$ rpki-client -vvf repo-rpki.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0/5234A428BC63559E2511B3EFFB085B82B195A8ED.mft File: 5234A428BC63559E2511B3EFFB085B82B195A8ED.mft (raw, json) Hash identifier: wdruQcpRYheDkHA51vE2C2yXmjvl1jkbfRYOK8R3rDE= Subject key identifier: FF:46:77:81:BA:07:EE:BD:18:BF:ED:8F:20:F1:99:2D:EA:12:EA:C0 Authority key identifier: 52:34:A4:28:BC:63:55:9E:25:11:B3:EF:FB:08:5B:82:B1:95:A8:ED Certificate issuer: /CN=5234A428BC63559E2511B3EFFB085B82B195A8ED Certificate serial: 4B7403F99AA784001A31639D9B64CC1B927E0968 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5234A428BC63559E2511B3EFFB085B82B195A8ED.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0/5234A428BC63559E2511B3EFFB085B82B195A8ED.mft Manifest number: 4B Signing time: Thu 04 Sep 2025 11:12:03 +0000 Manifest this update: Thu 04 Sep 2025 11:07:03 +0000 Manifest next update: Sun 07 Sep 2025 16:12:03 +0000 Files and hashes: 1: 3130332e31372e37362e302f32332d3233203d3e20313331373831.roa (hash: 3jZR/32xfuAKeJQ/xf5TVwB85F6YIOYekaTwsoIa1SY=) 2: 5234A428BC63559E2511B3EFFB085B82B195A8ED.crl (hash: eG3P/bIRQS3Zo/NBog6ZqgOUAdH3yNG/pJQ41RvFEOM=) 3: 3130332e31372e37362e302f32342d3234203d3e20313331373831.roa (hash: rB8zcfhigYxp6rZG5kgxX6r/oJS8xphHw/YAzK8Sodw=) 4: 3130332e31372e37372e302f32342d3234203d3e20313331373831.roa (hash: 4y750PE+WZPEuQKdgW2BVnFEcTQLxauJA4sENyjZR2o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0/5234A428BC63559E2511B3EFFB085B82B195A8ED.crl rsync://repo-rpki.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0/5234A428BC63559E2511B3EFFB085B82B195A8ED.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5234A428BC63559E2511B3EFFB085B82B195A8ED.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 16:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:74:03:f9:9a:a7:84:00:1a:31:63:9d:9b:64:cc:1b:92:7e:09:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5234A428BC63559E2511B3EFFB085B82B195A8ED Validity Not Before: Sep 4 11:07:03 2025 GMT Not After : Sep 7 16:12:03 2025 GMT Subject: CN=FF467781BA07EEBD18BFED8F20F1992DEA12EAC0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:25:83:8b:a5:81:f5:dc:a7:af:ee:ad:9d:21: 63:48:7a:33:ae:ad:c7:d6:47:15:82:23:fd:54:b7: d7:56:ae:1b:59:43:41:78:48:c7:58:23:a1:78:25: 89:19:df:c7:c6:44:c0:ff:83:fb:02:fa:70:5a:36: 0f:d4:22:7d:c5:c5:3b:f5:3f:26:8a:a3:be:df:ca: e3:bb:da:b2:c9:ef:0e:30:81:50:5e:38:5c:51:9f: bf:fc:ad:81:85:d2:e2:02:41:66:1b:ca:10:59:51: 56:62:b9:65:a7:51:0c:f3:a7:be:2d:ca:5b:01:4b: 57:e1:e0:65:c8:b5:9c:ff:49:22:c8:fb:64:08:28: e3:6f:84:ce:6a:18:40:fd:06:05:23:14:52:03:05: 6a:2c:d3:d9:ed:5f:b9:7f:af:3f:c1:0e:eb:3a:75: 70:dc:0f:15:eb:01:2b:b3:b3:ec:3c:e4:2d:f3:0b: 4c:7e:2a:95:f2:20:13:18:7c:2a:e8:fb:6b:88:74: 3a:da:5c:54:f2:83:42:10:92:aa:41:d3:6b:f7:08: 2c:10:13:b0:14:c5:46:51:82:62:c7:43:0a:54:e6: 7d:9e:ca:42:a9:8d:58:3a:7c:ad:d6:80:8e:54:99: b9:5c:ed:08:64:0d:7a:a2:43:3d:fd:a2:c3:6f:38: b2:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:46:77:81:BA:07:EE:BD:18:BF:ED:8F:20:F1:99:2D:EA:12:EA:C0 X509v3 Authority Key Identifier: keyid:52:34:A4:28:BC:63:55:9E:25:11:B3:EF:FB:08:5B:82:B1:95:A8:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0/5234A428BC63559E2511B3EFFB085B82B195A8ED.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5234A428BC63559E2511B3EFFB085B82B195A8ED.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0/5234A428BC63559E2511B3EFFB085B82B195A8ED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:ec:c8:16:c4:89:3e:bd:93:b3:74:f1:68:6d:ac:33:94:e2: fc:f0:43:cb:78:aa:64:03:c1:15:5b:86:1a:ef:29:c8:c0:79: 39:d6:67:eb:88:d6:e7:44:56:51:97:dd:ec:1f:04:52:a4:dd: 66:13:38:68:9d:2f:af:13:95:28:10:75:92:59:90:bf:3d:b1: 54:92:e3:83:a4:33:ee:f9:0e:fe:05:8e:32:97:4c:ad:7b:28: 4b:c8:81:53:a3:9b:32:57:4e:6b:9b:75:7b:40:66:2c:fa:22: 87:4d:3f:c3:99:12:48:04:39:14:7b:de:09:f5:fa:94:8e:99: 13:9b:a0:a1:c9:62:02:67:fc:5a:c7:15:e2:7e:9c:54:36:69: f8:6b:d9:7b:41:cc:b6:6f:1a:09:0f:4f:e9:37:7e:d7:e2:08: c2:25:9a:9e:d2:a6:36:b6:6c:99:59:2b:4c:41:42:52:23:20: 3a:cc:cd:0b:2e:12:69:55:89:d1:b3:c1:7c:31:a1:5a:f4:3b: df:b7:a4:8c:bc:fc:a8:9b:ff:76:f3:c1:77:fd:cb:c7:cb:85: 70:21:0f:52:67:a5:0d:1c:04:6b:7b:f8:f8:91:04:8d:83:63: 9e:f7:5a:2c:3d:6e:00:50:ba:8e:32:3c:46:5a:d3:b3:2b:c0: a8:77:bb:04 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS3QD+ZqnhAAaMWOdm2TMG5J+CWgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTIzNEE0MjhCQzYzNTU5RTI1MTFCM0VGRkIwODVCODJC MTk1QThFRDAeFw0yNTA5MDQxMTA3MDNaFw0yNTA5MDcxNjEyMDNaMDMxMTAvBgNV BAMTKEZGNDY3NzgxQkEwN0VFQkQxOEJGRUQ4RjIwRjE5OTJERUExMkVBQzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQJYOLpYH13Kev7q2dIWNIejOu rcfWRxWCI/1Ut9dWrhtZQ0F4SMdYI6F4JYkZ38fGRMD/g/sC+nBaNg/UIn3FxTv1 PyaKo77fyuO72rLJ7w4wgVBeOFxRn7/8rYGF0uICQWYbyhBZUVZiuWWnUQzzp74t ylsBS1fh4GXItZz/SSLI+2QIKONvhM5qGED9BgUjFFIDBWos09ntX7l/rz/BDus6 dXDcDxXrASuzs+w85C3zC0x+KpXyIBMYfCro+2uIdDraXFTyg0IQkqpB02v3CCwQ E7AUxUZRgmLHQwpU5n2eykKpjVg6fK3WgI5Umblc7QhkDXqiQz39osNvOLLdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/0Z3gboH7r0Yv+2PIPGZLeoS6sAwHwYDVR0j BBgwFoAUUjSkKLxjVZ4lEbPv+whbgrGVqO0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YTA3MTUxNC1lNGRlLTRhY2UtYTBkZi1mN2M0YWI4MDc0YTUvMC81MjM0QTQyOEJD NjM1NTlFMjUxMUIzRUZGQjA4NUI4MkIxOTVBOEVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTIzNEE0MjhCQzYzNTU5RTI1MTFCM0VGRkIwODVCODJCMTk1 QThFRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmEwNzE1MTQtZTRkZS00YWNlLWEw ZGYtZjdjNGFiODA3NGE1LzAvNTIzNEE0MjhCQzYzNTU5RTI1MTFCM0VGRkIwODVC ODJCMTk1QThFRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJvsyBbEiT69k7N08WhtrDOU4vzwQ8t4qmQD wRVbhhrvKcjAeTnWZ+uI1udEVlGX3ewfBFKk3WYTOGidL68TlSgQdZJZkL89sVSS 44OkM+75Dv4FjjKXTK17KEvIgVOjmzJXTmubdXtAZiz6IodNP8OZEkgEORR73gn1 +pSOmROboKHJYgJn/FrHFeJ+nFQ2afhr2XtBzLZvGgkPT+k3ftfiCMIlmp7Spja2 bJlZK0xBQlIjIDrMzQsuEmlVidGzwXwxoVr0O9+3pIy8/Kib/3bzwXf9y8fLhXAh D1JnpQ0cBGt7+PiRBI2DY573Wiw9bgBQuo4yPEZa07MrwKh3uwQ= -----END CERTIFICATE-----Generated at Fri Sep 5 10:13:45 2025 by rpki-client