$ rpki-client -vvf repo-rpki.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/4A243A1EC4991C40D3A6148515E3C51981B425F7.mft File: 4A243A1EC4991C40D3A6148515E3C51981B425F7.mft (raw, json) Hash identifier: /tgkS7IAh1sypFmTPvt0Bbnf4MWGRvlQgpsRELykdAQ= Subject key identifier: 9A:27:CC:92:8A:6B:D6:28:DF:10:B5:84:30:84:AD:B0:84:7F:F2:54 Authority key identifier: 4A:24:3A:1E:C4:99:1C:40:D3:A6:14:85:15:E3:C5:19:81:B4:25:F7 Certificate issuer: /CN=4A243A1EC4991C40D3A6148515E3C51981B425F7 Certificate serial: 4F19D5D8664AE88DF49308ADF7D164FC0F64F089 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A243A1EC4991C40D3A6148515E3C51981B425F7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/4A243A1EC4991C40D3A6148515E3C51981B425F7.mft Manifest number: 0187 Signing time: Sun 20 Jul 2025 01:40:58 +0000 Manifest this update: Sun 20 Jul 2025 01:35:58 +0000 Manifest next update: Wed 23 Jul 2025 05:10:58 +0000 Files and hashes: 1: 4A243A1EC4991C40D3A6148515E3C51981B425F7.crl (hash: fJaBQX2DC2IOZaNsnhZNY5mQckAmBsSBlBDvT76CD/0=) 2: 3130332e3130392e3230372e302f32342d3234203d3e20313530393335.roa (hash: W7qNwUKI6yVYK0QKsHqMQf5TpfiakU3FHDTDzkx2y0k=) 3: 3130332e3130392e3230362e302f32342d3234203d3e20313530393335.roa (hash: Rcu96XphgA8WvPbRK/1ptZ3CZTir4MCBj7MHKlWlNMw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/4A243A1EC4991C40D3A6148515E3C51981B425F7.crl rsync://repo-rpki.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/4A243A1EC4991C40D3A6148515E3C51981B425F7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A243A1EC4991C40D3A6148515E3C51981B425F7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 05:10:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:19:d5:d8:66:4a:e8:8d:f4:93:08:ad:f7:d1:64:fc:0f:64:f0:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A243A1EC4991C40D3A6148515E3C51981B425F7 Validity Not Before: Jul 20 01:35:58 2025 GMT Not After : Jul 23 05:10:58 2025 GMT Subject: CN=9A27CC928A6BD628DF10B5843084ADB0847FF254 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:b9:53:8e:ba:2e:2b:83:7c:3d:6d:e5:a9:54: 62:8d:44:52:3e:02:1d:44:5d:8a:47:1f:dd:7f:6d: 40:4c:bf:4c:53:53:e4:9f:a4:62:bc:dc:85:db:69: 8c:ca:af:a8:a6:00:8e:ae:bc:df:37:bc:5a:66:2e: b6:ab:65:54:ca:d7:f7:28:20:c0:e8:7d:4c:06:ef: c4:a2:2c:4e:36:c0:99:7f:9a:ff:32:8c:db:0c:a3: 95:f4:6d:60:47:49:ec:cd:d5:05:b4:5f:d7:bb:e3: dd:38:db:4b:e5:88:2f:93:55:7b:8d:03:b2:51:6e: 1d:d9:a7:d2:41:35:49:64:52:a8:95:60:fe:d0:19: e0:0e:05:b7:69:ee:2c:58:e0:27:03:22:8d:58:f4: 33:4b:cf:03:c2:55:22:5d:24:62:07:b7:c7:5f:1e: cb:f3:5f:b1:a5:72:b4:a5:8f:e9:58:de:6d:92:5c: 9c:69:b1:01:7b:42:95:5b:75:c4:94:f0:08:ac:9d: b8:be:b5:7e:d4:5d:d0:db:b9:4a:a4:9b:59:4f:4a: 2e:1a:23:ad:fc:92:26:f7:7c:f5:64:b2:6e:61:ec: 82:1e:9d:3e:fa:5a:92:02:06:a0:9e:eb:85:76:b5: 1e:d7:b5:78:e3:a8:53:d9:b0:d9:4b:75:f7:b0:24: e7:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:27:CC:92:8A:6B:D6:28:DF:10:B5:84:30:84:AD:B0:84:7F:F2:54 X509v3 Authority Key Identifier: keyid:4A:24:3A:1E:C4:99:1C:40:D3:A6:14:85:15:E3:C5:19:81:B4:25:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/4A243A1EC4991C40D3A6148515E3C51981B425F7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A243A1EC4991C40D3A6148515E3C51981B425F7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/4A243A1EC4991C40D3A6148515E3C51981B425F7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:1b:15:21:f1:62:8e:fb:22:53:0a:82:cc:4c:9e:75:51:d1: 55:66:85:bb:9f:0d:bd:5c:ee:01:d9:fd:a2:05:38:4c:c5:7d: 98:2f:d7:9a:10:9f:24:c0:e1:3d:ea:ea:04:42:43:8b:9e:81: 79:4b:19:eb:fb:62:38:68:ce:e5:cf:1a:90:63:2f:5e:11:08: fd:7c:41:81:a8:11:72:36:48:46:f0:f5:b4:74:70:14:95:90: 2d:41:a0:bb:de:ab:0d:25:9b:6d:20:90:b8:10:79:cb:38:6d: 4d:27:08:48:bc:36:4b:c4:c1:17:50:f4:9b:9c:0b:09:78:5b: 57:98:f9:05:5a:b1:5d:06:dd:ca:dc:09:8f:a4:0d:bc:f9:ae: e2:58:e2:fd:0e:2d:dd:f6:6e:12:f1:f3:47:32:b1:b0:12:b5: 29:5b:dc:6a:2d:e4:39:7e:9d:a8:0c:18:6f:2c:37:33:b2:65: e9:af:6d:55:fa:0d:e1:ff:c9:99:bf:61:ba:a2:54:77:b8:98: e3:cc:18:6d:98:66:aa:5b:e9:4c:58:a0:86:ab:48:92:c1:24: ad:2b:0e:bd:49:24:48:1f:fa:aa:05:8d:aa:8c:ea:85:51:55: 0f:73:7d:ba:5c:af:ae:0d:37:87:3e:30:7d:92:3a:1c:a1:26: 64:bf:68:1e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTxnV2GZK6I30kwit99Fk/A9k8IkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEEyNDNBMUVDNDk5MUM0MEQzQTYxNDg1MTVFM0M1MTk4 MUI0MjVGNzAeFw0yNTA3MjAwMTM1NThaFw0yNTA3MjMwNTEwNThaMDMxMTAvBgNV BAMTKDlBMjdDQzkyOEE2QkQ2MjhERjEwQjU4NDMwODRBREIwODQ3RkYyNTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBuVOOui4rg3w9beWpVGKNRFI+ Ah1EXYpHH91/bUBMv0xTU+SfpGK83IXbaYzKr6imAI6uvN83vFpmLrarZVTK1/co IMDofUwG78SiLE42wJl/mv8yjNsMo5X0bWBHSezN1QW0X9e7490420vliC+TVXuN A7JRbh3Zp9JBNUlkUqiVYP7QGeAOBbdp7ixY4CcDIo1Y9DNLzwPCVSJdJGIHt8df HsvzX7GlcrSlj+lY3m2SXJxpsQF7QpVbdcSU8Aisnbi+tX7UXdDbuUqkm1lPSi4a I638kib3fPVksm5h7IIenT76WpICBqCe64V2tR7XtXjjqFPZsNlLdfewJOfxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmifMkopr1ijfELWEMIStsIR/8lQwHwYDVR0j BBgwFoAUSiQ6HsSZHEDTphSFFePFGYG0JfcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l Yzg4OTJlYi1kZGMwLTRjYjYtOTU3Yy1iNjUzZjI4YmJmMzkvMC80QTI0M0ExRUM0 OTkxQzQwRDNBNjE0ODUxNUUzQzUxOTgxQjQyNUY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEEyNDNBMUVDNDk5MUM0MEQzQTYxNDg1MTVFM0M1MTk4MUI0 MjVGNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWM4ODkyZWItZGRjMC00Y2I2LTk1 N2MtYjY1M2YyOGJiZjM5LzAvNEEyNDNBMUVDNDk5MUM0MEQzQTYxNDg1MTVFM0M1 MTk4MUI0MjVGNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJEbFSHxYo77IlMKgsxMnnVR0VVmhbufDb1c 7gHZ/aIFOEzFfZgv15oQnyTA4T3q6gRCQ4uegXlLGev7YjhozuXPGpBjL14RCP18 QYGoEXI2SEbw9bR0cBSVkC1BoLveqw0lm20gkLgQecs4bU0nCEi8NkvEwRdQ9Juc Cwl4W1eY+QVasV0G3crcCY+kDbz5ruJY4v0OLd32bhLx80cysbAStSlb3Got5Dl+ nagMGG8sNzOyZemvbVX6DeH/yZm/YbqiVHe4mOPMGG2YZqpb6UxYoIarSJLBJK0r Dr1JJEgf+qoFjaqM6oVRVQ9zfbpcr64NN4c+MH2SOhyhJmS/aB4= -----END CERTIFICATE-----Generated at Tue Jul 22 04:13:36 2025 by rpki-client