$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.mft File: B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.mft (raw, json) Hash identifier: Rjc4HBycLPU9w80OcB7y9dTe6umk7JWN9DtGd0oRpsg= Subject key identifier: 55:02:63:C4:B5:32:A3:21:64:E8:AF:26:9A:F5:97:AD:76:DF:C9:7D Authority key identifier: B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA Certificate issuer: /CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA Certificate serial: 4A89E918A1FC4246F088E1F1EEDE01693A40B557 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.mft Manifest number: 0716 Signing time: Sun 26 Oct 2025 16:30:03 +0000 Manifest this update: Sun 26 Oct 2025 16:25:03 +0000 Manifest next update: Wed 29 Oct 2025 18:23:03 +0000 Files and hashes: 1: B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.crl (hash: PviurY8S133c2nIDdWw+nWSBlCakutw8pFU+2TTu3Rw=) 2: AS24203.roa (hash: C68gmTP9H6AGgXibFFHApE8cuP0Li5Pg7Pn1ljOTa6g=) 3: AS139994.roa (hash: mQEJNXJ3XVh/s4Uqn72Xq0FcwJo74FkotAw0eOv4kCI=) 4: AS17885.roa (hash: RX8oo/DiJqJzJBqmubTqeGmmpOVT1csa63gvxFqyKec=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.crl rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Oct 2025 18:23:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:89:e9:18:a1:fc:42:46:f0:88:e1:f1:ee:de:01:69:3a:40:b5:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA Validity Not Before: Oct 26 16:25:03 2025 GMT Not After : Oct 29 18:23:03 2025 GMT Subject: CN=550263C4B532A32164E8AF269AF597AD76DFC97D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ab:b7:62:c9:90:f6:bb:6c:03:b2:d7:5e:39: 0a:95:e0:01:56:e6:21:2e:b2:0d:59:07:e4:3b:1e: 23:24:c2:10:cd:d1:44:b7:b3:8d:7a:56:f6:f1:2b: 5c:47:9c:f0:57:09:a4:1a:9a:c6:e8:c7:4c:c7:92: ca:6b:4a:88:45:1c:c4:55:26:9b:a5:6b:93:f7:01: 5b:59:88:f3:60:13:69:31:74:7b:06:ba:8f:1f:3d: c0:95:5b:06:8c:e3:de:08:94:89:23:93:18:f9:7a: 2a:b1:bc:8a:c7:bd:84:3d:0f:56:2b:8d:04:ec:69: eb:9c:a2:65:70:c6:93:83:66:3c:41:4d:2a:af:9f: c9:32:89:99:16:e1:bf:33:b5:95:ad:14:d1:cb:f6: 94:de:5a:94:20:62:ef:e7:fb:61:cf:a4:69:8f:c8: cc:a0:8f:54:d7:54:2f:b2:e4:f3:c8:26:10:1a:2b: 8b:d1:b9:0c:72:dc:09:53:37:8a:d3:fa:37:11:97: 39:5e:75:54:ae:bc:30:42:45:24:97:d1:df:44:ab: 3b:f8:70:41:c3:ac:19:25:4a:17:c5:99:2f:82:be: 51:14:f9:1a:b2:8c:7e:e7:b2:95:fd:c4:82:78:39: 96:f3:22:07:00:f0:f1:10:5f:1d:55:55:74:da:3e: 35:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:02:63:C4:B5:32:A3:21:64:E8:AF:26:9A:F5:97:AD:76:DF:C9:7D X509v3 Authority Key Identifier: keyid:B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:69:e2:82:7c:e4:b9:9c:38:f0:1f:f4:fa:eb:db:cf:6c:2d: 49:b2:c0:71:2f:c1:1d:74:6f:71:da:c5:89:ae:4a:26:f9:94: 31:c0:f7:cb:39:ba:70:69:14:5b:d0:e8:fb:80:89:2f:be:1b: 25:86:6e:e1:8e:e0:6f:2d:c6:71:8d:4b:3e:6d:6a:d4:34:8d: f7:e3:90:c1:d2:8d:f7:b1:7a:11:cc:57:b0:4d:e3:6e:0c:a4: 59:30:e0:e5:5f:0d:6d:6e:6e:0a:0c:e6:17:7b:f2:6a:e1:84: 0a:d0:58:aa:37:e5:6c:cf:a0:8c:b0:c5:1b:4d:71:38:03:40: 6d:3c:dc:3e:46:54:e0:6e:c2:6e:3b:9c:06:0a:f3:32:49:19: cb:79:41:95:fb:71:b0:0b:29:71:88:63:b9:22:56:fd:1e:ba: ab:cc:13:9e:d6:e9:77:52:ce:71:a3:4d:41:6c:7d:85:ac:93: 89:30:7c:8b:f4:79:bb:23:bc:2e:5a:6f:b4:76:b5:01:40:66: 6b:ad:c9:73:ba:3c:eb:0e:09:59:c0:6f:d6:94:47:c8:bb:1d: c6:a7:48:d4:7b:8d:32:43:d3:88:9a:6c:b3:ae:f4:4d:35:b3: 0b:b6:eb:ae:1f:46:e1:17:4c:72:4d:0f:c5:a4:8b:d9:84:be: ab:03:0d:8e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSonpGKH8QkbwiOHx7t4BaTpAtVcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjQ5M0E1Q0VCRjA5RTEwQkMzNUQ5QUMyMjExREFGRDIw OTU2ODdEQTAeFw0yNTEwMjYxNjI1MDNaFw0yNTEwMjkxODIzMDNaMDMxMTAvBgNV BAMTKDU1MDI2M0M0QjUzMkEzMjE2NEU4QUYyNjlBRjU5N0FENzZERkM5N0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4q7diyZD2u2wDstdeOQqV4AFW 5iEusg1ZB+Q7HiMkwhDN0US3s416VvbxK1xHnPBXCaQamsbox0zHksprSohFHMRV Jpula5P3AVtZiPNgE2kxdHsGuo8fPcCVWwaM494IlIkjkxj5eiqxvIrHvYQ9D1Yr jQTsaeucomVwxpODZjxBTSqvn8kyiZkW4b8ztZWtFNHL9pTeWpQgYu/n+2HPpGmP yMygj1TXVC+y5PPIJhAaK4vRuQxy3AlTN4rT+jcRlzledVSuvDBCRSSX0d9Eqzv4 cEHDrBklShfFmS+CvlEU+RqyjH7nspX9xIJ4OZbzIgcA8PEQXx1VVXTaPjURAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVQJjxLUyoyFk6K8mmvWXrXbfyX0wHwYDVR0j BBgwFoAUtJOlzr8J4QvDXZrCIR2v0glWh9owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YmRiMWUwYS1hNGVjLTQ5ZGItYmU4OS04ZDdlN2ZjMmMyMjcvMC9CNDkzQTVDRUJG MDlFMTBCQzM1RDlBQzIyMTFEQUZEMjA5NTY4N0RBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjQ5M0E1Q0VCRjA5RTEwQkMzNUQ5QUMyMjExREFGRDIwOTU2 ODdEQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGJkYjFlMGEtYTRlYy00OWRiLWJl ODktOGQ3ZTdmYzJjMjI3LzAvQjQ5M0E1Q0VCRjA5RTEwQkMzNUQ5QUMyMjExREFG RDIwOTU2ODdEQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHxp4oJ85LmcOPAf9Prr289sLUmywHEvwR10 b3HaxYmuSib5lDHA98s5unBpFFvQ6PuAiS++GyWGbuGO4G8txnGNSz5tatQ0jffj kMHSjfexehHMV7BN424MpFkw4OVfDW1ubgoM5hd78mrhhArQWKo35WzPoIywxRtN cTgDQG083D5GVOBuwm47nAYK8zJJGct5QZX7cbALKXGIY7kiVv0euqvME57W6XdS znGjTUFsfYWsk4kwfIv0ebsjvC5ab7R2tQFAZmutyXO6POsOCVnAb9aUR8i7Hcan SNR7jTJD04iabLOu9E01swu2664fRuEXTHJND8Wki9mEvqsDDY4= -----END CERTIFICATE-----Generated at Tue Oct 28 08:08:12 2025 by rpki-client