$ rpki-client -vvf repo-rpki.idnic.net/repo/7794da40-b37e-4fe6-8f40-73b3b0be019f/0/B4A42192F8CDBE935CE5927E5AD3C63C8196152D.mft File: B4A42192F8CDBE935CE5927E5AD3C63C8196152D.mft (raw, json) Hash identifier: 5ahTrNE+sytsuH1vp1C1vq6wDamVx1Gp2mpzW1uszJk= Subject key identifier: FB:EA:9C:19:9C:5C:6D:A4:72:CC:E5:47:05:9A:46:5B:AF:37:1F:3F Authority key identifier: B4:A4:21:92:F8:CD:BE:93:5C:E5:92:7E:5A:D3:C6:3C:81:96:15:2D Certificate issuer: /CN=B4A42192F8CDBE935CE5927E5AD3C63C8196152D Certificate serial: 660AB7648520FBCCB115D7F6762C8B1EF266F0DB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4A42192F8CDBE935CE5927E5AD3C63C8196152D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7794da40-b37e-4fe6-8f40-73b3b0be019f/0/B4A42192F8CDBE935CE5927E5AD3C63C8196152D.mft Manifest number: 01A3 Signing time: Sun 07 Sep 2025 14:30:54 +0000 Manifest this update: Sun 07 Sep 2025 14:25:54 +0000 Manifest next update: Wed 10 Sep 2025 23:27:54 +0000 Files and hashes: 1: B4A42192F8CDBE935CE5927E5AD3C63C8196152D.crl (hash: 36TE3GyEhtEK9x1/Zc6/xrIJJtk5jWkuHz7K1upfQJw=) 2: 3130332e35352e32322e302f32332d3234203d3e20313530343930.roa (hash: qiaxwvksmM66atpVD6z5NciBUAyVEKleM/kHb9VhlSw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7794da40-b37e-4fe6-8f40-73b3b0be019f/0/B4A42192F8CDBE935CE5927E5AD3C63C8196152D.crl rsync://repo-rpki.idnic.net/repo/7794da40-b37e-4fe6-8f40-73b3b0be019f/0/B4A42192F8CDBE935CE5927E5AD3C63C8196152D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4A42192F8CDBE935CE5927E5AD3C63C8196152D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 10:23:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:0a:b7:64:85:20:fb:cc:b1:15:d7:f6:76:2c:8b:1e:f2:66:f0:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B4A42192F8CDBE935CE5927E5AD3C63C8196152D Validity Not Before: Sep 7 14:25:54 2025 GMT Not After : Sep 10 23:27:54 2025 GMT Subject: CN=FBEA9C199C5C6DA472CCE547059A465BAF371F3F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:3b:16:b4:fa:07:21:df:05:03:9c:d7:e4:ca: 62:fb:35:17:29:e7:79:10:ce:e3:0e:a0:72:74:42: f7:60:d9:27:d0:28:d1:68:42:db:c3:7c:ae:2b:55: 01:ca:bb:76:26:82:73:8f:c4:0d:e4:5c:1d:fc:7d: 3b:57:53:96:73:9c:ba:09:8a:af:c0:c8:48:48:bf: bc:bb:31:61:e4:bd:42:f0:65:d7:dd:cd:14:fe:99: c9:91:b4:9c:98:79:80:9d:e3:88:af:35:83:48:c8: 1c:62:bb:c4:f1:9f:d5:f1:0b:2c:c9:6e:41:9f:e7: 4e:32:08:cf:7d:a5:c3:7f:c0:1c:59:5d:b3:02:b2: 82:1a:da:cf:9e:1f:2b:43:43:53:24:36:ac:a8:93: 61:ca:b8:10:b4:b7:88:92:c0:45:49:fd:ce:8b:81: 50:bb:3b:09:3a:62:69:c6:22:7f:3d:3b:41:90:56: aa:be:b3:ee:4d:87:01:c0:30:5a:b3:76:4c:38:39: b0:49:27:c9:00:d6:e4:71:38:8d:83:20:58:7b:ae: 74:d8:96:43:d8:b3:bd:75:3b:70:3d:56:e8:a4:bb: 8b:1c:a4:2e:c4:85:c7:00:5b:63:57:57:a9:08:16: 4e:6a:4d:5c:5a:52:32:a8:52:28:ae:ac:01:9d:f2: 43:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:EA:9C:19:9C:5C:6D:A4:72:CC:E5:47:05:9A:46:5B:AF:37:1F:3F X509v3 Authority Key Identifier: keyid:B4:A4:21:92:F8:CD:BE:93:5C:E5:92:7E:5A:D3:C6:3C:81:96:15:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7794da40-b37e-4fe6-8f40-73b3b0be019f/0/B4A42192F8CDBE935CE5927E5AD3C63C8196152D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4A42192F8CDBE935CE5927E5AD3C63C8196152D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7794da40-b37e-4fe6-8f40-73b3b0be019f/0/B4A42192F8CDBE935CE5927E5AD3C63C8196152D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:10:d5:eb:d6:59:21:d4:a9:05:96:41:02:c9:90:d7:ee:3f: 44:18:aa:fe:7f:71:df:29:b2:8e:be:4a:fb:1b:c9:64:dd:d1: 72:ca:02:d9:ff:0f:cd:3d:91:dc:a9:3f:d6:f8:0e:2f:ce:6d: 74:e5:35:c9:c9:49:c0:62:b3:4f:24:00:01:35:d6:2d:c7:57: 01:36:44:f9:96:a3:8a:41:37:f4:06:e5:42:33:08:c0:68:65: 38:d4:b4:88:e1:40:b6:b0:99:d4:5d:d3:c3:c3:cc:bd:e7:cb: c1:fc:4a:e9:00:91:3e:dc:3a:29:e9:0f:c4:db:d2:bf:8a:10: ac:06:da:61:7c:de:0f:de:14:0c:5f:f9:d9:7a:b4:71:43:4e: 90:46:ef:89:93:e4:1a:52:19:4d:97:e1:94:09:9a:0b:fb:9c: 48:7f:4a:4d:dc:20:4f:76:79:bd:7b:23:ad:d3:86:ba:2d:a3: b1:2b:61:53:24:e7:4c:34:f9:73:8c:24:8c:a7:8c:c2:1b:ca: 57:2d:70:4b:53:16:17:09:b0:e0:51:3d:f3:42:f5:59:6e:02: d1:df:0c:00:a0:ec:23:a5:a1:2d:1b:c8:2e:17:28:e2:c6:a5: af:85:21:3e:16:91:ff:98:ae:d9:74:c2:b8:56:77:ab:a5:0f: fd:cb:d4:25 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZgq3ZIUg+8yxFdf2diyLHvJm8NswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjRBNDIxOTJGOENEQkU5MzVDRTU5MjdFNUFEM0M2M0M4 MTk2MTUyRDAeFw0yNTA5MDcxNDI1NTRaFw0yNTA5MTAyMzI3NTRaMDMxMTAvBgNV BAMTKEZCRUE5QzE5OUM1QzZEQTQ3MkNDRTU0NzA1OUE0NjVCQUYzNzFGM0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiOxa0+gch3wUDnNfkymL7NRcp 53kQzuMOoHJ0Qvdg2SfQKNFoQtvDfK4rVQHKu3YmgnOPxA3kXB38fTtXU5ZznLoJ iq/AyEhIv7y7MWHkvULwZdfdzRT+mcmRtJyYeYCd44ivNYNIyBxiu8Txn9XxCyzJ bkGf504yCM99pcN/wBxZXbMCsoIa2s+eHytDQ1MkNqyok2HKuBC0t4iSwEVJ/c6L gVC7Owk6YmnGIn89O0GQVqq+s+5NhwHAMFqzdkw4ObBJJ8kA1uRxOI2DIFh7rnTY lkPYs711O3A9Vuiku4scpC7EhccAW2NXV6kIFk5qTVxaUjKoUiiurAGd8kMrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU++qcGZxcbaRyzOVHBZpGW683Hz8wHwYDVR0j BBgwFoAUtKQhkvjNvpNc5ZJ+WtPGPIGWFS0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 Nzk0ZGE0MC1iMzdlLTRmZTYtOGY0MC03M2IzYjBiZTAxOWYvMC9CNEE0MjE5MkY4 Q0RCRTkzNUNFNTkyN0U1QUQzQzYzQzgxOTYxNTJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjRBNDIxOTJGOENEQkU5MzVDRTU5MjdFNUFEM0M2M0M4MTk2 MTUyRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzc5NGRhNDAtYjM3ZS00ZmU2LThm NDAtNzNiM2IwYmUwMTlmLzAvQjRBNDIxOTJGOENEQkU5MzVDRTU5MjdFNUFEM0M2 M0M4MTk2MTUyRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJMQ1evWWSHUqQWWQQLJkNfuP0QYqv5/cd8p so6+SvsbyWTd0XLKAtn/D809kdypP9b4Di/ObXTlNcnJScBis08kAAE11i3HVwE2 RPmWo4pBN/QG5UIzCMBoZTjUtIjhQLawmdRd08PDzL3ny8H8SukAkT7cOinpD8Tb 0r+KEKwG2mF83g/eFAxf+dl6tHFDTpBG74mT5BpSGU2X4ZQJmgv7nEh/Sk3cIE92 eb17I63Throto7ErYVMk50w0+XOMJIynjMIbylctcEtTFhcJsOBRPfNC9VluAtHf DACg7COloS0byC4XKOLGpa+FIT4Wkf+Yrtl0wrhWd6ulD/3L1CU= -----END CERTIFICATE-----Generated at Sun Sep 7 15:34:17 2025 by rpki-client