$ rpki-client -vvf repo-rpki.idnic.net/repo/5c34dc3f-308f-4de1-a365-701bd9cf1004/0/4337E9FF91A0CB65CE1EB8FAEB6108F5E37BB657.mft File: 4337E9FF91A0CB65CE1EB8FAEB6108F5E37BB657.mft (raw, json) Hash identifier: VkrJ1BfcMONPUct6HRAFpTklqsEO4DzZf5NMne0xBo4= Subject key identifier: B4:53:33:D0:01:B7:16:DB:80:10:AD:12:59:83:79:AC:A5:C6:06:48 Authority key identifier: 43:37:E9:FF:91:A0:CB:65:CE:1E:B8:FA:EB:61:08:F5:E3:7B:B6:57 Certificate issuer: /CN=4337E9FF91A0CB65CE1EB8FAEB6108F5E37BB657 Certificate serial: 4A54AE2164F5684AA16CD2EE30E33FC30496CBF0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4337E9FF91A0CB65CE1EB8FAEB6108F5E37BB657.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5c34dc3f-308f-4de1-a365-701bd9cf1004/0/4337E9FF91A0CB65CE1EB8FAEB6108F5E37BB657.mft Manifest number: 02C3 Signing time: Sat 19 Jul 2025 13:01:11 +0000 Manifest this update: Sat 19 Jul 2025 12:56:11 +0000 Manifest next update: Tue 22 Jul 2025 20:45:11 +0000 Files and hashes: 1: 3130332e3137362e39362e302f32342d3234203d3e20313437313331.roa (hash: omt0on/osncWzWrbGIk75aVtn8fXGKFlF84iedQ76S8=) 2: 3130332e3137362e39362e302f32332d3233203d3e20313437313331.roa (hash: RvlNgfW0J+bVY7d2yjeoXrc2sRB1/6Dnvn34DHTz4kU=) 3: 4337E9FF91A0CB65CE1EB8FAEB6108F5E37BB657.crl (hash: eNjjiuKWE9cUoYEg6oibWY591UT/aQ5flV0OxXMx0ZU=) 4: 3130332e3137362e39372e302f32342d3234203d3e20313437313331.roa (hash: gcQbwwcsgWLto/MeqdtpULkQCdJ/hBMpFsyWHdzWTU8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5c34dc3f-308f-4de1-a365-701bd9cf1004/0/4337E9FF91A0CB65CE1EB8FAEB6108F5E37BB657.crl rsync://repo-rpki.idnic.net/repo/5c34dc3f-308f-4de1-a365-701bd9cf1004/0/4337E9FF91A0CB65CE1EB8FAEB6108F5E37BB657.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4337E9FF91A0CB65CE1EB8FAEB6108F5E37BB657.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 20:45:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:54:ae:21:64:f5:68:4a:a1:6c:d2:ee:30:e3:3f:c3:04:96:cb:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4337E9FF91A0CB65CE1EB8FAEB6108F5E37BB657 Validity Not Before: Jul 19 12:56:11 2025 GMT Not After : Jul 22 20:45:11 2025 GMT Subject: CN=B45333D001B716DB8010AD12598379ACA5C60648 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:17:f9:16:57:e4:43:6f:65:a4:02:cc:7c:f3: b0:a0:57:4f:88:8f:2b:fd:6a:ca:13:dd:67:12:d4: 20:95:0c:00:ba:37:54:eb:d0:fc:6e:2e:14:83:52: f0:f8:05:31:57:e3:6a:18:4c:13:bf:b8:4d:a0:81: 01:4c:69:0c:b1:dd:f5:c1:d3:7c:86:30:bd:0a:13: b1:01:f8:64:3d:c7:35:df:3a:93:8d:81:de:69:b1: 4f:7d:b7:40:58:f9:14:37:9d:c1:9f:c1:6c:1b:31: e4:ae:08:e8:1f:b7:b5:80:c5:6f:0b:5e:99:c5:52: 5a:1d:f0:51:ae:85:89:26:c3:1d:b2:ad:5e:64:53: 20:d3:47:47:a8:ab:39:5e:72:93:6d:bd:a5:10:02: d4:e2:9d:6a:f5:da:d2:75:dd:41:82:e4:2d:1a:80: b1:d3:af:9c:78:17:de:6f:5e:dc:9a:6c:05:ff:be: 9b:10:b3:c6:43:30:54:fe:ec:ab:f1:74:0a:fd:a0: 7f:37:8b:72:d4:93:11:0b:59:57:d1:90:1b:b2:4d: 6d:8a:a8:7b:bc:62:45:9d:2a:68:ea:3a:46:41:f7: 7d:a8:ef:f7:41:8b:0e:0e:5b:34:1f:b8:7b:34:f5: a2:1b:23:f1:b3:ee:c9:65:9d:67:f4:50:dd:c4:f3: 28:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:53:33:D0:01:B7:16:DB:80:10:AD:12:59:83:79:AC:A5:C6:06:48 X509v3 Authority Key Identifier: keyid:43:37:E9:FF:91:A0:CB:65:CE:1E:B8:FA:EB:61:08:F5:E3:7B:B6:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5c34dc3f-308f-4de1-a365-701bd9cf1004/0/4337E9FF91A0CB65CE1EB8FAEB6108F5E37BB657.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4337E9FF91A0CB65CE1EB8FAEB6108F5E37BB657.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5c34dc3f-308f-4de1-a365-701bd9cf1004/0/4337E9FF91A0CB65CE1EB8FAEB6108F5E37BB657.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:0e:f8:cb:0c:8d:1c:a0:43:7f:0d:8a:ba:98:a0:1a:bf:9e: 4a:b9:b5:3f:9d:2d:ce:fc:1f:43:19:be:82:94:9d:56:ad:b7: 32:ec:16:4e:61:fc:bc:54:a8:db:db:71:64:e9:b1:e2:bd:8b: 7b:a1:8c:cb:d7:ea:b2:f1:7c:e0:a2:4f:66:18:b9:79:fb:d3: 72:a3:df:69:a5:5d:e5:14:f5:b9:9b:61:4c:af:e5:89:90:17: 7d:7f:c5:68:43:e3:ef:21:8c:74:d2:f0:62:8f:9f:54:cf:f6: 51:dd:44:4e:1c:36:74:e7:17:69:53:44:4f:fe:52:0c:4f:fc: 8e:a0:db:ac:12:c1:f0:be:ee:d6:4e:88:38:6a:42:9e:fc:88: c4:63:c7:fc:2d:4d:22:30:1f:1b:11:f6:c0:0a:4d:6a:9a:6b: b9:48:6d:d4:0b:54:9d:3f:3f:4b:7c:c1:30:44:47:8a:33:e1: b4:33:55:ed:73:80:c8:98:c0:5f:6e:a4:b9:f8:fb:4b:04:45: f6:14:63:80:de:47:b0:ee:58:e0:91:95:08:6a:24:ca:00:c4: ad:5d:63:4d:56:c3:8f:53:d1:e0:23:5c:db:18:f4:d8:41:32: 5c:8c:c6:93:7d:f4:4a:52:4f:94:f5:3a:73:e8:43:51:37:c1: 95:d0:23:65 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSlSuIWT1aEqhbNLuMOM/wwSWy/AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDMzN0U5RkY5MUEwQ0I2NUNFMUVCOEZBRUI2MTA4RjVF MzdCQjY1NzAeFw0yNTA3MTkxMjU2MTFaFw0yNTA3MjIyMDQ1MTFaMDMxMTAvBgNV BAMTKEI0NTMzM0QwMDFCNzE2REI4MDEwQUQxMjU5ODM3OUFDQTVDNjA2NDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxF/kWV+RDb2WkAsx887CgV0+I jyv9asoT3WcS1CCVDAC6N1Tr0PxuLhSDUvD4BTFX42oYTBO/uE2ggQFMaQyx3fXB 03yGML0KE7EB+GQ9xzXfOpONgd5psU99t0BY+RQ3ncGfwWwbMeSuCOgft7WAxW8L XpnFUlod8FGuhYkmwx2yrV5kUyDTR0eoqzlecpNtvaUQAtTinWr12tJ13UGC5C0a gLHTr5x4F95vXtyabAX/vpsQs8ZDMFT+7KvxdAr9oH83i3LUkxELWVfRkBuyTW2K qHu8YkWdKmjqOkZB932o7/dBiw4OWzQfuHs09aIbI/Gz7sllnWf0UN3E8yjNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtFMz0AG3FtuAEK0SWYN5rKXGBkgwHwYDVR0j BBgwFoAUQzfp/5Ggy2XOHrj662EI9eN7tlcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YzM0ZGMzZi0zMDhmLTRkZTEtYTM2NS03MDFiZDljZjEwMDQvMC80MzM3RTlGRjkx QTBDQjY1Q0UxRUI4RkFFQjYxMDhGNUUzN0JCNjU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDMzN0U5RkY5MUEwQ0I2NUNFMUVCOEZBRUI2MTA4RjVFMzdC QjY1Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWMzNGRjM2YtMzA4Zi00ZGUxLWEz NjUtNzAxYmQ5Y2YxMDA0LzAvNDMzN0U5RkY5MUEwQ0I2NUNFMUVCOEZBRUI2MTA4 RjVFMzdCQjY1Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHUO+MsMjRygQ38NirqYoBq/nkq5tT+dLc78 H0MZvoKUnVattzLsFk5h/LxUqNvbcWTpseK9i3uhjMvX6rLxfOCiT2YYuXn703Kj 32mlXeUU9bmbYUyv5YmQF31/xWhD4+8hjHTS8GKPn1TP9lHdRE4cNnTnF2lTRE/+ UgxP/I6g26wSwfC+7tZOiDhqQp78iMRjx/wtTSIwHxsR9sAKTWqaa7lIbdQLVJ0/ P0t8wTBER4oz4bQzVe1zgMiYwF9upLn4+0sERfYUY4DeR7DuWOCRlQhqJMoAxK1d Y01Ww49T0eAjXNsY9NhBMlyMxpN99EpST5T1OnPoQ1E3wZXQI2U= -----END CERTIFICATE-----Generated at Mon Jul 21 09:00:44 2025 by rpki-client