$ rpki-client -vvf repo-rpki.idnic.net/repo/24d108f7-08b2-409f-8a70-a9c67ae5ed22/0/4FA812FE6A4A85F790CB2740EF08836883716912.mft File: 4FA812FE6A4A85F790CB2740EF08836883716912.mft (raw, json) Hash identifier: AQOc2FnUW1PNp6KbJ3dvoLd3pdVKkwdA0cjM1qYLkWo= Subject key identifier: 25:2B:ED:24:E4:81:B0:CD:2E:51:2F:C2:BF:18:CB:E2:A3:01:46:5A Authority key identifier: 4F:A8:12:FE:6A:4A:85:F7:90:CB:27:40:EF:08:83:68:83:71:69:12 Certificate issuer: /CN=4FA812FE6A4A85F790CB2740EF08836883716912 Certificate serial: 14A159F0968A4F2F6285E4D8930DCE95B6CB1009 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4FA812FE6A4A85F790CB2740EF08836883716912.cer Subject info access: rsync://repo-rpki.idnic.net/repo/24d108f7-08b2-409f-8a70-a9c67ae5ed22/0/4FA812FE6A4A85F790CB2740EF08836883716912.mft Manifest number: 04EB Signing time: Thu 06 Nov 2025 10:30:50 +0000 Manifest this update: Thu 06 Nov 2025 10:25:50 +0000 Manifest next update: Sun 09 Nov 2025 12:31:50 +0000 Files and hashes: 1: 323430303a386238303a3a2f33322d3332203d3e20313331373637.roa (hash: WzhaKVVHhW/0GGZkiM6FBwtbr9n3QYlgPERNMN1x09w=) 2: 4FA812FE6A4A85F790CB2740EF08836883716912.crl (hash: MAxcKQ2rNurnZfVw/AXtrEtouwFaGJs5sQ91XhrqhU4=) 3: 3130332e39302e3139362e302f32322d3234203d3e20313331373637.roa (hash: 0If+6/mMOFFyP2FqyKGK3txMDLzFU3f4sqXMr4WKhzY=) 4: 3137352e3130362e31362e302f32322d3234203d3e20313331373637.roa (hash: FSa5jhvEvK/r9qXQQGlnZIm8LVRjHW9YNMDzzN5f0xI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/24d108f7-08b2-409f-8a70-a9c67ae5ed22/0/4FA812FE6A4A85F790CB2740EF08836883716912.crl rsync://repo-rpki.idnic.net/repo/24d108f7-08b2-409f-8a70-a9c67ae5ed22/0/4FA812FE6A4A85F790CB2740EF08836883716912.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4FA812FE6A4A85F790CB2740EF08836883716912.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 12:31:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:a1:59:f0:96:8a:4f:2f:62:85:e4:d8:93:0d:ce:95:b6:cb:10:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4FA812FE6A4A85F790CB2740EF08836883716912 Validity Not Before: Nov 6 10:25:50 2025 GMT Not After : Nov 9 12:31:50 2025 GMT Subject: CN=252BED24E481B0CD2E512FC2BF18CBE2A301465A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:bc:bf:ff:ce:9c:7f:18:62:99:f3:6a:5c:ab: 87:44:54:43:9a:d0:0d:b9:88:46:02:20:0b:18:c8: 43:95:8a:fb:32:5d:6f:fd:31:cc:0d:d7:34:b4:03: d3:89:81:ba:56:d4:ce:47:1c:b7:f5:0a:bd:79:3d: cd:3d:ea:64:62:58:d3:de:44:97:2c:6a:9c:19:81: 6a:fd:1c:b9:f4:66:3d:49:77:73:b4:e1:41:e2:81: 37:1d:44:95:03:28:fd:85:ca:56:de:5e:6c:c8:c2: 25:ff:ab:10:23:b8:dd:0b:31:2a:83:a6:aa:ce:9b: 1d:74:f1:ec:80:07:50:1d:ed:76:3c:ef:77:bd:7c: 0e:d2:73:72:7c:a8:66:65:73:80:4a:06:2b:e2:bd: b0:47:c3:d3:24:f5:64:08:82:c8:a5:83:b4:9d:62: ae:70:e9:11:db:fa:f9:4f:c3:6e:05:fd:94:e5:57: e3:f8:01:ba:fe:9b:af:37:95:73:4c:a0:c7:bc:c4: 53:8c:77:3c:e3:f3:6a:0c:7f:b5:89:08:0f:38:50: a7:ff:31:57:cb:c3:f8:3d:b4:34:f8:8a:80:26:d0: e3:b6:c8:2b:1e:8e:6d:48:60:c8:b4:b2:3b:c3:39: 83:39:ca:4b:19:02:32:3c:8f:73:42:b4:23:e0:bd: 3d:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:2B:ED:24:E4:81:B0:CD:2E:51:2F:C2:BF:18:CB:E2:A3:01:46:5A X509v3 Authority Key Identifier: keyid:4F:A8:12:FE:6A:4A:85:F7:90:CB:27:40:EF:08:83:68:83:71:69:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/24d108f7-08b2-409f-8a70-a9c67ae5ed22/0/4FA812FE6A4A85F790CB2740EF08836883716912.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4FA812FE6A4A85F790CB2740EF08836883716912.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/24d108f7-08b2-409f-8a70-a9c67ae5ed22/0/4FA812FE6A4A85F790CB2740EF08836883716912.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cc:d2:13:1a:bc:ad:b8:1b:cf:66:5f:60:f3:fa:de:63:e7:08: 3a:c9:85:ae:ee:ce:a6:b3:68:df:eb:4c:3e:01:00:e4:da:50: 2c:67:ff:99:97:3c:30:a7:53:e9:79:25:5a:17:1b:88:3f:07: 71:71:8e:05:e6:1d:2d:3f:84:ce:15:75:01:86:a8:b2:a9:09: 46:c3:8c:23:06:e2:d6:d2:c7:c1:f3:4f:29:fd:69:ce:9f:3e: 9e:4b:29:0f:66:20:f5:31:14:2d:35:3d:08:3e:c6:04:1b:1b: be:21:48:4e:d5:32:52:a0:bf:38:7d:d4:b0:80:f5:ec:8b:ea: 6f:51:0b:6c:6a:f4:da:cc:80:ca:6a:2a:8a:83:f2:51:22:f8: 1e:de:62:8a:05:78:69:76:ee:4a:20:4c:d9:67:05:58:36:f7: 0a:98:0a:63:b7:29:cf:02:ba:5a:aa:7e:8f:5f:13:9e:84:81: ce:4e:92:63:0a:84:85:bc:b9:dd:e9:8a:a7:97:f5:ab:cf:5d: 35:f6:3e:80:d9:bd:5d:d8:bc:a3:86:70:22:00:c9:81:49:ef: 63:f8:6b:0d:c9:fc:ec:1f:1d:02:80:dc:1b:91:e2:7f:1f:44: 70:0a:30:6e:4e:ba:01:15:fa:72:2a:79:ba:4d:6a:09:1f:35: a8:2f:5c:22 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFKFZ8JaKTy9iheTYkw3OlbbLEAkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEZBODEyRkU2QTRBODVGNzkwQ0IyNzQwRUYwODgzNjg4 MzcxNjkxMjAeFw0yNTExMDYxMDI1NTBaFw0yNTExMDkxMjMxNTBaMDMxMTAvBgNV BAMTKDI1MkJFRDI0RTQ4MUIwQ0QyRTUxMkZDMkJGMThDQkUyQTMwMTQ2NUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDovL//zpx/GGKZ82pcq4dEVEOa 0A25iEYCIAsYyEOVivsyXW/9McwN1zS0A9OJgbpW1M5HHLf1Cr15Pc096mRiWNPe RJcsapwZgWr9HLn0Zj1Jd3O04UHigTcdRJUDKP2FylbeXmzIwiX/qxAjuN0LMSqD pqrOmx108eyAB1Ad7XY873e9fA7Sc3J8qGZlc4BKBivivbBHw9Mk9WQIgsilg7Sd Yq5w6RHb+vlPw24F/ZTlV+P4Abr+m683lXNMoMe8xFOMdzzj82oMf7WJCA84UKf/ MVfLw/g9tDT4ioAm0OO2yCsejm1IYMi0sjvDOYM5yksZAjI8j3NCtCPgvT0lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJSvtJOSBsM0uUS/CvxjL4qMBRlowHwYDVR0j BBgwFoAUT6gS/mpKhfeQyydA7wiDaINxaRIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NGQxMDhmNy0wOGIyLTQwOWYtOGE3MC1hOWM2N2FlNWVkMjIvMC80RkE4MTJGRTZB NEE4NUY3OTBDQjI3NDBFRjA4ODM2ODgzNzE2OTEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEZBODEyRkU2QTRBODVGNzkwQ0IyNzQwRUYwODgzNjg4Mzcx NjkxMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjRkMTA4ZjctMDhiMi00MDlmLThh NzAtYTljNjdhZTVlZDIyLzAvNEZBODEyRkU2QTRBODVGNzkwQ0IyNzQwRUYwODgz Njg4MzcxNjkxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMzSExq8rbgbz2ZfYPP63mPnCDrJha7uzqaz aN/rTD4BAOTaUCxn/5mXPDCnU+l5JVoXG4g/B3FxjgXmHS0/hM4VdQGGqLKpCUbD jCMG4tbSx8HzTyn9ac6fPp5LKQ9mIPUxFC01PQg+xgQbG74hSE7VMlKgvzh91LCA 9eyL6m9RC2xq9NrMgMpqKoqD8lEi+B7eYooFeGl27kogTNlnBVg29wqYCmO3Kc8C ulqqfo9fE56Egc5OkmMKhIW8ud3piqeX9avPXTX2PoDZvV3YvKOGcCIAyYFJ72P4 aw3J/OwfHQKA3BuR4n8fRHAKMG5OugEV+nIqebpNagkfNagvXCI= -----END CERTIFICATE-----Generated at Thu Nov 6 12:25:02 2025 by rpki-client