$ rpki-client -vvf repo-rpki.idnic.net/repo/9eab0a01-8ee4-4825-840d-112daef0aca8/0/4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.mft File: 4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.mft (raw, json) Hash identifier: LGRGInDNCrKsFUt15RszCEWt1eS8rh+RUhfj1W0F7DQ= Subject key identifier: 05:FB:B1:B8:5B:A8:3E:E4:77:A0:DD:5A:DB:8B:A0:3E:97:68:41:0E Authority key identifier: 4E:2A:A9:ED:35:DB:0F:27:6A:5F:F0:D4:02:0D:BE:A1:3E:04:C6:23 Certificate issuer: /CN=4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623 Certificate serial: 6E21EA007B088C512BCB98486935691714B70BF8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9eab0a01-8ee4-4825-840d-112daef0aca8/0/4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.mft Manifest number: 01BE Signing time: Tue 04 Nov 2025 00:11:31 +0000 Manifest this update: Tue 04 Nov 2025 00:06:31 +0000 Manifest next update: Fri 07 Nov 2025 10:22:31 +0000 Files and hashes: 1: 3130332e3137342e31342e302f32332d3234203d3e20313439333532.roa (hash: cJjmG0CdhjaR+QAVA5ZLIDFXiWwjI5yTIKuxLgCeRRg=) 2: 4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.crl (hash: OGdnOVPLhN9953KC4G9FsNgss35XBNwOEaD1R7dsHqU=) 3: 323030313a6466303a6134303a3a2f34382d3438203d3e20313439333532.roa (hash: lidUKpIUI42q8veE3vysCaBMTq0HxAiYVl6H5XafxIU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9eab0a01-8ee4-4825-840d-112daef0aca8/0/4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.crl rsync://repo-rpki.idnic.net/repo/9eab0a01-8ee4-4825-840d-112daef0aca8/0/4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 10:22:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:21:ea:00:7b:08:8c:51:2b:cb:98:48:69:35:69:17:14:b7:0b:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623 Validity Not Before: Nov 4 00:06:31 2025 GMT Not After : Nov 7 10:22:31 2025 GMT Subject: CN=05FBB1B85BA83EE477A0DD5ADB8BA03E9768410E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ed:7e:d8:61:06:7f:46:03:b4:d4:50:14:f5: 6e:82:fe:29:83:09:98:46:a0:38:fd:8c:db:44:65: a3:09:56:41:f0:44:58:25:97:cb:c4:c9:b8:6b:d5: 56:17:3f:49:dc:f4:4c:43:5a:06:ff:8d:79:01:dd: bb:a9:3a:24:df:13:55:a5:c0:2b:74:01:46:13:32: d9:80:fc:99:fe:b8:04:6c:06:90:00:88:16:35:7f: 92:cd:ee:1c:42:5b:0c:82:06:0c:92:fb:29:bb:ec: 31:cd:50:02:95:41:f4:c4:77:d3:c4:43:d9:f9:e2: 66:26:76:55:c1:b2:f4:ec:a8:25:c2:05:ba:4a:fc: 4b:98:3d:6c:52:67:5c:ca:35:95:c7:bf:6f:d6:3f: b4:55:87:52:74:8a:c1:70:09:cc:5b:a9:f9:76:04: fe:fe:fc:1b:6b:80:92:e5:34:da:a1:81:b4:13:79: c7:98:81:0f:52:25:a4:7d:0c:a6:ef:70:6a:7e:75: f1:84:c1:ba:b6:13:37:71:14:93:53:d5:e1:ac:f3: c8:8c:62:f2:03:f6:92:d0:67:a3:06:47:4b:fb:7d: cd:9c:61:ed:c6:26:d8:e5:ef:83:2b:22:f1:da:ed: 92:43:d3:50:7a:60:f6:48:83:bd:37:a6:ca:b4:3d: a4:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:FB:B1:B8:5B:A8:3E:E4:77:A0:DD:5A:DB:8B:A0:3E:97:68:41:0E X509v3 Authority Key Identifier: keyid:4E:2A:A9:ED:35:DB:0F:27:6A:5F:F0:D4:02:0D:BE:A1:3E:04:C6:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9eab0a01-8ee4-4825-840d-112daef0aca8/0/4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9eab0a01-8ee4-4825-840d-112daef0aca8/0/4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:a1:ac:9f:61:99:cc:b5:0a:11:50:1d:a0:67:42:88:1a:45: f7:74:2a:4d:c6:b2:ae:a1:01:43:5e:8b:fe:b2:8a:5f:ee:94: 58:2a:23:7c:7f:70:aa:a0:71:fd:2f:e1:93:97:7c:e8:50:a6: 29:92:1a:98:7b:a4:dc:50:fe:4e:98:24:cb:11:b8:7f:14:d0: 0a:1d:62:b9:8d:cf:bf:9e:67:78:34:14:7c:65:d3:2d:45:96: 81:32:44:b2:6c:d3:8b:1d:5c:03:f6:06:7f:d4:8b:22:9b:1e: 3a:2a:10:22:67:d8:cd:a5:a1:e1:c3:96:5f:cd:4f:99:d3:fb: 54:5b:0b:0f:c5:86:32:f2:4f:98:b7:a1:08:51:98:39:b6:36: eb:18:21:a2:04:88:bd:7e:c1:18:e4:f9:a8:e1:94:3c:dc:ca: 75:9d:27:ea:c0:c0:f3:7c:93:11:db:3f:5e:0a:95:21:3a:c0: 00:85:9b:49:64:8b:78:91:48:21:21:13:08:b8:6a:c4:ef:aa: 0d:70:c0:93:21:bd:b8:b8:5b:30:f3:ee:dc:4f:ba:97:6d:8b: 29:1a:48:de:65:b0:19:df:6b:e9:78:4f:39:66:0d:b9:4f:52: 53:18:52:36:51:01:99:f5:de:b8:3a:a6:c0:e4:11:18:47:0c: bf:40:6c:4e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbiHqAHsIjFEry5hIaTVpFxS3C/gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEUyQUE5RUQzNURCMEYyNzZBNUZGMEQ0MDIwREJFQTEz RTA0QzYyMzAeFw0yNTExMDQwMDA2MzFaFw0yNTExMDcxMDIyMzFaMDMxMTAvBgNV BAMTKDA1RkJCMUI4NUJBODNFRTQ3N0EwREQ1QURCOEJBMDNFOTc2ODQxMEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC17X7YYQZ/RgO01FAU9W6C/imD CZhGoDj9jNtEZaMJVkHwRFgll8vEybhr1VYXP0nc9ExDWgb/jXkB3bupOiTfE1Wl wCt0AUYTMtmA/Jn+uARsBpAAiBY1f5LN7hxCWwyCBgyS+ym77DHNUAKVQfTEd9PE Q9n54mYmdlXBsvTsqCXCBbpK/EuYPWxSZ1zKNZXHv2/WP7RVh1J0isFwCcxbqfl2 BP7+/BtrgJLlNNqhgbQTeceYgQ9SJaR9DKbvcGp+dfGEwbq2EzdxFJNT1eGs88iM YvID9pLQZ6MGR0v7fc2cYe3GJtjl74MrIvHa7ZJD01B6YPZIg703psq0PaSJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBfuxuFuoPuR3oN1a24ugPpdoQQ4wHwYDVR0j BBgwFoAUTiqp7TXbDydqX/DUAg2+oT4ExiMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZWFiMGEwMS04ZWU0LTQ4MjUtODQwZC0xMTJkYWVmMGFjYTgvMC80RTJBQTlFRDM1 REIwRjI3NkE1RkYwRDQwMjBEQkVBMTNFMDRDNjIzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEUyQUE5RUQzNURCMEYyNzZBNUZGMEQ0MDIwREJFQTEzRTA0 QzYyMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWVhYjBhMDEtOGVlNC00ODI1LTg0 MGQtMTEyZGFlZjBhY2E4LzAvNEUyQUE5RUQzNURCMEYyNzZBNUZGMEQ0MDIwREJF QTEzRTA0QzYyMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACuhrJ9hmcy1ChFQHaBnQogaRfd0Kk3Gsq6h AUNei/6yil/ulFgqI3x/cKqgcf0v4ZOXfOhQpimSGph7pNxQ/k6YJMsRuH8U0Aod YrmNz7+eZ3g0FHxl0y1FloEyRLJs04sdXAP2Bn/UiyKbHjoqECJn2M2loeHDll/N T5nT+1RbCw/FhjLyT5i3oQhRmDm2NusYIaIEiL1+wRjk+ajhlDzcynWdJ+rAwPN8 kxHbP14KlSE6wACFm0lki3iRSCEhEwi4asTvqg1wwJMhvbi4WzDz7txPupdtiyka SN5lsBnfa+l4TzlmDblPUlMYUjZRAZn13rg6psDkERhHDL9AbE4= -----END CERTIFICATE-----Generated at Tue Nov 4 23:48:32 2025 by rpki-client