$ rpki-client -vvf repo-rpki.idnic.net/repo/cc09e13c-cea0-47ff-9c96-f49b39d43920/0/4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A.mft File: 4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A.mft (raw, json) Hash identifier: mLX8NDzTZ1uStGrH/DALHx5OGma46fbd18ZkEZaEZog= Subject key identifier: FC:E7:02:14:0F:80:B8:CC:3E:6A:71:6D:88:2B:7A:21:C2:D2:5D:28 Authority key identifier: 4A:6F:D7:E0:79:F5:43:A5:D5:FD:E4:43:3F:7B:D5:3D:CE:42:6E:5A Certificate issuer: /CN=4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A Certificate serial: 1A6307106EF34CB2EF47035D190B28EBCE020FF9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cc09e13c-cea0-47ff-9c96-f49b39d43920/0/4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A.mft Manifest number: 0504 Signing time: Sat 06 Sep 2025 05:21:40 +0000 Manifest this update: Sat 06 Sep 2025 05:16:40 +0000 Manifest next update: Tue 09 Sep 2025 07:58:40 +0000 Files and hashes: 1: 4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A.crl (hash: 4uh2NIS7ZATryBXHVXUsQ3foUkuwjkaQTXQETA+iLBc=) 2: 3130332e3231312e34392e302f32342d3234203d3e203633353035.roa (hash: jSA7+l89fySFyM7Bs9jzEHqShE9HEzseLTVhKTYttZk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cc09e13c-cea0-47ff-9c96-f49b39d43920/0/4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A.crl rsync://repo-rpki.idnic.net/repo/cc09e13c-cea0-47ff-9c96-f49b39d43920/0/4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 07:58:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:63:07:10:6e:f3:4c:b2:ef:47:03:5d:19:0b:28:eb:ce:02:0f:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A Validity Not Before: Sep 6 05:16:40 2025 GMT Not After : Sep 9 07:58:40 2025 GMT Subject: CN=FCE702140F80B8CC3E6A716D882B7A21C2D25D28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:a1:46:2b:61:b0:0b:9c:b8:1b:bf:10:c3:35: 3c:ab:02:fb:da:b9:00:07:ed:3e:8e:b5:16:00:33: c8:f4:25:a7:b0:1d:58:c6:5b:64:5e:79:8c:d3:49: 28:84:63:26:23:67:0b:85:1a:50:84:95:c7:95:65: 59:d1:e8:fa:07:a2:e9:f1:ce:d5:00:c0:f8:16:39: ea:f5:a8:ce:3a:e6:8b:2e:5f:03:38:fc:ed:15:fb: 8f:50:6d:47:45:93:63:0e:d3:40:a9:d2:da:f8:b4: f9:88:47:2d:1e:8f:01:f5:5b:59:24:0b:87:5c:95: a5:65:35:88:0c:b7:7d:a0:02:5c:d5:45:c7:81:80: ed:f4:16:2b:58:24:09:27:bd:a5:6e:77:48:f9:cd: ee:c3:31:14:ec:a8:6a:b3:01:93:aa:aa:e2:e1:9f: 0c:43:df:7b:c7:0b:42:d3:92:21:fd:11:c5:7d:72: 7c:03:61:c8:63:88:b6:58:85:a6:46:13:fa:f4:74: f2:41:6c:61:3b:ee:e0:ef:59:aa:52:d6:27:6a:50: e6:25:a7:9f:43:14:06:2c:5d:78:99:34:13:16:03: bc:ee:6a:73:56:37:65:6a:ba:c1:80:13:53:e8:93: 10:ac:4e:02:ef:a1:f6:e7:76:89:f2:ea:96:47:bd: 9b:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:E7:02:14:0F:80:B8:CC:3E:6A:71:6D:88:2B:7A:21:C2:D2:5D:28 X509v3 Authority Key Identifier: keyid:4A:6F:D7:E0:79:F5:43:A5:D5:FD:E4:43:3F:7B:D5:3D:CE:42:6E:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cc09e13c-cea0-47ff-9c96-f49b39d43920/0/4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cc09e13c-cea0-47ff-9c96-f49b39d43920/0/4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:86:c1:01:42:8b:61:9c:be:21:0c:89:61:1d:55:00:83:e3: f3:b8:8e:d3:f3:b8:3b:e2:bb:c6:75:79:ea:3e:42:ce:59:cf: 79:52:61:c1:50:88:96:e4:af:88:35:38:ff:e5:0d:f0:3f:77: a9:42:d7:54:52:1b:11:84:d7:3d:0d:9d:7f:ff:c8:f6:38:18: 50:7f:19:25:7e:b4:5f:7a:f0:50:48:6a:a0:0a:5e:e1:14:a1: 65:de:a8:ac:56:67:ed:b3:e3:ff:58:e5:92:f8:f1:0e:11:2e: 19:07:79:f6:6a:e6:55:b7:e7:20:28:c8:66:84:da:76:7b:3a: 33:49:8a:f9:63:bc:d7:14:64:25:66:d9:57:45:4a:1d:ee:e8: 70:d5:0e:f0:be:8f:b5:e5:48:25:1b:ec:96:4b:3c:6b:a4:f9: 90:5b:56:d6:79:15:50:d5:b7:ef:71:b8:41:2b:6b:15:06:32: 56:55:b0:d0:46:54:3c:8a:09:ec:83:95:2b:61:cb:84:09:b4: 78:80:dc:0c:42:04:3d:89:27:78:0a:ba:d9:1b:2b:54:bd:05: 5f:5a:ea:1e:8e:57:c4:3f:cb:07:70:ca:b6:c1:88:62:fe:54: 9d:69:3f:35:87:07:f0:e5:51:c0:84:5d:38:21:a0:f7:dc:65: da:1b:cd:be -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGmMHEG7zTLLvRwNdGQso684CD/kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEE2RkQ3RTA3OUY1NDNBNUQ1RkRFNDQzM0Y3QkQ1M0RD RTQyNkU1QTAeFw0yNTA5MDYwNTE2NDBaFw0yNTA5MDkwNzU4NDBaMDMxMTAvBgNV BAMTKEZDRTcwMjE0MEY4MEI4Q0MzRTZBNzE2RDg4MkI3QTIxQzJEMjVEMjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCooUYrYbALnLgbvxDDNTyrAvva uQAH7T6OtRYAM8j0JaewHVjGW2ReeYzTSSiEYyYjZwuFGlCElceVZVnR6PoHounx ztUAwPgWOer1qM465osuXwM4/O0V+49QbUdFk2MO00Cp0tr4tPmIRy0ejwH1W1kk C4dclaVlNYgMt32gAlzVRceBgO30FitYJAknvaVud0j5ze7DMRTsqGqzAZOqquLh nwxD33vHC0LTkiH9EcV9cnwDYchjiLZYhaZGE/r0dPJBbGE77uDvWapS1idqUOYl p59DFAYsXXiZNBMWA7zuanNWN2VqusGAE1PokxCsTgLvofbndony6pZHvZtnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/OcCFA+AuMw+anFtiCt6IcLSXSgwHwYDVR0j BBgwFoAUSm/X4Hn1Q6XV/eRDP3vVPc5CblowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YzA5ZTEzYy1jZWEwLTQ3ZmYtOWM5Ni1mNDliMzlkNDM5MjAvMC80QTZGRDdFMDc5 RjU0M0E1RDVGREU0NDMzRjdCRDUzRENFNDI2RTVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEE2RkQ3RTA3OUY1NDNBNUQ1RkRFNDQzM0Y3QkQ1M0RDRTQy NkU1QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2MwOWUxM2MtY2VhMC00N2ZmLTlj OTYtZjQ5YjM5ZDQzOTIwLzAvNEE2RkQ3RTA3OUY1NDNBNUQ1RkRFNDQzM0Y3QkQ1 M0RDRTQyNkU1QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHqGwQFCi2GcviEMiWEdVQCD4/O4jtPzuDvi u8Z1eeo+Qs5Zz3lSYcFQiJbkr4g1OP/lDfA/d6lC11RSGxGE1z0NnX//yPY4GFB/ GSV+tF968FBIaqAKXuEUoWXeqKxWZ+2z4/9Y5ZL48Q4RLhkHefZq5lW35yAoyGaE 2nZ7OjNJivljvNcUZCVm2VdFSh3u6HDVDvC+j7XlSCUb7JZLPGuk+ZBbVtZ5FVDV t+9xuEEraxUGMlZVsNBGVDyKCeyDlSthy4QJtHiA3AxCBD2JJ3gKutkbK1S9BV9a 6h6OV8Q/ywdwyrbBiGL+VJ1pPzWHB/DlUcCEXTghoPfcZdobzb4= -----END CERTIFICATE-----Generated at Sun Sep 7 13:57:28 2025 by rpki-client