$ rpki-client -vvf repo-rpki.idnic.net/repo/2c280af3-aa1d-4271-8c06-a3fa28898426/0/4AA76DED689FD4420809D0962087A03BCF018FEA.mft File: 4AA76DED689FD4420809D0962087A03BCF018FEA.mft (raw, json) Hash identifier: nSjVNWovovNU/TBZu2IfaIS9hD4Qc45XMMpNC6k+fXk= Subject key identifier: 89:23:91:08:1E:00:09:5E:97:64:96:59:D3:A6:54:1F:7E:17:73:99 Authority key identifier: 4A:A7:6D:ED:68:9F:D4:42:08:09:D0:96:20:87:A0:3B:CF:01:8F:EA Certificate issuer: /CN=4AA76DED689FD4420809D0962087A03BCF018FEA Certificate serial: 4F766DBB4566D9708BF40E02FD8F5FE06124DCE8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AA76DED689FD4420809D0962087A03BCF018FEA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2c280af3-aa1d-4271-8c06-a3fa28898426/0/4AA76DED689FD4420809D0962087A03BCF018FEA.mft Manifest number: AD Signing time: Sun 20 Jul 2025 03:01:55 +0000 Manifest this update: Sun 20 Jul 2025 02:56:55 +0000 Manifest next update: Wed 23 Jul 2025 04:10:55 +0000 Files and hashes: 1: 3130332e39392e3133362e302f32342d3234203d3e20313531353735.roa (hash: 2CpAucK+rvU21eAZmyDV5IqqR6dCAIafzExn8g2LOMw=) 2: 3130332e39392e3133372e302f32342d3234203d3e20313531353735.roa (hash: qGUv354O5bgjhTMZ45JMcvyFGWQg1EdVxERPegJoKCQ=) 3: 4AA76DED689FD4420809D0962087A03BCF018FEA.crl (hash: htcLZexv7iwSOdyAtnKGa8t/Z5/+vg6Fyk0y/XkSAfw=) 4: 3130332e39392e3133362e302f32332d3233203d3e20313531353735.roa (hash: bYo0zSG/Y+l/kRQWqzhvCy7R5Romzqih1iDCz89t3mk=) 5: 323030313a6466343a3763303a3a2f34382d3438203d3e20313531353735.roa (hash: khEVLFQtH+a45cc9yGf67pi2XkwhJ0LBpc+mc2azWiQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2c280af3-aa1d-4271-8c06-a3fa28898426/0/4AA76DED689FD4420809D0962087A03BCF018FEA.crl rsync://repo-rpki.idnic.net/repo/2c280af3-aa1d-4271-8c06-a3fa28898426/0/4AA76DED689FD4420809D0962087A03BCF018FEA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AA76DED689FD4420809D0962087A03BCF018FEA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 04:10:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:76:6d:bb:45:66:d9:70:8b:f4:0e:02:fd:8f:5f:e0:61:24:dc:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4AA76DED689FD4420809D0962087A03BCF018FEA Validity Not Before: Jul 20 02:56:55 2025 GMT Not After : Jul 23 04:10:55 2025 GMT Subject: CN=892391081E00095E97649659D3A6541F7E177399 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:6e:53:80:95:bf:71:86:38:00:37:96:1f:fa: 47:74:5e:52:02:da:44:f4:97:c8:d8:5d:3f:77:88: 4d:74:f9:70:ac:82:a2:71:ea:61:d4:21:ee:03:77: 6b:58:c5:b5:9f:ae:f0:c1:3f:36:69:fd:9d:6d:a6: 8a:04:41:bd:1d:40:50:9f:52:60:bd:f9:83:f2:7b: 7e:dd:0f:96:44:f2:f2:d3:c9:41:da:2a:66:67:5b: 3d:5d:70:6f:40:41:0a:07:cb:6a:63:c6:4e:91:5b: 55:29:8b:e0:5d:2e:05:60:a1:6b:b9:3e:ec:38:f6: 1b:38:91:22:d5:45:fe:74:6d:7c:00:5c:ff:ca:00: ab:61:a7:e9:91:24:91:7c:25:11:ea:1a:2f:84:87: f8:a8:d3:27:1e:3a:08:09:ab:5d:eb:93:fe:9a:7c: 15:bd:b1:1b:17:ad:f8:5e:e4:29:66:e0:7e:1f:09: f0:73:92:4f:63:f6:6e:c1:90:34:cf:c9:d6:1b:1c: 73:82:53:77:1a:8a:2e:de:ce:70:7c:fc:a1:48:d4: 93:bb:fd:56:b8:03:ae:a0:68:2b:95:44:0e:17:91: 5a:ac:35:89:ae:c8:50:11:b9:e1:f0:e0:c8:84:d9: a3:73:e6:12:85:9b:93:ae:a8:2b:92:49:cd:73:da: 96:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:23:91:08:1E:00:09:5E:97:64:96:59:D3:A6:54:1F:7E:17:73:99 X509v3 Authority Key Identifier: keyid:4A:A7:6D:ED:68:9F:D4:42:08:09:D0:96:20:87:A0:3B:CF:01:8F:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2c280af3-aa1d-4271-8c06-a3fa28898426/0/4AA76DED689FD4420809D0962087A03BCF018FEA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AA76DED689FD4420809D0962087A03BCF018FEA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2c280af3-aa1d-4271-8c06-a3fa28898426/0/4AA76DED689FD4420809D0962087A03BCF018FEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:2b:8d:e0:94:f9:24:4a:ac:23:90:be:26:85:6c:b1:18:50: fb:bc:6d:71:5c:58:a3:d0:02:09:f8:23:93:44:7f:e6:c6:80: 3f:b3:ce:b0:da:24:a8:a0:3b:a6:ec:af:a7:dd:72:49:d2:66: 8b:7c:c1:47:7f:b2:c5:ef:19:4d:08:29:19:29:e8:8e:e6:9d: cf:1b:3b:9b:f4:64:b5:9c:51:ce:de:87:25:6f:19:9c:de:34: 68:d4:61:ef:de:b0:56:ce:1b:d3:ef:d3:64:d0:e1:a1:12:a6: 05:c5:5b:57:56:a2:3c:d3:6c:f9:e1:11:0e:66:74:26:d5:7b: 7b:1e:99:5f:aa:6f:a5:9f:6b:e1:ce:1b:18:a7:ae:20:ea:04: 4f:de:37:7f:1c:0e:e4:04:b2:c9:22:a5:cc:1e:5d:c8:85:5a: 00:89:00:41:4b:39:07:8a:cc:9a:3a:41:70:42:89:6b:0a:a5: 39:40:86:23:64:f0:d9:4c:c1:0f:49:b9:50:0b:7c:2d:6e:70: 4c:da:ab:3e:06:2b:39:ea:8d:03:cf:00:ce:25:a5:e5:af:c6: f7:40:da:21:a1:49:08:dd:a1:f1:eb:70:d5:cd:85:0d:38:26: 22:b5:e1:dc:ed:19:4f:c7:7e:b4:e9:b8:00:21:89:1d:57:44: f6:b1:a9:9c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT3Ztu0Vm2XCL9A4C/Y9f4GEk3OgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEFBNzZERUQ2ODlGRDQ0MjA4MDlEMDk2MjA4N0EwM0JD RjAxOEZFQTAeFw0yNTA3MjAwMjU2NTVaFw0yNTA3MjMwNDEwNTVaMDMxMTAvBgNV BAMTKDg5MjM5MTA4MUUwMDA5NUU5NzY0OTY1OUQzQTY1NDFGN0UxNzczOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDblOAlb9xhjgAN5Yf+kd0XlIC 2kT0l8jYXT93iE10+XCsgqJx6mHUIe4Dd2tYxbWfrvDBPzZp/Z1tpooEQb0dQFCf UmC9+YPye37dD5ZE8vLTyUHaKmZnWz1dcG9AQQoHy2pjxk6RW1Upi+BdLgVgoWu5 Puw49hs4kSLVRf50bXwAXP/KAKthp+mRJJF8JRHqGi+Eh/io0yceOggJq13rk/6a fBW9sRsXrfhe5Clm4H4fCfBzkk9j9m7BkDTPydYbHHOCU3caii7eznB8/KFI1JO7 /Va4A66gaCuVRA4XkVqsNYmuyFARueHw4MiE2aNz5hKFm5OuqCuSSc1z2pY1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiSORCB4ACV6XZJZZ06ZUH34Xc5kwHwYDVR0j BBgwFoAUSqdt7Wif1EIICdCWIIegO88Bj+owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YzI4MGFmMy1hYTFkLTQyNzEtOGMwNi1hM2ZhMjg4OTg0MjYvMC80QUE3NkRFRDY4 OUZENDQyMDgwOUQwOTYyMDg3QTAzQkNGMDE4RkVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEFBNzZERUQ2ODlGRDQ0MjA4MDlEMDk2MjA4N0EwM0JDRjAx OEZFQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmMyODBhZjMtYWExZC00MjcxLThj MDYtYTNmYTI4ODk4NDI2LzAvNEFBNzZERUQ2ODlGRDQ0MjA4MDlEMDk2MjA4N0Ew M0JDRjAxOEZFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADwrjeCU+SRKrCOQviaFbLEYUPu8bXFcWKPQ Agn4I5NEf+bGgD+zzrDaJKigO6bsr6fdcknSZot8wUd/ssXvGU0IKRkp6I7mnc8b O5v0ZLWcUc7ehyVvGZzeNGjUYe/esFbOG9Pv02TQ4aESpgXFW1dWojzTbPnhEQ5m dCbVe3semV+qb6Wfa+HOGxinriDqBE/eN38cDuQEsskipcweXciFWgCJAEFLOQeK zJo6QXBCiWsKpTlAhiNk8NlMwQ9JuVALfC1ucEzaqz4GKznqjQPPAM4lpeWvxvdA 2iGhSQjdofHrcNXNhQ04JiK14dztGU/HfrTpuAAhiR1XRPaxqZw= -----END CERTIFICATE-----Generated at Mon Jul 21 07:24:57 2025 by rpki-client