$ rpki-client -vvf repo-rpki.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/4EE959798755CD4BA407AEB6EBDD3100261EAA55.mft File: 4EE959798755CD4BA407AEB6EBDD3100261EAA55.mft (raw, json) Hash identifier: L+ShJFEl+LNaQ+us9wnIBILj1LvVCPzbdAni8JWMKMk= Subject key identifier: F2:2B:49:DB:B6:C3:C7:29:CC:F8:E9:D0:89:C5:A7:5A:69:4A:4F:F8 Authority key identifier: 4E:E9:59:79:87:55:CD:4B:A4:07:AE:B6:EB:DD:31:00:26:1E:AA:55 Certificate issuer: /CN=4EE959798755CD4BA407AEB6EBDD3100261EAA55 Certificate serial: 0D4B556404E1EC91543B47F05E7FDD77A39176E6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4EE959798755CD4BA407AEB6EBDD3100261EAA55.cer Subject info access: rsync://repo-rpki.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/4EE959798755CD4BA407AEB6EBDD3100261EAA55.mft Manifest number: 0312 Signing time: Sat 19 Jul 2025 14:32:07 +0000 Manifest this update: Sat 19 Jul 2025 14:27:07 +0000 Manifest next update: Wed 23 Jul 2025 01:49:07 +0000 Files and hashes: 1: 3130332e3136382e3235302e302f32342d3234203d3e20313432333237.roa (hash: vUWQBZ0/r7vI2v8KbhMfVsf4gR9LmNP6bUrY9mudCfU=) 2: 4EE959798755CD4BA407AEB6EBDD3100261EAA55.crl (hash: PoNMgGv8Z87fIQf9PPm/l4xHyUDpTyYtfL1JKT0QQoA=) 3: 3130332e3136382e3235302e302f32332d3233203d3e20313432333237.roa (hash: ik9rrWYA9D4GBjhetTFAP4k0XQKOPTBWebSo28sOHb8=) 4: 3130332e3136382e3235312e302f32342d3234203d3e20313432333237.roa (hash: mP3dXLTjkrRr0prh2Jzplj5CirAMZtpiVu7s//8AY3w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/4EE959798755CD4BA407AEB6EBDD3100261EAA55.crl rsync://repo-rpki.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/4EE959798755CD4BA407AEB6EBDD3100261EAA55.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4EE959798755CD4BA407AEB6EBDD3100261EAA55.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 01:49:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:4b:55:64:04:e1:ec:91:54:3b:47:f0:5e:7f:dd:77:a3:91:76:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4EE959798755CD4BA407AEB6EBDD3100261EAA55 Validity Not Before: Jul 19 14:27:07 2025 GMT Not After : Jul 23 01:49:07 2025 GMT Subject: CN=F22B49DBB6C3C729CCF8E9D089C5A75A694A4FF8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b4:05:74:87:09:5f:d6:fa:93:57:79:f8:3b: fd:bb:66:e2:a8:61:37:38:94:5e:25:2a:03:1e:00: 0f:a3:87:b1:f8:14:94:0b:0d:5f:3c:84:43:26:06: d2:02:8b:12:6c:6d:22:00:7b:15:4b:f5:c3:fc:2b: 1e:56:24:6d:d0:45:ae:aa:f8:f7:bc:db:17:a2:09: f8:de:a3:1f:8d:14:8c:d8:08:44:ac:1e:79:bc:08: 14:2b:4c:c6:7b:32:1e:43:2e:7f:9f:2e:06:ab:e3: 0e:7a:87:36:1a:b0:28:8b:1b:f2:87:d9:8e:1f:aa: 76:24:a0:f1:a8:c1:e4:23:5d:08:70:df:e3:e8:b1: c8:73:f3:c3:3e:3f:98:0a:78:53:23:3a:13:4b:61: 21:c0:aa:6a:72:ad:eb:0a:fc:94:ea:99:93:3d:ce: 12:ba:e7:5f:5b:bc:2a:75:34:e8:d1:42:eb:1d:8b: bf:c1:45:73:13:9e:48:35:45:e8:c6:09:36:0b:11: 8e:e1:d7:c3:44:c2:4c:c0:dd:09:bf:04:48:75:6f: 71:13:b5:6d:83:8d:02:a8:1c:06:45:95:9d:5b:b5: 7b:fd:70:17:58:83:a7:61:57:87:6f:69:4c:77:cc: f0:0e:eb:04:0e:c7:18:3c:93:db:d1:71:83:c6:3a: 7e:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:2B:49:DB:B6:C3:C7:29:CC:F8:E9:D0:89:C5:A7:5A:69:4A:4F:F8 X509v3 Authority Key Identifier: keyid:4E:E9:59:79:87:55:CD:4B:A4:07:AE:B6:EB:DD:31:00:26:1E:AA:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/4EE959798755CD4BA407AEB6EBDD3100261EAA55.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4EE959798755CD4BA407AEB6EBDD3100261EAA55.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/4EE959798755CD4BA407AEB6EBDD3100261EAA55.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:3a:ec:d2:f3:3d:28:a8:cb:60:fd:5a:18:cb:03:64:1b:48: c8:0d:38:83:b2:84:30:69:5b:57:f4:be:5b:94:dd:70:d8:ca: 8e:97:82:b6:67:d2:ad:eb:ae:47:ea:40:79:73:3e:19:2a:f9: 9d:96:7e:8c:72:04:a8:7f:b1:f2:af:5e:5e:b2:d5:ab:69:2f: 0d:93:fd:ba:2e:67:4f:8b:24:03:31:f3:2d:55:7e:ad:87:1f: ca:11:8c:20:21:73:59:8e:ca:8c:82:31:ba:ae:05:56:86:42: ca:42:e0:3a:d0:4a:79:33:64:16:b1:ba:b7:a0:c6:2f:d0:35: cc:fd:ad:d1:9c:d9:86:60:d6:a3:78:46:6e:32:81:c2:5f:56: 0f:35:06:25:e5:66:3d:ed:26:34:28:ed:37:2e:8b:a1:e2:5b: d3:3c:b1:f2:a6:ee:e0:c7:71:b6:9c:e8:43:d3:9b:ca:5a:24: 42:70:cc:25:f2:b9:32:ab:25:9e:f6:73:ca:d5:a4:97:78:31: 8a:d7:ba:24:48:68:e3:85:43:d7:72:5d:fb:3f:56:81:c0:a5: f4:3b:bf:1d:d0:43:35:6a:37:cf:c8:c7:1c:21:3a:37:16:5f: 89:6f:c9:b3:ca:95:c8:b9:d7:ba:cc:62:68:e3:76:10:4b:1b: 2b:e6:67:97 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDUtVZATh7JFUO0fwXn/dd6ORduYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEVFOTU5Nzk4NzU1Q0Q0QkE0MDdBRUI2RUJERDMxMDAy NjFFQUE1NTAeFw0yNTA3MTkxNDI3MDdaFw0yNTA3MjMwMTQ5MDdaMDMxMTAvBgNV BAMTKEYyMkI0OURCQjZDM0M3MjlDQ0Y4RTlEMDg5QzVBNzVBNjk0QTRGRjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEtAV0hwlf1vqTV3n4O/27ZuKo YTc4lF4lKgMeAA+jh7H4FJQLDV88hEMmBtICixJsbSIAexVL9cP8Kx5WJG3QRa6q +Pe82xeiCfjeox+NFIzYCESsHnm8CBQrTMZ7Mh5DLn+fLgar4w56hzYasCiLG/KH 2Y4fqnYkoPGoweQjXQhw3+Poschz88M+P5gKeFMjOhNLYSHAqmpyresK/JTqmZM9 zhK6519bvCp1NOjRQusdi7/BRXMTnkg1RejGCTYLEY7h18NEwkzA3Qm/BEh1b3ET tW2DjQKoHAZFlZ1btXv9cBdYg6dhV4dvaUx3zPAO6wQOxxg8k9vRcYPGOn6JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8itJ27bDxynM+OnQicWnWmlKT/gwHwYDVR0j BBgwFoAUTulZeYdVzUukB662690xACYeqlUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MzhkNTgwYi00NTJlLTQyZDctYjA0MS05MDFkYzMzZDY4NTcvMC80RUU5NTk3OTg3 NTVDRDRCQTQwN0FFQjZFQkREMzEwMDI2MUVBQTU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEVFOTU5Nzk4NzU1Q0Q0QkE0MDdBRUI2RUJERDMxMDAyNjFF QUE1NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDM4ZDU4MGItNDUyZS00MmQ3LWIw NDEtOTAxZGMzM2Q2ODU3LzAvNEVFOTU5Nzk4NzU1Q0Q0QkE0MDdBRUI2RUJERDMx MDAyNjFFQUE1NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKo67NLzPSioy2D9WhjLA2QbSMgNOIOyhDBp W1f0vluU3XDYyo6XgrZn0q3rrkfqQHlzPhkq+Z2WfoxyBKh/sfKvXl6y1atpLw2T /bouZ0+LJAMx8y1Vfq2HH8oRjCAhc1mOyoyCMbquBVaGQspC4DrQSnkzZBaxureg xi/QNcz9rdGc2YZg1qN4Rm4ygcJfVg81BiXlZj3tJjQo7Tcui6HiW9M8sfKm7uDH cbac6EPTm8paJEJwzCXyuTKrJZ72c8rVpJd4MYrXuiRIaOOFQ9dyXfs/VoHApfQ7 vx3QQzVqN8/IxxwhOjcWX4lvybPKlci517rMYmjjdhBLGyvmZ5c= -----END CERTIFICATE-----Generated at Mon Jul 21 18:10:13 2025 by rpki-client