$ rpki-client -vvf repo-rpki.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/4DF415D2DB760C39855B3F3D9CF3CE441A783E36.mft File: 4DF415D2DB760C39855B3F3D9CF3CE441A783E36.mft (raw, json) Hash identifier: 4/VijNLeh1UJ0yOF5onp/BSx1G8Fi7eaz/jGzIE1EsM= Subject key identifier: C9:8A:1F:D2:D5:4D:E0:FE:CA:06:D3:7A:C2:B0:BD:C5:C2:3A:80:D7 Authority key identifier: 4D:F4:15:D2:DB:76:0C:39:85:5B:3F:3D:9C:F3:CE:44:1A:78:3E:36 Certificate issuer: /CN=4DF415D2DB760C39855B3F3D9CF3CE441A783E36 Certificate serial: 69761116B9EC510312420AC5BD1DCEC7CC7211A1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF415D2DB760C39855B3F3D9CF3CE441A783E36.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/4DF415D2DB760C39855B3F3D9CF3CE441A783E36.mft Manifest number: 0505 Signing time: Sun 07 Sep 2025 07:51:52 +0000 Manifest this update: Sun 07 Sep 2025 07:46:52 +0000 Manifest next update: Wed 10 Sep 2025 08:03:52 +0000 Files and hashes: 1: 3130332e3130352e39382e302f32332d3233203d3e20313336383638.roa (hash: KrFiIsKebuclmAnJCp7i0qAQI2dNZ1dLN7tW2prCRMk=) 2: 3130332e3130352e39392e302f32342d3234203d3e20313336383638.roa (hash: RarippCnWnMmEjTgkPvYhkG55G9O0lUfwe2+0FeUYpg=) 3: 3130332e3133332e32302e302f32332d3234203d3e20313336383638.roa (hash: kKOPYDd68IbPpSS7OOzul5ii2GOnq8I9waVsMp0r138=) 4: 3130332e3130352e39382e302f32342d3234203d3e20313336383638.roa (hash: gEF6XHOWRCqM+iWbvzjd5eE8QEvtBHMbgAap2D0U424=) 5: 4DF415D2DB760C39855B3F3D9CF3CE441A783E36.crl (hash: P+xLRGdnYEQUzehIjqOeejxJMMGcNiDxXn4Ep4TvUCg=) 6: 323030313a6466333a373130303a3a2f34382d3438203d3e20313336383638.roa (hash: gxzjhOqlSfyvVQV8GuZutKZCxMRY+U2lIgUsJNuDYjo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/4DF415D2DB760C39855B3F3D9CF3CE441A783E36.crl rsync://repo-rpki.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/4DF415D2DB760C39855B3F3D9CF3CE441A783E36.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF415D2DB760C39855B3F3D9CF3CE441A783E36.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 08:03:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:76:11:16:b9:ec:51:03:12:42:0a:c5:bd:1d:ce:c7:cc:72:11:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4DF415D2DB760C39855B3F3D9CF3CE441A783E36 Validity Not Before: Sep 7 07:46:52 2025 GMT Not After : Sep 10 08:03:52 2025 GMT Subject: CN=C98A1FD2D54DE0FECA06D37AC2B0BDC5C23A80D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:53:93:e5:3a:99:53:a0:06:3d:03:ad:81:61: 18:9f:f0:93:b3:ae:39:9b:e0:be:35:e0:10:0c:ea: cc:9f:c1:1c:c5:82:87:5e:b7:f7:3b:ef:57:51:bf: 98:e0:74:a3:64:8e:fa:9f:1d:e2:d6:61:bd:22:ae: 32:33:e2:57:a0:30:a3:8e:81:a8:5b:92:3f:d6:8c: 03:cf:79:f3:b6:38:9e:c9:6e:b2:38:7e:26:7e:bb: d4:91:bf:b7:98:44:7d:52:11:e1:ab:26:e0:20:34: d7:74:80:c1:a9:08:40:15:16:4a:85:3a:a9:91:21: 9c:24:25:a2:d4:dc:2a:e9:0f:4a:25:85:51:2f:6a: 59:f9:af:e3:ff:8e:45:5c:89:e0:3c:89:24:ca:33: db:5e:37:05:17:34:4c:ce:28:73:83:7e:15:70:de: 55:3a:06:30:94:bf:a9:27:50:c4:68:b1:52:34:f5: 1f:68:82:cd:9d:e5:8b:9b:47:fc:41:05:bd:72:42: de:65:0a:c5:63:f6:9c:49:2f:c4:02:7a:a2:b1:65: 99:fe:e4:82:27:f0:3d:eb:27:45:49:2b:ba:9a:18: c5:1b:5d:f7:2d:e2:c1:71:2d:ca:12:23:e7:90:40: dd:57:65:10:a6:51:80:22:d9:cd:cf:91:6b:6e:b8: 3c:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:8A:1F:D2:D5:4D:E0:FE:CA:06:D3:7A:C2:B0:BD:C5:C2:3A:80:D7 X509v3 Authority Key Identifier: keyid:4D:F4:15:D2:DB:76:0C:39:85:5B:3F:3D:9C:F3:CE:44:1A:78:3E:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/4DF415D2DB760C39855B3F3D9CF3CE441A783E36.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF415D2DB760C39855B3F3D9CF3CE441A783E36.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/4DF415D2DB760C39855B3F3D9CF3CE441A783E36.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:98:96:cf:63:b0:f1:2a:9a:2e:f0:fa:92:0f:8e:20:2b:08: d0:b7:68:86:81:61:06:be:b0:f8:9e:23:49:6d:da:7b:b4:35: ae:a0:14:f5:3b:6c:dd:78:0c:c8:e2:c6:48:b6:be:29:c5:2b: fc:b8:80:b5:be:11:bb:a1:2e:e4:7e:18:d8:48:b6:9f:94:ce: 8d:3b:1c:20:ef:2f:c5:ce:68:c0:64:98:7e:e0:be:1d:ee:c8: e8:25:23:4d:14:52:6f:7f:95:ea:e2:bb:ec:58:f4:c8:0e:58: 5a:fc:fa:e0:6a:12:e5:9f:0e:2f:05:84:8d:43:34:d7:29:3c: 28:12:8c:61:50:11:cd:23:e0:44:5a:f4:74:4e:9b:cb:76:de: a5:ff:a0:72:01:2a:0d:3e:5a:4b:47:a3:a9:fc:9a:86:aa:0a: fc:76:d5:bf:9f:75:b2:96:b8:ba:1b:70:f4:6e:8b:70:82:5a: a1:97:81:d1:a3:6d:8a:8e:dd:14:b4:d3:b2:82:ce:21:c4:e1: 19:1b:16:b6:73:7c:38:86:3d:40:6f:ab:81:fc:a4:e9:e6:8f: e4:a0:a0:0d:af:ae:5f:c4:44:f9:26:fa:3d:e2:8c:d0:23:df: 48:80:06:87:13:56:99:a5:97:b6:09:16:e2:b0:3b:3b:d8:d7: 19:78:53:1e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaXYRFrnsUQMSQgrFvR3Ox8xyEaEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNERGNDE1RDJEQjc2MEMzOTg1NUIzRjNEOUNGM0NFNDQx QTc4M0UzNjAeFw0yNTA5MDcwNzQ2NTJaFw0yNTA5MTAwODAzNTJaMDMxMTAvBgNV BAMTKEM5OEExRkQyRDU0REUwRkVDQTA2RDM3QUMyQjBCREM1QzIzQTgwRDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5U5PlOplToAY9A62BYRif8JOz rjmb4L414BAM6syfwRzFgodet/c771dRv5jgdKNkjvqfHeLWYb0irjIz4legMKOO gahbkj/WjAPPefO2OJ7JbrI4fiZ+u9SRv7eYRH1SEeGrJuAgNNd0gMGpCEAVFkqF OqmRIZwkJaLU3CrpD0olhVEvaln5r+P/jkVcieA8iSTKM9teNwUXNEzOKHODfhVw 3lU6BjCUv6knUMRosVI09R9ogs2d5YubR/xBBb1yQt5lCsVj9pxJL8QCeqKxZZn+ 5IIn8D3rJ0VJK7qaGMUbXfct4sFxLcoSI+eQQN1XZRCmUYAi2c3PkWtuuDw7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyYof0tVN4P7KBtN6wrC9xcI6gNcwHwYDVR0j BBgwFoAUTfQV0tt2DDmFWz89nPPORBp4PjYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MTI0YWE4Yy1kZWRjLTQzNzYtOTM4MS0wYTgxZTZiY2M1NjQvMC80REY0MTVEMkRC NzYwQzM5ODU1QjNGM0Q5Q0YzQ0U0NDFBNzgzRTM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNERGNDE1RDJEQjc2MEMzOTg1NUIzRjNEOUNGM0NFNDQxQTc4 M0UzNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTEyNGFhOGMtZGVkYy00Mzc2LTkz ODEtMGE4MWU2YmNjNTY0LzAvNERGNDE1RDJEQjc2MEMzOTg1NUIzRjNEOUNGM0NF NDQxQTc4M0UzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEuYls9jsPEqmi7w+pIPjiArCNC3aIaBYQa+ sPieI0lt2nu0Na6gFPU7bN14DMjixki2vinFK/y4gLW+EbuhLuR+GNhItp+Uzo07 HCDvL8XOaMBkmH7gvh3uyOglI00UUm9/leriu+xY9MgOWFr8+uBqEuWfDi8FhI1D NNcpPCgSjGFQEc0j4ERa9HROm8t23qX/oHIBKg0+WktHo6n8moaqCvx21b+fdbKW uLobcPRui3CCWqGXgdGjbYqO3RS007KCziHE4RkbFrZzfDiGPUBvq4H8pOnmj+Sg oA2vrl/ERPkm+j3ijNAj30iABocTVpmll7YJFuKwOzvY1xl4Ux4= -----END CERTIFICATE-----Generated at Sun Sep 7 13:59:47 2025 by rpki-client