$ rpki-client -vvf repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/0/4538753AD01FB91D7B028CC53F5AEC24AD6CD082.mft File: 4538753AD01FB91D7B028CC53F5AEC24AD6CD082.mft (raw, json) Hash identifier: X54CFA6A4XWL10nxKSu0rWqq9bVByscx0DtO2FFkXf8= Subject key identifier: D0:7F:47:4D:7A:D0:0E:12:77:0A:49:CD:EF:AA:55:D9:B7:E9:19:E5 Authority key identifier: 45:38:75:3A:D0:1F:B9:1D:7B:02:8C:C5:3F:5A:EC:24:AD:6C:D0:82 Certificate issuer: /CN=4538753AD01FB91D7B028CC53F5AEC24AD6CD082 Certificate serial: 0BE25F72B52525F0034DB8803629A2824FB2622A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4538753AD01FB91D7B028CC53F5AEC24AD6CD082.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/0/4538753AD01FB91D7B028CC53F5AEC24AD6CD082.mft Manifest number: A4 Signing time: Mon 21 Jul 2025 15:02:16 +0000 Manifest this update: Mon 21 Jul 2025 14:57:16 +0000 Manifest next update: Thu 24 Jul 2025 16:03:16 +0000 Files and hashes: 1: 4538753AD01FB91D7B028CC53F5AEC24AD6CD082.crl (hash: yUDsa7A6bsI5ctzjnF7hq7qPsiSyTrhQ8j0Gn8QxnPw=) 2: 3135372e36362e3137342e302f32332d3234203d3e20313532373439.roa (hash: 5hBop//FL91nh6eglb7Afoy10VVM0UIJy8JFCFrZk+s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/0/4538753AD01FB91D7B028CC53F5AEC24AD6CD082.crl rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/0/4538753AD01FB91D7B028CC53F5AEC24AD6CD082.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4538753AD01FB91D7B028CC53F5AEC24AD6CD082.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 16:03:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:e2:5f:72:b5:25:25:f0:03:4d:b8:80:36:29:a2:82:4f:b2:62:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4538753AD01FB91D7B028CC53F5AEC24AD6CD082 Validity Not Before: Jul 21 14:57:16 2025 GMT Not After : Jul 24 16:03:16 2025 GMT Subject: CN=D07F474D7AD00E12770A49CDEFAA55D9B7E919E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:b3:0f:b4:d3:da:23:3e:fc:e3:1a:9d:ef:a4: ae:8a:b4:5c:cb:ae:b4:2d:f2:05:c4:7a:4e:43:de: ff:0c:a2:c1:e0:a2:3a:8b:7a:fb:23:7a:e2:8e:0f: 42:a3:e5:27:41:3a:c3:6a:8d:de:07:e5:e0:c9:32: 58:4b:d6:c4:92:db:4d:13:4d:2d:64:96:2a:7b:94: e7:26:0d:01:df:eb:59:ff:12:ea:3b:0e:4a:d7:b0: 7a:d8:8b:8f:02:33:76:fb:d5:57:44:fc:96:ee:1d: 5f:86:00:16:a5:4d:39:b3:ac:35:4a:65:aa:cc:91: 3f:2d:3a:0b:73:ce:2e:58:19:17:2f:93:53:57:fa: 84:a4:71:7d:e9:e4:a1:dc:b3:91:d2:f1:ad:f1:48: f9:8a:11:00:28:ec:24:33:77:c8:25:a3:53:48:5f: da:82:0e:e8:5d:9a:54:90:82:54:4d:57:f3:98:1a: 90:44:f3:89:ed:73:3b:89:24:10:2b:06:e0:5a:c6: 7c:87:72:1c:b9:1e:ef:f1:af:ce:d7:3d:9f:b4:3e: e5:a6:55:e4:bf:53:90:c6:25:b9:ed:7c:57:d8:9f: b0:5c:61:40:75:cd:f9:51:6b:c0:e8:e3:19:35:17: b9:e4:9c:48:7f:4b:9a:6c:50:9a:09:cf:a5:99:88: 57:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:7F:47:4D:7A:D0:0E:12:77:0A:49:CD:EF:AA:55:D9:B7:E9:19:E5 X509v3 Authority Key Identifier: keyid:45:38:75:3A:D0:1F:B9:1D:7B:02:8C:C5:3F:5A:EC:24:AD:6C:D0:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/0/4538753AD01FB91D7B028CC53F5AEC24AD6CD082.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4538753AD01FB91D7B028CC53F5AEC24AD6CD082.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/0/4538753AD01FB91D7B028CC53F5AEC24AD6CD082.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:15:6c:d1:7a:cf:e9:7c:c7:08:24:9f:ee:c7:d6:cd:46:f5: f0:50:0c:50:60:aa:a8:da:0b:bc:7b:8b:8f:dd:4a:71:d1:3f: aa:26:80:d0:a9:82:a8:3a:09:2b:d0:11:aa:ed:38:ae:b4:17: 0f:13:ed:f8:98:bf:b3:59:ab:ed:19:48:0f:e4:bc:52:44:10: 78:af:16:80:54:59:92:62:d2:f1:14:2d:f2:b8:f2:6e:d0:b8: e5:ba:a3:bd:5a:c2:00:6b:bc:e4:09:de:ff:89:a5:d5:cd:4c: 75:72:b7:ed:e5:2f:13:3c:96:ae:2c:5a:69:a5:6a:07:ee:c1: 80:7c:05:6a:dd:16:af:a8:d7:61:a4:7e:65:a3:f8:cf:f3:b7: a6:4d:2f:b9:03:30:cc:e7:b4:8f:14:6e:7a:9c:a0:f2:68:82: 7d:ce:b3:07:39:62:6d:2a:c3:e3:fd:37:85:21:dc:ed:ad:e3: 0e:34:5c:5c:73:14:e8:dd:50:4d:c8:a8:f6:f7:8f:0e:0f:de: 5b:57:da:0e:d5:b9:a1:46:f8:03:d1:e0:e5:7f:d5:6c:f5:5e: e1:1e:ba:37:6a:4f:06:3c:1d:4e:f7:f7:b4:b4:01:41:94:e3: 85:ab:03:5f:3c:1f:74:97:91:c7:1b:c3:ec:15:cb:49:f8:f4: 08:f6:02:a6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC+JfcrUlJfADTbiANimigk+yYiowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUzODc1M0FEMDFGQjkxRDdCMDI4Q0M1M0Y1QUVDMjRB RDZDRDA4MjAeFw0yNTA3MjExNDU3MTZaFw0yNTA3MjQxNjAzMTZaMDMxMTAvBgNV BAMTKEQwN0Y0NzREN0FEMDBFMTI3NzBBNDlDREVGQUE1NUQ5QjdFOTE5RTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDasw+009ojPvzjGp3vpK6KtFzL rrQt8gXEek5D3v8MosHgojqLevsjeuKOD0Kj5SdBOsNqjd4H5eDJMlhL1sSS200T TS1klip7lOcmDQHf61n/Euo7DkrXsHrYi48CM3b71VdE/JbuHV+GABalTTmzrDVK ZarMkT8tOgtzzi5YGRcvk1NX+oSkcX3p5KHcs5HS8a3xSPmKEQAo7CQzd8glo1NI X9qCDuhdmlSQglRNV/OYGpBE84ntczuJJBArBuBaxnyHchy5Hu/xr87XPZ+0PuWm VeS/U5DGJbntfFfYn7BcYUB1zflRa8Do4xk1F7nknEh/S5psUJoJz6WZiFf/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0H9HTXrQDhJ3CknN76pV2bfpGeUwHwYDVR0j BBgwFoAURTh1OtAfuR17AozFP1rsJK1s0IIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YjczM2RjZi05ZjVlLTQ3NzUtOWNlNy05ZGQ1MjViNDRiODYvMC80NTM4NzUzQUQw MUZCOTFEN0IwMjhDQzUzRjVBRUMyNEFENkNEMDgyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNDUzODc1M0FEMDFGQjkxRDdCMDI4Q0M1M0Y1QUVDMjRBRDZD RDA4Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWI3MzNkY2YtOWY1ZS00Nzc1LTlj ZTctOWRkNTI1YjQ0Yjg2LzAvNDUzODc1M0FEMDFGQjkxRDdCMDI4Q0M1M0Y1QUVD MjRBRDZDRDA4Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJIVbNF6z+l8xwgkn+7H1s1G9fBQDFBgqqja C7x7i4/dSnHRP6omgNCpgqg6CSvQEartOK60Fw8T7fiYv7NZq+0ZSA/kvFJEEHiv FoBUWZJi0vEULfK48m7QuOW6o71awgBrvOQJ3v+JpdXNTHVyt+3lLxM8lq4sWmml agfuwYB8BWrdFq+o12GkfmWj+M/zt6ZNL7kDMMzntI8UbnqcoPJogn3Oswc5Ym0q w+P9N4Uh3O2t4w40XFxzFOjdUE3IqPb3jw4P3ltX2g7VuaFG+APR4OV/1Wz1XuEe ujdqTwY8HU7397S0AUGU44WrA188H3SXkccbw+wVy0n49Aj2AqY= -----END CERTIFICATE-----Generated at Mon Jul 21 18:06:42 2025 by rpki-client