$ rpki-client -vvf repo-rpki.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/4CDDA0597DCBCA2C92A176D00847EB50F6122354.mft File: 4CDDA0597DCBCA2C92A176D00847EB50F6122354.mft (raw, json) Hash identifier: HaTAAbRFiIVlivDA985JOCsO+lXUuJ1DwNGNU6A7xLo= Subject key identifier: 1E:4B:F8:FD:B0:46:78:97:63:DF:85:EF:EF:A4:C6:59:DB:4A:56:5A Authority key identifier: 4C:DD:A0:59:7D:CB:CA:2C:92:A1:76:D0:08:47:EB:50:F6:12:23:54 Certificate issuer: /CN=4CDDA0597DCBCA2C92A176D00847EB50F6122354 Certificate serial: 4ED4D17E6A14D00CC81103FB2CDDC761757F7E79 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4CDDA0597DCBCA2C92A176D00847EB50F6122354.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/4CDDA0597DCBCA2C92A176D00847EB50F6122354.mft Manifest number: EB Signing time: Tue 04 Nov 2025 12:50:38 +0000 Manifest this update: Tue 04 Nov 2025 12:45:38 +0000 Manifest next update: Sat 08 Nov 2025 00:34:38 +0000 Files and hashes: 1: 3130332e3234342e3130352e302f32342d3234203d3e20313531353534.roa (hash: ztwT0b/RRL8JmA2A1xEIyDAku/obP4kwaW2vaWiLopQ=) 2: 3130332e3234342e3130342e302f32342d3234203d3e20313531353534.roa (hash: jrKOilPCIf2Ja6+AaaEcXg/8k0wsYFPn+K9KWKLrdzE=) 3: 4CDDA0597DCBCA2C92A176D00847EB50F6122354.crl (hash: Forc3nPul5FMgzQOqTIrvznPH6UZcN+R2PjSji9en7s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/4CDDA0597DCBCA2C92A176D00847EB50F6122354.crl rsync://repo-rpki.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/4CDDA0597DCBCA2C92A176D00847EB50F6122354.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4CDDA0597DCBCA2C92A176D00847EB50F6122354.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 13:50:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:d4:d1:7e:6a:14:d0:0c:c8:11:03:fb:2c:dd:c7:61:75:7f:7e:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4CDDA0597DCBCA2C92A176D00847EB50F6122354 Validity Not Before: Nov 4 12:45:38 2025 GMT Not After : Nov 8 00:34:38 2025 GMT Subject: CN=1E4BF8FDB046789763DF85EFEFA4C659DB4A565A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:86:49:eb:d3:96:3d:9a:31:55:86:0c:5b:be: 63:d7:95:c0:c3:65:7d:ac:9f:1d:ed:41:29:bc:da: 63:a1:87:c4:d7:a3:05:5f:7f:fb:15:6a:c6:82:dc: d3:f1:4c:d7:c5:b5:11:e6:4d:a2:69:5c:58:8d:c5: 4f:40:61:d9:1d:0c:3e:76:86:c3:a1:80:57:f3:ca: 8b:5a:7f:76:62:b7:9f:d9:3e:a2:23:4c:86:36:94: f9:0b:21:0c:6f:21:49:a1:16:c4:e1:76:85:43:10: eb:4a:bb:05:49:b3:f0:e3:28:65:61:75:5c:85:c9: b9:a2:3b:48:e7:a9:85:b2:8f:e3:ba:ad:ce:57:63: 00:18:40:d0:12:e1:ac:af:77:d5:e0:98:ec:85:2e: 98:89:26:56:41:32:dd:a9:1b:d4:79:66:2b:0a:06: 79:09:6d:d0:c1:d2:9c:65:42:67:c4:95:82:6f:06: 83:47:3b:d3:54:a9:94:3f:de:79:f9:c2:f0:b6:53: f7:58:a6:6d:91:9d:1a:86:b1:68:1a:14:da:df:61: 91:22:46:e9:33:e5:76:8b:06:f9:2c:a8:b6:7a:73: 70:00:18:6b:54:a3:7a:61:b1:5f:48:40:88:ab:fc: 3c:c2:35:ff:59:0c:10:a7:38:93:9a:cb:45:e3:96: fe:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:4B:F8:FD:B0:46:78:97:63:DF:85:EF:EF:A4:C6:59:DB:4A:56:5A X509v3 Authority Key Identifier: keyid:4C:DD:A0:59:7D:CB:CA:2C:92:A1:76:D0:08:47:EB:50:F6:12:23:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/4CDDA0597DCBCA2C92A176D00847EB50F6122354.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4CDDA0597DCBCA2C92A176D00847EB50F6122354.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/4CDDA0597DCBCA2C92A176D00847EB50F6122354.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:65:42:60:bb:2d:d6:72:89:33:b5:ab:d6:ca:5f:fb:2f:9a: e5:40:cf:fe:46:9d:85:a9:a9:d4:72:a8:92:20:f6:f0:80:84: 0f:e5:14:78:c5:e8:b7:f5:e2:9c:fe:ef:3b:05:a2:fa:8a:b3: 5e:98:df:6b:49:08:2e:87:0f:0b:8c:f0:e0:b8:29:f2:f9:0e: 7f:83:a0:2e:3b:ed:00:9b:c1:82:1d:fe:06:6c:c5:0a:c0:0b: f5:b5:69:22:91:da:b5:8d:a8:e3:4c:1d:ed:f4:57:2f:3c:0b: e3:dc:9b:eb:7f:cc:f7:0b:8e:50:fc:32:c8:ec:8c:be:db:a9: 02:4d:3c:29:e1:bd:1d:ec:bb:45:45:a7:00:52:b7:eb:9b:ac: 0a:c4:6d:9d:cb:19:dd:78:77:c4:18:df:48:2c:4f:11:22:58: 20:d4:21:46:94:5d:b5:8d:2b:5c:86:c2:6a:68:61:0d:17:46: 27:3a:78:0c:97:9b:23:43:8a:c6:39:42:e6:f7:a7:a7:b1:97: 3e:50:91:e5:30:77:7a:85:d2:79:9a:c3:b4:e6:b5:d0:77:68: 62:1a:a8:b4:00:86:09:82:e5:46:9a:77:e5:18:d1:d3:44:6e: a1:ab:42:9e:1b:44:c7:a8:b0:f1:f6:c7:8e:c3:5d:c8:fb:f5: 0d:97:19:74 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTtTRfmoU0AzIEQP7LN3HYXV/fnkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNENEREEwNTk3RENCQ0EyQzkyQTE3NkQwMDg0N0VCNTBG NjEyMjM1NDAeFw0yNTExMDQxMjQ1MzhaFw0yNTExMDgwMDM0MzhaMDMxMTAvBgNV BAMTKDFFNEJGOEZEQjA0Njc4OTc2M0RGODVFRkVGQTRDNjU5REI0QTU2NUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCphknr05Y9mjFVhgxbvmPXlcDD ZX2snx3tQSm82mOhh8TXowVff/sVasaC3NPxTNfFtRHmTaJpXFiNxU9AYdkdDD52 hsOhgFfzyotaf3Zit5/ZPqIjTIY2lPkLIQxvIUmhFsThdoVDEOtKuwVJs/DjKGVh dVyFybmiO0jnqYWyj+O6rc5XYwAYQNAS4ayvd9XgmOyFLpiJJlZBMt2pG9R5ZisK BnkJbdDB0pxlQmfElYJvBoNHO9NUqZQ/3nn5wvC2U/dYpm2RnRqGsWgaFNrfYZEi Rukz5XaLBvksqLZ6c3AAGGtUo3phsV9IQIir/DzCNf9ZDBCnOJOay0Xjlv4fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHkv4/bBGeJdj34Xv76TGWdtKVlowHwYDVR0j BBgwFoAUTN2gWX3LyiySoXbQCEfrUPYSI1QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZDJmYTUxZS0zZmQ0LTQ1MjAtYjM3NS0wOWVlZjVlMGU1MTAvMC80Q0REQTA1OTdE Q0JDQTJDOTJBMTc2RDAwODQ3RUI1MEY2MTIyMzU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNENEREEwNTk3RENCQ0EyQzkyQTE3NkQwMDg0N0VCNTBGNjEy MjM1NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWQyZmE1MWUtM2ZkNC00NTIwLWIz NzUtMDllZWY1ZTBlNTEwLzAvNENEREEwNTk3RENCQ0EyQzkyQTE3NkQwMDg0N0VC NTBGNjEyMjM1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAplQmC7LdZyiTO1q9bKX/svmuVAz/5GnYWp qdRyqJIg9vCAhA/lFHjF6Lf14pz+7zsFovqKs16Y32tJCC6HDwuM8OC4KfL5Dn+D oC477QCbwYId/gZsxQrAC/W1aSKR2rWNqONMHe30Vy88C+Pcm+t/zPcLjlD8Msjs jL7bqQJNPCnhvR3su0VFpwBSt+ubrArEbZ3LGd14d8QY30gsTxEiWCDUIUaUXbWN K1yGwmpoYQ0XRic6eAyXmyNDisY5Qub3p6exlz5QkeUwd3qF0nmaw7TmtdB3aGIa qLQAhgmC5Uaad+UY0dNEbqGrQp4bRMeosPH2x47DXcj79Q2XGXQ= -----END CERTIFICATE-----Generated at Tue Nov 4 18:57:46 2025 by rpki-client