$ rpki-client -vvf repo-rpki.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/4A4CC1D625A4519B23D73717C879F10A6173AEAB.mft File: 4A4CC1D625A4519B23D73717C879F10A6173AEAB.mft (raw, json) Hash identifier: +SlErevHrP+eKLCoEi8GxwRKFPkCAs1V/FkIqljX4ko= Subject key identifier: A5:0F:B2:8F:A7:D1:B7:19:AA:4B:F7:E5:3B:7C:D2:6D:90:5B:CF:FE Authority key identifier: 4A:4C:C1:D6:25:A4:51:9B:23:D7:37:17:C8:79:F1:0A:61:73:AE:AB Certificate issuer: /CN=4A4CC1D625A4519B23D73717C879F10A6173AEAB Certificate serial: 04E935A7440497E34A5014846E96DDB430CEF665 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A4CC1D625A4519B23D73717C879F10A6173AEAB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/4A4CC1D625A4519B23D73717C879F10A6173AEAB.mft Manifest number: 02B5 Signing time: Sat 06 Sep 2025 15:01:33 +0000 Manifest this update: Sat 06 Sep 2025 14:56:33 +0000 Manifest next update: Tue 09 Sep 2025 17:08:33 +0000 Files and hashes: 1: 4A4CC1D625A4519B23D73717C879F10A6173AEAB.crl (hash: G0wFmJ4CQkRidvs3ggv4RwWo3kvlVR+vAe92qcrVBc8=) 2: 3130332e3233332e3131302e302f32342d3234203d3e203338373538.roa (hash: XkLmfviGVp2EGPILR+re9nqIYX0YPT0FpVRTvK0kmBs=) 3: 3130332e3233332e3130392e302f32342d3234203d3e203633343838.roa (hash: GdSTW/OHYTEI/PWuMmTToeVUXPmcixtoxCsRQug+8zk=) 4: 3130332e3233332e3130382e302f32342d3234203d3e203633343838.roa (hash: NTu0pfg5O9FNTQVT/y9O87yuBsSqMNv0sxLjGwJCf2Y=) 5: 3130332e3233332e3131312e302f32342d3234203d3e203633343838.roa (hash: z/YOZWWGc41LH9oZ4KGtThI9u3npxHOn37nVJl/FSQI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/4A4CC1D625A4519B23D73717C879F10A6173AEAB.crl rsync://repo-rpki.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/4A4CC1D625A4519B23D73717C879F10A6173AEAB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A4CC1D625A4519B23D73717C879F10A6173AEAB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 17:08:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:e9:35:a7:44:04:97:e3:4a:50:14:84:6e:96:dd:b4:30:ce:f6:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A4CC1D625A4519B23D73717C879F10A6173AEAB Validity Not Before: Sep 6 14:56:33 2025 GMT Not After : Sep 9 17:08:33 2025 GMT Subject: CN=A50FB28FA7D1B719AA4BF7E53B7CD26D905BCFFE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:7c:13:66:01:ee:4d:f7:7b:b9:14:5b:f0:7a: 30:cd:b6:1f:76:00:f7:07:6c:55:ad:4f:e6:d9:ba: 0e:85:47:f1:1d:28:cd:a8:2a:37:af:22:50:84:cf: e7:9a:fe:73:2e:a6:f4:ac:c7:61:fa:d3:46:ff:5b: 81:71:4a:81:d6:95:bf:d2:1e:5f:41:06:45:ae:41: 4d:77:cd:80:4a:26:e4:a1:32:34:51:05:85:cc:63: 33:51:61:2d:2c:04:52:63:59:e8:17:26:af:9c:8a: 4f:b0:40:55:90:91:0a:bf:94:94:81:df:52:75:ab: b1:2b:9e:9d:35:5f:6b:26:b9:54:22:c4:d8:4d:6c: a4:ac:6f:31:9f:15:6f:56:3b:f7:9c:8c:1e:9d:33: fb:c5:8c:01:19:3b:bf:d5:b8:09:81:9c:88:d2:08: e4:42:a3:39:99:b9:4a:e7:b6:6b:07:12:9d:9f:1e: 6f:c3:0e:4a:31:95:7a:b0:27:3d:ef:5d:ff:71:e4: 97:68:de:db:19:28:8a:24:e6:9c:70:04:f8:43:77: dc:16:7b:ae:7c:b8:b5:4a:43:17:a2:c1:c8:6a:86: 6c:fb:83:e4:47:9a:5d:86:51:d2:da:f0:6c:40:fd: f6:92:a2:e2:3e:de:df:61:bd:18:c5:e5:79:ff:3f: 19:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:0F:B2:8F:A7:D1:B7:19:AA:4B:F7:E5:3B:7C:D2:6D:90:5B:CF:FE X509v3 Authority Key Identifier: keyid:4A:4C:C1:D6:25:A4:51:9B:23:D7:37:17:C8:79:F1:0A:61:73:AE:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/4A4CC1D625A4519B23D73717C879F10A6173AEAB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A4CC1D625A4519B23D73717C879F10A6173AEAB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/4A4CC1D625A4519B23D73717C879F10A6173AEAB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:40:a6:aa:8c:bc:d2:58:ae:2c:4a:26:05:73:05:37:9c:1b: 50:7f:7d:32:47:b8:24:49:40:1f:49:1e:d8:09:99:70:e7:31: 29:4c:bf:c5:a9:84:d6:61:2b:e6:ed:6f:f5:15:fd:44:4a:b7: 91:3d:bb:df:08:44:7c:90:dc:fe:1d:69:3a:ac:56:23:fe:05: 78:d5:30:83:35:1f:df:85:80:0d:2d:24:9b:42:bc:c4:28:3a: 1b:e9:61:fd:55:c8:ed:bc:5c:cf:d4:92:ac:95:f2:8b:a9:aa: 17:de:c5:42:7e:d8:4d:90:a4:85:9e:ad:9e:ce:8f:41:ea:89: bb:0e:92:d2:f0:b3:ab:cf:73:9a:67:ed:af:96:5f:a0:07:18: bc:dd:5a:d1:33:3b:2a:37:dc:7b:cc:a5:99:04:02:de:ee:42: 3f:fb:3e:e6:d1:75:ac:ae:ac:f4:10:dc:03:97:f9:ce:91:74: 3c:3b:97:aa:de:7f:d8:a1:bf:bb:57:40:9a:53:87:aa:8c:8d: 2a:11:a2:29:88:19:5c:06:b8:ae:eb:4a:81:db:e5:58:90:94: b6:93:b3:5a:49:e8:b6:8a:a2:57:48:a5:0a:c2:15:55:db:32: 63:a2:32:1d:08:83:09:a1:f2:17:a2:45:b0:ef:93:72:ca:3c: 89:8f:ee:3f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBOk1p0QEl+NKUBSEbpbdtDDO9mUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEE0Q0MxRDYyNUE0NTE5QjIzRDczNzE3Qzg3OUYxMEE2 MTczQUVBQjAeFw0yNTA5MDYxNDU2MzNaFw0yNTA5MDkxNzA4MzNaMDMxMTAvBgNV BAMTKEE1MEZCMjhGQTdEMUI3MTlBQTRCRjdFNTNCN0NEMjZEOTA1QkNGRkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4fBNmAe5N93u5FFvwejDNth92 APcHbFWtT+bZug6FR/EdKM2oKjevIlCEz+ea/nMupvSsx2H600b/W4FxSoHWlb/S Hl9BBkWuQU13zYBKJuShMjRRBYXMYzNRYS0sBFJjWegXJq+cik+wQFWQkQq/lJSB 31J1q7Ernp01X2smuVQixNhNbKSsbzGfFW9WO/ecjB6dM/vFjAEZO7/VuAmBnIjS CORCozmZuUrntmsHEp2fHm/DDkoxlXqwJz3vXf9x5Jdo3tsZKIok5pxwBPhDd9wW e658uLVKQxeiwchqhmz7g+RHml2GUdLa8GxA/faSouI+3t9hvRjF5Xn/PxmLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpQ+yj6fRtxmqS/flO3zSbZBbz/4wHwYDVR0j BBgwFoAUSkzB1iWkUZsj1zcXyHnxCmFzrqswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZWQ0NmY4Mi1jZjExLTRlMzItYjA1MS02YWMzMzRhOTI2MjIvMC80QTRDQzFENjI1 QTQ1MTlCMjNENzM3MTdDODc5RjEwQTYxNzNBRUFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEE0Q0MxRDYyNUE0NTE5QjIzRDczNzE3Qzg3OUYxMEE2MTcz QUVBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWVkNDZmODItY2YxMS00ZTMyLWIw NTEtNmFjMzM0YTkyNjIyLzAvNEE0Q0MxRDYyNUE0NTE5QjIzRDczNzE3Qzg3OUYx MEE2MTczQUVBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJFApqqMvNJYrixKJgVzBTecG1B/fTJHuCRJ QB9JHtgJmXDnMSlMv8WphNZhK+btb/UV/URKt5E9u98IRHyQ3P4daTqsViP+BXjV MIM1H9+FgA0tJJtCvMQoOhvpYf1VyO28XM/UkqyV8oupqhfexUJ+2E2QpIWerZ7O j0HqibsOktLws6vPc5pn7a+WX6AHGLzdWtEzOyo33HvMpZkEAt7uQj/7PubRdayu rPQQ3AOX+c6RdDw7l6ref9ihv7tXQJpTh6qMjSoRoimIGVwGuK7rSoHb5ViQlLaT s1pJ6LaKoldIpQrCFVXbMmOiMh0Igwmh8heiRbDvk3LKPImP7j8= -----END CERTIFICATE-----Generated at Sun Sep 7 13:59:50 2025 by rpki-client