$ rpki-client -vvf repo-rpki.idnic.net/repo/9eeb45de-5183-4a3a-b06d-8bb8d4506b06/0/849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.mft File: 849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.mft (raw, json) Hash identifier: tYrQpUk4aMCeZ8N+IBAeHUpnQG92l6/sY5el2Um+PlQ= Subject key identifier: 31:C6:64:A3:72:1D:94:2B:D8:51:20:98:58:86:F3:BB:59:CA:30:F4 Authority key identifier: 84:9E:9E:24:0A:6B:F4:42:3B:1E:7D:22:05:D4:1E:C8:0D:6E:AB:4F Certificate issuer: /CN=849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F Certificate serial: 63F54176C96DA4D7F41974631EEB059E5A18EF6E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9eeb45de-5183-4a3a-b06d-8bb8d4506b06/0/849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.mft Manifest number: 01B5 Signing time: Fri 18 Jul 2025 21:42:01 +0000 Manifest this update: Fri 18 Jul 2025 21:37:01 +0000 Manifest next update: Tue 22 Jul 2025 08:50:01 +0000 Files and hashes: 1: 849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.crl (hash: R2JvNBcOKFyiD/AC7zGi6GWay7Rzc9r2NPKCFl/JMjk=) 2: 3130332e362e3136362e302f32342d3234203d3e20313439393335.roa (hash: jCIi6xnL0X9x7d8IEkHfah2DqG8/oNDacSJSk7YacN0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9eeb45de-5183-4a3a-b06d-8bb8d4506b06/0/849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.crl rsync://repo-rpki.idnic.net/repo/9eeb45de-5183-4a3a-b06d-8bb8d4506b06/0/849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 08:50:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:f5:41:76:c9:6d:a4:d7:f4:19:74:63:1e:eb:05:9e:5a:18:ef:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F Validity Not Before: Jul 18 21:37:01 2025 GMT Not After : Jul 22 08:50:01 2025 GMT Subject: CN=31C664A3721D942BD85120985886F3BB59CA30F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:84:c0:ce:48:40:31:ee:6e:57:4f:e9:97:01: ba:17:59:36:25:4e:69:a5:8b:65:3a:6a:c5:b9:8a: a8:df:6f:25:c3:4e:43:4f:1d:9a:63:c7:98:4c:4a: 8a:7a:3f:20:09:41:93:4d:c5:ef:da:b0:64:26:05: ad:22:06:38:ec:5b:7f:18:6d:fe:47:39:4f:85:34: 47:cf:a3:36:f4:ac:d3:c7:8a:18:43:a0:78:7f:59: 28:77:95:d6:fb:91:30:5f:46:f8:9a:db:c1:11:67: 49:12:ed:26:33:24:a8:91:17:10:dc:37:d3:d3:fc: e1:c3:14:bd:ab:db:fc:f4:89:99:be:0d:58:36:c7: 48:c8:69:e5:30:6e:b2:c9:f5:35:62:75:14:34:7b: 1a:36:f4:ff:e3:be:e4:39:0f:27:19:ba:a8:67:49: 77:04:b1:06:dc:5c:4d:c7:a6:f6:05:17:3a:74:2f: 5c:2d:d6:b3:0e:78:b4:3a:f5:29:ef:f5:f1:16:70: 18:f7:b8:be:2e:47:f5:de:c9:bb:49:61:b7:80:c7: 76:26:c6:6d:56:4d:02:35:d6:56:9e:b4:7e:78:2a: 48:7d:cb:e7:b1:7d:27:d4:9b:91:6c:ea:ff:b7:d1: e1:98:45:6c:d0:49:bf:5b:b2:34:d5:c5:ac:e9:c3: ac:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:C6:64:A3:72:1D:94:2B:D8:51:20:98:58:86:F3:BB:59:CA:30:F4 X509v3 Authority Key Identifier: keyid:84:9E:9E:24:0A:6B:F4:42:3B:1E:7D:22:05:D4:1E:C8:0D:6E:AB:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9eeb45de-5183-4a3a-b06d-8bb8d4506b06/0/849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9eeb45de-5183-4a3a-b06d-8bb8d4506b06/0/849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:e1:1d:5b:dd:d1:96:99:e9:d1:f1:9b:ae:2b:4c:29:c8:ff: 56:14:33:70:c5:e3:fe:55:96:b2:d7:ea:d7:4b:f1:0d:83:12: 94:dd:3f:38:6e:f4:f7:dd:8b:45:0b:c7:e6:0b:69:76:54:16: 52:87:e2:16:df:9d:36:50:c6:2d:b8:b9:a8:23:e2:63:3d:a6: 92:c4:bc:8b:2e:5e:1b:c8:47:13:ea:78:90:b9:a8:3d:c3:ac: df:19:bb:c6:42:2d:66:00:02:93:c0:99:51:35:1c:37:ea:90: a9:ab:ce:7d:77:f7:15:f6:7e:88:ef:b8:bd:ff:79:0c:6a:cc: be:54:92:f5:a8:1e:ae:49:0b:14:ed:82:ea:37:e0:56:a2:d2: 01:b3:fa:0f:94:3c:61:8c:df:54:47:8f:d0:5f:e5:36:0b:9c: ca:7d:a2:d7:3d:dc:60:a7:1c:e1:4b:60:db:65:21:72:b4:7b: e7:a1:e1:4f:c4:b3:ae:52:ba:d3:c4:6f:39:f3:da:61:9d:81: 4c:62:dd:0a:a2:19:23:4c:d3:90:94:14:29:b7:f7:cc:0a:b3: 6d:89:19:49:f3:df:9c:c7:3a:3b:fb:31:17:9a:5b:35:4a:2b: 3b:de:a3:d1:af:c3:d8:df:f3:bf:c7:52:a2:69:d9:ca:49:08: 51:5a:28:c0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY/VBdsltpNf0GXRjHusFnloY724wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQ5RTlFMjQwQTZCRjQ0MjNCMUU3RDIyMDVENDFFQzgw RDZFQUI0RjAeFw0yNTA3MTgyMTM3MDFaFw0yNTA3MjIwODUwMDFaMDMxMTAvBgNV BAMTKDMxQzY2NEEzNzIxRDk0MkJEODUxMjA5ODU4ODZGM0JCNTlDQTMwRjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOhMDOSEAx7m5XT+mXAboXWTYl Tmmli2U6asW5iqjfbyXDTkNPHZpjx5hMSop6PyAJQZNNxe/asGQmBa0iBjjsW38Y bf5HOU+FNEfPozb0rNPHihhDoHh/WSh3ldb7kTBfRvia28ERZ0kS7SYzJKiRFxDc N9PT/OHDFL2r2/z0iZm+DVg2x0jIaeUwbrLJ9TVidRQ0exo29P/jvuQ5DycZuqhn SXcEsQbcXE3HpvYFFzp0L1wt1rMOeLQ69Snv9fEWcBj3uL4uR/XeybtJYbeAx3Ym xm1WTQI11laetH54Kkh9y+exfSfUm5Fs6v+30eGYRWzQSb9bsjTVxazpw6yhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMcZko3IdlCvYUSCYWIbzu1nKMPQwHwYDVR0j BBgwFoAUhJ6eJApr9EI7Hn0iBdQeyA1uq08wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZWViNDVkZS01MTgzLTRhM2EtYjA2ZC04YmI4ZDQ1MDZiMDYvMC84NDlFOUUyNDBB NkJGNDQyM0IxRTdEMjIwNUQ0MUVDODBENkVBQjRGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODQ5RTlFMjQwQTZCRjQ0MjNCMUU3RDIyMDVENDFFQzgwRDZF QUI0Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWVlYjQ1ZGUtNTE4My00YTNhLWIw NmQtOGJiOGQ0NTA2YjA2LzAvODQ5RTlFMjQwQTZCRjQ0MjNCMUU3RDIyMDVENDFF QzgwRDZFQUI0Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAnhHVvd0ZaZ6dHxm64rTCnI/1YUM3DF4/5V lrLX6tdL8Q2DEpTdPzhu9Pfdi0ULx+YLaXZUFlKH4hbfnTZQxi24uagj4mM9ppLE vIsuXhvIRxPqeJC5qD3DrN8Zu8ZCLWYAApPAmVE1HDfqkKmrzn139xX2fojvuL3/ eQxqzL5UkvWoHq5JCxTtguo34Fai0gGz+g+UPGGM31RHj9Bf5TYLnMp9otc93GCn HOFLYNtlIXK0e+eh4U/Es65SutPEbznz2mGdgUxi3QqiGSNM05CUFCm398wKs22J GUnz35zHOjv7MReaWzVKKzveo9Gvw9jf87/HUqJp2cpJCFFaKMA= -----END CERTIFICATE-----Generated at Mon Jul 21 08:38:07 2025 by rpki-client