$ rpki-client -vvf repo-rpki.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.mft File: 4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.mft (raw, json) Hash identifier: pt9D4Fv8QIFNQ0HsYrAikJQlw7f8vPaAUUZ5qlOvVhM= Subject key identifier: 5F:27:E1:F6:BE:AB:FF:CA:22:2B:4E:35:DA:2C:03:39:80:80:45:32 Authority key identifier: 4E:CF:7D:FB:09:FB:3B:5C:21:DD:E6:61:15:0B:95:76:8B:6B:D3:19 Certificate issuer: /CN=4ECF7DFB09FB3B5C21DDE661150B95768B6BD319 Certificate serial: 5D64627C6EA7D1AA43581DBCF431E0CC4927FC79 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.mft Manifest number: 0212 Signing time: Sat 06 Sep 2025 03:01:23 +0000 Manifest this update: Sat 06 Sep 2025 02:56:23 +0000 Manifest next update: Tue 09 Sep 2025 10:27:23 +0000 Files and hashes: 1: 3130332e3136332e3233302e302f32332d3233203d3e20313431393037.roa (hash: TWsMpo4cWVJOgLuAED46zFpQBaqLsvvEiv7xGtW44bE=) 2: 4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.crl (hash: Mm9QEtkayNC4GuT5deTc2LyUfKJGqN4ROCUe0Yzgcz4=) 3: 3130332e3136332e3233312e302f32342d3234203d3e20313431393037.roa (hash: yg4jobWhxttigVY/iZoK6bsKdtykwi2az+8aCa0nyW4=) 4: 3130332e3136332e3233302e302f32342d3234203d3e20313431393037.roa (hash: BplHdHRvA1GeP43VsiSGj8a+Gmuq6dP6VgR2vhuZ0uU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.crl rsync://repo-rpki.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 10:27:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:64:62:7c:6e:a7:d1:aa:43:58:1d:bc:f4:31:e0:cc:49:27:fc:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ECF7DFB09FB3B5C21DDE661150B95768B6BD319 Validity Not Before: Sep 6 02:56:23 2025 GMT Not After : Sep 9 10:27:23 2025 GMT Subject: CN=5F27E1F6BEABFFCA222B4E35DA2C033980804532 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:07:c3:87:26:50:c6:54:aa:87:d8:e1:e9:da: 34:c5:5e:dc:8a:84:8a:58:93:06:a7:d2:27:a4:a7: d8:58:5f:7e:72:31:4c:6e:3b:86:42:bd:83:84:b9: 56:57:f6:9c:73:12:0e:ed:e3:4d:41:78:2b:75:27: 83:0d:3d:32:2e:5b:eb:be:14:2a:20:d9:9d:99:43: 43:55:ee:72:47:90:d3:8b:bd:f9:af:1b:69:bc:5d: 8f:08:52:89:35:a3:93:99:ca:8a:11:7d:f5:eb:9d: 95:fb:e3:65:b4:78:c7:12:ca:29:1c:31:32:82:c7: 14:91:7b:dd:77:87:7e:a8:b9:05:7f:43:ac:e2:c1: 01:22:7c:c5:78:8d:7a:b6:0c:22:d2:1d:0a:5e:01: 9c:5e:3f:4a:9a:aa:3a:a5:19:87:63:1e:51:30:d2: d1:96:67:2b:27:e3:ca:23:89:78:e7:7b:ee:17:b0: 8e:5c:53:16:d0:d7:ce:ce:1b:ad:11:6e:ae:66:08: af:0a:1b:2a:ac:ef:e9:8e:10:5b:3e:a0:f8:1d:13: 69:db:87:fa:49:b3:4e:79:ae:fe:e0:41:e9:e3:d7: dc:7c:d9:d8:3b:7e:35:3e:60:60:b2:6c:44:bd:50: ee:46:f1:50:d8:17:f8:e6:57:cd:f7:de:c1:c4:e6: dd:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:27:E1:F6:BE:AB:FF:CA:22:2B:4E:35:DA:2C:03:39:80:80:45:32 X509v3 Authority Key Identifier: keyid:4E:CF:7D:FB:09:FB:3B:5C:21:DD:E6:61:15:0B:95:76:8B:6B:D3:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:3c:19:2d:f6:d6:8c:c6:7f:11:bb:3e:b3:4b:33:b7:de:00: 5a:76:6d:aa:fa:d2:c8:bf:3e:ea:16:3b:3b:94:ef:b2:17:30: b9:eb:7d:27:7b:67:e8:92:a6:b6:de:b1:05:7d:cc:08:1a:6c: 2d:26:b2:ba:55:42:b5:5c:0d:83:73:a2:b8:49:c8:06:18:e1: 51:37:02:51:c0:6b:1d:cb:c3:ee:6e:29:1a:09:9e:92:21:27: 88:72:1f:28:08:50:90:3b:02:bc:26:6f:6d:41:16:1f:34:60: 77:95:8a:70:0a:ea:99:70:de:9c:6a:bf:b4:78:6e:cd:35:88: 35:e4:a6:0f:ec:52:70:ae:9b:db:00:f1:c6:62:ae:b7:0d:33: c8:93:06:e3:7c:36:eb:7a:c6:37:53:34:40:78:93:8d:53:b1: 6c:88:9b:f6:7f:82:78:84:d3:5b:f2:42:5d:40:ff:8f:8d:32: 7f:8c:28:e0:ac:a7:07:4b:ff:99:20:77:b7:eb:62:79:ef:e6: cb:12:a6:7e:33:a0:2f:31:50:8a:c6:cd:cc:c3:1c:f3:c1:2f: 88:c8:76:71:b8:22:eb:4b:ba:48:d7:fe:b6:e1:8c:22:3b:e2: f7:6e:3c:09:bb:73:46:85:40:ae:75:91:d4:cf:fa:0d:c9:1b: 55:e4:9d:18 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXWRifG6n0apDWB289DHgzEkn/HkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEVDRjdERkIwOUZCM0I1QzIxRERFNjYxMTUwQjk1NzY4 QjZCRDMxOTAeFw0yNTA5MDYwMjU2MjNaFw0yNTA5MDkxMDI3MjNaMDMxMTAvBgNV BAMTKDVGMjdFMUY2QkVBQkZGQ0EyMjJCNEUzNURBMkMwMzM5ODA4MDQ1MzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRB8OHJlDGVKqH2OHp2jTFXtyK hIpYkwan0iekp9hYX35yMUxuO4ZCvYOEuVZX9pxzEg7t401BeCt1J4MNPTIuW+u+ FCog2Z2ZQ0NV7nJHkNOLvfmvG2m8XY8IUok1o5OZyooRffXrnZX742W0eMcSyikc MTKCxxSRe913h36ouQV/Q6ziwQEifMV4jXq2DCLSHQpeAZxeP0qaqjqlGYdjHlEw 0tGWZysn48ojiXjne+4XsI5cUxbQ187OG60Rbq5mCK8KGyqs7+mOEFs+oPgdE2nb h/pJs055rv7gQenj19x82dg7fjU+YGCybES9UO5G8VDYF/jmV8333sHE5t3pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXyfh9r6r/8oiK0412iwDOYCARTIwHwYDVR0j BBgwFoAUTs99+wn7O1wh3eZhFQuVdotr0xkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZDAzNWIzYi1lNmM1LTQ3ZjgtOTliNC0xY2IwMzI2ZWRhZTUvMC80RUNGN0RGQjA5 RkIzQjVDMjFEREU2NjExNTBCOTU3NjhCNkJEMzE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEVDRjdERkIwOUZCM0I1QzIxRERFNjYxMTUwQjk1NzY4QjZC RDMxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2QwMzViM2ItZTZjNS00N2Y4LTk5 YjQtMWNiMDMyNmVkYWU1LzAvNEVDRjdERkIwOUZCM0I1QzIxRERFNjYxMTUwQjk1 NzY4QjZCRDMxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHI8GS321ozGfxG7PrNLM7feAFp2bar60si/ PuoWOzuU77IXMLnrfSd7Z+iSprbesQV9zAgabC0msrpVQrVcDYNzorhJyAYY4VE3 AlHAax3Lw+5uKRoJnpIhJ4hyHygIUJA7Arwmb21BFh80YHeVinAK6plw3pxqv7R4 bs01iDXkpg/sUnCum9sA8cZirrcNM8iTBuN8Nut6xjdTNEB4k41TsWyIm/Z/gniE 01vyQl1A/4+NMn+MKOCspwdL/5kgd7frYnnv5ssSpn4zoC8xUIrGzczDHPPBL4jI dnG4IutLukjX/rbhjCI74vduPAm7c0aFQK51kdTP+g3JG1XknRg= -----END CERTIFICATE-----Generated at Sun Sep 7 15:27:08 2025 by rpki-client