$ rpki-client -vvf repo-rpki.idnic.net/repo/ab88d2ca-229b-4aac-9b5c-42c15105bb82/0/4ED16B9231905A1C7A353DF749BF99487E69E313.mft File: 4ED16B9231905A1C7A353DF749BF99487E69E313.mft (raw, json) Hash identifier: ygnGksIZV8Sjp2faatLITj0UsZXAqsfw6qy2B1Qvclo= Subject key identifier: FC:68:7D:6C:95:32:37:56:E3:39:37:80:0D:A2:B7:6B:E6:E7:49:50 Authority key identifier: 4E:D1:6B:92:31:90:5A:1C:7A:35:3D:F7:49:BF:99:48:7E:69:E3:13 Certificate issuer: /CN=4ED16B9231905A1C7A353DF749BF99487E69E313 Certificate serial: 6CD0574CB431283C9FDE31A0CD48E87EFEBDD3DD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4ED16B9231905A1C7A353DF749BF99487E69E313.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ab88d2ca-229b-4aac-9b5c-42c15105bb82/0/4ED16B9231905A1C7A353DF749BF99487E69E313.mft Manifest number: FE Signing time: Mon 20 Oct 2025 12:11:25 +0000 Manifest this update: Mon 20 Oct 2025 12:06:25 +0000 Manifest next update: Thu 23 Oct 2025 21:46:25 +0000 Files and hashes: 1: 4ED16B9231905A1C7A353DF749BF99487E69E313.crl (hash: J92QL2IR5k074MUOZDxXeqob0oRlmXU/OdjGvVi2y00=) 2: 3135372e32302e3130302e302f32342d3234203d3e20313532343235.roa (hash: bm0cLaD/jg5NiXGndb/98PNppE3HSK9OAR2k8wtE41Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ab88d2ca-229b-4aac-9b5c-42c15105bb82/0/4ED16B9231905A1C7A353DF749BF99487E69E313.crl rsync://repo-rpki.idnic.net/repo/ab88d2ca-229b-4aac-9b5c-42c15105bb82/0/4ED16B9231905A1C7A353DF749BF99487E69E313.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4ED16B9231905A1C7A353DF749BF99487E69E313.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 03:04:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:d0:57:4c:b4:31:28:3c:9f:de:31:a0:cd:48:e8:7e:fe:bd:d3:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ED16B9231905A1C7A353DF749BF99487E69E313 Validity Not Before: Oct 20 12:06:25 2025 GMT Not After : Oct 23 21:46:25 2025 GMT Subject: CN=FC687D6C95323756E33937800DA2B76BE6E74950 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:8f:ae:a2:9a:19:6e:d5:f8:fe:1a:76:d4:8d: ac:a5:55:6a:33:03:8c:62:4f:33:68:6e:09:7c:30: 8a:06:b0:1c:6a:09:46:c8:ba:30:54:cc:77:ce:09: 12:96:93:62:15:56:94:db:e8:4c:d6:3c:45:c2:da: 1d:1c:05:fe:83:ab:ce:7a:26:e0:ae:87:b8:37:95: be:13:ff:38:f5:0c:71:1d:52:88:79:f3:bc:84:a8: 6b:6b:33:e8:8f:0d:06:5a:72:b5:45:d3:3f:5e:51: 15:3d:7d:60:85:8c:0e:da:f1:ae:3d:8d:72:10:f4: 22:31:bb:3e:72:b3:38:3c:7a:78:81:05:0d:8c:99: 07:91:33:9e:32:7c:5e:68:ee:15:f7:29:59:27:11: d7:d0:f5:5d:0d:c4:67:f0:b9:c9:e4:7b:b1:0a:bb: 6b:1e:3d:49:d0:c7:c5:d9:44:ca:f6:1a:2d:a4:36: c9:67:6d:a5:b7:fb:0d:de:25:99:12:8b:e2:51:79: 89:2b:9e:6a:33:26:01:64:c0:9f:a8:d9:98:a3:e4: 9b:fd:6e:0b:aa:a1:6d:35:58:ed:6b:0f:60:ce:cc: 5b:90:6e:85:b4:a7:89:09:40:69:1b:6c:3d:6a:77: 2e:29:9e:4c:42:bc:80:6e:4d:14:80:36:17:16:99: 32:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:68:7D:6C:95:32:37:56:E3:39:37:80:0D:A2:B7:6B:E6:E7:49:50 X509v3 Authority Key Identifier: keyid:4E:D1:6B:92:31:90:5A:1C:7A:35:3D:F7:49:BF:99:48:7E:69:E3:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ab88d2ca-229b-4aac-9b5c-42c15105bb82/0/4ED16B9231905A1C7A353DF749BF99487E69E313.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4ED16B9231905A1C7A353DF749BF99487E69E313.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ab88d2ca-229b-4aac-9b5c-42c15105bb82/0/4ED16B9231905A1C7A353DF749BF99487E69E313.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:93:24:ff:bf:12:76:83:c6:76:42:99:60:c3:7d:f9:79:64: 0d:d6:fd:79:10:45:a3:a8:ce:9c:c1:1d:d8:a1:32:4c:25:7d: f0:da:a4:ff:c4:75:a5:a0:b5:5d:ad:b9:49:cc:0e:9a:43:25: f0:6e:da:14:40:ea:c7:c4:26:d6:66:52:50:1b:76:f6:54:4a: b9:90:9c:54:c0:31:10:e4:62:3e:ca:5f:3b:f8:67:44:03:e5: 38:b1:c1:e2:6c:ca:2f:ff:8e:b6:e5:d9:c7:38:9c:05:f9:52: fd:2f:e8:c9:17:63:6f:f5:a3:b1:dc:81:9a:8b:16:8c:5b:5e: 1a:57:49:b5:0a:0b:41:79:53:91:fb:f0:de:99:0d:b2:a9:93: aa:04:94:d8:cf:7c:4c:f1:69:b8:af:35:02:8b:8c:75:a6:49: 90:4a:03:77:be:68:76:59:d2:3f:44:c0:e6:e0:25:01:c2:16: 91:ee:f0:a2:39:c3:96:2a:de:1b:da:16:0b:5d:08:1b:e7:9e: ed:db:85:f8:8f:56:5b:65:3a:4f:c2:5a:e8:67:81:03:a6:3d: 93:59:29:4c:51:62:54:29:75:bd:15:40:bf:86:2f:a8:e2:ae: ec:d4:a5:6b:24:68:27:2d:48:d4:da:45:c2:fa:bc:7e:41:58: 1a:d3:5d:66 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbNBXTLQxKDyf3jGgzUjofv69090wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEVEMTZCOTIzMTkwNUExQzdBMzUzREY3NDlCRjk5NDg3 RTY5RTMxMzAeFw0yNTEwMjAxMjA2MjVaFw0yNTEwMjMyMTQ2MjVaMDMxMTAvBgNV BAMTKEZDNjg3RDZDOTUzMjM3NTZFMzM5Mzc4MDBEQTJCNzZCRTZFNzQ5NTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbj66imhlu1fj+GnbUjaylVWoz A4xiTzNobgl8MIoGsBxqCUbIujBUzHfOCRKWk2IVVpTb6EzWPEXC2h0cBf6Dq856 JuCuh7g3lb4T/zj1DHEdUoh587yEqGtrM+iPDQZacrVF0z9eURU9fWCFjA7a8a49 jXIQ9CIxuz5yszg8eniBBQ2MmQeRM54yfF5o7hX3KVknEdfQ9V0NxGfwucnke7EK u2sePUnQx8XZRMr2Gi2kNslnbaW3+w3eJZkSi+JReYkrnmozJgFkwJ+o2Zij5Jv9 bguqoW01WO1rD2DOzFuQboW0p4kJQGkbbD1qdy4pnkxCvIBuTRSANhcWmTKvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/Gh9bJUyN1bjOTeADaK3a+bnSVAwHwYDVR0j BBgwFoAUTtFrkjGQWhx6NT33Sb+ZSH5p4xMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h Yjg4ZDJjYS0yMjliLTRhYWMtOWI1Yy00MmMxNTEwNWJiODIvMC80RUQxNkI5MjMx OTA1QTFDN0EzNTNERjc0OUJGOTk0ODdFNjlFMzEzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNEVEMTZCOTIzMTkwNUExQzdBMzUzREY3NDlCRjk5NDg3RTY5 RTMxMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWI4OGQyY2EtMjI5Yi00YWFjLTli NWMtNDJjMTUxMDViYjgyLzAvNEVEMTZCOTIzMTkwNUExQzdBMzUzREY3NDlCRjk5 NDg3RTY5RTMxMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAeTJP+/EnaDxnZCmWDDffl5ZA3W/XkQRaOo zpzBHdihMkwlffDapP/EdaWgtV2tuUnMDppDJfBu2hRA6sfEJtZmUlAbdvZUSrmQ nFTAMRDkYj7KXzv4Z0QD5TixweJsyi//jrbl2cc4nAX5Uv0v6MkXY2/1o7HcgZqL FoxbXhpXSbUKC0F5U5H78N6ZDbKpk6oElNjPfEzxabivNQKLjHWmSZBKA3e+aHZZ 0j9EwObgJQHCFpHu8KI5w5Yq3hvaFgtdCBvnnu3bhfiPVltlOk/CWuhngQOmPZNZ KUxRYlQpdb0VQL+GL6jiruzUpWskaCctSNTaRcL6vH5BWBrTXWY= -----END CERTIFICATE-----Generated at Tue Oct 21 07:14:07 2025 by rpki-client