$ rpki-client -vvf repo-rpki.idnic.net/repo/960f8461-bb2c-4d3e-a5be-700939427c8c/0/4BC6236908AF9F36A8057E2BB1A5B34BCD6B7DBA.mft File: 4BC6236908AF9F36A8057E2BB1A5B34BCD6B7DBA.mft (raw, json) Hash identifier: Qk8XubJCrGJA/DoTM/6PDbIFVwumJ+IxqwezVhlJ1ok= Subject key identifier: 9F:B7:5D:73:69:B6:AB:D0:98:97:A0:DA:2E:19:9A:C5:DC:F2:D9:B1 Authority key identifier: 4B:C6:23:69:08:AF:9F:36:A8:05:7E:2B:B1:A5:B3:4B:CD:6B:7D:BA Certificate issuer: /CN=4BC6236908AF9F36A8057E2BB1A5B34BCD6B7DBA Certificate serial: 17542CA4E68BD2335F1A729B4C921269C7A1DCE3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BC6236908AF9F36A8057E2BB1A5B34BCD6B7DBA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/960f8461-bb2c-4d3e-a5be-700939427c8c/0/4BC6236908AF9F36A8057E2BB1A5B34BCD6B7DBA.mft Manifest number: 0186 Signing time: Sun 20 Jul 2025 08:41:30 +0000 Manifest this update: Sun 20 Jul 2025 08:36:30 +0000 Manifest next update: Wed 23 Jul 2025 17:15:30 +0000 Files and hashes: 1: 4BC6236908AF9F36A8057E2BB1A5B34BCD6B7DBA.crl (hash: w16R8glRmoy0RG7rHzZ3GTOfqC2IkVsRqGSy9L/KYpQ=) 2: 3130332e3139392e3131372e302f32342d3234203d3e20313530393234.roa (hash: 6oB2NEdb1J8wzFdKjlXlM7HaXvyVJb+FJhi1JoqHPbo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/960f8461-bb2c-4d3e-a5be-700939427c8c/0/4BC6236908AF9F36A8057E2BB1A5B34BCD6B7DBA.crl rsync://repo-rpki.idnic.net/repo/960f8461-bb2c-4d3e-a5be-700939427c8c/0/4BC6236908AF9F36A8057E2BB1A5B34BCD6B7DBA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BC6236908AF9F36A8057E2BB1A5B34BCD6B7DBA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 17:15:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:54:2c:a4:e6:8b:d2:33:5f:1a:72:9b:4c:92:12:69:c7:a1:dc:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4BC6236908AF9F36A8057E2BB1A5B34BCD6B7DBA Validity Not Before: Jul 20 08:36:30 2025 GMT Not After : Jul 23 17:15:30 2025 GMT Subject: CN=9FB75D7369B6ABD09897A0DA2E199AC5DCF2D9B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:2a:72:2c:d1:33:d8:81:23:b8:6e:15:8d:83: 7b:5e:34:b6:bb:77:db:cd:ee:9a:36:a4:19:5e:8c: cb:f0:30:59:be:bd:3e:8c:26:42:75:c6:7c:62:30: f8:ce:43:c6:83:89:37:fc:f7:c4:48:a0:e9:1b:f5: d4:cc:33:bd:a0:e4:e1:2e:eb:93:1c:f0:a9:ce:ae: e2:31:0b:30:bb:35:ff:bd:44:22:bd:4a:5b:2d:13: 0d:dd:ff:2c:9d:71:ec:43:21:23:ea:03:9f:46:1d: d3:4b:ae:9f:8f:42:d1:a9:a0:1b:45:06:08:54:cb: 9e:72:75:e2:7d:e1:d9:ee:4a:26:43:43:b9:01:b8: 29:4e:82:ad:ba:2f:6a:61:26:db:c8:08:20:39:f8: 27:86:e0:b0:62:7a:2f:80:ed:b5:a1:d1:e1:d5:98: 5d:66:46:2e:b1:57:a9:56:11:4b:c9:97:0a:4e:98: 2c:ce:7f:0d:41:05:d7:c2:13:39:a2:5a:07:84:f5: 21:c1:5f:49:ff:58:3c:a7:37:50:01:46:8f:37:10: 35:2e:2e:59:00:a3:61:a7:83:32:e2:8c:79:d1:ad: 1a:dd:f5:1d:33:02:43:7e:2e:2f:7d:d0:74:6b:06: 96:ac:4b:85:1f:45:45:3d:55:96:4a:6c:95:61:52: fc:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:B7:5D:73:69:B6:AB:D0:98:97:A0:DA:2E:19:9A:C5:DC:F2:D9:B1 X509v3 Authority Key Identifier: keyid:4B:C6:23:69:08:AF:9F:36:A8:05:7E:2B:B1:A5:B3:4B:CD:6B:7D:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/960f8461-bb2c-4d3e-a5be-700939427c8c/0/4BC6236908AF9F36A8057E2BB1A5B34BCD6B7DBA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BC6236908AF9F36A8057E2BB1A5B34BCD6B7DBA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/960f8461-bb2c-4d3e-a5be-700939427c8c/0/4BC6236908AF9F36A8057E2BB1A5B34BCD6B7DBA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption da:38:49:a7:28:32:f0:c3:fd:d2:54:32:fc:47:4f:b8:58:f8: 5c:ad:78:d0:5e:ab:e9:ef:bf:cd:16:87:67:18:d3:a4:0f:ac: ef:66:8c:3d:df:58:c2:b2:f8:66:bc:6d:3e:ef:93:4b:05:0f: eb:6e:0e:5f:f4:b7:ec:50:d5:cb:7c:6d:01:36:e3:08:47:b7: 09:e9:8e:d4:b0:3c:5d:96:3d:99:80:ae:b8:78:14:ca:01:44: ca:fb:04:62:38:33:ef:76:71:81:32:f8:b9:c9:b1:95:3d:1b: 42:a0:2e:e7:da:20:f3:c9:5a:02:64:30:c9:8f:c2:9c:ec:c1: 4a:51:e3:0e:a9:ff:a7:93:d1:20:54:45:27:15:ff:13:c4:11: 23:04:4b:73:87:e9:cc:83:a0:ef:60:40:f1:6a:9a:7f:13:1d: 58:03:f9:d5:70:5b:97:70:b1:f9:3b:0f:80:5a:c4:6f:b1:4c: 9a:f4:9e:72:f3:75:12:05:11:6a:19:50:64:00:f0:1a:70:9a: b2:1d:01:bf:54:45:5a:94:82:0a:3c:bc:bf:0a:07:9f:68:c4: 03:00:9d:78:31:24:2c:77:e2:b9:7d:ed:b7:04:b4:f7:04:ee: 3e:d3:73:51:dc:fb:65:db:3f:54:ce:65:2e:b3:8e:94:96:20: 21:76:46:d9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF1QspOaL0jNfGnKbTJISaceh3OMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEJDNjIzNjkwOEFGOUYzNkE4MDU3RTJCQjFBNUIzNEJD RDZCN0RCQTAeFw0yNTA3MjAwODM2MzBaFw0yNTA3MjMxNzE1MzBaMDMxMTAvBgNV BAMTKDlGQjc1RDczNjlCNkFCRDA5ODk3QTBEQTJFMTk5QUM1RENGMkQ5QjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgKnIs0TPYgSO4bhWNg3teNLa7 d9vN7po2pBlejMvwMFm+vT6MJkJ1xnxiMPjOQ8aDiTf898RIoOkb9dTMM72g5OEu 65Mc8KnOruIxCzC7Nf+9RCK9SlstEw3d/yydcexDISPqA59GHdNLrp+PQtGpoBtF BghUy55ydeJ94dnuSiZDQ7kBuClOgq26L2phJtvICCA5+CeG4LBiei+A7bWh0eHV mF1mRi6xV6lWEUvJlwpOmCzOfw1BBdfCEzmiWgeE9SHBX0n/WDynN1ABRo83EDUu LlkAo2GngzLijHnRrRrd9R0zAkN+Li990HRrBpasS4UfRUU9VZZKbJVhUvxNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUn7ddc2m2q9CYl6DaLhmaxdzy2bEwHwYDVR0j BBgwFoAUS8YjaQivnzaoBX4rsaWzS81rfbowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NjBmODQ2MS1iYjJjLTRkM2UtYTViZS03MDA5Mzk0MjdjOGMvMC80QkM2MjM2OTA4 QUY5RjM2QTgwNTdFMkJCMUE1QjM0QkNENkI3REJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEJDNjIzNjkwOEFGOUYzNkE4MDU3RTJCQjFBNUIzNEJDRDZC N0RCQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTYwZjg0NjEtYmIyYy00ZDNlLWE1 YmUtNzAwOTM5NDI3YzhjLzAvNEJDNjIzNjkwOEFGOUYzNkE4MDU3RTJCQjFBNUIz NEJDRDZCN0RCQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANo4SacoMvDD/dJUMvxHT7hY+FyteNBeq+nv v80Wh2cY06QPrO9mjD3fWMKy+Ga8bT7vk0sFD+tuDl/0t+xQ1ct8bQE24whHtwnp jtSwPF2WPZmArrh4FMoBRMr7BGI4M+92cYEy+LnJsZU9G0KgLufaIPPJWgJkMMmP wpzswUpR4w6p/6eT0SBURScV/xPEESMES3OH6cyDoO9gQPFqmn8THVgD+dVwW5dw sfk7D4BaxG+xTJr0nnLzdRIFEWoZUGQA8BpwmrIdAb9URVqUggo8vL8KB59oxAMA nXgxJCx34rl97bcEtPcE7j7Tc1Hc+2XbP1TOZS6zjpSWICF2Rtk= -----END CERTIFICATE-----Generated at Mon Jul 21 23:24:55 2025 by rpki-client