$ rpki-client -vvf repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/4F40845626DE4E373F550B654EA4E833B6EB4D27.mft File: 4F40845626DE4E373F550B654EA4E833B6EB4D27.mft (raw, json) Hash identifier: +I1ajugBNh+0tzk9CLh4Vn4f+4Sg7P99XpK5oeAfYPQ= Subject key identifier: EE:B0:7D:FB:24:BF:9B:9B:0E:BA:31:FD:32:9A:6D:F8:DD:2C:AD:BD Authority key identifier: 4F:40:84:56:26:DE:4E:37:3F:55:0B:65:4E:A4:E8:33:B6:EB:4D:27 Certificate issuer: /CN=4F40845626DE4E373F550B654EA4E833B6EB4D27 Certificate serial: 5CEC2E37185D71D7B2AA48A589C5A347F6864477 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F40845626DE4E373F550B654EA4E833B6EB4D27.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/4F40845626DE4E373F550B654EA4E833B6EB4D27.mft Manifest number: 03C4 Signing time: Sun 02 Nov 2025 14:10:01 +0000 Manifest this update: Sun 02 Nov 2025 14:05:01 +0000 Manifest next update: Wed 05 Nov 2025 23:27:01 +0000 Files and hashes: 1: 4F40845626DE4E373F550B654EA4E833B6EB4D27.crl (hash: Bkzlffw9XMnnCdTTegsktW+/7rRhN5JBbh469di9aBg=) 2: 3130332e3136382e3134372e302f32342d3234203d3e20313430343433.roa (hash: vfImiFEds0caJl5aBP0MxYhFkdq8Ac7hTgD2QgZXO/g=) 3: 3130332e3136382e3134362e302f32332d3233203d3e20313430343433.roa (hash: gb5iQXmVJxzms9P45gaXkbTb5EFMl0u9BkF63p+v5Kk=) 4: 3130332e3136382e3134362e302f32342d3234203d3e20313430343433.roa (hash: fuK+11s2WzcqL7Onn6Tm/NBVUUPod7SmDLox9Y+iIpg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/4F40845626DE4E373F550B654EA4E833B6EB4D27.crl rsync://repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/4F40845626DE4E373F550B654EA4E833B6EB4D27.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F40845626DE4E373F550B654EA4E833B6EB4D27.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 23:27:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:ec:2e:37:18:5d:71:d7:b2:aa:48:a5:89:c5:a3:47:f6:86:44:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4F40845626DE4E373F550B654EA4E833B6EB4D27 Validity Not Before: Nov 2 14:05:01 2025 GMT Not After : Nov 5 23:27:01 2025 GMT Subject: CN=EEB07DFB24BF9B9B0EBA31FD329A6DF8DD2CADBD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:78:6f:9f:47:a0:57:e4:af:53:ac:14:f4:3f: d0:9b:6a:ac:d2:cc:b0:5f:98:9a:d7:32:fd:75:fa: b9:2e:30:4a:fc:ab:bc:b0:60:b1:7c:af:78:e7:a7: d8:e1:7d:0c:0a:8d:66:3e:f8:8a:ae:b7:3c:48:47: bf:2a:77:15:67:30:3e:fc:45:8d:1d:c4:96:15:47: 44:87:8e:30:65:7c:8b:fb:60:f3:b9:8b:40:df:7f: a0:44:fc:80:08:69:4a:52:51:ef:56:24:ae:9b:b5: 8b:ea:de:03:12:76:0d:96:d8:a4:fc:3f:ad:f3:31: e1:0a:38:3c:49:87:72:3d:47:b2:14:e0:ed:24:c8: 31:2d:4b:e6:4f:c9:a2:5b:ac:8c:10:9d:38:3c:1c: 5d:64:9f:39:09:ce:87:2b:17:db:f2:cc:a7:a3:38: f9:f5:0b:4a:c3:54:7b:01:e2:3c:5b:de:12:48:81: 20:0e:f0:f5:4b:4b:b0:0a:38:d7:68:c1:f9:44:b9: ac:db:5e:e7:6e:58:bd:ad:ce:a8:67:43:02:17:53: a3:1b:97:4e:4b:a1:90:ea:bf:b1:ef:88:8d:17:40: 2e:fc:4d:ec:fc:00:15:66:16:36:bb:eb:79:ae:7f: f9:b7:8e:67:3c:18:6e:d7:d7:03:0c:e9:be:03:dd: e8:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:B0:7D:FB:24:BF:9B:9B:0E:BA:31:FD:32:9A:6D:F8:DD:2C:AD:BD X509v3 Authority Key Identifier: keyid:4F:40:84:56:26:DE:4E:37:3F:55:0B:65:4E:A4:E8:33:B6:EB:4D:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/4F40845626DE4E373F550B654EA4E833B6EB4D27.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F40845626DE4E373F550B654EA4E833B6EB4D27.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/4F40845626DE4E373F550B654EA4E833B6EB4D27.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:4c:fd:08:29:32:13:9e:9d:21:71:63:ee:d5:94:48:cb:7c: cb:82:b9:71:4b:df:bb:5d:e2:cf:28:49:7e:f5:c5:ff:fa:1a: 82:32:2f:b1:05:67:43:af:51:ac:e6:1d:8c:46:42:01:61:25: 1f:f4:8c:a0:2d:23:6b:1c:8b:83:ac:65:ff:98:be:3d:18:e5: 14:cc:d5:b7:e2:1e:37:12:d5:73:4c:c3:0c:5d:3f:a9:a0:5f: d2:07:7d:3a:8b:37:56:50:38:42:97:4f:20:cf:91:1a:4f:02: 83:10:42:7c:3b:d7:83:09:a8:15:5a:5a:44:d4:68:2c:4a:a9: 98:22:5a:4f:04:21:15:c7:35:06:48:67:99:1f:c9:d5:b7:b0: f6:10:59:7e:11:84:35:7c:d5:26:c2:d9:eb:10:e2:6b:96:1f: 2a:1a:bf:86:ca:91:3f:01:7d:64:dc:9a:83:d5:84:3c:52:b2: f7:ac:f0:79:5b:7b:83:42:24:42:c7:68:7f:b7:ca:f6:5c:95: e2:99:b0:9e:86:6d:b7:e5:b8:2f:1a:6e:33:b4:39:81:1d:d0: ac:99:4a:23:4e:87:4a:cd:21:a5:a6:67:fa:72:96:12:31:ac: 95:c1:5a:71:5c:ce:af:e5:c4:51:f0:63:31:b0:52:96:27:91: 0d:c1:af:22 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXOwuNxhdcdeyqkilicWjR/aGRHcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEY0MDg0NTYyNkRFNEUzNzNGNTUwQjY1NEVBNEU4MzNC NkVCNEQyNzAeFw0yNTExMDIxNDA1MDFaFw0yNTExMDUyMzI3MDFaMDMxMTAvBgNV BAMTKEVFQjA3REZCMjRCRjlCOUIwRUJBMzFGRDMyOUE2REY4REQyQ0FEQkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKeG+fR6BX5K9TrBT0P9CbaqzS zLBfmJrXMv11+rkuMEr8q7ywYLF8r3jnp9jhfQwKjWY++IqutzxIR78qdxVnMD78 RY0dxJYVR0SHjjBlfIv7YPO5i0Dff6BE/IAIaUpSUe9WJK6btYvq3gMSdg2W2KT8 P63zMeEKODxJh3I9R7IU4O0kyDEtS+ZPyaJbrIwQnTg8HF1knzkJzocrF9vyzKej OPn1C0rDVHsB4jxb3hJIgSAO8PVLS7AKONdowflEuazbXuduWL2tzqhnQwIXU6Mb l05LoZDqv7HviI0XQC78Tez8ABVmFja763muf/m3jmc8GG7X1wMM6b4D3ei7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7rB9+yS/m5sOujH9Mppt+N0srb0wHwYDVR0j BBgwFoAUT0CEVibeTjc/VQtlTqToM7brTScwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YTQ2MzYwZC02NjJiLTRmN2QtYmIxNy1kODYwODIxNTI0NzEvMC80RjQwODQ1NjI2 REU0RTM3M0Y1NTBCNjU0RUE0RTgzM0I2RUI0RDI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEY0MDg0NTYyNkRFNEUzNzNGNTUwQjY1NEVBNEU4MzNCNkVC NEQyNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2E0NjM2MGQtNjYyYi00ZjdkLWJi MTctZDg2MDgyMTUyNDcxLzAvNEY0MDg0NTYyNkRFNEUzNzNGNTUwQjY1NEVBNEU4 MzNCNkVCNEQyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAExM/QgpMhOenSFxY+7VlEjLfMuCuXFL37td 4s8oSX71xf/6GoIyL7EFZ0OvUazmHYxGQgFhJR/0jKAtI2sci4OsZf+Yvj0Y5RTM 1bfiHjcS1XNMwwxdP6mgX9IHfTqLN1ZQOEKXTyDPkRpPAoMQQnw714MJqBVaWkTU aCxKqZgiWk8EIRXHNQZIZ5kfydW3sPYQWX4RhDV81SbC2esQ4muWHyoav4bKkT8B fWTcmoPVhDxSsves8Hlbe4NCJELHaH+3yvZcleKZsJ6GbbfluC8abjO0OYEd0KyZ SiNOh0rNIaWmZ/pylhIxrJXBWnFczq/lxFHwYzGwUpYnkQ3BryI= -----END CERTIFICATE-----Generated at Tue Nov 4 16:01:32 2025 by rpki-client