$ rpki-client -vvf repo-rpki.idnic.net/repo/12c511be-67a2-44c9-b182-a911ba95be00/0/4412C369832E86CF255C7255EB1ECA7938910246.mft File: 4412C369832E86CF255C7255EB1ECA7938910246.mft (raw, json) Hash identifier: 14BDS8POmT+Id/Ou5VONVOdYauSlRYCZBicPn/M1Ees= Subject key identifier: 7A:8E:54:A9:C4:1F:8A:E2:70:70:BC:E3:4B:9C:70:AD:0E:CC:8A:3B Authority key identifier: 44:12:C3:69:83:2E:86:CF:25:5C:72:55:EB:1E:CA:79:38:91:02:46 Certificate issuer: /CN=4412C369832E86CF255C7255EB1ECA7938910246 Certificate serial: 6EC8B868171A64EF01447D7F912D437F8822A40A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4412C369832E86CF255C7255EB1ECA7938910246.cer Subject info access: rsync://repo-rpki.idnic.net/repo/12c511be-67a2-44c9-b182-a911ba95be00/0/4412C369832E86CF255C7255EB1ECA7938910246.mft Manifest number: 04B3 Signing time: Tue 04 Nov 2025 12:30:52 +0000 Manifest this update: Tue 04 Nov 2025 12:25:52 +0000 Manifest next update: Fri 07 Nov 2025 20:22:52 +0000 Files and hashes: 1: 4412C369832E86CF255C7255EB1ECA7938910246.crl (hash: QuwexQNtYpkVq9LOimLxsITIQ8IKvnyhXP2/VX5eNYU=) 2: 323030313a6466353a353238303a3a2f34382d3438203d3e20313431313237.roa (hash: HPsSqRVXNC2X//zSidaG64Nq6wN6hLBRPgB5Ogk0SaQ=) 3: 3130332e3135382e3132312e302f32342d3234203d3e20313431313237.roa (hash: BsPjaPAJfoOsDEE1I3aoHNDcatuZ5kuXKVlMx6806B8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/12c511be-67a2-44c9-b182-a911ba95be00/0/4412C369832E86CF255C7255EB1ECA7938910246.crl rsync://repo-rpki.idnic.net/repo/12c511be-67a2-44c9-b182-a911ba95be00/0/4412C369832E86CF255C7255EB1ECA7938910246.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4412C369832E86CF255C7255EB1ECA7938910246.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 20:22:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:c8:b8:68:17:1a:64:ef:01:44:7d:7f:91:2d:43:7f:88:22:a4:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4412C369832E86CF255C7255EB1ECA7938910246 Validity Not Before: Nov 4 12:25:52 2025 GMT Not After : Nov 7 20:22:52 2025 GMT Subject: CN=7A8E54A9C41F8AE27070BCE34B9C70AD0ECC8A3B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:69:18:b0:a7:aa:03:24:71:fe:f5:43:ba:1e: a6:d2:3e:ae:81:a0:cd:ee:59:e1:bb:dd:32:fb:b9: d2:be:11:38:ff:1f:09:23:19:0b:15:56:cc:68:3f: 34:77:f0:f5:9f:84:03:5a:e3:34:e0:3f:13:50:ec: 25:4f:3a:d4:a8:96:63:f0:ec:7c:15:6d:14:c7:5a: bd:12:4b:3d:5f:89:73:63:fd:e9:3e:8f:32:d8:4f: f7:3b:20:fb:e2:0e:2e:59:56:b0:58:51:a5:c5:83: c5:87:8d:e4:45:3d:88:9f:00:2d:46:5f:40:a0:3c: fc:94:dd:85:c5:64:0f:77:ff:1b:ab:96:6c:d9:5b: f3:7e:06:14:ac:b4:74:9a:0a:05:77:07:7b:ef:91: 27:b1:f4:a5:26:2b:58:4a:92:b0:fc:eb:14:4e:78: 7b:b4:57:c4:66:bb:57:14:8c:06:e9:5e:a1:55:02: 07:a6:4e:08:e2:79:78:fb:d4:b8:35:dc:a7:c4:0a: b6:39:d4:f7:79:54:be:2d:26:29:a4:ee:62:2a:1f: bb:64:eb:45:c7:bf:16:76:d7:34:d1:54:dd:b8:e3: d9:21:e9:e8:b6:5a:3b:2e:37:bb:8d:09:c0:92:5b: 6b:10:7a:f9:5b:71:ab:a0:41:fb:11:d5:a7:93:bc: 24:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:8E:54:A9:C4:1F:8A:E2:70:70:BC:E3:4B:9C:70:AD:0E:CC:8A:3B X509v3 Authority Key Identifier: keyid:44:12:C3:69:83:2E:86:CF:25:5C:72:55:EB:1E:CA:79:38:91:02:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/12c511be-67a2-44c9-b182-a911ba95be00/0/4412C369832E86CF255C7255EB1ECA7938910246.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4412C369832E86CF255C7255EB1ECA7938910246.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/12c511be-67a2-44c9-b182-a911ba95be00/0/4412C369832E86CF255C7255EB1ECA7938910246.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:ca:96:a0:58:95:dc:7b:fe:b4:b4:91:9a:22:6e:ec:42:e6: 12:02:8d:60:f5:06:a0:51:97:f8:0e:6f:a7:a5:78:1c:88:cb: 31:6a:3d:e6:42:05:19:7c:dc:e3:a7:0e:94:7b:2c:72:3a:4a: e0:6f:fa:a3:3f:11:1d:2d:eb:04:3f:ba:80:22:2d:6f:80:7c: 4c:ad:f2:80:90:64:3a:1a:3b:07:2f:7d:2a:62:78:9b:76:89: 5e:95:56:db:1b:f2:ca:65:7c:14:73:99:b9:20:e9:17:39:5f: 5d:70:0c:14:42:cf:c5:c8:a2:c9:4a:b9:83:c1:e4:df:c9:01: f7:a9:f1:1f:1e:cd:8c:02:91:92:2b:38:b6:11:11:de:e7:5b: 1b:a6:b4:e4:8b:c3:88:4d:8e:3e:d1:5d:01:43:ce:2a:a9:ce: bb:3c:57:b0:b1:b0:3c:c4:fb:85:25:28:90:5e:e4:70:be:af: 6a:00:10:73:5c:57:9f:15:46:d8:39:b0:de:e4:d9:1f:1c:b1: 3e:27:15:26:2b:a5:fe:1d:b0:b9:1d:62:08:ce:76:68:20:d5: 3f:c4:aa:00:79:76:15:db:fd:4a:fa:ab:ae:bd:27:22:5f:d7: 45:d4:08:91:f1:ad:34:2d:33:89:f9:3c:00:9e:12:7b:07:40: 2b:0c:b4:a3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbsi4aBcaZO8BRH1/kS1Df4gipAowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDQxMkMzNjk4MzJFODZDRjI1NUM3MjU1RUIxRUNBNzkz ODkxMDI0NjAeFw0yNTExMDQxMjI1NTJaFw0yNTExMDcyMDIyNTJaMDMxMTAvBgNV BAMTKDdBOEU1NEE5QzQxRjhBRTI3MDcwQkNFMzRCOUM3MEFEMEVDQzhBM0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqaRiwp6oDJHH+9UO6HqbSPq6B oM3uWeG73TL7udK+ETj/HwkjGQsVVsxoPzR38PWfhANa4zTgPxNQ7CVPOtSolmPw 7HwVbRTHWr0SSz1fiXNj/ek+jzLYT/c7IPviDi5ZVrBYUaXFg8WHjeRFPYifAC1G X0CgPPyU3YXFZA93/xurlmzZW/N+BhSstHSaCgV3B3vvkSex9KUmK1hKkrD86xRO eHu0V8Rmu1cUjAbpXqFVAgemTgjieXj71Lg13KfECrY51Pd5VL4tJimk7mIqH7tk 60XHvxZ21zTRVN2449kh6ei2WjsuN7uNCcCSW2sQevlbcaugQfsR1aeTvCSFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeo5UqcQfiuJwcLzjS5xwrQ7MijswHwYDVR0j BBgwFoAURBLDaYMuhs8lXHJV6x7KeTiRAkYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MmM1MTFiZS02N2EyLTQ0YzktYjE4Mi1hOTExYmE5NWJlMDAvMC80NDEyQzM2OTgz MkU4NkNGMjU1QzcyNTVFQjFFQ0E3OTM4OTEwMjQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDQxMkMzNjk4MzJFODZDRjI1NUM3MjU1RUIxRUNBNzkzODkx MDI0Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTJjNTExYmUtNjdhMi00NGM5LWIx ODItYTkxMWJhOTViZTAwLzAvNDQxMkMzNjk4MzJFODZDRjI1NUM3MjU1RUIxRUNB NzkzODkxMDI0Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKTKlqBYldx7/rS0kZoibuxC5hICjWD1BqBR l/gOb6eleByIyzFqPeZCBRl83OOnDpR7LHI6SuBv+qM/ER0t6wQ/uoAiLW+AfEyt 8oCQZDoaOwcvfSpieJt2iV6VVtsb8splfBRzmbkg6Rc5X11wDBRCz8XIoslKuYPB 5N/JAfep8R8ezYwCkZIrOLYREd7nWxumtOSLw4hNjj7RXQFDziqpzrs8V7CxsDzE +4UlKJBe5HC+r2oAEHNcV58VRtg5sN7k2R8csT4nFSYrpf4dsLkdYgjOdmgg1T/E qgB5dhXb/Ur6q669JyJf10XUCJHxrTQtM4n5PACeEnsHQCsMtKM= -----END CERTIFICATE-----Generated at Thu Nov 6 00:50:28 2025 by rpki-client