$ rpki-client -vvf repo-rpki.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.mft File: 4A9E8C61BE3670D865B8A79D7D32798550E64F2B.mft (raw, json) Hash identifier: 0/gSRMZhthBukol6qevKoJLZ3VwvrWXXb3+6g/GJBPU= Subject key identifier: 19:C1:1E:9A:18:66:1F:81:A7:59:C5:EB:D4:9D:A7:E6:AA:E2:4B:A8 Authority key identifier: 4A:9E:8C:61:BE:36:70:D8:65:B8:A7:9D:7D:32:79:85:50:E6:4F:2B Certificate issuer: /CN=4A9E8C61BE3670D865B8A79D7D32798550E64F2B Certificate serial: 2EC2A9315CF11C31434E101A501E0230B11BACE9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.mft Manifest number: 012F Signing time: Thu 04 Sep 2025 00:02:23 +0000 Manifest this update: Wed 03 Sep 2025 23:57:23 +0000 Manifest next update: Sun 07 Sep 2025 07:23:23 +0000 Files and hashes: 1: 4A9E8C61BE3670D865B8A79D7D32798550E64F2B.crl (hash: UQ0/2Pw2g7cnBMKs0cGayZpys7Xv84QNsg05umTC/4A=) 2: 323030313a6466323a656434303a3a2f34382d3438203d3e203535363838.roa (hash: 3LwTWTq6lR7/gbSdsCbSOqta9JhN0Eij75z5muuvESg=) 3: 3130332e3234352e33382e302f32332d3234203d3e203535363838.roa (hash: sfkJ0JTL5ebL+3NyzyS4seDOCuegsswJp2YAbd6RC9s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.crl rsync://repo-rpki.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 07:23:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:c2:a9:31:5c:f1:1c:31:43:4e:10:1a:50:1e:02:30:b1:1b:ac:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A9E8C61BE3670D865B8A79D7D32798550E64F2B Validity Not Before: Sep 3 23:57:23 2025 GMT Not After : Sep 7 07:23:23 2025 GMT Subject: CN=19C11E9A18661F81A759C5EBD49DA7E6AAE24BA8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:1c:43:b2:29:ea:ff:90:99:8f:2a:4c:fa:98: e0:4c:65:79:2d:a8:b1:3e:3c:ba:36:18:96:0c:5b: 3a:02:53:de:9e:6a:fe:e0:14:e0:71:ca:93:d0:0f: 3c:3c:9e:b0:b5:5f:56:d4:16:7e:08:b5:cb:45:ae: 03:60:e7:1d:4d:4d:6c:ba:98:fc:83:2d:db:b5:2f: b1:58:46:61:58:9b:63:71:62:b8:bc:f7:2b:e7:00: 08:84:f1:b4:0d:5d:2e:4b:29:64:03:14:c3:3f:17: c5:48:56:98:ec:25:b9:9b:66:f6:11:eb:68:b6:76: 0d:c7:ec:48:3e:5f:e0:08:d3:8b:af:46:d4:28:e0: 52:f0:da:0a:75:ee:c3:79:72:2a:53:c7:15:cd:06: ec:11:f7:4c:6e:68:a6:28:07:5c:32:3d:61:37:db: a9:5c:84:f0:72:38:25:4f:04:c3:16:da:d6:15:a1: 70:a9:7a:64:31:36:9f:8d:89:23:4f:08:10:24:83: 80:0a:d7:f9:81:57:0d:fb:cb:33:1b:78:8b:7f:50: b2:01:69:18:c3:24:6c:25:89:83:fa:83:3c:fe:14: 07:dd:c6:b0:2c:13:8c:7a:fd:ef:db:4e:d4:cf:4b: c0:87:10:f5:23:28:55:80:44:51:4f:82:f9:b8:cd: ea:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:C1:1E:9A:18:66:1F:81:A7:59:C5:EB:D4:9D:A7:E6:AA:E2:4B:A8 X509v3 Authority Key Identifier: keyid:4A:9E:8C:61:BE:36:70:D8:65:B8:A7:9D:7D:32:79:85:50:E6:4F:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:4c:e6:03:8e:df:ad:8e:b8:2a:de:ad:3e:cc:05:a1:e7:f5: 8f:37:c6:db:c3:06:be:e6:43:54:a0:15:ae:4e:ea:02:28:30: aa:a4:dd:88:0b:b6:a7:84:58:30:85:81:a9:13:48:85:f4:e9: 6a:b7:2d:34:44:42:5c:37:f4:13:17:7c:5b:fd:65:95:76:1b: 27:d4:d4:e8:29:81:72:ac:50:69:3d:ac:7d:8c:92:6a:14:14: c4:b3:eb:cb:a8:22:af:e1:de:e7:c0:d9:9d:a5:97:80:ff:65: 1d:0a:0c:ab:71:00:12:e5:dd:3c:ce:93:8a:31:16:35:81:a6: d5:af:e0:81:c1:d3:51:f3:7b:b2:a4:89:68:b3:c1:c8:03:e7: ca:84:a8:e8:e4:f7:93:b4:f3:f6:58:04:b4:f3:6e:a2:6e:6b: 99:06:ee:77:7c:52:96:e1:c8:dd:07:9e:cf:f9:9b:19:87:b6: f5:45:03:47:f5:f5:80:6f:1a:25:8a:b2:39:f9:24:0c:06:8b: c3:aa:ff:96:d2:d5:69:d0:a9:7f:c7:78:9b:cd:62:b3:09:74: 2a:c5:27:ac:b5:0f:7c:a8:14:14:59:ac:08:05:43:f3:a7:23: 5e:e3:59:82:5a:ca:7e:3f:38:cc:70:d6:13:f2:72:39:0e:56: 06:8f:b2:1c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULsKpMVzxHDFDThAaUB4CMLEbrOkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEE5RThDNjFCRTM2NzBEODY1QjhBNzlEN0QzMjc5ODU1 MEU2NEYyQjAeFw0yNTA5MDMyMzU3MjNaFw0yNTA5MDcwNzIzMjNaMDMxMTAvBgNV BAMTKDE5QzExRTlBMTg2NjFGODFBNzU5QzVFQkQ0OURBN0U2QUFFMjRCQTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBHEOyKer/kJmPKkz6mOBMZXkt qLE+PLo2GJYMWzoCU96eav7gFOBxypPQDzw8nrC1X1bUFn4ItctFrgNg5x1NTWy6 mPyDLdu1L7FYRmFYm2NxYri89yvnAAiE8bQNXS5LKWQDFMM/F8VIVpjsJbmbZvYR 62i2dg3H7Eg+X+AI04uvRtQo4FLw2gp17sN5cipTxxXNBuwR90xuaKYoB1wyPWE3 26lchPByOCVPBMMW2tYVoXCpemQxNp+NiSNPCBAkg4AK1/mBVw37yzMbeIt/ULIB aRjDJGwliYP6gzz+FAfdxrAsE4x6/e/bTtTPS8CHEPUjKFWARFFPgvm4zeqtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGcEemhhmH4GnWcXr1J2n5qriS6gwHwYDVR0j BBgwFoAUSp6MYb42cNhluKedfTJ5hVDmTyswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YzQ5MzVkOC05NmEyLTQ1NjQtODVhMy0zMmE1MzE4OTM2N2UvMC80QTlFOEM2MUJF MzY3MEQ4NjVCOEE3OUQ3RDMyNzk4NTUwRTY0RjJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEE5RThDNjFCRTM2NzBEODY1QjhBNzlEN0QzMjc5ODU1MEU2 NEYyQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2M0OTM1ZDgtOTZhMi00NTY0LTg1 YTMtMzJhNTMxODkzNjdlLzAvNEE5RThDNjFCRTM2NzBEODY1QjhBNzlEN0QzMjc5 ODU1MEU2NEYyQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKJM5gOO362OuCrerT7MBaHn9Y83xtvDBr7m Q1SgFa5O6gIoMKqk3YgLtqeEWDCFgakTSIX06Wq3LTREQlw39BMXfFv9ZZV2GyfU 1OgpgXKsUGk9rH2MkmoUFMSz68uoIq/h3ufA2Z2ll4D/ZR0KDKtxABLl3TzOk4ox FjWBptWv4IHB01Hze7KkiWizwcgD58qEqOjk95O08/ZYBLTzbqJua5kG7nd8Upbh yN0Hns/5mxmHtvVFA0f19YBvGiWKsjn5JAwGi8Oq/5bS1WnQqX/HeJvNYrMJdCrF J6y1D3yoFBRZrAgFQ/OnI17jWYJayn4/OMxw1hPycjkOVgaPshw= -----END CERTIFICATE-----Generated at Fri Sep 5 12:47:00 2025 by rpki-client