$ rpki-client -vvf repo-rpki.idnic.net/repo/b3991f7a-0a71-4f0d-933f-ecf813530274/0/A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.mft File: A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.mft (raw, json) Hash identifier: cMoDAUY7TZCvDm6z74vvWupFPRWzl1A8oR+6jYVR6kU= Subject key identifier: 48:A7:A6:35:2A:72:20:ED:EE:80:D8:D1:0E:27:AE:54:FF:9C:B4:2F Authority key identifier: A4:B6:31:C8:CF:E0:EE:72:AC:D5:F2:08:FC:12:39:06:4F:6C:DE:44 Certificate issuer: /CN=A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44 Certificate serial: 57F4F9A6F087BE7E420DF773C3FAC231DB473EB2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b3991f7a-0a71-4f0d-933f-ecf813530274/0/A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.mft Manifest number: B2 Signing time: Sat 19 Jul 2025 19:51:12 +0000 Manifest this update: Sat 19 Jul 2025 19:46:12 +0000 Manifest next update: Wed 23 Jul 2025 02:14:12 +0000 Files and hashes: 1: A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.crl (hash: N9rArDlgdCQDH64Xk7sF1XwiqbklvS2nWvQNHZVL3Io=) 2: 3135372e36362e3234382e302f32332d3234203d3e20313532373937.roa (hash: vC1sLrROQammNbgh64OVHa3goyUf/oRsNt6WGQKKJQo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b3991f7a-0a71-4f0d-933f-ecf813530274/0/A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.crl rsync://repo-rpki.idnic.net/repo/b3991f7a-0a71-4f0d-933f-ecf813530274/0/A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 02:14:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:f4:f9:a6:f0:87:be:7e:42:0d:f7:73:c3:fa:c2:31:db:47:3e:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44 Validity Not Before: Jul 19 19:46:12 2025 GMT Not After : Jul 23 02:14:12 2025 GMT Subject: CN=48A7A6352A7220EDEE80D8D10E27AE54FF9CB42F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:dd:50:c6:30:98:6b:a8:f1:0a:0a:8e:ef:d0: 4f:f3:11:b1:2f:50:ee:9a:a4:7f:33:b3:a5:d3:e6: 2b:44:e0:72:90:1f:c6:10:d1:df:14:3e:12:06:eb: ca:81:33:2d:ff:66:d3:ba:17:b4:f2:3b:16:47:6c: 34:66:73:65:86:c4:98:00:e1:16:3a:48:3d:d6:14: 09:b1:6d:86:72:62:b4:c7:98:55:c1:5f:42:69:60: f3:94:13:c5:4e:d0:1c:2e:6c:f9:f1:e4:a8:40:df: 55:2e:a2:cb:2e:4c:18:46:d0:c9:60:78:96:ed:9b: 4f:af:05:e2:1f:14:fc:20:06:83:f6:c4:a6:75:b8: 9a:3f:42:23:dd:84:f7:42:70:7b:89:98:d7:7f:12: fb:04:99:80:81:4f:c4:2e:0a:14:7f:c1:85:60:cc: d7:79:27:41:13:5b:dc:f6:43:21:f6:62:1c:b4:6f: a2:4d:99:51:fc:f1:56:a2:1e:d3:c8:9d:62:d1:76: 1c:d7:2b:a4:6a:6e:07:06:20:2c:d1:e0:ed:7f:49: 0f:7f:5d:6d:3a:ce:bf:df:9b:d5:33:65:d9:d8:e0: ed:3e:d1:07:ca:a6:af:60:c1:9a:91:b5:fd:eb:10: 45:d1:95:a4:08:f4:c8:d0:c1:fe:aa:6d:48:c2:f1: 87:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:A7:A6:35:2A:72:20:ED:EE:80:D8:D1:0E:27:AE:54:FF:9C:B4:2F X509v3 Authority Key Identifier: keyid:A4:B6:31:C8:CF:E0:EE:72:AC:D5:F2:08:FC:12:39:06:4F:6C:DE:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b3991f7a-0a71-4f0d-933f-ecf813530274/0/A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b3991f7a-0a71-4f0d-933f-ecf813530274/0/A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:6d:a3:22:71:06:e7:e6:5e:d7:c0:af:61:67:72:c2:ce:75: e3:c8:65:1a:98:9e:78:5d:25:d0:3c:41:5b:2f:7f:fd:65:25: 5c:cb:a2:51:77:9e:62:64:11:af:5a:96:c6:bd:a6:2c:b8:0c: 19:4c:e9:9b:43:37:5b:48:84:fe:69:94:63:57:d5:dc:18:60: 6d:5a:71:69:5a:3d:3a:59:ae:be:d6:16:12:8d:58:74:1c:b0: 9c:7e:3a:3a:e8:5c:7a:19:fe:4e:6f:dd:6a:a5:56:f8:a4:0e: 09:15:c4:50:08:0e:ef:bd:15:7a:58:03:a8:24:c3:68:1c:f4: ef:b1:d7:ce:6f:ff:50:98:cb:37:78:d6:50:79:01:4a:cf:8c: 4a:90:da:a3:fe:5d:6c:88:61:4e:15:9d:0c:3f:2b:1c:5e:00: 0c:48:6c:a6:6c:c4:d8:40:ef:20:9a:f7:3a:f0:f2:71:c2:2d: 08:19:12:be:c1:79:1d:4f:34:8c:4a:02:7c:9c:fa:26:14:88: 72:31:b9:ba:37:a7:ba:4c:ec:f2:1d:a4:98:a7:9d:64:fe:dc: bb:76:ce:a4:f5:7c:4f:8c:25:67:c1:2f:cb:78:5b:59:d5:39: 49:dd:81:73:44:6d:67:5d:15:8f:8d:1b:33:fd:06:5d:af:cb: e8:dc:84:90 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV/T5pvCHvn5CDfdzw/rCMdtHPrIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTRCNjMxQzhDRkUwRUU3MkFDRDVGMjA4RkMxMjM5MDY0 RjZDREU0NDAeFw0yNTA3MTkxOTQ2MTJaFw0yNTA3MjMwMjE0MTJaMDMxMTAvBgNV BAMTKDQ4QTdBNjM1MkE3MjIwRURFRTgwRDhEMTBFMjdBRTU0RkY5Q0I0MkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCf3VDGMJhrqPEKCo7v0E/zEbEv UO6apH8zs6XT5itE4HKQH8YQ0d8UPhIG68qBMy3/ZtO6F7TyOxZHbDRmc2WGxJgA 4RY6SD3WFAmxbYZyYrTHmFXBX0JpYPOUE8VO0BwubPnx5KhA31UuossuTBhG0Mlg eJbtm0+vBeIfFPwgBoP2xKZ1uJo/QiPdhPdCcHuJmNd/EvsEmYCBT8QuChR/wYVg zNd5J0ETW9z2QyH2Yhy0b6JNmVH88VaiHtPInWLRdhzXK6RqbgcGICzR4O1/SQ9/ XW06zr/fm9UzZdnY4O0+0QfKpq9gwZqRtf3rEEXRlaQI9MjQwf6qbUjC8YeVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSKemNSpyIO3ugNjRDieuVP+ctC8wHwYDVR0j BBgwFoAUpLYxyM/g7nKs1fII/BI5Bk9s3kQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i Mzk5MWY3YS0wYTcxLTRmMGQtOTMzZi1lY2Y4MTM1MzAyNzQvMC9BNEI2MzFDOENG RTBFRTcyQUNENUYyMDhGQzEyMzkwNjRGNkNERTQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQTRCNjMxQzhDRkUwRUU3MkFDRDVGMjA4RkMxMjM5MDY0RjZD REU0NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjM5OTFmN2EtMGE3MS00ZjBkLTkz M2YtZWNmODEzNTMwMjc0LzAvQTRCNjMxQzhDRkUwRUU3MkFDRDVGMjA4RkMxMjM5 MDY0RjZDREU0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADJtoyJxBufmXtfAr2FncsLOdePIZRqYnnhd JdA8QVsvf/1lJVzLolF3nmJkEa9alsa9piy4DBlM6ZtDN1tIhP5plGNX1dwYYG1a cWlaPTpZrr7WFhKNWHQcsJx+OjroXHoZ/k5v3WqlVvikDgkVxFAIDu+9FXpYA6gk w2gc9O+x185v/1CYyzd41lB5AUrPjEqQ2qP+XWyIYU4VnQw/KxxeAAxIbKZsxNhA 7yCa9zrw8nHCLQgZEr7BeR1PNIxKAnyc+iYUiHIxubo3p7pM7PIdpJinnWT+3Lt2 zqT1fE+MJWfBL8t4W1nVOUndgXNEbWddFY+NGzP9Bl2vy+jchJA= -----END CERTIFICATE-----Generated at Mon Jul 21 10:41:18 2025 by rpki-client