$ rpki-client -vvf repo-rpki.idnic.net/repo/5baebfb3-e29b-47c4-bd21-4571c30f441b/0/A4A4C426A4F42A29829636FB3223FA7F5C68509A.mft File: A4A4C426A4F42A29829636FB3223FA7F5C68509A.mft (raw, json) Hash identifier: rNIrnn5O9HAFosfQ/0s6m0vdh4s865oS749nBgtPWZI= Subject key identifier: 48:CA:A4:0E:AA:70:E2:7F:4C:8F:38:91:75:56:DF:9B:14:64:69:55 Authority key identifier: A4:A4:C4:26:A4:F4:2A:29:82:96:36:FB:32:23:FA:7F:5C:68:50:9A Certificate issuer: /CN=A4A4C426A4F42A29829636FB3223FA7F5C68509A Certificate serial: 64032257BE3C88D052A3F15DD349798C49B50CC9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A4A4C426A4F42A29829636FB3223FA7F5C68509A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5baebfb3-e29b-47c4-bd21-4571c30f441b/0/A4A4C426A4F42A29829636FB3223FA7F5C68509A.mft Manifest number: 0246 Signing time: Mon 03 Nov 2025 11:21:54 +0000 Manifest this update: Mon 03 Nov 2025 11:16:54 +0000 Manifest next update: Thu 06 Nov 2025 14:42:54 +0000 Files and hashes: 1: 3130332e31332e33362e302f32342d3234203d3e20313331373231.roa (hash: 6F/+m53CI+OBq/k1F+jb2qhZ0UKG610wF81rsZOA7iw=) 2: A4A4C426A4F42A29829636FB3223FA7F5C68509A.crl (hash: /pTGeHnyh0xJG8Flvbmze6nP6goizw768p+FyV4EVbU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5baebfb3-e29b-47c4-bd21-4571c30f441b/0/A4A4C426A4F42A29829636FB3223FA7F5C68509A.crl rsync://repo-rpki.idnic.net/repo/5baebfb3-e29b-47c4-bd21-4571c30f441b/0/A4A4C426A4F42A29829636FB3223FA7F5C68509A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A4A4C426A4F42A29829636FB3223FA7F5C68509A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 14:42:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:03:22:57:be:3c:88:d0:52:a3:f1:5d:d3:49:79:8c:49:b5:0c:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A4A4C426A4F42A29829636FB3223FA7F5C68509A Validity Not Before: Nov 3 11:16:54 2025 GMT Not After : Nov 6 14:42:54 2025 GMT Subject: CN=48CAA40EAA70E27F4C8F38917556DF9B14646955 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:80:5d:d8:c4:9a:6f:38:4f:e4:f4:c3:27:ec: 65:f1:51:c7:f0:6a:cf:8d:f9:93:fa:c7:02:4e:74: 60:e4:aa:40:7e:23:8a:09:12:5f:d0:13:8e:92:e4: e4:1d:39:7a:2a:77:79:00:a7:0a:b1:ff:50:4e:4b: 1e:f5:50:8a:8f:4c:0a:d2:24:62:6e:bd:03:c7:14: ca:b3:d4:d5:ff:e2:6a:df:4b:44:dc:89:b6:96:51: c2:92:a4:24:c7:d1:18:6d:54:f3:f7:78:d9:1c:cd: 55:dc:e1:60:5f:8b:cf:57:7c:36:83:41:a4:3c:7b: c1:a9:a0:66:77:31:55:cf:76:cb:93:aa:27:6f:94: e7:ba:d5:4c:9d:4b:3e:55:31:99:91:a7:dd:cd:5f: 3f:93:d6:36:75:44:4d:07:3c:e8:50:78:b1:07:af: 2a:94:6c:b9:d4:b6:4f:90:83:3f:3b:44:7f:cb:c9: d0:7a:21:1a:2b:eb:df:eb:25:bf:c2:bd:42:d3:1e: 0d:87:81:7c:1b:52:10:c2:58:2a:4b:af:a9:b9:01: 6a:cb:f4:8c:7a:cd:c2:f3:90:11:ec:4f:c6:93:69: df:bb:1e:41:47:be:ac:79:e2:9b:8f:ac:b2:c6:f5: 25:91:93:d3:ca:49:e6:d3:91:9c:bc:95:b1:3b:85: f4:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:CA:A4:0E:AA:70:E2:7F:4C:8F:38:91:75:56:DF:9B:14:64:69:55 X509v3 Authority Key Identifier: keyid:A4:A4:C4:26:A4:F4:2A:29:82:96:36:FB:32:23:FA:7F:5C:68:50:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5baebfb3-e29b-47c4-bd21-4571c30f441b/0/A4A4C426A4F42A29829636FB3223FA7F5C68509A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A4A4C426A4F42A29829636FB3223FA7F5C68509A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5baebfb3-e29b-47c4-bd21-4571c30f441b/0/A4A4C426A4F42A29829636FB3223FA7F5C68509A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:6f:b6:39:4c:ed:85:3f:bd:8c:56:20:54:26:27:14:10:16: 25:3c:89:4d:31:cc:99:b0:75:d3:44:93:33:9b:ca:93:87:54: c5:a2:ce:9c:47:72:d1:92:0e:70:1e:54:4d:44:78:e7:f0:72: cc:db:43:0d:f7:c3:61:32:5d:a8:63:23:44:1c:1c:c5:be:6b: 53:d9:ed:b2:64:09:28:d3:07:92:0e:ca:cf:10:e1:b1:6b:55: 91:10:b9:98:ad:99:c3:02:29:bf:25:e3:59:16:ba:39:e0:32: 79:cd:bd:20:76:bd:77:5f:67:04:a7:6d:26:75:3c:fb:74:ec: 45:52:24:11:37:e5:75:b2:7d:48:2d:0c:35:e3:a7:f3:b7:2e: 83:d9:e1:23:12:21:1d:bd:50:5c:a1:16:f7:3d:6f:56:a4:7d: 2d:47:fe:5b:9f:bf:e0:8b:f1:94:da:2b:27:1b:4c:63:26:f8: 01:ec:80:af:16:2c:d4:07:b1:b1:17:5c:f5:e1:f3:b3:20:69: a9:fd:fc:e5:3a:5d:d6:64:23:39:a5:9c:3c:6e:d7:ee:e6:40: b0:f1:e0:27:03:ba:dd:19:a5:09:a4:ff:c6:fb:a0:68:c3:57: 19:17:aa:81:a7:9e:9b:08:4e:52:3d:ff:c9:1b:7c:5a:b0:fa: 9e:29:f4:9e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZAMiV748iNBSo/Fd00l5jEm1DMkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTRBNEM0MjZBNEY0MkEyOTgyOTYzNkZCMzIyM0ZBN0Y1 QzY4NTA5QTAeFw0yNTExMDMxMTE2NTRaFw0yNTExMDYxNDQyNTRaMDMxMTAvBgNV BAMTKDQ4Q0FBNDBFQUE3MEUyN0Y0QzhGMzg5MTc1NTZERjlCMTQ2NDY5NTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUgF3YxJpvOE/k9MMn7GXxUcfw as+N+ZP6xwJOdGDkqkB+I4oJEl/QE46S5OQdOXoqd3kApwqx/1BOSx71UIqPTArS JGJuvQPHFMqz1NX/4mrfS0TcibaWUcKSpCTH0RhtVPP3eNkczVXc4WBfi89XfDaD QaQ8e8GpoGZ3MVXPdsuTqidvlOe61UydSz5VMZmRp93NXz+T1jZ1RE0HPOhQeLEH ryqUbLnUtk+Qgz87RH/LydB6IRor69/rJb/CvULTHg2HgXwbUhDCWCpLr6m5AWrL 9Ix6zcLzkBHsT8aTad+7HkFHvqx54puPrLLG9SWRk9PKSebTkZy8lbE7hfTLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSMqkDqpw4n9MjziRdVbfmxRkaVUwHwYDVR0j BBgwFoAUpKTEJqT0KimCljb7MiP6f1xoUJowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YmFlYmZiMy1lMjliLTQ3YzQtYmQyMS00NTcxYzMwZjQ0MWIvMC9BNEE0QzQyNkE0 RjQyQTI5ODI5NjM2RkIzMjIzRkE3RjVDNjg1MDlBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTRBNEM0MjZBNEY0MkEyOTgyOTYzNkZCMzIyM0ZBN0Y1QzY4 NTA5QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWJhZWJmYjMtZTI5Yi00N2M0LWJk MjEtNDU3MWMzMGY0NDFiLzAvQTRBNEM0MjZBNEY0MkEyOTgyOTYzNkZCMzIyM0ZB N0Y1QzY4NTA5QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC1vtjlM7YU/vYxWIFQmJxQQFiU8iU0xzJmw ddNEkzObypOHVMWizpxHctGSDnAeVE1EeOfwcszbQw33w2EyXahjI0QcHMW+a1PZ 7bJkCSjTB5IOys8Q4bFrVZEQuZitmcMCKb8l41kWujngMnnNvSB2vXdfZwSnbSZ1 PPt07EVSJBE35XWyfUgtDDXjp/O3LoPZ4SMSIR29UFyhFvc9b1akfS1H/lufv+CL 8ZTaKycbTGMm+AHsgK8WLNQHsbEXXPXh87Mgaan9/OU6XdZkIzmlnDxu1+7mQLDx 4CcDut0ZpQmk/8b7oGjDVxkXqoGnnpsITlI9/8kbfFqw+p4p9J4= -----END CERTIFICATE-----Generated at Wed Nov 5 15:04:37 2025 by rpki-client