$ rpki-client -vvf repo-rpki.idnic.net/repo/9a2bfe9a-3823-44e9-97c0-2191a56bafd3/0/4F022459BA46CF30700E070671C752B44729E249.mft File: 4F022459BA46CF30700E070671C752B44729E249.mft (raw, json) Hash identifier: jG/Obxcsqvwpc1uqAeyhLlBuhW1XNQ2w4Z6jhQei3NQ= Subject key identifier: 9A:44:56:5E:74:70:D3:25:23:8B:AA:D8:74:96:50:3E:89:D9:CA:0A Authority key identifier: 4F:02:24:59:BA:46:CF:30:70:0E:07:06:71:C7:52:B4:47:29:E2:49 Certificate issuer: /CN=4F022459BA46CF30700E070671C752B44729E249 Certificate serial: 23DA935682FEC3BB2E203BB9E0937CBFF5CACE18 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F022459BA46CF30700E070671C752B44729E249.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9a2bfe9a-3823-44e9-97c0-2191a56bafd3/0/4F022459BA46CF30700E070671C752B44729E249.mft Manifest number: 0194 Signing time: Sun 20 Jul 2025 08:42:08 +0000 Manifest this update: Sun 20 Jul 2025 08:37:08 +0000 Manifest next update: Wed 23 Jul 2025 10:34:08 +0000 Files and hashes: 1: 3130332e36312e3233342e302f32342d3234203d3e20313530353130.roa (hash: VvIxYiO1vpW4N2M0c206efZBd+dmDTRrTwPYKqia/UQ=) 2: 4F022459BA46CF30700E070671C752B44729E249.crl (hash: /rtHsc03QeRTyJexvVUJuzxPY19kVfR/jykdL7+e1yM=) 3: 3130332e36312e3233352e302f32342d3234203d3e20313530353130.roa (hash: OWWwKr6VgMTRSl2gHvmJwedkDbcvu1lGUMF7l6U0D14=) 4: 3130332e36312e3233342e302f32332d3233203d3e20313530353130.roa (hash: eReb0WjJwBofXwNbDwmRqsCz1oLf4D/ET0XbS0nqqnk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9a2bfe9a-3823-44e9-97c0-2191a56bafd3/0/4F022459BA46CF30700E070671C752B44729E249.crl rsync://repo-rpki.idnic.net/repo/9a2bfe9a-3823-44e9-97c0-2191a56bafd3/0/4F022459BA46CF30700E070671C752B44729E249.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F022459BA46CF30700E070671C752B44729E249.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 10:34:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:da:93:56:82:fe:c3:bb:2e:20:3b:b9:e0:93:7c:bf:f5:ca:ce:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4F022459BA46CF30700E070671C752B44729E249 Validity Not Before: Jul 20 08:37:08 2025 GMT Not After : Jul 23 10:34:08 2025 GMT Subject: CN=9A44565E7470D325238BAAD87496503E89D9CA0A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:14:52:5b:92:56:20:85:45:94:ea:ea:25:b7: 0f:a6:aa:d2:25:55:f1:29:4f:2e:45:23:e5:98:ba: 66:09:e6:c8:da:8f:72:24:77:41:d5:0e:52:cc:59: 54:97:a6:9d:bf:16:b1:6c:fc:34:79:af:8d:11:98: 5d:6c:ae:fa:e6:c9:8c:0e:3c:4d:ef:ec:7f:d8:75: 6c:92:f3:bb:7b:dd:dc:52:f3:05:90:c5:fe:be:a4: 57:2a:d0:b7:b1:78:12:6c:ee:a6:5e:dd:ad:d4:bd: d6:e8:0e:be:44:91:47:ea:14:4f:6e:6f:99:e9:d5: b0:c4:c2:31:05:05:d3:a1:e8:ef:15:c3:fd:a0:bb: 11:67:63:7a:0e:4b:0a:50:55:cb:9a:a3:50:a3:62: ef:88:13:ed:8b:e9:fb:7d:13:38:b7:bc:0a:1e:c4: 00:e1:f1:9f:42:52:54:06:44:15:97:7c:50:45:f0: b3:71:07:57:2e:db:58:7c:c7:3d:b8:da:ea:71:91: b9:ce:e5:a8:5a:55:d9:4a:11:a3:19:38:f4:5a:bb: 42:dc:fa:ec:e8:0f:94:90:d7:46:47:d4:73:24:17: e6:df:0b:fd:12:29:6a:96:08:80:5d:98:4d:2a:1c: 95:58:e2:54:ff:e7:6f:1f:6b:20:d3:5d:a0:aa:f9: d7:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:44:56:5E:74:70:D3:25:23:8B:AA:D8:74:96:50:3E:89:D9:CA:0A X509v3 Authority Key Identifier: keyid:4F:02:24:59:BA:46:CF:30:70:0E:07:06:71:C7:52:B4:47:29:E2:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9a2bfe9a-3823-44e9-97c0-2191a56bafd3/0/4F022459BA46CF30700E070671C752B44729E249.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F022459BA46CF30700E070671C752B44729E249.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9a2bfe9a-3823-44e9-97c0-2191a56bafd3/0/4F022459BA46CF30700E070671C752B44729E249.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:e7:96:46:05:a8:4a:bf:9e:ee:f4:c7:1a:5d:0c:15:e3:81: fc:0a:87:59:5d:16:bb:70:ea:74:4d:4a:7d:d6:a5:e8:63:38: 98:4a:96:bb:38:f8:b7:5e:23:11:72:93:ab:90:24:2c:d2:5b: 86:75:62:3f:23:1d:d4:5b:fa:3f:95:3e:21:fd:a5:ab:71:3c: 20:76:fb:04:1e:0e:85:a6:a3:08:0d:f6:4d:d7:6e:e5:d1:ef: f9:f1:bb:2c:65:82:da:57:d6:d1:59:bc:ae:63:07:75:67:98: 51:92:8c:6c:9c:30:4a:13:6d:03:e0:7b:22:0c:57:f1:3e:97: b8:fe:8b:90:82:f0:72:1f:3f:5f:cd:a6:4a:41:35:b5:d5:c3: af:94:11:44:b7:19:8b:1f:ad:b2:93:ae:a5:0f:88:47:ce:23: f6:86:85:f3:1e:6d:d2:9d:d4:fe:1e:4d:c8:77:5f:08:e5:a7: 2c:97:6d:83:d3:28:99:e4:79:ff:1e:56:75:3a:b3:b2:e1:d8: 05:89:a6:97:eb:3c:8e:10:65:3a:6d:e7:b7:53:93:af:42:aa: b4:8c:09:5e:ba:c5:04:03:eb:60:ed:d5:dd:5b:82:1c:2b:f7: 05:11:6d:c0:95:2e:49:5c:bd:69:ba:7d:ad:f3:f1:c3:ab:1e: 33:ad:d4:36 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI9qTVoL+w7suIDu54JN8v/XKzhgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEYwMjI0NTlCQTQ2Q0YzMDcwMEUwNzA2NzFDNzUyQjQ0 NzI5RTI0OTAeFw0yNTA3MjAwODM3MDhaFw0yNTA3MjMxMDM0MDhaMDMxMTAvBgNV BAMTKDlBNDQ1NjVFNzQ3MEQzMjUyMzhCQUFEODc0OTY1MDNFODlEOUNBMEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRFFJbklYghUWU6uoltw+mqtIl VfEpTy5FI+WYumYJ5sjaj3Ikd0HVDlLMWVSXpp2/FrFs/DR5r40RmF1srvrmyYwO PE3v7H/YdWyS87t73dxS8wWQxf6+pFcq0LexeBJs7qZe3a3UvdboDr5EkUfqFE9u b5np1bDEwjEFBdOh6O8Vw/2guxFnY3oOSwpQVcuao1CjYu+IE+2L6ft9Ezi3vAoe xADh8Z9CUlQGRBWXfFBF8LNxB1cu21h8xz242upxkbnO5ahaVdlKEaMZOPRau0Lc +uzoD5SQ10ZH1HMkF+bfC/0SKWqWCIBdmE0qHJVY4lT/528fayDTXaCq+dfdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmkRWXnRw0yUji6rYdJZQPonZygowHwYDVR0j BBgwFoAUTwIkWbpGzzBwDgcGccdStEcp4kkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YTJiZmU5YS0zODIzLTQ0ZTktOTdjMC0yMTkxYTU2YmFmZDMvMC80RjAyMjQ1OUJB NDZDRjMwNzAwRTA3MDY3MUM3NTJCNDQ3MjlFMjQ5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEYwMjI0NTlCQTQ2Q0YzMDcwMEUwNzA2NzFDNzUyQjQ0NzI5 RTI0OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWEyYmZlOWEtMzgyMy00NGU5LTk3 YzAtMjE5MWE1NmJhZmQzLzAvNEYwMjI0NTlCQTQ2Q0YzMDcwMEUwNzA2NzFDNzUy QjQ0NzI5RTI0OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMPnlkYFqEq/nu70xxpdDBXjgfwKh1ldFrtw 6nRNSn3WpehjOJhKlrs4+LdeIxFyk6uQJCzSW4Z1Yj8jHdRb+j+VPiH9patxPCB2 +wQeDoWmowgN9k3XbuXR7/nxuyxlgtpX1tFZvK5jB3VnmFGSjGycMEoTbQPgeyIM V/E+l7j+i5CC8HIfP1/NpkpBNbXVw6+UEUS3GYsfrbKTrqUPiEfOI/aGhfMebdKd 1P4eTch3XwjlpyyXbYPTKJnkef8eVnU6s7Lh2AWJppfrPI4QZTpt57dTk69CqrSM CV66xQQD62Dt1d1bghwr9wURbcCVLklcvWm6fa3z8cOrHjOt1DY= -----END CERTIFICATE-----Generated at Mon Jul 21 23:23:35 2025 by rpki-client