$ rpki-client -vvf repo-rpki.idnic.net/repo/533f60e6-afdd-4e10-83b4-e8cbd641c52f/0/4EB8521D8427720F50A3F65249F2D26C6CD22F13.mft File: 4EB8521D8427720F50A3F65249F2D26C6CD22F13.mft (raw, json) Hash identifier: JK+H08vMuAoi324j+hR7iO3tTDOgUooSrRn7GAVneH4= Subject key identifier: 2F:88:13:FD:4A:A0:72:70:45:02:98:3C:4B:32:50:44:41:BF:76:FF Authority key identifier: 4E:B8:52:1D:84:27:72:0F:50:A3:F6:52:49:F2:D2:6C:6C:D2:2F:13 Certificate issuer: /CN=4EB8521D8427720F50A3F65249F2D26C6CD22F13 Certificate serial: 566F9A418420C5405E655FB6F4E66F8DDA6B8291 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4EB8521D8427720F50A3F65249F2D26C6CD22F13.cer Subject info access: rsync://repo-rpki.idnic.net/repo/533f60e6-afdd-4e10-83b4-e8cbd641c52f/0/4EB8521D8427720F50A3F65249F2D26C6CD22F13.mft Manifest number: 020B Signing time: Sun 02 Nov 2025 06:51:31 +0000 Manifest this update: Sun 02 Nov 2025 06:46:31 +0000 Manifest next update: Wed 05 Nov 2025 16:42:31 +0000 Files and hashes: 1: 4EB8521D8427720F50A3F65249F2D26C6CD22F13.crl (hash: k/Sf46oqQt4JYZPk4fTQ8i9cYdl0sMLEUAn9itPkkSc=) 2: 3130332e3135382e3135342e302f32332d3233203d3e20313431313236.roa (hash: KoxYk2ZRPcbgpF7xh9ACZAj2oe0zktHzsGiH4v0qag8=) 3: 3130332e3135382e3135342e302f32342d3234203d3e20313431313236.roa (hash: lpElssmpxfbgKNNgmUzWoL87GOZos951RTYVyi3dLoQ=) 4: 3130332e3135382e3135352e302f32342d3234203d3e20313431313236.roa (hash: OpAGSXy4nDXjC/N8zkYIDwXuoKZWJrsqeYGg4c9hm6U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/533f60e6-afdd-4e10-83b4-e8cbd641c52f/0/4EB8521D8427720F50A3F65249F2D26C6CD22F13.crl rsync://repo-rpki.idnic.net/repo/533f60e6-afdd-4e10-83b4-e8cbd641c52f/0/4EB8521D8427720F50A3F65249F2D26C6CD22F13.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4EB8521D8427720F50A3F65249F2D26C6CD22F13.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 16:42:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:6f:9a:41:84:20:c5:40:5e:65:5f:b6:f4:e6:6f:8d:da:6b:82:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4EB8521D8427720F50A3F65249F2D26C6CD22F13 Validity Not Before: Nov 2 06:46:31 2025 GMT Not After : Nov 5 16:42:31 2025 GMT Subject: CN=2F8813FD4AA072704502983C4B32504441BF76FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:b4:65:5c:7a:d9:57:6d:b9:2d:79:ae:91:3e: b3:72:f7:e0:31:a9:b1:39:63:8e:7d:2e:6a:d3:4b: cc:99:95:9a:e9:05:26:51:65:2f:53:40:db:59:bb: 80:7d:f2:0b:f6:9e:c5:34:2c:2a:06:57:ea:eb:5e: 26:6f:ac:cb:69:85:3d:cb:98:f4:36:b5:d5:8b:1f: 7f:6c:7c:73:9d:3a:5c:c0:15:3e:7e:e0:46:ae:02: 76:2c:a6:01:f1:6a:25:04:57:65:66:09:32:b4:56: c2:99:92:1b:b0:c1:84:d6:39:ac:ce:bc:03:78:32: 55:aa:ca:98:bb:1e:bb:fe:d1:05:59:23:9e:4f:cf: 7c:22:8d:4b:de:ca:2c:a6:4d:f2:ab:2e:79:50:9c: bd:98:5c:aa:16:78:a7:82:e2:ab:a4:a8:b9:5d:13: a5:c2:7c:52:36:db:08:df:f0:3b:98:38:5e:a1:10: d8:04:a1:7c:91:09:7b:90:0b:16:16:86:31:0e:45: c0:da:2a:cd:01:11:8b:e5:54:ff:c5:13:5d:ba:51: 6c:95:27:8a:3e:4c:7b:02:9d:ba:68:90:ed:69:17: b0:8c:b6:1d:e4:12:10:b8:38:78:ce:ce:f6:3f:cc: bf:32:94:32:77:9e:17:bd:ad:d1:6b:6b:3a:63:e2: 1e:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:88:13:FD:4A:A0:72:70:45:02:98:3C:4B:32:50:44:41:BF:76:FF X509v3 Authority Key Identifier: keyid:4E:B8:52:1D:84:27:72:0F:50:A3:F6:52:49:F2:D2:6C:6C:D2:2F:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/533f60e6-afdd-4e10-83b4-e8cbd641c52f/0/4EB8521D8427720F50A3F65249F2D26C6CD22F13.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4EB8521D8427720F50A3F65249F2D26C6CD22F13.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/533f60e6-afdd-4e10-83b4-e8cbd641c52f/0/4EB8521D8427720F50A3F65249F2D26C6CD22F13.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:c1:ea:f5:1f:10:0d:86:2a:bc:af:9d:da:34:fc:e8:58:40: 4f:62:64:1d:49:d5:86:ed:ad:c6:55:2c:ac:a7:57:52:d4:a0: 03:db:5a:18:c2:aa:bf:17:a7:1b:67:11:54:18:a0:37:b6:36: aa:6f:a7:39:1a:68:1e:42:1e:5b:2d:15:b5:12:40:44:87:fb: 8e:84:a2:66:1d:07:0d:8b:71:06:79:4b:05:fc:df:8f:16:4b: 76:10:07:6d:a0:0c:d0:b1:ae:1a:83:5e:4e:db:70:10:39:75: 88:d6:f1:e1:37:d0:49:f1:a3:90:76:2d:e3:50:de:87:ee:b0: a6:0f:e3:ca:64:b2:ef:da:71:1f:f3:f0:17:a3:2c:2e:b7:e1: 20:ae:d7:52:33:94:6a:b6:40:8b:f5:9e:a2:05:4f:c0:13:c9: af:d4:df:8c:a0:c5:f7:f5:56:70:6f:62:f9:c1:ab:75:1a:9f: 62:3c:af:19:a0:fd:2c:59:67:34:74:c5:7d:1c:4a:41:65:5e: d1:dd:bf:f9:86:31:5a:36:da:7e:ee:c7:cc:7d:e9:60:9b:2c: c9:73:4d:48:b8:6d:17:69:09:9c:10:ed:e9:ad:fc:c6:f3:36: ee:0f:ba:da:ac:3b:a2:45:12:8d:e1:a3:62:69:26:a6:c1:ec: 30:69:02:46 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVm+aQYQgxUBeZV+29OZvjdprgpEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEVCODUyMUQ4NDI3NzIwRjUwQTNGNjUyNDlGMkQyNkM2 Q0QyMkYxMzAeFw0yNTExMDIwNjQ2MzFaFw0yNTExMDUxNjQyMzFaMDMxMTAvBgNV BAMTKDJGODgxM0ZENEFBMDcyNzA0NTAyOTgzQzRCMzI1MDQ0NDFCRjc2RkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTtGVcetlXbbktea6RPrNy9+Ax qbE5Y459LmrTS8yZlZrpBSZRZS9TQNtZu4B98gv2nsU0LCoGV+rrXiZvrMtphT3L mPQ2tdWLH39sfHOdOlzAFT5+4EauAnYspgHxaiUEV2VmCTK0VsKZkhuwwYTWOazO vAN4MlWqypi7Hrv+0QVZI55Pz3wijUveyiymTfKrLnlQnL2YXKoWeKeC4qukqLld E6XCfFI22wjf8DuYOF6hENgEoXyRCXuQCxYWhjEORcDaKs0BEYvlVP/FE126UWyV J4o+THsCnbpokO1pF7CMth3kEhC4OHjOzvY/zL8ylDJ3nhe9rdFrazpj4h79AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUL4gT/UqgcnBFApg8SzJQREG/dv8wHwYDVR0j BBgwFoAUTrhSHYQncg9Qo/ZSSfLSbGzSLxMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MzNmNjBlNi1hZmRkLTRlMTAtODNiNC1lOGNiZDY0MWM1MmYvMC80RUI4NTIxRDg0 Mjc3MjBGNTBBM0Y2NTI0OUYyRDI2QzZDRDIyRjEzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEVCODUyMUQ4NDI3NzIwRjUwQTNGNjUyNDlGMkQyNkM2Q0Qy MkYxMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTMzZjYwZTYtYWZkZC00ZTEwLTgz YjQtZThjYmQ2NDFjNTJmLzAvNEVCODUyMUQ4NDI3NzIwRjUwQTNGNjUyNDlGMkQy NkM2Q0QyMkYxMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACnB6vUfEA2GKryvndo0/OhYQE9iZB1J1Ybt rcZVLKynV1LUoAPbWhjCqr8XpxtnEVQYoDe2NqpvpzkaaB5CHlstFbUSQESH+46E omYdBw2LcQZ5SwX8348WS3YQB22gDNCxrhqDXk7bcBA5dYjW8eE30Enxo5B2LeNQ 3ofusKYP48pksu/acR/z8BejLC634SCu11IzlGq2QIv1nqIFT8ATya/U34ygxff1 VnBvYvnBq3Uan2I8rxmg/SxZZzR0xX0cSkFlXtHdv/mGMVo22n7ux8x96WCbLMlz TUi4bRdpCZwQ7emt/MbzNu4PutqsO6JFEo3ho2JpJqbB7DBpAkY= -----END CERTIFICATE-----Generated at Tue Nov 4 01:56:41 2025 by rpki-client