvhNntOd1X4TW1fZM07UXPaDR1CeQjMt7K3WRvNGdYohQg82 HpYvmePqbH6/8CzYkJroBEWLfKMXqXPUiGz2aqo6KgtvzrD3DSrdI0XaEc6VmXLY lcgryt023a18nbR1Zi7JvWP39YSfxTIVfSVuwhwsINiCEX6LV6dWf2bRZV3s2fhe KVtamboZKzVsN6SIMBxzfN4DC2LutqGu3qFGNSFhPUKypr4gBVg= -----END CERTIFICATE-----Generated at Wed Nov 5 00:53:05 2025 by rpki-client