$ rpki-client -vvf repo-rpki.idnic.net/repo/378bbfd4-67b4-498d-8411-e964c5fe1172/0/CD4EAC0306D06F2109F2679DC9F52F7DE597590D.mft File: CD4EAC0306D06F2109F2679DC9F52F7DE597590D.mft (raw, json) Hash identifier: yRLw+wUYzkGi6nxQb80TUDEFHNSjfrw+Z58YPYf2szY= Subject key identifier: 8E:B6:B3:E9:CE:02:2D:DB:C6:0C:96:69:24:01:C0:87:DE:C6:B4:9D Authority key identifier: CD:4E:AC:03:06:D0:6F:21:09:F2:67:9D:C9:F5:2F:7D:E5:97:59:0D Certificate issuer: /CN=CD4EAC0306D06F2109F2679DC9F52F7DE597590D Certificate serial: 4F5B87217498BC11B9A7EB72B304E22DCCBD5039 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD4EAC0306D06F2109F2679DC9F52F7DE597590D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/378bbfd4-67b4-498d-8411-e964c5fe1172/0/CD4EAC0306D06F2109F2679DC9F52F7DE597590D.mft Manifest number: 0188 Signing time: Tue 04 Nov 2025 13:12:05 +0000 Manifest this update: Tue 04 Nov 2025 13:07:05 +0000 Manifest next update: Fri 07 Nov 2025 18:41:05 +0000 Files and hashes: 1: CD4EAC0306D06F2109F2679DC9F52F7DE597590D.crl (hash: HL00FZq7/sGwvTDov41urzYYk6PGQxNCn/2U2KtEAyk=) 2: 3130332e3135362e35372e302f32342d3234203d3e20313431303833.roa (hash: YU44qqt6xQCwxLXA5jfaKyr8+7F8xFDqnBfx8dtxJPU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/378bbfd4-67b4-498d-8411-e964c5fe1172/0/CD4EAC0306D06F2109F2679DC9F52F7DE597590D.crl rsync://repo-rpki.idnic.net/repo/378bbfd4-67b4-498d-8411-e964c5fe1172/0/CD4EAC0306D06F2109F2679DC9F52F7DE597590D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD4EAC0306D06F2109F2679DC9F52F7DE597590D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 18:41:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:5b:87:21:74:98:bc:11:b9:a7:eb:72:b3:04:e2:2d:cc:bd:50:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD4EAC0306D06F2109F2679DC9F52F7DE597590D Validity Not Before: Nov 4 13:07:05 2025 GMT Not After : Nov 7 18:41:05 2025 GMT Subject: CN=8EB6B3E9CE022DDBC60C96692401C087DEC6B49D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:06:2d:a0:34:30:de:ef:a1:86:97:c3:ac:8f: 76:fe:2e:8e:dc:a3:f1:f9:a9:39:1c:bd:3c:5f:ae: 4d:35:b8:41:e7:84:49:71:1b:b0:4c:53:30:6b:aa: cd:54:98:56:1b:f3:19:4b:ef:dd:c9:e0:19:b8:e3: 60:30:e4:4b:7c:8e:ab:c9:1c:85:16:a8:9b:42:c7: f3:a3:64:61:04:12:33:1c:84:18:37:f5:85:94:f0: b1:2b:60:38:25:fe:7d:ba:24:71:c4:ca:36:c5:82: 91:5c:a1:a0:e5:ce:f1:13:b0:1f:c6:4f:cf:3d:21: be:c1:1a:c2:67:26:df:d6:b6:0d:86:df:5c:a1:68: 2f:a7:f6:46:44:d0:94:fe:34:c8:ab:6d:58:8e:1b: 19:01:11:75:21:64:4a:1d:77:fd:e0:ce:c2:0b:f7: 3a:55:e5:2b:38:ba:86:80:7c:ef:20:18:91:47:26: dc:52:21:06:84:df:2e:fe:f7:11:81:97:76:58:98: 21:e6:af:e0:25:4d:86:b4:61:f2:c8:93:9b:ba:a4: 18:5c:14:21:0c:d8:dd:9f:c4:17:06:75:a2:87:ee: 13:72:df:30:31:e9:4c:49:da:90:57:8a:11:b4:1a: 65:0b:8b:48:c7:56:bd:2c:36:7d:58:f8:2d:56:ed: ec:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:B6:B3:E9:CE:02:2D:DB:C6:0C:96:69:24:01:C0:87:DE:C6:B4:9D X509v3 Authority Key Identifier: keyid:CD:4E:AC:03:06:D0:6F:21:09:F2:67:9D:C9:F5:2F:7D:E5:97:59:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/378bbfd4-67b4-498d-8411-e964c5fe1172/0/CD4EAC0306D06F2109F2679DC9F52F7DE597590D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD4EAC0306D06F2109F2679DC9F52F7DE597590D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/378bbfd4-67b4-498d-8411-e964c5fe1172/0/CD4EAC0306D06F2109F2679DC9F52F7DE597590D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:0b:09:f6:7f:fa:81:ed:78:05:89:d8:1e:5c:a9:3e:a2:cb: 7f:a2:18:ce:cd:93:f8:2d:fd:6d:ed:1b:86:22:d6:a0:90:1e: b6:8f:30:71:9d:32:6d:05:b4:f1:e5:58:43:30:db:70:46:74: 4b:96:1f:ad:cd:38:f6:4e:be:4a:30:98:15:5a:c7:88:5f:6d: 77:22:2e:8f:5a:57:9a:99:18:e9:dd:64:10:ed:29:5b:d5:bb: db:0c:96:3e:5a:16:de:0d:fa:be:69:72:e3:86:41:41:f9:f8: 3e:e7:de:be:73:1b:28:72:55:2c:34:ca:44:5b:86:36:22:60: 4b:73:88:52:f8:a3:4e:3d:e8:a0:e2:56:5e:b1:9b:a1:8f:ae: b4:f6:3a:71:9c:4a:95:89:61:0a:82:f8:0c:3a:73:28:7e:a0: 7d:64:a7:e7:86:41:d5:50:f7:58:2e:34:35:15:35:93:28:12: ab:64:02:2e:f2:1c:4c:76:5a:f2:ac:59:38:7a:11:34:a0:1b: 3a:4e:cf:80:40:3c:a3:df:9c:20:6f:29:c8:6a:81:94:86:65: 55:20:70:00:88:2d:73:81:bd:37:61:a3:c8:65:db:bc:33:61: 6b:8c:bb:d6:d6:e9:aa:c7:a1:1d:51:93:49:b4:dd:82:c6:01: 0b:6d:fd:51 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT1uHIXSYvBG5p+tyswTiLcy9UDkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0Q0RUFDMDMwNkQwNkYyMTA5RjI2NzlEQzlGNTJGN0RF NTk3NTkwRDAeFw0yNTExMDQxMzA3MDVaFw0yNTExMDcxODQxMDVaMDMxMTAvBgNV BAMTKDhFQjZCM0U5Q0UwMjJEREJDNjBDOTY2OTI0MDFDMDg3REVDNkI0OUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdBi2gNDDe76GGl8Osj3b+Lo7c o/H5qTkcvTxfrk01uEHnhElxG7BMUzBrqs1UmFYb8xlL793J4Bm442Aw5Et8jqvJ HIUWqJtCx/OjZGEEEjMchBg39YWU8LErYDgl/n26JHHEyjbFgpFcoaDlzvETsB/G T889Ib7BGsJnJt/Wtg2G31yhaC+n9kZE0JT+NMirbViOGxkBEXUhZEodd/3gzsIL 9zpV5Ss4uoaAfO8gGJFHJtxSIQaE3y7+9xGBl3ZYmCHmr+AlTYa0YfLIk5u6pBhc FCEM2N2fxBcGdaKH7hNy3zAx6UxJ2pBXihG0GmULi0jHVr0sNn1Y+C1W7exXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjraz6c4CLdvGDJZpJAHAh97GtJ0wHwYDVR0j BBgwFoAUzU6sAwbQbyEJ8medyfUvfeWXWQ0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NzhiYmZkNC02N2I0LTQ5OGQtODQxMS1lOTY0YzVmZTExNzIvMC9DRDRFQUMwMzA2 RDA2RjIxMDlGMjY3OURDOUY1MkY3REU1OTc1OTBELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0Q0RUFDMDMwNkQwNkYyMTA5RjI2NzlEQzlGNTJGN0RFNTk3 NTkwRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzc4YmJmZDQtNjdiNC00OThkLTg0 MTEtZTk2NGM1ZmUxMTcyLzAvQ0Q0RUFDMDMwNkQwNkYyMTA5RjI2NzlEQzlGNTJG N0RFNTk3NTkwRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKYLCfZ/+oHteAWJ2B5cqT6iy3+iGM7Nk/gt /W3tG4Yi1qCQHraPMHGdMm0FtPHlWEMw23BGdEuWH63NOPZOvkowmBVax4hfbXci Lo9aV5qZGOndZBDtKVvVu9sMlj5aFt4N+r5pcuOGQUH5+D7n3r5zGyhyVSw0ykRb hjYiYEtziFL4o0496KDiVl6xm6GPrrT2OnGcSpWJYQqC+Aw6cyh+oH1kp+eGQdVQ 91guNDUVNZMoEqtkAi7yHEx2WvKsWTh6ETSgGzpOz4BAPKPfnCBvKchqgZSGZVUg cACILXOBvTdho8hl27wzYWuMu9bW6arHoR1Rk0m03YLGAQtt/VE= -----END CERTIFICATE-----Generated at Wed Nov 5 14:57:11 2025 by rpki-client