$ rpki-client -vvf repo-rpki.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.mft File: 4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.mft (raw, json) Hash identifier: jc0oZwRm6+/zA/2M7mQ6VEef700N6e9DxLorPo9KJMc= Subject key identifier: F8:EF:A4:A4:98:12:9F:9E:D5:A9:AD:0C:AD:79:EA:A0:3F:3B:15:A8 Authority key identifier: 4D:D0:C9:5B:43:B8:B6:53:60:1F:ED:39:AB:01:0E:1D:D0:DC:17:F2 Certificate issuer: /CN=4DD0C95B43B8B653601FED39AB010E1DD0DC17F2 Certificate serial: 01104551E537E24E612E76CFC5F4FA0F5EEFEBCE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.mft Manifest number: 051D Signing time: Sun 26 Oct 2025 08:31:11 +0000 Manifest this update: Sun 26 Oct 2025 08:26:11 +0000 Manifest next update: Wed 29 Oct 2025 11:44:11 +0000 Files and hashes: 1: 3130332e36362e35352e302f32342d3234203d3e20313335343537.roa (hash: ljnKYF4WQqtb0yfOcUdymtJM6+GnXJyNyFLsK7GZ494=) 2: 34352e3132302e3234342e302f32322d3234203d3e20313335343537.roa (hash: PuA0O7on+Tv+yi4m5sFC8JVnpsZv77062xaCNSQ10PY=) 3: 4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.crl (hash: Vhu8toxy0/5xhsegWY6z3RnIPikIWNSr/ZdEGVsJqL8=) 4: 323030313a6466323a626530303a3a2f34382d3438203d3e20313335343537.roa (hash: Y9NxdO2uUmExgp5HT4f9RxRPtt01n/EQdy4OmAOBACk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.crl rsync://repo-rpki.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Oct 2025 11:44:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:10:45:51:e5:37:e2:4e:61:2e:76:cf:c5:f4:fa:0f:5e:ef:eb:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4DD0C95B43B8B653601FED39AB010E1DD0DC17F2 Validity Not Before: Oct 26 08:26:11 2025 GMT Not After : Oct 29 11:44:11 2025 GMT Subject: CN=F8EFA4A498129F9ED5A9AD0CAD79EAA03F3B15A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ca:b1:a2:59:a0:a2:15:d9:a6:e2:37:62:8e: 1c:bd:05:63:8f:13:a5:9c:c5:bd:c4:b3:b0:b5:00: 83:ca:c4:47:ad:33:e6:7a:18:fc:c2:da:37:11:23: 5f:f2:81:f8:ea:b1:87:94:37:d6:89:89:84:9f:85: 77:10:ca:f2:ff:2c:40:37:d8:e9:89:48:d8:2e:59: 99:52:7e:2d:7a:03:ed:ff:94:23:07:f5:de:8d:0d: d7:10:91:28:03:8d:3c:b5:12:d3:50:8f:a0:31:44: 4b:59:3e:e8:2d:6c:81:a3:15:c7:b0:25:43:01:0c: c0:c7:ec:f0:7f:44:a2:af:73:30:ba:71:ef:82:31: 98:1d:f2:75:9d:c0:aa:f7:f0:10:57:0d:db:bd:1c: 41:c8:82:52:34:b7:b8:56:51:b2:3b:5d:b4:1f:2d: 42:b3:1c:39:e4:83:5e:85:c3:c8:61:3d:b8:ae:ba: f0:dd:a5:38:6a:78:da:5d:7a:a7:98:8d:63:74:c9: 0d:1a:36:5d:a4:8b:54:ea:9a:5f:44:c2:bd:10:c8: 9f:b0:f7:8b:1a:d9:7f:52:f8:be:99:3f:8f:16:c5: 11:38:2c:0c:c3:5d:5d:49:d9:3f:56:d9:fa:6b:f4: 69:2e:f9:de:43:5e:00:12:30:b0:ea:00:a5:ed:1c: 8b:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:EF:A4:A4:98:12:9F:9E:D5:A9:AD:0C:AD:79:EA:A0:3F:3B:15:A8 X509v3 Authority Key Identifier: keyid:4D:D0:C9:5B:43:B8:B6:53:60:1F:ED:39:AB:01:0E:1D:D0:DC:17:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:f0:e8:3f:2d:a3:3d:71:28:86:09:9e:73:76:ed:3c:45:a4: 25:b3:fa:bd:7e:a9:81:8b:75:6e:58:79:4f:57:01:a2:08:99: 3b:33:d4:4d:3d:19:8b:d7:60:c1:e7:10:c0:c6:20:6f:22:7e: d4:ac:94:16:2e:51:fd:9d:f1:53:f7:f2:00:43:0f:8a:07:ae: 16:f8:19:9d:8b:fa:1f:06:fe:31:0b:f3:8a:a7:86:d4:df:3b: 93:f1:e8:83:f7:fe:3b:e2:11:c5:46:d1:22:a7:26:de:ed:a5: 13:2c:72:f6:83:e6:37:b8:ae:73:bc:14:b8:52:82:a5:e4:8f: de:be:9f:e3:49:b1:f9:5f:53:e5:2a:69:15:21:f6:23:c2:ce: 88:d7:b0:73:a8:1a:58:38:f4:29:69:d5:f0:43:67:7a:1c:5e: 87:14:d5:1a:7e:2e:23:82:83:7c:ff:af:72:82:37:bb:a6:a2: 83:56:92:91:04:75:8a:2c:42:d9:4b:23:1d:f7:9a:91:4b:99: 11:56:3e:9e:75:64:93:c7:8c:b9:32:ff:19:14:de:ff:24:25: ff:88:df:a6:da:1b:ce:d2:a1:35:28:d7:25:b7:07:f1:35:e5: 52:87:66:d5:5e:40:c5:36:4b:b0:42:d5:65:6d:05:1d:5e:ef: b9:ba:ed:31 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUARBFUeU34k5hLnbPxfT6D17v684wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEREMEM5NUI0M0I4QjY1MzYwMUZFRDM5QUIwMTBFMURE MERDMTdGMjAeFw0yNTEwMjYwODI2MTFaFw0yNTEwMjkxMTQ0MTFaMDMxMTAvBgNV BAMTKEY4RUZBNEE0OTgxMjlGOUVENUE5QUQwQ0FENzlFQUEwM0YzQjE1QTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0yrGiWaCiFdmm4jdijhy9BWOP E6Wcxb3Es7C1AIPKxEetM+Z6GPzC2jcRI1/ygfjqsYeUN9aJiYSfhXcQyvL/LEA3 2OmJSNguWZlSfi16A+3/lCMH9d6NDdcQkSgDjTy1EtNQj6AxREtZPugtbIGjFcew JUMBDMDH7PB/RKKvczC6ce+CMZgd8nWdwKr38BBXDdu9HEHIglI0t7hWUbI7XbQf LUKzHDnkg16Fw8hhPbiuuvDdpThqeNpdeqeYjWN0yQ0aNl2ki1Tqml9Ewr0QyJ+w 94sa2X9S+L6ZP48WxRE4LAzDXV1J2T9W2fpr9Gku+d5DXgASMLDqAKXtHItDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+O+kpJgSn57Vqa0MrXnqoD87FagwHwYDVR0j BBgwFoAUTdDJW0O4tlNgH+05qwEOHdDcF/IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 Mjc4MGY4NS1lZjJmLTRjZjgtYTRiOC01MjI1YzQ1Yjk2YTEvMC80REQwQzk1QjQz QjhCNjUzNjAxRkVEMzlBQjAxMEUxREQwREMxN0YyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEREMEM5NUI0M0I4QjY1MzYwMUZFRDM5QUIwMTBFMUREMERD MTdGMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODI3ODBmODUtZWYyZi00Y2Y4LWE0 YjgtNTIyNWM0NWI5NmExLzAvNEREMEM5NUI0M0I4QjY1MzYwMUZFRDM5QUIwMTBF MUREMERDMTdGMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHPw6D8toz1xKIYJnnN27TxFpCWz+r1+qYGL dW5YeU9XAaIImTsz1E09GYvXYMHnEMDGIG8iftSslBYuUf2d8VP38gBDD4oHrhb4 GZ2L+h8G/jEL84qnhtTfO5Px6IP3/jviEcVG0SKnJt7tpRMscvaD5je4rnO8FLhS gqXkj96+n+NJsflfU+UqaRUh9iPCzojXsHOoGlg49Clp1fBDZ3ocXocU1Rp+LiOC g3z/r3KCN7umooNWkpEEdYosQtlLIx33mpFLmRFWPp51ZJPHjLky/xkU3v8kJf+I 36baG87SoTUo1yW3B/E15VKHZtVeQMU2S7BC1WVtBR1e77m67TE= -----END CERTIFICATE-----Generated at Mon Oct 27 13:29:16 2025 by rpki-client