$ rpki-client -vvf repo-rpki.idnic.net/repo/27ee6bf3-2bda-4ca4-a5e7-6e70632404b4/0/4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.mft File: 4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.mft (raw, json) Hash identifier: s98/0SfG82o0iJIi4SB3Xp0IJUoKPcDxDsAkShNjJDM= Subject key identifier: 04:75:F2:F8:8C:EB:91:15:6E:DA:D4:23:C3:AF:F2:7A:B9:09:E3:BE Authority key identifier: 4A:AA:6F:5B:5D:0E:68:58:FC:56:A3:04:65:5C:7B:B3:97:51:8D:CC Certificate issuer: /CN=4AAA6F5B5D0E6858FC56A304655C7BB397518DCC Certificate serial: 1ACA0A7B784BCBD18E4D446F1675E8C5EB69C1F9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/27ee6bf3-2bda-4ca4-a5e7-6e70632404b4/0/4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.mft Manifest number: 01A8 Signing time: Sun 02 Nov 2025 11:20:48 +0000 Manifest this update: Sun 02 Nov 2025 11:15:48 +0000 Manifest next update: Wed 05 Nov 2025 22:23:48 +0000 Files and hashes: 1: 4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.crl (hash: lRrCYHjf67oeXhLCpJ9pZgSN0pRrmSGgtamA1Lg1HXw=) 2: 3130332e3231372e37362e302f32342d3234203d3e20313431393035.roa (hash: nXIgwMlbCEiRLhTmQpk3ILcP6WiZR0pqc4IDqdZRoJI=) 3: 3130332e3136342e38342e302f32342d3234203d3e20313431393035.roa (hash: 8uomqJJ5dPxSbtw5AaFHahACABASWlHMbpsa55zMpZI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/27ee6bf3-2bda-4ca4-a5e7-6e70632404b4/0/4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.crl rsync://repo-rpki.idnic.net/repo/27ee6bf3-2bda-4ca4-a5e7-6e70632404b4/0/4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 22:23:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:ca:0a:7b:78:4b:cb:d1:8e:4d:44:6f:16:75:e8:c5:eb:69:c1:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4AAA6F5B5D0E6858FC56A304655C7BB397518DCC Validity Not Before: Nov 2 11:15:48 2025 GMT Not After : Nov 5 22:23:48 2025 GMT Subject: CN=0475F2F88CEB91156EDAD423C3AFF27AB909E3BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ea:87:cd:c4:1d:f9:da:73:bc:0e:0c:90:93: 62:0d:10:33:f6:81:74:70:6b:d6:4b:e0:26:bc:3f: 23:88:1f:1c:cf:9e:08:9a:5e:a6:f5:9e:fc:48:2f: a1:56:86:73:57:66:e1:1b:8b:61:c1:b3:33:d7:1d: 26:81:5b:61:f4:c0:95:09:f2:96:f7:8a:ee:89:61: f7:c6:b8:36:2e:7f:f3:a0:f2:33:53:97:20:76:87: 1c:9e:1c:bc:61:ea:3d:45:8d:52:54:bd:06:68:4c: c6:a6:e1:00:15:7f:01:33:e0:d5:87:39:be:1b:e2: e8:68:67:20:c9:8e:30:8e:17:f2:45:8a:13:18:3e: b0:99:d0:ca:e8:a4:1b:8e:a4:e8:56:e2:8a:07:64: c3:e5:94:9c:46:02:a2:00:cb:31:07:bb:f6:99:a4: 7e:17:6c:b1:e4:76:6c:b0:9a:ec:61:03:5b:6a:4c: 90:d3:1c:47:04:6e:d2:d3:e7:40:51:11:3a:50:49: 6a:12:1b:b8:1a:66:8f:0d:e0:c3:ed:7d:76:f6:2f: 07:3d:ae:b3:54:3a:fc:7c:e4:af:36:05:31:c0:72: c5:07:28:b2:b7:75:71:d0:f8:e4:60:fe:49:93:c1: 8e:05:5f:5e:ce:af:88:23:24:12:8b:d0:16:b1:a2: ce:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:75:F2:F8:8C:EB:91:15:6E:DA:D4:23:C3:AF:F2:7A:B9:09:E3:BE X509v3 Authority Key Identifier: keyid:4A:AA:6F:5B:5D:0E:68:58:FC:56:A3:04:65:5C:7B:B3:97:51:8D:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/27ee6bf3-2bda-4ca4-a5e7-6e70632404b4/0/4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27ee6bf3-2bda-4ca4-a5e7-6e70632404b4/0/4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:a0:ae:ec:6f:ef:cf:a4:b7:5c:3c:87:71:1c:53:4d:b2:e3: 36:f1:2b:7d:9b:57:f8:ad:8f:e0:9b:26:ab:7a:d6:c6:8e:9d: a6:db:59:31:6c:37:f4:66:4a:4a:46:4f:a1:c0:d6:7b:05:91: 1e:af:fc:27:4c:a0:4b:47:67:88:3b:d3:26:cd:6e:52:21:04: cd:de:10:7f:69:d3:2b:27:a0:99:dc:da:70:75:5b:ae:82:d0: 21:99:73:86:f5:18:5a:39:4e:61:8b:e3:2a:fa:56:b5:64:cb: df:19:e7:64:93:ed:10:ff:79:13:58:02:5a:30:21:ab:83:d9: 22:f0:5c:e1:9b:8b:90:6c:6d:ad:ae:c0:58:cb:ff:af:b4:dd: 70:03:17:ff:e2:9d:9d:96:45:db:a0:47:4c:3d:9e:aa:8b:f7: 3c:3d:91:1a:27:d0:7c:42:3b:a5:aa:87:64:ff:65:84:10:3d: c2:c4:b4:1a:f6:f4:d0:71:d8:dd:fb:ee:5e:df:9e:aa:d6:3f: 76:16:8a:63:29:76:e6:1a:c0:f0:d3:0f:ec:ea:15:29:f9:98: 71:88:71:28:54:cd:77:1a:83:86:db:c7:e8:01:f7:2f:ef:07: 62:61:19:75:18:f5:33:57:28:e3:d6:68:52:3f:c5:19:f4:17: dd:2e:1d:cd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGsoKe3hLy9GOTURvFnXoxetpwfkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEFBQTZGNUI1RDBFNjg1OEZDNTZBMzA0NjU1QzdCQjM5 NzUxOERDQzAeFw0yNTExMDIxMTE1NDhaFw0yNTExMDUyMjIzNDhaMDMxMTAvBgNV BAMTKDA0NzVGMkY4OENFQjkxMTU2RURBRDQyM0MzQUZGMjdBQjkwOUUzQkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx6ofNxB352nO8DgyQk2INEDP2 gXRwa9ZL4Ca8PyOIHxzPngiaXqb1nvxIL6FWhnNXZuEbi2HBszPXHSaBW2H0wJUJ 8pb3iu6JYffGuDYuf/Og8jNTlyB2hxyeHLxh6j1FjVJUvQZoTMam4QAVfwEz4NWH Ob4b4uhoZyDJjjCOF/JFihMYPrCZ0MropBuOpOhW4ooHZMPllJxGAqIAyzEHu/aZ pH4XbLHkdmywmuxhA1tqTJDTHEcEbtLT50BRETpQSWoSG7gaZo8N4MPtfXb2Lwc9 rrNUOvx85K82BTHAcsUHKLK3dXHQ+ORg/kmTwY4FX17Or4gjJBKL0Baxos4/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBHXy+IzrkRVu2tQjw6/yerkJ474wHwYDVR0j BBgwFoAUSqpvW10OaFj8VqMEZVx7s5dRjcwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y N2VlNmJmMy0yYmRhLTRjYTQtYTVlNy02ZTcwNjMyNDA0YjQvMC80QUFBNkY1QjVE MEU2ODU4RkM1NkEzMDQ2NTVDN0JCMzk3NTE4RENDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEFBQTZGNUI1RDBFNjg1OEZDNTZBMzA0NjU1QzdCQjM5NzUx OERDQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjdlZTZiZjMtMmJkYS00Y2E0LWE1 ZTctNmU3MDYzMjQwNGI0LzAvNEFBQTZGNUI1RDBFNjg1OEZDNTZBMzA0NjU1QzdC QjM5NzUxOERDQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJCgruxv78+kt1w8h3EcU02y4zbxK32bV/it j+CbJqt61saOnabbWTFsN/RmSkpGT6HA1nsFkR6v/CdMoEtHZ4g70ybNblIhBM3e EH9p0ysnoJnc2nB1W66C0CGZc4b1GFo5TmGL4yr6VrVky98Z52ST7RD/eRNYAlow IauD2SLwXOGbi5Bsba2uwFjL/6+03XADF//inZ2WRdugR0w9nqqL9zw9kRon0HxC O6Wqh2T/ZYQQPcLEtBr29NBx2N377l7fnqrWP3YWimMpduYawPDTD+zqFSn5mHGI cShUzXcag4bbx+gB9y/vB2JhGXUY9TNXKOPWaFI/xRn0F90uHc0= -----END CERTIFICATE-----Generated at Tue Nov 4 01:57:26 2025 by rpki-client