$ rpki-client -vvf repo-rpki.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.mft File: F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.mft (raw, json) Hash identifier: me2nOS7ACChSbsybGrHVjVuZQT2+sKajd/u+bZ6+xi0= Subject key identifier: 18:3E:61:A4:2F:C6:48:04:0F:BB:83:6D:ED:13:8F:0F:CF:43:0A:83 Authority key identifier: F4:D9:C6:C3:E2:65:3E:53:E4:54:9E:CD:7B:0E:43:26:FE:95:6B:4C Certificate issuer: /CN=F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C Certificate serial: 32980E6B8E28B1340CE23F88284CB175E4D04A79 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.mft Manifest number: EF Signing time: Tue 04 Nov 2025 12:21:04 +0000 Manifest this update: Tue 04 Nov 2025 12:16:04 +0000 Manifest next update: Fri 07 Nov 2025 17:18:04 +0000 Files and hashes: 1: 3135372e36362e38342e302f32332d3234203d3e20313339393831.roa (hash: QVcLKReR3vobx/sEHPLJR2ePOo16P1H8K2UkUuXxUL8=) 2: F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.crl (hash: PvFOY/zsbW5yV3TUuuMEZv7FF9GU5YwIbuTgG3APXgU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.crl rsync://repo-rpki.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 17:18:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:98:0e:6b:8e:28:b1:34:0c:e2:3f:88:28:4c:b1:75:e4:d0:4a:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C Validity Not Before: Nov 4 12:16:04 2025 GMT Not After : Nov 7 17:18:04 2025 GMT Subject: CN=183E61A42FC648040FBB836DED138F0FCF430A83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:bf:0e:c4:b8:30:33:78:93:b4:3c:19:12:94: 8e:9d:a0:21:d4:67:29:3f:e6:d7:3c:83:9c:11:4c: c2:88:99:6f:3e:82:a2:b4:02:05:3b:d1:53:ce:f2: ea:a9:a7:35:a8:2c:a0:d5:9a:f1:c1:f8:ae:fa:87: 28:db:d8:2c:78:53:6f:6c:17:8a:e4:87:90:bc:70: 96:c7:c8:94:0d:ad:b9:be:0b:4c:64:94:14:77:50: 50:3e:f6:12:ef:6d:bd:71:8a:e1:c6:c6:fd:1d:3b: b2:f6:e9:c5:fc:c8:8a:98:53:ae:e8:82:3b:8c:67: 9b:29:1c:ce:88:6a:56:22:ce:5c:2d:44:0b:d7:90: e7:1a:c2:e5:8f:26:1e:2d:3a:8e:94:9f:ea:c6:77: ee:f6:aa:b6:92:c7:f2:6e:70:44:51:37:87:f4:1a: 16:39:42:33:c1:9e:d1:3c:2e:0d:15:ec:0a:4e:8a: 50:c0:22:90:ed:70:c2:dc:fa:a1:f9:97:22:9e:c8: fe:3c:e5:39:2d:4d:ac:1f:94:d8:d1:ca:ef:33:50: f2:4b:50:7e:b7:32:0d:93:26:90:6a:1f:81:d3:3c: b5:60:e1:4e:86:90:bb:27:61:1f:dc:73:97:68:78: 8f:49:17:69:ba:36:55:a3:4a:56:9c:80:e6:5b:81: 18:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:3E:61:A4:2F:C6:48:04:0F:BB:83:6D:ED:13:8F:0F:CF:43:0A:83 X509v3 Authority Key Identifier: keyid:F4:D9:C6:C3:E2:65:3E:53:E4:54:9E:CD:7B:0E:43:26:FE:95:6B:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:2e:7b:0e:bb:bd:00:6f:db:98:cb:ec:94:ba:f5:72:9a:9a: c1:82:4e:df:3a:12:34:3a:39:6a:d0:e6:56:1f:ee:2e:31:39: 6a:4f:86:65:a7:9f:97:56:20:b1:57:f1:c8:52:45:42:38:5f: 5e:28:5e:1d:08:f8:27:c8:f2:d6:94:4e:d8:53:d2:c2:7f:85: 55:4a:91:6b:3f:5c:0b:0f:ac:cd:f1:cd:aa:f2:b2:95:12:28: 19:9c:75:84:94:11:55:a0:60:98:23:bb:19:23:16:1b:68:35: 50:59:0a:b7:9c:b4:44:67:19:06:2c:0f:e8:77:b8:e9:92:91: d4:e9:94:7e:2a:a8:0a:d4:db:b4:de:69:94:30:51:2c:70:ed: b7:9a:7d:f2:e2:68:1e:ca:d8:4b:91:b5:87:c7:b0:c7:ea:40: 7f:fb:00:49:31:a1:97:8a:38:d0:3f:e8:37:db:ad:de:ad:f1: c3:4f:65:27:0e:6b:91:68:e8:97:65:eb:95:4b:26:f4:05:f9: be:19:85:9f:02:b5:b1:dc:c2:95:71:7c:27:65:9f:33:a3:a6: d3:23:e3:ae:4d:5e:c8:fe:c2:5a:11:78:1e:b3:97:59:a4:2a: 2a:7a:31:5c:7c:3d:06:1c:65:4d:c6:e8:1e:fb:16:b4:b8:f6: e5:1d:20:29 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMpgOa44osTQM4j+IKEyxdeTQSnkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjREOUM2QzNFMjY1M0U1M0U0NTQ5RUNEN0IwRTQzMjZG RTk1NkI0QzAeFw0yNTExMDQxMjE2MDRaFw0yNTExMDcxNzE4MDRaMDMxMTAvBgNV BAMTKDE4M0U2MUE0MkZDNjQ4MDQwRkJCODM2REVEMTM4RjBGQ0Y0MzBBODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyvw7EuDAzeJO0PBkSlI6doCHU Zyk/5tc8g5wRTMKImW8+gqK0AgU70VPO8uqppzWoLKDVmvHB+K76hyjb2Cx4U29s F4rkh5C8cJbHyJQNrbm+C0xklBR3UFA+9hLvbb1xiuHGxv0dO7L26cX8yIqYU67o gjuMZ5spHM6IalYizlwtRAvXkOcawuWPJh4tOo6Un+rGd+72qraSx/JucERRN4f0 GhY5QjPBntE8Lg0V7ApOilDAIpDtcMLc+qH5lyKeyP485TktTawflNjRyu8zUPJL UH63Mg2TJpBqH4HTPLVg4U6GkLsnYR/cc5doeI9JF2m6NlWjSlacgOZbgRi/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGD5hpC/GSAQPu4Nt7ROPD89DCoMwHwYDVR0j BBgwFoAU9NnGw+JlPlPkVJ7New5DJv6Va0wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l OTdjNjgyYS00NDhiLTQwZTItYTg4Zi0xNmRmODNkZDMzMzcvMC9GNEQ5QzZDM0Uy NjUzRTUzRTQ1NDlFQ0Q3QjBFNDMyNkZFOTU2QjRDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRjREOUM2QzNFMjY1M0U1M0U0NTQ5RUNEN0IwRTQzMjZGRTk1 NkI0Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTk3YzY4MmEtNDQ4Yi00MGUyLWE4 OGYtMTZkZjgzZGQzMzM3LzAvRjREOUM2QzNFMjY1M0U1M0U0NTQ5RUNEN0IwRTQz MjZGRTk1NkI0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAsuew67vQBv25jL7JS69XKamsGCTt86EjQ6 OWrQ5lYf7i4xOWpPhmWnn5dWILFX8chSRUI4X14oXh0I+CfI8taUTthT0sJ/hVVK kWs/XAsPrM3xzaryspUSKBmcdYSUEVWgYJgjuxkjFhtoNVBZCrectERnGQYsD+h3 uOmSkdTplH4qqArU27TeaZQwUSxw7beaffLiaB7K2EuRtYfHsMfqQH/7AEkxoZeK ONA/6Dfbrd6t8cNPZScOa5Fo6Jdl65VLJvQF+b4ZhZ8CtbHcwpVxfCdlnzOjptMj 465NXsj+wloReB6zl1mkKip6MVx8PQYcZU3G6B77FrS49uUdICk= -----END CERTIFICATE-----Generated at Wed Nov 5 08:21:02 2025 by rpki-client