$ rpki-client -vvf repo-rpki.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.mft File: C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.mft (raw, json) Hash identifier: YShjrivuEGH1rnmmuncqrWvdv+SOH6FtkATUMlnm7Nc= Subject key identifier: B7:1E:A3:EC:20:64:15:EC:54:B2:1F:92:13:F9:2F:3C:DC:F8:A6:EE Authority key identifier: C4:CE:1B:D3:CB:FB:01:5E:60:96:5A:65:E2:FB:31:A6:BA:26:18:9B Certificate issuer: /CN=C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B Certificate serial: 6CE9E48ECBE5D08D8FAE9C194A006E160783FF78 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.mft Manifest number: 04EF Signing time: Mon 21 Jul 2025 19:42:16 +0000 Manifest this update: Mon 21 Jul 2025 19:37:16 +0000 Manifest next update: Thu 24 Jul 2025 21:34:16 +0000 Files and hashes: 1: 3130332e3135352e3136372e302f32342d3234203d3e20313431303634.roa (hash: bjlsGk5J7SvEO5IoZ47H9V39bFhtmZq3wwyih52cSks=) 2: 3130332e3135352e3136362e302f32332d3233203d3e20313431303634.roa (hash: eyzaiFvv4c1HmHtA1p4wBBlGeENQrifGbWD1MbCWveE=) 3: C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.crl (hash: pG+0+9KnFRAUWSKaKk9Nms8S6nBQ9U4gnS8DoTJUv/k=) 4: 3130332e3135352e3136362e302f32342d3234203d3e20313431303634.roa (hash: sI3bqifKZVIOhDY6Sh1Zbn3Bg29Wg0wSaItyUUWUok4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.crl rsync://repo-rpki.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 21:34:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:e9:e4:8e:cb:e5:d0:8d:8f:ae:9c:19:4a:00:6e:16:07:83:ff:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B Validity Not Before: Jul 21 19:37:16 2025 GMT Not After : Jul 24 21:34:16 2025 GMT Subject: CN=B71EA3EC206415EC54B21F9213F92F3CDCF8A6EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:75:34:9b:29:eb:05:65:89:f1:36:a5:eb:56: 65:4b:80:98:43:0c:6b:e6:df:b0:3d:1e:df:fe:71: 64:db:5c:e1:0f:ac:60:f7:fa:65:22:be:82:ba:49: 7f:46:dc:0f:ca:e7:f2:e3:f7:cd:60:5a:ef:76:10: e6:81:2b:2c:ab:77:c1:37:ca:0e:e4:ea:e5:32:ee: ea:6d:04:78:c6:05:65:9b:7a:02:aa:81:86:da:b9: fd:a9:96:ae:e0:cb:d8:15:2e:d5:e9:a8:9f:1f:9b: 84:41:62:0e:3a:3d:fe:e1:cb:2a:e2:13:98:16:85: 15:43:ce:e9:e2:5c:c9:b0:17:bd:90:a6:61:e8:70: 1d:2c:b9:ec:4b:33:3d:3c:42:52:eb:13:96:3e:d8: b2:ce:a2:9c:91:73:95:b2:b0:6b:0f:04:9f:0b:9b: b3:4f:69:2b:45:44:11:71:e3:9c:b7:d9:0a:a9:34: 1d:36:a1:ff:de:29:ca:58:41:f0:89:ad:64:05:67: b5:59:87:dd:17:c9:df:1b:14:5f:32:36:4b:ad:46: 23:ea:f1:f4:c4:38:13:f9:7c:97:a6:0f:18:5d:0e: 50:a9:e6:37:f4:6a:53:11:12:b3:6c:e1:26:93:92: 86:31:d3:87:7e:1d:d8:d3:42:50:d4:dd:24:3f:fb: fa:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:1E:A3:EC:20:64:15:EC:54:B2:1F:92:13:F9:2F:3C:DC:F8:A6:EE X509v3 Authority Key Identifier: keyid:C4:CE:1B:D3:CB:FB:01:5E:60:96:5A:65:E2:FB:31:A6:BA:26:18:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:4f:c9:96:b7:72:57:0d:60:70:76:75:da:56:fa:b4:cb:07: 58:0b:87:37:1d:50:bd:84:7e:52:98:9f:ab:97:ee:f5:d9:17: b4:97:45:ef:89:fd:bb:37:b0:2e:f5:2b:b1:87:b9:7b:e9:68: 9b:6d:89:87:f9:08:42:e4:a2:2d:83:f8:75:2d:dc:f9:f9:5e: 0d:f9:f2:ed:ab:4b:d8:d5:17:27:ff:12:a9:0c:67:f7:86:5d: 13:05:fe:ae:bf:3f:59:7f:eb:e6:e5:12:07:2b:0f:e9:eb:5b: 61:de:a8:ec:35:37:2c:3e:a6:f4:d8:f3:a5:fc:05:87:54:37: c6:de:49:27:c5:e5:e5:87:91:c3:d7:78:a3:27:81:7e:89:83: 4b:02:a7:ba:51:0c:1f:0b:da:6d:31:b3:54:e7:69:be:96:b7: 3c:97:a1:f6:da:1e:ea:66:29:d1:b9:e9:fb:52:22:f0:01:1a: 73:af:09:a4:3e:45:a1:51:99:66:b5:ee:e8:d0:48:9b:2c:f8: 65:84:90:67:86:0b:8b:60:33:7e:c8:c6:0c:83:d9:9c:44:e0: f4:ad:dc:27:c5:20:59:c7:e1:01:2f:f8:5c:dd:81:84:ed:1f: 12:13:ce:97:c3:6b:95:66:f5:b5:d6:05:ca:99:c0:7f:73:99: 3a:a3:62:27 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbOnkjsvl0I2PrpwZSgBuFgeD/3gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzRDRTFCRDNDQkZCMDE1RTYwOTY1QTY1RTJGQjMxQTZC QTI2MTg5QjAeFw0yNTA3MjExOTM3MTZaFw0yNTA3MjQyMTM0MTZaMDMxMTAvBgNV BAMTKEI3MUVBM0VDMjA2NDE1RUM1NEIyMUY5MjEzRjkyRjNDRENGOEE2RUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcdTSbKesFZYnxNqXrVmVLgJhD DGvm37A9Ht/+cWTbXOEPrGD3+mUivoK6SX9G3A/K5/Lj981gWu92EOaBKyyrd8E3 yg7k6uUy7uptBHjGBWWbegKqgYbauf2plq7gy9gVLtXpqJ8fm4RBYg46Pf7hyyri E5gWhRVDzuniXMmwF72QpmHocB0suexLMz08QlLrE5Y+2LLOopyRc5WysGsPBJ8L m7NPaStFRBFx45y32QqpNB02of/eKcpYQfCJrWQFZ7VZh90Xyd8bFF8yNkutRiPq 8fTEOBP5fJemDxhdDlCp5jf0alMRErNs4SaTkoYx04d+HdjTQlDU3SQ/+/obAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtx6j7CBkFexUsh+SE/kvPNz4pu4wHwYDVR0j BBgwFoAUxM4b08v7AV5gllpl4vsxpromGJswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YzZiMmJkNy1kN2YxLTQ4MTUtYTYwYS1jYWQ1NDAyOWNlODgvMC9DNENFMUJEM0NC RkIwMTVFNjA5NjVBNjVFMkZCMzFBNkJBMjYxODlCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzRDRTFCRDNDQkZCMDE1RTYwOTY1QTY1RTJGQjMxQTZCQTI2 MTg5Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGM2YjJiZDctZDdmMS00ODE1LWE2 MGEtY2FkNTQwMjljZTg4LzAvQzRDRTFCRDNDQkZCMDE1RTYwOTY1QTY1RTJGQjMx QTZCQTI2MTg5Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEVPyZa3clcNYHB2ddpW+rTLB1gLhzcdUL2E flKYn6uX7vXZF7SXRe+J/bs3sC71K7GHuXvpaJttiYf5CELkoi2D+HUt3Pn5Xg35 8u2rS9jVFyf/EqkMZ/eGXRMF/q6/P1l/6+blEgcrD+nrW2HeqOw1Nyw+pvTY86X8 BYdUN8beSSfF5eWHkcPXeKMngX6Jg0sCp7pRDB8L2m0xs1Tnab6WtzyXofbaHupm KdG56ftSIvABGnOvCaQ+RaFRmWa17ujQSJss+GWEkGeGC4tgM37IxgyD2ZxE4PSt 3CfFIFnH4QEv+FzdgYTtHxITzpfDa5Vm9bXWBcqZwH9zmTqjYic= -----END CERTIFICATE-----Generated at Tue Jul 22 11:48:54 2025 by rpki-client