$ rpki-client -vvf repo-rpki.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.mft File: 4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.mft (raw, json) Hash identifier: 7eK2N+0IKEkrE2tdsm7Po/TCnz8UxIOdD/KuiSfHyp4= Subject key identifier: 0A:19:B3:54:8C:E9:E5:64:63:C2:66:40:B5:22:95:86:FC:84:21:66 Authority key identifier: 4F:29:04:EA:E6:6A:DD:5D:3A:C5:3C:6A:CC:B9:21:33:B4:26:DF:48 Certificate issuer: /CN=4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48 Certificate serial: 222C083F2A7590C767A5B5E44BDD42F6E9C1D759 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.cer Subject info access: rsync://repo-rpki.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.mft Manifest number: 0521 Signing time: Mon 03 Nov 2025 15:42:14 +0000 Manifest this update: Mon 03 Nov 2025 15:37:14 +0000 Manifest next update: Fri 07 Nov 2025 01:53:14 +0000 Files and hashes: 1: 323430353a396363303a3a2f33322d3438203d3e20313339393637.roa (hash: M/EH2rI4ldQhZaUe9MI4EQP0BkiCCMhjU2Ci0XOya8Q=) 2: 3130332e3134362e3138342e302f32332d3234203d3e20313339393637.roa (hash: RvVL0eKqhvW5Nd9pF2jqsL2iAerie+UOp2Ou6UGubqQ=) 3: 4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.crl (hash: k2wSiNQb4Bqw9FZQ8wZXnqoXLaiXi2aZ2TFkJI55IlQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.crl rsync://repo-rpki.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 01:53:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:2c:08:3f:2a:75:90:c7:67:a5:b5:e4:4b:dd:42:f6:e9:c1:d7:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48 Validity Not Before: Nov 3 15:37:14 2025 GMT Not After : Nov 7 01:53:14 2025 GMT Subject: CN=0A19B3548CE9E56463C26640B5229586FC842166 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:2f:25:0b:35:1e:58:82:9e:3c:75:4d:d4:7e: 3b:75:91:22:b1:d2:d3:f8:8c:19:4b:3c:7a:ab:d9: 25:02:6d:3f:41:1e:2d:61:eb:eb:72:25:f0:ab:e4: b5:d7:71:4c:14:e1:95:29:2e:23:e1:00:6c:36:88: 2d:cd:80:fb:79:74:b0:b7:c4:43:ed:78:50:84:05: a8:2a:cb:c2:a9:72:47:1b:dc:2a:29:af:18:3c:3f: ac:bb:6d:ad:43:3e:09:c6:2a:b9:52:a9:f7:f9:08: 3c:b6:73:9a:65:c8:af:9a:22:7d:79:fa:c6:07:88: d5:7f:1d:a1:0e:20:37:8f:be:7f:d5:d8:62:0c:aa: 44:e0:ee:f6:77:b1:aa:33:27:21:cd:e0:1d:a2:16: 0f:16:d7:e7:13:14:47:a5:2e:b7:2d:ac:61:d0:19: 57:dc:8b:86:f4:28:5d:4b:88:76:30:a7:b3:b8:fa: 6b:03:03:1a:e0:25:e8:42:bd:f1:35:f1:e1:6a:aa: 0a:c7:e3:0d:ff:4f:ee:e3:a8:28:3e:de:ee:c8:c1: 3e:fb:ed:41:46:ea:2d:aa:94:75:45:1b:48:29:7f: b3:e0:87:b5:16:1f:20:da:6c:ff:ac:3a:79:af:85: 1d:83:19:e9:23:4c:a7:a7:fa:66:ef:b6:62:3c:63: 73:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:19:B3:54:8C:E9:E5:64:63:C2:66:40:B5:22:95:86:FC:84:21:66 X509v3 Authority Key Identifier: keyid:4F:29:04:EA:E6:6A:DD:5D:3A:C5:3C:6A:CC:B9:21:33:B4:26:DF:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:b4:da:25:ef:17:3c:bd:67:10:b2:12:46:31:b4:84:80:5b: 87:6c:30:c2:87:2c:14:91:af:bb:16:4b:04:98:11:89:60:76: 2a:80:71:1d:50:96:d2:b3:32:bc:ab:65:60:6c:11:54:ab:e5: e4:de:be:07:9a:f4:20:21:2e:44:19:1b:26:31:a2:50:13:38: e7:d2:0a:fb:8e:13:d8:3f:74:1b:ca:b4:e7:46:74:4f:b0:1a: 6c:10:98:13:41:f5:c5:70:21:82:7e:83:7f:b2:56:3a:4f:13: 6e:64:f7:b8:02:b7:51:7d:11:0d:59:66:91:6b:f2:2b:94:8e: ad:0b:a0:e7:9f:24:b5:bb:92:6b:04:93:a9:8e:a1:c0:8a:4a: 0f:60:c1:52:3b:91:79:47:01:ab:50:00:f7:03:49:7d:2b:52: c1:6c:52:40:b6:cd:b1:47:63:94:f4:05:c6:91:b4:6f:13:e4: c2:b1:7c:34:cf:d3:fa:05:11:8a:b0:28:20:92:62:13:0b:65: 52:7f:2e:41:ab:34:6f:36:a1:53:13:45:8b:2a:9e:cc:ab:a3: 20:7b:ae:5b:4a:46:8c:24:3a:5b:a7:05:33:a0:ca:af:46:9c: d5:61:32:78:17:75:c9:a3:aa:80:82:fa:b2:26:28:cf:88:16: 9a:55:ca:3a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIiwIPyp1kMdnpbXkS91C9unB11kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEYyOTA0RUFFNjZBREQ1RDNBQzUzQzZBQ0NCOTIxMzNC NDI2REY0ODAeFw0yNTExMDMxNTM3MTRaFw0yNTExMDcwMTUzMTRaMDMxMTAvBgNV BAMTKDBBMTlCMzU0OENFOUU1NjQ2M0MyNjY0MEI1MjI5NTg2RkM4NDIxNjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1LyULNR5Ygp48dU3Ufjt1kSKx 0tP4jBlLPHqr2SUCbT9BHi1h6+tyJfCr5LXXcUwU4ZUpLiPhAGw2iC3NgPt5dLC3 xEPteFCEBagqy8Kpckcb3Coprxg8P6y7ba1DPgnGKrlSqff5CDy2c5plyK+aIn15 +sYHiNV/HaEOIDePvn/V2GIMqkTg7vZ3saozJyHN4B2iFg8W1+cTFEelLrctrGHQ GVfci4b0KF1LiHYwp7O4+msDAxrgJehCvfE18eFqqgrH4w3/T+7jqCg+3u7IwT77 7UFG6i2qlHVFG0gpf7Pgh7UWHyDabP+sOnmvhR2DGekjTKen+mbvtmI8Y3N1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUChmzVIzp5WRjwmZAtSKVhvyEIWYwHwYDVR0j BBgwFoAUTykE6uZq3V06xTxqzLkhM7Qm30gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y OWM1MzI3Zi0xMGZkLTRjZjAtODUxYy0wY2ZjZDNjM2M2OTcvMC80RjI5MDRFQUU2 NkFERDVEM0FDNTNDNkFDQ0I5MjEzM0I0MjZERjQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEYyOTA0RUFFNjZBREQ1RDNBQzUzQzZBQ0NCOTIxMzNCNDI2 REY0OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjljNTMyN2YtMTBmZC00Y2YwLTg1 MWMtMGNmY2QzYzNjNjk3LzAvNEYyOTA0RUFFNjZBREQ1RDNBQzUzQzZBQ0NCOTIx MzNCNDI2REY0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHm02iXvFzy9ZxCyEkYxtISAW4dsMMKHLBSR r7sWSwSYEYlgdiqAcR1QltKzMryrZWBsEVSr5eTevgea9CAhLkQZGyYxolATOOfS CvuOE9g/dBvKtOdGdE+wGmwQmBNB9cVwIYJ+g3+yVjpPE25k97gCt1F9EQ1ZZpFr 8iuUjq0LoOefJLW7kmsEk6mOocCKSg9gwVI7kXlHAatQAPcDSX0rUsFsUkC2zbFH Y5T0BcaRtG8T5MKxfDTP0/oFEYqwKCCSYhMLZVJ/LkGrNG82oVMTRYsqnsyroyB7 rltKRowkOlunBTOgyq9GnNVhMngXdcmjqoCC+rImKM+IFppVyjo= -----END CERTIFICATE-----Generated at Wed Nov 5 11:43:52 2025 by rpki-client