$ rpki-client -vvf repo-rpki.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.mft File: 4AC7DCD8EB1234ADC427AEBE3949E8691638A707.mft (raw, json) Hash identifier: i5JA93+FAgM1C22pI8ztKt8OOaKAmY1dsCv7MowBVKc= Subject key identifier: D4:71:9F:0A:C6:9A:36:CA:EF:A3:30:C6:30:43:A9:A1:9C:B2:1C:A3 Authority key identifier: 4A:C7:DC:D8:EB:12:34:AD:C4:27:AE:BE:39:49:E8:69:16:38:A7:07 Certificate issuer: /CN=4AC7DCD8EB1234ADC427AEBE3949E8691638A707 Certificate serial: 440A7BB27B7A2E4CF771C9151A468573425A5CBB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.cer Subject info access: rsync://repo-rpki.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.mft Manifest number: 020E Signing time: Fri 05 Sep 2025 04:20:46 +0000 Manifest this update: Fri 05 Sep 2025 04:15:46 +0000 Manifest next update: Mon 08 Sep 2025 13:54:46 +0000 Files and hashes: 1: 3130332e382e39362e302f32322d3234203d3e203137343530.roa (hash: 3PeI4c1+04C9ghzq6F40f5013YnnignJ8PNDhSKl9BY=) 2: 3131392e322e36342e302f31392d3234203d3e203137343530.roa (hash: Uce528/KV3oCstaRCZguiOogFuox/yiwX1g2nJn55uk=) 3: 3230322e362e3230382e302f32302d3234203d3e203137343530.roa (hash: wpi+A3QiGq0ZlH1T9XK03PNS16oXniLKGOp2khUpYoA=) 4: 4AC7DCD8EB1234ADC427AEBE3949E8691638A707.crl (hash: IpkSKEF4QjgzgnGNhSzIbEPJcO88Tcvid9uBop65eRA=) 5: 323030313a6466363a366630303a3a2f34382d3438203d3e20313331373034.roa (hash: 3CBY+1byt2hh1kG4N61+QCfs3v8FSbnr3cgZmaX/kYc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.crl rsync://repo-rpki.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 13:54:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:0a:7b:b2:7b:7a:2e:4c:f7:71:c9:15:1a:46:85:73:42:5a:5c:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4AC7DCD8EB1234ADC427AEBE3949E8691638A707 Validity Not Before: Sep 5 04:15:46 2025 GMT Not After : Sep 8 13:54:46 2025 GMT Subject: CN=D4719F0AC69A36CAEFA330C63043A9A19CB21CA3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:2f:65:b5:c4:7c:33:27:e0:58:e8:cd:79:6e: 52:f9:3a:1c:93:c7:1c:1d:69:73:2b:5f:0f:75:22: 9a:2e:bf:fd:ef:4a:65:1d:bc:a0:69:33:86:d0:cc: 08:e7:ba:eb:b5:04:82:d4:70:81:95:9e:28:2b:b4: 58:4a:b3:e1:bf:05:dd:e0:04:0d:eb:d7:dc:d8:61: 4e:57:0e:85:0b:8e:83:c5:a1:12:d9:19:93:7e:57: ef:00:0f:45:49:40:41:a4:0f:3a:c0:69:4b:dd:48: 2f:96:a2:ff:32:0d:ab:7c:37:5e:81:1e:dc:e0:72: cc:f8:8d:16:71:a1:93:04:d1:04:2a:aa:9a:68:d9: 2e:af:d4:3c:6a:f8:0f:a0:26:49:6d:02:cf:92:10: a9:cb:b7:51:b1:fe:23:f6:0a:44:e3:e7:1d:ac:dc: df:87:f4:f7:a7:ea:d5:8e:a3:e4:00:eb:9a:45:a6: ce:8d:af:a3:f7:6d:44:cf:da:f0:cf:1c:94:96:46: 7d:e9:46:ee:75:13:52:49:e6:ef:a9:40:66:4f:80: 4e:37:9c:94:a4:28:99:d1:f5:5a:a0:5c:84:8a:a8: 45:7f:1e:f1:bf:0e:9b:67:51:96:86:5d:2c:1e:2f: 7a:57:6d:ea:ef:9d:ce:ba:06:9b:ae:4b:3c:c8:59: de:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:71:9F:0A:C6:9A:36:CA:EF:A3:30:C6:30:43:A9:A1:9C:B2:1C:A3 X509v3 Authority Key Identifier: keyid:4A:C7:DC:D8:EB:12:34:AD:C4:27:AE:BE:39:49:E8:69:16:38:A7:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:8a:38:07:95:b9:61:a6:5b:19:9d:fa:f3:ce:bc:5c:ec:25: 39:ba:dc:96:4c:02:54:c6:b7:e4:9d:79:60:54:28:1b:d6:50: b9:c2:52:90:1e:d2:89:7e:7c:e2:18:01:57:51:d3:1f:5f:e8: cd:de:12:01:c1:9a:f3:04:c5:a7:de:69:b5:d8:3e:7b:59:bb: 1a:93:15:2e:79:f0:cf:cf:d4:c4:9e:c0:0e:d4:0d:6c:32:11: f6:eb:0a:69:f8:77:77:0b:6d:d8:f7:8e:c6:55:0b:f9:09:32: 59:a2:ac:de:52:1a:62:91:e0:46:bf:1a:8d:9f:45:a9:cf:e5: f2:0e:b1:ad:7c:ec:50:0f:92:26:f6:ae:61:01:51:a1:fc:44: 7e:34:67:ef:33:46:24:ca:58:f3:27:a2:5f:9f:ae:97:9e:9c: de:26:03:88:73:d0:79:ae:a1:71:c3:0e:4e:18:7b:17:4b:dd: 82:c7:e1:84:b6:7a:df:a4:3b:77:91:8e:43:d3:f4:3e:e4:fb: 01:28:3a:b0:c5:e4:cb:26:dc:d3:30:b6:bc:6a:01:0f:54:8d: 45:b1:47:96:8f:81:d8:9b:05:f5:b3:f4:55:9b:c6:64:07:ff: 13:55:b2:60:2e:b2:8a:11:f0:a4:5f:7f:39:f1:c4:c3:26:80: a8:d6:6d:b6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURAp7snt6Lkz3cckVGkaFc0JaXLswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEFDN0RDRDhFQjEyMzRBREM0MjdBRUJFMzk0OUU4Njkx NjM4QTcwNzAeFw0yNTA5MDUwNDE1NDZaFw0yNTA5MDgxMzU0NDZaMDMxMTAvBgNV BAMTKEQ0NzE5RjBBQzY5QTM2Q0FFRkEzMzBDNjMwNDNBOUExOUNCMjFDQTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxL2W1xHwzJ+BY6M15blL5OhyT xxwdaXMrXw91Ipouv/3vSmUdvKBpM4bQzAjnuuu1BILUcIGVnigrtFhKs+G/Bd3g BA3r19zYYU5XDoULjoPFoRLZGZN+V+8AD0VJQEGkDzrAaUvdSC+Wov8yDat8N16B Htzgcsz4jRZxoZME0QQqqppo2S6v1Dxq+A+gJkltAs+SEKnLt1Gx/iP2CkTj5x2s 3N+H9Pen6tWOo+QA65pFps6Nr6P3bUTP2vDPHJSWRn3pRu51E1JJ5u+pQGZPgE43 nJSkKJnR9VqgXISKqEV/HvG/DptnUZaGXSweL3pXbervnc66BpuuSzzIWd5zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1HGfCsaaNsrvozDGMEOpoZyyHKMwHwYDVR0j BBgwFoAUSsfc2OsSNK3EJ66+OUnoaRY4pwcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MzgwNjFmMS1mYTMwLTRiZDYtODFhMC0yZWM2NzA4MzZjNDIvMC80QUM3RENEOEVC MTIzNEFEQzQyN0FFQkUzOTQ5RTg2OTE2MzhBNzA3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEFDN0RDRDhFQjEyMzRBREM0MjdBRUJFMzk0OUU4NjkxNjM4 QTcwNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDM4MDYxZjEtZmEzMC00YmQ2LTgx YTAtMmVjNjcwODM2YzQyLzAvNEFDN0RDRDhFQjEyMzRBREM0MjdBRUJFMzk0OUU4 NjkxNjM4QTcwNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABuKOAeVuWGmWxmd+vPOvFzsJTm63JZMAlTG t+SdeWBUKBvWULnCUpAe0ol+fOIYAVdR0x9f6M3eEgHBmvMExafeabXYPntZuxqT FS558M/P1MSewA7UDWwyEfbrCmn4d3cLbdj3jsZVC/kJMlmirN5SGmKR4Ea/Go2f RanP5fIOsa187FAPkib2rmEBUaH8RH40Z+8zRiTKWPMnol+frpeenN4mA4hz0Hmu oXHDDk4YexdL3YLH4YS2et+kO3eRjkPT9D7k+wEoOrDF5Msm3NMwtrxqAQ9UjUWx R5aPgdibBfWz9FWbxmQH/xNVsmAusooR8KRffznxxMMmgKjWbbY= -----END CERTIFICATE-----Generated at Fri Sep 5 12:46:51 2025 by rpki-client