$ rpki-client -vvf repo-rpki.idnic.net/repo/85f2c66c-1f87-4d98-a467-3218b645b3ac/0/4C44F6F543BDBB858D3656D41A36660407672BDE.mft File: 4C44F6F543BDBB858D3656D41A36660407672BDE.mft (raw, json) Hash identifier: 2TiS5m9MlZMBjIpqWZAfdjIrJcku2mBXqv18iBYcw8o= Subject key identifier: C8:45:82:A6:63:34:B7:4D:B6:6F:9D:11:E2:AA:11:79:50:C9:97:30 Authority key identifier: 4C:44:F6:F5:43:BD:BB:85:8D:36:56:D4:1A:36:66:04:07:67:2B:DE Certificate issuer: /CN=4C44F6F543BDBB858D3656D41A36660407672BDE Certificate serial: 7DEEB42559F68530230E6074E5879A8073144A00 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C44F6F543BDBB858D3656D41A36660407672BDE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/85f2c66c-1f87-4d98-a467-3218b645b3ac/0/4C44F6F543BDBB858D3656D41A36660407672BDE.mft Manifest number: 0241 Signing time: Sun 20 Jul 2025 16:50:58 +0000 Manifest this update: Sun 20 Jul 2025 16:45:58 +0000 Manifest next update: Wed 23 Jul 2025 17:40:58 +0000 Files and hashes: 1: 3130332e32392e3138352e302f32342d3234203d3e203536323630.roa (hash: rlZNRe9QwPDxRgCp5O054ihVTvOafRmbaG0Hj+9kO5Q=) 2: 3130332e31312e3130372e302f32342d3234203d3e203538343832.roa (hash: 4O8b726/lpcYZIzCbq+BOqW7rrh6L+bwyN5I34NP9Oc=) 3: 3130332e32392e3138342e302f32332d3233203d3e203536323630.roa (hash: 8Rg4KVnY/32fl4fG4uMRblRtiju0uviBp14XLoqECcw=) 4: 4C44F6F543BDBB858D3656D41A36660407672BDE.crl (hash: Cl5ZttiIWE8+D1jmDvcbUcr7ynryTtL3gDfJmEdWNsc=) 5: 3130332e32392e3138342e302f32342d3234203d3e203536323630.roa (hash: PxQIpqbQq2jLhpu3Xowhx5fys0b4IY/JPo7Tka0HdFo=) 6: 3130332e31312e3130362e302f32342d3234203d3e203536323630.roa (hash: /oNKkVvACpGRwEaHQtz+NrUuOBWsbNWp6QRHeV0MPMU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/85f2c66c-1f87-4d98-a467-3218b645b3ac/0/4C44F6F543BDBB858D3656D41A36660407672BDE.crl rsync://repo-rpki.idnic.net/repo/85f2c66c-1f87-4d98-a467-3218b645b3ac/0/4C44F6F543BDBB858D3656D41A36660407672BDE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C44F6F543BDBB858D3656D41A36660407672BDE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 17:40:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:ee:b4:25:59:f6:85:30:23:0e:60:74:e5:87:9a:80:73:14:4a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4C44F6F543BDBB858D3656D41A36660407672BDE Validity Not Before: Jul 20 16:45:58 2025 GMT Not After : Jul 23 17:40:58 2025 GMT Subject: CN=C84582A66334B74DB66F9D11E2AA117950C99730 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:31:04:a2:13:06:51:64:97:69:71:1d:4f:a1: 70:2a:fe:c1:f2:3b:81:1b:5f:eb:77:7f:fa:31:8f: fb:02:ed:f6:11:13:c1:61:ea:ec:26:9e:e9:72:14: ad:a0:2c:16:f1:45:b0:41:3c:1d:64:b3:9e:77:6f: 91:be:12:c1:ab:e7:2c:0d:03:a6:78:0e:3e:98:47: 97:ae:c2:53:88:0d:7d:a3:63:f1:22:0e:f7:07:17: 83:2f:b2:9b:fb:03:3a:1b:4a:bc:43:1a:a7:c0:0d: c6:10:ec:42:a8:02:be:65:5e:9a:7f:e1:74:c1:ec: ea:91:b7:7b:fa:c5:8d:27:b5:51:c9:a7:18:02:62: b1:56:12:7e:95:44:73:08:68:17:de:cf:bf:21:b7: bc:f4:39:16:7a:0c:62:44:f8:47:34:0c:f5:2f:24: 76:b2:1a:33:55:20:27:bc:0a:db:cc:2c:a7:41:3a: f2:6a:79:16:4a:b3:4a:db:cc:ac:f3:f8:5d:e3:36: e8:49:c4:58:d5:ec:1e:79:22:5e:04:2b:65:53:1b: 18:d0:8e:76:3e:45:0e:2b:4d:f9:5a:a1:e2:ca:96: cb:39:ec:04:af:ea:6e:ce:8c:55:7e:9f:a0:6d:67: a7:aa:74:31:ba:7f:5a:58:27:63:45:3e:92:64:ae: 87:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:45:82:A6:63:34:B7:4D:B6:6F:9D:11:E2:AA:11:79:50:C9:97:30 X509v3 Authority Key Identifier: keyid:4C:44:F6:F5:43:BD:BB:85:8D:36:56:D4:1A:36:66:04:07:67:2B:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/85f2c66c-1f87-4d98-a467-3218b645b3ac/0/4C44F6F543BDBB858D3656D41A36660407672BDE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C44F6F543BDBB858D3656D41A36660407672BDE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/85f2c66c-1f87-4d98-a467-3218b645b3ac/0/4C44F6F543BDBB858D3656D41A36660407672BDE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:d0:2e:2b:9c:e9:4a:8b:71:59:8c:c5:34:6a:0e:fb:69:fa: 3c:67:91:61:03:c1:9f:3a:32:f5:f3:88:3b:01:25:fd:8f:4b: b8:19:af:20:a9:0d:04:e4:e7:46:de:65:86:11:85:f4:74:52: 37:66:86:8a:e4:b5:80:35:4f:2b:b6:3c:83:78:04:92:37:0c: 70:0e:06:92:b4:65:d3:45:2a:49:7e:c7:65:41:64:f8:99:88: 1d:9b:8c:71:80:9c:87:bb:ca:08:1b:32:9b:53:27:63:8f:f3: 84:dd:41:bc:ae:64:c0:47:c1:8b:d9:7e:9d:a8:3b:bc:05:24: 9d:04:5e:1c:9f:6c:17:8e:c9:fb:a9:32:53:30:d0:b9:61:a0: 75:6b:6f:03:bd:c4:32:c8:af:69:85:20:e8:80:21:0d:ac:77: 4d:da:40:ca:3f:53:c0:77:4f:fe:95:a1:0f:d7:ce:d4:fd:54: 60:18:7f:98:1b:40:29:2a:1f:48:c0:1c:dd:50:bf:20:a9:14: 3a:ed:13:00:14:ff:30:c2:31:76:d4:18:77:3c:a8:58:fe:b4: 7e:0a:b2:93:1c:42:0b:09:bf:60:96:77:e7:71:28:33:39:48: fe:ae:3a:0a:bd:bf:f4:83:0f:7b:e4:98:1d:b9:09:9a:28:e8: d6:93:bc:1d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfe60JVn2hTAjDmB05YeagHMUSgAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEM0NEY2RjU0M0JEQkI4NThEMzY1NkQ0MUEzNjY2MDQw NzY3MkJERTAeFw0yNTA3MjAxNjQ1NThaFw0yNTA3MjMxNzQwNThaMDMxMTAvBgNV BAMTKEM4NDU4MkE2NjMzNEI3NERCNjZGOUQxMUUyQUExMTc5NTBDOTk3MzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5MQSiEwZRZJdpcR1PoXAq/sHy O4EbX+t3f/oxj/sC7fYRE8Fh6uwmnulyFK2gLBbxRbBBPB1ks553b5G+EsGr5ywN A6Z4Dj6YR5euwlOIDX2jY/EiDvcHF4Mvspv7AzobSrxDGqfADcYQ7EKoAr5lXpp/ 4XTB7OqRt3v6xY0ntVHJpxgCYrFWEn6VRHMIaBfez78ht7z0ORZ6DGJE+Ec0DPUv JHayGjNVICe8CtvMLKdBOvJqeRZKs0rbzKzz+F3jNuhJxFjV7B55Il4EK2VTGxjQ jnY+RQ4rTflaoeLKlss57ASv6m7OjFV+n6BtZ6eqdDG6f1pYJ2NFPpJkrocDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyEWCpmM0t022b50R4qoReVDJlzAwHwYDVR0j BBgwFoAUTET29UO9u4WNNlbUGjZmBAdnK94wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NWYyYzY2Yy0xZjg3LTRkOTgtYTQ2Ny0zMjE4YjY0NWIzYWMvMC80QzQ0RjZGNTQz QkRCQjg1OEQzNjU2RDQxQTM2NjYwNDA3NjcyQkRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEM0NEY2RjU0M0JEQkI4NThEMzY1NkQ0MUEzNjY2MDQwNzY3 MkJERS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODVmMmM2NmMtMWY4Ny00ZDk4LWE0 NjctMzIxOGI2NDViM2FjLzAvNEM0NEY2RjU0M0JEQkI4NThEMzY1NkQ0MUEzNjY2 MDQwNzY3MkJERS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ/QLiuc6UqLcVmMxTRqDvtp+jxnkWEDwZ86 MvXziDsBJf2PS7gZryCpDQTk50beZYYRhfR0UjdmhorktYA1Tyu2PIN4BJI3DHAO BpK0ZdNFKkl+x2VBZPiZiB2bjHGAnIe7yggbMptTJ2OP84TdQbyuZMBHwYvZfp2o O7wFJJ0EXhyfbBeOyfupMlMw0LlhoHVrbwO9xDLIr2mFIOiAIQ2sd03aQMo/U8B3 T/6VoQ/XztT9VGAYf5gbQCkqH0jAHN1QvyCpFDrtEwAU/zDCMXbUGHc8qFj+tH4K spMcQgsJv2CWd+dxKDM5SP6uOgq9v/SDD3vkmB25CZoo6NaTvB0= -----END CERTIFICATE-----Generated at Mon Jul 21 02:10:04 2025 by rpki-client