$ rpki-client -vvf repo-rpki.idnic.net/repo/29b3be62-3597-4fe8-a795-fc9ba1202344/0/B4381C63674B5D9A9B8C44C13CF19E7DD321F7C0.mft File: B4381C63674B5D9A9B8C44C13CF19E7DD321F7C0.mft (raw, json) Hash identifier: s0Jb0DqpdbAqhDlbK2At2ySMR9LIRgWyOjA2nXGAilk= Subject key identifier: AD:71:66:9B:C6:75:BB:34:36:FF:D0:2F:DA:D4:0D:1E:77:6A:90:D1 Authority key identifier: B4:38:1C:63:67:4B:5D:9A:9B:8C:44:C1:3C:F1:9E:7D:D3:21:F7:C0 Certificate issuer: /CN=B4381C63674B5D9A9B8C44C13CF19E7DD321F7C0 Certificate serial: 708AB1D17D45757A0013BE63538F635A8010D9C7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4381C63674B5D9A9B8C44C13CF19E7DD321F7C0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/29b3be62-3597-4fe8-a795-fc9ba1202344/0/B4381C63674B5D9A9B8C44C13CF19E7DD321F7C0.mft Manifest number: 01A1 Signing time: Fri 05 Sep 2025 14:41:27 +0000 Manifest this update: Fri 05 Sep 2025 14:36:27 +0000 Manifest next update: Mon 08 Sep 2025 21:15:27 +0000 Files and hashes: 1: 3130332e32302e3231392e302f32342d3234203d3e20313439393638.roa (hash: O7tUFKX21rX6gYwZ1ZrwxitGOTUDY0G4VWaDfkWzuZ4=) 2: B4381C63674B5D9A9B8C44C13CF19E7DD321F7C0.crl (hash: OKfDC61QMXcmOxegByCMvGQjeDsT1kxvisq7DU015qo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/29b3be62-3597-4fe8-a795-fc9ba1202344/0/B4381C63674B5D9A9B8C44C13CF19E7DD321F7C0.crl rsync://repo-rpki.idnic.net/repo/29b3be62-3597-4fe8-a795-fc9ba1202344/0/B4381C63674B5D9A9B8C44C13CF19E7DD321F7C0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4381C63674B5D9A9B8C44C13CF19E7DD321F7C0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 21:15:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:8a:b1:d1:7d:45:75:7a:00:13:be:63:53:8f:63:5a:80:10:d9:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B4381C63674B5D9A9B8C44C13CF19E7DD321F7C0 Validity Not Before: Sep 5 14:36:27 2025 GMT Not After : Sep 8 21:15:27 2025 GMT Subject: CN=AD71669BC675BB3436FFD02FDAD40D1E776A90D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ff:a0:c0:aa:ea:1e:0d:04:12:75:6c:be:91: 27:0d:1b:e9:81:f2:ec:59:66:64:5f:cb:14:a7:f3: 6b:17:88:e8:b5:2e:95:4f:04:78:70:78:80:82:53: 2c:19:80:0f:3a:19:10:78:e1:66:cc:fc:89:7e:b6: df:39:81:9a:f5:85:c6:b1:08:e2:54:4d:18:8f:6b: ef:b7:bd:35:0b:63:4f:3f:5f:b2:5e:39:4b:62:9e: 93:f3:56:54:df:23:fd:ca:e9:e0:f1:8d:08:4f:42: 28:f1:72:c7:26:74:2f:a4:47:d4:b5:5b:28:76:dc: 79:b5:d6:ea:98:39:f9:24:72:b4:00:5c:c6:35:3c: da:22:b2:13:c3:2a:e3:cc:d7:5d:6e:ea:1a:2f:a6: 7f:d4:ed:79:e3:7f:6e:73:e4:37:c6:2c:49:63:e7: 6b:63:fc:9e:7a:6d:6a:9d:5c:d1:f6:05:fe:58:31: 2a:a7:d0:dd:5c:70:67:eb:cb:31:c0:d7:41:13:f0: 12:d4:6a:e9:0e:f5:df:25:a1:05:39:de:12:5f:29: cc:a5:0e:a1:e7:86:78:6f:52:4a:36:02:bc:fc:6a: 93:0d:68:c6:fa:7a:fb:11:65:88:7a:db:f8:ce:1f: bd:5c:40:8d:80:cb:b5:e1:de:e1:6b:d8:92:33:98: 94:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:71:66:9B:C6:75:BB:34:36:FF:D0:2F:DA:D4:0D:1E:77:6A:90:D1 X509v3 Authority Key Identifier: keyid:B4:38:1C:63:67:4B:5D:9A:9B:8C:44:C1:3C:F1:9E:7D:D3:21:F7:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/29b3be62-3597-4fe8-a795-fc9ba1202344/0/B4381C63674B5D9A9B8C44C13CF19E7DD321F7C0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4381C63674B5D9A9B8C44C13CF19E7DD321F7C0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/29b3be62-3597-4fe8-a795-fc9ba1202344/0/B4381C63674B5D9A9B8C44C13CF19E7DD321F7C0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:b7:94:0c:c0:f8:82:84:85:3e:2d:41:f6:c6:f9:7f:3f:8e: ae:c7:a4:d3:cd:d5:8c:75:cb:36:7a:bf:ab:0c:52:54:4b:ba: c4:7c:26:d3:87:79:8d:3c:df:d9:ea:ad:28:21:a4:b7:c2:89: 46:c8:6e:79:86:e4:56:a3:ba:de:fa:81:7d:54:68:44:1c:9a: 70:67:4c:00:9f:89:51:03:fe:ec:6d:2a:30:f4:9b:b0:7b:b5: e4:3b:5b:c7:29:8a:37:6f:e5:bb:a6:1e:7f:c1:02:09:64:67: 46:8c:66:4d:c3:0b:ad:54:56:79:71:d2:77:a2:78:f8:bd:3d: b4:3b:62:b0:ba:f6:30:2a:3c:83:ce:7a:a4:26:fa:cb:34:88: 15:25:87:84:18:27:8d:c4:e1:0a:74:3f:46:0e:54:72:c2:50: 49:df:c4:84:1d:a0:82:d0:82:bc:c3:89:c1:0a:b1:85:42:e6: 1c:34:99:f8:18:ce:1f:7f:9d:36:f5:7f:b3:50:6f:df:5b:2c: 68:c7:53:05:0b:5c:d7:59:c6:ec:f8:cc:5c:35:c3:2c:5b:ff: 05:0b:a8:5d:72:13:55:17:42:e6:1a:c5:eb:0a:11:49:52:7c: cb:65:aa:70:f3:7d:03:67:92:f4:9a:bb:12:df:ff:a2:5b:6a: 98:82:e1:93 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcIqx0X1FdXoAE75jU49jWoAQ2ccwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjQzODFDNjM2NzRCNUQ5QTlCOEM0NEMxM0NGMTlFN0RE MzIxRjdDMDAeFw0yNTA5MDUxNDM2MjdaFw0yNTA5MDgyMTE1MjdaMDMxMTAvBgNV BAMTKEFENzE2NjlCQzY3NUJCMzQzNkZGRDAyRkRBRDQwRDFFNzc2QTkwRDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr/6DAquoeDQQSdWy+kScNG+mB 8uxZZmRfyxSn82sXiOi1LpVPBHhweICCUywZgA86GRB44WbM/Il+tt85gZr1hcax COJUTRiPa++3vTULY08/X7JeOUtinpPzVlTfI/3K6eDxjQhPQijxcscmdC+kR9S1 Wyh23Hm11uqYOfkkcrQAXMY1PNoishPDKuPM111u6hovpn/U7Xnjf25z5DfGLElj 52tj/J56bWqdXNH2Bf5YMSqn0N1ccGfryzHA10ET8BLUaukO9d8loQU53hJfKcyl DqHnhnhvUko2Arz8apMNaMb6evsRZYh62/jOH71cQI2Ay7Xh3uFr2JIzmJS5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrXFmm8Z1uzQ2/9Av2tQNHndqkNEwHwYDVR0j BBgwFoAUtDgcY2dLXZqbjETBPPGefdMh98AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y OWIzYmU2Mi0zNTk3LTRmZTgtYTc5NS1mYzliYTEyMDIzNDQvMC9CNDM4MUM2MzY3 NEI1RDlBOUI4QzQ0QzEzQ0YxOUU3REQzMjFGN0MwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjQzODFDNjM2NzRCNUQ5QTlCOEM0NEMxM0NGMTlFN0REMzIx RjdDMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjliM2JlNjItMzU5Ny00ZmU4LWE3 OTUtZmM5YmExMjAyMzQ0LzAvQjQzODFDNjM2NzRCNUQ5QTlCOEM0NEMxM0NGMTlF N0REMzIxRjdDMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE+3lAzA+IKEhT4tQfbG+X8/jq7HpNPN1Yx1 yzZ6v6sMUlRLusR8JtOHeY0839nqrSghpLfCiUbIbnmG5Fajut76gX1UaEQcmnBn TACfiVED/uxtKjD0m7B7teQ7W8cpijdv5bumHn/BAglkZ0aMZk3DC61UVnlx0nei ePi9PbQ7YrC69jAqPIPOeqQm+ss0iBUlh4QYJ43E4Qp0P0YOVHLCUEnfxIQdoILQ grzDicEKsYVC5hw0mfgYzh9/nTb1f7NQb99bLGjHUwULXNdZxuz4zFw1wyxb/wUL qF1yE1UXQuYaxesKEUlSfMtlqnDzfQNnkvSauxLf/6JbapiC4ZM= -----END CERTIFICATE-----Generated at Sun Sep 7 15:17:42 2025 by rpki-client