$ rpki-client -vvf repo-rpki.idnic.net/repo/52b38f79-26d3-4489-a47d-0a8805b448ae/0/4E4C9A47789406B9086713C5B821524B664E7C90.mft File: 4E4C9A47789406B9086713C5B821524B664E7C90.mft (raw, json) Hash identifier: Ty4e/jz9+ewQBPiy3XbInLe34DL8WuHHGCCdF5Pr7l8= Subject key identifier: 6A:D8:13:86:58:5C:5A:10:AD:AA:12:10:06:AB:91:5E:11:E3:AA:95 Authority key identifier: 4E:4C:9A:47:78:94:06:B9:08:67:13:C5:B8:21:52:4B:66:4E:7C:90 Certificate issuer: /CN=4E4C9A47789406B9086713C5B821524B664E7C90 Certificate serial: 478F9575974A535DABBE94F4800424FA9ECD2000 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E4C9A47789406B9086713C5B821524B664E7C90.cer Subject info access: rsync://repo-rpki.idnic.net/repo/52b38f79-26d3-4489-a47d-0a8805b448ae/0/4E4C9A47789406B9086713C5B821524B664E7C90.mft Manifest number: 0146 Signing time: Tue 04 Nov 2025 11:31:09 +0000 Manifest this update: Tue 04 Nov 2025 11:26:09 +0000 Manifest next update: Fri 07 Nov 2025 17:14:09 +0000 Files and hashes: 1: 3230332e3137352e3132352e302f32342d3234203d3e20313339393532.roa (hash: NkDaIeWsM/gPXaHtYqNr3YcOAUXw5i1dgIsc199+Uh8=) 2: 3230332e3137352e3132342e302f32342d3234203d3e20313339393532.roa (hash: XwTy3von9UfcQqdLvssnHX18UIYiFkJwOgDC3XKu89E=) 3: 4E4C9A47789406B9086713C5B821524B664E7C90.crl (hash: B52beLQxel612i/LdvaSaVJ5KHNtDOO60pmRkhkTl2o=) 4: 3230332e3137352e3132342e302f32332d3233203d3e20313339393532.roa (hash: yXTkW60GOZZ9N/VIjulkmadt8AvcqAL97NY/DZvxI1Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/52b38f79-26d3-4489-a47d-0a8805b448ae/0/4E4C9A47789406B9086713C5B821524B664E7C90.crl rsync://repo-rpki.idnic.net/repo/52b38f79-26d3-4489-a47d-0a8805b448ae/0/4E4C9A47789406B9086713C5B821524B664E7C90.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E4C9A47789406B9086713C5B821524B664E7C90.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 13:50:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:8f:95:75:97:4a:53:5d:ab:be:94:f4:80:04:24:fa:9e:cd:20:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4E4C9A47789406B9086713C5B821524B664E7C90 Validity Not Before: Nov 4 11:26:09 2025 GMT Not After : Nov 7 17:14:09 2025 GMT Subject: CN=6AD81386585C5A10ADAA121006AB915E11E3AA95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:16:ab:00:be:81:4a:55:59:f4:94:9d:ad:ac: 66:c8:3a:aa:d4:1a:0a:7a:b6:71:bf:e2:c0:73:e3: d9:07:6a:dd:e4:70:0a:06:b2:1f:36:35:01:18:f4: a7:83:4d:f6:15:d7:5c:91:1c:a3:3d:44:05:81:ae: d1:d1:9e:a3:7a:5d:be:ed:a1:26:8b:77:90:0a:0f: 46:71:59:36:ca:c7:00:79:d6:41:63:3e:28:f7:96: 08:a5:af:5a:50:3d:ff:fa:0e:9e:9d:5c:b6:01:0c: bb:4d:a1:97:73:c4:34:c3:57:07:25:62:6c:a5:f8: d6:b4:df:a3:a1:cb:bf:47:11:0e:dd:13:a9:91:1d: bd:e1:6a:da:ca:35:58:84:0a:c2:24:b1:ca:9b:ca: 75:65:51:3c:98:67:7f:e4:61:cd:b1:d0:32:56:2d: 99:5f:bb:86:17:88:5e:fe:0e:99:2f:4c:cf:29:1c: 66:1c:c9:ec:0a:1c:d2:71:4a:56:58:2d:df:73:9f: 48:19:d3:e3:92:bd:c2:b2:ad:39:6c:73:2e:59:2f: a9:04:f4:b3:5d:10:13:75:46:6e:77:cb:2e:07:e1: 1f:56:0e:b2:26:59:54:98:ae:e3:5e:7b:44:97:be: ec:d4:a3:29:9c:93:ef:2f:64:f0:f5:88:27:a6:e3: db:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:D8:13:86:58:5C:5A:10:AD:AA:12:10:06:AB:91:5E:11:E3:AA:95 X509v3 Authority Key Identifier: keyid:4E:4C:9A:47:78:94:06:B9:08:67:13:C5:B8:21:52:4B:66:4E:7C:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/52b38f79-26d3-4489-a47d-0a8805b448ae/0/4E4C9A47789406B9086713C5B821524B664E7C90.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E4C9A47789406B9086713C5B821524B664E7C90.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/52b38f79-26d3-4489-a47d-0a8805b448ae/0/4E4C9A47789406B9086713C5B821524B664E7C90.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:bf:6f:97:6a:b5:02:00:61:d0:9f:24:5a:29:9e:18:22:73: 1c:45:e5:48:2b:07:ca:07:8f:dc:23:4c:8f:12:2c:5e:9d:3c: 89:9d:8c:11:a2:74:ac:d7:5b:f9:bd:44:44:b7:9d:ea:35:91: 1c:57:25:de:c1:df:16:a5:81:f3:39:6e:46:b8:e7:ee:3c:6c: 29:ba:c9:92:d5:c9:a7:37:06:db:90:4f:46:f2:03:7b:de:30: 8a:93:22:d7:68:b2:72:b5:35:c9:26:d5:5f:34:95:fd:f1:01: bd:5e:d5:8b:20:58:b1:4c:9c:6d:80:52:e9:1d:2d:9e:48:cc: 4a:d1:89:0a:5f:2a:64:d9:eb:ee:1a:fc:ce:40:43:30:a2:65: f2:61:85:78:08:bb:23:70:e5:f2:5d:7f:7e:47:1a:d6:33:b3: 8b:6f:e1:01:35:a6:95:44:6e:26:40:d6:89:27:c5:cb:a3:cf: 86:85:f0:c2:07:12:4b:99:91:5f:3f:74:a9:e4:43:d3:95:b5: fb:3f:25:ed:24:4c:ab:c0:ae:3d:ec:f0:59:02:41:ed:97:be: 68:84:e6:e7:3f:72:b9:23:ec:0e:fc:4f:0f:a3:9a:c9:01:3f: 81:d6:f7:69:b2:a4:87:88:62:23:b1:ec:5a:0f:15:2a:50:5e: ba:a6:ba:b7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUR4+VdZdKU12rvpT0gAQk+p7NIAAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEU0QzlBNDc3ODk0MDZCOTA4NjcxM0M1QjgyMTUyNEI2 NjRFN0M5MDAeFw0yNTExMDQxMTI2MDlaFw0yNTExMDcxNzE0MDlaMDMxMTAvBgNV BAMTKDZBRDgxMzg2NTg1QzVBMTBBREFBMTIxMDA2QUI5MTVFMTFFM0FBOTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdFqsAvoFKVVn0lJ2trGbIOqrU Ggp6tnG/4sBz49kHat3kcAoGsh82NQEY9KeDTfYV11yRHKM9RAWBrtHRnqN6Xb7t oSaLd5AKD0ZxWTbKxwB51kFjPij3lgilr1pQPf/6Dp6dXLYBDLtNoZdzxDTDVwcl Ymyl+Na036Ohy79HEQ7dE6mRHb3hatrKNViECsIkscqbynVlUTyYZ3/kYc2x0DJW LZlfu4YXiF7+DpkvTM8pHGYcyewKHNJxSlZYLd9zn0gZ0+OSvcKyrTlscy5ZL6kE 9LNdEBN1Rm53yy4H4R9WDrImWVSYruNee0SXvuzUoymck+8vZPD1iCem49sfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUatgThlhcWhCtqhIQBquRXhHjqpUwHwYDVR0j BBgwFoAUTkyaR3iUBrkIZxPFuCFSS2ZOfJAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MmIzOGY3OS0yNmQzLTQ0ODktYTQ3ZC0wYTg4MDViNDQ4YWUvMC80RTRDOUE0Nzc4 OTQwNkI5MDg2NzEzQzVCODIxNTI0QjY2NEU3QzkwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEU0QzlBNDc3ODk0MDZCOTA4NjcxM0M1QjgyMTUyNEI2NjRF N0M5MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTJiMzhmNzktMjZkMy00NDg5LWE0 N2QtMGE4ODA1YjQ0OGFlLzAvNEU0QzlBNDc3ODk0MDZCOTA4NjcxM0M1QjgyMTUy NEI2NjRFN0M5MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEa/b5dqtQIAYdCfJFopnhgicxxF5UgrB8oH j9wjTI8SLF6dPImdjBGidKzXW/m9RES3neo1kRxXJd7B3xalgfM5bka45+48bCm6 yZLVyac3BtuQT0byA3veMIqTItdosnK1Nckm1V80lf3xAb1e1YsgWLFMnG2AUukd LZ5IzErRiQpfKmTZ6+4a/M5AQzCiZfJhhXgIuyNw5fJdf35HGtYzs4tv4QE1ppVE biZA1oknxcujz4aF8MIHEkuZkV8/dKnkQ9OVtfs/Je0kTKvArj3s8FkCQe2XvmiE 5uc/crkj7A78Tw+jmskBP4HW92mypIeIYiOx7FoPFSpQXrqmurc= -----END CERTIFICATE-----Generated at Tue Nov 4 21:16:13 2025 by rpki-client