$ rpki-client -vvf repo-rpki.idnic.net/repo/12c511be-67a2-44c9-b182-a911ba95be00/0/4412C369832E86CF255C7255EB1ECA7938910246.mft File: 4412C369832E86CF255C7255EB1ECA7938910246.mft (raw, json) Hash identifier: 7QLCP7KzZ4rjmH1EUPE+8YtCOaYMB4vGDevPcXFnTcs= Subject key identifier: A6:B4:D3:C6:B0:7F:F5:B1:FE:1B:1A:B1:D5:06:D9:BB:9A:C9:C1:52 Authority key identifier: 44:12:C3:69:83:2E:86:CF:25:5C:72:55:EB:1E:CA:79:38:91:02:46 Certificate issuer: /CN=4412C369832E86CF255C7255EB1ECA7938910246 Certificate serial: 653956EFF2F6B4B75E2D5BDFF046E91699C14069 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4412C369832E86CF255C7255EB1ECA7938910246.cer Subject info access: rsync://repo-rpki.idnic.net/repo/12c511be-67a2-44c9-b182-a911ba95be00/0/4412C369832E86CF255C7255EB1ECA7938910246.mft Manifest number: 048A Signing time: Wed 06 Aug 2025 04:10:54 +0000 Manifest this update: Wed 06 Aug 2025 04:05:54 +0000 Manifest next update: Sat 09 Aug 2025 14:46:54 +0000 Files and hashes: 1: 3130332e3135382e3132312e302f32342d3234203d3e20313431313237.roa (hash: BsPjaPAJfoOsDEE1I3aoHNDcatuZ5kuXKVlMx6806B8=) 2: 323030313a6466353a353238303a3a2f34382d3438203d3e20313431313237.roa (hash: ytsbJoowjejam8im/CXHpxBx0NQjILkSC74yHsn7Jos=) 3: 4412C369832E86CF255C7255EB1ECA7938910246.crl (hash: 8M8EVKKawhe4MqR1hYP2aRKoTZbTm2tHHAK0lxli9XM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/12c511be-67a2-44c9-b182-a911ba95be00/0/4412C369832E86CF255C7255EB1ECA7938910246.crl rsync://repo-rpki.idnic.net/repo/12c511be-67a2-44c9-b182-a911ba95be00/0/4412C369832E86CF255C7255EB1ECA7938910246.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4412C369832E86CF255C7255EB1ECA7938910246.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 14:46:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:39:56:ef:f2:f6:b4:b7:5e:2d:5b:df:f0:46:e9:16:99:c1:40:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4412C369832E86CF255C7255EB1ECA7938910246 Validity Not Before: Aug 6 04:05:54 2025 GMT Not After : Aug 9 14:46:54 2025 GMT Subject: CN=A6B4D3C6B07FF5B1FE1B1AB1D506D9BB9AC9C152 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:5f:a0:29:7f:41:4a:95:6b:66:66:b1:4a:f6: 1a:cc:f8:ec:99:83:75:b0:a7:3e:cd:17:12:02:b6: 2b:d7:78:83:fd:f0:d9:61:27:e2:b7:62:4b:da:9b: 0c:16:54:1c:08:cc:35:11:a0:c9:5e:dd:0e:4b:ea: 15:c2:9f:20:64:8d:ce:1d:b7:61:a6:a8:ec:91:d4: 07:be:4a:5c:22:cb:8c:39:19:f5:85:15:96:d7:4c: fb:40:7a:01:13:1d:8a:01:87:8c:66:7a:98:70:58: 58:5f:42:5f:39:e0:b7:86:af:d7:2c:9f:fe:9c:08: df:35:47:4b:38:ac:93:16:40:11:07:8e:8c:5d:8a: 8e:55:2f:1a:37:8a:c7:ce:cd:2c:a4:c7:79:65:f5: a3:2a:24:61:ad:73:33:32:2f:34:04:75:af:5a:f5: 6e:b4:e7:94:36:65:9e:ae:ad:e0:aa:75:ea:1c:9e: 5a:35:91:7e:de:e0:0c:58:85:35:ca:8c:86:d3:84: 9a:98:30:af:22:48:08:11:fa:c8:27:74:67:ad:38: 7b:14:9d:2b:7f:56:3d:5f:99:53:7b:72:82:e3:4e: c3:78:83:91:e7:a1:90:ef:4b:3f:bd:94:63:d9:91: 7f:c6:2c:f0:bb:93:c6:00:eb:7c:3e:c0:d1:f2:9f: 63:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:B4:D3:C6:B0:7F:F5:B1:FE:1B:1A:B1:D5:06:D9:BB:9A:C9:C1:52 X509v3 Authority Key Identifier: keyid:44:12:C3:69:83:2E:86:CF:25:5C:72:55:EB:1E:CA:79:38:91:02:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/12c511be-67a2-44c9-b182-a911ba95be00/0/4412C369832E86CF255C7255EB1ECA7938910246.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4412C369832E86CF255C7255EB1ECA7938910246.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/12c511be-67a2-44c9-b182-a911ba95be00/0/4412C369832E86CF255C7255EB1ECA7938910246.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:61:9d:81:a8:65:c3:0a:d0:a7:db:f9:01:3d:c7:ca:fd:65: e6:dd:d2:18:ab:f6:43:85:61:3b:19:3e:f2:b2:2c:be:6c:c9: cf:16:d5:67:fd:41:97:00:29:2f:7f:0c:f4:53:d7:6d:db:68: 1c:52:ff:49:d6:27:02:0a:17:a9:e5:1a:12:ab:7a:18:8d:4c: 09:8b:49:df:7c:d7:15:a8:78:85:3d:26:83:2f:94:39:e7:d9: 13:df:a4:93:b1:81:63:98:b9:26:6a:a7:e4:f4:65:f5:58:62: 55:c7:b1:0b:72:c5:8e:62:d2:5c:38:b0:83:08:cf:0f:e9:b8: ca:b3:29:e3:9f:be:1e:57:1b:6b:0d:dc:5c:10:05:a0:f8:ff: 90:be:5f:e9:e9:b2:1b:02:ef:3a:4a:79:20:2c:43:7b:91:58: 49:5c:ce:32:14:cd:27:f7:2d:d1:f3:d0:aa:de:57:ee:0b:ed: 2e:6c:a8:a1:bd:4f:a7:1d:d7:5e:bf:46:5a:b4:4e:8b:e0:40: 73:f3:fd:ce:e0:56:f3:74:e2:ca:a0:0d:50:d9:b3:61:ab:14: 35:bf:9a:70:6c:34:42:07:a7:34:12:73:cf:fc:01:b5:44:5e: 98:91:48:4f:97:5b:46:ab:6a:4e:64:cf:6a:ea:68:93:d6:93: dc:66:ef:6c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZTlW7/L2tLdeLVvf8EbpFpnBQGkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDQxMkMzNjk4MzJFODZDRjI1NUM3MjU1RUIxRUNBNzkz ODkxMDI0NjAeFw0yNTA4MDYwNDA1NTRaFw0yNTA4MDkxNDQ2NTRaMDMxMTAvBgNV BAMTKEE2QjREM0M2QjA3RkY1QjFGRTFCMUFCMUQ1MDZEOUJCOUFDOUMxNTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOX6Apf0FKlWtmZrFK9hrM+OyZ g3Wwpz7NFxICtivXeIP98NlhJ+K3YkvamwwWVBwIzDURoMle3Q5L6hXCnyBkjc4d t2GmqOyR1Ae+Slwiy4w5GfWFFZbXTPtAegETHYoBh4xmephwWFhfQl854LeGr9cs n/6cCN81R0s4rJMWQBEHjoxdio5VLxo3isfOzSykx3ll9aMqJGGtczMyLzQEda9a 9W6055Q2ZZ6ureCqdeocnlo1kX7e4AxYhTXKjIbThJqYMK8iSAgR+sgndGetOHsU nSt/Vj1fmVN7coLjTsN4g5HnoZDvSz+9lGPZkX/GLPC7k8YA63w+wNHyn2MrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUprTTxrB/9bH+Gxqx1QbZu5rJwVIwHwYDVR0j BBgwFoAURBLDaYMuhs8lXHJV6x7KeTiRAkYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MmM1MTFiZS02N2EyLTQ0YzktYjE4Mi1hOTExYmE5NWJlMDAvMC80NDEyQzM2OTgz MkU4NkNGMjU1QzcyNTVFQjFFQ0E3OTM4OTEwMjQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDQxMkMzNjk4MzJFODZDRjI1NUM3MjU1RUIxRUNBNzkzODkx MDI0Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTJjNTExYmUtNjdhMi00NGM5LWIx ODItYTkxMWJhOTViZTAwLzAvNDQxMkMzNjk4MzJFODZDRjI1NUM3MjU1RUIxRUNB NzkzODkxMDI0Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC9hnYGoZcMK0Kfb+QE9x8r9Zebd0hir9kOF YTsZPvKyLL5syc8W1Wf9QZcAKS9/DPRT123baBxS/0nWJwIKF6nlGhKrehiNTAmL Sd981xWoeIU9JoMvlDnn2RPfpJOxgWOYuSZqp+T0ZfVYYlXHsQtyxY5i0lw4sIMI zw/puMqzKeOfvh5XG2sN3FwQBaD4/5C+X+npshsC7zpKeSAsQ3uRWElczjIUzSf3 LdHz0KreV+4L7S5sqKG9T6cd116/Rlq0TovgQHPz/c7gVvN04sqgDVDZs2GrFDW/ mnBsNEIHpzQSc8/8AbVEXpiRSE+XW0arak5kz2rqaJPWk9xm72w= -----END CERTIFICATE-----Generated at Thu Aug 7 11:10:04 2025 by rpki-client