$ rpki-client -vvf repo-rpki.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0/4617272EE875B55CD5F2A88330A95F6410A3EB1B.mft File: 4617272EE875B55CD5F2A88330A95F6410A3EB1B.mft (raw, json) Hash identifier: FP6FQgurhfiLXEJUvh2T7zwYxokIYmwjNZpYGjnZ0n8= Subject key identifier: AB:36:AE:47:13:A9:01:70:D4:6F:FE:EA:9E:8D:C0:7A:89:40:43:B7 Authority key identifier: 46:17:27:2E:E8:75:B5:5C:D5:F2:A8:83:30:A9:5F:64:10:A3:EB:1B Certificate issuer: /CN=4617272EE875B55CD5F2A88330A95F6410A3EB1B Certificate serial: 69BDE2501A2FA2389A4F7B4AE59189EEFA650348 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4617272EE875B55CD5F2A88330A95F6410A3EB1B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0/4617272EE875B55CD5F2A88330A95F6410A3EB1B.mft Manifest number: F4 Signing time: Sun 07 Sep 2025 19:31:11 +0000 Manifest this update: Sun 07 Sep 2025 19:26:11 +0000 Manifest next update: Thu 11 Sep 2025 04:52:11 +0000 Files and hashes: 1: 4617272EE875B55CD5F2A88330A95F6410A3EB1B.crl (hash: karlMGEaZRtT74Ph01nYIQ61di+pq9d7SOO36B8XQcM=) 2: 3135372e31352e34342e302f32342d3234203d3e20313532333931.roa (hash: GmvMNkypXN/dIsdT8yqrh6k/wsMAgACMxsXszxhLEFE=) 3: 3135372e31352e34342e302f32332d3233203d3e20313532333931.roa (hash: CWrSRGIb9DWeCqXVEcCNk243mh86Y3a1VFur2jkpr3Y=) 4: 3135372e31352e34352e302f32342d3234203d3e20313532333931.roa (hash: 2CY8OOUSlhDxwOprH4RWK6WUcOME935meBmsXq8UBEQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0/4617272EE875B55CD5F2A88330A95F6410A3EB1B.crl rsync://repo-rpki.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0/4617272EE875B55CD5F2A88330A95F6410A3EB1B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4617272EE875B55CD5F2A88330A95F6410A3EB1B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 04:52:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:bd:e2:50:1a:2f:a2:38:9a:4f:7b:4a:e5:91:89:ee:fa:65:03:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4617272EE875B55CD5F2A88330A95F6410A3EB1B Validity Not Before: Sep 7 19:26:11 2025 GMT Not After : Sep 11 04:52:11 2025 GMT Subject: CN=AB36AE4713A90170D46FFEEA9E8DC07A894043B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a4:4f:6e:6d:66:76:bb:5d:f3:77:a1:b1:97: 9e:78:87:c2:0a:99:9d:41:da:ac:52:36:77:53:ab: cc:cb:5e:c9:fe:8d:eb:5a:35:dd:17:6f:65:41:95: 98:47:a7:4f:d7:1c:f7:ba:12:3c:e4:fd:2f:42:17: 76:35:1b:25:48:b9:9b:68:2f:77:58:07:27:b2:01: 69:19:19:8b:af:0c:2b:80:f9:ba:2d:fd:54:b9:06: 0c:9f:b3:1c:a6:1b:e0:a3:de:59:ef:92:6b:1c:ae: 98:a4:fa:36:f0:a9:ef:46:cf:cd:8b:da:b9:12:34: 37:69:65:51:30:0e:76:7d:ca:46:bb:c2:d2:32:0b: af:25:44:47:97:60:a3:b3:aa:ea:3a:80:16:97:f8: e6:9f:53:21:7f:70:5c:a9:40:40:4e:ff:6a:5b:bc: 34:de:cb:58:48:23:04:6d:31:cc:1e:36:fc:4c:b8: 14:92:df:e7:ee:18:b2:c7:35:4d:13:48:fc:43:ab: 30:d7:e2:16:12:c7:c3:0c:6d:42:f9:12:40:6c:65: cc:d6:15:82:0c:5c:03:45:6a:11:e0:c5:60:16:af: 90:af:8d:e9:dd:12:8c:c9:82:f1:1b:d2:ef:a8:20: a9:9d:c2:4c:41:a3:94:59:78:8f:e0:ad:7f:06:86: f9:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:36:AE:47:13:A9:01:70:D4:6F:FE:EA:9E:8D:C0:7A:89:40:43:B7 X509v3 Authority Key Identifier: keyid:46:17:27:2E:E8:75:B5:5C:D5:F2:A8:83:30:A9:5F:64:10:A3:EB:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0/4617272EE875B55CD5F2A88330A95F6410A3EB1B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4617272EE875B55CD5F2A88330A95F6410A3EB1B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0/4617272EE875B55CD5F2A88330A95F6410A3EB1B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:e5:92:cd:16:e4:81:21:e0:88:06:0f:4f:06:cf:20:cb:23: b8:1a:5e:d1:1a:13:d4:42:44:4e:f1:35:10:68:d5:01:18:9e: c4:5e:24:61:8d:14:0e:c4:b8:64:eb:b0:7f:4a:8b:c6:24:2d: dd:7a:04:37:fc:dc:10:e9:65:14:b7:f0:e8:ec:06:57:d0:04: 1d:d9:22:04:a6:1f:ed:b9:b9:af:fe:5f:9d:3a:bb:ff:35:4c: 5b:43:f1:9c:9a:2b:c3:17:4a:6d:4a:41:01:79:7a:04:6a:3d: 56:14:88:ff:31:6f:31:65:24:db:dd:79:63:33:cc:c3:4d:46: 38:97:f7:39:b1:8a:74:44:3f:62:b2:2e:66:e5:98:ae:bc:94: 9a:35:e1:db:eb:ad:a2:9a:ea:3b:44:d5:02:29:07:21:ac:45: a9:07:b5:77:d0:b7:2f:74:95:8c:83:d9:a1:b8:f6:77:c2:e5: c5:ef:88:8d:58:ac:8d:ae:ae:d9:22:02:b0:c4:a0:64:d6:b6: d1:85:f7:b0:da:4e:54:5b:cf:6d:85:eb:20:98:e0:e0:78:2a: d6:5c:68:b3:23:16:66:14:cc:0b:cf:f6:d4:1b:80:b1:fe:6e: 03:7e:1d:38:5e:c2:62:25:ef:88:09:6d:2d:7a:4f:ff:c4:9f: 53:b5:43:35 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUab3iUBovojiaT3tK5ZGJ7vplA0gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDYxNzI3MkVFODc1QjU1Q0Q1RjJBODgzMzBBOTVGNjQx MEEzRUIxQjAeFw0yNTA5MDcxOTI2MTFaFw0yNTA5MTEwNDUyMTFaMDMxMTAvBgNV BAMTKEFCMzZBRTQ3MTNBOTAxNzBENDZGRkVFQTlFOERDMDdBODk0MDQzQjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEpE9ubWZ2u13zd6Gxl554h8IK mZ1B2qxSNndTq8zLXsn+jetaNd0Xb2VBlZhHp0/XHPe6Ejzk/S9CF3Y1GyVIuZto L3dYByeyAWkZGYuvDCuA+bot/VS5BgyfsxymG+Cj3lnvkmscrpik+jbwqe9Gz82L 2rkSNDdpZVEwDnZ9yka7wtIyC68lREeXYKOzquo6gBaX+OafUyF/cFypQEBO/2pb vDTey1hIIwRtMcweNvxMuBSS3+fuGLLHNU0TSPxDqzDX4hYSx8MMbUL5EkBsZczW FYIMXANFahHgxWAWr5CvjendEozJgvEb0u+oIKmdwkxBo5RZeI/grX8GhvkHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqzauRxOpAXDUb/7qno3AeolAQ7cwHwYDVR0j BBgwFoAURhcnLuh1tVzV8qiDMKlfZBCj6xswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZmRhZjA2YS1mNjI0LTQyY2YtYmIxOS1iNmJiZjkzMWFhYzgvMC80NjE3MjcyRUU4 NzVCNTVDRDVGMkE4ODMzMEE5NUY2NDEwQTNFQjFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNDYxNzI3MkVFODc1QjU1Q0Q1RjJBODgzMzBBOTVGNjQxMEEz RUIxQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWZkYWYwNmEtZjYyNC00MmNmLWJi MTktYjZiYmY5MzFhYWM4LzAvNDYxNzI3MkVFODc1QjU1Q0Q1RjJBODgzMzBBOTVG NjQxMEEzRUIxQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALzlks0W5IEh4IgGD08GzyDLI7gaXtEaE9RC RE7xNRBo1QEYnsReJGGNFA7EuGTrsH9Ki8YkLd16BDf83BDpZRS38OjsBlfQBB3Z IgSmH+25ua/+X506u/81TFtD8ZyaK8MXSm1KQQF5egRqPVYUiP8xbzFlJNvdeWMz zMNNRjiX9zmxinREP2KyLmblmK68lJo14dvrraKa6jtE1QIpByGsRakHtXfQty90 lYyD2aG49nfC5cXviI1YrI2urtkiArDEoGTWttGF97DaTlRbz22F6yCY4OB4KtZc aLMjFmYUzAvP9tQbgLH+bgN+HThewmIl74gJbS16T//En1O1QzU= -----END CERTIFICATE-----Generated at Mon Sep 8 05:03:51 2025 by rpki-client