$ rpki-client -vvf repo-rpki.idnic.net/repo/f1b267a4-5030-4a4f-bb86-71fd230f53d1/0/C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.mft File: C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.mft (raw, json) Hash identifier: QM1IZK7zId/eSJiHwNOfR6SJ8+ieZE+/NTQMLY7Obr4= Subject key identifier: 84:00:4F:EC:C2:C7:C0:AD:68:A0:34:E0:71:18:84:19:79:56:D7:3A Authority key identifier: C4:FC:DC:42:4C:5B:4B:2A:56:3F:0D:07:25:73:A5:49:2A:CF:8E:36 Certificate issuer: /CN=C4FCDC424C5B4B2A563F0D072573A5492ACF8E36 Certificate serial: 076A967E15C00B7C0B56F861519FE69BC855A1E1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f1b267a4-5030-4a4f-bb86-71fd230f53d1/0/C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.mft Manifest number: F2 Signing time: Tue 04 Nov 2025 06:41:56 +0000 Manifest this update: Tue 04 Nov 2025 06:36:56 +0000 Manifest next update: Fri 07 Nov 2025 14:48:56 +0000 Files and hashes: 1: C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.crl (hash: esh2msrouoA//y9NEqdw5dxml6FQiCztCQwEF9A6sLc=) 2: 3135372e36362e33382e302f32342d3234203d3e203435333035.roa (hash: cD0fi1g8RJKzuqT2bKPT18EYQnEf1eQo9O4WH9FMt7c=) 3: 3135372e36362e33382e302f32332d3234203d3e203633383635.roa (hash: ul03DJPa84uV+wn7V8w/eIH5fK3BBIC1WxDMCBsM/QQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f1b267a4-5030-4a4f-bb86-71fd230f53d1/0/C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.crl rsync://repo-rpki.idnic.net/repo/f1b267a4-5030-4a4f-bb86-71fd230f53d1/0/C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 14:48:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:6a:96:7e:15:c0:0b:7c:0b:56:f8:61:51:9f:e6:9b:c8:55:a1:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C4FCDC424C5B4B2A563F0D072573A5492ACF8E36 Validity Not Before: Nov 4 06:36:56 2025 GMT Not After : Nov 7 14:48:56 2025 GMT Subject: CN=84004FECC2C7C0AD68A034E0711884197956D73A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:86:4b:c7:ef:97:cd:7e:3a:da:c4:f6:3b:da: c8:8b:42:d3:c6:d2:29:0b:b9:1c:b6:e1:90:34:ed: b0:91:4f:41:d0:ff:09:43:70:0d:7a:4a:52:eb:c1: 15:ca:82:a6:ac:2a:e4:01:7e:b7:1c:7a:11:a8:88: 7c:ce:3c:28:71:4f:83:3f:21:b8:21:06:ad:30:6c: c8:34:70:74:77:fa:a4:b1:aa:e6:5d:7d:e7:cf:c7: d2:11:74:0d:62:bf:3f:46:c7:e8:09:cf:55:20:22: f9:d5:5b:63:2a:5c:20:09:91:c9:cf:37:25:8d:e5: 78:25:58:7b:37:7d:fe:8a:fe:e2:a5:68:be:80:16: 85:e1:60:c7:7b:07:9c:62:39:43:50:29:aa:e0:57: 71:44:7d:c1:e0:3e:9c:c2:c7:81:de:a2:5b:ef:3f: 01:a0:e3:0e:c0:ca:5c:c7:0e:ee:70:32:1c:3c:83: 8b:69:6a:39:f5:b1:a7:cf:38:61:32:04:2f:32:ef: 92:55:bc:f2:e7:92:7f:0b:f4:ac:86:55:94:4d:7a: 09:09:fd:60:ec:20:bf:bf:38:db:0f:1f:1e:ac:e7: a4:8a:b1:08:23:6f:03:45:0b:1a:36:56:9d:f1:03: 57:4e:36:bb:ca:06:5d:f6:46:ca:29:5c:f9:1d:b4: f9:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:00:4F:EC:C2:C7:C0:AD:68:A0:34:E0:71:18:84:19:79:56:D7:3A X509v3 Authority Key Identifier: keyid:C4:FC:DC:42:4C:5B:4B:2A:56:3F:0D:07:25:73:A5:49:2A:CF:8E:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f1b267a4-5030-4a4f-bb86-71fd230f53d1/0/C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f1b267a4-5030-4a4f-bb86-71fd230f53d1/0/C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:d6:fb:1b:a9:c4:33:ba:06:99:22:ae:5a:ab:32:cc:21:81: 5f:20:4b:9c:2d:88:13:1d:c2:3d:a3:3f:7c:aa:af:8c:19:2e: 25:5a:87:9f:1e:e6:9a:14:d6:c2:39:1d:e8:dd:b7:dd:d3:17: 05:4e:14:0c:c3:d5:f7:ca:4c:f3:17:a8:df:96:5d:95:ba:6b: 03:07:8c:0d:23:d9:68:33:83:ca:8d:63:1d:b4:85:c6:5c:3e: 85:d3:cc:49:0c:c3:c4:3f:68:b3:fa:11:a0:3d:0e:42:a3:7f: ab:40:36:9f:6e:33:1e:13:fe:a8:aa:4e:c4:88:a4:3e:ad:78: ed:d2:2f:79:b7:68:08:49:4c:9a:61:fd:8f:5d:0f:b7:94:1a: 59:53:c9:17:39:19:37:f0:f0:86:72:f4:b4:4b:1d:c2:1e:7f: c2:a9:a2:55:06:56:ec:34:63:87:c6:c4:7f:a9:77:ca:66:0c: 07:1b:c1:f7:fc:cf:53:25:67:b8:e4:cd:96:87:2a:11:19:24: eb:70:b2:1f:bf:23:55:04:1b:e8:fd:b3:68:94:b5:98:2e:44: 08:88:b4:39:7a:2c:57:9a:a0:76:ba:f9:53:7a:79:a5:da:ce: a3:f6:9a:dc:06:23:d2:26:6d:ee:25:9f:eb:11:bb:29:f0:48: 59:41:c2:ae -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB2qWfhXAC3wLVvhhUZ/mm8hVoeEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzRGQ0RDNDI0QzVCNEIyQTU2M0YwRDA3MjU3M0E1NDky QUNGOEUzNjAeFw0yNTExMDQwNjM2NTZaFw0yNTExMDcxNDQ4NTZaMDMxMTAvBgNV BAMTKDg0MDA0RkVDQzJDN0MwQUQ2OEEwMzRFMDcxMTg4NDE5Nzk1NkQ3M0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCphkvH75fNfjraxPY72siLQtPG 0ikLuRy24ZA07bCRT0HQ/wlDcA16SlLrwRXKgqasKuQBfrccehGoiHzOPChxT4M/ IbghBq0wbMg0cHR3+qSxquZdfefPx9IRdA1ivz9Gx+gJz1UgIvnVW2MqXCAJkcnP NyWN5XglWHs3ff6K/uKlaL6AFoXhYMd7B5xiOUNQKargV3FEfcHgPpzCx4Heolvv PwGg4w7AylzHDu5wMhw8g4tpajn1safPOGEyBC8y75JVvPLnkn8L9KyGVZRNegkJ /WDsIL+/ONsPHx6s56SKsQgjbwNFCxo2Vp3xA1dONrvKBl32RsopXPkdtPnJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhABP7MLHwK1ooDTgcRiEGXlW1zowHwYDVR0j BBgwFoAUxPzcQkxbSypWPw0HJXOlSSrPjjYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MWIyNjdhNC01MDMwLTRhNGYtYmI4Ni03MWZkMjMwZjUzZDEvMC9DNEZDREM0MjRD NUI0QjJBNTYzRjBEMDcyNTczQTU0OTJBQ0Y4RTM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQzRGQ0RDNDI0QzVCNEIyQTU2M0YwRDA3MjU3M0E1NDkyQUNG OEUzNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjFiMjY3YTQtNTAzMC00YTRmLWJi ODYtNzFmZDIzMGY1M2QxLzAvQzRGQ0RDNDI0QzVCNEIyQTU2M0YwRDA3MjU3M0E1 NDkyQUNGOEUzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI/W+xupxDO6BpkirlqrMswhgV8gS5wtiBMd wj2jP3yqr4wZLiVah58e5poU1sI5Hejdt93TFwVOFAzD1ffKTPMXqN+WXZW6awMH jA0j2Wgzg8qNYx20hcZcPoXTzEkMw8Q/aLP6EaA9DkKjf6tANp9uMx4T/qiqTsSI pD6teO3SL3m3aAhJTJph/Y9dD7eUGllTyRc5GTfw8IZy9LRLHcIef8KpolUGVuw0 Y4fGxH+pd8pmDAcbwff8z1MlZ7jkzZaHKhEZJOtwsh+/I1UEG+j9s2iUtZguRAiI tDl6LFeaoHa6+VN6eaXazqP2mtwGI9Imbe4ln+sRuynwSFlBwq4= -----END CERTIFICATE-----Generated at Wed Nov 5 12:24:52 2025 by rpki-client