$ rpki-client -vvf repo-rpki.idnic.net/repo/3c47ef5c-5bba-4cd1-8dc9-173e2751f4f4/0/A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.mft File: A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.mft (raw, json) Hash identifier: qsxR5QhPlwT4K6+anEw1sPjcGcr20AiQocuQ8bVL5sc= Subject key identifier: 67:19:BB:46:D9:5E:1E:BA:01:25:D1:EA:E5:E8:9B:92:CF:BC:7E:E4 Authority key identifier: A4:D9:09:9C:36:5D:8B:B9:FA:96:A2:A5:1F:A4:C6:1F:10:5E:F8:48 Certificate issuer: /CN=A4D9099C365D8BB9FA96A2A51FA4C61F105EF848 Certificate serial: 1399FAB90076C78AADC7EE464EE050F81E8E722D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3c47ef5c-5bba-4cd1-8dc9-173e2751f4f4/0/A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.mft Manifest number: D6 Signing time: Mon 21 Jul 2025 01:02:16 +0000 Manifest this update: Mon 21 Jul 2025 00:57:16 +0000 Manifest next update: Thu 24 Jul 2025 06:05:16 +0000 Files and hashes: 1: 3130332e3235352e3136352e302f32342d3234203d3e20313531393934.roa (hash: /VKdsaTHmCyGCE586MO51z4LSl8AS7ykHk2hmgDFEO4=) 2: 3130332e3235352e3136342e302f32342d3234203d3e20313531393934.roa (hash: +WwlmKdoXMg38Ivud82/QXjyd3ODqNLzlXpK9Yw3uY4=) 3: 3130332e3235352e3136342e302f32332d3233203d3e20313531393934.roa (hash: sEObMlhse4CyL4oCmxoxoPLEseBLcDvbzgfCGrhTjW0=) 4: A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.crl (hash: OIgb7l5rTs2UmdeYJQsciI5tkUrXSrcMq+bNbGVoDQA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3c47ef5c-5bba-4cd1-8dc9-173e2751f4f4/0/A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.crl rsync://repo-rpki.idnic.net/repo/3c47ef5c-5bba-4cd1-8dc9-173e2751f4f4/0/A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 00:11:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:99:fa:b9:00:76:c7:8a:ad:c7:ee:46:4e:e0:50:f8:1e:8e:72:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A4D9099C365D8BB9FA96A2A51FA4C61F105EF848 Validity Not Before: Jul 21 00:57:16 2025 GMT Not After : Jul 24 06:05:16 2025 GMT Subject: CN=6719BB46D95E1EBA0125D1EAE5E89B92CFBC7EE4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:6a:46:fc:df:c2:fa:9b:4f:ea:93:5d:0e:b6: 3d:c6:85:c1:1c:5f:e8:c0:9f:7e:e9:1e:e3:1a:cc: 32:15:9c:1f:3d:fe:89:1f:d6:2d:8f:57:55:86:1c: 82:34:73:e3:70:c2:dd:f3:84:be:7f:7d:91:11:c7: 4a:91:1a:4e:00:59:a1:3f:89:02:3b:ed:ee:b2:d8: 8a:5e:ae:23:ea:de:44:af:45:24:66:2d:72:b7:69: de:f9:00:00:3a:14:d7:7e:6e:82:d2:fb:77:9a:e0: ad:45:8a:fb:4e:bc:d9:8c:47:d9:17:af:96:41:26: 6d:41:cf:23:82:b2:4c:20:dd:13:f0:f4:86:3e:8c: 12:54:51:3a:c4:f9:2f:b9:c3:16:28:3f:b6:e3:93: e3:ed:18:bb:a4:e8:59:80:c0:b6:ab:6c:e3:bf:0d: 1a:73:58:3a:f9:20:eb:9f:c9:01:81:d7:d5:ce:cf: 22:83:06:80:03:3a:a7:72:25:37:24:96:9b:01:46: 83:58:61:bd:f2:74:ae:44:77:ca:e2:26:a8:91:40: a9:a7:c8:e0:05:40:c0:e0:82:4e:94:20:f0:70:5c: b7:a2:85:74:fc:82:0f:e7:93:a5:1d:7c:f5:02:67: 77:29:a1:92:6f:d9:bc:77:50:3c:b5:9f:b9:a3:8c: ba:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:19:BB:46:D9:5E:1E:BA:01:25:D1:EA:E5:E8:9B:92:CF:BC:7E:E4 X509v3 Authority Key Identifier: keyid:A4:D9:09:9C:36:5D:8B:B9:FA:96:A2:A5:1F:A4:C6:1F:10:5E:F8:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3c47ef5c-5bba-4cd1-8dc9-173e2751f4f4/0/A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3c47ef5c-5bba-4cd1-8dc9-173e2751f4f4/0/A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:02:00:62:c9:55:82:19:a3:6c:fa:7a:1e:85:85:76:cd:42: be:35:bc:91:79:87:57:da:f9:83:92:99:15:36:7a:07:69:0b: 60:0f:52:ae:e1:1b:9e:37:b2:e9:37:20:fe:09:6b:56:b1:24: e1:d3:ca:94:af:fd:9e:90:53:12:de:c2:1c:7c:56:a3:26:d0: 81:6d:62:0b:88:36:43:fc:eb:61:03:ce:4f:cc:90:03:0e:20: b9:be:3b:7a:8f:76:b6:12:9b:9c:1a:1c:c7:21:8c:e8:b7:5f: bd:df:95:61:e3:cb:01:5d:d1:9b:e1:8f:7f:36:37:bb:97:f2: 6d:b4:1e:77:f6:fb:49:24:3a:50:37:0d:8b:50:85:af:71:bc: 48:cc:3b:1b:45:14:87:4c:08:17:24:7b:83:55:e2:d7:a9:2e: e6:77:41:e7:a2:a7:a6:09:92:c3:89:a4:30:90:67:da:39:fb: 71:20:c2:cd:e2:c2:5b:ff:10:ba:00:8a:cd:cf:dc:c6:de:b0: 02:d8:f5:27:5b:3c:78:9a:62:bd:8e:41:d1:e3:28:97:c9:22: 0e:20:c0:fb:fc:79:ee:ef:e3:d5:36:c5:af:51:5d:54:1d:10: 41:5f:43:aa:ed:27:e5:11:8f:29:23:99:7a:82:25:4e:f4:a4: 83:e8:63:01 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE5n6uQB2x4qtx+5GTuBQ+B6Oci0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTREOTA5OUMzNjVEOEJCOUZBOTZBMkE1MUZBNEM2MUYx MDVFRjg0ODAeFw0yNTA3MjEwMDU3MTZaFw0yNTA3MjQwNjA1MTZaMDMxMTAvBgNV BAMTKDY3MTlCQjQ2RDk1RTFFQkEwMTI1RDFFQUU1RTg5QjkyQ0ZCQzdFRTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRakb838L6m0/qk10Otj3GhcEc X+jAn37pHuMazDIVnB89/okf1i2PV1WGHII0c+Nwwt3zhL5/fZERx0qRGk4AWaE/ iQI77e6y2IperiPq3kSvRSRmLXK3ad75AAA6FNd+boLS+3ea4K1FivtOvNmMR9kX r5ZBJm1BzyOCskwg3RPw9IY+jBJUUTrE+S+5wxYoP7bjk+PtGLuk6FmAwLarbOO/ DRpzWDr5IOufyQGB19XOzyKDBoADOqdyJTcklpsBRoNYYb3ydK5Ed8riJqiRQKmn yOAFQMDggk6UIPBwXLeihXT8gg/nk6UdfPUCZ3cpoZJv2bx3UDy1n7mjjLohAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZxm7RtleHroBJdHq5eibks+8fuQwHwYDVR0j BBgwFoAUpNkJnDZdi7n6lqKlH6TGHxBe+EgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YzQ3ZWY1Yy01YmJhLTRjZDEtOGRjOS0xNzNlMjc1MWY0ZjQvMC9BNEQ5MDk5QzM2 NUQ4QkI5RkE5NkEyQTUxRkE0QzYxRjEwNUVGODQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTREOTA5OUMzNjVEOEJCOUZBOTZBMkE1MUZBNEM2MUYxMDVF Rjg0OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2M0N2VmNWMtNWJiYS00Y2QxLThk YzktMTczZTI3NTFmNGY0LzAvQTREOTA5OUMzNjVEOEJCOUZBOTZBMkE1MUZBNEM2 MUYxMDVFRjg0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHECAGLJVYIZo2z6eh6FhXbNQr41vJF5h1fa +YOSmRU2egdpC2APUq7hG543suk3IP4Ja1axJOHTypSv/Z6QUxLewhx8VqMm0IFt YguINkP862EDzk/MkAMOILm+O3qPdrYSm5waHMchjOi3X73flWHjywFd0Zvhj382 N7uX8m20Hnf2+0kkOlA3DYtQha9xvEjMOxtFFIdMCBcke4NV4tepLuZ3Qeeip6YJ ksOJpDCQZ9o5+3Egws3iwlv/ELoAis3P3MbesALY9SdbPHiaYr2OQdHjKJfJIg4g wPv8ee7v49U2xa9RXVQdEEFfQ6rtJ+URjykjmXqCJU70pIPoYwE= -----END CERTIFICATE-----Generated at Mon Jul 21 02:05:53 2025 by rpki-client