$ rpki-client -vvf repo-rpki.idnic.net/repo/faa6a67d-cba3-427b-9055-5f528f2d232f/0/4A688B72A804A426A9096ECA60105A4D831C5FA8.mft File: 4A688B72A804A426A9096ECA60105A4D831C5FA8.mft (raw, json) Hash identifier: SBkIbim9wd2IiWX2qGRIC/MB5lvMqKvFMZED0RChzqw= Subject key identifier: 8D:15:AC:C1:51:B2:19:FF:F5:5A:C3:76:CD:23:94:AB:D2:7C:93:CF Authority key identifier: 4A:68:8B:72:A8:04:A4:26:A9:09:6E:CA:60:10:5A:4D:83:1C:5F:A8 Certificate issuer: /CN=4A688B72A804A426A9096ECA60105A4D831C5FA8 Certificate serial: 71F9A1B0E59FC67427D705F174287A87A3296338 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A688B72A804A426A9096ECA60105A4D831C5FA8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/faa6a67d-cba3-427b-9055-5f528f2d232f/0/4A688B72A804A426A9096ECA60105A4D831C5FA8.mft Manifest number: 02E3 Signing time: Fri 05 Sep 2025 07:01:40 +0000 Manifest this update: Fri 05 Sep 2025 06:56:40 +0000 Manifest next update: Mon 08 Sep 2025 11:35:40 +0000 Files and hashes: 1: 3130332e3137352e3230362e302f32342d3234203d3e20313437313234.roa (hash: eQ2W59Sl25b9+tbhRBYK+eiWkdxaKDr4YfWFXlk9jXI=) 2: 4A688B72A804A426A9096ECA60105A4D831C5FA8.crl (hash: NonXFuGBsOKbt8c1wGkvBnINZu8r5LDzpoKMO2N2B+w=) 3: 3130332e3137352e3230372e302f32342d3234203d3e20313437313234.roa (hash: aQ3bZ8U/53lOgq6IbJ4jaeEks7cypqeVb0bEi+y+Pus=) 4: 3130332e3137352e3230362e302f32332d3234203d3e20313437313234.roa (hash: eGEsrGBto/hQncn3YcGePX27GH/UT48OX+sETIcZ17o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/faa6a67d-cba3-427b-9055-5f528f2d232f/0/4A688B72A804A426A9096ECA60105A4D831C5FA8.crl rsync://repo-rpki.idnic.net/repo/faa6a67d-cba3-427b-9055-5f528f2d232f/0/4A688B72A804A426A9096ECA60105A4D831C5FA8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A688B72A804A426A9096ECA60105A4D831C5FA8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 11:35:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:f9:a1:b0:e5:9f:c6:74:27:d7:05:f1:74:28:7a:87:a3:29:63:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A688B72A804A426A9096ECA60105A4D831C5FA8 Validity Not Before: Sep 5 06:56:40 2025 GMT Not After : Sep 8 11:35:40 2025 GMT Subject: CN=8D15ACC151B219FFF55AC376CD2394ABD27C93CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:8e:6a:c8:4d:ba:68:2a:94:6b:7c:3d:82:d7: 36:17:36:4e:0e:7b:93:04:8c:38:12:42:0a:25:62: 45:f6:26:88:88:32:7d:15:0b:8e:35:f7:34:34:3b: 99:91:5b:b1:c8:40:50:d8:df:d6:e5:ea:29:f8:ac: e4:01:4b:22:39:a0:38:23:fe:b8:ac:b5:f5:80:ab: 03:e0:63:46:85:91:aa:a9:06:5a:c7:b3:0c:62:bc: 87:54:64:c6:fc:9b:bf:4d:e6:46:21:7c:f5:4c:b4: cd:b9:a5:75:73:6f:f7:b8:db:25:8d:a4:56:5d:79: b8:f8:b6:d0:27:34:2c:3e:86:f9:61:3a:f4:ae:10: 46:66:8a:1d:25:85:ac:f0:b9:30:dc:7b:b9:41:86: c9:ef:b7:8e:5d:94:7b:5a:49:c7:1e:28:85:a8:8f: 2f:31:0e:f4:64:be:50:d1:52:af:15:aa:4d:8e:f6: 21:01:f9:14:f3:88:a2:5d:27:49:40:38:d3:1f:df: 71:f3:b0:3b:87:95:9e:04:24:84:14:45:69:c6:5f: 39:13:19:33:68:61:91:cc:89:b3:5c:fa:1e:68:64: bf:73:0d:ce:86:85:c6:0b:34:7d:1b:b8:9d:bd:be: f6:eb:73:c7:3d:41:01:78:ba:2c:de:d3:66:27:89: 91:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:15:AC:C1:51:B2:19:FF:F5:5A:C3:76:CD:23:94:AB:D2:7C:93:CF X509v3 Authority Key Identifier: keyid:4A:68:8B:72:A8:04:A4:26:A9:09:6E:CA:60:10:5A:4D:83:1C:5F:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/faa6a67d-cba3-427b-9055-5f528f2d232f/0/4A688B72A804A426A9096ECA60105A4D831C5FA8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A688B72A804A426A9096ECA60105A4D831C5FA8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/faa6a67d-cba3-427b-9055-5f528f2d232f/0/4A688B72A804A426A9096ECA60105A4D831C5FA8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:86:10:e7:85:b7:7a:07:16:96:83:fb:4f:ab:d9:5a:87:ce: b1:58:9a:8d:ff:9a:ba:2d:72:54:52:22:60:65:cb:27:76:49: 86:aa:df:ab:08:ae:6a:6d:20:10:2e:12:13:4c:e6:7e:02:4f: f0:93:e8:9a:78:76:0d:c7:d4:26:35:81:d2:be:60:08:00:e7: f4:4f:05:e4:37:0e:20:a6:7a:bf:eb:70:ed:01:8b:a2:1a:ed: 31:89:06:9f:4b:b2:6c:0b:ac:ca:01:d6:01:46:0c:26:97:5d: bc:8a:1c:3f:a8:93:bf:76:65:0c:0d:2a:54:28:9c:84:70:21: 1f:62:7f:d2:08:1a:da:7a:a7:45:c9:a9:56:38:42:02:e1:fb: ed:6f:ac:06:c2:e8:1c:45:43:2a:91:1b:10:8a:b8:62:68:56: 52:bb:07:e3:ce:87:07:51:d8:0d:35:fa:f8:5f:7c:44:e3:a8: 49:15:e4:d5:05:9d:9a:c0:db:9c:bb:3e:72:1f:4b:5c:98:00: cc:0f:d5:00:d6:4e:db:24:06:db:de:fc:ff:9d:2f:1a:f5:a0: 79:d7:4d:d6:3e:c2:26:5a:ed:b2:bb:26:0a:a2:53:90:ce:c0: 52:44:4e:8d:87:02:85:51:56:7a:5a:46:46:c6:c2:a0:7e:9f: 85:bd:db:c6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcfmhsOWfxnQn1wXxdCh6h6MpYzgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEE2ODhCNzJBODA0QTQyNkE5MDk2RUNBNjAxMDVBNEQ4 MzFDNUZBODAeFw0yNTA5MDUwNjU2NDBaFw0yNTA5MDgxMTM1NDBaMDMxMTAvBgNV BAMTKDhEMTVBQ0MxNTFCMjE5RkZGNTVBQzM3NkNEMjM5NEFCRDI3QzkzQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtjmrITbpoKpRrfD2C1zYXNk4O e5MEjDgSQgolYkX2JoiIMn0VC4419zQ0O5mRW7HIQFDY39bl6in4rOQBSyI5oDgj /ristfWAqwPgY0aFkaqpBlrHswxivIdUZMb8m79N5kYhfPVMtM25pXVzb/e42yWN pFZdebj4ttAnNCw+hvlhOvSuEEZmih0lhazwuTDce7lBhsnvt45dlHtaScceKIWo jy8xDvRkvlDRUq8Vqk2O9iEB+RTziKJdJ0lAONMf33HzsDuHlZ4EJIQURWnGXzkT GTNoYZHMibNc+h5oZL9zDc6GhcYLNH0buJ29vvbrc8c9QQF4uize02YniZF9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjRWswVGyGf/1WsN2zSOUq9J8k88wHwYDVR0j BBgwFoAUSmiLcqgEpCapCW7KYBBaTYMcX6gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YWE2YTY3ZC1jYmEzLTQyN2ItOTA1NS01ZjUyOGYyZDIzMmYvMC80QTY4OEI3MkE4 MDRBNDI2QTkwOTZFQ0E2MDEwNUE0RDgzMUM1RkE4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEE2ODhCNzJBODA0QTQyNkE5MDk2RUNBNjAxMDVBNEQ4MzFD NUZBOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmFhNmE2N2QtY2JhMy00MjdiLTkw NTUtNWY1MjhmMmQyMzJmLzAvNEE2ODhCNzJBODA0QTQyNkE5MDk2RUNBNjAxMDVB NEQ4MzFDNUZBOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAKGEOeFt3oHFpaD+0+r2VqHzrFYmo3/mrot clRSImBlyyd2SYaq36sIrmptIBAuEhNM5n4CT/CT6Jp4dg3H1CY1gdK+YAgA5/RP BeQ3DiCmer/rcO0Bi6Ia7TGJBp9LsmwLrMoB1gFGDCaXXbyKHD+ok792ZQwNKlQo nIRwIR9if9IIGtp6p0XJqVY4QgLh++1vrAbC6BxFQyqRGxCKuGJoVlK7B+POhwdR 2A01+vhffETjqEkV5NUFnZrA25y7PnIfS1yYAMwP1QDWTtskBtve/P+dLxr1oHnX TdY+wiZa7bK7JgqiU5DOwFJETo2HAoVRVnpaRkbGwqB+n4W928Y= -----END CERTIFICATE-----Generated at Fri Sep 5 10:34:33 2025 by rpki-client