$ rpki-client -vvf repo-rpki.idnic.net/repo/b3991f7a-0a71-4f0d-933f-ecf813530274/0/A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.mft File: A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.mft (raw, json) Hash identifier: wnBnYSC6VKQPJziR7ekkYIZWOr+sbQIQ5W5dhJMPHDg= Subject key identifier: A5:27:C5:03:1E:53:34:73:15:A8:CA:37:44:61:F3:6C:C5:75:2B:BF Authority key identifier: A4:B6:31:C8:CF:E0:EE:72:AC:D5:F2:08:FC:12:39:06:4F:6C:DE:44 Certificate issuer: /CN=A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44 Certificate serial: 450F6CA9F633ABA441ABE77993561345A9C71AF4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b3991f7a-0a71-4f0d-933f-ecf813530274/0/A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.mft Manifest number: E2 Signing time: Tue 04 Nov 2025 20:11:13 +0000 Manifest this update: Tue 04 Nov 2025 20:06:13 +0000 Manifest next update: Sat 08 Nov 2025 04:29:13 +0000 Files and hashes: 1: 3135372e36362e3234382e302f32332d3234203d3e20313532373937.roa (hash: vC1sLrROQammNbgh64OVHa3goyUf/oRsNt6WGQKKJQo=) 2: A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.crl (hash: 3QEYHsMTFxa0dJ37D5o1okG04oeeBNkowwza7VBwm5M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b3991f7a-0a71-4f0d-933f-ecf813530274/0/A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.crl rsync://repo-rpki.idnic.net/repo/b3991f7a-0a71-4f0d-933f-ecf813530274/0/A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 10:49:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:0f:6c:a9:f6:33:ab:a4:41:ab:e7:79:93:56:13:45:a9:c7:1a:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44 Validity Not Before: Nov 4 20:06:13 2025 GMT Not After : Nov 8 04:29:13 2025 GMT Subject: CN=A527C5031E53347315A8CA374461F36CC5752BBF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:f5:83:21:36:9f:51:eb:e1:6f:1b:e8:82:bb: 65:0a:70:36:ee:93:31:90:51:30:20:c3:c3:5b:a7: e2:53:c2:57:9d:57:25:66:12:2d:2c:e5:b9:2e:59: 5c:a2:bc:76:e0:e3:e0:0f:91:7f:10:a0:6c:37:9b: 06:1f:6e:12:16:05:0e:ab:73:c4:cf:21:85:34:4e: 1c:1f:26:58:84:b6:db:9c:e2:41:21:28:16:c9:ba: 8a:d2:e5:3a:1b:20:8a:fb:93:51:b1:2a:5d:bf:73: 9a:de:39:42:8d:ac:1b:4f:b3:88:a9:21:f5:c9:84: 23:73:c4:1c:a9:c7:d6:a4:62:cb:ca:92:0a:00:57: 91:6e:de:47:ec:73:70:f8:e8:f5:8d:89:9f:57:30: 0e:0c:9d:70:45:77:ac:d1:d3:9a:2f:39:d8:e9:e1: cb:a5:d3:2e:04:54:37:5f:03:5c:67:90:a4:9c:7f: 24:0b:c6:26:22:11:55:e4:bb:49:c1:8e:6a:8f:d8: 89:9f:51:c2:e2:df:7d:23:80:af:a5:5f:b1:e2:bb: 23:c5:45:63:4f:1f:a1:60:d6:00:07:ff:5e:f4:16: ce:7e:d2:75:46:58:68:c8:e1:ef:df:e4:8c:9c:42: d4:53:76:83:0c:cb:9e:ab:ac:a1:a4:e1:eb:7f:f6: ef:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:27:C5:03:1E:53:34:73:15:A8:CA:37:44:61:F3:6C:C5:75:2B:BF X509v3 Authority Key Identifier: keyid:A4:B6:31:C8:CF:E0:EE:72:AC:D5:F2:08:FC:12:39:06:4F:6C:DE:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b3991f7a-0a71-4f0d-933f-ecf813530274/0/A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b3991f7a-0a71-4f0d-933f-ecf813530274/0/A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:37:e5:81:c5:25:1f:c9:94:df:26:1f:fa:47:9e:27:51:02: 12:fe:42:ad:70:fa:54:6a:35:3a:4f:01:b2:3d:46:6d:30:12: 19:ef:5c:d0:ce:a2:05:da:66:90:f1:83:7b:85:61:0d:98:a6: 37:ea:fa:90:52:c4:0d:58:bb:83:4e:b2:18:5f:2d:8c:10:29: 1d:9c:2e:a9:25:b5:cd:e2:77:46:4f:76:f6:8f:bf:3c:89:4d: 3f:5c:20:6b:eb:26:85:11:f0:ac:a4:06:54:3b:a2:f9:36:42: bc:ee:cf:35:c2:6e:34:d6:ef:35:9a:a9:f9:96:c8:78:9a:39: f7:b0:cd:a4:b4:82:88:16:b4:8f:cd:d9:38:9d:32:85:38:10: 3c:4d:98:f4:39:8e:f7:d3:92:0f:ff:26:de:10:69:44:66:ee: 8a:bb:e0:c9:0d:18:1a:69:40:08:f2:73:1b:c1:36:81:36:21: 1a:00:14:df:9a:64:3d:15:ec:b7:0b:e1:1b:c7:1a:76:09:5f: e0:63:4a:bd:52:0d:22:e3:1d:4a:28:6f:10:4a:9f:48:b8:eb: ea:00:fb:b0:75:ee:60:86:c8:ce:47:99:15:9a:a4:16:b7:0d: e8:73:09:ee:dd:ae:fe:79:09:22:f9:39:0a:6c:0f:a5:c0:da: ee:e9:8b:04 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURQ9sqfYzq6RBq+d5k1YTRanHGvQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTRCNjMxQzhDRkUwRUU3MkFDRDVGMjA4RkMxMjM5MDY0 RjZDREU0NDAeFw0yNTExMDQyMDA2MTNaFw0yNTExMDgwNDI5MTNaMDMxMTAvBgNV BAMTKEE1MjdDNTAzMUU1MzM0NzMxNUE4Q0EzNzQ0NjFGMzZDQzU3NTJCQkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK9YMhNp9R6+FvG+iCu2UKcDbu kzGQUTAgw8Nbp+JTwledVyVmEi0s5bkuWVyivHbg4+APkX8QoGw3mwYfbhIWBQ6r c8TPIYU0ThwfJliEttuc4kEhKBbJuorS5TobIIr7k1GxKl2/c5reOUKNrBtPs4ip IfXJhCNzxBypx9akYsvKkgoAV5Fu3kfsc3D46PWNiZ9XMA4MnXBFd6zR05ovOdjp 4cul0y4EVDdfA1xnkKScfyQLxiYiEVXku0nBjmqP2ImfUcLi330jgK+lX7HiuyPF RWNPH6Fg1gAH/170Fs5+0nVGWGjI4e/f5IycQtRTdoMMy56rrKGk4et/9u+JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpSfFAx5TNHMVqMo3RGHzbMV1K78wHwYDVR0j BBgwFoAUpLYxyM/g7nKs1fII/BI5Bk9s3kQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i Mzk5MWY3YS0wYTcxLTRmMGQtOTMzZi1lY2Y4MTM1MzAyNzQvMC9BNEI2MzFDOENG RTBFRTcyQUNENUYyMDhGQzEyMzkwNjRGNkNERTQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQTRCNjMxQzhDRkUwRUU3MkFDRDVGMjA4RkMxMjM5MDY0RjZD REU0NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjM5OTFmN2EtMGE3MS00ZjBkLTkz M2YtZWNmODEzNTMwMjc0LzAvQTRCNjMxQzhDRkUwRUU3MkFDRDVGMjA4RkMxMjM5 MDY0RjZDREU0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ835YHFJR/JlN8mH/pHnidRAhL+Qq1w+lRq NTpPAbI9Rm0wEhnvXNDOogXaZpDxg3uFYQ2Ypjfq+pBSxA1Yu4NOshhfLYwQKR2c Lqkltc3id0ZPdvaPvzyJTT9cIGvrJoUR8KykBlQ7ovk2QrzuzzXCbjTW7zWaqfmW yHiaOfewzaS0gogWtI/N2TidMoU4EDxNmPQ5jvfTkg//Jt4QaURm7oq74MkNGBpp QAjycxvBNoE2IRoAFN+aZD0V7LcL4RvHGnYJX+BjSr1SDSLjHUoobxBKn0i46+oA +7B17mCGyM5HmRWapBa3DehzCe7drv55CSL5OQpsD6XA2u7piwQ= -----END CERTIFICATE-----Generated at Wed Nov 5 00:05:55 2025 by rpki-client