$ rpki-client -vvf repo-rpki.idnic.net/repo/9eab0a01-8ee4-4825-840d-112daef0aca8/0/4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.mft File: 4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.mft (raw, json) Hash identifier: tD1UiL/eXVm3JNRcON579iWYuTSeMEmuQOSX8qOtzIg= Subject key identifier: EA:97:CB:BE:CB:33:C8:67:04:93:60:61:1C:5A:F1:4D:78:B1:78:72 Authority key identifier: 4E:2A:A9:ED:35:DB:0F:27:6A:5F:F0:D4:02:0D:BE:A1:3E:04:C6:23 Certificate issuer: /CN=4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623 Certificate serial: 613292DFE0C25181578699CAC72BA4E7975B6461 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9eab0a01-8ee4-4825-840d-112daef0aca8/0/4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.mft Manifest number: 01A2 Signing time: Wed 03 Sep 2025 00:51:30 +0000 Manifest this update: Wed 03 Sep 2025 00:46:30 +0000 Manifest next update: Sat 06 Sep 2025 11:13:30 +0000 Files and hashes: 1: 4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.crl (hash: TrWjZnfV6VoQrUogrgQvTzOP4vrM2D/lBSmzKe8p5lw=) 2: 323030313a6466303a6134303a3a2f34382d3438203d3e20313439333532.roa (hash: lidUKpIUI42q8veE3vysCaBMTq0HxAiYVl6H5XafxIU=) 3: 3130332e3137342e31342e302f32332d3234203d3e20313439333532.roa (hash: cJjmG0CdhjaR+QAVA5ZLIDFXiWwjI5yTIKuxLgCeRRg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9eab0a01-8ee4-4825-840d-112daef0aca8/0/4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.crl rsync://repo-rpki.idnic.net/repo/9eab0a01-8ee4-4825-840d-112daef0aca8/0/4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 11:13:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:32:92:df:e0:c2:51:81:57:86:99:ca:c7:2b:a4:e7:97:5b:64:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623 Validity Not Before: Sep 3 00:46:30 2025 GMT Not After : Sep 6 11:13:30 2025 GMT Subject: CN=EA97CBBECB33C867049360611C5AF14D78B17872 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:50:d4:d0:d9:d2:c9:79:3f:0a:8d:d8:f7:63: d1:f9:6f:c3:ca:77:e9:7a:d4:5c:52:ab:7d:e3:ba: 2a:28:c3:29:f1:3f:44:d3:fe:b0:42:20:c4:4b:b3: e3:2a:d3:a6:a0:c6:3e:1b:00:a8:28:d7:ab:0c:d4: 45:4a:dd:92:39:61:1d:b6:95:fd:46:08:5f:e0:04: e4:ab:4a:8c:3a:18:a7:0d:f9:b1:b1:f7:cf:8e:13: 83:4f:6d:91:dc:59:5c:08:73:32:53:ac:b5:68:e7: 1a:5e:03:97:ba:e7:eb:3f:cd:ff:1d:ac:4e:58:c6: 43:94:a9:5d:86:d2:0b:0e:09:eb:40:a8:14:ac:14: 5a:38:aa:c8:39:13:e0:50:e5:0c:69:72:c0:f1:7c: 40:4f:16:97:8b:89:17:fb:3b:69:8d:b3:6b:95:78: f0:46:67:1b:f7:85:41:e2:cb:13:2b:19:1e:67:fd: c8:d0:da:e3:8e:f7:35:5e:7b:54:10:42:81:70:ce: 70:86:18:45:24:a4:d5:9c:3d:4f:d5:a0:6f:58:99: a6:c8:39:97:34:40:58:29:8c:0d:a0:08:aa:ac:fa: 46:a5:3e:fe:34:51:60:1c:67:95:b8:46:7e:4d:2a: 10:ad:ff:ca:f8:58:88:a9:48:15:0a:96:9f:ef:2f: a3:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:97:CB:BE:CB:33:C8:67:04:93:60:61:1C:5A:F1:4D:78:B1:78:72 X509v3 Authority Key Identifier: keyid:4E:2A:A9:ED:35:DB:0F:27:6A:5F:F0:D4:02:0D:BE:A1:3E:04:C6:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9eab0a01-8ee4-4825-840d-112daef0aca8/0/4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9eab0a01-8ee4-4825-840d-112daef0aca8/0/4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:0e:a2:50:0b:53:c6:67:f2:2a:1c:ca:50:6f:38:21:09:3c: 85:09:dc:b6:ca:8b:95:9a:c0:12:0b:1e:ab:ca:7e:7d:da:cf: 81:84:21:1e:4f:43:27:1f:d5:4a:01:03:e8:0d:c8:10:10:3e: d8:a4:67:a6:7e:20:f1:d1:1b:9e:82:e7:3a:f5:50:b8:6f:2d: 21:8f:3a:2a:22:25:2e:15:9f:c4:46:45:15:37:fb:36:94:19: cc:48:b6:2d:1a:de:f4:13:3f:01:35:b8:8e:7e:0e:86:04:04: ec:32:df:e0:d4:fd:bc:0e:53:fa:a4:71:c4:a5:0e:a0:c8:eb: ab:7d:50:df:21:9f:8d:7c:1f:f4:5a:a6:f8:c8:c4:d4:05:67: 01:90:fc:40:ba:3c:a1:63:60:91:94:99:cd:04:3a:f8:c3:65: 20:33:42:59:02:42:e2:8a:12:bf:8e:b8:41:6c:2f:e6:46:65: c4:7a:08:c6:16:eb:ac:f8:f3:3f:4c:f2:55:19:57:c6:34:7f: f9:2e:28:48:49:c1:ca:6c:fd:fb:5a:65:3e:55:57:46:5c:f9: f1:89:8b:3d:b7:22:c2:f3:23:e4:58:1d:5f:7f:df:3d:72:dd: ff:a0:f1:56:66:b5:63:0d:02:be:ca:0d:31:94:ff:4b:32:17: 59:a5:ce:c4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYTKS3+DCUYFXhpnKxyuk55dbZGEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEUyQUE5RUQzNURCMEYyNzZBNUZGMEQ0MDIwREJFQTEz RTA0QzYyMzAeFw0yNTA5MDMwMDQ2MzBaFw0yNTA5MDYxMTEzMzBaMDMxMTAvBgNV BAMTKEVBOTdDQkJFQ0IzM0M4NjcwNDkzNjA2MTFDNUFGMTRENzhCMTc4NzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBUNTQ2dLJeT8Kjdj3Y9H5b8PK d+l61FxSq33juioowynxP0TT/rBCIMRLs+Mq06agxj4bAKgo16sM1EVK3ZI5YR22 lf1GCF/gBOSrSow6GKcN+bGx98+OE4NPbZHcWVwIczJTrLVo5xpeA5e65+s/zf8d rE5YxkOUqV2G0gsOCetAqBSsFFo4qsg5E+BQ5QxpcsDxfEBPFpeLiRf7O2mNs2uV ePBGZxv3hUHiyxMrGR5n/cjQ2uOO9zVee1QQQoFwznCGGEUkpNWcPU/VoG9YmabI OZc0QFgpjA2gCKqs+kalPv40UWAcZ5W4Rn5NKhCt/8r4WIipSBUKlp/vL6OHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6pfLvsszyGcEk2BhHFrxTXixeHIwHwYDVR0j BBgwFoAUTiqp7TXbDydqX/DUAg2+oT4ExiMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZWFiMGEwMS04ZWU0LTQ4MjUtODQwZC0xMTJkYWVmMGFjYTgvMC80RTJBQTlFRDM1 REIwRjI3NkE1RkYwRDQwMjBEQkVBMTNFMDRDNjIzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEUyQUE5RUQzNURCMEYyNzZBNUZGMEQ0MDIwREJFQTEzRTA0 QzYyMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWVhYjBhMDEtOGVlNC00ODI1LTg0 MGQtMTEyZGFlZjBhY2E4LzAvNEUyQUE5RUQzNURCMEYyNzZBNUZGMEQ0MDIwREJF QTEzRTA0QzYyMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJEOolALU8Zn8iocylBvOCEJPIUJ3LbKi5Wa wBILHqvKfn3az4GEIR5PQycf1UoBA+gNyBAQPtikZ6Z+IPHRG56C5zr1ULhvLSGP OioiJS4Vn8RGRRU3+zaUGcxIti0a3vQTPwE1uI5+DoYEBOwy3+DU/bwOU/qkccSl DqDI66t9UN8hn418H/RapvjIxNQFZwGQ/EC6PKFjYJGUmc0EOvjDZSAzQlkCQuKK Er+OuEFsL+ZGZcR6CMYW66z48z9M8lUZV8Y0f/kuKEhJwcps/ftaZT5VV0Zc+fGJ iz23IsLzI+RYHV9/3z1y3f+g8VZmtWMNAr7KDTGU/0syF1mlzsQ= -----END CERTIFICATE-----Generated at Fri Sep 5 10:14:55 2025 by rpki-client