$ rpki-client -vvf repo-rpki.idnic.net/repo/bb17c206-9b63-4c56-9436-475d82141a66/0/D454E26475969CECE78A97B9152AFC76DB922AA3.mft File: D454E26475969CECE78A97B9152AFC76DB922AA3.mft (raw, json) Hash identifier: RVOo0adAurptTPExdQFSuDR9VRFdYhI6VVLGvJo3u8s= Subject key identifier: D6:3C:11:9C:AB:38:54:FD:4D:A6:F6:66:EC:3A:22:D0:1D:FD:D1:0B Authority key identifier: D4:54:E2:64:75:96:9C:EC:E7:8A:97:B9:15:2A:FC:76:DB:92:2A:A3 Certificate issuer: /CN=D454E26475969CECE78A97B9152AFC76DB922AA3 Certificate serial: 4F8AE347E181AB57FAA0BE38D9746723EFB099DE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D454E26475969CECE78A97B9152AFC76DB922AA3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bb17c206-9b63-4c56-9436-475d82141a66/0/D454E26475969CECE78A97B9152AFC76DB922AA3.mft Manifest number: 01C4 Signing time: Sun 02 Nov 2025 11:52:35 +0000 Manifest this update: Sun 02 Nov 2025 11:47:35 +0000 Manifest next update: Wed 05 Nov 2025 14:00:35 +0000 Files and hashes: 1: D454E26475969CECE78A97B9152AFC76DB922AA3.crl (hash: dKASMJ0EWmQfJ6liwl+tNQKSiU/XWD4w1PRXLWkmLa0=) 2: 3130332e3136342e36312e302f32342d3234203d3e20313431393632.roa (hash: jkJd+M5rwtfeJj5Wy3BROoY6ivNRSiwWeiLPr6W2/x8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bb17c206-9b63-4c56-9436-475d82141a66/0/D454E26475969CECE78A97B9152AFC76DB922AA3.crl rsync://repo-rpki.idnic.net/repo/bb17c206-9b63-4c56-9436-475d82141a66/0/D454E26475969CECE78A97B9152AFC76DB922AA3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D454E26475969CECE78A97B9152AFC76DB922AA3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 14:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:8a:e3:47:e1:81:ab:57:fa:a0:be:38:d9:74:67:23:ef:b0:99:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D454E26475969CECE78A97B9152AFC76DB922AA3 Validity Not Before: Nov 2 11:47:35 2025 GMT Not After : Nov 5 14:00:35 2025 GMT Subject: CN=D63C119CAB3854FD4DA6F666EC3A22D01DFDD10B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ce:c3:47:bd:97:e1:67:2a:5b:6a:17:62:33: 8c:6d:33:7a:16:9a:f4:81:a8:1b:64:46:64:04:21: 21:5f:b5:4a:8e:23:82:b3:1a:b6:43:ba:05:d5:52: 83:d1:dc:ed:c7:69:d6:51:cf:c7:f8:b1:13:69:ce: 8a:1d:65:0f:60:b1:d6:7b:7e:7a:b7:7c:69:ac:5a: f3:78:0d:9e:cb:b4:ed:4a:fc:3a:f9:95:80:c7:3f: 82:8e:3b:8f:75:34:d2:50:5e:21:93:8a:cb:da:f3: 1d:f2:59:25:ea:99:47:ec:51:4a:a0:1a:79:32:93: a1:74:39:a3:41:36:f6:32:9d:98:bd:8b:c4:57:e8: ca:0a:82:5d:54:5b:19:e8:eb:dc:47:0e:4c:20:0b: 35:85:55:1b:f2:66:b1:77:7c:fd:14:10:03:41:70: 3a:3a:23:3e:72:5f:08:7a:1e:50:f9:65:bf:87:5f: aa:86:d1:d7:08:2c:4f:5a:2f:fe:20:ea:93:46:52: 43:5f:3a:4e:42:15:28:8b:18:b8:c3:1d:3e:82:99: 50:31:a6:fc:94:bb:a7:8a:af:3a:44:c9:a4:27:63: 83:70:7e:f5:ba:57:74:20:d5:3f:5c:4f:84:a9:07: b5:c4:b8:ed:4a:ad:a1:70:17:80:35:4c:77:85:0a: 15:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:3C:11:9C:AB:38:54:FD:4D:A6:F6:66:EC:3A:22:D0:1D:FD:D1:0B X509v3 Authority Key Identifier: keyid:D4:54:E2:64:75:96:9C:EC:E7:8A:97:B9:15:2A:FC:76:DB:92:2A:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bb17c206-9b63-4c56-9436-475d82141a66/0/D454E26475969CECE78A97B9152AFC76DB922AA3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D454E26475969CECE78A97B9152AFC76DB922AA3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bb17c206-9b63-4c56-9436-475d82141a66/0/D454E26475969CECE78A97B9152AFC76DB922AA3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:ea:8c:12:51:a8:f8:89:da:74:25:85:18:19:6e:08:cf:e3: 4f:88:7d:97:6f:1f:8c:b4:80:f6:9d:52:ff:b9:9f:01:9e:ea: f6:8e:bd:4c:7d:91:c3:32:73:48:0e:66:b7:4f:23:ff:72:45: cd:99:49:9d:2a:c2:0c:e6:f3:51:53:54:fb:e7:7b:c3:84:15: 2b:89:52:f5:60:f8:15:31:70:62:53:43:3f:8a:99:57:e2:5e: 64:d6:dd:fc:1a:70:b4:ce:94:93:c7:7e:90:d0:eb:86:4f:e7: e7:4d:23:15:c3:f9:5c:e9:db:47:62:46:9f:e9:93:9d:65:e4: 28:37:9e:24:b5:50:89:62:da:e8:cb:ca:97:9c:da:40:c8:6c: 53:f5:f1:3e:04:ab:d9:10:19:33:83:c1:62:04:60:2d:31:86: d5:85:61:e0:85:3d:a4:e2:30:eb:63:1b:f4:e7:0f:d7:1a:74: 3f:15:5e:74:e5:a6:38:cb:a9:1b:f4:55:77:20:fd:b5:89:17: 87:1c:87:b1:1b:9f:d6:d4:13:04:fa:cb:32:32:a8:38:8f:8e: 8f:cb:5f:a8:98:f7:37:c2:d3:32:2c:a9:83:15:89:c1:91:2e: eb:94:41:54:7e:3e:02:7d:03:e8:15:46:ea:b2:65:21:d5:bc: c7:89:0d:f3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT4rjR+GBq1f6oL442XRnI++wmd4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDQ1NEUyNjQ3NTk2OUNFQ0U3OEE5N0I5MTUyQUZDNzZE QjkyMkFBMzAeFw0yNTExMDIxMTQ3MzVaFw0yNTExMDUxNDAwMzVaMDMxMTAvBgNV BAMTKEQ2M0MxMTlDQUIzODU0RkQ0REE2RjY2NkVDM0EyMkQwMURGREQxMEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5zsNHvZfhZypbahdiM4xtM3oW mvSBqBtkRmQEISFftUqOI4KzGrZDugXVUoPR3O3HadZRz8f4sRNpzoodZQ9gsdZ7 fnq3fGmsWvN4DZ7LtO1K/Dr5lYDHP4KOO491NNJQXiGTisva8x3yWSXqmUfsUUqg Gnkyk6F0OaNBNvYynZi9i8RX6MoKgl1UWxno69xHDkwgCzWFVRvyZrF3fP0UEANB cDo6Iz5yXwh6HlD5Zb+HX6qG0dcILE9aL/4g6pNGUkNfOk5CFSiLGLjDHT6CmVAx pvyUu6eKrzpEyaQnY4NwfvW6V3Qg1T9cT4SpB7XEuO1KraFwF4A1THeFChXLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1jwRnKs4VP1NpvZm7Doi0B390QswHwYDVR0j BBgwFoAU1FTiZHWWnOznipe5FSr8dtuSKqMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i YjE3YzIwNi05YjYzLTRjNTYtOTQzNi00NzVkODIxNDFhNjYvMC9ENDU0RTI2NDc1 OTY5Q0VDRTc4QTk3QjkxNTJBRkM3NkRCOTIyQUEzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDQ1NEUyNjQ3NTk2OUNFQ0U3OEE5N0I5MTUyQUZDNzZEQjky MkFBMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmIxN2MyMDYtOWI2My00YzU2LTk0 MzYtNDc1ZDgyMTQxYTY2LzAvRDQ1NEUyNjQ3NTk2OUNFQ0U3OEE5N0I5MTUyQUZD NzZEQjkyMkFBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH7qjBJRqPiJ2nQlhRgZbgjP40+IfZdvH4y0 gPadUv+5nwGe6vaOvUx9kcMyc0gOZrdPI/9yRc2ZSZ0qwgzm81FTVPvne8OEFSuJ UvVg+BUxcGJTQz+KmVfiXmTW3fwacLTOlJPHfpDQ64ZP5+dNIxXD+Vzp20diRp/p k51l5Cg3niS1UIli2ujLypec2kDIbFP18T4Eq9kQGTODwWIEYC0xhtWFYeCFPaTi MOtjG/TnD9cadD8VXnTlpjjLqRv0VXcg/bWJF4cch7Ebn9bUEwT6yzIyqDiPjo/L X6iY9zfC0zIsqYMVicGRLuuUQVR+PgJ9A+gVRuqyZSHVvMeJDfM= -----END CERTIFICATE-----Generated at Tue Nov 4 01:59:06 2025 by rpki-client