$ rpki-client -vvf repo-rpki.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.mft File: 4AC7DCD8EB1234ADC427AEBE3949E8691638A707.mft (raw, json) Hash identifier: TQWOEGkg1jmBUyUe2fbj/dBQVFlR7umPfHd7sAXGNFw= Subject key identifier: 7C:85:5D:34:A0:69:FA:E3:60:53:F9:ED:F3:5D:7D:B2:04:4F:B0:3F Authority key identifier: 4A:C7:DC:D8:EB:12:34:AD:C4:27:AE:BE:39:49:E8:69:16:38:A7:07 Certificate issuer: /CN=4AC7DCD8EB1234ADC427AEBE3949E8691638A707 Certificate serial: 0B182C579A0B044D41E9BB93E3C0F405C3E4E710 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.cer Subject info access: rsync://repo-rpki.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.mft Manifest number: 0228 Signing time: Sun 02 Nov 2025 19:30:47 +0000 Manifest this update: Sun 02 Nov 2025 19:25:47 +0000 Manifest next update: Thu 06 Nov 2025 04:55:47 +0000 Files and hashes: 1: 3230322e362e3230382e302f32302d3234203d3e203137343530.roa (hash: UrGzpQyb4OcG13ECSRKSWIFvQeDrPkoBtijveesvtFQ=) 2: 323030313a6466363a366630303a3a2f34382d3438203d3e20313331373034.roa (hash: 3CBY+1byt2hh1kG4N61+QCfs3v8FSbnr3cgZmaX/kYc=) 3: 3130332e382e39362e302f32322d3234203d3e203137343530.roa (hash: 3PeI4c1+04C9ghzq6F40f5013YnnignJ8PNDhSKl9BY=) 4: 4AC7DCD8EB1234ADC427AEBE3949E8691638A707.crl (hash: ZqjPbBZK1UbHmERLT/3yBANYUaq2MiWXoo+ZewXwX6Q=) 5: 3131392e322e36342e302f31392d3234203d3e203137343530.roa (hash: Uce528/KV3oCstaRCZguiOogFuox/yiwX1g2nJn55uk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.crl rsync://repo-rpki.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 04:55:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:18:2c:57:9a:0b:04:4d:41:e9:bb:93:e3:c0:f4:05:c3:e4:e7:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4AC7DCD8EB1234ADC427AEBE3949E8691638A707 Validity Not Before: Nov 2 19:25:47 2025 GMT Not After : Nov 6 04:55:47 2025 GMT Subject: CN=7C855D34A069FAE36053F9EDF35D7DB2044FB03F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:7e:95:52:95:e8:bc:f3:46:97:1b:2e:ff:8e: b6:99:83:3e:81:3c:23:a0:00:71:14:e4:29:b5:8d: 79:7d:e3:8a:11:aa:6b:0a:e8:1c:7d:ee:b4:f5:8e: cb:c3:73:1a:26:91:ae:44:b7:21:c6:73:a2:1e:28: 5c:26:17:4d:2f:e2:24:ee:22:53:59:7a:4f:f0:01: 18:9b:88:80:f6:6c:b1:1b:0a:58:34:27:0d:60:5d: 75:8b:ac:50:89:6b:c1:4e:5f:65:a2:a7:94:30:fb: 7c:17:cf:be:79:e9:fd:2b:59:32:d9:9a:46:b9:e2: 52:e6:77:38:4c:ce:da:18:29:ee:53:9e:39:1e:c6: 67:13:2e:31:e7:2c:ea:5b:88:14:ab:12:c8:8d:be: 4e:de:18:5e:c2:9f:bc:c8:d0:9e:b4:57:8d:ed:e4: 23:02:ae:24:61:54:e8:ff:f7:2f:ba:a2:46:9b:67: 37:0f:ae:19:5f:b9:e9:4e:4e:96:47:f6:f5:b7:f9: 6e:4a:42:6a:c0:ae:d5:5f:a2:96:ce:73:6e:1f:91: 48:ad:04:35:81:0f:8f:b9:68:9d:ee:d3:a8:be:b3: 8a:43:c1:c1:29:6e:f3:9a:12:97:05:5c:a2:ed:ee: a1:d0:0d:65:56:08:2b:70:07:f9:b5:86:4f:0f:f0: f6:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:85:5D:34:A0:69:FA:E3:60:53:F9:ED:F3:5D:7D:B2:04:4F:B0:3F X509v3 Authority Key Identifier: keyid:4A:C7:DC:D8:EB:12:34:AD:C4:27:AE:BE:39:49:E8:69:16:38:A7:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:93:b1:31:2e:0d:ca:f6:4e:f5:10:bb:33:d3:b3:a1:08:a2: b3:3a:a5:7e:41:c4:fc:76:e6:4c:2d:2b:eb:d4:e7:dc:e3:1d: c0:89:fd:ad:2d:00:97:c8:bc:0e:f5:71:dd:c9:e2:31:24:88: 2a:f1:91:1c:d1:c8:5b:80:7f:54:87:fd:a9:1b:25:d2:35:5f: 95:0b:0b:d2:b5:a7:c8:77:bf:92:bb:37:a4:97:a7:14:2f:de: ce:4c:c1:a8:05:e2:e6:28:80:11:3f:bf:18:e2:34:b9:77:d7: e7:5a:45:2f:8f:8a:d8:9a:8a:d4:88:ad:47:da:08:83:07:ea: 3d:5c:97:99:7b:63:e6:64:32:8b:ae:56:64:5f:d6:8a:e4:1e: 6a:98:e6:be:fc:f4:c6:69:a9:2f:b1:b2:b4:a6:17:e0:fd:2a: 49:e2:8e:82:98:0b:b7:83:cd:23:08:1b:11:8a:f6:40:27:c1: c8:78:02:34:49:c3:88:2b:a4:73:d9:7f:b5:02:54:eb:57:ac: 9d:3f:8c:9c:77:9d:93:34:ee:67:6e:eb:35:31:95:2d:b5:99: 75:42:47:ae:d2:8e:e1:d2:a8:07:99:8d:be:41:a5:31:50:15: f9:be:31:9d:1d:bc:2a:5e:75:60:f3:89:13:a5:59:94:25:57: c1:c6:a2:15 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCxgsV5oLBE1B6buT48D0BcPk5xAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEFDN0RDRDhFQjEyMzRBREM0MjdBRUJFMzk0OUU4Njkx NjM4QTcwNzAeFw0yNTExMDIxOTI1NDdaFw0yNTExMDYwNDU1NDdaMDMxMTAvBgNV BAMTKDdDODU1RDM0QTA2OUZBRTM2MDUzRjlFREYzNUQ3REIyMDQ0RkIwM0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPfpVSlei880aXGy7/jraZgz6B PCOgAHEU5Cm1jXl944oRqmsK6Bx97rT1jsvDcxomka5EtyHGc6IeKFwmF00v4iTu IlNZek/wARibiID2bLEbClg0Jw1gXXWLrFCJa8FOX2Wip5Qw+3wXz7556f0rWTLZ mka54lLmdzhMztoYKe5TnjkexmcTLjHnLOpbiBSrEsiNvk7eGF7Cn7zI0J60V43t 5CMCriRhVOj/9y+6okabZzcPrhlfuelOTpZH9vW3+W5KQmrArtVfopbOc24fkUit BDWBD4+5aJ3u06i+s4pDwcEpbvOaEpcFXKLt7qHQDWVWCCtwB/m1hk8P8PZLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfIVdNKBp+uNgU/nt8119sgRPsD8wHwYDVR0j BBgwFoAUSsfc2OsSNK3EJ66+OUnoaRY4pwcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MzgwNjFmMS1mYTMwLTRiZDYtODFhMC0yZWM2NzA4MzZjNDIvMC80QUM3RENEOEVC MTIzNEFEQzQyN0FFQkUzOTQ5RTg2OTE2MzhBNzA3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEFDN0RDRDhFQjEyMzRBREM0MjdBRUJFMzk0OUU4NjkxNjM4 QTcwNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDM4MDYxZjEtZmEzMC00YmQ2LTgx YTAtMmVjNjcwODM2YzQyLzAvNEFDN0RDRDhFQjEyMzRBREM0MjdBRUJFMzk0OUU4 NjkxNjM4QTcwNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHqTsTEuDcr2TvUQuzPTs6EIorM6pX5BxPx2 5kwtK+vU59zjHcCJ/a0tAJfIvA71cd3J4jEkiCrxkRzRyFuAf1SH/akbJdI1X5UL C9K1p8h3v5K7N6SXpxQv3s5MwagF4uYogBE/vxjiNLl31+daRS+PitiaitSIrUfa CIMH6j1cl5l7Y+ZkMouuVmRf1orkHmqY5r789MZpqS+xsrSmF+D9KknijoKYC7eD zSMIGxGK9kAnwch4AjRJw4grpHPZf7UCVOtXrJ0/jJx3nZM07mdu6zUxlS21mXVC R67SjuHSqAeZjb5BpTFQFfm+MZ0dvCpedWDziROlWZQlV8HGohU= -----END CERTIFICATE-----Generated at Tue Nov 4 21:05:35 2025 by rpki-client