$ rpki-client -vvf repo-rpki.idnic.net/repo/ae89e859-3c2c-4a09-a4a9-37323ea5de22/0/4A906D4F534B26A0E62898882630292936CEA54A.mft File: 4A906D4F534B26A0E62898882630292936CEA54A.mft (raw, json) Hash identifier: nvh85ccYoKLOaw3VY2EtTEL6hYWmVmbpAqE4NLpNMAE= Subject key identifier: 79:CB:40:AB:22:01:A3:34:1D:9A:24:32:EA:C5:27:B0:0B:7A:C8:F7 Authority key identifier: 4A:90:6D:4F:53:4B:26:A0:E6:28:98:88:26:30:29:29:36:CE:A5:4A Certificate issuer: /CN=4A906D4F534B26A0E62898882630292936CEA54A Certificate serial: 1B0AE14C62BA07DF52A02BA7773B1384C4C56E14 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A906D4F534B26A0E62898882630292936CEA54A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ae89e859-3c2c-4a09-a4a9-37323ea5de22/0/4A906D4F534B26A0E62898882630292936CEA54A.mft Manifest number: 0121 Signing time: Mon 21 Jul 2025 20:41:49 +0000 Manifest this update: Mon 21 Jul 2025 20:36:49 +0000 Manifest next update: Fri 25 Jul 2025 02:54:49 +0000 Files and hashes: 1: 4A906D4F534B26A0E62898882630292936CEA54A.crl (hash: 08Oz7mDk4iv5upEQPRBYCLTLSkAbUPcCTYHlMh61Dt8=) 2: 3130332e3137312e38332e302f32342d3234203d3e20313432333733.roa (hash: q1try4eWeXGNMJXVZs9ilwAbNDidILu0Qdkiuiy95SY=) 3: 3130332e3137312e38322e302f32342d3234203d3e20313432333733.roa (hash: QW0riT2ZIbJQ6bDdQHJpDVDRJpk68aw/94juFPRXEvU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ae89e859-3c2c-4a09-a4a9-37323ea5de22/0/4A906D4F534B26A0E62898882630292936CEA54A.crl rsync://repo-rpki.idnic.net/repo/ae89e859-3c2c-4a09-a4a9-37323ea5de22/0/4A906D4F534B26A0E62898882630292936CEA54A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A906D4F534B26A0E62898882630292936CEA54A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 02:54:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:0a:e1:4c:62:ba:07:df:52:a0:2b:a7:77:3b:13:84:c4:c5:6e:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A906D4F534B26A0E62898882630292936CEA54A Validity Not Before: Jul 21 20:36:49 2025 GMT Not After : Jul 25 02:54:49 2025 GMT Subject: CN=79CB40AB2201A3341D9A2432EAC527B00B7AC8F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:67:a2:14:37:14:39:a8:54:e8:ac:4a:58:1a: 04:f2:f0:df:ce:49:70:8e:8e:44:51:be:8f:90:3c: 79:70:b3:af:8e:7f:ef:9e:d6:38:47:5d:fa:e3:c6: 1b:d4:15:61:e7:a1:23:71:88:30:1f:86:02:05:01: 21:c1:0d:56:e5:b5:04:29:48:16:c6:12:22:2a:69: 78:70:81:e1:58:13:17:23:62:a6:3e:09:aa:4c:bb: 14:e5:6b:d0:d1:a2:45:82:9f:4c:f8:8d:86:36:64: ab:f6:ad:d4:66:10:39:40:20:27:29:c2:55:a3:3a: 4b:c1:f8:af:3b:cf:02:21:e5:fa:d4:09:50:98:a5: c5:df:cf:19:e1:52:41:c5:45:3b:a7:f2:63:f9:2e: 1e:08:78:87:a1:91:b4:f0:aa:e4:dd:25:58:21:14: ec:fa:e5:79:16:6e:b6:81:a6:dd:ff:7b:c0:67:cc: e6:c3:17:f2:c1:b4:c2:58:77:77:14:0e:51:f9:51: 15:b8:e0:d2:5d:81:f4:98:03:cc:56:11:c9:f8:7e: 46:19:0a:61:5c:84:29:c8:97:27:78:ce:06:c9:bb: 4c:d9:fc:9a:99:f5:90:18:24:cd:57:0d:69:39:4e: f9:4c:33:05:68:02:6c:a4:65:76:92:ed:3a:33:06: db:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:CB:40:AB:22:01:A3:34:1D:9A:24:32:EA:C5:27:B0:0B:7A:C8:F7 X509v3 Authority Key Identifier: keyid:4A:90:6D:4F:53:4B:26:A0:E6:28:98:88:26:30:29:29:36:CE:A5:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ae89e859-3c2c-4a09-a4a9-37323ea5de22/0/4A906D4F534B26A0E62898882630292936CEA54A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A906D4F534B26A0E62898882630292936CEA54A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae89e859-3c2c-4a09-a4a9-37323ea5de22/0/4A906D4F534B26A0E62898882630292936CEA54A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:d3:9a:53:54:84:62:65:7b:e7:3b:71:01:a0:ae:91:4e:fd: 15:d0:7d:86:51:bd:21:83:32:68:e4:b5:b5:92:c0:55:e7:7d: 4f:43:55:24:83:66:b2:97:b6:1c:c1:97:17:66:47:4c:2b:90: f6:71:c7:f5:74:d1:1b:4a:31:93:31:99:12:f6:a6:b6:c5:cf: b6:7f:8f:cf:ce:06:a5:c2:c5:a3:0d:3b:8d:4a:4c:3e:9f:9e: 39:d0:67:ac:46:18:89:ba:aa:1f:94:52:e1:8a:20:16:49:00: f8:d2:6e:9b:b8:59:b9:82:57:99:00:cb:31:f6:e6:c5:ad:0d: 7c:a4:91:2f:32:2b:b5:57:80:46:4c:7f:82:5f:e5:df:aa:e1: a1:ad:0e:45:12:ce:f9:f5:f5:aa:d5:10:58:fe:7d:d0:2d:3e: 21:cd:57:7e:34:6d:52:21:f9:77:8a:bb:7e:8a:2f:83:42:68: 8b:72:00:81:00:06:63:9f:9e:45:21:a9:79:a5:3b:96:64:08: b5:93:8c:3a:14:be:50:b5:56:f2:f6:fd:a2:b8:a3:73:be:1e: a1:8c:ce:53:aa:0e:bc:0d:8e:64:38:1e:75:b4:2a:ce:d4:6b: ed:75:02:ba:b2:30:ff:b1:65:0d:36:f1:69:4e:ba:6f:2f:e6: 3b:7c:e8:68 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGwrhTGK6B99SoCundzsThMTFbhQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEE5MDZENEY1MzRCMjZBMEU2Mjg5ODg4MjYzMDI5Mjkz NkNFQTU0QTAeFw0yNTA3MjEyMDM2NDlaFw0yNTA3MjUwMjU0NDlaMDMxMTAvBgNV BAMTKDc5Q0I0MEFCMjIwMUEzMzQxRDlBMjQzMkVBQzUyN0IwMEI3QUM4RjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGZ6IUNxQ5qFTorEpYGgTy8N/O SXCOjkRRvo+QPHlws6+Of++e1jhHXfrjxhvUFWHnoSNxiDAfhgIFASHBDVbltQQp SBbGEiIqaXhwgeFYExcjYqY+CapMuxTla9DRokWCn0z4jYY2ZKv2rdRmEDlAICcp wlWjOkvB+K87zwIh5frUCVCYpcXfzxnhUkHFRTun8mP5Lh4IeIehkbTwquTdJVgh FOz65XkWbraBpt3/e8BnzObDF/LBtMJYd3cUDlH5URW44NJdgfSYA8xWEcn4fkYZ CmFchCnIlyd4zgbJu0zZ/JqZ9ZAYJM1XDWk5TvlMMwVoAmykZXaS7TozBtvnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUectAqyIBozQdmiQy6sUnsAt6yPcwHwYDVR0j BBgwFoAUSpBtT1NLJqDmKJiIJjApKTbOpUowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZTg5ZTg1OS0zYzJjLTRhMDktYTRhOS0zNzMyM2VhNWRlMjIvMC80QTkwNkQ0RjUz NEIyNkEwRTYyODk4ODgyNjMwMjkyOTM2Q0VBNTRBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEE5MDZENEY1MzRCMjZBMEU2Mjg5ODg4MjYzMDI5MjkzNkNF QTU0QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWU4OWU4NTktM2MyYy00YTA5LWE0 YTktMzczMjNlYTVkZTIyLzAvNEE5MDZENEY1MzRCMjZBMEU2Mjg5ODg4MjYzMDI5 MjkzNkNFQTU0QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD/TmlNUhGJle+c7cQGgrpFO/RXQfYZRvSGD MmjktbWSwFXnfU9DVSSDZrKXthzBlxdmR0wrkPZxx/V00RtKMZMxmRL2prbFz7Z/ j8/OBqXCxaMNO41KTD6fnjnQZ6xGGIm6qh+UUuGKIBZJAPjSbpu4WbmCV5kAyzH2 5sWtDXykkS8yK7VXgEZMf4Jf5d+q4aGtDkUSzvn19arVEFj+fdAtPiHNV340bVIh +XeKu36KL4NCaItyAIEABmOfnkUhqXmlO5ZkCLWTjDoUvlC1VvL2/aK4o3O+HqGM zlOqDrwNjmQ4HnW0Ks7Ua+11ArqyMP+xZQ028WlOum8v5jt86Gg= -----END CERTIFICATE-----Generated at Wed Jul 23 01:59:57 2025 by rpki-client