$ rpki-client -vvf repo-rpki.idnic.net/repo/81c9ce5a-6690-4901-9e0a-c27b319316be/0/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.mft File: 4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.mft (raw, json) Hash identifier: Isjdln6cdOLHDnD2JAr4cef5fnitYrC1GdTVN19b29c= Subject key identifier: B6:D1:B1:E4:D6:1E:5D:8D:FF:73:48:2A:BB:33:49:7D:65:BD:47:08 Authority key identifier: 4C:34:08:B6:E0:82:54:22:DC:2D:07:1E:49:0B:D7:CB:1F:BD:2A:3F Certificate issuer: /CN=4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F Certificate serial: 1CAA42520F4A139A2A6A6646157BCDC145F18F9E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/81c9ce5a-6690-4901-9e0a-c27b319316be/0/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.mft Manifest number: 046A Signing time: Sun 20 Jul 2025 21:22:17 +0000 Manifest this update: Sun 20 Jul 2025 21:17:17 +0000 Manifest next update: Thu 24 Jul 2025 06:20:17 +0000 Files and hashes: 1: 3130332e37312e34342e302f32332d3233203d3e203436303232.roa (hash: OTd8RtkXs2m+VF5BpzyjcTZytiPZTBuAWTpwxqI9xFY=) 2: 4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.crl (hash: rLqXYoCzhq5Ll6MXCUhvXdqWMHMjrv7ypUUGMyy0Bpo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/81c9ce5a-6690-4901-9e0a-c27b319316be/0/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.crl rsync://repo-rpki.idnic.net/repo/81c9ce5a-6690-4901-9e0a-c27b319316be/0/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 06:20:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:aa:42:52:0f:4a:13:9a:2a:6a:66:46:15:7b:cd:c1:45:f1:8f:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F Validity Not Before: Jul 20 21:17:17 2025 GMT Not After : Jul 24 06:20:17 2025 GMT Subject: CN=B6D1B1E4D61E5D8DFF73482ABB33497D65BD4708 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:72:76:91:e4:33:7d:57:7f:c5:29:4e:74:fd: b3:ca:e1:8d:be:07:80:3c:50:a7:17:e4:21:ca:c1: dc:3a:79:e7:f2:46:cc:94:61:f2:f2:2b:6b:47:57: e8:13:ec:6e:71:1a:a9:65:ec:b4:b9:a0:cc:43:3c: 68:f1:b0:27:ba:3a:67:7d:4e:a7:cd:5d:c3:a9:34: e6:c0:60:c1:56:c0:c2:2e:b9:59:a5:ce:35:5c:ce: f9:c4:d6:cf:8a:99:1b:4b:1f:e8:ba:7a:17:fa:f1: ed:5b:0e:2e:5d:44:2e:32:6f:70:88:72:4d:52:98: a1:d3:ee:d5:dd:09:de:52:65:93:74:93:3d:0b:ae: 63:9f:8a:31:e0:dc:92:be:1a:ab:38:86:05:61:02: c3:57:ef:63:37:40:08:34:86:3a:8e:4d:58:79:5f: fd:8d:0c:74:bc:0b:38:af:b2:9c:df:62:6c:af:11: d5:5c:d4:9d:39:70:50:35:e1:98:8b:de:c1:43:d9: 46:3c:0a:73:47:d9:c1:10:07:f5:fc:25:57:0e:e6: a1:4d:6d:b2:ad:c3:35:3b:7f:c6:27:9b:9c:21:34: fb:56:bc:e4:48:66:76:8e:03:4c:b5:9c:c4:fe:0f: 2f:1c:74:c6:47:7c:d3:7d:85:31:b4:07:94:fb:e3: 20:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:D1:B1:E4:D6:1E:5D:8D:FF:73:48:2A:BB:33:49:7D:65:BD:47:08 X509v3 Authority Key Identifier: keyid:4C:34:08:B6:E0:82:54:22:DC:2D:07:1E:49:0B:D7:CB:1F:BD:2A:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/81c9ce5a-6690-4901-9e0a-c27b319316be/0/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/81c9ce5a-6690-4901-9e0a-c27b319316be/0/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:fa:39:1d:41:e3:4f:af:5b:25:95:d8:28:e4:95:12:4e:6c: 55:33:2d:6a:3c:30:97:fa:c0:fa:b1:7f:5f:1e:84:ad:82:df: 74:52:15:1a:7c:30:00:e9:25:12:3f:72:a3:32:a3:ff:8c:56: 37:f0:9c:5f:e4:2d:5c:da:57:e1:31:54:57:74:4a:e0:d3:91: 1b:e7:a7:e8:76:4c:a1:65:e1:9c:f2:3c:7f:d7:e8:f5:2b:2d: 2b:9d:91:e1:91:a6:3a:5b:90:55:ec:69:44:97:1f:2b:e4:db: 11:fe:8c:c0:96:ad:64:1e:7b:bc:95:c1:89:46:95:ef:52:48: 1a:6a:c2:7c:a4:3c:ac:29:67:ae:2e:df:5b:4d:d0:33:bb:e9: ca:72:26:ad:9f:5e:e4:75:5b:64:a4:4b:f5:7d:21:8f:05:bc: 88:80:d3:ce:f3:a1:41:f9:2c:b3:c3:be:29:e4:fd:1f:1d:e2: 25:64:27:19:d7:a9:58:22:c5:95:7e:94:56:12:42:db:67:05: 81:e6:c8:53:92:13:cf:05:c9:62:24:0c:85:3a:94:05:ac:9f: 5a:54:57:ab:f4:bd:8d:0b:5e:ae:18:31:38:12:ba:80:63:b1: de:8e:40:cc:36:47:0c:ba:b9:fe:2a:e5:c8:97:94:f2:78:9d: c2:f9:32:7f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHKpCUg9KE5oqamZGFXvNwUXxj54wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEMzNDA4QjZFMDgyNTQyMkRDMkQwNzFFNDkwQkQ3Q0Ix RkJEMkEzRjAeFw0yNTA3MjAyMTE3MTdaFw0yNTA3MjQwNjIwMTdaMDMxMTAvBgNV BAMTKEI2RDFCMUU0RDYxRTVEOERGRjczNDgyQUJCMzM0OTdENjVCRDQ3MDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvcnaR5DN9V3/FKU50/bPK4Y2+ B4A8UKcX5CHKwdw6eefyRsyUYfLyK2tHV+gT7G5xGqll7LS5oMxDPGjxsCe6Omd9 TqfNXcOpNObAYMFWwMIuuVmlzjVczvnE1s+KmRtLH+i6ehf68e1bDi5dRC4yb3CI ck1SmKHT7tXdCd5SZZN0kz0LrmOfijHg3JK+Gqs4hgVhAsNX72M3QAg0hjqOTVh5 X/2NDHS8CzivspzfYmyvEdVc1J05cFA14ZiL3sFD2UY8CnNH2cEQB/X8JVcO5qFN bbKtwzU7f8Ynm5whNPtWvORIZnaOA0y1nMT+Dy8cdMZHfNN9hTG0B5T74yCpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUttGx5NYeXY3/c0gquzNJfWW9RwgwHwYDVR0j BBgwFoAUTDQItuCCVCLcLQceSQvXyx+9Kj8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MWM5Y2U1YS02NjkwLTQ5MDEtOWUwYS1jMjdiMzE5MzE2YmUvMC80QzM0MDhCNkUw ODI1NDIyREMyRDA3MUU0OTBCRDdDQjFGQkQyQTNGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEMzNDA4QjZFMDgyNTQyMkRDMkQwNzFFNDkwQkQ3Q0IxRkJE MkEzRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODFjOWNlNWEtNjY5MC00OTAxLTll MGEtYzI3YjMxOTMxNmJlLzAvNEMzNDA4QjZFMDgyNTQyMkRDMkQwNzFFNDkwQkQ3 Q0IxRkJEMkEzRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJP6OR1B40+vWyWV2CjklRJObFUzLWo8MJf6 wPqxf18ehK2C33RSFRp8MADpJRI/cqMyo/+MVjfwnF/kLVzaV+ExVFd0SuDTkRvn p+h2TKFl4ZzyPH/X6PUrLSudkeGRpjpbkFXsaUSXHyvk2xH+jMCWrWQee7yVwYlG le9SSBpqwnykPKwpZ64u31tN0DO76cpyJq2fXuR1W2SkS/V9IY8FvIiA087zoUH5 LLPDvink/R8d4iVkJxnXqVgixZV+lFYSQttnBYHmyFOSE88FyWIkDIU6lAWsn1pU V6v0vY0LXq4YMTgSuoBjsd6OQMw2Rwy6uf4q5ciXlPJ4ncL5Mn8= -----END CERTIFICATE-----Generated at Wed Jul 23 02:17:03 2025 by rpki-client