$ rpki-client -vvf repo-rpki.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/4EE959798755CD4BA407AEB6EBDD3100261EAA55.mft File: 4EE959798755CD4BA407AEB6EBDD3100261EAA55.mft (raw, json) Hash identifier: 7o5BzDTRe08jfCgEWTO9/LNO79yqhX7RO+6dfHMB9/k= Subject key identifier: 7B:09:6A:26:6B:82:87:A6:4A:19:D8:BF:F9:79:22:32:6E:95:83:25 Authority key identifier: 4E:E9:59:79:87:55:CD:4B:A4:07:AE:B6:EB:DD:31:00:26:1E:AA:55 Certificate issuer: /CN=4EE959798755CD4BA407AEB6EBDD3100261EAA55 Certificate serial: 51BBCE67A09E22D3B77F60B6F2F6882420029C32 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4EE959798755CD4BA407AEB6EBDD3100261EAA55.cer Subject info access: rsync://repo-rpki.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/4EE959798755CD4BA407AEB6EBDD3100261EAA55.mft Manifest number: 0328 Signing time: Sun 07 Sep 2025 06:42:14 +0000 Manifest this update: Sun 07 Sep 2025 06:37:14 +0000 Manifest next update: Wed 10 Sep 2025 16:36:14 +0000 Files and hashes: 1: 3130332e3136382e3235302e302f32332d3233203d3e20313432333237.roa (hash: ik9rrWYA9D4GBjhetTFAP4k0XQKOPTBWebSo28sOHb8=) 2: 3130332e3136382e3235302e302f32342d3234203d3e20313432333237.roa (hash: vUWQBZ0/r7vI2v8KbhMfVsf4gR9LmNP6bUrY9mudCfU=) 3: 4EE959798755CD4BA407AEB6EBDD3100261EAA55.crl (hash: tN0lkPiV7NJVDc3OQBhAAGmULZdy4arv3fGrTw4Inlo=) 4: 3130332e3136382e3235312e302f32342d3234203d3e20313432333237.roa (hash: mP3dXLTjkrRr0prh2Jzplj5CirAMZtpiVu7s//8AY3w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/4EE959798755CD4BA407AEB6EBDD3100261EAA55.crl rsync://repo-rpki.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/4EE959798755CD4BA407AEB6EBDD3100261EAA55.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4EE959798755CD4BA407AEB6EBDD3100261EAA55.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 10:23:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:bb:ce:67:a0:9e:22:d3:b7:7f:60:b6:f2:f6:88:24:20:02:9c:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4EE959798755CD4BA407AEB6EBDD3100261EAA55 Validity Not Before: Sep 7 06:37:14 2025 GMT Not After : Sep 10 16:36:14 2025 GMT Subject: CN=7B096A266B8287A64A19D8BFF97922326E958325 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:2a:9f:d9:f6:07:7a:f3:3c:0e:3f:d0:f4:8f: 94:61:c2:83:4a:94:08:0b:8f:1f:f6:ae:bf:a5:cf: 23:92:8b:ed:25:01:60:14:d2:4d:d2:ad:51:01:a9: 60:c7:76:6c:f4:a8:30:bd:84:bb:40:60:23:c3:e0: 0d:2d:6b:34:46:94:af:68:1c:ba:8c:73:7f:2a:c8: 0e:7a:50:28:ec:55:ba:e3:d2:7f:ea:b3:f1:b9:d5: 4e:b8:95:15:e1:1c:f6:6d:cb:e6:91:34:46:16:26: 17:87:4a:a7:0b:73:c2:bf:f0:e1:3a:0e:97:4a:d4: 88:11:c2:12:30:6f:1b:13:3f:68:d8:89:90:70:39: 25:47:a8:ed:04:a9:1e:1f:f3:89:67:e7:fa:75:54: e2:e4:02:45:a2:bf:9c:f2:00:fd:33:f6:7f:92:c5: 6c:a0:e7:f6:8c:e6:10:13:82:b4:fa:3c:f0:81:92: ce:c0:e7:bb:45:eb:a8:70:92:48:86:58:42:83:48: 08:e5:44:bc:13:f7:05:0a:80:3a:fb:12:d3:a5:6f: f5:0a:1d:39:a5:f1:1a:cd:b9:81:77:1f:d5:8a:71: f5:86:56:53:5c:62:3e:80:80:5f:82:5e:5b:17:24: f6:f1:3e:de:fb:41:e7:1a:77:11:bd:96:90:da:0c: dd:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:09:6A:26:6B:82:87:A6:4A:19:D8:BF:F9:79:22:32:6E:95:83:25 X509v3 Authority Key Identifier: keyid:4E:E9:59:79:87:55:CD:4B:A4:07:AE:B6:EB:DD:31:00:26:1E:AA:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/4EE959798755CD4BA407AEB6EBDD3100261EAA55.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4EE959798755CD4BA407AEB6EBDD3100261EAA55.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/4EE959798755CD4BA407AEB6EBDD3100261EAA55.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:9e:77:1b:9d:d8:29:94:3a:9a:fb:33:6f:ed:7d:e0:54:97: dc:62:1c:f0:e2:86:be:93:3c:93:f1:d1:12:5f:4e:73:d5:81: 00:43:0a:e5:79:0a:d3:7f:fc:57:a3:6a:64:52:b6:c6:bf:1b: 96:f0:ef:8c:12:37:00:e4:ad:63:af:e5:2e:43:11:f8:00:e1: 68:89:f7:88:0b:46:6a:ad:7e:18:cf:d9:8f:db:f1:93:49:e7: c3:c6:39:70:d1:4f:4f:44:f5:d5:62:4d:a3:49:3c:19:db:f0: 18:2d:48:0f:fb:89:30:06:e0:e3:93:4a:c4:a9:39:5e:ee:0e: f2:28:70:69:35:77:09:07:64:ff:9d:8b:4b:eb:2e:5c:88:83: e8:f6:93:81:31:af:37:64:ec:ee:d6:0a:92:b8:9a:79:f0:7d: bb:02:5a:45:d0:84:d5:93:63:a4:7b:e0:6f:b9:b2:79:45:fa: 2c:70:3b:d7:66:3f:9b:ef:9e:28:0b:fd:c2:8a:05:bd:92:81: a2:cb:2e:d5:ae:ee:a0:95:c3:d5:18:5a:1a:e8:a4:c9:de:06: be:02:b8:7b:ea:e4:0f:93:e5:ea:3a:be:68:ce:04:46:ed:9a: aa:72:5d:7d:8c:54:65:cc:00:4c:9f:9f:93:f1:08:48:d2:a2: b4:61:3f:9d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUbvOZ6CeItO3f2C28vaIJCACnDIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEVFOTU5Nzk4NzU1Q0Q0QkE0MDdBRUI2RUJERDMxMDAy NjFFQUE1NTAeFw0yNTA5MDcwNjM3MTRaFw0yNTA5MTAxNjM2MTRaMDMxMTAvBgNV BAMTKDdCMDk2QTI2NkI4Mjg3QTY0QTE5RDhCRkY5NzkyMjMyNkU5NTgzMjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCKp/Z9gd68zwOP9D0j5RhwoNK lAgLjx/2rr+lzyOSi+0lAWAU0k3SrVEBqWDHdmz0qDC9hLtAYCPD4A0tazRGlK9o HLqMc38qyA56UCjsVbrj0n/qs/G51U64lRXhHPZty+aRNEYWJheHSqcLc8K/8OE6 DpdK1IgRwhIwbxsTP2jYiZBwOSVHqO0EqR4f84ln5/p1VOLkAkWiv5zyAP0z9n+S xWyg5/aM5hATgrT6PPCBks7A57tF66hwkkiGWEKDSAjlRLwT9wUKgDr7EtOlb/UK HTml8RrNuYF3H9WKcfWGVlNcYj6AgF+CXlsXJPbxPt77QecadxG9lpDaDN1BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUewlqJmuCh6ZKGdi/+XkiMm6VgyUwHwYDVR0j BBgwFoAUTulZeYdVzUukB662690xACYeqlUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MzhkNTgwYi00NTJlLTQyZDctYjA0MS05MDFkYzMzZDY4NTcvMC80RUU5NTk3OTg3 NTVDRDRCQTQwN0FFQjZFQkREMzEwMDI2MUVBQTU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEVFOTU5Nzk4NzU1Q0Q0QkE0MDdBRUI2RUJERDMxMDAyNjFF QUE1NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDM4ZDU4MGItNDUyZS00MmQ3LWIw NDEtOTAxZGMzM2Q2ODU3LzAvNEVFOTU5Nzk4NzU1Q0Q0QkE0MDdBRUI2RUJERDMx MDAyNjFFQUE1NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJWedxud2CmUOpr7M2/tfeBUl9xiHPDihr6T PJPx0RJfTnPVgQBDCuV5CtN//FejamRStsa/G5bw74wSNwDkrWOv5S5DEfgA4WiJ 94gLRmqtfhjP2Y/b8ZNJ58PGOXDRT09E9dViTaNJPBnb8BgtSA/7iTAG4OOTSsSp OV7uDvIocGk1dwkHZP+di0vrLlyIg+j2k4Exrzdk7O7WCpK4mnnwfbsCWkXQhNWT Y6R74G+5snlF+ixwO9dmP5vvnigL/cKKBb2SgaLLLtWu7qCVw9UYWhropMneBr4C uHvq5A+T5eo6vmjOBEbtmqpyXX2MVGXMAEyfn5PxCEjSorRhP50= -----END CERTIFICATE-----Generated at Sun Sep 7 14:00:47 2025 by rpki-client