$ rpki-client -vvf repo-rpki.idnic.net/repo/f1b267a4-5030-4a4f-bb86-71fd230f53d1/0/C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.mft File: C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.mft (raw, json) Hash identifier: YHVbl8gw00uFhl4nu5emu6/5CtClDS2N7Zwn8UA0BDM= Subject key identifier: C8:27:8A:F8:C9:C2:95:61:97:9C:F7:C0:FD:31:EC:44:C4:9D:2E:3F Authority key identifier: C4:FC:DC:42:4C:5B:4B:2A:56:3F:0D:07:25:73:A5:49:2A:CF:8E:36 Certificate issuer: /CN=C4FCDC424C5B4B2A563F0D072573A5492ACF8E36 Certificate serial: 615AF5E3040A2EB92975C886F202C1F6BAF7FE55 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f1b267a4-5030-4a4f-bb86-71fd230f53d1/0/C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.mft Manifest number: F7 Signing time: Sat 15 Nov 2025 10:12:05 +0000 Manifest this update: Sat 15 Nov 2025 10:07:05 +0000 Manifest next update: Tue 18 Nov 2025 16:11:05 +0000 Files and hashes: 1: C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.crl (hash: jc6MVsiA1wAn5ro/7O6bWOP5YWEUUU4NsZlr/ulDqz4=) 2: 3135372e36362e33382e302f32332d3234203d3e203633383635.roa (hash: ul03DJPa84uV+wn7V8w/eIH5fK3BBIC1WxDMCBsM/QQ=) 3: 3135372e36362e33382e302f32342d3234203d3e203435333035.roa (hash: cD0fi1g8RJKzuqT2bKPT18EYQnEf1eQo9O4WH9FMt7c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f1b267a4-5030-4a4f-bb86-71fd230f53d1/0/C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.crl rsync://repo-rpki.idnic.net/repo/f1b267a4-5030-4a4f-bb86-71fd230f53d1/0/C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 18 Nov 2025 16:11:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:5a:f5:e3:04:0a:2e:b9:29:75:c8:86:f2:02:c1:f6:ba:f7:fe:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C4FCDC424C5B4B2A563F0D072573A5492ACF8E36 Validity Not Before: Nov 15 10:07:05 2025 GMT Not After : Nov 18 16:11:05 2025 GMT Subject: CN=C8278AF8C9C29561979CF7C0FD31EC44C49D2E3F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:1d:2e:5e:28:77:f6:2f:5a:1c:60:80:4a:f5: e8:47:e7:15:2c:9e:25:86:0d:a7:d5:59:b4:42:10: 7b:58:33:24:10:c3:19:a5:86:0a:07:1f:32:7b:63: cb:69:4d:a7:dc:1e:2e:d0:78:18:1e:71:46:90:80: 56:ee:12:b9:26:3c:26:0c:be:bb:3c:a0:b7:e1:89: 05:b4:43:d0:49:d0:48:1e:aa:c1:4b:5a:52:a6:13: 31:7e:41:c3:ba:45:f7:0a:2f:3e:0a:7f:4f:14:17: e4:db:88:7e:2e:7f:31:76:23:71:36:49:0e:23:a6: 59:71:66:ec:91:b7:13:68:e9:5b:d4:77:b6:a4:03: 28:43:14:02:1c:0b:63:1d:d3:ad:d9:ec:eb:fe:8a: 07:ab:3f:75:df:2e:71:a4:9d:76:d7:34:ba:1a:93: 18:73:26:29:60:91:ef:83:a8:ba:45:b3:9a:b6:bd: f4:bc:3b:98:56:76:ae:ab:f3:52:ed:93:69:b4:27: 3e:c9:f8:e8:74:3b:f2:e6:45:e4:cd:f1:a7:d5:aa: db:27:ca:c3:d7:bd:6d:45:a1:26:a6:e0:09:39:21: 41:30:d7:12:e8:f4:82:ac:2c:4a:0c:5d:e8:fd:26: ac:31:dd:1f:6d:c2:da:82:1c:da:41:f1:12:9f:b3: 8a:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:27:8A:F8:C9:C2:95:61:97:9C:F7:C0:FD:31:EC:44:C4:9D:2E:3F X509v3 Authority Key Identifier: keyid:C4:FC:DC:42:4C:5B:4B:2A:56:3F:0D:07:25:73:A5:49:2A:CF:8E:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f1b267a4-5030-4a4f-bb86-71fd230f53d1/0/C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f1b267a4-5030-4a4f-bb86-71fd230f53d1/0/C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:01:27:0c:8a:43:3c:70:2c:a5:83:18:1a:2b:bc:1a:89:f6: 97:5b:42:15:1f:2d:4f:c0:26:dd:b7:08:cc:b7:a3:8c:38:15: a4:4b:18:0d:ea:7a:a5:65:d5:4f:ff:19:04:fb:a9:44:03:27: 8f:32:9d:8a:ba:0c:a4:7f:3e:4b:bc:41:c7:68:d2:07:fc:52: d2:de:1f:41:5b:6b:db:f9:a8:e9:d7:62:68:4d:0e:6a:a9:4e: b1:d4:39:60:68:0b:f2:7f:3b:68:92:23:bd:84:0b:7a:31:93: 6e:6b:cc:95:4f:2c:3b:fe:67:e2:e9:cb:f8:e2:21:41:10:fa: c7:ad:a7:08:cb:3c:2b:9a:79:1e:17:95:44:e3:d8:48:98:77: e8:08:43:41:29:a4:87:ee:fa:74:04:23:7f:0f:98:79:60:3b: fc:47:c6:4f:b8:01:a5:76:79:cd:79:3e:d7:47:cf:eb:a2:fa: de:41:fe:f1:ba:e3:4d:8d:07:3d:f9:a7:c3:b3:ef:a8:30:f4: 3f:34:18:1d:a1:6e:50:78:aa:49:d9:eb:9f:1f:e7:1e:a2:0b: 1d:05:98:26:0d:dd:f0:45:c7:e0:a9:bc:df:ea:32:88:bf:f3: 0d:6e:ed:1b:51:f2:3e:84:23:48:dd:69:b3:f5:41:08:5f:36: 5b:d3:9a:e8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYVr14wQKLrkpdciG8gLB9rr3/lUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzRGQ0RDNDI0QzVCNEIyQTU2M0YwRDA3MjU3M0E1NDky QUNGOEUzNjAeFw0yNTExMTUxMDA3MDVaFw0yNTExMTgxNjExMDVaMDMxMTAvBgNV BAMTKEM4Mjc4QUY4QzlDMjk1NjE5NzlDRjdDMEZEMzFFQzQ0QzQ5RDJFM0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1HS5eKHf2L1ocYIBK9ehH5xUs niWGDafVWbRCEHtYMyQQwxmlhgoHHzJ7Y8tpTafcHi7QeBgecUaQgFbuErkmPCYM vrs8oLfhiQW0Q9BJ0EgeqsFLWlKmEzF+QcO6RfcKLz4Kf08UF+TbiH4ufzF2I3E2 SQ4jpllxZuyRtxNo6VvUd7akAyhDFAIcC2Md063Z7Ov+igerP3XfLnGknXbXNLoa kxhzJilgke+DqLpFs5q2vfS8O5hWdq6r81Ltk2m0Jz7J+Oh0O/LmReTN8afVqtsn ysPXvW1FoSam4Ak5IUEw1xLo9IKsLEoMXej9Jqwx3R9twtqCHNpB8RKfs4oFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyCeK+MnClWGXnPfA/THsRMSdLj8wHwYDVR0j BBgwFoAUxPzcQkxbSypWPw0HJXOlSSrPjjYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MWIyNjdhNC01MDMwLTRhNGYtYmI4Ni03MWZkMjMwZjUzZDEvMC9DNEZDREM0MjRD NUI0QjJBNTYzRjBEMDcyNTczQTU0OTJBQ0Y4RTM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQzRGQ0RDNDI0QzVCNEIyQTU2M0YwRDA3MjU3M0E1NDkyQUNG OEUzNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjFiMjY3YTQtNTAzMC00YTRmLWJi ODYtNzFmZDIzMGY1M2QxLzAvQzRGQ0RDNDI0QzVCNEIyQTU2M0YwRDA3MjU3M0E1 NDkyQUNGOEUzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKABJwyKQzxwLKWDGBorvBqJ9pdbQhUfLU/A Jt23CMy3o4w4FaRLGA3qeqVl1U//GQT7qUQDJ48ynYq6DKR/Pku8Qcdo0gf8UtLe H0Fba9v5qOnXYmhNDmqpTrHUOWBoC/J/O2iSI72EC3oxk25rzJVPLDv+Z+Lpy/ji IUEQ+setpwjLPCuaeR4XlUTj2EiYd+gIQ0EppIfu+nQEI38PmHlgO/xHxk+4AaV2 ec15PtdHz+ui+t5B/vG6402NBz35p8Oz76gw9D80GB2hblB4qknZ658f5x6iCx0F mCYN3fBFx+CpvN/qMoi/8w1u7RtR8j6EI0jdabP1QQhfNlvTmug= -----END CERTIFICATE-----Generated at Mon Nov 17 12:08:28 2025 by rpki-client