$ rpki-client -vvf repo-rpki.idnic.net/repo/960f8461-bb2c-4d3e-a5be-700939427c8c/0/4BC6236908AF9F36A8057E2BB1A5B34BCD6B7DBA.mft File: 4BC6236908AF9F36A8057E2BB1A5B34BCD6B7DBA.mft (raw, json) Hash identifier: Y0jCnP886PSNQQwkBTiMfRiUKpWbLCa2hVes3M1SdPQ= Subject key identifier: 4A:AE:30:AF:30:D8:2E:A0:9D:28:E1:04:D6:0F:25:29:AC:F5:D0:D2 Authority key identifier: 4B:C6:23:69:08:AF:9F:36:A8:05:7E:2B:B1:A5:B3:4B:CD:6B:7D:BA Certificate issuer: /CN=4BC6236908AF9F36A8057E2BB1A5B34BCD6B7DBA Certificate serial: 6F26C8B1FC3566501A5A4FF2FE3C282510ABDB3E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BC6236908AF9F36A8057E2BB1A5B34BCD6B7DBA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/960f8461-bb2c-4d3e-a5be-700939427c8c/0/4BC6236908AF9F36A8057E2BB1A5B34BCD6B7DBA.mft Manifest number: 019A Signing time: Thu 04 Sep 2025 12:51:31 +0000 Manifest this update: Thu 04 Sep 2025 12:46:31 +0000 Manifest next update: Mon 08 Sep 2025 00:01:31 +0000 Files and hashes: 1: 4BC6236908AF9F36A8057E2BB1A5B34BCD6B7DBA.crl (hash: 9/svdz7X4mtxNvxPyCkqiv7L9KoqpvfybHP7pPC4nTw=) 2: 3130332e3139392e3131372e302f32342d3234203d3e20313530393234.roa (hash: 6oB2NEdb1J8wzFdKjlXlM7HaXvyVJb+FJhi1JoqHPbo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/960f8461-bb2c-4d3e-a5be-700939427c8c/0/4BC6236908AF9F36A8057E2BB1A5B34BCD6B7DBA.crl rsync://repo-rpki.idnic.net/repo/960f8461-bb2c-4d3e-a5be-700939427c8c/0/4BC6236908AF9F36A8057E2BB1A5B34BCD6B7DBA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BC6236908AF9F36A8057E2BB1A5B34BCD6B7DBA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 00:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:26:c8:b1:fc:35:66:50:1a:5a:4f:f2:fe:3c:28:25:10:ab:db:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4BC6236908AF9F36A8057E2BB1A5B34BCD6B7DBA Validity Not Before: Sep 4 12:46:31 2025 GMT Not After : Sep 8 00:01:31 2025 GMT Subject: CN=4AAE30AF30D82EA09D28E104D60F2529ACF5D0D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:93:31:d8:82:48:39:de:97:a5:43:50:bc:3a: d6:4a:02:d6:5b:25:69:fd:81:2b:e0:ef:74:d4:af: d0:80:1c:fe:17:d0:2e:d7:2d:91:96:e3:a2:50:38: e4:88:2a:e9:36:23:d1:f2:75:8c:d7:28:f7:32:15: 05:ea:b1:e8:73:b6:58:f6:e8:73:21:28:66:6a:3a: bc:bd:15:47:39:a2:7a:1e:14:53:1c:35:53:aa:a5: 9c:d6:57:9d:b9:03:3b:03:8d:d8:d0:87:6f:fb:24: f3:a7:92:90:bc:ba:60:e3:c0:35:d8:0b:95:02:29: ae:fd:0a:00:9d:dc:c5:ad:2e:60:c3:b1:89:fc:28: 6b:af:91:07:fd:aa:13:5a:2b:58:21:de:53:d5:ba: 78:79:74:fa:ff:2c:a7:ae:8d:7f:ac:cf:a9:40:c6: 49:15:c0:5f:4a:94:8b:21:3b:51:d4:01:09:60:b1: 21:ab:da:bc:4a:0c:22:f0:20:d1:a4:6f:88:cb:17: be:1a:d9:cb:57:6a:73:1d:5d:c8:8f:a2:91:05:ce: 71:41:40:d8:0f:5d:be:4c:bd:3c:ba:81:5a:c0:c0: 81:15:1b:c2:e9:06:35:a4:14:da:da:c1:10:37:ca: 04:63:ce:c2:ff:5d:18:1b:7d:a1:c8:c8:3d:65:2c: 41:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:AE:30:AF:30:D8:2E:A0:9D:28:E1:04:D6:0F:25:29:AC:F5:D0:D2 X509v3 Authority Key Identifier: keyid:4B:C6:23:69:08:AF:9F:36:A8:05:7E:2B:B1:A5:B3:4B:CD:6B:7D:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/960f8461-bb2c-4d3e-a5be-700939427c8c/0/4BC6236908AF9F36A8057E2BB1A5B34BCD6B7DBA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BC6236908AF9F36A8057E2BB1A5B34BCD6B7DBA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/960f8461-bb2c-4d3e-a5be-700939427c8c/0/4BC6236908AF9F36A8057E2BB1A5B34BCD6B7DBA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:62:4f:e0:cd:92:08:03:7f:82:8d:a3:ab:0a:f2:0a:32:48: 9d:92:1b:b0:90:2f:5a:2e:e7:0b:ea:18:b9:7f:37:fe:5c:9d: 3c:c3:c8:7c:e5:5b:f8:1a:88:0d:25:03:3e:d7:3a:99:e6:e0: e1:e0:22:4b:31:fa:a8:a3:47:d2:60:45:72:1b:f8:99:c4:a3: af:ca:97:f8:d0:cd:7f:e3:b1:22:80:11:f7:a8:d0:64:79:0f: f3:9c:65:de:6f:fc:c5:10:d3:42:22:ca:2d:91:cc:f8:3f:9c: 00:58:df:d2:2d:9c:61:6b:cd:da:fd:08:b7:04:36:9e:1c:51: 98:56:66:ba:02:74:6e:0b:ac:42:e9:aa:e1:ed:c8:75:ef:14: 6d:33:63:0e:1a:a3:42:ac:44:fe:ab:70:ec:48:9d:ef:64:3a: b1:3f:09:f2:cf:52:e4:06:d9:c5:4f:bc:a9:28:ef:0a:6b:5b: 10:23:c4:23:2b:ce:5f:8f:3f:28:99:3d:16:fa:33:73:c5:7c: c2:4e:06:9f:a5:b1:33:70:bf:3a:99:02:5a:dd:99:50:3a:99: 08:4a:3b:bc:16:ef:fd:77:0b:a7:14:b8:c6:0d:67:6b:ca:a5: 0e:b3:8e:44:22:b7:52:cf:5b:c6:e7:7a:2c:ad:d5:72:3a:1c: a1:47:ea:2c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbybIsfw1ZlAaWk/y/jwoJRCr2z4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEJDNjIzNjkwOEFGOUYzNkE4MDU3RTJCQjFBNUIzNEJD RDZCN0RCQTAeFw0yNTA5MDQxMjQ2MzFaFw0yNTA5MDgwMDAxMzFaMDMxMTAvBgNV BAMTKDRBQUUzMEFGMzBEODJFQTA5RDI4RTEwNEQ2MEYyNTI5QUNGNUQwRDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJkzHYgkg53pelQ1C8OtZKAtZb JWn9gSvg73TUr9CAHP4X0C7XLZGW46JQOOSIKuk2I9HydYzXKPcyFQXqsehztlj2 6HMhKGZqOry9FUc5onoeFFMcNVOqpZzWV525AzsDjdjQh2/7JPOnkpC8umDjwDXY C5UCKa79CgCd3MWtLmDDsYn8KGuvkQf9qhNaK1gh3lPVunh5dPr/LKeujX+sz6lA xkkVwF9KlIshO1HUAQlgsSGr2rxKDCLwINGkb4jLF74a2ctXanMdXciPopEFznFB QNgPXb5MvTy6gVrAwIEVG8LpBjWkFNrawRA3ygRjzsL/XRgbfaHIyD1lLEERAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSq4wrzDYLqCdKOEE1g8lKaz10NIwHwYDVR0j BBgwFoAUS8YjaQivnzaoBX4rsaWzS81rfbowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NjBmODQ2MS1iYjJjLTRkM2UtYTViZS03MDA5Mzk0MjdjOGMvMC80QkM2MjM2OTA4 QUY5RjM2QTgwNTdFMkJCMUE1QjM0QkNENkI3REJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEJDNjIzNjkwOEFGOUYzNkE4MDU3RTJCQjFBNUIzNEJDRDZC N0RCQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTYwZjg0NjEtYmIyYy00ZDNlLWE1 YmUtNzAwOTM5NDI3YzhjLzAvNEJDNjIzNjkwOEFGOUYzNkE4MDU3RTJCQjFBNUIz NEJDRDZCN0RCQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIdiT+DNkggDf4KNo6sK8goySJ2SG7CQL1ou 5wvqGLl/N/5cnTzDyHzlW/gaiA0lAz7XOpnm4OHgIksx+qijR9JgRXIb+JnEo6/K l/jQzX/jsSKAEfeo0GR5D/OcZd5v/MUQ00Iiyi2RzPg/nABY39ItnGFrzdr9CLcE Np4cUZhWZroCdG4LrELpquHtyHXvFG0zYw4ao0KsRP6rcOxIne9kOrE/CfLPUuQG 2cVPvKko7wprWxAjxCMrzl+PPyiZPRb6M3PFfMJOBp+lsTNwvzqZAlrdmVA6mQhK O7wW7/13C6cUuMYNZ2vKpQ6zjkQit1LPW8bneiyt1XI6HKFH6iw= -----END CERTIFICATE-----Generated at Fri Sep 5 12:47:00 2025 by rpki-client