$ rpki-client -vvf repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/4F40845626DE4E373F550B654EA4E833B6EB4D27.mft File: 4F40845626DE4E373F550B654EA4E833B6EB4D27.mft (raw, json) Hash identifier: pAwF4xQQ5G5IQfYa82vQV7ewjhTMBE4sipOt8dVixic= Subject key identifier: C9:18:2C:37:DE:64:F1:72:E3:62:0C:DC:2B:55:E2:F1:74:2C:BD:0F Authority key identifier: 4F:40:84:56:26:DE:4E:37:3F:55:0B:65:4E:A4:E8:33:B6:EB:4D:27 Certificate issuer: /CN=4F40845626DE4E373F550B654EA4E833B6EB4D27 Certificate serial: 22806764F448C5CA79652775062FAD372D9ED858 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F40845626DE4E373F550B654EA4E833B6EB4D27.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/4F40845626DE4E373F550B654EA4E833B6EB4D27.mft Manifest number: 03AA Signing time: Thu 04 Sep 2025 10:00:01 +0000 Manifest this update: Thu 04 Sep 2025 09:55:01 +0000 Manifest next update: Sun 07 Sep 2025 12:04:01 +0000 Files and hashes: 1: 3130332e3136382e3134362e302f32342d3234203d3e20313430343433.roa (hash: fuK+11s2WzcqL7Onn6Tm/NBVUUPod7SmDLox9Y+iIpg=) 2: 4F40845626DE4E373F550B654EA4E833B6EB4D27.crl (hash: w3xZHr/Tni66JoXa/4GEPpqqZcMkfM7Lfw/861/RjUw=) 3: 3130332e3136382e3134362e302f32332d3233203d3e20313430343433.roa (hash: gb5iQXmVJxzms9P45gaXkbTb5EFMl0u9BkF63p+v5Kk=) 4: 3130332e3136382e3134372e302f32342d3234203d3e20313430343433.roa (hash: vfImiFEds0caJl5aBP0MxYhFkdq8Ac7hTgD2QgZXO/g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/4F40845626DE4E373F550B654EA4E833B6EB4D27.crl rsync://repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/4F40845626DE4E373F550B654EA4E833B6EB4D27.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F40845626DE4E373F550B654EA4E833B6EB4D27.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 12:04:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:80:67:64:f4:48:c5:ca:79:65:27:75:06:2f:ad:37:2d:9e:d8:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4F40845626DE4E373F550B654EA4E833B6EB4D27 Validity Not Before: Sep 4 09:55:01 2025 GMT Not After : Sep 7 12:04:01 2025 GMT Subject: CN=C9182C37DE64F172E3620CDC2B55E2F1742CBD0F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:df:8b:8d:e7:09:b6:a3:28:b2:4a:bb:bb:a7: 3d:3f:01:4d:45:e7:6d:19:6b:32:58:f3:b4:2f:5e: 17:4d:06:0b:6e:26:89:80:f0:76:c3:b3:bb:8b:bf: 22:dd:eb:d6:d5:c7:f9:84:ae:b6:02:f4:fe:0c:14: cc:e3:3d:e1:3c:b5:c0:47:30:f5:da:de:11:7e:45: e9:db:29:4f:69:4a:64:4d:74:35:59:8f:27:38:07: 9e:4f:77:f2:d7:16:c5:97:33:e6:ae:a3:ef:cd:58: 4a:1f:23:da:32:81:9d:88:04:a4:78:7c:61:0e:19: b8:46:e6:d5:1d:25:92:82:a9:38:44:f8:40:49:11: 48:1a:4c:d8:a7:c2:a0:51:b2:c9:9f:f6:07:39:a6: 0c:56:85:e9:e5:54:d1:0a:55:7c:22:76:1f:b1:ff: c5:e3:ba:90:8d:1c:a6:15:c0:7f:e2:47:4d:05:aa: 73:30:3e:e2:97:77:87:c6:d4:97:d9:c6:1c:61:26: 23:ee:06:fc:17:23:15:ea:a2:12:0d:4c:87:4a:5a: 52:a5:15:45:df:42:b4:99:5d:04:b8:5c:36:b4:10: de:d8:99:ef:ba:85:99:49:5e:49:c6:84:6e:64:3a: 1c:ee:a8:39:b6:d5:ad:f2:9b:0b:f7:b8:43:79:88: 7d:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:18:2C:37:DE:64:F1:72:E3:62:0C:DC:2B:55:E2:F1:74:2C:BD:0F X509v3 Authority Key Identifier: keyid:4F:40:84:56:26:DE:4E:37:3F:55:0B:65:4E:A4:E8:33:B6:EB:4D:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/4F40845626DE4E373F550B654EA4E833B6EB4D27.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F40845626DE4E373F550B654EA4E833B6EB4D27.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/4F40845626DE4E373F550B654EA4E833B6EB4D27.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:fd:31:14:17:38:59:4e:74:ce:cb:f4:c2:8a:92:4c:0c:bd: f9:84:44:0a:53:de:66:ed:9e:07:74:f7:e9:cc:a4:60:66:32: 8e:91:03:43:a9:5b:19:b1:f8:47:e9:a4:41:c3:6a:c8:76:c9: c0:5c:6a:0d:cf:f6:65:f9:fc:3b:24:de:cb:b9:05:83:d0:dc: 66:ef:69:59:16:bf:81:ea:dc:ee:03:72:b0:76:34:83:a6:14: fe:1d:bd:27:e8:7d:39:27:26:82:97:4e:4d:b8:4e:57:2a:3d: 0f:17:50:b8:7d:92:64:83:ab:d0:a6:dd:13:21:79:a1:df:78: 74:e7:8a:d5:ce:d3:26:58:0c:f7:fe:c5:a5:45:a7:f3:55:1f: 48:56:b0:b2:e3:f8:b8:3f:f6:ea:b0:e7:dc:9e:ff:1a:9c:7a: 79:90:42:f4:d4:8b:5c:35:93:f2:11:ce:73:b3:c5:b2:29:a0: 6f:42:76:09:ec:76:45:a4:20:ae:53:c6:0e:c7:df:35:69:38: 9e:6c:b7:8f:c2:9b:f3:4f:75:71:04:0f:7a:55:ae:6a:e8:47: b9:bf:84:aa:aa:3b:fb:a2:e7:35:a3:db:99:9e:ae:32:27:c6: 95:7e:6c:c3:c0:67:fc:38:ac:b1:0d:32:4f:99:d0:6b:08:a7: ad:19:c7:0c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIoBnZPRIxcp5ZSd1Bi+tNy2e2FgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEY0MDg0NTYyNkRFNEUzNzNGNTUwQjY1NEVBNEU4MzNC NkVCNEQyNzAeFw0yNTA5MDQwOTU1MDFaFw0yNTA5MDcxMjA0MDFaMDMxMTAvBgNV BAMTKEM5MTgyQzM3REU2NEYxNzJFMzYyMENEQzJCNTVFMkYxNzQyQ0JEMEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn34uN5wm2oyiySru7pz0/AU1F 520ZazJY87QvXhdNBgtuJomA8HbDs7uLvyLd69bVx/mErrYC9P4MFMzjPeE8tcBH MPXa3hF+RenbKU9pSmRNdDVZjyc4B55Pd/LXFsWXM+auo+/NWEofI9oygZ2IBKR4 fGEOGbhG5tUdJZKCqThE+EBJEUgaTNinwqBRssmf9gc5pgxWhenlVNEKVXwidh+x /8XjupCNHKYVwH/iR00FqnMwPuKXd4fG1JfZxhxhJiPuBvwXIxXqohINTIdKWlKl FUXfQrSZXQS4XDa0EN7Yme+6hZlJXknGhG5kOhzuqDm21a3ymwv3uEN5iH0ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyRgsN95k8XLjYgzcK1Xi8XQsvQ8wHwYDVR0j BBgwFoAUT0CEVibeTjc/VQtlTqToM7brTScwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YTQ2MzYwZC02NjJiLTRmN2QtYmIxNy1kODYwODIxNTI0NzEvMC80RjQwODQ1NjI2 REU0RTM3M0Y1NTBCNjU0RUE0RTgzM0I2RUI0RDI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEY0MDg0NTYyNkRFNEUzNzNGNTUwQjY1NEVBNEU4MzNCNkVC NEQyNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2E0NjM2MGQtNjYyYi00ZjdkLWJi MTctZDg2MDgyMTUyNDcxLzAvNEY0MDg0NTYyNkRFNEUzNzNGNTUwQjY1NEVBNEU4 MzNCNkVCNEQyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAH9MRQXOFlOdM7L9MKKkkwMvfmERApT3mbt ngd09+nMpGBmMo6RA0OpWxmx+EfppEHDash2ycBcag3P9mX5/Dsk3su5BYPQ3Gbv aVkWv4Hq3O4DcrB2NIOmFP4dvSfofTknJoKXTk24TlcqPQ8XULh9kmSDq9Cm3RMh eaHfeHTnitXO0yZYDPf+xaVFp/NVH0hWsLLj+Lg/9uqw59ye/xqcenmQQvTUi1w1 k/IRznOzxbIpoG9CdgnsdkWkIK5Txg7H3zVpOJ5st4/Cm/NPdXEED3pVrmroR7m/ hKqqO/ui5zWj25merjInxpV+bMPAZ/w4rLENMk+Z0GsIp60Zxww= -----END CERTIFICATE-----Generated at Fri Sep 5 12:43:17 2025 by rpki-client