$ rpki-client -vvf repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/0/4538753AD01FB91D7B028CC53F5AEC24AD6CD082.mft File: 4538753AD01FB91D7B028CC53F5AEC24AD6CD082.mft (raw, json) Hash identifier: 5A2+t1+/oCyfbBHFdczR3GSGc24TQkXClEaFqaKxvmc= Subject key identifier: DF:53:9B:90:D6:D7:E0:CE:4E:7B:36:ED:48:BE:3F:C4:7E:B6:9D:BF Authority key identifier: 45:38:75:3A:D0:1F:B9:1D:7B:02:8C:C5:3F:5A:EC:24:AD:6C:D0:82 Certificate issuer: /CN=4538753AD01FB91D7B028CC53F5AEC24AD6CD082 Certificate serial: 1E480CDCE3540BD8EB2C6B2E476C887E22EBA28C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4538753AD01FB91D7B028CC53F5AEC24AD6CD082.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/0/4538753AD01FB91D7B028CC53F5AEC24AD6CD082.mft Manifest number: D3 Signing time: Sun 02 Nov 2025 21:02:18 +0000 Manifest this update: Sun 02 Nov 2025 20:57:18 +0000 Manifest next update: Wed 05 Nov 2025 22:37:18 +0000 Files and hashes: 1: 3135372e36362e3137342e302f32332d3234203d3e20313532373439.roa (hash: 5hBop//FL91nh6eglb7Afoy10VVM0UIJy8JFCFrZk+s=) 2: 4538753AD01FB91D7B028CC53F5AEC24AD6CD082.crl (hash: aNWI3nbu8iB/gJv0ic2SjpkOTB4qfnM1ki4UhLlGlJ4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/0/4538753AD01FB91D7B028CC53F5AEC24AD6CD082.crl rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/0/4538753AD01FB91D7B028CC53F5AEC24AD6CD082.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4538753AD01FB91D7B028CC53F5AEC24AD6CD082.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 22:37:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:48:0c:dc:e3:54:0b:d8:eb:2c:6b:2e:47:6c:88:7e:22:eb:a2:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4538753AD01FB91D7B028CC53F5AEC24AD6CD082 Validity Not Before: Nov 2 20:57:18 2025 GMT Not After : Nov 5 22:37:18 2025 GMT Subject: CN=DF539B90D6D7E0CE4E7B36ED48BE3FC47EB69DBF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:5e:18:e0:e0:48:8b:3d:ac:1b:ce:d3:27:c5: 06:de:07:88:31:a4:3d:2a:e4:2d:65:79:df:5b:37: e6:55:0f:b8:92:16:c8:bf:9c:1e:b1:c1:a1:3a:3c: ab:71:05:f4:7b:cf:a0:5d:66:dc:f9:20:f2:a4:19: 39:40:8d:99:7e:95:71:5a:43:f8:3e:c9:4a:8f:1f: 75:bc:d6:f9:b7:85:c4:7d:cd:57:0c:60:79:60:65: 35:ac:b0:0a:d7:dc:ac:dc:f6:b8:b0:20:d4:b6:2e: 16:91:74:5f:4a:b7:a3:ee:67:97:66:0d:ad:ec:4c: f1:8f:c4:97:e9:3d:a3:6f:b2:8c:fe:31:ba:9f:ce: 84:57:2f:b9:e2:af:a2:4c:75:a7:cb:cf:c1:80:16: 3b:09:b3:5f:e5:20:ea:55:66:7c:a3:46:1b:07:37: b7:33:12:c1:13:2d:90:91:92:59:58:2b:e7:99:c7: 4d:56:19:de:14:25:43:93:31:d6:0d:bc:2c:33:ff: 27:26:b7:e5:f5:b7:f3:98:7a:d6:6f:e5:86:c1:f5: b6:b7:ff:f1:1a:6a:79:de:ff:03:6e:dd:f7:9f:4a: 4a:e4:b8:78:0f:f4:b2:0b:10:d5:fb:21:78:61:ef: 5a:2e:d9:01:df:54:a1:54:8c:cd:f3:f2:48:73:5e: cb:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:53:9B:90:D6:D7:E0:CE:4E:7B:36:ED:48:BE:3F:C4:7E:B6:9D:BF X509v3 Authority Key Identifier: keyid:45:38:75:3A:D0:1F:B9:1D:7B:02:8C:C5:3F:5A:EC:24:AD:6C:D0:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/0/4538753AD01FB91D7B028CC53F5AEC24AD6CD082.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4538753AD01FB91D7B028CC53F5AEC24AD6CD082.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/0/4538753AD01FB91D7B028CC53F5AEC24AD6CD082.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:5d:5a:81:6a:bf:b7:e7:5b:e9:55:7c:75:1d:50:11:9c:f5: 13:2a:31:5d:ac:b9:2f:9a:a3:f4:f3:e0:2f:04:9d:ae:f3:d6: b2:e1:7e:4e:b3:27:59:00:a6:02:94:41:ea:f8:96:f6:f4:6d: 4f:51:98:28:32:65:87:f4:4d:3f:2d:2f:28:67:6f:ed:07:78: 43:14:f8:19:40:ea:b5:03:17:57:8c:38:a6:7a:2c:06:a3:0c: d6:f0:b6:ef:f4:5e:1a:b5:b7:98:5f:f3:4b:ba:d9:10:a6:2b: 30:3b:df:35:8a:60:e5:c0:01:79:f3:8f:62:ef:1a:81:30:6c: ce:48:02:20:de:14:eb:b6:0d:e0:97:4c:84:47:20:c9:72:2c: 18:cd:3b:e6:1a:71:ad:a6:11:ed:ef:11:ed:7b:49:d1:94:92: 5f:9c:96:57:fb:c7:c2:df:19:d7:9d:d0:2a:5b:aa:2f:91:fe: 18:0a:6d:e3:c9:6b:75:69:7c:63:ac:c5:a4:3c:ee:70:7f:30: 8a:d0:3d:e0:1e:7a:35:96:89:d6:cf:ef:a0:21:a2:ca:23:41: 9c:66:4a:77:76:bf:cb:d7:29:51:e7:f7:a7:d2:9e:ef:66:20: 62:b2:a0:a5:4d:94:86:2e:3f:6e:84:7e:c5:d6:c1:1d:cd:da: 1c:9a:67:9d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHkgM3ONUC9jrLGsuR2yIfiLroowwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUzODc1M0FEMDFGQjkxRDdCMDI4Q0M1M0Y1QUVDMjRB RDZDRDA4MjAeFw0yNTExMDIyMDU3MThaFw0yNTExMDUyMjM3MThaMDMxMTAvBgNV BAMTKERGNTM5QjkwRDZEN0UwQ0U0RTdCMzZFRDQ4QkUzRkM0N0VCNjlEQkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/Xhjg4EiLPawbztMnxQbeB4gx pD0q5C1led9bN+ZVD7iSFsi/nB6xwaE6PKtxBfR7z6BdZtz5IPKkGTlAjZl+lXFa Q/g+yUqPH3W81vm3hcR9zVcMYHlgZTWssArX3Kzc9riwINS2LhaRdF9Kt6PuZ5dm Da3sTPGPxJfpPaNvsoz+MbqfzoRXL7nir6JMdafLz8GAFjsJs1/lIOpVZnyjRhsH N7czEsETLZCRkllYK+eZx01WGd4UJUOTMdYNvCwz/ycmt+X1t/OYetZv5YbB9ba3 //Eaanne/wNu3fefSkrkuHgP9LILENX7IXhh71ou2QHfVKFUjM3z8khzXsuRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU31ObkNbX4M5OezbtSL4/xH62nb8wHwYDVR0j BBgwFoAURTh1OtAfuR17AozFP1rsJK1s0IIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YjczM2RjZi05ZjVlLTQ3NzUtOWNlNy05ZGQ1MjViNDRiODYvMC80NTM4NzUzQUQw MUZCOTFEN0IwMjhDQzUzRjVBRUMyNEFENkNEMDgyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNDUzODc1M0FEMDFGQjkxRDdCMDI4Q0M1M0Y1QUVDMjRBRDZD RDA4Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWI3MzNkY2YtOWY1ZS00Nzc1LTlj ZTctOWRkNTI1YjQ0Yjg2LzAvNDUzODc1M0FEMDFGQjkxRDdCMDI4Q0M1M0Y1QUVD MjRBRDZDRDA4Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGJdWoFqv7fnW+lVfHUdUBGc9RMqMV2suS+a o/Tz4C8Ena7z1rLhfk6zJ1kApgKUQer4lvb0bU9RmCgyZYf0TT8tLyhnb+0HeEMU +BlA6rUDF1eMOKZ6LAajDNbwtu/0Xhq1t5hf80u62RCmKzA73zWKYOXAAXnzj2Lv GoEwbM5IAiDeFOu2DeCXTIRHIMlyLBjNO+Yaca2mEe3vEe17SdGUkl+cllf7x8Lf Gded0Cpbqi+R/hgKbePJa3VpfGOsxaQ87nB/MIrQPeAeejWWidbP76AhosojQZxm Snd2v8vXKVHn96fSnu9mIGKyoKVNlIYuP26EfsXWwR3N2hyaZ50= -----END CERTIFICATE-----Generated at Tue Nov 4 21:22:32 2025 by rpki-client