$ rpki-client -vvf repo-rpki.idnic.net/repo/27ee6bf3-2bda-4ca4-a5e7-6e70632404b4/0/4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.mft File: 4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.mft (raw, json) Hash identifier: TshPhqfdHNFJRsIWgAEkIZt884a1w0yPEB274l3VGgE= Subject key identifier: EE:27:BB:E8:0E:2D:1C:2F:29:FE:51:DF:3D:8B:5A:43:F8:55:BA:EF Authority key identifier: 4A:AA:6F:5B:5D:0E:68:58:FC:56:A3:04:65:5C:7B:B3:97:51:8D:CC Certificate issuer: /CN=4AAA6F5B5D0E6858FC56A304655C7BB397518DCC Certificate serial: 4F27227F97017067C19DF848526B3A5518C367EC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/27ee6bf3-2bda-4ca4-a5e7-6e70632404b4/0/4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.mft Manifest number: 018F Signing time: Sat 06 Sep 2025 13:40:47 +0000 Manifest this update: Sat 06 Sep 2025 13:35:47 +0000 Manifest next update: Wed 10 Sep 2025 00:46:47 +0000 Files and hashes: 1: 3130332e3231372e37362e302f32342d3234203d3e20313431393035.roa (hash: nXIgwMlbCEiRLhTmQpk3ILcP6WiZR0pqc4IDqdZRoJI=) 2: 4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.crl (hash: 1by4XZa0ydQnFTXjT8E/J5YocoznPOgdTknat0hOLGk=) 3: 3130332e3136342e38342e302f32342d3234203d3e20313431393035.roa (hash: 8uomqJJ5dPxSbtw5AaFHahACABASWlHMbpsa55zMpZI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/27ee6bf3-2bda-4ca4-a5e7-6e70632404b4/0/4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.crl rsync://repo-rpki.idnic.net/repo/27ee6bf3-2bda-4ca4-a5e7-6e70632404b4/0/4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 00:46:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:27:22:7f:97:01:70:67:c1:9d:f8:48:52:6b:3a:55:18:c3:67:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4AAA6F5B5D0E6858FC56A304655C7BB397518DCC Validity Not Before: Sep 6 13:35:47 2025 GMT Not After : Sep 10 00:46:47 2025 GMT Subject: CN=EE27BBE80E2D1C2F29FE51DF3D8B5A43F855BAEF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f4:81:d2:36:ba:15:a9:3f:03:17:db:d1:c8: 1e:4d:9a:43:65:c5:1a:64:2d:88:3f:db:a2:be:da: 64:5f:b8:33:88:25:d2:db:be:ca:1e:b2:0e:07:a9: b8:2a:ce:5d:2d:3a:64:87:ae:4c:40:0c:52:28:54: 0e:e6:53:ed:ba:ac:74:2c:e4:17:d3:b5:9f:aa:f0: 23:e0:63:96:b8:e7:74:48:54:d1:6a:99:1b:96:24: 7e:2b:9d:2a:b1:63:33:a7:68:23:90:8b:43:b4:90: 98:af:1f:8b:71:59:8a:f1:07:90:8e:ea:0f:43:ba: 8a:69:cc:47:37:50:be:dc:12:c2:15:b8:7a:f3:92: f8:0e:cc:07:92:c9:ec:55:bd:e7:80:23:4e:ca:bb: 86:65:cc:52:62:eb:ca:35:39:25:5f:38:e1:19:73: df:be:de:ec:76:a3:d9:c5:5d:b6:e1:a5:68:d9:b9: 71:b6:fa:47:b3:87:a6:f4:ad:a3:c7:ff:49:f0:f2: c8:2a:a2:53:09:2e:3c:71:0b:08:c5:70:5b:bd:b5: 31:22:85:b3:b5:a9:7a:01:c9:d7:83:b4:91:fa:d6: 71:2d:a6:f5:1d:1a:c7:01:2b:da:2b:55:a6:a5:28: ab:0f:60:ec:c2:05:d2:33:0f:e8:9a:3b:23:0f:68: af:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:27:BB:E8:0E:2D:1C:2F:29:FE:51:DF:3D:8B:5A:43:F8:55:BA:EF X509v3 Authority Key Identifier: keyid:4A:AA:6F:5B:5D:0E:68:58:FC:56:A3:04:65:5C:7B:B3:97:51:8D:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/27ee6bf3-2bda-4ca4-a5e7-6e70632404b4/0/4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27ee6bf3-2bda-4ca4-a5e7-6e70632404b4/0/4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:b8:cb:20:02:5b:25:b6:23:b1:db:b6:6f:76:76:c6:50:dc: 8a:0a:9c:e9:e0:d6:51:7f:63:7a:b2:09:c5:09:e9:bf:2d:ff: 97:01:00:cd:41:83:73:5e:c1:3d:e2:0c:00:a9:85:7b:37:a4: 1a:0a:bf:77:a2:30:92:b6:a9:d0:93:87:5e:23:39:1c:4b:7d: 1a:8f:b8:5c:fa:eb:53:1d:6e:a6:2c:dd:f0:cf:e5:e8:7e:c8: b2:a5:94:13:ab:ec:81:99:d2:af:29:a7:30:1f:ca:5e:1a:93: 42:c3:3b:a7:ca:2f:cc:07:be:02:17:d1:52:6c:03:58:c8:cb: a3:6d:07:ff:1f:e1:7b:e3:e3:3d:2e:88:e8:09:b9:c4:57:01: 8a:61:bb:ac:f2:04:85:53:0c:5d:66:8e:a5:75:f4:24:63:92: 72:0e:8e:f3:0d:9c:39:1a:83:b9:d6:bf:dc:cc:e3:c8:ee:da: b9:f8:5f:c3:6a:1c:17:fb:6d:25:ed:ea:bc:5a:e1:14:34:2b: 54:89:73:44:02:46:77:e1:ed:c8:b7:3b:89:2d:12:85:53:88: 56:eb:b8:35:a2:49:f0:5a:d9:fd:ef:23:c6:f2:e9:c0:89:68: 16:2e:16:09:fc:fe:fa:89:1b:4d:9c:a9:e0:1d:ab:66:f7:c9: 8d:74:79:dc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTycif5cBcGfBnfhIUms6VRjDZ+wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEFBQTZGNUI1RDBFNjg1OEZDNTZBMzA0NjU1QzdCQjM5 NzUxOERDQzAeFw0yNTA5MDYxMzM1NDdaFw0yNTA5MTAwMDQ2NDdaMDMxMTAvBgNV BAMTKEVFMjdCQkU4MEUyRDFDMkYyOUZFNTFERjNEOEI1QTQzRjg1NUJBRUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw9IHSNroVqT8DF9vRyB5NmkNl xRpkLYg/26K+2mRfuDOIJdLbvsoesg4Hqbgqzl0tOmSHrkxADFIoVA7mU+26rHQs 5BfTtZ+q8CPgY5a453RIVNFqmRuWJH4rnSqxYzOnaCOQi0O0kJivH4txWYrxB5CO 6g9DuoppzEc3UL7cEsIVuHrzkvgOzAeSyexVveeAI07Ku4ZlzFJi68o1OSVfOOEZ c9++3ux2o9nFXbbhpWjZuXG2+kezh6b0raPH/0nw8sgqolMJLjxxCwjFcFu9tTEi hbO1qXoBydeDtJH61nEtpvUdGscBK9orVaalKKsPYOzCBdIzD+iaOyMPaK9HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7ie76A4tHC8p/lHfPYtaQ/hVuu8wHwYDVR0j BBgwFoAUSqpvW10OaFj8VqMEZVx7s5dRjcwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y N2VlNmJmMy0yYmRhLTRjYTQtYTVlNy02ZTcwNjMyNDA0YjQvMC80QUFBNkY1QjVE MEU2ODU4RkM1NkEzMDQ2NTVDN0JCMzk3NTE4RENDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEFBQTZGNUI1RDBFNjg1OEZDNTZBMzA0NjU1QzdCQjM5NzUx OERDQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjdlZTZiZjMtMmJkYS00Y2E0LWE1 ZTctNmU3MDYzMjQwNGI0LzAvNEFBQTZGNUI1RDBFNjg1OEZDNTZBMzA0NjU1QzdC QjM5NzUxOERDQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG24yyACWyW2I7Hbtm92dsZQ3IoKnOng1lF/ Y3qyCcUJ6b8t/5cBAM1Bg3NewT3iDACphXs3pBoKv3eiMJK2qdCTh14jORxLfRqP uFz661MdbqYs3fDP5eh+yLKllBOr7IGZ0q8ppzAfyl4ak0LDO6fKL8wHvgIX0VJs A1jIy6NtB/8f4Xvj4z0uiOgJucRXAYphu6zyBIVTDF1mjqV19CRjknIOjvMNnDka g7nWv9zM48ju2rn4X8NqHBf7bSXt6rxa4RQ0K1SJc0QCRnfh7ci3O4ktEoVTiFbr uDWiSfBa2f3vI8by6cCJaBYuFgn8/vqJG02cqeAdq2b3yY10edw= -----END CERTIFICATE-----Generated at Mon Sep 8 03:04:42 2025 by rpki-client