$ rpki-client -vvf repo-rpki.idnic.net/repo/e1f29aba-6d7c-4435-953c-604988731596/0/4AA75AF77EC48924696455B9F02192353D9C4014.mft File: 4AA75AF77EC48924696455B9F02192353D9C4014.mft (raw, json) Hash identifier: JPzB1ylL4AwPBHrge94dO3jv9+5m/Gr1z0oI+/h3nvA= Subject key identifier: E3:27:AD:34:D8:6B:DE:68:EC:0B:37:EF:3D:B0:3D:04:DF:3F:B0:53 Authority key identifier: 4A:A7:5A:F7:7E:C4:89:24:69:64:55:B9:F0:21:92:35:3D:9C:40:14 Certificate issuer: /CN=4AA75AF77EC48924696455B9F02192353D9C4014 Certificate serial: 18AC4A293E83F646E5252992BCA6EB062A93EC3A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AA75AF77EC48924696455B9F02192353D9C4014.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e1f29aba-6d7c-4435-953c-604988731596/0/4AA75AF77EC48924696455B9F02192353D9C4014.mft Manifest number: D3 Signing time: Sat 01 Nov 2025 00:21:15 +0000 Manifest this update: Sat 01 Nov 2025 00:16:15 +0000 Manifest next update: Tue 04 Nov 2025 00:43:15 +0000 Files and hashes: 1: 4AA75AF77EC48924696455B9F02192353D9C4014.crl (hash: J23Uz724ac8W8BV/Cf380rPFWYU200AobnyBfmm8F/g=) 2: 3130332e3136322e37322e302f32342d3234203d3e20313431363436.roa (hash: AbwriW0SgoijAVFc1a2C3A7Illyl/gL1e8q6s9TC+bw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e1f29aba-6d7c-4435-953c-604988731596/0/4AA75AF77EC48924696455B9F02192353D9C4014.crl rsync://repo-rpki.idnic.net/repo/e1f29aba-6d7c-4435-953c-604988731596/0/4AA75AF77EC48924696455B9F02192353D9C4014.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AA75AF77EC48924696455B9F02192353D9C4014.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Nov 2025 00:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:ac:4a:29:3e:83:f6:46:e5:25:29:92:bc:a6:eb:06:2a:93:ec:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4AA75AF77EC48924696455B9F02192353D9C4014 Validity Not Before: Nov 1 00:16:15 2025 GMT Not After : Nov 4 00:43:15 2025 GMT Subject: CN=E327AD34D86BDE68EC0B37EF3DB03D04DF3FB053 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:c6:a4:c0:6d:62:6c:c0:ee:0a:64:7c:7f:5a: 55:e1:5d:3c:e5:62:b1:ae:76:ab:0c:21:ba:71:4e: 4d:d8:0d:6f:16:67:d9:bc:49:c5:13:21:e2:32:3a: a2:75:03:d3:9a:2f:96:dc:b6:c8:ba:09:dc:6f:d6: 68:3c:76:3c:ee:d1:ae:64:59:f7:cf:d8:a4:b6:c4: 61:9f:27:45:0d:55:a3:b5:68:36:ad:a3:fd:bb:a3: 44:a2:07:a1:b1:99:ff:02:15:3e:dd:b3:52:53:a2: af:d8:ea:12:45:d7:57:bd:19:49:8e:37:73:57:bf: 64:c9:cd:d4:ba:0d:fc:b5:f6:a8:f8:87:dd:66:3a: 6a:ca:53:e3:77:4b:ae:85:b8:bf:27:3b:f8:7d:12: 1c:d2:f0:35:0a:0b:16:97:9f:cb:13:fe:63:30:f6: 66:ea:2e:fe:12:3d:e7:bf:93:bc:b3:89:e2:6a:cd: 99:14:e3:98:17:b0:32:86:34:93:ac:0f:75:05:9b: e5:e8:e6:d2:63:a5:d5:5c:ad:c7:52:da:5f:73:e9: 5f:81:9b:74:cf:39:7c:89:1c:68:fc:67:20:12:99: bb:5b:19:81:ea:9d:52:a9:67:0e:12:d2:43:49:84: 9f:11:e6:66:87:80:68:5b:3c:80:26:fb:22:e0:b3: 17:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:27:AD:34:D8:6B:DE:68:EC:0B:37:EF:3D:B0:3D:04:DF:3F:B0:53 X509v3 Authority Key Identifier: keyid:4A:A7:5A:F7:7E:C4:89:24:69:64:55:B9:F0:21:92:35:3D:9C:40:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e1f29aba-6d7c-4435-953c-604988731596/0/4AA75AF77EC48924696455B9F02192353D9C4014.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AA75AF77EC48924696455B9F02192353D9C4014.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e1f29aba-6d7c-4435-953c-604988731596/0/4AA75AF77EC48924696455B9F02192353D9C4014.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:c9:bb:f8:07:74:a7:f7:52:21:b7:e8:38:02:11:f1:7e:60: 06:53:bf:14:53:4f:36:ba:86:7d:cd:46:5f:0f:01:33:97:5d: 43:b6:38:4f:55:ad:ac:66:1e:36:a1:26:8a:c6:96:c5:1e:bd: 2f:3a:b0:ca:28:6b:80:a1:a0:10:59:e1:03:04:bd:b9:6f:cd: 2e:81:ff:7b:d5:2f:f8:ed:7e:58:ae:11:a1:ac:b4:82:25:fd: eb:83:22:d2:bc:40:16:4c:58:a1:ee:72:dd:cf:43:62:90:5c: d5:20:f9:b3:6f:eb:72:06:8c:93:74:4e:55:d0:36:dd:6d:71: f0:89:a5:10:61:2e:b5:cc:01:bf:38:2e:a8:fa:13:85:2c:7b: 7a:d6:6f:76:98:de:f1:dc:5e:c1:05:d6:b8:f9:32:56:92:99: df:e8:27:1d:4d:d9:03:a7:06:c5:9d:07:3e:24:64:95:5a:88: 02:3f:2e:6a:20:70:bc:e0:62:ac:51:37:fc:3b:f3:62:0b:f0: c2:0d:01:bd:35:e2:46:b2:d7:0d:a1:13:f1:0d:ff:07:31:0f: 44:ae:e4:5f:64:f0:0c:5a:37:79:f5:d1:42:fa:cd:fe:62:87: be:a7:94:22:a4:ed:36:64:e5:13:dc:3a:de:48:9a:6c:0b:2b: aa:b3:b6:69 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGKxKKT6D9kblJSmSvKbrBiqT7DowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEFBNzVBRjc3RUM0ODkyNDY5NjQ1NUI5RjAyMTkyMzUz RDlDNDAxNDAeFw0yNTExMDEwMDE2MTVaFw0yNTExMDQwMDQzMTVaMDMxMTAvBgNV BAMTKEUzMjdBRDM0RDg2QkRFNjhFQzBCMzdFRjNEQjAzRDA0REYzRkIwNTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkxqTAbWJswO4KZHx/WlXhXTzl YrGudqsMIbpxTk3YDW8WZ9m8ScUTIeIyOqJ1A9OaL5bctsi6Cdxv1mg8djzu0a5k WffP2KS2xGGfJ0UNVaO1aDato/27o0SiB6Gxmf8CFT7ds1JToq/Y6hJF11e9GUmO N3NXv2TJzdS6Dfy19qj4h91mOmrKU+N3S66FuL8nO/h9EhzS8DUKCxaXn8sT/mMw 9mbqLv4SPee/k7yzieJqzZkU45gXsDKGNJOsD3UFm+Xo5tJjpdVcrcdS2l9z6V+B m3TPOXyJHGj8ZyASmbtbGYHqnVKpZw4S0kNJhJ8R5maHgGhbPIAm+yLgsxfjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4yetNNhr3mjsCzfvPbA9BN8/sFMwHwYDVR0j BBgwFoAUSqda937EiSRpZFW58CGSNT2cQBQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MWYyOWFiYS02ZDdjLTQ0MzUtOTUzYy02MDQ5ODg3MzE1OTYvMC80QUE3NUFGNzdF QzQ4OTI0Njk2NDU1QjlGMDIxOTIzNTNEOUM0MDE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEFBNzVBRjc3RUM0ODkyNDY5NjQ1NUI5RjAyMTkyMzUzRDlD NDAxNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTFmMjlhYmEtNmQ3Yy00NDM1LTk1 M2MtNjA0OTg4NzMxNTk2LzAvNEFBNzVBRjc3RUM0ODkyNDY5NjQ1NUI5RjAyMTky MzUzRDlDNDAxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAInJu/gHdKf3UiG36DgCEfF+YAZTvxRTTza6 hn3NRl8PATOXXUO2OE9VraxmHjahJorGlsUevS86sMooa4ChoBBZ4QMEvblvzS6B /3vVL/jtfliuEaGstIIl/euDItK8QBZMWKHuct3PQ2KQXNUg+bNv63IGjJN0TlXQ Nt1tcfCJpRBhLrXMAb84Lqj6E4Use3rWb3aY3vHcXsEF1rj5MlaSmd/oJx1N2QOn BsWdBz4kZJVaiAI/LmogcLzgYqxRN/w782IL8MINAb014kay1w2hE/EN/wcxD0Su 5F9k8AxaN3n10UL6zf5ih76nlCKk7TZk5RPcOt5ImmwLK6qztmk= -----END CERTIFICATE-----Generated at Sat Nov 1 05:56:50 2025 by rpki-client