$ rpki-client -vvf repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.mft File: 4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.mft (raw, json) Hash identifier: v4P34gcIGh3nziG+4gufRA8FAduP9WI0NKXxRr8dTvQ= Subject key identifier: 6D:1E:23:1C:44:03:1E:95:7B:8F:F8:59:2A:E0:A3:10:14:E7:9D:B9 Authority key identifier: 4B:F1:DC:C0:BC:C5:B1:A4:B6:BE:52:6A:75:FF:33:39:7F:C3:87:87 Certificate issuer: /CN=4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787 Certificate serial: 5ADAAFF3D2778F0D637CAFFF3C4D95DEB2D43322 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.mft Manifest number: 0515 Signing time: Sun 07 Sep 2025 09:50:56 +0000 Manifest this update: Sun 07 Sep 2025 09:45:56 +0000 Manifest next update: Wed 10 Sep 2025 14:05:56 +0000 Files and hashes: 1: 3232332e32352e3130352e302f32342d3234203d3e2034383231.roa (hash: 8gu4g1bdcjin/i0TEIycNgxzwZksIdfr4ERNzQVV1jI=) 2: 3232332e32352e3131312e302f32342d3234203d3e20313431363037.roa (hash: ZqT27QjOP9C+x+HxEBPLWbwm+mlgqdclma4hL/DLOAM=) 3: 3232332e32352e3130382e302f32342d3234203d3e2034383231.roa (hash: kXwkhbJ+oGBQpIPdrmdbXU4UMfG2qJFbyPtaW45RBFo=) 4: 3232332e32352e39362e302f32312d3234203d3e2039333431.roa (hash: Qjv/mGfQRB5AB46dWcHhxxNcs3aS1PJFtKLeGoBkxi0=) 5: 3232332e32352e3130342e302f32342d3234203d3e20313530323238.roa (hash: 5Yjn1xzYUyXHAIu8ieYmhhXRGkoBPybJZRq7aWT18y0=) 6: 3232332e32352e3131302e302f32342d3234203d3e20313336383733.roa (hash: d7TlxPMnZWo9NiIWBhiGrIW1xBkbQUYDXZcwgsom8Dk=) 7: 4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.crl (hash: /WsBE5dSGQp2XDb2vHwHDZjUAm8Xdepo7MqWhcGSoyE=) 8: 3232332e32352e3130362e302f32342d3234203d3e20313336383733.roa (hash: S8lyObQBOuPDRueBj8YjzK0Yqke0dcnMl7Vcc48vuVs=) 9: 3232332e32352e3130372e302f32342d3234203d3e20313439373138.roa (hash: DrBIeEQt6yULPW0r6792EagtEDf0ZZCsQyk/153rumY=) 10: 323430323a613530303a3a2f33322d3332203d3e2034383231.roa (hash: moNwAWlPkj0rtokbSnZwVDheKPDbut9HTHNYooRQM7Q=) 11: 3232332e32352e3130392e302f32342d3234203d3e20313439373138.roa (hash: d3eM98YfiQHd35IoK+KK/VXjFcXTY4k6PTjZu1TQR90=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.crl rsync://repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 14:05:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:da:af:f3:d2:77:8f:0d:63:7c:af:ff:3c:4d:95:de:b2:d4:33:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787 Validity Not Before: Sep 7 09:45:56 2025 GMT Not After : Sep 10 14:05:56 2025 GMT Subject: CN=6D1E231C44031E957B8FF8592AE0A31014E79DB9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:3a:d0:47:27:61:23:a5:75:c4:0a:45:e4:6f: 17:9a:44:81:d5:50:69:df:78:32:6c:ec:5b:b9:bd: 46:cb:0c:4e:d2:cb:40:be:fa:88:72:64:c3:70:0d: 6d:59:48:cf:76:23:62:0d:a3:5f:d8:8e:f5:f6:61: 17:5b:23:b3:29:b4:8c:f8:42:78:cd:6c:25:3b:ce: e7:fb:3b:55:57:4d:5a:20:bf:37:fb:a8:e2:9f:8a: 38:9f:f8:7e:c3:f0:9c:fa:cb:bb:2d:91:d5:52:92: c3:d7:08:ac:c9:d3:fc:70:cb:2d:9e:bb:d6:9b:39: 0f:7d:c7:cf:28:8a:e2:84:3e:2b:34:a2:0b:79:b7: 53:1c:02:8a:90:8b:f2:79:08:af:29:de:05:fd:29: ae:d7:ba:47:46:89:43:08:db:91:eb:6e:18:cd:70: c8:f9:78:e3:57:65:c5:99:d1:28:5c:e4:20:87:c4: 8e:d6:dc:67:46:43:57:ea:73:cc:d7:af:9b:84:a0: f7:93:bd:17:8b:b1:3c:af:49:f6:95:e9:ec:02:ed: 53:2d:e1:1b:0d:d0:a5:ec:8a:5c:47:fc:24:20:1a: 9e:f8:bc:79:45:c1:f4:6c:f1:84:fd:07:b6:c0:8e: 97:a5:b1:91:e7:ee:bf:28:42:c8:33:9f:e4:f1:24: 8a:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:1E:23:1C:44:03:1E:95:7B:8F:F8:59:2A:E0:A3:10:14:E7:9D:B9 X509v3 Authority Key Identifier: keyid:4B:F1:DC:C0:BC:C5:B1:A4:B6:BE:52:6A:75:FF:33:39:7F:C3:87:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:d5:98:31:5d:75:eb:e8:6a:59:8d:bf:d6:41:8d:d5:be:e1: 5c:44:7c:19:94:a5:e6:92:71:a6:96:6a:5e:c7:96:62:c5:94: 94:63:7e:02:93:f4:e0:33:6c:c9:9a:66:e7:47:ca:9b:bd:43: d4:2b:3d:ce:10:4d:83:73:7a:1c:a8:9a:94:aa:f4:59:d7:a8: 3c:c4:6c:92:86:7a:26:a9:65:02:da:6e:2c:9c:d3:c2:7a:78: aa:ac:04:e9:0c:b1:df:e2:69:16:0b:93:41:6a:27:2e:54:3a: 40:d6:0c:e9:38:42:aa:f2:52:1b:bc:96:e3:64:24:55:46:5a: 16:62:8e:7e:15:e5:6d:6e:66:24:24:58:1e:92:a3:ac:61:58: 56:1d:7c:28:fd:1c:70:a4:10:b0:e0:55:8a:2d:50:14:29:e8: d8:76:dd:c4:e3:37:1d:27:73:ea:94:85:c1:da:ef:d9:60:20: 61:b2:0b:78:3c:cd:9b:23:69:6c:ef:a9:08:98:e8:05:a1:1d: 54:3f:30:1a:0c:11:bc:b8:fe:89:45:16:a1:db:54:3c:84:3b: 62:ec:a3:e4:7b:68:c2:94:30:b2:84:66:37:67:72:ae:db:ed: bd:82:75:7e:be:bd:34:ba:ed:38:9d:09:f4:f8:14:54:b0:b0: fa:be:40:7b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWtqv89J3jw1jfK//PE2V3rLUMyIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEJGMURDQzBCQ0M1QjFBNEI2QkU1MjZBNzVGRjMzMzk3 RkMzODc4NzAeFw0yNTA5MDcwOTQ1NTZaFw0yNTA5MTAxNDA1NTZaMDMxMTAvBgNV BAMTKDZEMUUyMzFDNDQwMzFFOTU3QjhGRjg1OTJBRTBBMzEwMTRFNzlEQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjOtBHJ2EjpXXECkXkbxeaRIHV UGnfeDJs7Fu5vUbLDE7Sy0C++ohyZMNwDW1ZSM92I2INo1/YjvX2YRdbI7MptIz4 QnjNbCU7zuf7O1VXTVogvzf7qOKfijif+H7D8Jz6y7stkdVSksPXCKzJ0/xwyy2e u9abOQ99x88oiuKEPis0ogt5t1McAoqQi/J5CK8p3gX9Ka7XukdGiUMI25HrbhjN cMj5eONXZcWZ0Shc5CCHxI7W3GdGQ1fqc8zXr5uEoPeTvReLsTyvSfaV6ewC7VMt 4RsN0KXsilxH/CQgGp74vHlFwfRs8YT9B7bAjpelsZHn7r8oQsgzn+TxJIpnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbR4jHEQDHpV7j/hZKuCjEBTnnbkwHwYDVR0j BBgwFoAUS/HcwLzFsaS2vlJqdf8zOX/Dh4cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZDI1NDQxOS01M2JlLTRhZDQtYmY3Zi0yOWY4OTEyNTIzZDAvMC80QkYxRENDMEJD QzVCMUE0QjZCRTUyNkE3NUZGMzMzOTdGQzM4Nzg3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEJGMURDQzBCQ0M1QjFBNEI2QkU1MjZBNzVGRjMzMzk3RkMz ODc4Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGQyNTQ0MTktNTNiZS00YWQ0LWJm N2YtMjlmODkxMjUyM2QwLzAvNEJGMURDQzBCQ0M1QjFBNEI2QkU1MjZBNzVGRjMz Mzk3RkMzODc4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFrVmDFddevoalmNv9ZBjdW+4VxEfBmUpeaS caaWal7HlmLFlJRjfgKT9OAzbMmaZudHypu9Q9QrPc4QTYNzehyompSq9FnXqDzE bJKGeiapZQLabiyc08J6eKqsBOkMsd/iaRYLk0FqJy5UOkDWDOk4QqryUhu8luNk JFVGWhZijn4V5W1uZiQkWB6So6xhWFYdfCj9HHCkELDgVYotUBQp6Nh23cTjNx0n c+qUhcHa79lgIGGyC3g8zZsjaWzvqQiY6AWhHVQ/MBoMEby4/olFFqHbVDyEO2Ls o+R7aMKUMLKEZjdncq7b7b2CdX6+vTS67TidCfT4FFSwsPq+QHs= -----END CERTIFICATE-----Generated at Tue Sep 9 01:12:23 2025 by rpki-client