$ rpki-client -vvf repo-rpki.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.mft File: 4AC7DCD8EB1234ADC427AEBE3949E8691638A707.mft (raw, json) Hash identifier: Hbwu56wOd0T/sitD0jdYaJMPMu7HC7tK00HkcY8Zkmc= Subject key identifier: 1C:BC:9A:7A:A1:57:2C:57:F2:83:C7:DF:71:46:7A:D0:5D:AE:A7:72 Authority key identifier: 4A:C7:DC:D8:EB:12:34:AD:C4:27:AE:BE:39:49:E8:69:16:38:A7:07 Certificate issuer: /CN=4AC7DCD8EB1234ADC427AEBE3949E8691638A707 Certificate serial: 0A455C00095F02D36DD91B87B2134D187B397FEB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.cer Subject info access: rsync://repo-rpki.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.mft Manifest number: 01F9 Signing time: Mon 21 Jul 2025 11:20:45 +0000 Manifest this update: Mon 21 Jul 2025 11:15:45 +0000 Manifest next update: Thu 24 Jul 2025 12:43:45 +0000 Files and hashes: 1: 3130332e382e39362e302f32322d3234203d3e203137343530.roa (hash: E/ANh8Obcj2c5y2FA6Ly1F0NL4tMRGMfZqDmckfRl5E=) 2: 3131392e322e36342e302f31392d3234203d3e203137343530.roa (hash: Uce528/KV3oCstaRCZguiOogFuox/yiwX1g2nJn55uk=) 3: 4AC7DCD8EB1234ADC427AEBE3949E8691638A707.crl (hash: 7h4HCv4YdmCQEH1bjoeoq/irSiKHT79xvmTiTk72wU8=) 4: 323030313a6466363a366630303a3a2f34382d3438203d3e20313331373034.roa (hash: 3CBY+1byt2hh1kG4N61+QCfs3v8FSbnr3cgZmaX/kYc=) 5: 3230322e362e3230382e302f32302d3234203d3e203137343530.roa (hash: wpi+A3QiGq0ZlH1T9XK03PNS16oXniLKGOp2khUpYoA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.crl rsync://repo-rpki.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 12:43:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:45:5c:00:09:5f:02:d3:6d:d9:1b:87:b2:13:4d:18:7b:39:7f:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4AC7DCD8EB1234ADC427AEBE3949E8691638A707 Validity Not Before: Jul 21 11:15:45 2025 GMT Not After : Jul 24 12:43:45 2025 GMT Subject: CN=1CBC9A7AA1572C57F283C7DF71467AD05DAEA772 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:7c:e2:d1:2c:f3:73:06:50:0f:56:1e:3a:9d: 2a:2d:d7:90:29:33:d8:06:69:ae:46:53:5d:53:13: c4:f1:f4:fd:9a:69:6c:e3:fa:a2:69:01:29:8a:a4: 13:14:11:58:40:50:e8:f5:3a:a9:67:82:7f:6b:cb: f3:f1:7d:68:6c:e7:82:d5:bb:0f:90:d8:79:c7:c8: 87:08:4d:82:83:f9:11:cc:35:30:fa:f7:e5:6f:1d: d2:cf:f1:77:ea:a3:bf:31:57:87:72:89:54:27:8a: 55:81:38:41:55:dd:e9:13:a0:de:b8:c0:bb:2a:84: 7a:32:5d:5f:af:91:bf:17:e5:62:74:56:42:4c:b4: ab:f7:65:b0:6d:41:8b:8f:7c:50:d3:8a:95:23:6c: f4:42:7d:2a:e8:5b:29:f7:01:12:7d:3b:41:d6:37: 02:29:a5:8e:c5:f0:58:ab:be:30:f3:83:76:ff:38: 27:46:8a:81:f6:d7:1c:01:14:62:01:51:ad:ef:a3: cd:f6:ec:46:6f:bb:9d:72:6c:d1:57:5b:f3:a5:b5: 5b:1e:e0:61:b7:a0:3a:a6:1c:93:6c:31:a5:ef:a0: 95:05:29:67:a5:05:f7:44:9c:20:b7:a7:9b:c1:cb: ae:7f:a1:38:b2:b9:60:78:00:89:47:dd:58:fc:d8: 3f:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:BC:9A:7A:A1:57:2C:57:F2:83:C7:DF:71:46:7A:D0:5D:AE:A7:72 X509v3 Authority Key Identifier: keyid:4A:C7:DC:D8:EB:12:34:AD:C4:27:AE:BE:39:49:E8:69:16:38:A7:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:e9:ab:14:f1:24:bf:ee:79:6e:d5:3c:b7:76:ed:b1:98:d3: a7:2f:65:df:ad:7a:77:38:41:89:e8:e1:b4:20:5b:f0:0b:22: a1:d9:34:df:b0:e3:86:94:c8:69:c2:47:58:9e:e2:47:06:b4: 9c:e3:03:1a:84:f4:20:7f:68:d4:e2:3e:9a:78:85:65:d4:b2: 87:ee:6c:fe:7e:3f:6f:74:73:ab:ac:72:68:23:1f:eb:60:d4: 9a:c9:f0:df:7b:9b:b1:42:89:f6:9b:ff:9e:14:89:3a:c5:09: 64:f0:d1:bb:ca:42:f9:07:8f:a4:b6:6b:9b:d7:cf:ad:c5:95: 5d:61:e9:4d:cf:f9:8a:52:32:7c:86:b3:fb:3a:75:27:6d:92: 91:c7:ec:7b:cc:4d:66:08:65:0c:26:62:bb:bc:15:e9:65:e4: c2:90:cd:c9:d6:b0:f8:0c:0d:07:f4:06:ab:2a:11:9a:43:5f: d0:03:5f:6b:ba:0b:7a:76:d3:4e:cb:25:32:c5:0c:21:8c:b3: 35:1a:e3:7d:d3:b4:e5:b3:8a:9f:34:82:10:98:cd:8e:17:23: 11:a9:01:d4:54:bd:a1:1a:af:60:5a:24:66:6f:4f:be:0c:c5: 01:c5:86:f7:31:76:6d:13:07:10:63:ad:8e:29:8b:9c:34:cb: dc:4c:de:5b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCkVcAAlfAtNt2RuHshNNGHs5f+swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEFDN0RDRDhFQjEyMzRBREM0MjdBRUJFMzk0OUU4Njkx NjM4QTcwNzAeFw0yNTA3MjExMTE1NDVaFw0yNTA3MjQxMjQzNDVaMDMxMTAvBgNV BAMTKDFDQkM5QTdBQTE1NzJDNTdGMjgzQzdERjcxNDY3QUQwNURBRUE3NzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+fOLRLPNzBlAPVh46nSot15Ap M9gGaa5GU11TE8Tx9P2aaWzj+qJpASmKpBMUEVhAUOj1Oqlngn9ry/PxfWhs54LV uw+Q2HnHyIcITYKD+RHMNTD69+VvHdLP8Xfqo78xV4dyiVQnilWBOEFV3ekToN64 wLsqhHoyXV+vkb8X5WJ0VkJMtKv3ZbBtQYuPfFDTipUjbPRCfSroWyn3ARJ9O0HW NwIppY7F8FirvjDzg3b/OCdGioH21xwBFGIBUa3vo8327EZvu51ybNFXW/OltVse 4GG3oDqmHJNsMaXvoJUFKWelBfdEnCC3p5vBy65/oTiyuWB4AIlH3Vj82D/vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHLyaeqFXLFfyg8ffcUZ60F2up3IwHwYDVR0j BBgwFoAUSsfc2OsSNK3EJ66+OUnoaRY4pwcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MzgwNjFmMS1mYTMwLTRiZDYtODFhMC0yZWM2NzA4MzZjNDIvMC80QUM3RENEOEVC MTIzNEFEQzQyN0FFQkUzOTQ5RTg2OTE2MzhBNzA3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEFDN0RDRDhFQjEyMzRBREM0MjdBRUJFMzk0OUU4NjkxNjM4 QTcwNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDM4MDYxZjEtZmEzMC00YmQ2LTgx YTAtMmVjNjcwODM2YzQyLzAvNEFDN0RDRDhFQjEyMzRBREM0MjdBRUJFMzk0OUU4 NjkxNjM4QTcwNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKHpqxTxJL/ueW7VPLd27bGY06cvZd+tenc4 QYno4bQgW/ALIqHZNN+w44aUyGnCR1ie4kcGtJzjAxqE9CB/aNTiPpp4hWXUsofu bP5+P290c6uscmgjH+tg1JrJ8N97m7FCifab/54UiTrFCWTw0bvKQvkHj6S2a5vX z63FlV1h6U3P+YpSMnyGs/s6dSdtkpHH7HvMTWYIZQwmYru8Fell5MKQzcnWsPgM DQf0BqsqEZpDX9ADX2u6C3p2007LJTLFDCGMszUa433TtOWzip80ghCYzY4XIxGp AdRUvaEar2BaJGZvT74MxQHFhvcxdm0TBxBjrY4pi5w0y9xM3ls= -----END CERTIFICATE-----Generated at Mon Jul 21 18:09:53 2025 by rpki-client