$ rpki-client -vvf repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.mft File: 4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.mft (raw, json) Hash identifier: QLyeR5+za4bmPUaOpD7sonzdITV9KpgeIsnKcfalSnk= Subject key identifier: 90:DA:C8:BD:64:C2:5B:10:8B:2B:EC:66:4E:56:DA:DB:5E:E1:7B:CD Authority key identifier: 4B:F1:DC:C0:BC:C5:B1:A4:B6:BE:52:6A:75:FF:33:39:7F:C3:87:87 Certificate issuer: /CN=4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787 Certificate serial: 1B67258CA538AC7D465B219DF29F7F081AF7F68B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.mft Manifest number: 052E Signing time: Sun 02 Nov 2025 00:50:57 +0000 Manifest this update: Sun 02 Nov 2025 00:45:57 +0000 Manifest next update: Wed 05 Nov 2025 03:24:57 +0000 Files and hashes: 1: 3232332e32352e3130352e302f32342d3234203d3e2034383231.roa (hash: 8gu4g1bdcjin/i0TEIycNgxzwZksIdfr4ERNzQVV1jI=) 2: 3232332e32352e3130372e302f32342d3234203d3e20313439373138.roa (hash: DrBIeEQt6yULPW0r6792EagtEDf0ZZCsQyk/153rumY=) 3: 3232332e32352e3131302e302f32342d3234203d3e20313336383733.roa (hash: d7TlxPMnZWo9NiIWBhiGrIW1xBkbQUYDXZcwgsom8Dk=) 4: 3232332e32352e3130362e302f32342d3234203d3e20313336383733.roa (hash: S8lyObQBOuPDRueBj8YjzK0Yqke0dcnMl7Vcc48vuVs=) 5: 3232332e32352e39362e302f32312d3234203d3e2039333431.roa (hash: Qjv/mGfQRB5AB46dWcHhxxNcs3aS1PJFtKLeGoBkxi0=) 6: 4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.crl (hash: 3O9Gor534k91xrasZj2yoODlQsdz1xmnseMoacQqy0M=) 7: 3232332e32352e3130382e302f32342d3234203d3e2034383231.roa (hash: kXwkhbJ+oGBQpIPdrmdbXU4UMfG2qJFbyPtaW45RBFo=) 8: 3232332e32352e3130392e302f32342d3234203d3e20313439373138.roa (hash: d3eM98YfiQHd35IoK+KK/VXjFcXTY4k6PTjZu1TQR90=) 9: 323430323a613530303a3a2f33322d3332203d3e2034383231.roa (hash: moNwAWlPkj0rtokbSnZwVDheKPDbut9HTHNYooRQM7Q=) 10: 3232332e32352e3131312e302f32342d3234203d3e20313431363037.roa (hash: ZqT27QjOP9C+x+HxEBPLWbwm+mlgqdclma4hL/DLOAM=) 11: 3232332e32352e3130342e302f32342d3234203d3e20313530323238.roa (hash: 5Yjn1xzYUyXHAIu8ieYmhhXRGkoBPybJZRq7aWT18y0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.crl rsync://repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 03:24:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:67:25:8c:a5:38:ac:7d:46:5b:21:9d:f2:9f:7f:08:1a:f7:f6:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787 Validity Not Before: Nov 2 00:45:57 2025 GMT Not After : Nov 5 03:24:57 2025 GMT Subject: CN=90DAC8BD64C25B108B2BEC664E56DADB5EE17BCD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:5b:8d:d2:71:99:e8:ac:12:d7:b7:57:50:c6: 46:8e:29:3c:ba:0d:36:b7:5e:7c:94:b2:58:a0:f9: 6d:e0:0e:fa:bc:17:61:1d:95:1f:80:32:d8:c3:1f: 48:45:f7:b2:fa:5e:9e:43:64:4e:24:fc:79:c8:0c: db:64:70:da:36:b2:75:70:74:be:6e:3c:61:7b:ac: 26:50:2a:35:42:7f:7d:58:bb:1e:c9:90:f0:2a:93: 6a:d4:e3:ac:17:30:79:d9:3e:a4:13:a0:e4:ea:c9: ba:2c:ff:2e:e4:96:fc:7d:c1:77:f8:11:99:70:e2: 98:82:01:10:36:a1:55:fb:b3:1c:57:f0:01:1c:3f: 87:bc:80:bd:5d:7e:d9:17:43:24:8c:e7:58:b0:84: cf:a1:73:4d:42:26:9b:6d:6d:84:92:28:a0:fa:85: 5b:36:41:32:dd:aa:6e:0d:ba:c0:4e:f6:73:60:21: c0:c9:57:43:12:82:0e:02:b5:59:3b:02:90:38:56: 05:a1:9e:15:a7:19:56:56:1c:46:af:14:f9:d7:88: d4:c6:a1:88:f9:47:4b:cd:48:a9:39:5c:fe:fb:ce: 69:2c:a3:d5:66:81:a1:21:07:d5:5f:37:5b:57:0a: a3:31:f8:4b:4e:cc:f0:5f:a2:a3:62:d6:61:d4:41: 11:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:DA:C8:BD:64:C2:5B:10:8B:2B:EC:66:4E:56:DA:DB:5E:E1:7B:CD X509v3 Authority Key Identifier: keyid:4B:F1:DC:C0:BC:C5:B1:A4:B6:BE:52:6A:75:FF:33:39:7F:C3:87:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:2f:ba:03:57:6f:12:a4:2e:f5:d8:1d:1e:92:32:40:d5:e3: 12:7d:32:1c:c9:0a:19:c1:dc:ba:f4:68:e1:cc:a3:80:76:3b: 5d:7c:ec:49:c5:1b:45:ef:f1:70:9a:da:4c:c6:28:d3:eb:7d: fa:96:6f:b3:d6:60:d3:6f:c3:01:fd:50:ae:2f:87:f7:b7:95: 2d:df:c0:d2:18:0f:1d:b5:6a:18:81:aa:95:6b:b7:44:4c:b3: 53:0a:3a:73:a0:44:02:69:ac:de:d5:a2:22:a9:b5:39:5b:7f: 8e:67:69:9b:72:ed:31:ec:22:40:66:e3:84:4e:2d:8e:5b:75: 72:6c:45:3d:94:bd:8f:d4:83:36:eb:d4:06:12:bf:62:3c:e9: 1a:2b:3e:90:83:8a:35:e0:e6:14:3c:a6:87:5c:43:00:bb:a5: 9c:4c:6a:70:db:e6:36:a0:a8:4d:ac:9e:9f:8e:ae:af:96:54: 11:ce:4e:e6:07:39:af:c8:14:46:35:db:af:54:55:ac:ac:a9: 84:e2:df:88:1d:4c:19:75:8d:ce:ca:11:8c:76:e4:3e:a5:90: eb:f8:4a:16:f1:65:19:9c:34:d3:a2:ed:0a:72:82:d1:9b:2c: 9d:2d:4a:bc:58:5f:88:03:f9:cb:a8:79:eb:ea:cd:00:7c:32: 4f:46:a6:51 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG2cljKU4rH1GWyGd8p9/CBr39oswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEJGMURDQzBCQ0M1QjFBNEI2QkU1MjZBNzVGRjMzMzk3 RkMzODc4NzAeFw0yNTExMDIwMDQ1NTdaFw0yNTExMDUwMzI0NTdaMDMxMTAvBgNV BAMTKDkwREFDOEJENjRDMjVCMTA4QjJCRUM2NjRFNTZEQURCNUVFMTdCQ0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEW43ScZnorBLXt1dQxkaOKTy6 DTa3XnyUslig+W3gDvq8F2EdlR+AMtjDH0hF97L6Xp5DZE4k/HnIDNtkcNo2snVw dL5uPGF7rCZQKjVCf31Yux7JkPAqk2rU46wXMHnZPqQToOTqybos/y7klvx9wXf4 EZlw4piCARA2oVX7sxxX8AEcP4e8gL1dftkXQySM51iwhM+hc01CJpttbYSSKKD6 hVs2QTLdqm4NusBO9nNgIcDJV0MSgg4CtVk7ApA4VgWhnhWnGVZWHEavFPnXiNTG oYj5R0vNSKk5XP77zmkso9VmgaEhB9VfN1tXCqMx+EtOzPBfoqNi1mHUQRFBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkNrIvWTCWxCLK+xmTlba217he80wHwYDVR0j BBgwFoAUS/HcwLzFsaS2vlJqdf8zOX/Dh4cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZDI1NDQxOS01M2JlLTRhZDQtYmY3Zi0yOWY4OTEyNTIzZDAvMC80QkYxRENDMEJD QzVCMUE0QjZCRTUyNkE3NUZGMzMzOTdGQzM4Nzg3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEJGMURDQzBCQ0M1QjFBNEI2QkU1MjZBNzVGRjMzMzk3RkMz ODc4Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGQyNTQ0MTktNTNiZS00YWQ0LWJm N2YtMjlmODkxMjUyM2QwLzAvNEJGMURDQzBCQ0M1QjFBNEI2QkU1MjZBNzVGRjMz Mzk3RkMzODc4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAovugNXbxKkLvXYHR6SMkDV4xJ9MhzJChnB 3Lr0aOHMo4B2O1187EnFG0Xv8XCa2kzGKNPrffqWb7PWYNNvwwH9UK4vh/e3lS3f wNIYDx21ahiBqpVrt0RMs1MKOnOgRAJprN7VoiKptTlbf45naZty7THsIkBm44RO LY5bdXJsRT2UvY/Ugzbr1AYSv2I86RorPpCDijXg5hQ8podcQwC7pZxManDb5jag qE2snp+Orq+WVBHOTuYHOa/IFEY1269UVaysqYTi34gdTBl1jc7KEYx25D6lkOv4 ShbxZRmcNNOi7QpygtGbLJ0tSrxYX4gD+cuoeevqzQB8Mk9GplE= -----END CERTIFICATE-----Generated at Tue Nov 4 02:20:35 2025 by rpki-client