$ rpki-client -vvf repo-rpki.idnic.net/repo/b3991f7a-0a71-4f0d-933f-ecf813530274/0/A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.mft File: A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.mft (raw, json) Hash identifier: eP8qRXCpJUr+wOxmCpOmEyqOaICpR+ysEigOyk9gkhI= Subject key identifier: 97:26:1D:C0:9F:C8:20:51:E9:27:FD:66:81:B0:E2:C8:C7:75:B5:ED Authority key identifier: A4:B6:31:C8:CF:E0:EE:72:AC:D5:F2:08:FC:12:39:06:4F:6C:DE:44 Certificate issuer: /CN=A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44 Certificate serial: 5CCAED965ADE07F313B5C27ABB0A7D555E052935 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b3991f7a-0a71-4f0d-933f-ecf813530274/0/A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.mft Manifest number: C8 Signing time: Sun 07 Sep 2025 07:01:09 +0000 Manifest this update: Sun 07 Sep 2025 06:56:09 +0000 Manifest next update: Wed 10 Sep 2025 12:11:09 +0000 Files and hashes: 1: A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.crl (hash: zfV176GJytotystRmD2He5NKdBWutU4jdoLI7XSFMkA=) 2: 3135372e36362e3234382e302f32332d3234203d3e20313532373937.roa (hash: vC1sLrROQammNbgh64OVHa3goyUf/oRsNt6WGQKKJQo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b3991f7a-0a71-4f0d-933f-ecf813530274/0/A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.crl rsync://repo-rpki.idnic.net/repo/b3991f7a-0a71-4f0d-933f-ecf813530274/0/A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 12:11:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:ca:ed:96:5a:de:07:f3:13:b5:c2:7a:bb:0a:7d:55:5e:05:29:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44 Validity Not Before: Sep 7 06:56:09 2025 GMT Not After : Sep 10 12:11:09 2025 GMT Subject: CN=97261DC09FC82051E927FD6681B0E2C8C775B5ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:58:81:9b:0b:d7:67:26:6d:28:85:cf:91:66: 61:66:48:3e:0a:fd:83:22:7a:ac:11:fb:05:68:91: 99:c6:8f:a8:ea:46:68:19:10:aa:40:df:6e:40:ec: a2:e1:d0:19:66:cb:4e:7c:e6:11:2e:8e:f0:61:f3: ed:cf:c2:a2:e8:81:a0:1f:25:15:e7:35:72:fd:02: e3:8b:31:35:da:30:a2:5c:49:39:3f:c6:db:d1:77: d2:41:20:5a:64:10:e2:72:6e:cc:d3:77:61:9c:ab: 88:04:ba:11:18:7c:a0:d9:9d:d8:cf:ed:5d:94:56: c0:dd:0a:50:ac:36:65:7f:4e:3c:d2:b5:27:c2:76: 68:8f:7b:d0:0a:8e:51:0a:8e:77:b3:c7:71:2c:d1: d6:9a:af:f4:77:2b:ab:82:55:fb:61:56:6f:08:0d: f8:ba:03:12:dc:24:a9:dd:0d:d3:65:ea:f4:98:41: a8:cb:b8:84:9a:66:d8:fe:50:a6:31:71:c8:e1:ff: 23:e2:af:0c:05:4d:12:ab:91:d3:be:59:15:1d:03: cd:ae:6c:32:bd:31:24:25:1e:23:e1:26:5b:15:b4: 37:51:91:31:d0:57:ee:f7:b4:38:99:4f:f8:f7:df: 9c:61:4c:3c:3f:ba:cb:99:cc:70:7a:e9:45:a7:f2: 04:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:26:1D:C0:9F:C8:20:51:E9:27:FD:66:81:B0:E2:C8:C7:75:B5:ED X509v3 Authority Key Identifier: keyid:A4:B6:31:C8:CF:E0:EE:72:AC:D5:F2:08:FC:12:39:06:4F:6C:DE:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b3991f7a-0a71-4f0d-933f-ecf813530274/0/A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b3991f7a-0a71-4f0d-933f-ecf813530274/0/A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:2e:26:20:cc:02:d0:a6:a8:7d:1c:d6:61:fb:1c:03:17:08: 90:2d:a3:7e:0a:5e:ae:8b:5b:2f:ba:6e:68:84:d0:99:44:44: 7b:05:02:d3:95:22:05:d5:b3:5a:b8:28:5a:c3:c8:bd:43:a6: 85:5c:4b:cf:91:54:cd:da:6b:04:48:f2:7a:03:d4:79:bd:8f: 5a:21:f4:d5:0f:f3:dd:24:e0:98:f3:dd:34:9e:53:20:8f:cb: e8:05:c3:3f:93:3d:3f:8a:8f:68:0d:3f:d6:ab:7f:eb:a5:a8: 67:0f:9b:3d:f3:51:54:88:99:73:a1:06:67:ac:4b:57:5c:c6: 09:be:d2:2a:a9:97:a1:25:94:0d:8c:7e:a7:46:0d:9d:f0:33: 4f:27:ed:26:5e:64:6e:2b:99:53:b5:da:6a:d9:90:34:84:4a: 58:e0:42:ca:61:43:cc:d6:40:10:fc:d2:c4:f2:df:ef:52:90: 5b:c9:bf:3f:8f:cc:01:3e:e5:e9:0a:0f:db:40:b9:4e:f3:c5: 2d:27:80:20:8f:9e:62:75:c5:c3:81:c9:24:24:0d:7d:cc:c4: 6a:bc:ef:d9:d5:eb:c7:00:28:9a:7b:12:af:42:0e:ad:db:19: fe:46:2b:ab:9a:12:9b:d9:ee:29:ac:3e:98:02:db:23:ec:36: bc:f5:6f:2f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXMrtllreB/MTtcJ6uwp9VV4FKTUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTRCNjMxQzhDRkUwRUU3MkFDRDVGMjA4RkMxMjM5MDY0 RjZDREU0NDAeFw0yNTA5MDcwNjU2MDlaFw0yNTA5MTAxMjExMDlaMDMxMTAvBgNV BAMTKDk3MjYxREMwOUZDODIwNTFFOTI3RkQ2NjgxQjBFMkM4Qzc3NUI1RUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkWIGbC9dnJm0ohc+RZmFmSD4K /YMieqwR+wVokZnGj6jqRmgZEKpA325A7KLh0Blmy0585hEujvBh8+3PwqLogaAf JRXnNXL9AuOLMTXaMKJcSTk/xtvRd9JBIFpkEOJybszTd2Gcq4gEuhEYfKDZndjP 7V2UVsDdClCsNmV/TjzStSfCdmiPe9AKjlEKjnezx3Es0daar/R3K6uCVfthVm8I Dfi6AxLcJKndDdNl6vSYQajLuISaZtj+UKYxccjh/yPirwwFTRKrkdO+WRUdA82u bDK9MSQlHiPhJlsVtDdRkTHQV+73tDiZT/j335xhTDw/usuZzHB66UWn8gTBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlyYdwJ/IIFHpJ/1mgbDiyMd1te0wHwYDVR0j BBgwFoAUpLYxyM/g7nKs1fII/BI5Bk9s3kQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i Mzk5MWY3YS0wYTcxLTRmMGQtOTMzZi1lY2Y4MTM1MzAyNzQvMC9BNEI2MzFDOENG RTBFRTcyQUNENUYyMDhGQzEyMzkwNjRGNkNERTQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQTRCNjMxQzhDRkUwRUU3MkFDRDVGMjA4RkMxMjM5MDY0RjZD REU0NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjM5OTFmN2EtMGE3MS00ZjBkLTkz M2YtZWNmODEzNTMwMjc0LzAvQTRCNjMxQzhDRkUwRUU3MkFDRDVGMjA4RkMxMjM5 MDY0RjZDREU0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEEuJiDMAtCmqH0c1mH7HAMXCJAto34KXq6L Wy+6bmiE0JlERHsFAtOVIgXVs1q4KFrDyL1DpoVcS8+RVM3aawRI8noD1Hm9j1oh 9NUP890k4Jjz3TSeUyCPy+gFwz+TPT+Kj2gNP9arf+ulqGcPmz3zUVSImXOhBmes S1dcxgm+0iqpl6EllA2MfqdGDZ3wM08n7SZeZG4rmVO12mrZkDSESljgQsphQ8zW QBD80sTy3+9SkFvJvz+PzAE+5ekKD9tAuU7zxS0ngCCPnmJ1xcOBySQkDX3MxGq8 79nV68cAKJp7Eq9CDq3bGf5GK6uaEpvZ7imsPpgC2yPsNrz1by8= -----END CERTIFICATE-----Generated at Mon Sep 8 08:47:28 2025 by rpki-client