$ rpki-client -vvf repo-rpki.idnic.net/repo/9a2bfe9a-3823-44e9-97c0-2191a56bafd3/0/4F022459BA46CF30700E070671C752B44729E249.mft File: 4F022459BA46CF30700E070671C752B44729E249.mft (raw, json) Hash identifier: ZoKq1rCKYSaYLe2e/BtEZeGHEc8QiOX9gxafhJlGQf8= Subject key identifier: 3E:E8:99:60:4F:F1:F2:A9:44:28:D4:75:52:F0:E0:D3:D7:11:A5:52 Authority key identifier: 4F:02:24:59:BA:46:CF:30:70:0E:07:06:71:C7:52:B4:47:29:E2:49 Certificate issuer: /CN=4F022459BA46CF30700E070671C752B44729E249 Certificate serial: 7748DEFCB0C47F0D8EC6CDE02346CE2ECFE11FB9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F022459BA46CF30700E070671C752B44729E249.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9a2bfe9a-3823-44e9-97c0-2191a56bafd3/0/4F022459BA46CF30700E070671C752B44729E249.mft Manifest number: 01A9 Signing time: Fri 05 Sep 2025 08:22:12 +0000 Manifest this update: Fri 05 Sep 2025 08:17:12 +0000 Manifest next update: Mon 08 Sep 2025 16:09:12 +0000 Files and hashes: 1: 4F022459BA46CF30700E070671C752B44729E249.crl (hash: Pfj7EKdZd7mDYnuEWJfrp1BA8ngCHXSNEM2+LQiGs5I=) 2: 3130332e36312e3233342e302f32332d3233203d3e20313530353130.roa (hash: eReb0WjJwBofXwNbDwmRqsCz1oLf4D/ET0XbS0nqqnk=) 3: 3130332e36312e3233342e302f32342d3234203d3e20313530353130.roa (hash: VvIxYiO1vpW4N2M0c206efZBd+dmDTRrTwPYKqia/UQ=) 4: 3130332e36312e3233352e302f32342d3234203d3e20313530353130.roa (hash: OWWwKr6VgMTRSl2gHvmJwedkDbcvu1lGUMF7l6U0D14=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9a2bfe9a-3823-44e9-97c0-2191a56bafd3/0/4F022459BA46CF30700E070671C752B44729E249.crl rsync://repo-rpki.idnic.net/repo/9a2bfe9a-3823-44e9-97c0-2191a56bafd3/0/4F022459BA46CF30700E070671C752B44729E249.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F022459BA46CF30700E070671C752B44729E249.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 16:09:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:48:de:fc:b0:c4:7f:0d:8e:c6:cd:e0:23:46:ce:2e:cf:e1:1f:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4F022459BA46CF30700E070671C752B44729E249 Validity Not Before: Sep 5 08:17:12 2025 GMT Not After : Sep 8 16:09:12 2025 GMT Subject: CN=3EE899604FF1F2A94428D47552F0E0D3D711A552 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:3a:03:1c:9d:27:89:7f:12:90:46:cc:99:43: 93:6b:28:48:da:61:01:78:ed:30:d4:09:d8:02:a4: 53:65:b2:ad:c4:49:84:45:82:7f:6f:20:0b:1f:50: e4:03:9d:86:af:f8:f1:61:57:83:b1:47:15:3a:0f: 99:a0:67:3a:67:85:41:a8:af:0e:c5:31:b5:e3:a0: a5:a0:d5:52:36:32:50:5d:cf:06:49:4a:30:9c:c9: 82:e8:f4:7c:d5:b0:f1:10:0f:e0:64:cb:bc:f4:96: f8:c2:e5:6a:6d:4c:87:29:cd:6e:67:ab:31:ce:47: 84:2f:8f:ff:e3:47:77:d5:00:8a:2a:57:94:7e:32: 4b:c9:37:2f:1f:58:63:20:25:a9:43:54:83:f8:0f: f9:1b:a0:44:64:39:90:7d:75:ad:f7:ad:bd:e0:63: a6:07:79:da:86:9a:ed:fe:74:95:c9:f4:1f:4d:db: 77:a1:58:fc:11:fb:1c:6a:4d:7b:d1:cc:40:5c:6c: 8b:e2:91:32:dd:f6:18:c1:61:1f:d6:3b:be:a7:0a: 58:b5:f9:81:f2:c8:48:43:65:4e:c4:0d:d7:e5:a2: ee:f6:6a:80:c2:22:2a:6d:7b:5a:83:9c:10:6b:95: a2:86:cf:b9:b2:25:9f:39:58:8c:29:5a:f8:3e:67: c9:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:E8:99:60:4F:F1:F2:A9:44:28:D4:75:52:F0:E0:D3:D7:11:A5:52 X509v3 Authority Key Identifier: keyid:4F:02:24:59:BA:46:CF:30:70:0E:07:06:71:C7:52:B4:47:29:E2:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9a2bfe9a-3823-44e9-97c0-2191a56bafd3/0/4F022459BA46CF30700E070671C752B44729E249.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F022459BA46CF30700E070671C752B44729E249.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9a2bfe9a-3823-44e9-97c0-2191a56bafd3/0/4F022459BA46CF30700E070671C752B44729E249.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cb:35:9d:84:b7:be:b3:90:fc:75:81:a4:c7:4b:37:08:4b:c4: 74:40:eb:01:2a:9f:1c:08:83:53:d0:bd:43:90:61:c1:9d:a2: 14:07:49:5b:ce:da:26:6c:2c:da:ae:80:58:ae:e0:be:48:a3: 54:37:a1:10:35:08:62:54:a0:f6:5f:c2:e0:98:74:94:a7:11: 93:61:8c:bb:45:29:0c:12:41:96:1a:e3:5c:91:5a:7e:90:28: 69:49:9e:b1:cc:c5:51:06:d0:27:39:3b:0c:11:f3:be:b9:77: 34:be:b1:6b:82:47:56:4b:58:24:1e:68:47:83:f9:f0:24:cc: f1:ce:0c:1e:b0:31:ad:25:64:bf:be:20:3f:8a:b9:be:e5:cb: 97:17:20:1e:d6:89:6f:d6:dc:88:9d:9f:c8:65:80:ba:b8:52: 80:d6:45:6f:d3:33:f7:d4:96:a7:8e:ab:a4:ce:e2:94:05:19: 02:5a:07:2f:b0:c1:a8:00:18:50:87:d8:85:4d:d0:af:32:3a: e8:10:1e:bb:84:f0:24:c8:b0:bd:c1:00:94:e6:19:15:d3:e7: 32:b2:3d:9d:82:8b:b0:00:b1:6e:53:a4:4d:97:3b:14:75:52: 23:81:f1:7d:c0:d2:21:1c:81:c4:e9:d6:50:c8:44:f8:65:cb: 39:7f:36:f8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd0je/LDEfw2Oxs3gI0bOLs/hH7kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEYwMjI0NTlCQTQ2Q0YzMDcwMEUwNzA2NzFDNzUyQjQ0 NzI5RTI0OTAeFw0yNTA5MDUwODE3MTJaFw0yNTA5MDgxNjA5MTJaMDMxMTAvBgNV BAMTKDNFRTg5OTYwNEZGMUYyQTk0NDI4RDQ3NTUyRjBFMEQzRDcxMUE1NTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5OgMcnSeJfxKQRsyZQ5NrKEja YQF47TDUCdgCpFNlsq3ESYRFgn9vIAsfUOQDnYav+PFhV4OxRxU6D5mgZzpnhUGo rw7FMbXjoKWg1VI2MlBdzwZJSjCcyYLo9HzVsPEQD+Bky7z0lvjC5WptTIcpzW5n qzHOR4Qvj//jR3fVAIoqV5R+MkvJNy8fWGMgJalDVIP4D/kboERkOZB9da33rb3g Y6YHedqGmu3+dJXJ9B9N23ehWPwR+xxqTXvRzEBcbIvikTLd9hjBYR/WO76nCli1 +YHyyEhDZU7EDdflou72aoDCIipte1qDnBBrlaKGz7myJZ85WIwpWvg+Z8mxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPuiZYE/x8qlEKNR1UvDg09cRpVIwHwYDVR0j BBgwFoAUTwIkWbpGzzBwDgcGccdStEcp4kkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YTJiZmU5YS0zODIzLTQ0ZTktOTdjMC0yMTkxYTU2YmFmZDMvMC80RjAyMjQ1OUJB NDZDRjMwNzAwRTA3MDY3MUM3NTJCNDQ3MjlFMjQ5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEYwMjI0NTlCQTQ2Q0YzMDcwMEUwNzA2NzFDNzUyQjQ0NzI5 RTI0OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWEyYmZlOWEtMzgyMy00NGU5LTk3 YzAtMjE5MWE1NmJhZmQzLzAvNEYwMjI0NTlCQTQ2Q0YzMDcwMEUwNzA2NzFDNzUy QjQ0NzI5RTI0OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMs1nYS3vrOQ/HWBpMdLNwhLxHRA6wEqnxwI g1PQvUOQYcGdohQHSVvO2iZsLNqugFiu4L5Io1Q3oRA1CGJUoPZfwuCYdJSnEZNh jLtFKQwSQZYa41yRWn6QKGlJnrHMxVEG0Cc5OwwR8765dzS+sWuCR1ZLWCQeaEeD +fAkzPHODB6wMa0lZL++ID+Kub7ly5cXIB7WiW/W3Iidn8hlgLq4UoDWRW/TM/fU lqeOq6TO4pQFGQJaBy+wwagAGFCH2IVN0K8yOugQHruE8CTIsL3BAJTmGRXT5zKy PZ2Ci7AAsW5TpE2XOxR1UiOB8X3A0iEcgcTp1lDIRPhlyzl/Nvg= -----END CERTIFICATE-----Generated at Fri Sep 5 10:18:41 2025 by rpki-client