$ rpki-client -vvf repo-rpki.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/4CDDA0597DCBCA2C92A176D00847EB50F6122354.mft File: 4CDDA0597DCBCA2C92A176D00847EB50F6122354.mft (raw, json) Hash identifier: itk30OnT6f86M2iLB+MMWbTz1zvq8Dy406uKf/g2omw= Subject key identifier: AE:AE:CA:01:F1:4F:9A:6B:EE:A0:B5:D6:84:E9:48:CF:BC:BA:5F:84 Authority key identifier: 4C:DD:A0:59:7D:CB:CA:2C:92:A1:76:D0:08:47:EB:50:F6:12:23:54 Certificate issuer: /CN=4CDDA0597DCBCA2C92A176D00847EB50F6122354 Certificate serial: 548C16AF6FA99D36AD8003251402E83590482218 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4CDDA0597DCBCA2C92A176D00847EB50F6122354.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/4CDDA0597DCBCA2C92A176D00847EB50F6122354.mft Manifest number: D0 Signing time: Sat 06 Sep 2025 02:21:53 +0000 Manifest this update: Sat 06 Sep 2025 02:16:53 +0000 Manifest next update: Tue 09 Sep 2025 12:21:53 +0000 Files and hashes: 1: 3130332e3234342e3130342e302f32342d3234203d3e20313531353534.roa (hash: yG4+2M7fws6C52HoixX4PcNGnAAet0z0xRyi0LE26aU=) 2: 3130332e3234342e3130352e302f32342d3234203d3e20313531353534.roa (hash: A1hnHJuSS/CjegeZCbVDBe+9fc3PzAjrhUV0+3BfwCE=) 3: 4CDDA0597DCBCA2C92A176D00847EB50F6122354.crl (hash: opb8Txiyfm4+tz7ZomtfDpZEqWI0WSrtn6iac2/onLY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/4CDDA0597DCBCA2C92A176D00847EB50F6122354.crl rsync://repo-rpki.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/4CDDA0597DCBCA2C92A176D00847EB50F6122354.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4CDDA0597DCBCA2C92A176D00847EB50F6122354.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 12:21:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:8c:16:af:6f:a9:9d:36:ad:80:03:25:14:02:e8:35:90:48:22:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4CDDA0597DCBCA2C92A176D00847EB50F6122354 Validity Not Before: Sep 6 02:16:53 2025 GMT Not After : Sep 9 12:21:53 2025 GMT Subject: CN=AEAECA01F14F9A6BEEA0B5D684E948CFBCBA5F84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:79:59:a5:02:97:6c:b6:27:e1:a9:d8:1c:d2: 3f:11:5e:4a:a9:20:cb:c1:36:50:d8:9e:94:0a:a2: 82:bc:4e:08:3b:4e:12:d9:cf:aa:25:3c:c9:20:07: 5c:a6:8f:8c:ef:dd:3a:ae:e8:f7:7f:91:3c:9b:65: b7:f3:b2:30:0b:f9:16:49:cb:72:4d:e4:e0:3a:0e: 44:f1:78:a7:b3:69:32:6b:74:d2:e3:58:ed:4d:dc: f1:3d:fb:bf:5f:84:ee:c3:cc:7e:fe:6e:40:b9:b7: 7d:a0:53:ad:69:e3:9b:d2:10:b7:10:4c:0f:ed:bc: 95:16:10:9a:cc:d6:a1:61:b2:6d:36:78:80:5a:28: 38:1d:46:00:21:39:c3:ee:db:5c:3d:42:71:0d:8a: 7f:ad:43:f0:9d:25:fd:b0:ac:f5:36:2c:4f:61:97: 06:02:06:8e:cf:78:2e:55:e7:34:57:e9:9c:69:8a: ff:e9:24:0f:57:ac:ee:88:c9:af:83:de:ef:52:63: d7:87:fb:8a:cf:76:fb:f3:a0:e3:b4:0c:81:43:42: 6e:0b:0a:81:d6:cf:d4:1b:22:6f:01:86:58:bd:33: 39:ba:18:a5:68:0b:dc:d9:fb:b4:c8:bd:aa:05:2d: ba:24:09:e5:8e:bf:d7:61:3e:5d:b9:cf:3a:05:bf: 2e:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:AE:CA:01:F1:4F:9A:6B:EE:A0:B5:D6:84:E9:48:CF:BC:BA:5F:84 X509v3 Authority Key Identifier: keyid:4C:DD:A0:59:7D:CB:CA:2C:92:A1:76:D0:08:47:EB:50:F6:12:23:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/4CDDA0597DCBCA2C92A176D00847EB50F6122354.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4CDDA0597DCBCA2C92A176D00847EB50F6122354.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/4CDDA0597DCBCA2C92A176D00847EB50F6122354.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:41:12:f6:ff:fa:04:97:79:36:4c:6f:5f:7d:f6:14:62:13: 19:e3:16:49:9c:be:a0:16:2f:8c:1e:89:c4:36:a8:7a:2c:a7: 79:20:39:90:b3:c4:bc:5e:1e:5a:eb:8e:d1:1d:c2:ce:e6:03: 99:87:89:42:93:52:ad:7f:75:98:ec:39:cf:77:92:06:1a:82: be:c5:da:d5:2f:a8:81:d7:b1:5e:5f:78:0f:19:21:07:93:96: 70:25:ed:a4:68:ae:ce:e5:21:b9:af:1d:b6:07:b1:7a:7a:20: ca:3b:4a:47:08:23:45:1d:e0:da:29:a9:04:3f:db:f6:44:bf: 1e:72:54:2e:19:ea:da:c5:8d:04:19:fc:64:3a:70:9d:50:99: 5b:7a:38:12:bd:77:65:55:3c:7d:8d:8c:3f:e4:f4:6e:d8:f1: d2:f3:a1:1e:ad:6e:55:cc:63:ca:74:94:ec:bf:68:e7:c1:44: f6:39:ce:ac:74:99:e1:78:ed:c4:58:40:5d:dc:8d:4d:db:8e: 63:3f:9a:eb:17:a1:13:d6:32:37:bb:fb:b4:5e:d4:8f:b9:71: 9f:9d:ef:f6:71:d7:5e:46:9c:3a:7a:35:74:cb:85:10:7f:1e: c1:e8:4c:c6:e9:70:52:ed:a1:c4:14:ed:8d:c5:6e:a7:f0:39: d7:cd:64:b2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVIwWr2+pnTatgAMlFALoNZBIIhgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNENEREEwNTk3RENCQ0EyQzkyQTE3NkQwMDg0N0VCNTBG NjEyMjM1NDAeFw0yNTA5MDYwMjE2NTNaFw0yNTA5MDkxMjIxNTNaMDMxMTAvBgNV BAMTKEFFQUVDQTAxRjE0RjlBNkJFRUEwQjVENjg0RTk0OENGQkNCQTVGODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCueVmlApdstifhqdgc0j8RXkqp IMvBNlDYnpQKooK8Tgg7ThLZz6olPMkgB1ymj4zv3Tqu6Pd/kTybZbfzsjAL+RZJ y3JN5OA6DkTxeKezaTJrdNLjWO1N3PE9+79fhO7DzH7+bkC5t32gU61p45vSELcQ TA/tvJUWEJrM1qFhsm02eIBaKDgdRgAhOcPu21w9QnENin+tQ/CdJf2wrPU2LE9h lwYCBo7PeC5V5zRX6Zxpiv/pJA9XrO6Iya+D3u9SY9eH+4rPdvvzoOO0DIFDQm4L CoHWz9QbIm8Bhli9Mzm6GKVoC9zZ+7TIvaoFLbokCeWOv9dhPl25zzoFvy43AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrq7KAfFPmmvuoLXWhOlIz7y6X4QwHwYDVR0j BBgwFoAUTN2gWX3LyiySoXbQCEfrUPYSI1QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZDJmYTUxZS0zZmQ0LTQ1MjAtYjM3NS0wOWVlZjVlMGU1MTAvMC80Q0REQTA1OTdE Q0JDQTJDOTJBMTc2RDAwODQ3RUI1MEY2MTIyMzU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNENEREEwNTk3RENCQ0EyQzkyQTE3NkQwMDg0N0VCNTBGNjEy MjM1NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWQyZmE1MWUtM2ZkNC00NTIwLWIz NzUtMDllZWY1ZTBlNTEwLzAvNENEREEwNTk3RENCQ0EyQzkyQTE3NkQwMDg0N0VC NTBGNjEyMjM1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEFBEvb/+gSXeTZMb1999hRiExnjFkmcvqAW L4weicQ2qHosp3kgOZCzxLxeHlrrjtEdws7mA5mHiUKTUq1/dZjsOc93kgYagr7F 2tUvqIHXsV5feA8ZIQeTlnAl7aRors7lIbmvHbYHsXp6IMo7SkcII0Ud4NopqQQ/ 2/ZEvx5yVC4Z6trFjQQZ/GQ6cJ1QmVt6OBK9d2VVPH2NjD/k9G7Y8dLzoR6tblXM Y8p0lOy/aOfBRPY5zqx0meF47cRYQF3cjU3bjmM/musXoRPWMje7+7Re1I+5cZ+d 7/Zx115GnDp6NXTLhRB/HsHoTMbpcFLtocQU7Y3FbqfwOdfNZLI= -----END CERTIFICATE-----Generated at Sun Sep 7 15:37:43 2025 by rpki-client