$ rpki-client -vvf repo-rpki.idnic.net/repo/533f60e6-afdd-4e10-83b4-e8cbd641c52f/0/4EB8521D8427720F50A3F65249F2D26C6CD22F13.mft File: 4EB8521D8427720F50A3F65249F2D26C6CD22F13.mft (raw, json) Hash identifier: Rej5jFiXRb4NjklifP4p+gkufpj/HZ9RnJ/fnVyqdl8= Subject key identifier: 94:69:22:DE:D3:FB:D4:F7:62:C9:DB:84:AF:C3:C2:7A:26:0F:61:BB Authority key identifier: 4E:B8:52:1D:84:27:72:0F:50:A3:F6:52:49:F2:D2:6C:6C:D2:2F:13 Certificate issuer: /CN=4EB8521D8427720F50A3F65249F2D26C6CD22F13 Certificate serial: 70728BD2B8733E4F0275BD2B561AB598B66DFB62 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4EB8521D8427720F50A3F65249F2D26C6CD22F13.cer Subject info access: rsync://repo-rpki.idnic.net/repo/533f60e6-afdd-4e10-83b4-e8cbd641c52f/0/4EB8521D8427720F50A3F65249F2D26C6CD22F13.mft Manifest number: 01F1 Signing time: Fri 05 Sep 2025 03:01:29 +0000 Manifest this update: Fri 05 Sep 2025 02:56:29 +0000 Manifest next update: Mon 08 Sep 2025 14:15:29 +0000 Files and hashes: 1: 3130332e3135382e3135342e302f32342d3234203d3e20313431313236.roa (hash: lpElssmpxfbgKNNgmUzWoL87GOZos951RTYVyi3dLoQ=) 2: 3130332e3135382e3135342e302f32332d3233203d3e20313431313236.roa (hash: KoxYk2ZRPcbgpF7xh9ACZAj2oe0zktHzsGiH4v0qag8=) 3: 4EB8521D8427720F50A3F65249F2D26C6CD22F13.crl (hash: Iut+PhvN+osD+q0n8evYaX3Ujp0D0izObLyKuSNJ2Pw=) 4: 3130332e3135382e3135352e302f32342d3234203d3e20313431313236.roa (hash: OpAGSXy4nDXjC/N8zkYIDwXuoKZWJrsqeYGg4c9hm6U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/533f60e6-afdd-4e10-83b4-e8cbd641c52f/0/4EB8521D8427720F50A3F65249F2D26C6CD22F13.crl rsync://repo-rpki.idnic.net/repo/533f60e6-afdd-4e10-83b4-e8cbd641c52f/0/4EB8521D8427720F50A3F65249F2D26C6CD22F13.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4EB8521D8427720F50A3F65249F2D26C6CD22F13.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 14:15:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:72:8b:d2:b8:73:3e:4f:02:75:bd:2b:56:1a:b5:98:b6:6d:fb:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4EB8521D8427720F50A3F65249F2D26C6CD22F13 Validity Not Before: Sep 5 02:56:29 2025 GMT Not After : Sep 8 14:15:29 2025 GMT Subject: CN=946922DED3FBD4F762C9DB84AFC3C27A260F61BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:7e:08:17:8e:9e:c2:25:7b:d9:86:0a:3f:68: 62:74:2f:ac:ad:35:58:b9:b2:cb:b7:35:13:a4:46: a0:7c:20:6e:ed:02:3b:8f:68:fd:e7:6a:4d:6b:20: 2c:48:3c:71:19:2a:c5:04:90:36:f2:01:d3:84:5f: f6:99:f0:e4:5a:e1:40:0e:75:53:5a:18:b6:34:ba: d1:11:57:f6:b4:89:93:1b:07:39:41:bc:12:a6:1a: 30:be:4c:15:39:fc:18:81:36:15:2b:b3:04:d9:b5: 0b:bf:20:1e:de:de:30:1b:af:d7:58:0d:53:4a:54: 4e:95:cb:97:6b:b0:70:5c:d1:ba:e0:9c:75:22:1a: 9e:22:50:03:d7:b7:12:14:be:6f:8c:1b:f4:11:4a: 66:e9:3a:61:aa:06:f9:1f:e6:b2:ec:be:1e:50:6e: 0b:80:34:58:08:97:86:28:cf:1d:d5:c3:6b:31:c2: aa:27:99:d8:81:4c:e0:fa:de:1c:c2:cc:74:7a:b0: 25:a0:cf:1d:df:cf:fc:2e:97:cf:ef:f2:a2:86:61: e0:6e:67:75:2c:19:e7:f9:0b:ec:d8:e3:f3:d1:11: 7c:fd:54:84:1e:c2:62:6f:db:21:7e:14:22:84:e5: 9d:a5:9a:39:1f:9f:51:b4:9f:84:21:1e:38:b6:2b: a1:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:69:22:DE:D3:FB:D4:F7:62:C9:DB:84:AF:C3:C2:7A:26:0F:61:BB X509v3 Authority Key Identifier: keyid:4E:B8:52:1D:84:27:72:0F:50:A3:F6:52:49:F2:D2:6C:6C:D2:2F:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/533f60e6-afdd-4e10-83b4-e8cbd641c52f/0/4EB8521D8427720F50A3F65249F2D26C6CD22F13.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4EB8521D8427720F50A3F65249F2D26C6CD22F13.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/533f60e6-afdd-4e10-83b4-e8cbd641c52f/0/4EB8521D8427720F50A3F65249F2D26C6CD22F13.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:68:70:34:92:05:0e:78:f4:b4:3c:d1:33:7e:e1:b6:c4:a2: 77:94:a5:11:d9:b2:1a:3f:f6:d1:9a:d4:c9:ce:a1:8e:ec:1b: 03:f5:d3:60:f7:4c:0a:07:64:4e:0d:0e:8c:5b:70:00:ef:46: 7a:c1:22:14:07:20:2f:ce:ab:35:e9:09:88:98:73:a5:0e:92: c7:ae:65:07:f9:f8:8c:51:00:bf:15:35:8a:d4:c7:44:4f:64: c0:c3:28:9d:ba:4d:00:7d:ca:53:4f:da:0e:7c:77:b2:da:08: e9:02:c5:ae:04:95:aa:37:80:15:d9:76:46:40:2b:4a:ae:3d: fd:5c:61:a1:23:93:e3:4f:d2:09:73:dc:fa:66:24:bd:58:22: 8b:1e:da:15:04:cb:5f:d1:ab:06:85:81:f1:5a:3a:64:a4:66: 57:f8:c3:09:4d:b2:14:c4:2b:f8:1c:e5:41:55:93:47:0a:31: 22:a9:2e:59:c9:54:24:f1:08:41:a3:b7:21:e1:5c:7b:e2:2b: e3:91:7b:4d:fb:e9:54:d1:77:e2:85:ad:c3:05:1f:0c:87:64: c7:20:91:17:fd:29:b4:59:12:42:68:81:3b:30:6b:91:9f:92: 91:a4:9d:21:55:e7:fd:44:c1:8b:3c:c5:49:50:35:be:1a:42: ac:08:86:49 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcHKL0rhzPk8Cdb0rVhq1mLZt+2IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEVCODUyMUQ4NDI3NzIwRjUwQTNGNjUyNDlGMkQyNkM2 Q0QyMkYxMzAeFw0yNTA5MDUwMjU2MjlaFw0yNTA5MDgxNDE1MjlaMDMxMTAvBgNV BAMTKDk0NjkyMkRFRDNGQkQ0Rjc2MkM5REI4NEFGQzNDMjdBMjYwRjYxQkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbfggXjp7CJXvZhgo/aGJ0L6yt NVi5ssu3NROkRqB8IG7tAjuPaP3nak1rICxIPHEZKsUEkDbyAdOEX/aZ8ORa4UAO dVNaGLY0utERV/a0iZMbBzlBvBKmGjC+TBU5/BiBNhUrswTZtQu/IB7e3jAbr9dY DVNKVE6Vy5drsHBc0brgnHUiGp4iUAPXtxIUvm+MG/QRSmbpOmGqBvkf5rLsvh5Q bguANFgIl4Yozx3Vw2sxwqonmdiBTOD63hzCzHR6sCWgzx3fz/wul8/v8qKGYeBu Z3UsGef5C+zY4/PREXz9VIQewmJv2yF+FCKE5Z2lmjkfn1G0n4QhHji2K6GdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlGki3tP71PdiyduEr8PCeiYPYbswHwYDVR0j BBgwFoAUTrhSHYQncg9Qo/ZSSfLSbGzSLxMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MzNmNjBlNi1hZmRkLTRlMTAtODNiNC1lOGNiZDY0MWM1MmYvMC80RUI4NTIxRDg0 Mjc3MjBGNTBBM0Y2NTI0OUYyRDI2QzZDRDIyRjEzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEVCODUyMUQ4NDI3NzIwRjUwQTNGNjUyNDlGMkQyNkM2Q0Qy MkYxMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTMzZjYwZTYtYWZkZC00ZTEwLTgz YjQtZThjYmQ2NDFjNTJmLzAvNEVCODUyMUQ4NDI3NzIwRjUwQTNGNjUyNDlGMkQy NkM2Q0QyMkYxMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL5ocDSSBQ549LQ80TN+4bbEoneUpRHZsho/ 9tGa1MnOoY7sGwP102D3TAoHZE4NDoxbcADvRnrBIhQHIC/OqzXpCYiYc6UOkseu ZQf5+IxRAL8VNYrUx0RPZMDDKJ26TQB9ylNP2g58d7LaCOkCxa4Elao3gBXZdkZA K0quPf1cYaEjk+NP0glz3PpmJL1YIose2hUEy1/RqwaFgfFaOmSkZlf4wwlNshTE K/gc5UFVk0cKMSKpLlnJVCTxCEGjtyHhXHviK+ORe0376VTRd+KFrcMFHwyHZMcg kRf9KbRZEkJogTswa5GfkpGknSFV5/1EwYs8xUlQNb4aQqwIhkk= -----END CERTIFICATE-----Generated at Sun Sep 7 15:34:58 2025 by rpki-client