$ rpki-client -vvf repo-rpki.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0/4617272EE875B55CD5F2A88330A95F6410A3EB1B.mft File: 4617272EE875B55CD5F2A88330A95F6410A3EB1B.mft (raw, json) Hash identifier: zd+KY/G7IEwYtZyxzDkhuDfT8zkk0oIC0tAc8KJyivE= Subject key identifier: 0E:03:5E:30:91:99:98:57:E1:C2:23:37:E4:A4:21:3A:4F:5C:70:64 Authority key identifier: 46:17:27:2E:E8:75:B5:5C:D5:F2:A8:83:30:A9:5F:64:10:A3:EB:1B Certificate issuer: /CN=4617272EE875B55CD5F2A88330A95F6410A3EB1B Certificate serial: 144801C2811D2CCC0462DB06DAF1D44B77F500A2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4617272EE875B55CD5F2A88330A95F6410A3EB1B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0/4617272EE875B55CD5F2A88330A95F6410A3EB1B.mft Manifest number: DE Signing time: Sun 20 Jul 2025 20:31:13 +0000 Manifest this update: Sun 20 Jul 2025 20:26:13 +0000 Manifest next update: Thu 24 Jul 2025 02:35:13 +0000 Files and hashes: 1: 4617272EE875B55CD5F2A88330A95F6410A3EB1B.crl (hash: LfWCqhU0b0OZf02unkXJi+VrxD5Q3xL/qbVuJYIcjpk=) 2: 3135372e31352e34342e302f32332d3233203d3e20313532333931.roa (hash: CWrSRGIb9DWeCqXVEcCNk243mh86Y3a1VFur2jkpr3Y=) 3: 3135372e31352e34342e302f32342d3234203d3e20313532333931.roa (hash: GmvMNkypXN/dIsdT8yqrh6k/wsMAgACMxsXszxhLEFE=) 4: 3135372e31352e34352e302f32342d3234203d3e20313532333931.roa (hash: 2CY8OOUSlhDxwOprH4RWK6WUcOME935meBmsXq8UBEQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0/4617272EE875B55CD5F2A88330A95F6410A3EB1B.crl rsync://repo-rpki.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0/4617272EE875B55CD5F2A88330A95F6410A3EB1B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4617272EE875B55CD5F2A88330A95F6410A3EB1B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 02:35:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:48:01:c2:81:1d:2c:cc:04:62:db:06:da:f1:d4:4b:77:f5:00:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4617272EE875B55CD5F2A88330A95F6410A3EB1B Validity Not Before: Jul 20 20:26:13 2025 GMT Not After : Jul 24 02:35:13 2025 GMT Subject: CN=0E035E3091999857E1C22337E4A4213A4F5C7064 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:08:aa:a6:b2:0c:45:40:b3:9a:6a:94:01:d4: f5:50:8c:6a:49:52:4c:2f:b0:16:79:b4:fa:e5:fb: fb:92:57:b6:75:8e:45:b1:74:18:0f:35:b3:d0:26: a7:1a:d3:b3:ea:a8:7d:5f:05:53:b7:34:19:75:63: b1:24:b0:84:08:6f:de:ad:14:59:1f:d9:76:de:f9: b9:b2:49:b6:36:08:91:df:ea:35:22:2f:f9:6f:f2: fe:a2:07:ce:a6:6f:9b:e1:87:0e:1c:ca:99:34:dc: ab:60:9f:12:30:d4:e7:42:ec:40:0a:00:77:1e:d4: fc:6b:2c:b9:58:42:a2:e7:8d:de:39:62:ca:cc:60: 1f:5d:a8:ca:e2:bf:ad:ed:62:45:26:d6:17:57:c2: 6a:87:c9:6e:21:cc:4a:08:b5:cf:45:97:54:93:bd: 64:5f:8b:a5:fb:c4:1b:40:60:7c:c3:ba:fa:d6:00: 91:24:19:a4:67:df:f9:9e:f9:0a:b1:cb:56:88:05: 4a:85:88:4a:e1:0e:89:00:1b:22:ab:c5:b2:e3:c4: 71:a7:da:f5:53:0b:55:99:75:78:12:82:ed:9f:65: 67:ea:23:39:6d:50:e6:a8:92:8c:d1:43:93:81:37: ba:39:45:a8:b1:01:6b:b8:a6:d8:5d:2c:75:03:2b: 20:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:03:5E:30:91:99:98:57:E1:C2:23:37:E4:A4:21:3A:4F:5C:70:64 X509v3 Authority Key Identifier: keyid:46:17:27:2E:E8:75:B5:5C:D5:F2:A8:83:30:A9:5F:64:10:A3:EB:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0/4617272EE875B55CD5F2A88330A95F6410A3EB1B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4617272EE875B55CD5F2A88330A95F6410A3EB1B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0/4617272EE875B55CD5F2A88330A95F6410A3EB1B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:88:f8:77:0e:74:e6:b0:d7:15:6e:ac:7f:95:78:13:2d:ca: 7e:6b:99:17:28:df:99:f9:ff:b8:a7:04:d1:97:a6:58:f0:f8: 8e:ca:8e:50:b3:27:4b:30:b2:fe:e6:00:05:9f:89:9f:5d:8f: 6b:aa:4e:97:c3:da:6f:e1:da:6c:f1:51:2e:5a:67:5a:ca:25: 75:07:ee:32:a5:86:6e:7a:4f:9b:cd:c9:81:58:7f:a6:0c:3c: a5:49:03:a2:c3:57:a0:c7:50:4e:e6:42:bc:b2:67:ae:0a:bf: cb:e1:f5:cc:17:1b:d4:b2:2c:50:4e:23:b7:c4:a1:60:8c:be: 93:8d:b4:a0:8b:0b:ee:02:ab:c2:dd:97:cb:4b:34:f9:76:cf: 5c:87:22:74:35:de:f1:84:6a:b5:77:62:3d:9d:15:2b:ae:67: 4a:d0:4e:c2:68:68:fd:b6:b1:a3:82:8e:2e:06:71:36:9c:f6: 3e:6b:75:a4:e2:17:16:00:80:b7:b1:33:ef:46:59:e8:cd:15: e8:66:43:d4:fe:20:d2:fa:df:04:91:3d:cf:30:9a:ef:b4:6e: 20:31:b3:57:da:ee:8d:7c:79:6e:e0:43:b0:d9:c7:91:17:45: 37:f8:1f:cb:21:63:c2:e1:99:20:89:22:d1:02:e9:36:d4:1b: ff:79:04:eb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFEgBwoEdLMwEYtsG2vHUS3f1AKIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDYxNzI3MkVFODc1QjU1Q0Q1RjJBODgzMzBBOTVGNjQx MEEzRUIxQjAeFw0yNTA3MjAyMDI2MTNaFw0yNTA3MjQwMjM1MTNaMDMxMTAvBgNV BAMTKDBFMDM1RTMwOTE5OTk4NTdFMUMyMjMzN0U0QTQyMTNBNEY1QzcwNjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8CKqmsgxFQLOaapQB1PVQjGpJ UkwvsBZ5tPrl+/uSV7Z1jkWxdBgPNbPQJqca07PqqH1fBVO3NBl1Y7EksIQIb96t FFkf2Xbe+bmySbY2CJHf6jUiL/lv8v6iB86mb5vhhw4cypk03KtgnxIw1OdC7EAK AHce1PxrLLlYQqLnjd45YsrMYB9dqMriv63tYkUm1hdXwmqHyW4hzEoItc9Fl1ST vWRfi6X7xBtAYHzDuvrWAJEkGaRn3/me+Qqxy1aIBUqFiErhDokAGyKrxbLjxHGn 2vVTC1WZdXgSgu2fZWfqIzltUOaokozRQ5OBN7o5RaixAWu4pthdLHUDKyALAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDgNeMJGZmFfhwiM35KQhOk9ccGQwHwYDVR0j BBgwFoAURhcnLuh1tVzV8qiDMKlfZBCj6xswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZmRhZjA2YS1mNjI0LTQyY2YtYmIxOS1iNmJiZjkzMWFhYzgvMC80NjE3MjcyRUU4 NzVCNTVDRDVGMkE4ODMzMEE5NUY2NDEwQTNFQjFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNDYxNzI3MkVFODc1QjU1Q0Q1RjJBODgzMzBBOTVGNjQxMEEz RUIxQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWZkYWYwNmEtZjYyNC00MmNmLWJi MTktYjZiYmY5MzFhYWM4LzAvNDYxNzI3MkVFODc1QjU1Q0Q1RjJBODgzMzBBOTVG NjQxMEEzRUIxQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL2I+HcOdOaw1xVurH+VeBMtyn5rmRco35n5 /7inBNGXpljw+I7KjlCzJ0swsv7mAAWfiZ9dj2uqTpfD2m/h2mzxUS5aZ1rKJXUH 7jKlhm56T5vNyYFYf6YMPKVJA6LDV6DHUE7mQryyZ64Kv8vh9cwXG9SyLFBOI7fE oWCMvpONtKCLC+4Cq8Ldl8tLNPl2z1yHInQ13vGEarV3Yj2dFSuuZ0rQTsJoaP22 saOCji4GcTac9j5rdaTiFxYAgLexM+9GWejNFehmQ9T+INL63wSRPc8wmu+0biAx s1fa7o18eW7gQ7DZx5EXRTf4H8shY8LhmSCJItEC6TbUG/95BOs= -----END CERTIFICATE-----Generated at Mon Jul 21 23:53:22 2025 by rpki-client