$ rpki-client -vvf repo-rpki.idnic.net/repo/4a48b222-6ded-428a-888f-10454b0880c2/0/81498B85C0E2937290B9B2119B132DEADBB24A5C.mft File: 81498B85C0E2937290B9B2119B132DEADBB24A5C.mft (raw, json) Hash identifier: uIWScPBvMbbpjTvbD7FBwSk3sMixmtYAFZptJjAYnSc= Subject key identifier: ED:CC:F5:D1:92:3A:52:47:A7:E5:A9:C9:9C:79:A5:5E:68:D6:74:9E Authority key identifier: 81:49:8B:85:C0:E2:93:72:90:B9:B2:11:9B:13:2D:EA:DB:B2:4A:5C Certificate issuer: /CN=81498B85C0E2937290B9B2119B132DEADBB24A5C Certificate serial: 21A3728D5B261596579C4B7C0218FE15CD83EA78 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/81498B85C0E2937290B9B2119B132DEADBB24A5C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4a48b222-6ded-428a-888f-10454b0880c2/0/81498B85C0E2937290B9B2119B132DEADBB24A5C.mft Manifest number: 020B Signing time: Tue 04 Nov 2025 02:40:57 +0000 Manifest this update: Tue 04 Nov 2025 02:35:57 +0000 Manifest next update: Fri 07 Nov 2025 09:50:57 +0000 Files and hashes: 1: 81498B85C0E2937290B9B2119B132DEADBB24A5C.crl (hash: 6iCc2RgXgc+IPwnkpey6UJ85HMxE82otZMBlrBjPEIQ=) 2: 3130332e3135392e3232342e302f32332d3234203d3e20313431313437.roa (hash: 49uJeHF+k8HvLvLuvnXcFDfrAZMvN78Q5XdfyLfe2TU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4a48b222-6ded-428a-888f-10454b0880c2/0/81498B85C0E2937290B9B2119B132DEADBB24A5C.crl rsync://repo-rpki.idnic.net/repo/4a48b222-6ded-428a-888f-10454b0880c2/0/81498B85C0E2937290B9B2119B132DEADBB24A5C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/81498B85C0E2937290B9B2119B132DEADBB24A5C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 09:50:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:a3:72:8d:5b:26:15:96:57:9c:4b:7c:02:18:fe:15:cd:83:ea:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81498B85C0E2937290B9B2119B132DEADBB24A5C Validity Not Before: Nov 4 02:35:57 2025 GMT Not After : Nov 7 09:50:57 2025 GMT Subject: CN=EDCCF5D1923A5247A7E5A9C99C79A55E68D6749E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:dc:fd:8c:09:d6:2c:81:40:96:07:1b:85:73: 9c:8e:81:01:ce:0f:71:d7:d5:80:93:8f:b9:ce:05: d0:c3:2d:64:5e:de:ce:f7:17:7d:0b:6d:b9:92:bf: 0d:0c:97:5f:f2:c2:6d:8d:d7:70:e8:93:08:22:c4: 07:aa:21:3f:9f:46:4d:2a:ef:8d:91:a7:16:08:01: 3d:97:08:fe:2b:5c:93:3c:c6:c6:a6:12:50:76:f4: 50:51:d2:7a:21:31:56:b5:97:b3:85:f8:98:6b:28: 21:26:9a:10:f6:5c:6b:32:85:99:df:24:d7:6f:af: ba:54:de:0c:39:fc:54:2a:63:96:6e:e7:b6:21:67: ae:29:82:3a:ea:de:20:d4:d5:a6:b2:4a:e8:ef:45: fc:f1:cb:41:a6:de:49:80:bd:e9:0d:d5:5d:74:77: eb:a6:b4:a5:6a:5f:b9:33:18:72:dd:cf:d0:0f:39: 09:09:00:14:e4:93:42:26:89:e5:ef:82:07:a2:e1: 68:ab:85:16:5b:07:0c:2d:9f:d3:a2:0a:56:22:d2: e2:09:a6:d3:5b:2f:05:39:31:ff:0d:d1:d9:7e:bc: 12:6e:2a:0a:13:a0:2f:47:a5:0f:1e:bd:b6:d3:b3: d0:b3:56:fe:04:ec:60:13:77:3e:f8:13:dc:a9:90: bd:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:CC:F5:D1:92:3A:52:47:A7:E5:A9:C9:9C:79:A5:5E:68:D6:74:9E X509v3 Authority Key Identifier: keyid:81:49:8B:85:C0:E2:93:72:90:B9:B2:11:9B:13:2D:EA:DB:B2:4A:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4a48b222-6ded-428a-888f-10454b0880c2/0/81498B85C0E2937290B9B2119B132DEADBB24A5C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/81498B85C0E2937290B9B2119B132DEADBB24A5C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4a48b222-6ded-428a-888f-10454b0880c2/0/81498B85C0E2937290B9B2119B132DEADBB24A5C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:d0:91:3d:4d:76:dd:84:ba:88:e9:c6:27:db:a9:e0:88:f6: c2:70:a2:3e:0f:0e:22:43:26:0c:ac:49:10:2e:35:31:11:a5: 0a:f5:9c:a9:68:a1:76:c4:02:26:f8:51:22:cb:13:f5:16:6e: 5e:85:b5:f5:d0:5b:8a:06:09:73:f0:a3:26:8a:5e:c4:e9:ed: 5d:5e:9e:c6:cd:e0:45:7c:eb:66:29:86:f6:e1:7e:06:c6:26: 52:0a:de:1c:94:a2:9e:08:64:a9:de:fd:3f:7e:d2:e9:34:d3: f9:37:5c:06:bf:43:65:6e:8f:7b:21:0a:21:4b:07:3f:3a:d2: ec:eb:72:7b:bd:96:c8:f2:2a:25:75:81:30:86:d0:6f:0b:de: b1:d6:5f:c7:fd:47:b7:c6:ad:92:87:a6:20:d7:da:ab:26:b6: 02:ea:8a:34:4b:57:2b:04:3d:9f:b0:b1:c5:eb:bf:34:28:92: 04:cb:c0:5e:61:0f:98:ad:b5:2d:f9:58:df:35:3d:c5:ed:8d: 9b:fd:0a:fe:1e:80:4f:58:f8:cc:a7:e8:42:96:a4:c9:25:97: 42:83:fc:de:e0:ae:06:03:0b:a2:56:32:33:58:07:41:11:d7: ff:cf:03:c5:4b:24:cb:32:36:bc:f8:a2:2f:9c:dc:ca:4a:6f: d1:ad:ae:1b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIaNyjVsmFZZXnEt8Ahj+Fc2D6ngwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODE0OThCODVDMEUyOTM3MjkwQjlCMjExOUIxMzJERUFE QkIyNEE1QzAeFw0yNTExMDQwMjM1NTdaFw0yNTExMDcwOTUwNTdaMDMxMTAvBgNV BAMTKEVEQ0NGNUQxOTIzQTUyNDdBN0U1QTlDOTlDNzlBNTVFNjhENjc0OUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE3P2MCdYsgUCWBxuFc5yOgQHO D3HX1YCTj7nOBdDDLWRe3s73F30LbbmSvw0Ml1/ywm2N13DokwgixAeqIT+fRk0q 742RpxYIAT2XCP4rXJM8xsamElB29FBR0nohMVa1l7OF+JhrKCEmmhD2XGsyhZnf JNdvr7pU3gw5/FQqY5Zu57YhZ64pgjrq3iDU1aaySujvRfzxy0Gm3kmAvekN1V10 d+umtKVqX7kzGHLdz9APOQkJABTkk0ImieXvggei4WirhRZbBwwtn9OiClYi0uIJ ptNbLwU5Mf8N0dl+vBJuKgoToC9HpQ8evbbTs9CzVv4E7GATdz74E9ypkL1hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7cz10ZI6Uken5anJnHmlXmjWdJ4wHwYDVR0j BBgwFoAUgUmLhcDik3KQubIRmxMt6tuySlwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YTQ4YjIyMi02ZGVkLTQyOGEtODg4Zi0xMDQ1NGIwODgwYzIvMC84MTQ5OEI4NUMw RTI5MzcyOTBCOUIyMTE5QjEzMkRFQURCQjI0QTVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODE0OThCODVDMEUyOTM3MjkwQjlCMjExOUIxMzJERUFEQkIy NEE1Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGE0OGIyMjItNmRlZC00MjhhLTg4 OGYtMTA0NTRiMDg4MGMyLzAvODE0OThCODVDMEUyOTM3MjkwQjlCMjExOUIxMzJE RUFEQkIyNEE1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABbQkT1Ndt2EuojpxifbqeCI9sJwoj4PDiJD JgysSRAuNTERpQr1nKlooXbEAib4USLLE/UWbl6FtfXQW4oGCXPwoyaKXsTp7V1e nsbN4EV862YphvbhfgbGJlIK3hyUop4IZKne/T9+0uk00/k3XAa/Q2Vuj3shCiFL Bz860uzrcnu9lsjyKiV1gTCG0G8L3rHWX8f9R7fGrZKHpiDX2qsmtgLqijRLVysE PZ+wscXrvzQokgTLwF5hD5ittS35WN81PcXtjZv9Cv4egE9Y+Myn6EKWpMkll0KD /N7grgYDC6JWMjNYB0ER1//PA8VLJMsyNrz4oi+c3MpKb9Gtrhs= -----END CERTIFICATE-----Generated at Tue Nov 4 19:05:18 2025 by rpki-client