$ rpki-client -vvf repo-rpki.idnic.net/repo/9eab0a01-8ee4-4825-840d-112daef0aca8/0/4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.mft File: 4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.mft (raw, json) Hash identifier: X0qvXCU/DJ00YlPyF3R+//L0cWF6wq1yXhb2VGe4nYs= Subject key identifier: 39:F5:03:DC:B9:FA:47:5C:5D:46:6F:B6:DC:5C:C5:06:20:50:10:FE Authority key identifier: 4E:2A:A9:ED:35:DB:0F:27:6A:5F:F0:D4:02:0D:BE:A1:3E:04:C6:23 Certificate issuer: /CN=4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623 Certificate serial: 50EBE2C52BFA4C63D6DA2B557A90905398FD155E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9eab0a01-8ee4-4825-840d-112daef0aca8/0/4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.mft Manifest number: 018E Signing time: Mon 21 Jul 2025 09:11:28 +0000 Manifest this update: Mon 21 Jul 2025 09:06:28 +0000 Manifest next update: Thu 24 Jul 2025 12:20:28 +0000 Files and hashes: 1: 323030313a6466303a6134303a3a2f34382d3438203d3e20313439333532.roa (hash: lidUKpIUI42q8veE3vysCaBMTq0HxAiYVl6H5XafxIU=) 2: 3130332e3137342e31342e302f32332d3234203d3e20313439333532.roa (hash: cJjmG0CdhjaR+QAVA5ZLIDFXiWwjI5yTIKuxLgCeRRg=) 3: 4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.crl (hash: pD796NwMXt03QRTE3DKnM2fSh+BAHDehSoUiF45EQe4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9eab0a01-8ee4-4825-840d-112daef0aca8/0/4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.crl rsync://repo-rpki.idnic.net/repo/9eab0a01-8ee4-4825-840d-112daef0aca8/0/4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 12:20:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:eb:e2:c5:2b:fa:4c:63:d6:da:2b:55:7a:90:90:53:98:fd:15:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623 Validity Not Before: Jul 21 09:06:28 2025 GMT Not After : Jul 24 12:20:28 2025 GMT Subject: CN=39F503DCB9FA475C5D466FB6DC5CC506205010FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ea:cb:7b:aa:bf:1a:71:6f:9e:3c:4a:47:85: 8b:b1:ba:ab:cc:e7:80:35:d8:d6:4c:0a:f4:bf:12: a8:fe:9d:71:ac:ad:56:63:9b:04:4b:95:0a:80:c8: b3:65:51:59:bd:8c:25:de:a4:88:80:42:a3:08:2e: 18:b7:21:ca:e9:3e:17:57:e3:4f:00:1e:b2:4b:a5: 63:9a:3f:3f:53:4e:ad:8e:0d:f1:90:46:a5:4f:e1: 64:4e:0f:b2:9c:17:9f:7a:b3:34:aa:b1:92:4b:5c: e3:e2:2e:6e:d3:b3:16:4f:dc:21:84:4d:42:bb:a8: 9f:a5:23:42:d5:a6:e8:e2:15:43:69:96:6f:0e:d4: de:e4:64:de:37:68:3a:b4:60:25:98:62:fd:a5:d7: 24:89:37:d6:6f:e8:a3:1f:81:e8:0c:b6:6b:3a:8f: be:7e:74:57:b5:42:00:b0:d3:05:7e:4d:0d:a4:c8: 3b:b5:44:07:2e:1e:e9:a9:3e:f4:5b:d7:fd:c4:42: fd:28:6d:a3:ad:ed:1a:a6:8f:90:6f:96:db:ef:76: 60:2a:17:0a:a8:54:02:fa:3a:71:d0:25:da:90:5b: 6b:ac:a9:6f:cc:b6:b8:5b:b1:54:d2:71:1d:0a:03: 26:f2:16:af:d5:ea:cc:76:6e:b5:53:51:69:67:97: ae:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:F5:03:DC:B9:FA:47:5C:5D:46:6F:B6:DC:5C:C5:06:20:50:10:FE X509v3 Authority Key Identifier: keyid:4E:2A:A9:ED:35:DB:0F:27:6A:5F:F0:D4:02:0D:BE:A1:3E:04:C6:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9eab0a01-8ee4-4825-840d-112daef0aca8/0/4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9eab0a01-8ee4-4825-840d-112daef0aca8/0/4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:39:ec:3d:97:f3:73:b6:29:f2:6c:04:20:ba:e6:23:ea:b8: 84:d4:5d:97:f8:fd:32:93:4e:60:15:ce:47:27:d1:88:72:b6: da:a3:60:70:78:41:c6:2b:5b:d3:a8:40:63:a8:93:5f:cf:4f: ba:68:18:2d:75:2b:96:97:17:9f:e6:ec:b2:45:41:41:14:f8: 90:42:40:c5:3d:a3:c5:f4:98:19:ec:b5:41:c9:35:a9:6b:db: 21:fc:81:40:a0:be:3c:cb:85:27:69:80:2a:08:2e:b4:d1:b1: ec:66:e8:9b:52:0c:95:3e:7e:38:28:f4:6d:76:95:a7:24:8e: fb:ff:d0:23:1f:41:63:d7:72:33:dd:67:27:2a:7f:c1:9b:91: ea:5c:97:5e:78:56:92:ec:67:e4:99:5c:19:76:bd:33:2f:f9: ee:5b:e0:13:49:b7:6a:de:01:61:b1:d7:60:6b:dc:c0:31:b7: 6d:16:79:55:9c:88:00:72:48:0f:25:74:22:11:db:8a:5d:28: 61:fc:4b:1c:2f:81:39:25:01:75:b6:10:25:f7:3e:35:ed:b6: 76:ff:cc:6c:89:ed:73:6d:73:68:5a:dc:41:7c:10:81:dc:f4: 5c:1f:22:df:73:9b:8a:5f:99:9a:c8:3b:19:dc:da:79:f9:93: 3a:dc:be:7d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUOvixSv6TGPW2itVepCQU5j9FV4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEUyQUE5RUQzNURCMEYyNzZBNUZGMEQ0MDIwREJFQTEz RTA0QzYyMzAeFw0yNTA3MjEwOTA2MjhaFw0yNTA3MjQxMjIwMjhaMDMxMTAvBgNV BAMTKDM5RjUwM0RDQjlGQTQ3NUM1RDQ2NkZCNkRDNUNDNTA2MjA1MDEwRkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx6st7qr8acW+ePEpHhYuxuqvM 54A12NZMCvS/Eqj+nXGsrVZjmwRLlQqAyLNlUVm9jCXepIiAQqMILhi3IcrpPhdX 408AHrJLpWOaPz9TTq2ODfGQRqVP4WROD7KcF596szSqsZJLXOPiLm7TsxZP3CGE TUK7qJ+lI0LVpujiFUNplm8O1N7kZN43aDq0YCWYYv2l1ySJN9Zv6KMfgegMtms6 j75+dFe1QgCw0wV+TQ2kyDu1RAcuHumpPvRb1/3EQv0obaOt7Rqmj5BvltvvdmAq FwqoVAL6OnHQJdqQW2usqW/MtrhbsVTScR0KAybyFq/V6sx2brVTUWlnl67DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOfUD3Ln6R1xdRm+23FzFBiBQEP4wHwYDVR0j BBgwFoAUTiqp7TXbDydqX/DUAg2+oT4ExiMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZWFiMGEwMS04ZWU0LTQ4MjUtODQwZC0xMTJkYWVmMGFjYTgvMC80RTJBQTlFRDM1 REIwRjI3NkE1RkYwRDQwMjBEQkVBMTNFMDRDNjIzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEUyQUE5RUQzNURCMEYyNzZBNUZGMEQ0MDIwREJFQTEzRTA0 QzYyMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWVhYjBhMDEtOGVlNC00ODI1LTg0 MGQtMTEyZGFlZjBhY2E4LzAvNEUyQUE5RUQzNURCMEYyNzZBNUZGMEQ0MDIwREJF QTEzRTA0QzYyMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABU57D2X83O2KfJsBCC65iPquITUXZf4/TKT TmAVzkcn0YhyttqjYHB4QcYrW9OoQGOok1/PT7poGC11K5aXF5/m7LJFQUEU+JBC QMU9o8X0mBnstUHJNalr2yH8gUCgvjzLhSdpgCoILrTRsexm6JtSDJU+fjgo9G12 lackjvv/0CMfQWPXcjPdZycqf8Gbkepcl154VpLsZ+SZXBl2vTMv+e5b4BNJt2re AWGx12Br3MAxt20WeVWciABySA8ldCIR24pdKGH8SxwvgTklAXW2ECX3PjXttnb/ zGyJ7XNtc2ha3EF8EIHc9FwfIt9zm4pfmZrIOxnc2nn5kzrcvn0= -----END CERTIFICATE-----Generated at Mon Jul 21 12:23:28 2025 by rpki-client