$ rpki-client -vvf repo-rpki.idnic.net/repo/90de231f-fb8a-427a-aa36-0a3fc972328d/0/4DEFBDD9854BE8D1E28F7330A0B802C3EE6AD1F9.mft File: 4DEFBDD9854BE8D1E28F7330A0B802C3EE6AD1F9.mft (raw, json) Hash identifier: 4gh/UEHUQuk7ToRHZt6Z5uGCCsoCC0wIK0dMDhqHhxs= Subject key identifier: 8C:D2:E4:E5:80:95:5F:D0:DC:A5:7F:5B:19:0F:19:2B:CA:0B:A2:72 Authority key identifier: 4D:EF:BD:D9:85:4B:E8:D1:E2:8F:73:30:A0:B8:02:C3:EE:6A:D1:F9 Certificate issuer: /CN=4DEFBDD9854BE8D1E28F7330A0B802C3EE6AD1F9 Certificate serial: 59C8C6C13211DDA21CA02B6CB2616D1013127EFF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DEFBDD9854BE8D1E28F7330A0B802C3EE6AD1F9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/90de231f-fb8a-427a-aa36-0a3fc972328d/0/4DEFBDD9854BE8D1E28F7330A0B802C3EE6AD1F9.mft Manifest number: 04FA Signing time: Sun 20 Jul 2025 03:40:01 +0000 Manifest this update: Sun 20 Jul 2025 03:35:01 +0000 Manifest next update: Wed 23 Jul 2025 07:51:01 +0000 Files and hashes: 1: 3130332e3132352e3131382e302f32342d3234203d3e20313338313032.roa (hash: KvTsgODxSTYXSwM09nr1mlGXAPY3uRhzMZlaVsc+OC4=) 2: 4DEFBDD9854BE8D1E28F7330A0B802C3EE6AD1F9.crl (hash: D3Y9vvU2dhZ/fI6DfuFIlmXZA9+gaH601y0ziMvtGTU=) 3: 3130332e3132352e3131372e302f32342d3234203d3e20313338313032.roa (hash: ZMeuRsHtVSwXmTeOlP2EBAn6yOUfUCueHpz1hHvcg+E=) 4: 3130332e3132352e3131392e302f32342d3234203d3e20313338313032.roa (hash: 8llNfwrUTFXUaOZxOG2FdVdGooONQqY0triO7boP8ZE=) 5: 3130332e3132352e3131362e302f32342d3234203d3e20313338313032.roa (hash: RbezRzshmathyV4EoiQ/5deOypXsD7H6MYLkfw1/pRw=) 6: 3130332e3132352e3131362e302f32322d3232203d3e20313338313032.roa (hash: y8ADkM9INdo4B5YpCY3N+ofggmxgoMYRUDnTX9TJFJg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/90de231f-fb8a-427a-aa36-0a3fc972328d/0/4DEFBDD9854BE8D1E28F7330A0B802C3EE6AD1F9.crl rsync://repo-rpki.idnic.net/repo/90de231f-fb8a-427a-aa36-0a3fc972328d/0/4DEFBDD9854BE8D1E28F7330A0B802C3EE6AD1F9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DEFBDD9854BE8D1E28F7330A0B802C3EE6AD1F9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 07:51:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:c8:c6:c1:32:11:dd:a2:1c:a0:2b:6c:b2:61:6d:10:13:12:7e:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4DEFBDD9854BE8D1E28F7330A0B802C3EE6AD1F9 Validity Not Before: Jul 20 03:35:01 2025 GMT Not After : Jul 23 07:51:01 2025 GMT Subject: CN=8CD2E4E580955FD0DCA57F5B190F192BCA0BA272 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:55:fb:db:1e:39:64:c0:73:d3:fc:9d:d4:9c: ff:f2:a2:20:d0:1c:8d:6e:7d:d3:35:34:30:9f:a6: 2a:7c:2b:c4:29:38:34:0e:22:71:75:15:06:9a:b7: e9:82:a3:f1:bf:c9:a2:06:f5:5b:c5:ce:c6:6c:bf: 51:42:3d:c2:65:e3:fd:b8:32:60:f9:b6:72:18:61: 8e:c4:93:9f:23:96:06:c2:bb:68:dc:2f:64:2a:23: 1b:c6:e4:c3:86:17:c5:5a:96:28:54:9b:14:f3:0f: 6c:ee:5c:88:63:da:5c:9f:5d:76:15:39:90:ed:6b: b8:61:1e:d2:04:e9:dc:91:af:48:44:a3:52:a7:7b: 35:6b:86:93:c5:0f:c3:c8:cb:53:f0:be:bb:fa:05: 85:c1:5f:0c:51:57:7c:bd:d1:52:1f:e6:d5:dc:85: 01:71:57:35:0e:0f:ba:af:b0:20:77:4e:4e:24:a7: 2d:ab:c6:fe:ca:7d:f6:31:9f:63:e1:64:e2:e8:75: 78:51:9f:2f:9d:1a:bb:22:84:ce:e0:75:e8:16:19: 17:da:13:32:c1:56:cf:2b:9d:3c:62:74:29:e4:60: 28:9b:29:c9:89:02:d4:f8:f7:47:8c:62:ef:87:dd: 2e:09:21:40:e9:55:f0:a1:44:e1:df:d0:0f:ac:5f: c1:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:D2:E4:E5:80:95:5F:D0:DC:A5:7F:5B:19:0F:19:2B:CA:0B:A2:72 X509v3 Authority Key Identifier: keyid:4D:EF:BD:D9:85:4B:E8:D1:E2:8F:73:30:A0:B8:02:C3:EE:6A:D1:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/90de231f-fb8a-427a-aa36-0a3fc972328d/0/4DEFBDD9854BE8D1E28F7330A0B802C3EE6AD1F9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DEFBDD9854BE8D1E28F7330A0B802C3EE6AD1F9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/90de231f-fb8a-427a-aa36-0a3fc972328d/0/4DEFBDD9854BE8D1E28F7330A0B802C3EE6AD1F9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:c3:6a:df:1e:06:1f:37:97:7e:38:0b:40:a6:eb:ab:7f:e5: a1:e8:e4:60:54:e6:4b:b7:5c:4c:71:55:95:16:2e:ca:54:17: 95:de:7f:f6:8f:b1:1a:0b:6e:37:42:d9:86:f4:54:b7:99:ae: 5c:8a:85:c3:1c:74:86:d5:9c:bf:47:42:5e:b7:0f:08:7d:f0: 0d:ec:3b:7d:9b:65:10:09:29:3a:1d:7b:bc:f9:ca:7a:3f:59: 92:1f:21:2b:e3:24:00:f0:48:cf:91:c1:08:62:52:f9:2f:03: b1:28:59:ff:2e:15:2f:42:47:ec:29:2a:b9:29:ac:19:cf:0c: 8b:0f:c8:bf:a3:26:4b:dc:93:be:23:98:39:3f:ce:6d:35:be: f5:09:81:66:c5:2f:8d:38:e9:c6:dc:3f:9b:44:e6:9f:3b:5e: 29:18:59:11:c1:3a:63:03:3a:71:37:7c:fe:df:f4:3d:58:3f: 61:fa:ee:d6:c3:77:dc:0a:9d:19:38:9b:8e:59:bd:74:59:c2: 3b:cd:d6:e5:94:72:82:10:b5:88:5b:3f:27:c6:43:99:8b:e6: d5:53:20:f0:66:1f:d9:4a:b6:9a:1c:28:52:95:54:c1:08:c5: c4:16:f2:df:9d:1f:b5:82:04:9e:d4:15:bc:d3:ce:68:79:33: a7:72:21:92 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWcjGwTIR3aIcoCtssmFtEBMSfv8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNERFRkJERDk4NTRCRThEMUUyOEY3MzMwQTBCODAyQzNF RTZBRDFGOTAeFw0yNTA3MjAwMzM1MDFaFw0yNTA3MjMwNzUxMDFaMDMxMTAvBgNV BAMTKDhDRDJFNEU1ODA5NTVGRDBEQ0E1N0Y1QjE5MEYxOTJCQ0EwQkEyNzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxVfvbHjlkwHPT/J3UnP/yoiDQ HI1ufdM1NDCfpip8K8QpODQOInF1FQaat+mCo/G/yaIG9VvFzsZsv1FCPcJl4/24 MmD5tnIYYY7Ek58jlgbCu2jcL2QqIxvG5MOGF8ValihUmxTzD2zuXIhj2lyfXXYV OZDta7hhHtIE6dyRr0hEo1KnezVrhpPFD8PIy1Pwvrv6BYXBXwxRV3y90VIf5tXc hQFxVzUOD7qvsCB3Tk4kpy2rxv7KffYxn2PhZOLodXhRny+dGrsihM7gdegWGRfa EzLBVs8rnTxidCnkYCibKcmJAtT490eMYu+H3S4JIUDpVfChROHf0A+sX8HzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjNLk5YCVX9DcpX9bGQ8ZK8oLonIwHwYDVR0j BBgwFoAUTe+92YVL6NHij3MwoLgCw+5q0fkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MGRlMjMxZi1mYjhhLTQyN2EtYWEzNi0wYTNmYzk3MjMyOGQvMC80REVGQkREOTg1 NEJFOEQxRTI4RjczMzBBMEI4MDJDM0VFNkFEMUY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNERFRkJERDk4NTRCRThEMUUyOEY3MzMwQTBCODAyQzNFRTZB RDFGOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTBkZTIzMWYtZmI4YS00MjdhLWFh MzYtMGEzZmM5NzIzMjhkLzAvNERFRkJERDk4NTRCRThEMUUyOEY3MzMwQTBCODAy QzNFRTZBRDFGOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIzDat8eBh83l344C0Cm66t/5aHo5GBU5ku3 XExxVZUWLspUF5Xef/aPsRoLbjdC2Yb0VLeZrlyKhcMcdIbVnL9HQl63Dwh98A3s O32bZRAJKTode7z5yno/WZIfISvjJADwSM+RwQhiUvkvA7EoWf8uFS9CR+wpKrkp rBnPDIsPyL+jJkvck74jmDk/zm01vvUJgWbFL4046cbcP5tE5p87XikYWRHBOmMD OnE3fP7f9D1YP2H67tbDd9wKnRk4m45ZvXRZwjvN1uWUcoIQtYhbPyfGQ5mL5tVT IPBmH9lKtpocKFKVVMEIxcQW8t+dH7WCBJ7UFbzTzmh5M6dyIZI= -----END CERTIFICATE-----Generated at Mon Jul 21 18:09:51 2025 by rpki-client