$ rpki-client -vvf repo-rpki.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.mft File: 4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.mft (raw, json) Hash identifier: iSRnkov9NQJ0ntLLyMORFgaUtrH6WNHg8JHuyn2my6I= Subject key identifier: 60:64:37:54:6A:80:FF:D0:41:EE:C6:24:19:BA:E7:F5:FE:20:E1:17 Authority key identifier: 4B:E0:EB:AF:EF:1E:20:6C:AD:8B:4E:AD:6D:6A:08:D3:A8:C0:1B:50 Certificate issuer: /CN=4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50 Certificate serial: 0B20EF1E7809C9C7108921E3B177197A7AA75C9E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.cer Subject info access: rsync://repo-rpki.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.mft Manifest number: 01F4 Signing time: Sat 30 Aug 2025 22:00:50 +0000 Manifest this update: Sat 30 Aug 2025 21:55:50 +0000 Manifest next update: Wed 03 Sep 2025 06:36:50 +0000 Files and hashes: 1: 4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.crl (hash: BodiECmn+5Jf3Iqi7Cqd1ObJ0ex1B7S4+00Kwelc39s=) 2: 3130332e38362e3132382e302f32332d3234203d3e2034383030.roa (hash: D4xO8SkIE8jeNebf9M5hiqlhcLrsrkGAhopy0O7d3p0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.crl rsync://repo-rpki.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Sep 2025 06:36:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:20:ef:1e:78:09:c9:c7:10:89:21:e3:b1:77:19:7a:7a:a7:5c:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50 Validity Not Before: Aug 30 21:55:50 2025 GMT Not After : Sep 3 06:36:50 2025 GMT Subject: CN=606437546A80FFD041EEC62419BAE7F5FE20E117 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ce:47:7a:04:88:ee:0f:a4:e8:7a:55:a5:d0: d3:3c:5a:23:98:2e:65:15:85:d8:f9:a1:3c:f5:6d: 53:1e:e2:47:1f:66:c0:ca:b1:c0:45:f9:11:f9:27: 5f:88:ce:a2:62:0d:de:4b:b9:e9:45:31:57:0c:c5: 45:18:f4:60:eb:f7:c8:a8:2f:31:07:aa:a1:39:bc: 46:0f:68:0f:76:00:a6:6b:7b:3c:f0:fb:55:44:7b: be:ad:61:f0:72:e0:4f:66:8b:d5:9a:a0:6c:96:7e: 34:f8:5a:6e:04:71:16:07:2b:22:9c:ff:42:c8:5c: e4:34:e5:93:34:44:6e:2b:a0:c9:a0:5b:18:ee:0a: 53:6e:58:6a:77:8f:25:f8:ba:7f:fa:b9:c8:d6:71: e6:3a:da:b6:40:e8:0b:e1:fb:6e:53:93:76:d6:7f: 9a:49:c2:c9:5a:8d:da:84:f2:6e:76:12:67:65:bd: f5:8e:5e:71:fd:36:02:aa:e7:c4:04:bd:5f:7a:c1: 99:a7:d6:f4:ae:a3:6c:f9:36:f6:f4:91:4f:12:09: 9a:e8:38:32:f5:db:11:cc:ae:32:03:8a:69:d3:9b: 70:60:ef:0e:db:0d:c6:aa:45:1d:47:50:e6:93:0b: 64:c6:b3:8e:e2:9b:68:ca:24:13:af:cf:48:a6:40: 69:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:64:37:54:6A:80:FF:D0:41:EE:C6:24:19:BA:E7:F5:FE:20:E1:17 X509v3 Authority Key Identifier: keyid:4B:E0:EB:AF:EF:1E:20:6C:AD:8B:4E:AD:6D:6A:08:D3:A8:C0:1B:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:f0:3d:cc:b6:2d:7b:f8:53:1d:47:78:26:b0:7c:20:58:a5: d2:c4:4a:e6:59:97:a4:1c:e2:31:24:f5:e6:0c:a7:c8:0f:3c: 8b:1a:94:71:30:f7:a3:ad:38:f5:be:07:56:da:92:c3:1a:66: 8d:12:3a:69:26:94:86:f3:91:4d:c4:d5:4f:fc:a9:56:a9:fa: 67:68:0e:e4:e2:8d:da:35:18:05:b0:3b:3a:b3:23:db:d7:01: 08:cf:72:0a:2c:54:a0:a0:6f:53:a9:fd:81:17:28:2e:76:34: 40:f4:56:39:13:10:7c:51:df:c8:6d:af:57:d1:56:d5:ed:17: b6:77:7b:51:90:96:98:bd:49:5c:10:33:6b:aa:2e:ad:3c:d1: 10:b5:ac:41:80:ef:1f:7e:cb:00:bb:c7:00:76:08:f5:69:14: 1e:67:dd:62:ac:d6:a3:99:37:c9:d3:b8:46:52:98:47:a6:89: 03:a1:bd:47:27:8c:e9:a0:b6:4f:05:d3:67:7e:72:b7:d9:5b: d2:3f:13:4f:4b:09:de:e6:c0:cc:13:31:5c:14:fa:72:97:25: 92:e2:a7:29:ee:28:c9:1f:cf:94:27:a3:90:89:45:0c:c6:6b: dc:f8:93:e4:81:56:12:cc:07:dd:36:6b:9d:68:12:87:c8:90: 35:87:93:58 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCyDvHngJyccQiSHjsXcZenqnXJ4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEJFMEVCQUZFRjFFMjA2Q0FEOEI0RUFENkQ2QTA4RDNB OEMwMUI1MDAeFw0yNTA4MzAyMTU1NTBaFw0yNTA5MDMwNjM2NTBaMDMxMTAvBgNV BAMTKDYwNjQzNzU0NkE4MEZGRDA0MUVFQzYyNDE5QkFFN0Y1RkUyMEUxMTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2zkd6BIjuD6ToelWl0NM8WiOY LmUVhdj5oTz1bVMe4kcfZsDKscBF+RH5J1+IzqJiDd5LuelFMVcMxUUY9GDr98io LzEHqqE5vEYPaA92AKZrezzw+1VEe76tYfBy4E9mi9WaoGyWfjT4Wm4EcRYHKyKc /0LIXOQ05ZM0RG4roMmgWxjuClNuWGp3jyX4un/6ucjWceY62rZA6Avh+25Tk3bW f5pJwslajdqE8m52EmdlvfWOXnH9NgKq58QEvV96wZmn1vSuo2z5Nvb0kU8SCZro ODL12xHMrjIDimnTm3Bg7w7bDcaqRR1HUOaTC2TGs47im2jKJBOvz0imQGmJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYGQ3VGqA/9BB7sYkGbrn9f4g4RcwHwYDVR0j BBgwFoAUS+Drr+8eIGyti06tbWoI06jAG1AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OGE3ZjM1NS1mMjI1LTQ4ZjMtODdmOC0wYmZiMGM4ZTU4ZjAvMC80QkUwRUJBRkVG MUUyMDZDQUQ4QjRFQUQ2RDZBMDhEM0E4QzAxQjUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEJFMEVCQUZFRjFFMjA2Q0FEOEI0RUFENkQ2QTA4RDNBOEMw MUI1MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOThhN2YzNTUtZjIyNS00OGYzLTg3 ZjgtMGJmYjBjOGU1OGYwLzAvNEJFMEVCQUZFRjFFMjA2Q0FEOEI0RUFENkQ2QTA4 RDNBOEMwMUI1MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABbwPcy2LXv4Ux1HeCawfCBYpdLESuZZl6Qc 4jEk9eYMp8gPPIsalHEw96OtOPW+B1baksMaZo0SOmkmlIbzkU3E1U/8qVap+mdo DuTijdo1GAWwOzqzI9vXAQjPcgosVKCgb1Op/YEXKC52NED0VjkTEHxR38htr1fR VtXtF7Z3e1GQlpi9SVwQM2uqLq080RC1rEGA7x9+ywC7xwB2CPVpFB5n3WKs1qOZ N8nTuEZSmEemiQOhvUcnjOmgtk8F02d+crfZW9I/E09LCd7mwMwTMVwU+nKXJZLi pynuKMkfz5Qno5CJRQzGa9z4k+SBVhLMB902a51oEofIkDWHk1g= -----END CERTIFICATE-----Generated at Sun Aug 31 21:41:20 2025 by rpki-client