$ rpki-client -vvf repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/0/4538753AD01FB91D7B028CC53F5AEC24AD6CD082.mft File: 4538753AD01FB91D7B028CC53F5AEC24AD6CD082.mft (raw, json) Hash identifier: fdKx7lJtkyriYbGS9JSm4rmxbT1RWnhBUcMEvoLKp9o= Subject key identifier: 58:27:AF:71:92:06:E3:1D:2D:D3:2A:B3:3A:43:75:8F:83:C5:D7:BE Authority key identifier: 45:38:75:3A:D0:1F:B9:1D:7B:02:8C:C5:3F:5A:EC:24:AD:6C:D0:82 Certificate issuer: /CN=4538753AD01FB91D7B028CC53F5AEC24AD6CD082 Certificate serial: 6F3C01F83CD9729E8AC5F62853B205F9B4A3DAAF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4538753AD01FB91D7B028CC53F5AEC24AD6CD082.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/0/4538753AD01FB91D7B028CC53F5AEC24AD6CD082.mft Manifest number: BA Signing time: Sun 07 Sep 2025 17:42:17 +0000 Manifest this update: Sun 07 Sep 2025 17:37:17 +0000 Manifest next update: Thu 11 Sep 2025 02:58:17 +0000 Files and hashes: 1: 4538753AD01FB91D7B028CC53F5AEC24AD6CD082.crl (hash: HAN9FEDXfL309tzNgFf0S8tzpq7puHd+u0eRKKkXyfU=) 2: 3135372e36362e3137342e302f32332d3234203d3e20313532373439.roa (hash: 5hBop//FL91nh6eglb7Afoy10VVM0UIJy8JFCFrZk+s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/0/4538753AD01FB91D7B028CC53F5AEC24AD6CD082.crl rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/0/4538753AD01FB91D7B028CC53F5AEC24AD6CD082.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4538753AD01FB91D7B028CC53F5AEC24AD6CD082.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 02:58:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:3c:01:f8:3c:d9:72:9e:8a:c5:f6:28:53:b2:05:f9:b4:a3:da:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4538753AD01FB91D7B028CC53F5AEC24AD6CD082 Validity Not Before: Sep 7 17:37:17 2025 GMT Not After : Sep 11 02:58:17 2025 GMT Subject: CN=5827AF719206E31D2DD32AB33A43758F83C5D7BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:86:c1:6e:62:6a:26:5d:14:bd:45:9f:c7:70: 71:33:bd:ca:f6:4e:94:24:ed:2e:be:32:2e:5a:ce: d0:9f:f8:b5:ff:99:21:2f:5b:25:2b:61:33:b3:57: cd:2a:ea:57:84:ba:d4:fb:b8:22:9e:96:c8:aa:7f: 6b:4a:be:a1:bf:89:d6:de:ba:69:78:72:2a:a3:f3: 0b:14:a7:e0:1c:19:5f:ef:95:38:55:9f:79:f4:f8: cb:31:75:09:f5:34:9f:83:14:0c:a9:13:b0:69:12: 53:ad:e6:3b:73:11:d4:67:96:5c:83:4a:a0:d9:d7: 6d:0d:4f:65:f0:de:07:93:5b:3b:f3:04:c3:f5:25: 94:92:52:ff:d6:ac:3c:b3:1a:69:63:02:ef:23:db: da:19:8c:ff:77:0d:cc:f0:d1:1e:54:d9:f2:91:23: 91:d9:a1:c0:15:3f:e9:95:73:e6:ad:ee:0f:61:75: cb:ee:e0:78:46:20:f4:c4:8f:fb:55:4f:78:89:30: 56:ad:be:9c:e6:4b:3d:6a:03:b0:93:9c:48:86:62: 65:e3:39:18:2b:0f:f3:ea:92:fd:1e:f2:7a:ad:17: bf:cd:11:7e:de:93:0b:bd:53:cc:f9:4c:d9:a9:77: aa:90:c7:d4:73:9c:d7:21:5b:1b:6e:2f:cc:c5:18: eb:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:27:AF:71:92:06:E3:1D:2D:D3:2A:B3:3A:43:75:8F:83:C5:D7:BE X509v3 Authority Key Identifier: keyid:45:38:75:3A:D0:1F:B9:1D:7B:02:8C:C5:3F:5A:EC:24:AD:6C:D0:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/0/4538753AD01FB91D7B028CC53F5AEC24AD6CD082.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4538753AD01FB91D7B028CC53F5AEC24AD6CD082.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/0/4538753AD01FB91D7B028CC53F5AEC24AD6CD082.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:ba:82:86:63:e8:dd:b7:0a:f6:89:e9:bc:20:04:22:21:69: fa:d1:fd:6c:4d:37:e3:5a:b8:21:48:46:06:2a:00:ef:c5:a9: 69:6a:68:2d:de:69:68:05:66:39:fd:d1:99:91:f1:bc:ea:f7: 41:ec:e0:b0:bd:63:74:8f:5d:f2:74:af:52:4e:e1:5f:5e:63: e2:8f:68:26:4d:58:a0:73:2e:80:61:e8:ff:c1:71:49:1f:1d: d1:a4:ec:86:6e:0d:55:7e:f3:20:75:27:2f:af:e5:1d:44:b8: e2:3e:56:02:86:61:02:52:97:4e:32:ad:be:47:60:ad:23:b7: 99:e1:a0:c2:cc:13:ae:97:89:06:8a:ce:5d:7e:ca:16:01:b7: d8:66:77:6d:75:8b:33:b8:e5:c9:e7:5f:fa:09:a6:52:4c:0f: 2d:ae:1c:11:d0:b7:f0:3d:0a:21:2d:3a:3d:89:b4:29:e5:de: 16:db:64:3e:3e:bf:84:fa:3a:f6:a2:d2:b7:40:d8:99:fd:1c: 4a:3b:95:80:bf:65:e0:a9:6a:21:f8:5d:a4:29:ce:dc:ba:45: 6f:c8:94:ee:77:54:ed:22:b3:ea:d3:45:bb:5c:8e:e6:ba:41: 2b:25:41:c2:e6:2b:44:83:44:20:58:54:06:a5:f0:1f:9e:05: 0b:05:a7:41 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbzwB+DzZcp6KxfYoU7IF+bSj2q8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUzODc1M0FEMDFGQjkxRDdCMDI4Q0M1M0Y1QUVDMjRB RDZDRDA4MjAeFw0yNTA5MDcxNzM3MTdaFw0yNTA5MTEwMjU4MTdaMDMxMTAvBgNV BAMTKDU4MjdBRjcxOTIwNkUzMUQyREQzMkFCMzNBNDM3NThGODNDNUQ3QkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXhsFuYmomXRS9RZ/HcHEzvcr2 TpQk7S6+Mi5aztCf+LX/mSEvWyUrYTOzV80q6leEutT7uCKelsiqf2tKvqG/idbe uml4ciqj8wsUp+AcGV/vlThVn3n0+MsxdQn1NJ+DFAypE7BpElOt5jtzEdRnllyD SqDZ120NT2Xw3geTWzvzBMP1JZSSUv/WrDyzGmljAu8j29oZjP93Dczw0R5U2fKR I5HZocAVP+mVc+at7g9hdcvu4HhGIPTEj/tVT3iJMFatvpzmSz1qA7CTnEiGYmXj ORgrD/Pqkv0e8nqtF7/NEX7ekwu9U8z5TNmpd6qQx9RznNchWxtuL8zFGOt3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWCevcZIG4x0t0yqzOkN1j4PF174wHwYDVR0j BBgwFoAURTh1OtAfuR17AozFP1rsJK1s0IIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YjczM2RjZi05ZjVlLTQ3NzUtOWNlNy05ZGQ1MjViNDRiODYvMC80NTM4NzUzQUQw MUZCOTFEN0IwMjhDQzUzRjVBRUMyNEFENkNEMDgyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNDUzODc1M0FEMDFGQjkxRDdCMDI4Q0M1M0Y1QUVDMjRBRDZD RDA4Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWI3MzNkY2YtOWY1ZS00Nzc1LTlj ZTctOWRkNTI1YjQ0Yjg2LzAvNDUzODc1M0FEMDFGQjkxRDdCMDI4Q0M1M0Y1QUVD MjRBRDZDRDA4Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJK6goZj6N23CvaJ6bwgBCIhafrR/WxNN+Na uCFIRgYqAO/FqWlqaC3eaWgFZjn90ZmR8bzq90Hs4LC9Y3SPXfJ0r1JO4V9eY+KP aCZNWKBzLoBh6P/BcUkfHdGk7IZuDVV+8yB1Jy+v5R1EuOI+VgKGYQJSl04yrb5H YK0jt5nhoMLME66XiQaKzl1+yhYBt9hmd211izO45cnnX/oJplJMDy2uHBHQt/A9 CiEtOj2JtCnl3hbbZD4+v4T6Ovai0rdA2Jn9HEo7lYC/ZeCpaiH4XaQpzty6RW/I lO53VO0is+rTRbtcjua6QSslQcLmK0SDRCBYVAal8B+eBQsFp0E= -----END CERTIFICATE-----Generated at Mon Sep 8 05:11:13 2025 by rpki-client