$ rpki-client -vvf repo-rpki.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.mft File: 4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.mft (raw, json) Hash identifier: e6qh37wE0eK5WbcEM2RZn2Lcd9E+05iCj8LpZmTnn/k= Subject key identifier: 27:52:77:A2:B9:BE:FB:F9:B6:4E:D8:14:2E:96:3C:1A:8E:AB:72:44 Authority key identifier: 4D:D0:C9:5B:43:B8:B6:53:60:1F:ED:39:AB:01:0E:1D:D0:DC:17:F2 Certificate issuer: /CN=4DD0C95B43B8B653601FED39AB010E1DD0DC17F2 Certificate serial: 2E758F19F50E17FDFF2C880C26BCB13A0F07312E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.mft Manifest number: 0508 Signing time: Tue 09 Sep 2025 21:11:08 +0000 Manifest this update: Tue 09 Sep 2025 21:06:08 +0000 Manifest next update: Sat 13 Sep 2025 01:21:08 +0000 Files and hashes: 1: 4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.crl (hash: bP9GcqVuRiD7hMtsAoFBScbFs4e6nU5Flw0etkwiuG0=) 2: 3130332e36362e35352e302f32342d3234203d3e20313335343537.roa (hash: ljnKYF4WQqtb0yfOcUdymtJM6+GnXJyNyFLsK7GZ494=) 3: 34352e3132302e3234342e302f32322d3234203d3e20313335343537.roa (hash: PuA0O7on+Tv+yi4m5sFC8JVnpsZv77062xaCNSQ10PY=) 4: 323030313a6466323a626530303a3a2f34382d3438203d3e20313335343537.roa (hash: Y9NxdO2uUmExgp5HT4f9RxRPtt01n/EQdy4OmAOBACk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.crl rsync://repo-rpki.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 01:21:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:75:8f:19:f5:0e:17:fd:ff:2c:88:0c:26:bc:b1:3a:0f:07:31:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4DD0C95B43B8B653601FED39AB010E1DD0DC17F2 Validity Not Before: Sep 9 21:06:08 2025 GMT Not After : Sep 13 01:21:08 2025 GMT Subject: CN=275277A2B9BEFBF9B64ED8142E963C1A8EAB7244 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ed:29:be:cc:38:9c:54:2f:7a:97:09:6e:4b: 9e:df:ff:0e:47:1c:b6:a6:16:ba:1b:a0:82:1b:47: 45:bc:57:ea:1d:be:c8:ea:9f:17:53:da:cc:6c:4d: 7f:88:33:b4:d6:a5:37:ca:b9:0f:f6:7e:61:0e:da: 72:42:75:ee:4b:92:46:13:1d:b8:e4:ac:e9:b7:fb: 27:68:8b:4f:33:10:9f:cf:76:dd:1b:ab:08:0e:e2: 55:66:58:0f:70:cb:d9:28:2c:b5:a0:61:fd:07:ba: 8d:a4:f6:98:5d:77:9e:43:d6:a1:10:e9:18:3c:ab: 2e:6e:94:e1:99:40:fa:f2:50:ae:79:2f:b7:a0:13: aa:68:5f:fa:5e:3a:34:70:a2:67:e9:d7:67:c6:4b: 4e:0f:a5:fd:03:2f:d0:c6:5f:56:97:1f:70:e1:7c: b6:df:be:0a:71:c5:ea:c0:9c:92:dd:83:3e:ff:cc: d8:38:7b:7e:3c:c7:5b:bb:cd:89:e7:a4:cc:04:e9: 95:1d:93:f8:28:bb:27:80:b7:ad:05:b6:41:2f:0c: 02:82:bd:0e:56:b1:f3:5e:c5:6b:fd:5a:bd:b1:b5: 35:51:60:7e:92:1d:1d:97:ed:f8:f3:1e:34:77:a3: 2e:90:82:06:44:09:e9:76:b2:73:1f:bb:a8:9a:9b: 41:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:52:77:A2:B9:BE:FB:F9:B6:4E:D8:14:2E:96:3C:1A:8E:AB:72:44 X509v3 Authority Key Identifier: keyid:4D:D0:C9:5B:43:B8:B6:53:60:1F:ED:39:AB:01:0E:1D:D0:DC:17:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:3f:d9:27:31:a9:ae:e9:b9:30:32:c2:ac:29:f3:dd:0c:eb: 12:19:a8:f1:04:33:86:4b:d9:9d:25:35:60:cb:48:61:4d:63: 91:d9:c6:d3:df:da:c5:59:88:0f:41:b3:14:75:20:6b:03:c8: f8:da:29:44:93:85:61:ab:a8:07:1d:c8:e0:3a:55:9b:70:a1: 65:d6:f5:29:30:c4:e7:31:c7:a5:66:e3:f0:79:3a:6a:3a:16: 04:5e:84:90:28:ed:22:53:57:c8:13:36:98:74:de:13:b0:7a: ee:5b:ca:c0:05:3d:dc:6c:b5:df:13:30:07:59:bd:5f:a9:c7: b9:2f:bc:b4:42:54:df:62:8a:c8:f1:d2:a2:53:d8:18:d9:28: 5a:7e:c7:a0:81:62:f9:33:f8:01:b8:c8:9a:18:ba:d3:ff:6f: cf:51:75:84:8d:ec:a9:4d:a4:98:17:b7:1e:d5:9d:cc:75:7a: d5:57:e6:99:1a:a3:e7:45:f9:ee:9b:1b:14:6a:69:a8:ce:ac: f7:5f:28:49:2d:29:35:8b:c1:34:69:33:05:08:61:4c:6d:27: 5e:01:67:9a:77:d3:81:cd:3b:eb:0b:b8:cb:1b:4e:b9:18:c4: 21:6a:af:db:00:13:5b:f2:02:3e:94:91:9d:24:24:bc:88:1b: de:76:d6:00 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULnWPGfUOF/3/LIgMJryxOg8HMS4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEREMEM5NUI0M0I4QjY1MzYwMUZFRDM5QUIwMTBFMURE MERDMTdGMjAeFw0yNTA5MDkyMTA2MDhaFw0yNTA5MTMwMTIxMDhaMDMxMTAvBgNV BAMTKDI3NTI3N0EyQjlCRUZCRjlCNjRFRDgxNDJFOTYzQzFBOEVBQjcyNDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC87Sm+zDicVC96lwluS57f/w5H HLamFroboIIbR0W8V+odvsjqnxdT2sxsTX+IM7TWpTfKuQ/2fmEO2nJCde5LkkYT HbjkrOm3+ydoi08zEJ/Pdt0bqwgO4lVmWA9wy9koLLWgYf0Huo2k9phdd55D1qEQ 6Rg8qy5ulOGZQPryUK55L7egE6poX/peOjRwomfp12fGS04Ppf0DL9DGX1aXH3Dh fLbfvgpxxerAnJLdgz7/zNg4e348x1u7zYnnpMwE6ZUdk/gouyeAt60FtkEvDAKC vQ5WsfNexWv9Wr2xtTVRYH6SHR2X7fjzHjR3oy6QggZECel2snMfu6iam0HXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJ1J3orm++/m2TtgULpY8Go6rckQwHwYDVR0j BBgwFoAUTdDJW0O4tlNgH+05qwEOHdDcF/IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 Mjc4MGY4NS1lZjJmLTRjZjgtYTRiOC01MjI1YzQ1Yjk2YTEvMC80REQwQzk1QjQz QjhCNjUzNjAxRkVEMzlBQjAxMEUxREQwREMxN0YyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEREMEM5NUI0M0I4QjY1MzYwMUZFRDM5QUIwMTBFMUREMERD MTdGMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODI3ODBmODUtZWYyZi00Y2Y4LWE0 YjgtNTIyNWM0NWI5NmExLzAvNEREMEM5NUI0M0I4QjY1MzYwMUZFRDM5QUIwMTBF MUREMERDMTdGMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC8/2Scxqa7puTAywqwp890M6xIZqPEEM4ZL 2Z0lNWDLSGFNY5HZxtPf2sVZiA9BsxR1IGsDyPjaKUSThWGrqAcdyOA6VZtwoWXW 9SkwxOcxx6Vm4/B5Omo6FgRehJAo7SJTV8gTNph03hOweu5bysAFPdxstd8TMAdZ vV+px7kvvLRCVN9iisjx0qJT2BjZKFp+x6CBYvkz+AG4yJoYutP/b89RdYSN7KlN pJgXtx7Vncx1etVX5pkao+dF+e6bGxRqaajOrPdfKEktKTWLwTRpMwUIYUxtJ14B Z5p304HNO+sLuMsbTrkYxCFqr9sAE1vyAj6UkZ0kJLyIG9521gA= -----END CERTIFICATE-----Generated at Wed Sep 10 20:31:52 2025 by rpki-client