$ rpki-client -vvf repo-rpki.idnic.net/repo/fd3a2fdf-bcba-4757-b366-e1a0ad2d374a/0/4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.mft File: 4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.mft (raw, json) Hash identifier: G9GO9Z4yC+uS+IAETM5+lO95sYLr8DffQ2hYDnIwrBU= Subject key identifier: 73:6E:0E:4E:52:26:03:28:CF:10:73:45:A3:C2:2D:A1:31:69:36:95 Authority key identifier: 4A:37:76:4C:C8:0D:1B:8A:68:19:E0:F0:F1:45:46:6E:0B:E5:2C:BD Certificate issuer: /CN=4A37764CC80D1B8A6819E0F0F145466E0BE52CBD Certificate serial: 0B3DB1A5181B07B8BA4F9EDA0387878CB63C4073 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fd3a2fdf-bcba-4757-b366-e1a0ad2d374a/0/4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.mft Manifest number: D5 Signing time: Wed 23 Jul 2025 04:41:37 +0000 Manifest this update: Wed 23 Jul 2025 04:36:37 +0000 Manifest next update: Sat 26 Jul 2025 08:44:37 +0000 Files and hashes: 1: 4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.crl (hash: XAOw1Vt67UlsnkaciNKCLC8a7L+WCfWSPBJ5YJ3Fts0=) 2: 3135372e31302e36332e302f32342d3234203d3e20313532303835.roa (hash: 9mpAVpAO+aHJhHpBlGcLDx3eGU5On+hoBdAGOhixT1Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fd3a2fdf-bcba-4757-b366-e1a0ad2d374a/0/4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.crl rsync://repo-rpki.idnic.net/repo/fd3a2fdf-bcba-4757-b366-e1a0ad2d374a/0/4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 08:44:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:3d:b1:a5:18:1b:07:b8:ba:4f:9e:da:03:87:87:8c:b6:3c:40:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A37764CC80D1B8A6819E0F0F145466E0BE52CBD Validity Not Before: Jul 23 04:36:37 2025 GMT Not After : Jul 26 08:44:37 2025 GMT Subject: CN=736E0E4E52260328CF107345A3C22DA131693695 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:c3:c7:7a:d9:c5:ee:3b:3b:9e:ca:03:09:22: 5d:13:bd:30:e8:19:f7:c6:07:2e:82:6d:5e:c9:9a: 91:9b:f7:c7:43:a7:44:33:d1:c7:36:cb:f9:b2:29: 0b:df:4c:6c:f6:d9:0c:cb:08:a8:98:fd:7e:4e:20: 5f:e4:dd:49:92:6d:d1:5d:16:be:17:02:85:6a:27: 81:1b:95:24:64:c4:b8:ea:f1:85:8a:3c:a0:5f:60: a5:d7:8a:08:71:98:f0:f4:64:fd:6e:e4:23:57:db: bd:e2:cd:41:7d:60:82:c6:ef:a7:ad:02:9c:af:52: db:25:96:cd:f5:3c:71:08:f2:8e:22:5c:af:34:a8: 94:70:45:26:1b:5f:c9:65:75:fe:6d:9c:20:57:d2: fd:7d:a5:88:64:f2:c0:29:d5:6d:61:0c:e8:27:61: e7:33:2c:d8:e7:d8:c5:6d:6d:8b:bd:5b:22:8d:80: 59:13:b5:43:e8:eb:ce:de:dc:33:79:d0:ad:66:30: 61:27:ac:6c:6f:48:83:13:58:ad:5d:77:65:3c:23: 63:3e:cc:4c:31:86:06:fc:ce:6e:07:48:da:23:3b: 96:6f:7d:41:c5:87:0c:b2:38:02:5b:40:f6:34:e6: e6:3d:1c:a7:1b:d1:e2:53:15:0e:a9:c9:1a:6c:23: 16:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:6E:0E:4E:52:26:03:28:CF:10:73:45:A3:C2:2D:A1:31:69:36:95 X509v3 Authority Key Identifier: keyid:4A:37:76:4C:C8:0D:1B:8A:68:19:E0:F0:F1:45:46:6E:0B:E5:2C:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fd3a2fdf-bcba-4757-b366-e1a0ad2d374a/0/4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fd3a2fdf-bcba-4757-b366-e1a0ad2d374a/0/4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:60:fd:91:0d:bd:a3:49:ad:5d:4d:12:d2:34:ae:3a:ea:9d: c0:b5:aa:a5:5d:9f:a3:c7:6d:b5:7f:02:04:72:e7:e1:e8:84: 91:12:e3:6e:46:30:40:7c:f9:b9:78:57:81:4f:73:32:f2:9b: 7d:81:08:e6:46:ea:5d:0b:93:44:a2:b1:52:11:02:8d:9f:d4: 16:f5:65:e5:e0:91:3a:2a:b1:6c:f5:a9:ff:15:98:14:a3:c7: 28:67:8c:ef:c0:b6:61:b0:99:38:28:b2:ce:f8:0b:4f:19:5d: 02:16:e5:95:17:00:fa:d0:7f:44:a1:b5:41:72:e5:8c:d3:16: 6f:8b:ac:19:89:01:5d:d9:fd:58:2a:91:d2:a3:22:3f:67:7d: 0e:90:90:36:37:c1:da:95:2a:c9:dd:3c:7a:c7:25:6b:ba:94: 7d:ba:ce:8d:54:a7:4c:74:4b:d0:32:67:f3:b8:c9:fb:30:0e: 66:c6:ad:f6:f8:7f:cd:e6:91:30:35:f7:99:0d:3c:30:1c:ba: e1:97:f1:34:30:cc:b5:5d:55:32:79:69:b6:1d:8f:09:45:32: 55:ce:b9:76:0f:59:6f:4f:af:ea:a3:e2:f5:a4:fd:c6:c3:77: f5:f1:b0:a6:30:fe:15:3d:2b:2d:de:96:3b:66:1d:bf:9f:b3: de:f3:6a:93 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCz2xpRgbB7i6T57aA4eHjLY8QHMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEEzNzc2NENDODBEMUI4QTY4MTlFMEYwRjE0NTQ2NkUw QkU1MkNCRDAeFw0yNTA3MjMwNDM2MzdaFw0yNTA3MjYwODQ0MzdaMDMxMTAvBgNV BAMTKDczNkUwRTRFNTIyNjAzMjhDRjEwNzM0NUEzQzIyREExMzE2OTM2OTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlw8d62cXuOzueygMJIl0TvTDo GffGBy6CbV7JmpGb98dDp0Qz0cc2y/myKQvfTGz22QzLCKiY/X5OIF/k3UmSbdFd Fr4XAoVqJ4EblSRkxLjq8YWKPKBfYKXXighxmPD0ZP1u5CNX273izUF9YILG76et ApyvUtslls31PHEI8o4iXK80qJRwRSYbX8lldf5tnCBX0v19pYhk8sAp1W1hDOgn YeczLNjn2MVtbYu9WyKNgFkTtUPo687e3DN50K1mMGEnrGxvSIMTWK1dd2U8I2M+ zEwxhgb8zm4HSNojO5ZvfUHFhwyyOAJbQPY05uY9HKcb0eJTFQ6pyRpsIxZTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUc24OTlImAyjPEHNFo8ItoTFpNpUwHwYDVR0j BBgwFoAUSjd2TMgNG4poGeDw8UVGbgvlLL0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZDNhMmZkZi1iY2JhLTQ3NTctYjM2Ni1lMWEwYWQyZDM3NGEvMC80QTM3NzY0Q0M4 MEQxQjhBNjgxOUUwRjBGMTQ1NDY2RTBCRTUyQ0JELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNEEzNzc2NENDODBEMUI4QTY4MTlFMEYwRjE0NTQ2NkUwQkU1 MkNCRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmQzYTJmZGYtYmNiYS00NzU3LWIz NjYtZTFhMGFkMmQzNzRhLzAvNEEzNzc2NENDODBEMUI4QTY4MTlFMEYwRjE0NTQ2 NkUwQkU1MkNCRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEBg/ZENvaNJrV1NEtI0rjrqncC1qqVdn6PH bbV/AgRy5+HohJES425GMEB8+bl4V4FPczLym32BCOZG6l0Lk0SisVIRAo2f1Bb1 ZeXgkToqsWz1qf8VmBSjxyhnjO/AtmGwmTgoss74C08ZXQIW5ZUXAPrQf0ShtUFy 5YzTFm+LrBmJAV3Z/VgqkdKjIj9nfQ6QkDY3wdqVKsndPHrHJWu6lH26zo1Up0x0 S9AyZ/O4yfswDmbGrfb4f83mkTA195kNPDAcuuGX8TQwzLVdVTJ5abYdjwlFMlXO uXYPWW9Pr+qj4vWk/cbDd/XxsKYw/hU9Ky3eljtmHb+fs97zapM= -----END CERTIFICATE-----Generated at Thu Jul 24 17:16:15 2025 by rpki-client