$ rpki-client -vvf repo-rpki.idnic.net/repo/75d6efff-85b2-4af4-89ab-6d98c9527da4/0/604C441ACDF554F380D7FED8F68B2EC7FB780413.mft File: 604C441ACDF554F380D7FED8F68B2EC7FB780413.mft (raw, json) Hash identifier: fai0aF5aVp6jRWdKPkv4gGLi9Mg0UqS7/GyJO472bA0= Subject key identifier: 41:D9:44:A3:AA:2B:0B:D1:0D:53:0B:06:3E:72:05:8F:84:88:53:9F Authority key identifier: 60:4C:44:1A:CD:F5:54:F3:80:D7:FE:D8:F6:8B:2E:C7:FB:78:04:13 Certificate issuer: /CN=604C441ACDF554F380D7FED8F68B2EC7FB780413 Certificate serial: 31DF8CB0C456428409135826B36ACE58D80935DB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/604C441ACDF554F380D7FED8F68B2EC7FB780413.cer Subject info access: rsync://repo-rpki.idnic.net/repo/75d6efff-85b2-4af4-89ab-6d98c9527da4/0/604C441ACDF554F380D7FED8F68B2EC7FB780413.mft Manifest number: 01E7 Signing time: Mon 03 Nov 2025 18:41:04 +0000 Manifest this update: Mon 03 Nov 2025 18:36:04 +0000 Manifest next update: Thu 06 Nov 2025 22:50:04 +0000 Files and hashes: 1: 604C441ACDF554F380D7FED8F68B2EC7FB780413.crl (hash: m/+Uia6hXq9kePPrXM2oyq1cQwLLKLWzyB8s9uyxp9o=) 2: 3130332e3139312e3139362e302f32342d3234203d3e20313439393334.roa (hash: EQbr12ySqIrNTM9njp7Wb0XN8yJtB1BDEx2u9gpZun8=) 3: 3130332e3139312e3139362e302f32332d3234203d3e20313439393334.roa (hash: OjD7igAi8uIoux+rVxGtZEh2dpv8xELOea0gwWs5+6I=) 4: 3130332e3139312e3139372e302f32342d3234203d3e20313439393334.roa (hash: sm8jeStS9mRgsrGl5CeRQ6sBSscm5f2rHE/KQpXoWj8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/75d6efff-85b2-4af4-89ab-6d98c9527da4/0/604C441ACDF554F380D7FED8F68B2EC7FB780413.crl rsync://repo-rpki.idnic.net/repo/75d6efff-85b2-4af4-89ab-6d98c9527da4/0/604C441ACDF554F380D7FED8F68B2EC7FB780413.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/604C441ACDF554F380D7FED8F68B2EC7FB780413.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 22:50:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:df:8c:b0:c4:56:42:84:09:13:58:26:b3:6a:ce:58:d8:09:35:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=604C441ACDF554F380D7FED8F68B2EC7FB780413 Validity Not Before: Nov 3 18:36:04 2025 GMT Not After : Nov 6 22:50:04 2025 GMT Subject: CN=41D944A3AA2B0BD10D530B063E72058F8488539F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:dd:92:16:a0:98:a1:9b:c2:b9:13:fe:b8:67: ca:24:fb:19:9d:1c:97:8a:80:39:ee:8d:be:75:20: e9:f8:24:ce:de:67:0a:6d:3f:33:42:1b:e8:72:57: e8:be:b7:96:17:fc:6e:0a:01:a1:0f:5c:79:27:86: 96:39:f5:e8:7c:6d:79:75:6a:3c:9a:6a:b6:6b:16: 9f:1a:97:8b:49:97:f5:25:d8:a7:d5:90:55:1b:7f: 3f:09:ec:50:8f:5d:80:e0:dd:57:2e:12:1e:a6:ac: 4c:0a:ec:80:b7:ff:b0:51:99:9c:85:57:50:f6:57: 30:a3:cd:21:23:79:8b:4b:a1:2f:62:60:8a:06:41: 0f:af:4f:3e:b3:99:59:9e:f2:76:4d:bf:ea:94:f2: 59:07:86:f7:8d:e9:11:77:bb:f8:6e:74:70:5c:81: 7e:aa:bd:12:12:54:49:6c:fc:3d:04:7f:f2:2c:10: 20:9d:22:f8:a7:a7:e3:1a:fe:c1:ed:a5:31:52:23: c8:8f:3c:62:d6:6a:bf:47:33:b3:65:9f:9e:73:d5: 4b:96:fe:02:82:37:9f:aa:9a:10:81:00:03:3a:e3: c4:67:45:3c:de:2a:2b:fb:19:ae:95:43:9b:5e:64: 5a:51:34:c7:4e:7c:75:6f:0e:65:11:7c:98:7a:c6: da:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:D9:44:A3:AA:2B:0B:D1:0D:53:0B:06:3E:72:05:8F:84:88:53:9F X509v3 Authority Key Identifier: keyid:60:4C:44:1A:CD:F5:54:F3:80:D7:FE:D8:F6:8B:2E:C7:FB:78:04:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/75d6efff-85b2-4af4-89ab-6d98c9527da4/0/604C441ACDF554F380D7FED8F68B2EC7FB780413.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/604C441ACDF554F380D7FED8F68B2EC7FB780413.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/75d6efff-85b2-4af4-89ab-6d98c9527da4/0/604C441ACDF554F380D7FED8F68B2EC7FB780413.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:a1:b6:f9:77:d8:29:1f:f0:31:c7:b6:db:c4:98:9f:24:3b: 4b:65:99:50:47:6d:f5:3f:80:2b:85:6b:bf:71:ff:d6:33:4b: 90:d8:67:86:d0:2f:94:5c:ba:5c:59:91:b1:21:cd:99:4a:d1: 69:bd:80:ff:e5:24:80:83:9c:24:4f:a0:10:18:76:95:8b:75: 08:cd:ad:5b:f5:e9:21:30:02:38:d5:11:02:7f:d2:f6:22:fd: 72:0b:5e:21:ce:f1:dc:10:14:6f:a8:44:50:95:f3:19:44:8b: f2:43:81:6d:2f:d0:20:8a:15:69:04:ff:1a:d3:4b:d4:64:b6: c4:0e:85:b6:2f:d0:97:f4:18:9a:e8:45:15:68:9b:f6:f5:c1: c1:ba:fc:83:bd:86:6f:e8:f6:a7:10:b2:3e:1e:ff:94:fd:08: 1f:ea:6e:db:f7:c6:e2:96:11:09:df:c4:71:a1:bc:09:0a:4d: ea:66:46:ef:23:69:ea:e5:7c:38:d0:7a:35:a5:7c:a8:78:72: 62:00:f8:b9:e2:d4:1e:ce:41:f3:7a:b4:b6:f2:02:36:a4:6a: 35:db:ee:00:6c:6d:e4:c0:a5:2d:bf:f5:f9:ad:32:22:36:3e: 0c:c2:75:c2:bb:91:48:11:e1:01:fc:38:f4:7f:33:1f:e4:42: 9d:ef:93:7e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMd+MsMRWQoQJE1gms2rOWNgJNdswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA0QzQ0MUFDREY1NTRGMzgwRDdGRUQ4RjY4QjJFQzdG Qjc4MDQxMzAeFw0yNTExMDMxODM2MDRaFw0yNTExMDYyMjUwMDRaMDMxMTAvBgNV BAMTKDQxRDk0NEEzQUEyQjBCRDEwRDUzMEIwNjNFNzIwNThGODQ4ODUzOUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg3ZIWoJihm8K5E/64Z8ok+xmd HJeKgDnujb51IOn4JM7eZwptPzNCG+hyV+i+t5YX/G4KAaEPXHknhpY59eh8bXl1 ajyaarZrFp8al4tJl/Ul2KfVkFUbfz8J7FCPXYDg3VcuEh6mrEwK7IC3/7BRmZyF V1D2VzCjzSEjeYtLoS9iYIoGQQ+vTz6zmVme8nZNv+qU8lkHhveN6RF3u/hudHBc gX6qvRISVEls/D0Ef/IsECCdIvinp+Ma/sHtpTFSI8iPPGLWar9HM7Nln55z1UuW /gKCN5+qmhCBAAM648RnRTzeKiv7Ga6VQ5teZFpRNMdOfHVvDmURfJh6xtqTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQdlEo6orC9ENUwsGPnIFj4SIU58wHwYDVR0j BBgwFoAUYExEGs31VPOA1/7Y9osux/t4BBMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NWQ2ZWZmZi04NWIyLTRhZjQtODlhYi02ZDk4Yzk1MjdkYTQvMC82MDRDNDQxQUNE RjU1NEYzODBEN0ZFRDhGNjhCMkVDN0ZCNzgwNDEzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjA0QzQ0MUFDREY1NTRGMzgwRDdGRUQ4RjY4QjJFQzdGQjc4 MDQxMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzVkNmVmZmYtODViMi00YWY0LTg5 YWItNmQ5OGM5NTI3ZGE0LzAvNjA0QzQ0MUFDREY1NTRGMzgwRDdGRUQ4RjY4QjJF QzdGQjc4MDQxMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAuhtvl32Ckf8DHHttvEmJ8kO0tlmVBHbfU/ gCuFa79x/9YzS5DYZ4bQL5RculxZkbEhzZlK0Wm9gP/lJICDnCRPoBAYdpWLdQjN rVv16SEwAjjVEQJ/0vYi/XILXiHO8dwQFG+oRFCV8xlEi/JDgW0v0CCKFWkE/xrT S9RktsQOhbYv0Jf0GJroRRVom/b1wcG6/IO9hm/o9qcQsj4e/5T9CB/qbtv3xuKW EQnfxHGhvAkKTepmRu8jaerlfDjQejWlfKh4cmIA+Lni1B7OQfN6tLbyAjakajXb 7gBsbeTApS2/9fmtMiI2PgzCdcK7kUgR4QH8OPR/Mx/kQp3vk34= -----END CERTIFICATE-----Generated at Tue Nov 4 16:42:57 2025 by rpki-client