$ rpki-client -vvf repo-rpki.idnic.net/repo/9eeb45de-5183-4a3a-b06d-8bb8d4506b06/0/849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.mft File: 849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.mft (raw, json) Hash identifier: mW2vZ+g0jR2xobutqxFlYfvg8W0F4yGwZepn2nYwHW8= Subject key identifier: CA:6F:72:42:DC:46:B3:B3:4F:F3:1E:21:BC:82:AB:12:7F:A8:2C:D8 Authority key identifier: 84:9E:9E:24:0A:6B:F4:42:3B:1E:7D:22:05:D4:1E:C8:0D:6E:AB:4F Certificate issuer: /CN=849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F Certificate serial: 4E6D891E5ED9CD13DFCE00FE1562AF67939C8FD9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9eeb45de-5183-4a3a-b06d-8bb8d4506b06/0/849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.mft Manifest number: 01CA Signing time: Wed 03 Sep 2025 19:22:00 +0000 Manifest this update: Wed 03 Sep 2025 19:17:00 +0000 Manifest next update: Sun 07 Sep 2025 03:32:00 +0000 Files and hashes: 1: 849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.crl (hash: W5lUs0QjO2Qh5TMFjFfJ6Nxox6A67LH+5ryvdkp5qO0=) 2: 3130332e362e3136362e302f32342d3234203d3e20313439393335.roa (hash: qsAO4cOsO4ax3oPbTen8Sd837s3C+50yjyG9ueyoUI8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9eeb45de-5183-4a3a-b06d-8bb8d4506b06/0/849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.crl rsync://repo-rpki.idnic.net/repo/9eeb45de-5183-4a3a-b06d-8bb8d4506b06/0/849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 03:32:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:6d:89:1e:5e:d9:cd:13:df:ce:00:fe:15:62:af:67:93:9c:8f:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F Validity Not Before: Sep 3 19:17:00 2025 GMT Not After : Sep 7 03:32:00 2025 GMT Subject: CN=CA6F7242DC46B3B34FF31E21BC82AB127FA82CD8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:96:92:65:f7:1f:1a:03:e0:36:e6:c0:78:ea: f4:f3:44:1d:d3:e2:cb:83:52:24:4c:2f:33:07:52: 20:c1:3b:8c:a1:42:2f:29:4c:3d:2b:86:72:b6:e9: 5a:3f:73:4a:ab:bb:ad:b6:e0:ac:6b:f4:b3:ad:5d: b8:a1:08:a8:8c:5e:d3:dc:8d:c5:6a:29:32:f4:ed: 35:70:05:b1:36:96:b3:68:95:26:4a:8c:2e:36:a6: 6e:45:85:ad:4e:87:0b:42:f1:4a:de:21:f9:98:17: 34:b0:88:00:ab:2d:f8:5e:a3:2a:9c:43:6a:3c:31: a6:1e:3b:e8:f0:50:c3:d2:e4:90:4a:67:4e:84:9e: d6:f4:8d:06:a0:2b:0f:98:ec:75:ea:06:ee:17:73: 4f:36:2c:f0:8c:6a:4d:0b:13:61:e1:f5:a4:2c:4d: 16:58:09:dd:c6:a3:5f:26:f5:3b:42:57:f1:5f:00: 24:04:fa:3b:89:f6:0b:ea:cd:18:97:19:d6:c3:1c: ee:09:a7:66:bd:79:e2:dc:99:5d:1c:f9:2c:f9:be: 0f:35:91:a8:05:36:77:c7:46:0e:66:29:9c:bb:a9: 76:25:ad:02:e5:48:89:ec:f3:38:dc:53:d4:52:95: c7:fc:07:98:44:16:ea:00:17:05:02:4a:1a:d3:ab: 24:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:6F:72:42:DC:46:B3:B3:4F:F3:1E:21:BC:82:AB:12:7F:A8:2C:D8 X509v3 Authority Key Identifier: keyid:84:9E:9E:24:0A:6B:F4:42:3B:1E:7D:22:05:D4:1E:C8:0D:6E:AB:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9eeb45de-5183-4a3a-b06d-8bb8d4506b06/0/849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9eeb45de-5183-4a3a-b06d-8bb8d4506b06/0/849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:ac:6f:30:75:2b:91:b5:f8:76:78:db:ad:11:7f:c3:bd:c0: 3d:68:b9:d8:29:15:71:0f:17:6e:48:f7:ad:d8:70:83:a2:bf: 5c:5b:ae:d2:6f:bf:a6:b6:fd:0f:94:5b:7b:c3:79:90:60:46: 39:1d:fe:45:32:96:52:33:fb:c9:d4:49:2f:7c:f1:60:51:48: 7a:5e:49:bb:3e:6e:02:0d:f2:26:3c:0b:f9:27:81:03:4d:06: 7d:b1:2a:7c:af:bb:91:ae:df:1a:16:b9:a8:a5:32:5e:15:45: 4e:fa:44:55:cd:c1:0f:5a:85:47:eb:bb:60:e6:25:f5:11:ce: 74:99:23:5c:29:0f:25:da:de:db:7a:cf:34:5f:ac:41:f0:52: 21:a2:21:7d:87:0b:2f:2c:79:17:00:4b:1c:6f:88:bf:0c:66: bb:15:fc:be:ac:ae:dd:90:b3:d1:4d:05:25:67:78:d7:5c:a2: ec:b0:fc:98:68:e8:09:05:11:b3:f1:a4:f7:c0:1f:ec:72:79: 73:49:4f:7b:84:a7:af:ab:22:e4:99:39:6e:45:94:ec:0e:32: a8:5a:10:46:5b:12:f8:be:9f:d6:fd:11:b9:2a:9f:26:2e:4b: c6:56:10:c6:36:74:45:92:f1:49:41:81:0b:ff:3a:a7:24:65: c5:9c:01:61 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTm2JHl7ZzRPfzgD+FWKvZ5Ocj9kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQ5RTlFMjQwQTZCRjQ0MjNCMUU3RDIyMDVENDFFQzgw RDZFQUI0RjAeFw0yNTA5MDMxOTE3MDBaFw0yNTA5MDcwMzMyMDBaMDMxMTAvBgNV BAMTKENBNkY3MjQyREM0NkIzQjM0RkYzMUUyMUJDODJBQjEyN0ZBODJDRDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOlpJl9x8aA+A25sB46vTzRB3T 4suDUiRMLzMHUiDBO4yhQi8pTD0rhnK26Vo/c0qru6224Kxr9LOtXbihCKiMXtPc jcVqKTL07TVwBbE2lrNolSZKjC42pm5Fha1OhwtC8UreIfmYFzSwiACrLfheoyqc Q2o8MaYeO+jwUMPS5JBKZ06Entb0jQagKw+Y7HXqBu4Xc082LPCMak0LE2Hh9aQs TRZYCd3Go18m9TtCV/FfACQE+juJ9gvqzRiXGdbDHO4Jp2a9eeLcmV0c+Sz5vg81 kagFNnfHRg5mKZy7qXYlrQLlSIns8zjcU9RSlcf8B5hEFuoAFwUCShrTqyRfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUym9yQtxGs7NP8x4hvIKrEn+oLNgwHwYDVR0j BBgwFoAUhJ6eJApr9EI7Hn0iBdQeyA1uq08wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZWViNDVkZS01MTgzLTRhM2EtYjA2ZC04YmI4ZDQ1MDZiMDYvMC84NDlFOUUyNDBB NkJGNDQyM0IxRTdEMjIwNUQ0MUVDODBENkVBQjRGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODQ5RTlFMjQwQTZCRjQ0MjNCMUU3RDIyMDVENDFFQzgwRDZF QUI0Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWVlYjQ1ZGUtNTE4My00YTNhLWIw NmQtOGJiOGQ0NTA2YjA2LzAvODQ5RTlFMjQwQTZCRjQ0MjNCMUU3RDIyMDVENDFF QzgwRDZFQUI0Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAACsbzB1K5G1+HZ4260Rf8O9wD1oudgpFXEP F25I963YcIOiv1xbrtJvv6a2/Q+UW3vDeZBgRjkd/kUyllIz+8nUSS988WBRSHpe Sbs+bgIN8iY8C/kngQNNBn2xKnyvu5Gu3xoWuailMl4VRU76RFXNwQ9ahUfru2Dm JfURznSZI1wpDyXa3tt6zzRfrEHwUiGiIX2HCy8seRcASxxviL8MZrsV/L6srt2Q s9FNBSVneNdcouyw/Jho6AkFEbPxpPfAH+xyeXNJT3uEp6+rIuSZOW5FlOwOMqha EEZbEvi+n9b9EbkqnyYuS8ZWEMY2dEWS8UlBgQv/OqckZcWcAWE= -----END CERTIFICATE-----Generated at Fri Sep 5 10:34:24 2025 by rpki-client