$ rpki-client -vvf repo-rpki.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.mft File: 4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.mft (raw, json) Hash identifier: SFDfesg3FL05QU1Q/FFiH2VrK+abz51ew+LYv8UC/+A= Subject key identifier: FB:33:5E:20:A8:40:67:A1:4E:58:CE:DF:DB:01:08:5E:7F:5D:8A:77 Authority key identifier: 4B:E0:EB:AF:EF:1E:20:6C:AD:8B:4E:AD:6D:6A:08:D3:A8:C0:1B:50 Certificate issuer: /CN=4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50 Certificate serial: 5308E8A6B6E3265235831DB965D1BA7C703D4605 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.cer Subject info access: rsync://repo-rpki.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.mft Manifest number: 020A Signing time: Sat 18 Oct 2025 06:40:49 +0000 Manifest this update: Sat 18 Oct 2025 06:35:49 +0000 Manifest next update: Tue 21 Oct 2025 17:13:49 +0000 Files and hashes: 1: 3130332e38362e3132382e302f32332d3234203d3e2034383030.roa (hash: D4xO8SkIE8jeNebf9M5hiqlhcLrsrkGAhopy0O7d3p0=) 2: 4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.crl (hash: dv3r8IkAVb7BoCJXYAmmoGGbSLdc/pDI7WqBfKIv7mY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.crl rsync://repo-rpki.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 17:13:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:08:e8:a6:b6:e3:26:52:35:83:1d:b9:65:d1:ba:7c:70:3d:46:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50 Validity Not Before: Oct 18 06:35:49 2025 GMT Not After : Oct 21 17:13:49 2025 GMT Subject: CN=FB335E20A84067A14E58CEDFDB01085E7F5D8A77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:3c:2c:74:f6:aa:81:11:d1:26:cb:93:b6:d8: 9a:77:65:c3:29:b1:83:23:0f:ef:3b:06:31:53:70: 04:3c:39:4b:4b:4e:9e:db:8c:25:25:8f:30:28:2d: 23:08:9a:04:96:e5:5e:ba:b2:3f:87:88:b1:40:31: aa:7e:45:4a:4a:00:47:e8:3d:c0:55:37:41:6f:30: 4a:96:ed:d6:93:38:70:7f:83:6e:50:ec:76:cf:4d: 20:a3:8b:ac:15:73:5d:f2:e1:b8:54:6f:4b:ac:c8: 84:24:5f:cd:8d:38:8a:7c:b0:55:f5:9b:e5:36:ea: 10:54:ce:07:ae:93:3d:4a:d4:28:6c:1b:5e:7d:7a: 2e:21:c4:bc:56:ab:01:2b:ee:c7:b7:29:4f:fb:02: a6:ee:fd:5f:9f:1f:d8:4a:38:d9:7c:fd:bc:80:07: 23:b9:dc:76:b1:97:5b:17:96:d7:49:01:9f:43:1b: 2a:e7:1f:82:20:93:fa:42:fb:8b:dc:55:ac:78:6e: 81:3b:04:81:1d:21:76:60:dc:4f:42:b0:40:9f:f4: 76:97:ee:05:9e:c9:c2:42:f6:dd:91:e9:69:a7:5e: 3d:91:ba:c1:59:1c:8d:6f:f2:d3:17:74:d7:f9:08: d7:b8:3a:2e:17:20:7c:18:f7:63:ce:0d:e0:8d:9c: 30:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:33:5E:20:A8:40:67:A1:4E:58:CE:DF:DB:01:08:5E:7F:5D:8A:77 X509v3 Authority Key Identifier: keyid:4B:E0:EB:AF:EF:1E:20:6C:AD:8B:4E:AD:6D:6A:08:D3:A8:C0:1B:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:51:8a:0c:f8:72:76:22:ca:c6:9c:a3:d5:f4:fe:a2:f7:0c: b1:0d:fc:b3:5d:82:1c:88:d8:58:c9:90:f5:e7:b1:ff:00:32: c4:cc:18:4d:ea:e1:16:50:a8:bb:f3:81:82:78:1a:f2:19:6e: 88:b8:82:c9:9c:05:8d:79:b3:8f:85:b9:c7:0c:15:18:26:aa: 2e:cb:7b:73:5c:f9:91:c2:8a:bd:88:ac:60:44:04:98:ad:1f: de:45:08:21:96:87:a4:8c:f0:65:65:c9:f6:f1:0b:4f:27:ca: 40:35:48:de:0e:be:d4:2b:bf:13:b4:7e:e7:de:2f:e3:28:93: 58:eb:67:9d:16:7f:3d:c9:7e:e9:ee:82:1f:20:b0:c3:a4:52: 53:60:a0:08:8b:5d:89:b2:9b:dd:1f:fb:7d:0d:5e:fe:67:93: ab:a5:9a:5d:3b:96:ae:3e:9c:e5:39:7a:38:90:c6:8f:0f:d7: 62:fe:a1:14:98:e6:6c:09:1a:c4:f1:86:0f:6c:fd:88:82:5a: 6f:da:1b:8c:6a:da:7c:c0:65:d3:4c:ca:a5:49:52:34:b2:fa: e3:97:f5:2e:69:c6:7c:f3:71:1d:5d:02:70:e6:1e:1e:d8:82: 41:90:f5:ca:f1:db:6f:da:28:72:57:12:b7:63:f7:aa:d9:43: fb:b6:56:3c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUwjoprbjJlI1gx25ZdG6fHA9RgUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEJFMEVCQUZFRjFFMjA2Q0FEOEI0RUFENkQ2QTA4RDNB OEMwMUI1MDAeFw0yNTEwMTgwNjM1NDlaFw0yNTEwMjExNzEzNDlaMDMxMTAvBgNV BAMTKEZCMzM1RTIwQTg0MDY3QTE0RTU4Q0VERkRCMDEwODVFN0Y1RDhBNzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+PCx09qqBEdEmy5O22Jp3ZcMp sYMjD+87BjFTcAQ8OUtLTp7bjCUljzAoLSMImgSW5V66sj+HiLFAMap+RUpKAEfo PcBVN0FvMEqW7daTOHB/g25Q7HbPTSCji6wVc13y4bhUb0usyIQkX82NOIp8sFX1 m+U26hBUzgeukz1K1ChsG159ei4hxLxWqwEr7se3KU/7Aqbu/V+fH9hKONl8/byA ByO53Haxl1sXltdJAZ9DGyrnH4Igk/pC+4vcVax4boE7BIEdIXZg3E9CsECf9HaX 7gWeycJC9t2R6WmnXj2RusFZHI1v8tMXdNf5CNe4Oi4XIHwY92PODeCNnDAbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+zNeIKhAZ6FOWM7f2wEIXn9dincwHwYDVR0j BBgwFoAUS+Drr+8eIGyti06tbWoI06jAG1AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OGE3ZjM1NS1mMjI1LTQ4ZjMtODdmOC0wYmZiMGM4ZTU4ZjAvMC80QkUwRUJBRkVG MUUyMDZDQUQ4QjRFQUQ2RDZBMDhEM0E4QzAxQjUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEJFMEVCQUZFRjFFMjA2Q0FEOEI0RUFENkQ2QTA4RDNBOEMw MUI1MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOThhN2YzNTUtZjIyNS00OGYzLTg3 ZjgtMGJmYjBjOGU1OGYwLzAvNEJFMEVCQUZFRjFFMjA2Q0FEOEI0RUFENkQ2QTA4 RDNBOEMwMUI1MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGVRigz4cnYiysaco9X0/qL3DLEN/LNdghyI 2FjJkPXnsf8AMsTMGE3q4RZQqLvzgYJ4GvIZboi4gsmcBY15s4+FuccMFRgmqi7L e3Nc+ZHCir2IrGBEBJitH95FCCGWh6SM8GVlyfbxC08nykA1SN4OvtQrvxO0fufe L+Mok1jrZ50Wfz3Jfunugh8gsMOkUlNgoAiLXYmym90f+30NXv5nk6ulml07lq4+ nOU5ejiQxo8P12L+oRSY5mwJGsTxhg9s/YiCWm/aG4xq2nzAZdNMyqVJUjSy+uOX 9S5pxnzzcR1dAnDmHh7YgkGQ9crx22/aKHJXErdj96rZQ/u2Vjw= -----END CERTIFICATE-----Generated at Sun Oct 19 05:27:56 2025 by rpki-client