$ rpki-client -vvf repo-rpki.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/4A4CC1D625A4519B23D73717C879F10A6173AEAB.mft File: 4A4CC1D625A4519B23D73717C879F10A6173AEAB.mft (raw, json) Hash identifier: 4CFdoV/hlsCIW7K2T15mdqeAo1p9drzLQQULHLVAkFQ= Subject key identifier: 4A:22:DD:47:65:35:25:C3:86:2B:4C:F6:47:95:A3:39:D1:30:F9:43 Authority key identifier: 4A:4C:C1:D6:25:A4:51:9B:23:D7:37:17:C8:79:F1:0A:61:73:AE:AB Certificate issuer: /CN=4A4CC1D625A4519B23D73717C879F10A6173AEAB Certificate serial: 2580C5512AA3EF9B17E39816A2FF85CF58F72F0F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A4CC1D625A4519B23D73717C879F10A6173AEAB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/4A4CC1D625A4519B23D73717C879F10A6173AEAB.mft Manifest number: 02A7 Signing time: Tue 05 Aug 2025 15:31:33 +0000 Manifest this update: Tue 05 Aug 2025 15:26:33 +0000 Manifest next update: Fri 08 Aug 2025 19:00:33 +0000 Files and hashes: 1: 4A4CC1D625A4519B23D73717C879F10A6173AEAB.crl (hash: jqr8P9WD2YK/wTmtzyQ7sf4+WqskRfnerIGYQOzsY0w=) 2: 3130332e3233332e3130392e302f32342d3234203d3e203633343838.roa (hash: GdSTW/OHYTEI/PWuMmTToeVUXPmcixtoxCsRQug+8zk=) 3: 3130332e3233332e3131302e302f32342d3234203d3e203338373538.roa (hash: XkLmfviGVp2EGPILR+re9nqIYX0YPT0FpVRTvK0kmBs=) 4: 3130332e3233332e3130382e302f32342d3234203d3e203633343838.roa (hash: NTu0pfg5O9FNTQVT/y9O87yuBsSqMNv0sxLjGwJCf2Y=) 5: 3130332e3233332e3131312e302f32342d3234203d3e203633343838.roa (hash: z/YOZWWGc41LH9oZ4KGtThI9u3npxHOn37nVJl/FSQI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/4A4CC1D625A4519B23D73717C879F10A6173AEAB.crl rsync://repo-rpki.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/4A4CC1D625A4519B23D73717C879F10A6173AEAB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A4CC1D625A4519B23D73717C879F10A6173AEAB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 19:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:80:c5:51:2a:a3:ef:9b:17:e3:98:16:a2:ff:85:cf:58:f7:2f:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A4CC1D625A4519B23D73717C879F10A6173AEAB Validity Not Before: Aug 5 15:26:33 2025 GMT Not After : Aug 8 19:00:33 2025 GMT Subject: CN=4A22DD47653525C3862B4CF64795A339D130F943 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:fb:e3:61:e9:8b:49:ab:e0:13:b5:1b:6b:7f: cd:c9:81:aa:1e:32:57:36:75:7b:c8:30:af:d5:3e: cb:8f:90:2d:67:30:e3:31:f4:3d:97:5f:a6:c3:db: 85:fb:82:c2:fb:d5:8a:77:00:09:d8:e5:92:06:2b: fa:7d:89:2c:30:ff:6d:ed:8e:e6:ea:81:7e:0a:a0: 99:9e:3b:5a:6f:76:1b:5d:65:31:97:fb:03:26:75: a2:39:29:91:e0:ae:e6:44:54:e6:de:4e:12:36:ee: d2:26:6b:d3:f6:a8:e0:98:7a:f8:2f:bc:14:76:1f: b8:e2:7b:35:b8:d7:5f:1e:cd:1d:03:9f:e1:92:a4: 9c:a7:9d:a3:78:8b:0d:26:62:29:89:e2:04:2d:38: 95:41:05:48:2a:15:18:13:b5:97:0c:44:4f:aa:0c: 1d:16:eb:f5:64:a5:d1:4d:3e:4b:c0:2e:23:a2:8d: 1b:3c:bb:6c:c7:56:da:84:a5:4c:3f:75:5d:68:e6: 6d:f5:94:11:43:33:c9:b6:d4:86:12:a1:bc:ce:f0: 19:0f:a2:84:79:b8:c8:6e:bc:3e:14:71:a0:07:cb: 36:a6:cc:91:bd:eb:d4:3f:4f:de:e7:69:c7:c0:ff: cc:05:26:f7:e6:aa:37:c8:d8:b5:37:a4:0f:22:32: f1:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:22:DD:47:65:35:25:C3:86:2B:4C:F6:47:95:A3:39:D1:30:F9:43 X509v3 Authority Key Identifier: keyid:4A:4C:C1:D6:25:A4:51:9B:23:D7:37:17:C8:79:F1:0A:61:73:AE:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/4A4CC1D625A4519B23D73717C879F10A6173AEAB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A4CC1D625A4519B23D73717C879F10A6173AEAB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/4A4CC1D625A4519B23D73717C879F10A6173AEAB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:9d:94:dc:bf:dc:b9:79:da:88:aa:55:98:83:12:57:bc:51: 2f:de:6d:00:9e:d7:0f:04:7a:b1:11:23:7b:9c:f3:98:e5:5e: 99:26:e0:42:74:36:97:5f:7c:7f:9d:d2:dc:d8:cd:0e:c0:cf: 0a:41:e2:4c:1a:04:7a:87:2e:18:40:b3:9f:44:97:4f:d7:f6: 4f:e1:5c:17:2b:e7:53:57:a0:bf:55:8f:f5:16:d5:7f:3d:9d: 2e:bf:8f:35:b9:3d:82:ba:52:f4:36:f8:2d:4d:5a:85:bf:de: 09:2f:60:cf:f1:cf:2b:95:e8:65:0b:d1:92:e5:bf:f3:5b:2c: 00:96:d2:09:06:3c:55:15:79:d9:3c:c4:39:cd:cc:ee:7f:be: 3b:5b:aa:ff:0c:32:34:f5:c0:ee:80:c9:4c:11:eb:58:f1:62: ef:96:7b:8d:06:da:4b:3b:81:4b:a7:bb:47:99:13:30:fd:01: 94:24:ca:f8:9e:b3:4f:a1:f2:46:7c:5c:b8:49:51:18:23:90: aa:be:9a:03:7a:5c:b8:53:e9:38:5c:cf:68:a7:d1:b8:35:84: 69:56:c4:94:6a:f2:93:6e:e3:c2:bf:92:e2:37:14:ca:72:e7: 4e:cc:9c:aa:9c:4a:37:e9:17:0b:3d:6e:b8:c0:1b:17:ab:64: 4f:15:4e:67 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJYDFUSqj75sX45gWov+Fz1j3Lw8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEE0Q0MxRDYyNUE0NTE5QjIzRDczNzE3Qzg3OUYxMEE2 MTczQUVBQjAeFw0yNTA4MDUxNTI2MzNaFw0yNTA4MDgxOTAwMzNaMDMxMTAvBgNV BAMTKDRBMjJERDQ3NjUzNTI1QzM4NjJCNENGNjQ3OTVBMzM5RDEzMEY5NDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCj++Nh6YtJq+ATtRtrf83Jgaoe Mlc2dXvIMK/VPsuPkC1nMOMx9D2XX6bD24X7gsL71Yp3AAnY5ZIGK/p9iSww/23t jubqgX4KoJmeO1pvdhtdZTGX+wMmdaI5KZHgruZEVObeThI27tIma9P2qOCYevgv vBR2H7jiezW4118ezR0Dn+GSpJynnaN4iw0mYimJ4gQtOJVBBUgqFRgTtZcMRE+q DB0W6/VkpdFNPkvALiOijRs8u2zHVtqEpUw/dV1o5m31lBFDM8m21IYSobzO8BkP ooR5uMhuvD4UcaAHyzamzJG969Q/T97nacfA/8wFJvfmqjfI2LU3pA8iMvHXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSiLdR2U1JcOGK0z2R5WjOdEw+UMwHwYDVR0j BBgwFoAUSkzB1iWkUZsj1zcXyHnxCmFzrqswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZWQ0NmY4Mi1jZjExLTRlMzItYjA1MS02YWMzMzRhOTI2MjIvMC80QTRDQzFENjI1 QTQ1MTlCMjNENzM3MTdDODc5RjEwQTYxNzNBRUFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEE0Q0MxRDYyNUE0NTE5QjIzRDczNzE3Qzg3OUYxMEE2MTcz QUVBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWVkNDZmODItY2YxMS00ZTMyLWIw NTEtNmFjMzM0YTkyNjIyLzAvNEE0Q0MxRDYyNUE0NTE5QjIzRDczNzE3Qzg3OUYx MEE2MTczQUVBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFydlNy/3Ll52oiqVZiDEle8US/ebQCe1w8E erERI3uc85jlXpkm4EJ0NpdffH+d0tzYzQ7AzwpB4kwaBHqHLhhAs59El0/X9k/h XBcr51NXoL9Vj/UW1X89nS6/jzW5PYK6UvQ2+C1NWoW/3gkvYM/xzyuV6GUL0ZLl v/NbLACW0gkGPFUVedk8xDnNzO5/vjtbqv8MMjT1wO6AyUwR61jxYu+We40G2ks7 gUunu0eZEzD9AZQkyvies0+h8kZ8XLhJURgjkKq+mgN6XLhT6Thcz2in0bg1hGlW xJRq8pNu48K/kuI3FMpy507MnKqcSjfpFws9brjAGxerZE8VTmc= -----END CERTIFICATE-----Generated at Thu Aug 7 11:08:51 2025 by rpki-client