$ rpki-client -vvf repo-rpki.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0/4617272EE875B55CD5F2A88330A95F6410A3EB1B.mft File: 4617272EE875B55CD5F2A88330A95F6410A3EB1B.mft (raw, json) Hash identifier: uY9OlTHVZg1JgrLcA51AAbso8dZ7n45IDzUJoq6y/BA= Subject key identifier: CA:47:14:32:5E:2E:FF:02:E5:8C:0A:7B:42:7E:A1:AB:E5:BD:7A:12 Authority key identifier: 46:17:27:2E:E8:75:B5:5C:D5:F2:A8:83:30:A9:5F:64:10:A3:EB:1B Certificate issuer: /CN=4617272EE875B55CD5F2A88330A95F6410A3EB1B Certificate serial: 58EB18B3AC1A2F2392B212A321CD4841B58B6F14 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4617272EE875B55CD5F2A88330A95F6410A3EB1B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0/4617272EE875B55CD5F2A88330A95F6410A3EB1B.mft Manifest number: 010E Signing time: Tue 04 Nov 2025 07:41:11 +0000 Manifest this update: Tue 04 Nov 2025 07:36:10 +0000 Manifest next update: Fri 07 Nov 2025 18:46:10 +0000 Files and hashes: 1: 3135372e31352e34342e302f32332d3233203d3e20313532333931.roa (hash: O3sKicmk2yGnkx/tY8M39vxITAxZv+eItzqmfEpZHaM=) 2: 4617272EE875B55CD5F2A88330A95F6410A3EB1B.crl (hash: fONx++BRJRd4hwkz4wB97vaEGWgBzBzMbabPtqtrYa8=) 3: 3135372e31352e34342e302f32342d3234203d3e20313532333931.roa (hash: /J4LqqzzRfOuCjdKMN+a1hzCP36QvC7oDLsxBPgXP0g=) 4: 3135372e31352e34352e302f32342d3234203d3e20313532333931.roa (hash: x6ZV1Wl+WBaRGXPvArCfDSB+gNTaB80RBBLsR8syzeM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0/4617272EE875B55CD5F2A88330A95F6410A3EB1B.crl rsync://repo-rpki.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0/4617272EE875B55CD5F2A88330A95F6410A3EB1B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4617272EE875B55CD5F2A88330A95F6410A3EB1B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 18:46:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:eb:18:b3:ac:1a:2f:23:92:b2:12:a3:21:cd:48:41:b5:8b:6f:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4617272EE875B55CD5F2A88330A95F6410A3EB1B Validity Not Before: Nov 4 07:36:10 2025 GMT Not After : Nov 7 18:46:10 2025 GMT Subject: CN=CA4714325E2EFF02E58C0A7B427EA1ABE5BD7A12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:71:85:64:c4:c4:e1:f6:0f:74:dc:b0:7e:ed: ef:6d:18:c5:e2:84:4d:11:be:0e:53:f3:af:2b:d3: f1:64:da:4f:a5:b8:f5:2c:1d:bd:50:f1:4d:08:66: 95:17:62:42:94:53:7d:40:fc:4b:57:5e:20:f2:6c: de:87:ea:a3:0c:73:4a:dc:ce:bf:c4:dc:01:93:a5: c5:e2:5e:6e:f9:68:2b:f4:69:1d:26:58:b8:d3:3b: 5d:bd:47:9c:8d:1e:55:e6:c0:af:84:ed:1e:ae:b0: 5e:12:86:97:a1:f5:b7:2d:e0:b2:3d:09:1b:59:f2: d0:4f:ea:57:e3:48:38:3f:84:c1:4c:46:ca:2a:b4: a2:b3:56:31:ae:d3:6f:4a:bc:d2:b6:81:0c:63:35: aa:87:4b:8b:26:44:f8:06:a1:a4:a1:bd:40:94:dc: 7f:86:6a:80:18:27:8c:f4:af:5a:09:4b:18:1b:5f: 56:c4:25:58:6a:c1:27:cb:04:ff:ad:b3:26:e4:cf: 03:99:35:6f:c6:53:4b:bf:28:ae:40:1c:30:73:f4: 9c:31:7d:10:e5:6c:ec:0e:fa:5b:8c:46:62:9b:f5: f6:93:ad:87:39:2c:e8:91:bd:62:d8:ac:cc:f1:ea: e7:c3:f7:d0:3e:f2:d3:9d:db:b3:95:d2:85:95:a8: 00:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:47:14:32:5E:2E:FF:02:E5:8C:0A:7B:42:7E:A1:AB:E5:BD:7A:12 X509v3 Authority Key Identifier: keyid:46:17:27:2E:E8:75:B5:5C:D5:F2:A8:83:30:A9:5F:64:10:A3:EB:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0/4617272EE875B55CD5F2A88330A95F6410A3EB1B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4617272EE875B55CD5F2A88330A95F6410A3EB1B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0/4617272EE875B55CD5F2A88330A95F6410A3EB1B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:57:f3:2b:78:cb:d4:d7:ff:cd:10:a4:a4:b9:55:4a:00:ef: 6c:b8:ab:b0:39:8e:90:10:e2:ae:48:be:9c:14:61:5a:c3:4a: 5b:42:3b:15:64:d7:23:be:80:86:78:b0:60:bb:bc:2f:04:5a: 75:c9:ff:77:36:9b:68:f0:f0:2e:66:52:53:45:ec:d9:25:78: 86:02:fe:57:8a:b0:17:61:02:a2:32:ec:f6:7b:60:f5:ca:08: 74:73:e4:15:c4:ce:35:07:27:20:56:bd:0b:a7:34:91:49:f0: 2f:d8:80:fb:10:e4:30:ab:34:5a:4e:44:83:2c:f5:1a:ef:79: 79:1f:9e:6c:80:30:44:99:f2:58:01:d4:95:44:c1:10:59:ee: 7c:0f:3b:f9:99:d7:3c:d1:06:58:67:16:c8:b4:6e:4f:b9:f8: fd:cb:3a:a8:57:61:31:2e:56:8a:3b:72:86:6a:a7:be:9a:14: cc:4f:3a:22:69:91:f8:ca:cb:83:ec:da:f9:98:1f:ca:88:c7: 91:29:6e:49:c7:f5:59:13:67:e9:43:9a:08:1c:09:b5:09:87: e1:28:09:a9:74:9c:8d:91:52:db:28:2f:0b:67:32:2f:b1:2b: 6f:61:6c:69:66:f8:0b:3d:e6:d7:83:92:10:9d:9e:ac:92:40: 6e:d5:c9:26 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWOsYs6waLyOSshKjIc1IQbWLbxQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDYxNzI3MkVFODc1QjU1Q0Q1RjJBODgzMzBBOTVGNjQx MEEzRUIxQjAeFw0yNTExMDQwNzM2MTBaFw0yNTExMDcxODQ2MTBaMDMxMTAvBgNV BAMTKENBNDcxNDMyNUUyRUZGMDJFNThDMEE3QjQyN0VBMUFCRTVCRDdBMTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLcYVkxMTh9g903LB+7e9tGMXi hE0Rvg5T868r0/Fk2k+luPUsHb1Q8U0IZpUXYkKUU31A/EtXXiDybN6H6qMMc0rc zr/E3AGTpcXiXm75aCv0aR0mWLjTO129R5yNHlXmwK+E7R6usF4Shpeh9bct4LI9 CRtZ8tBP6lfjSDg/hMFMRsoqtKKzVjGu029KvNK2gQxjNaqHS4smRPgGoaShvUCU 3H+GaoAYJ4z0r1oJSxgbX1bEJVhqwSfLBP+tsybkzwOZNW/GU0u/KK5AHDBz9Jwx fRDlbOwO+luMRmKb9faTrYc5LOiRvWLYrMzx6ufD99A+8tOd27OV0oWVqAARAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUykcUMl4u/wLljAp7Qn6hq+W9ehIwHwYDVR0j BBgwFoAURhcnLuh1tVzV8qiDMKlfZBCj6xswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZmRhZjA2YS1mNjI0LTQyY2YtYmIxOS1iNmJiZjkzMWFhYzgvMC80NjE3MjcyRUU4 NzVCNTVDRDVGMkE4ODMzMEE5NUY2NDEwQTNFQjFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNDYxNzI3MkVFODc1QjU1Q0Q1RjJBODgzMzBBOTVGNjQxMEEz RUIxQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWZkYWYwNmEtZjYyNC00MmNmLWJi MTktYjZiYmY5MzFhYWM4LzAvNDYxNzI3MkVFODc1QjU1Q0Q1RjJBODgzMzBBOTVG NjQxMEEzRUIxQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALJX8yt4y9TX/80QpKS5VUoA72y4q7A5jpAQ 4q5IvpwUYVrDSltCOxVk1yO+gIZ4sGC7vC8EWnXJ/3c2m2jw8C5mUlNF7NkleIYC /leKsBdhAqIy7PZ7YPXKCHRz5BXEzjUHJyBWvQunNJFJ8C/YgPsQ5DCrNFpORIMs 9RrveXkfnmyAMESZ8lgB1JVEwRBZ7nwPO/mZ1zzRBlhnFsi0bk+5+P3LOqhXYTEu Voo7coZqp76aFMxPOiJpkfjKy4Ps2vmYH8qIx5EpbknH9VkTZ+lDmggcCbUJh+Eo Cal0nI2RUtsoLwtnMi+xK29hbGlm+As95teDkhCdnqySQG7VySY= -----END CERTIFICATE-----Generated at Wed Nov 5 10:05:53 2025 by rpki-client