$ rpki-client -vvf repo-rpki.idnic.net/repo/fd3a2fdf-bcba-4757-b366-e1a0ad2d374a/0/4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.mft File: 4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.mft (raw, json) Hash identifier: UCfoHOhgrUH8JlgIEqJ4tAJ9KGVURty8StCm80CrYNU= Subject key identifier: 70:BB:98:36:7B:10:62:1C:3C:BB:CD:CA:E4:06:89:4F:54:83:75:7D Authority key identifier: 4A:37:76:4C:C8:0D:1B:8A:68:19:E0:F0:F1:45:46:6E:0B:E5:2C:BD Certificate issuer: /CN=4A37764CC80D1B8A6819E0F0F145466E0BE52CBD Certificate serial: 55C8E1275006A7FE685AB91DD1035405BA087E0F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fd3a2fdf-bcba-4757-b366-e1a0ad2d374a/0/4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.mft Manifest number: 0103 Signing time: Tue 04 Nov 2025 04:52:38 +0000 Manifest this update: Tue 04 Nov 2025 04:47:38 +0000 Manifest next update: Fri 07 Nov 2025 12:36:38 +0000 Files and hashes: 1: 3135372e31302e36332e302f32342d3234203d3e20313532303835.roa (hash: 9mpAVpAO+aHJhHpBlGcLDx3eGU5On+hoBdAGOhixT1Q=) 2: 4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.crl (hash: acQiI6NNi6MoJMj3bo3GHYHWtI4ZaaBaTac8x/gyXyI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fd3a2fdf-bcba-4757-b366-e1a0ad2d374a/0/4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.crl rsync://repo-rpki.idnic.net/repo/fd3a2fdf-bcba-4757-b366-e1a0ad2d374a/0/4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 12:36:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:c8:e1:27:50:06:a7:fe:68:5a:b9:1d:d1:03:54:05:ba:08:7e:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A37764CC80D1B8A6819E0F0F145466E0BE52CBD Validity Not Before: Nov 4 04:47:38 2025 GMT Not After : Nov 7 12:36:38 2025 GMT Subject: CN=70BB98367B10621C3CBBCDCAE406894F5483757D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:cb:37:5c:37:84:74:96:d3:a8:39:75:b0:71: 88:9a:9f:66:ab:3a:4e:b4:15:6e:7d:21:f9:f4:c8: 32:58:85:43:25:ae:ff:a7:08:a6:a9:a9:95:75:7f: ce:8e:81:01:08:30:f8:1a:40:54:67:af:be:a9:ee: 49:dd:38:eb:00:19:9c:7a:b6:86:dd:15:cf:51:61: 82:70:2b:dc:01:14:24:a7:af:e4:4d:2e:33:1a:5b: d2:dc:f3:e5:fe:42:0d:28:30:a8:be:73:5c:6c:16: 7b:1a:f7:78:45:fc:b1:37:28:f0:4e:a0:12:5c:4d: 28:11:e2:ba:61:c0:d5:44:e0:7e:44:16:18:aa:4b: 84:80:40:aa:d3:fe:a9:83:23:1c:49:f3:a4:f4:64: 41:9f:42:5f:70:20:da:4e:52:49:ef:69:0d:04:72: a1:94:92:fd:b4:a0:5d:34:95:17:58:39:a5:e1:9a: 23:46:44:2c:26:9a:61:a7:5e:05:9c:7d:7b:7f:66: 61:9a:aa:c6:48:76:ca:f8:73:a5:b9:6d:2c:2c:59: 18:58:b8:7d:4f:15:52:48:16:1d:b1:0a:43:f3:a5: 0f:84:17:71:eb:e1:fb:5f:db:9b:c4:64:40:cd:7b: e1:8b:3c:1d:45:23:54:ef:09:d9:f4:d6:17:6d:c3: 44:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:BB:98:36:7B:10:62:1C:3C:BB:CD:CA:E4:06:89:4F:54:83:75:7D X509v3 Authority Key Identifier: keyid:4A:37:76:4C:C8:0D:1B:8A:68:19:E0:F0:F1:45:46:6E:0B:E5:2C:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fd3a2fdf-bcba-4757-b366-e1a0ad2d374a/0/4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fd3a2fdf-bcba-4757-b366-e1a0ad2d374a/0/4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:af:b0:c4:c2:8a:4f:15:30:26:19:96:ac:b3:d9:93:43:22: 69:89:cb:bd:8e:60:b9:6c:92:f5:48:e5:1b:72:14:df:c6:b2: 3e:5f:48:f2:87:fb:1e:fc:3e:0a:51:91:b9:65:26:d5:28:71: 13:dd:66:81:a0:b9:ef:05:44:11:95:8d:52:4c:19:3a:0b:7f: 6b:85:fa:d2:08:20:83:96:12:f6:d9:2a:fe:53:32:aa:ae:d1: 69:b4:cb:43:ef:f0:de:bb:a3:7d:9c:2c:45:28:e8:96:86:f2: fb:05:49:2c:f9:12:0e:fe:5f:82:0e:c1:91:bc:d1:e8:04:f5: 14:26:cf:b1:e8:0b:a6:7f:dc:dc:e3:64:ae:ea:8b:fc:09:3b: e3:08:fb:ee:29:e4:30:2a:f2:d3:50:4a:a3:e3:ab:c9:54:e9: 1a:d9:62:7d:ad:85:3d:59:e9:c2:38:0c:51:a3:5f:0a:8f:b3: 67:b4:7a:b0:b4:65:17:12:67:c7:d1:d1:f2:f6:a3:ef:ff:32: 4c:74:d5:c3:dc:8a:be:21:cf:6b:11:fc:14:98:76:30:9a:95: 31:27:ee:cd:a4:f8:98:cb:d7:b2:92:56:58:9b:57:5b:1b:c5: e2:0b:8a:fb:5b:b1:0f:3b:fb:fd:83:8f:e8:78:5b:c6:20:13: ce:85:39:2e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVcjhJ1AGp/5oWrkd0QNUBboIfg8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEEzNzc2NENDODBEMUI4QTY4MTlFMEYwRjE0NTQ2NkUw QkU1MkNCRDAeFw0yNTExMDQwNDQ3MzhaFw0yNTExMDcxMjM2MzhaMDMxMTAvBgNV BAMTKDcwQkI5ODM2N0IxMDYyMUMzQ0JCQ0RDQUU0MDY4OTRGNTQ4Mzc1N0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfyzdcN4R0ltOoOXWwcYian2ar Ok60FW59Ifn0yDJYhUMlrv+nCKapqZV1f86OgQEIMPgaQFRnr76p7kndOOsAGZx6 tobdFc9RYYJwK9wBFCSnr+RNLjMaW9Lc8+X+Qg0oMKi+c1xsFnsa93hF/LE3KPBO oBJcTSgR4rphwNVE4H5EFhiqS4SAQKrT/qmDIxxJ86T0ZEGfQl9wINpOUknvaQ0E cqGUkv20oF00lRdYOaXhmiNGRCwmmmGnXgWcfXt/ZmGaqsZIdsr4c6W5bSwsWRhY uH1PFVJIFh2xCkPzpQ+EF3Hr4ftf25vEZEDNe+GLPB1FI1TvCdn01hdtw0SzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcLuYNnsQYhw8u83K5AaJT1SDdX0wHwYDVR0j BBgwFoAUSjd2TMgNG4poGeDw8UVGbgvlLL0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZDNhMmZkZi1iY2JhLTQ3NTctYjM2Ni1lMWEwYWQyZDM3NGEvMC80QTM3NzY0Q0M4 MEQxQjhBNjgxOUUwRjBGMTQ1NDY2RTBCRTUyQ0JELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNEEzNzc2NENDODBEMUI4QTY4MTlFMEYwRjE0NTQ2NkUwQkU1 MkNCRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmQzYTJmZGYtYmNiYS00NzU3LWIz NjYtZTFhMGFkMmQzNzRhLzAvNEEzNzc2NENDODBEMUI4QTY4MTlFMEYwRjE0NTQ2 NkUwQkU1MkNCRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIGvsMTCik8VMCYZlqyz2ZNDImmJy72OYLls kvVI5RtyFN/Gsj5fSPKH+x78PgpRkbllJtUocRPdZoGgue8FRBGVjVJMGToLf2uF +tIIIIOWEvbZKv5TMqqu0Wm0y0Pv8N67o32cLEUo6JaG8vsFSSz5Eg7+X4IOwZG8 0egE9RQmz7HoC6Z/3NzjZK7qi/wJO+MI++4p5DAq8tNQSqPjq8lU6RrZYn2thT1Z 6cI4DFGjXwqPs2e0erC0ZRcSZ8fR0fL2o+//Mkx01cPcir4hz2sR/BSYdjCalTEn 7s2k+JjL17KSVlibV1sbxeILivtbsQ87+/2Dj+h4W8YgE86FOS4= -----END CERTIFICATE-----Generated at Wed Nov 5 20:52:44 2025 by rpki-client