$ rpki-client -vvf repo-rpki.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.mft File: 4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.mft (raw, json) Hash identifier: +0a7yzYMaHEqZqrVHNCJBDP9xRvYLDnY4Wi/mJJhLYk= Subject key identifier: 2F:74:EC:EB:36:A8:9B:57:A2:2A:3D:59:B8:FB:FE:4B:C9:B2:0F:2E Authority key identifier: 4F:29:04:EA:E6:6A:DD:5D:3A:C5:3C:6A:CC:B9:21:33:B4:26:DF:48 Certificate issuer: /CN=4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48 Certificate serial: 59581E8D95E71BB972AE8E860DCA0FD8A4A4E636 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.cer Subject info access: rsync://repo-rpki.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.mft Manifest number: 0507 Signing time: Sat 06 Sep 2025 20:02:29 +0000 Manifest this update: Sat 06 Sep 2025 19:57:29 +0000 Manifest next update: Wed 10 Sep 2025 01:04:29 +0000 Files and hashes: 1: 4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.crl (hash: UdL0XFnb6ncUT9xyv2OpoNbsJvyKUxBiX+5fgr7iakY=) 2: 323430353a396363303a3a2f33322d3438203d3e20313339393637.roa (hash: M/EH2rI4ldQhZaUe9MI4EQP0BkiCCMhjU2Ci0XOya8Q=) 3: 3130332e3134362e3138342e302f32332d3234203d3e20313339393637.roa (hash: RvVL0eKqhvW5Nd9pF2jqsL2iAerie+UOp2Ou6UGubqQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.crl rsync://repo-rpki.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 01:04:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:58:1e:8d:95:e7:1b:b9:72:ae:8e:86:0d:ca:0f:d8:a4:a4:e6:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48 Validity Not Before: Sep 6 19:57:29 2025 GMT Not After : Sep 10 01:04:29 2025 GMT Subject: CN=2F74ECEB36A89B57A22A3D59B8FBFE4BC9B20F2E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:af:13:89:6d:09:17:c8:41:fe:9b:a5:ee:a6: 12:82:35:f1:6d:cd:ed:ef:36:51:a5:56:e1:1d:d4: 32:ed:60:a8:22:98:e7:42:c5:83:7d:73:2c:02:a0: e2:4d:c8:0f:c2:2d:2b:9d:79:63:ba:c2:27:9d:4c: 98:9b:dc:6a:ef:a4:c3:2d:95:97:bf:40:2f:4a:55: e6:29:91:3b:56:6b:05:76:44:ee:4d:0d:d8:c0:9b: 53:57:f5:e3:0d:56:f3:71:73:66:6f:2f:4d:1a:8e: 77:02:4f:44:9a:b0:aa:23:24:87:ec:5e:2d:c2:bd: d9:98:0c:25:a1:79:e7:f2:07:67:6e:37:1c:03:23: 1c:9d:7a:cf:ce:69:51:c9:8e:8d:f0:5e:2c:d4:c5: 67:cf:29:34:ae:61:78:8f:15:d6:ee:e3:cc:6d:15: 19:af:a5:e1:f5:36:94:7a:19:0e:30:bd:9d:21:d9: fb:b3:73:26:ab:97:60:42:de:0a:df:71:09:32:e5: 62:ea:48:0d:50:f6:43:a0:64:33:f6:58:ee:81:ff: 03:77:18:9d:cc:1d:06:75:8a:8a:13:1b:6a:90:c8: 2b:c7:d6:04:ca:73:03:ee:14:90:ef:08:c4:c7:4d: e3:65:f8:8f:23:c2:b0:db:c1:c5:6b:de:d6:9f:69: 11:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:74:EC:EB:36:A8:9B:57:A2:2A:3D:59:B8:FB:FE:4B:C9:B2:0F:2E X509v3 Authority Key Identifier: keyid:4F:29:04:EA:E6:6A:DD:5D:3A:C5:3C:6A:CC:B9:21:33:B4:26:DF:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:04:75:7f:20:97:9a:e0:c4:50:2d:fc:30:df:90:ec:18:3a: 5d:4e:2e:98:5f:5b:8e:f8:8d:3d:7a:7f:e1:40:58:58:7e:68: 48:1c:0b:ba:0f:1e:80:1e:24:8e:12:ab:2d:38:21:55:3b:cd: 5c:00:3a:58:18:24:5e:f8:71:36:5e:b6:fc:d6:db:8a:58:02: f2:bf:59:ca:ad:5e:d0:f0:c7:c4:c1:d9:b5:a3:13:8d:36:d7: f0:0e:3d:28:8f:72:e5:d3:4c:07:32:eb:b9:24:7d:47:af:ac: d4:fc:10:46:f7:d1:d7:1b:9c:cb:d1:70:8b:c0:46:44:30:00: 15:7b:cd:c9:c4:2b:23:f6:d8:b3:fe:eb:46:18:85:e8:ba:3a: b0:67:50:00:d4:41:36:4f:b9:85:a8:8e:59:aa:b3:62:d8:71: 7d:a2:a2:1d:1c:c7:b1:14:49:03:41:50:9a:3a:ff:e3:28:77: 9a:89:2c:1b:a2:c4:52:0e:49:c2:6f:04:2c:a6:e6:25:03:ad: bf:98:dc:7b:51:5c:2b:15:bc:c8:6d:2c:7a:c2:02:2b:ea:d9: 62:1e:2e:0c:a1:2b:e5:f6:97:94:1b:74:35:d5:3b:bb:b0:0a: 90:53:f9:9a:6d:28:3c:11:ff:10:34:be:45:f9:be:fb:64:26: 4b:47:07:bc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWVgejZXnG7lyro6GDcoP2KSk5jYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEYyOTA0RUFFNjZBREQ1RDNBQzUzQzZBQ0NCOTIxMzNC NDI2REY0ODAeFw0yNTA5MDYxOTU3MjlaFw0yNTA5MTAwMTA0MjlaMDMxMTAvBgNV BAMTKDJGNzRFQ0VCMzZBODlCNTdBMjJBM0Q1OUI4RkJGRTRCQzlCMjBGMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDrxOJbQkXyEH+m6XuphKCNfFt ze3vNlGlVuEd1DLtYKgimOdCxYN9cywCoOJNyA/CLSudeWO6wiedTJib3GrvpMMt lZe/QC9KVeYpkTtWawV2RO5NDdjAm1NX9eMNVvNxc2ZvL00ajncCT0SasKojJIfs Xi3CvdmYDCWheefyB2duNxwDIxydes/OaVHJjo3wXizUxWfPKTSuYXiPFdbu48xt FRmvpeH1NpR6GQ4wvZ0h2fuzcyarl2BC3grfcQky5WLqSA1Q9kOgZDP2WO6B/wN3 GJ3MHQZ1iooTG2qQyCvH1gTKcwPuFJDvCMTHTeNl+I8jwrDbwcVr3tafaRH5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUL3Ts6zaom1eiKj1ZuPv+S8myDy4wHwYDVR0j BBgwFoAUTykE6uZq3V06xTxqzLkhM7Qm30gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y OWM1MzI3Zi0xMGZkLTRjZjAtODUxYy0wY2ZjZDNjM2M2OTcvMC80RjI5MDRFQUU2 NkFERDVEM0FDNTNDNkFDQ0I5MjEzM0I0MjZERjQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEYyOTA0RUFFNjZBREQ1RDNBQzUzQzZBQ0NCOTIxMzNCNDI2 REY0OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjljNTMyN2YtMTBmZC00Y2YwLTg1 MWMtMGNmY2QzYzNjNjk3LzAvNEYyOTA0RUFFNjZBREQ1RDNBQzUzQzZBQ0NCOTIx MzNCNDI2REY0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJMEdX8gl5rgxFAt/DDfkOwYOl1OLphfW474 jT16f+FAWFh+aEgcC7oPHoAeJI4Sqy04IVU7zVwAOlgYJF74cTZetvzW24pYAvK/ WcqtXtDwx8TB2bWjE4021/AOPSiPcuXTTAcy67kkfUevrNT8EEb30dcbnMvRcIvA RkQwABV7zcnEKyP22LP+60YYhei6OrBnUADUQTZPuYWojlmqs2LYcX2ioh0cx7EU SQNBUJo6/+Mod5qJLBuixFIOScJvBCym5iUDrb+Y3HtRXCsVvMhtLHrCAivq2WIe LgyhK+X2l5QbdDXVO7uwCpBT+ZptKDwR/xA0vkX5vvtkJktHB7w= -----END CERTIFICATE-----Generated at Sun Sep 7 15:27:07 2025 by rpki-client