$ rpki-client -vvf repo-rpki.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.mft File: C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.mft (raw, json) Hash identifier: GaFOW3EmdwfKssysxZM3g5dLfLl6ftqkRZKPeSH3QjQ= Subject key identifier: 2A:B6:0C:1C:C3:ED:5A:D2:84:D8:E6:DC:49:E4:F8:DC:EA:80:44:8A Authority key identifier: C4:CE:1B:D3:CB:FB:01:5E:60:96:5A:65:E2:FB:31:A6:BA:26:18:9B Certificate issuer: /CN=C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B Certificate serial: 35D21CEF3642931BD213FDA12A359E87F233157B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.mft Manifest number: 0508 Signing time: Tue 16 Sep 2025 08:12:03 +0000 Manifest this update: Tue 16 Sep 2025 08:07:03 +0000 Manifest next update: Fri 19 Sep 2025 14:26:03 +0000 Files and hashes: 1: 3130332e3135352e3136362e302f32342d3234203d3e20313431303634.roa (hash: sI3bqifKZVIOhDY6Sh1Zbn3Bg29Wg0wSaItyUUWUok4=) 2: C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.crl (hash: urIc7EBI4Y5g6hc/8A7IlDXywcPUd/1SEP1FeS7DL8M=) 3: 3130332e3135352e3136372e302f32342d3234203d3e20313431303634.roa (hash: bjlsGk5J7SvEO5IoZ47H9V39bFhtmZq3wwyih52cSks=) 4: 3130332e3135352e3136362e302f32332d3233203d3e20313431303634.roa (hash: eyzaiFvv4c1HmHtA1p4wBBlGeENQrifGbWD1MbCWveE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.crl rsync://repo-rpki.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Sep 2025 14:26:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:d2:1c:ef:36:42:93:1b:d2:13:fd:a1:2a:35:9e:87:f2:33:15:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B Validity Not Before: Sep 16 08:07:03 2025 GMT Not After : Sep 19 14:26:03 2025 GMT Subject: CN=2AB60C1CC3ED5AD284D8E6DC49E4F8DCEA80448A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:cd:1b:cd:83:a5:88:fa:95:62:36:a7:29:e4: 1b:a2:4a:ed:ac:bc:a7:b3:d5:71:e4:33:14:11:41: 5f:51:aa:e6:c7:54:a7:23:13:c0:b2:36:38:c3:2d: ba:e3:fc:00:7b:3e:a9:4f:b9:66:50:9e:b2:5a:c2: 93:ad:f6:ad:76:54:91:43:6c:3b:ce:e0:02:83:32: 94:2a:f1:96:dc:c0:01:c1:da:03:02:69:2b:fb:74: d7:04:b6:29:23:4d:c6:db:4c:cc:4b:14:f7:50:98: 91:5f:8f:32:e8:dc:a9:54:f0:7b:24:57:02:8e:fb: 65:3a:64:cb:a1:a2:54:5c:48:d1:67:7e:d6:c7:79: fe:03:95:7f:e3:0a:35:3f:fa:25:52:94:ef:38:75: 15:54:53:21:6a:78:39:cf:b6:b7:2e:b5:a0:27:ea: 00:83:81:5e:13:c6:5e:73:34:1f:ac:25:48:06:b8: 41:04:eb:69:42:2e:42:53:cf:f7:1b:45:55:eb:50: 01:67:c3:7b:cd:2e:d3:a5:64:46:f8:c4:87:43:e2: 56:8a:1c:de:0c:f1:8c:81:7e:e2:21:80:9c:87:20: 53:17:a9:cf:19:d6:94:fc:a8:e9:e2:b2:fa:01:5f: 47:43:a5:1f:30:fc:39:68:db:78:3d:93:e1:ba:fe: b2:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:B6:0C:1C:C3:ED:5A:D2:84:D8:E6:DC:49:E4:F8:DC:EA:80:44:8A X509v3 Authority Key Identifier: keyid:C4:CE:1B:D3:CB:FB:01:5E:60:96:5A:65:E2:FB:31:A6:BA:26:18:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:4a:84:21:46:b8:43:6a:32:14:63:ef:ae:2b:10:29:ff:9b: 93:c4:cb:60:8a:a7:c6:01:12:0e:1f:72:49:04:73:fa:9b:bc: d3:4a:77:a9:64:35:57:9e:e1:1c:fe:ec:fa:01:68:e9:8c:e0: 00:1a:70:9d:6a:6d:51:24:d3:e1:5a:5c:d3:95:f1:3e:68:d6: 82:09:28:83:ca:07:05:6a:cd:6a:a2:31:2a:04:92:91:18:aa: 75:3c:f4:5c:44:af:e8:4d:4e:24:68:fa:4c:a2:a4:e4:50:15: 52:b8:ba:91:e2:4d:3c:4b:d8:fb:53:50:0f:76:1e:5a:6d:82: 06:2a:97:6a:fc:a1:09:cb:ca:bc:66:1d:ad:81:94:8a:78:2c: ff:4f:63:59:21:bf:5f:92:96:50:95:c5:74:06:13:9b:2d:b4: 94:9d:e1:2f:f5:b2:ce:13:70:72:c6:69:80:3f:7a:e1:17:6b: 82:d2:16:a5:ce:9b:6b:5b:fa:80:10:73:fa:28:09:07:09:8d: 62:ed:1b:d3:98:67:94:38:2f:5f:8e:18:3d:47:ee:f7:93:3e: ca:29:3e:e4:6b:db:93:41:1f:0c:ce:c8:3c:78:e6:2c:31:6d: a9:66:ce:a0:92:c9:57:c0:3e:a3:7a:a3:af:98:95:6e:7e:f9: fa:f1:2a:19 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNdIc7zZCkxvSE/2hKjWeh/IzFXswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzRDRTFCRDNDQkZCMDE1RTYwOTY1QTY1RTJGQjMxQTZC QTI2MTg5QjAeFw0yNTA5MTYwODA3MDNaFw0yNTA5MTkxNDI2MDNaMDMxMTAvBgNV BAMTKDJBQjYwQzFDQzNFRDVBRDI4NEQ4RTZEQzQ5RTRGOERDRUE4MDQ0OEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCszRvNg6WI+pViNqcp5BuiSu2s vKez1XHkMxQRQV9RqubHVKcjE8CyNjjDLbrj/AB7PqlPuWZQnrJawpOt9q12VJFD bDvO4AKDMpQq8ZbcwAHB2gMCaSv7dNcEtikjTcbbTMxLFPdQmJFfjzLo3KlU8Hsk VwKO+2U6ZMuholRcSNFnftbHef4DlX/jCjU/+iVSlO84dRVUUyFqeDnPtrcutaAn 6gCDgV4Txl5zNB+sJUgGuEEE62lCLkJTz/cbRVXrUAFnw3vNLtOlZEb4xIdD4laK HN4M8YyBfuIhgJyHIFMXqc8Z1pT8qOnisvoBX0dDpR8w/Dlo23g9k+G6/rKjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKrYMHMPtWtKE2ObcSeT43OqARIowHwYDVR0j BBgwFoAUxM4b08v7AV5gllpl4vsxpromGJswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YzZiMmJkNy1kN2YxLTQ4MTUtYTYwYS1jYWQ1NDAyOWNlODgvMC9DNENFMUJEM0NC RkIwMTVFNjA5NjVBNjVFMkZCMzFBNkJBMjYxODlCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzRDRTFCRDNDQkZCMDE1RTYwOTY1QTY1RTJGQjMxQTZCQTI2 MTg5Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGM2YjJiZDctZDdmMS00ODE1LWE2 MGEtY2FkNTQwMjljZTg4LzAvQzRDRTFCRDNDQkZCMDE1RTYwOTY1QTY1RTJGQjMx QTZCQTI2MTg5Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHhKhCFGuENqMhRj764rECn/m5PEy2CKp8YB Eg4fckkEc/qbvNNKd6lkNVee4Rz+7PoBaOmM4AAacJ1qbVEk0+FaXNOV8T5o1oIJ KIPKBwVqzWqiMSoEkpEYqnU89FxEr+hNTiRo+kyipORQFVK4upHiTTxL2PtTUA92 HlptggYql2r8oQnLyrxmHa2BlIp4LP9PY1khv1+SllCVxXQGE5sttJSd4S/1ss4T cHLGaYA/euEXa4LSFqXOm2tb+oAQc/ooCQcJjWLtG9OYZ5Q4L1+OGD1H7veTPsop PuRr25NBHwzOyDx45iwxbalmzqCSyVfAPqN6o6+YlW5++frxKhk= -----END CERTIFICATE-----Generated at Wed Sep 17 19:21:58 2025 by rpki-client