$ rpki-client -vvf repo-rpki.idnic.net/repo/81c9ce5a-6690-4901-9e0a-c27b319316be/0/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.mft File: 4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.mft (raw, json) Hash identifier: qziXAG3YIJh8RCzflg/cqKSYOy2WFVDiQbPXFYHuVUY= Subject key identifier: 68:A8:35:DC:0C:C9:49:84:88:55:6B:FC:DA:CB:8D:D2:27:98:F9:2D Authority key identifier: 4C:34:08:B6:E0:82:54:22:DC:2D:07:1E:49:0B:D7:CB:1F:BD:2A:3F Certificate issuer: /CN=4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F Certificate serial: 2FFE7BB709F7EFA7EE61518651E3731962B8C21B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/81c9ce5a-6690-4901-9e0a-c27b319316be/0/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.mft Manifest number: 046B Signing time: Wed 23 Jul 2025 06:22:18 +0000 Manifest this update: Wed 23 Jul 2025 06:17:18 +0000 Manifest next update: Sat 26 Jul 2025 10:42:18 +0000 Files and hashes: 1: 3130332e37312e34342e302f32332d3233203d3e203436303232.roa (hash: OTd8RtkXs2m+VF5BpzyjcTZytiPZTBuAWTpwxqI9xFY=) 2: 4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.crl (hash: /FTS+dwTiiW+jrzhTwqzkdDpP46Qu88BSXgIvTlJ7yg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/81c9ce5a-6690-4901-9e0a-c27b319316be/0/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.crl rsync://repo-rpki.idnic.net/repo/81c9ce5a-6690-4901-9e0a-c27b319316be/0/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 10:42:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:fe:7b:b7:09:f7:ef:a7:ee:61:51:86:51:e3:73:19:62:b8:c2:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F Validity Not Before: Jul 23 06:17:18 2025 GMT Not After : Jul 26 10:42:18 2025 GMT Subject: CN=68A835DC0CC9498488556BFCDACB8DD22798F92D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:d1:b2:4b:a8:6a:de:c7:70:e1:28:9c:15:17: 82:2d:a5:da:51:0e:33:a4:67:01:2d:ba:99:ba:1e: d5:8f:82:1f:44:3d:10:de:e6:4e:87:4a:33:9a:82: 0e:ee:a5:1b:13:e7:4e:40:cb:41:50:89:76:72:43: 1b:68:26:da:e2:cb:28:14:bb:48:89:8e:f5:36:6e: c7:af:3b:0d:ae:82:9e:c6:fb:1f:5e:49:4e:05:bb: 5e:b5:b0:12:76:75:52:0b:e5:5f:f8:b9:f3:a2:72: 14:a9:78:54:65:08:e6:2d:63:1e:ff:42:7c:5e:a3: a4:ec:cb:82:c1:0d:9a:de:cd:fc:ed:0f:19:a3:4d: bd:a6:9b:bf:2a:5d:5a:74:6c:1b:1e:1e:fa:14:6f: 8f:ab:6b:0e:2d:eb:4a:95:1f:48:1c:68:7b:a5:31: 37:80:0b:40:d1:b8:e4:4b:43:be:8e:de:fd:e9:d5: 48:c0:d6:90:59:b3:90:77:bd:23:ef:b0:60:40:1b: fa:3c:50:56:0a:2a:9b:6e:9f:64:81:f9:04:c4:08: 4d:9a:d0:0e:57:bb:13:40:33:1e:29:43:54:32:bf: 23:f6:39:35:2e:70:39:77:5c:d1:29:34:c4:80:7f: dc:45:a7:f3:05:e6:be:ec:07:02:cf:cb:89:bc:cb: 1f:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:A8:35:DC:0C:C9:49:84:88:55:6B:FC:DA:CB:8D:D2:27:98:F9:2D X509v3 Authority Key Identifier: keyid:4C:34:08:B6:E0:82:54:22:DC:2D:07:1E:49:0B:D7:CB:1F:BD:2A:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/81c9ce5a-6690-4901-9e0a-c27b319316be/0/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/81c9ce5a-6690-4901-9e0a-c27b319316be/0/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:a2:37:38:b5:6e:26:36:85:71:7d:7a:39:6a:5c:ad:44:f8: df:33:33:b5:0d:94:96:6b:c9:00:03:5a:1e:50:81:6b:23:21: cc:53:1d:9a:48:fa:8c:91:45:cf:03:e1:b0:d9:f3:86:15:cf: a3:a5:f0:c5:1b:1d:49:66:94:23:92:5d:cf:b6:8c:4f:f4:94: 0e:2b:7f:78:82:04:11:e9:cf:e8:88:04:3d:f0:68:6b:1a:45: 6d:08:3b:ef:48:a8:fe:18:28:6f:09:79:84:d5:0d:b8:cf:4c: e9:18:41:52:77:66:03:c8:18:5a:8c:f2:d5:5e:32:f5:5b:1b: d4:1c:b0:fa:ac:3f:1a:dd:51:54:92:21:89:79:2a:08:29:4e: 68:ef:50:b8:b1:05:ff:0e:2d:5d:a3:52:6f:9b:ce:3b:36:ca: a3:24:29:f8:58:9d:c1:28:67:10:ac:79:12:d5:78:a3:f3:be: 9e:14:86:57:53:f3:84:39:86:98:be:0e:97:f9:d0:10:02:52: 9b:ee:2c:60:a4:8a:04:76:d3:ea:85:1f:2c:ba:dd:4e:3d:bb: 34:cf:45:e5:c3:16:48:39:b4:72:73:78:0e:8b:7c:90:9f:3a: a5:16:72:cb:e6:a2:8d:60:18:61:a7:f7:d5:b9:47:7e:c1:cf: bb:8d:9f:3e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL/57twn376fuYVGGUeNzGWK4whswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEMzNDA4QjZFMDgyNTQyMkRDMkQwNzFFNDkwQkQ3Q0Ix RkJEMkEzRjAeFw0yNTA3MjMwNjE3MThaFw0yNTA3MjYxMDQyMThaMDMxMTAvBgNV BAMTKDY4QTgzNURDMENDOTQ5ODQ4ODU1NkJGQ0RBQ0I4REQyMjc5OEY5MkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCi0bJLqGrex3DhKJwVF4ItpdpR DjOkZwEtupm6HtWPgh9EPRDe5k6HSjOagg7upRsT505Ay0FQiXZyQxtoJtriyygU u0iJjvU2bsevOw2ugp7G+x9eSU4Fu161sBJ2dVIL5V/4ufOichSpeFRlCOYtYx7/ Qnxeo6Tsy4LBDZrezfztDxmjTb2mm78qXVp0bBseHvoUb4+raw4t60qVH0gcaHul MTeAC0DRuORLQ76O3v3p1UjA1pBZs5B3vSPvsGBAG/o8UFYKKptun2SB+QTECE2a 0A5XuxNAMx4pQ1QyvyP2OTUucDl3XNEpNMSAf9xFp/MF5r7sBwLPy4m8yx9JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaKg13AzJSYSIVWv82suN0ieY+S0wHwYDVR0j BBgwFoAUTDQItuCCVCLcLQceSQvXyx+9Kj8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MWM5Y2U1YS02NjkwLTQ5MDEtOWUwYS1jMjdiMzE5MzE2YmUvMC80QzM0MDhCNkUw ODI1NDIyREMyRDA3MUU0OTBCRDdDQjFGQkQyQTNGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEMzNDA4QjZFMDgyNTQyMkRDMkQwNzFFNDkwQkQ3Q0IxRkJE MkEzRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODFjOWNlNWEtNjY5MC00OTAxLTll MGEtYzI3YjMxOTMxNmJlLzAvNEMzNDA4QjZFMDgyNTQyMkRDMkQwNzFFNDkwQkQ3 Q0IxRkJEMkEzRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGOiNzi1biY2hXF9ejlqXK1E+N8zM7UNlJZr yQADWh5QgWsjIcxTHZpI+oyRRc8D4bDZ84YVz6Ol8MUbHUlmlCOSXc+2jE/0lA4r f3iCBBHpz+iIBD3waGsaRW0IO+9IqP4YKG8JeYTVDbjPTOkYQVJ3ZgPIGFqM8tVe MvVbG9QcsPqsPxrdUVSSIYl5KggpTmjvULixBf8OLV2jUm+bzjs2yqMkKfhYncEo ZxCseRLVeKPzvp4UhldT84Q5hpi+Dpf50BACUpvuLGCkigR20+qFHyy63U49uzTP ReXDFkg5tHJzeA6LfJCfOqUWcsvmoo1gGGGn99W5R37Bz7uNnz4= -----END CERTIFICATE-----Generated at Fri Jul 25 07:03:13 2025 by rpki-client