$ rpki-client -vvf repo-rpki.idnic.net/repo/2c280af3-aa1d-4271-8c06-a3fa28898426/0/4AA76DED689FD4420809D0962087A03BCF018FEA.mft File: 4AA76DED689FD4420809D0962087A03BCF018FEA.mft (raw, json) Hash identifier: UzMsXwGcjwHWJ1MTWvvLuCA2TxL5XXH07kepKv5iKYo= Subject key identifier: AD:79:96:37:72:4C:7F:57:83:2E:65:C9:E2:E2:56:BE:2C:C4:26:41 Authority key identifier: 4A:A7:6D:ED:68:9F:D4:42:08:09:D0:96:20:87:A0:3B:CF:01:8F:EA Certificate issuer: /CN=4AA76DED689FD4420809D0962087A03BCF018FEA Certificate serial: 6830D13347CF111729900BD1457F86BD21ADE182 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AA76DED689FD4420809D0962087A03BCF018FEA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2c280af3-aa1d-4271-8c06-a3fa28898426/0/4AA76DED689FD4420809D0962087A03BCF018FEA.mft Manifest number: DD Signing time: Tue 04 Nov 2025 00:21:41 +0000 Manifest this update: Tue 04 Nov 2025 00:16:41 +0000 Manifest next update: Fri 07 Nov 2025 08:56:41 +0000 Files and hashes: 1: 4AA76DED689FD4420809D0962087A03BCF018FEA.crl (hash: Tjx1boFKVt6hd0OGpeudPZl/Bns8TC0QDwwiMvoOt30=) 2: 3130332e39392e3133372e302f32342d3234203d3e20313531353735.roa (hash: qGUv354O5bgjhTMZ45JMcvyFGWQg1EdVxERPegJoKCQ=) 3: 3130332e39392e3133362e302f32332d3233203d3e20313531353735.roa (hash: bYo0zSG/Y+l/kRQWqzhvCy7R5Romzqih1iDCz89t3mk=) 4: 3130332e39392e3133362e302f32342d3234203d3e20313531353735.roa (hash: 2CpAucK+rvU21eAZmyDV5IqqR6dCAIafzExn8g2LOMw=) 5: 323030313a6466343a3763303a3a2f34382d3438203d3e20313531353735.roa (hash: khEVLFQtH+a45cc9yGf67pi2XkwhJ0LBpc+mc2azWiQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2c280af3-aa1d-4271-8c06-a3fa28898426/0/4AA76DED689FD4420809D0962087A03BCF018FEA.crl rsync://repo-rpki.idnic.net/repo/2c280af3-aa1d-4271-8c06-a3fa28898426/0/4AA76DED689FD4420809D0962087A03BCF018FEA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AA76DED689FD4420809D0962087A03BCF018FEA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 08:56:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:30:d1:33:47:cf:11:17:29:90:0b:d1:45:7f:86:bd:21:ad:e1:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4AA76DED689FD4420809D0962087A03BCF018FEA Validity Not Before: Nov 4 00:16:41 2025 GMT Not After : Nov 7 08:56:41 2025 GMT Subject: CN=AD799637724C7F57832E65C9E2E256BE2CC42641 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:60:a6:b9:9b:01:bf:a6:8a:e8:b9:c8:4d:ca: 08:ce:56:2f:15:f0:b3:17:b0:d6:a8:2b:63:ff:cc: 6d:5a:d8:7e:22:1d:cd:48:4f:9a:54:e0:be:9d:8e: fa:e8:99:8a:0b:52:93:47:c5:fc:0e:d4:d0:46:a9: c5:32:44:93:21:8b:0b:55:34:94:d8:2c:64:4d:39: e6:37:26:fc:2e:35:a1:d4:ac:8e:39:94:60:bd:17: 33:b3:5f:eb:c9:db:45:1f:99:39:8a:36:17:21:1a: 86:05:bc:29:8b:9d:ae:99:68:b4:fe:d6:ea:18:b6: c3:b3:8a:5d:c1:5d:ed:ae:90:d8:71:0f:5b:3a:24: 17:f1:7e:b4:76:00:5a:f8:cf:0b:fb:74:be:fe:f5: a8:76:57:5e:b5:3a:24:2f:69:25:26:62:ad:c0:ab: fc:99:28:bd:d0:01:d6:32:0e:5f:50:18:47:34:e1: 39:aa:96:aa:50:de:9d:21:ac:61:dd:8e:4f:0d:fd: 83:81:4d:85:3b:07:52:e3:83:bc:4a:1a:43:06:ef: 6e:2f:d7:a3:67:9e:a2:50:c7:91:13:ea:b8:5b:c7: 1d:2c:07:f4:3b:2a:37:3b:1c:a4:d6:d1:74:f9:34: b3:31:91:57:e2:cc:8c:b5:36:d6:42:7f:f2:ff:eb: b8:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:79:96:37:72:4C:7F:57:83:2E:65:C9:E2:E2:56:BE:2C:C4:26:41 X509v3 Authority Key Identifier: keyid:4A:A7:6D:ED:68:9F:D4:42:08:09:D0:96:20:87:A0:3B:CF:01:8F:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2c280af3-aa1d-4271-8c06-a3fa28898426/0/4AA76DED689FD4420809D0962087A03BCF018FEA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AA76DED689FD4420809D0962087A03BCF018FEA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2c280af3-aa1d-4271-8c06-a3fa28898426/0/4AA76DED689FD4420809D0962087A03BCF018FEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:d7:c0:83:3c:6e:b9:87:56:13:31:b2:a5:46:92:84:0e:09: a8:b0:0e:c4:73:18:49:3f:e7:fe:b7:4f:9c:c1:37:71:65:fc: 81:17:05:5b:20:df:06:cf:b4:84:4e:60:8b:14:f0:50:2a:94: ca:e4:22:15:63:05:2e:d9:8d:1b:46:91:e8:be:f8:82:de:ff: d6:d7:d6:60:a3:60:31:c3:78:4e:ae:2d:9a:a1:7a:b8:f6:fd: 00:e7:5a:20:26:2e:d9:2a:46:bb:75:0d:c5:89:96:fd:2f:9f: 7a:54:97:2f:75:00:12:a2:6c:c1:39:ef:8a:b2:76:d3:75:49: 30:56:e4:e8:a3:98:74:51:8d:50:10:de:be:d8:da:a8:e4:4c: 00:c6:ce:5c:ed:7c:36:5a:3b:03:e3:cc:61:70:32:45:89:8e: 8b:6d:75:db:97:e8:ab:d5:41:1d:7f:7c:0e:f0:46:a8:93:bb: 16:6c:ed:ec:6c:e5:87:ff:9a:99:66:ef:0a:ae:f6:e9:bb:8a: f8:82:ca:2b:6a:a3:fb:da:8d:53:e8:4c:9e:0e:2c:da:38:09: 93:cc:40:90:91:38:51:44:01:84:54:44:01:f3:c0:5e:08:c4: 18:d8:71:c3:e5:6f:e4:79:53:f5:db:a6:3a:31:a4:a8:9c:ac: 43:62:53:5f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaDDRM0fPERcpkAvRRX+GvSGt4YIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEFBNzZERUQ2ODlGRDQ0MjA4MDlEMDk2MjA4N0EwM0JD RjAxOEZFQTAeFw0yNTExMDQwMDE2NDFaFw0yNTExMDcwODU2NDFaMDMxMTAvBgNV BAMTKEFENzk5NjM3NzI0QzdGNTc4MzJFNjVDOUUyRTI1NkJFMkNDNDI2NDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrYKa5mwG/porouchNygjOVi8V 8LMXsNaoK2P/zG1a2H4iHc1IT5pU4L6djvromYoLUpNHxfwO1NBGqcUyRJMhiwtV NJTYLGRNOeY3JvwuNaHUrI45lGC9FzOzX+vJ20UfmTmKNhchGoYFvCmLna6ZaLT+ 1uoYtsOzil3BXe2ukNhxD1s6JBfxfrR2AFr4zwv7dL7+9ah2V161OiQvaSUmYq3A q/yZKL3QAdYyDl9QGEc04TmqlqpQ3p0hrGHdjk8N/YOBTYU7B1Ljg7xKGkMG724v 16NnnqJQx5ET6rhbxx0sB/Q7Kjc7HKTW0XT5NLMxkVfizIy1NtZCf/L/67ibAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrXmWN3JMf1eDLmXJ4uJWvizEJkEwHwYDVR0j BBgwFoAUSqdt7Wif1EIICdCWIIegO88Bj+owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YzI4MGFmMy1hYTFkLTQyNzEtOGMwNi1hM2ZhMjg4OTg0MjYvMC80QUE3NkRFRDY4 OUZENDQyMDgwOUQwOTYyMDg3QTAzQkNGMDE4RkVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEFBNzZERUQ2ODlGRDQ0MjA4MDlEMDk2MjA4N0EwM0JDRjAx OEZFQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmMyODBhZjMtYWExZC00MjcxLThj MDYtYTNmYTI4ODk4NDI2LzAvNEFBNzZERUQ2ODlGRDQ0MjA4MDlEMDk2MjA4N0Ew M0JDRjAxOEZFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIfXwIM8brmHVhMxsqVGkoQOCaiwDsRzGEk/ 5/63T5zBN3Fl/IEXBVsg3wbPtIROYIsU8FAqlMrkIhVjBS7ZjRtGkei++ILe/9bX 1mCjYDHDeE6uLZqherj2/QDnWiAmLtkqRrt1DcWJlv0vn3pUly91ABKibME574qy dtN1STBW5OijmHRRjVAQ3r7Y2qjkTADGzlztfDZaOwPjzGFwMkWJjottdduX6KvV QR1/fA7wRqiTuxZs7exs5Yf/mplm7wqu9um7iviCyitqo/vajVPoTJ4OLNo4CZPM QJCROFFEAYRURAHzwF4IxBjYccPlb+R5U/XbpjoxpKicrENiU18= -----END CERTIFICATE-----Generated at Tue Nov 4 12:53:18 2025 by rpki-client