$ rpki-client -vvf repo-rpki.idnic.net/repo/24d108f7-08b2-409f-8a70-a9c67ae5ed22/0/4FA812FE6A4A85F790CB2740EF08836883716912.mft File: 4FA812FE6A4A85F790CB2740EF08836883716912.mft (raw, json) Hash identifier: PHk/ib6FGBDDf7brQslKTeJUvS3/Q6f4hq/ibzw1s9M= Subject key identifier: FE:7F:94:18:BE:F9:C4:30:04:0C:BB:E3:FC:BC:6F:32:CD:C3:5B:94 Authority key identifier: 4F:A8:12:FE:6A:4A:85:F7:90:CB:27:40:EF:08:83:68:83:71:69:12 Certificate issuer: /CN=4FA812FE6A4A85F790CB2740EF08836883716912 Certificate serial: 26FE7CB873674E5813ECCA2003EBB43B943A40A9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4FA812FE6A4A85F790CB2740EF08836883716912.cer Subject info access: rsync://repo-rpki.idnic.net/repo/24d108f7-08b2-409f-8a70-a9c67ae5ed22/0/4FA812FE6A4A85F790CB2740EF08836883716912.mft Manifest number: 04C4 Signing time: Sat 09 Aug 2025 06:20:49 +0000 Manifest this update: Sat 09 Aug 2025 06:15:49 +0000 Manifest next update: Tue 12 Aug 2025 13:35:49 +0000 Files and hashes: 1: 3137352e3130362e31362e302f32322d3234203d3e20313331373637.roa (hash: FSa5jhvEvK/r9qXQQGlnZIm8LVRjHW9YNMDzzN5f0xI=) 2: 323430303a386238303a3a2f33322d3332203d3e20313331373637.roa (hash: WzhaKVVHhW/0GGZkiM6FBwtbr9n3QYlgPERNMN1x09w=) 3: 4FA812FE6A4A85F790CB2740EF08836883716912.crl (hash: haFtroT0OGNCjsExW7qcMShBQk8qsLi9iM7gih3w/z8=) 4: 3130332e39302e3139362e302f32322d3234203d3e20313331373637.roa (hash: 0If+6/mMOFFyP2FqyKGK3txMDLzFU3f4sqXMr4WKhzY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/24d108f7-08b2-409f-8a70-a9c67ae5ed22/0/4FA812FE6A4A85F790CB2740EF08836883716912.crl rsync://repo-rpki.idnic.net/repo/24d108f7-08b2-409f-8a70-a9c67ae5ed22/0/4FA812FE6A4A85F790CB2740EF08836883716912.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4FA812FE6A4A85F790CB2740EF08836883716912.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 13:35:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:fe:7c:b8:73:67:4e:58:13:ec:ca:20:03:eb:b4:3b:94:3a:40:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4FA812FE6A4A85F790CB2740EF08836883716912 Validity Not Before: Aug 9 06:15:49 2025 GMT Not After : Aug 12 13:35:49 2025 GMT Subject: CN=FE7F9418BEF9C430040CBBE3FCBC6F32CDC35B94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:12:01:ab:33:7c:18:67:15:8f:96:9c:3b:c4: 91:a6:28:4b:cb:ef:a2:81:78:37:c8:bc:fe:a3:6f: 2c:8e:83:2f:a3:ed:aa:85:96:a6:3d:97:6a:69:3b: 9f:51:6b:9f:0e:27:2a:16:88:15:19:53:13:fe:e8: 69:93:a6:9a:a7:05:8a:13:d9:29:45:37:15:c7:b6: f6:49:5f:61:77:5f:59:e8:85:92:a1:cf:92:ce:ad: aa:35:92:0f:45:16:02:d5:f5:09:c4:a0:53:57:24: 2f:8d:d5:ee:76:2b:af:e6:f1:4f:04:6a:25:88:e7: bd:5c:b7:e7:e4:df:5a:41:58:7b:c9:e6:1d:39:8f: 2d:41:ed:ac:ed:ea:8b:e4:c1:75:89:c1:4c:47:1c: 59:e7:75:f7:5d:8c:f3:46:8b:ea:a4:04:73:d8:4e: 62:f2:b2:ce:56:96:26:d6:8f:d9:11:bb:70:f1:36: fa:c3:5b:df:09:2d:22:7d:6e:0b:d5:6c:d2:ee:dd: 76:98:41:5b:54:95:fc:f8:6b:fb:80:d1:7a:67:21: 31:db:94:89:0f:40:27:82:50:01:99:ca:22:d5:39: 42:ba:6e:b8:46:a4:b2:a3:75:15:96:a8:31:cb:02: 5f:b5:1e:2c:3a:5b:13:18:02:a7:b0:31:77:23:67: ab:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:7F:94:18:BE:F9:C4:30:04:0C:BB:E3:FC:BC:6F:32:CD:C3:5B:94 X509v3 Authority Key Identifier: keyid:4F:A8:12:FE:6A:4A:85:F7:90:CB:27:40:EF:08:83:68:83:71:69:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/24d108f7-08b2-409f-8a70-a9c67ae5ed22/0/4FA812FE6A4A85F790CB2740EF08836883716912.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4FA812FE6A4A85F790CB2740EF08836883716912.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/24d108f7-08b2-409f-8a70-a9c67ae5ed22/0/4FA812FE6A4A85F790CB2740EF08836883716912.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:32:14:72:a1:66:0b:1c:1d:23:8b:f3:58:ba:75:ad:6e:05: 78:5c:9b:d5:b1:fd:77:c5:1e:2b:74:13:0d:61:0e:ff:af:c4: 83:a7:84:64:f9:98:71:10:e6:30:13:42:a0:64:62:37:19:48: 7f:93:39:bc:6a:c0:b3:bc:7d:b1:7c:06:6d:1b:fa:07:da:e2: 69:8c:f3:3b:5d:15:fe:57:24:41:bf:6d:da:e6:91:4d:f6:b0: 2c:b9:df:0a:36:d2:ad:39:99:db:28:ed:6a:05:d0:26:13:b5: 6d:65:ef:ab:29:d8:5a:3f:a6:58:5a:a9:a3:c2:c9:bb:e5:50: 9a:53:a5:d7:6a:79:52:ba:fe:16:f7:85:71:92:46:89:67:2d: b2:0d:68:0a:5e:04:34:67:45:4d:b4:eb:ec:6f:9d:89:63:71: de:3f:8a:33:ed:65:06:94:03:e0:5c:14:c7:59:15:79:23:f9: 54:b0:00:38:1b:87:40:47:e2:51:3b:42:46:2e:ca:15:fb:10: d6:ae:fe:c1:13:00:a9:c1:2c:44:9e:0e:56:25:1a:21:b1:4b: 48:d7:72:25:19:c0:1b:4b:29:57:cc:87:87:cf:fe:f7:8b:31: 14:0a:0f:03:7f:e8:84:4c:a1:57:49:6c:db:1f:70:e5:25:d8: 1a:c2:a6:af -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJv58uHNnTlgT7MogA+u0O5Q6QKkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEZBODEyRkU2QTRBODVGNzkwQ0IyNzQwRUYwODgzNjg4 MzcxNjkxMjAeFw0yNTA4MDkwNjE1NDlaFw0yNTA4MTIxMzM1NDlaMDMxMTAvBgNV BAMTKEZFN0Y5NDE4QkVGOUM0MzAwNDBDQkJFM0ZDQkM2RjMyQ0RDMzVCOTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqEgGrM3wYZxWPlpw7xJGmKEvL 76KBeDfIvP6jbyyOgy+j7aqFlqY9l2ppO59Ra58OJyoWiBUZUxP+6GmTppqnBYoT 2SlFNxXHtvZJX2F3X1nohZKhz5LOrao1kg9FFgLV9QnEoFNXJC+N1e52K6/m8U8E aiWI571ct+fk31pBWHvJ5h05jy1B7azt6ovkwXWJwUxHHFnndfddjPNGi+qkBHPY TmLyss5WlibWj9kRu3DxNvrDW98JLSJ9bgvVbNLu3XaYQVtUlfz4a/uA0XpnITHb lIkPQCeCUAGZyiLVOUK6brhGpLKjdRWWqDHLAl+1Hiw6WxMYAqewMXcjZ6sPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/n+UGL75xDAEDLvj/LxvMs3DW5QwHwYDVR0j BBgwFoAUT6gS/mpKhfeQyydA7wiDaINxaRIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NGQxMDhmNy0wOGIyLTQwOWYtOGE3MC1hOWM2N2FlNWVkMjIvMC80RkE4MTJGRTZB NEE4NUY3OTBDQjI3NDBFRjA4ODM2ODgzNzE2OTEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEZBODEyRkU2QTRBODVGNzkwQ0IyNzQwRUYwODgzNjg4Mzcx NjkxMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjRkMTA4ZjctMDhiMi00MDlmLThh NzAtYTljNjdhZTVlZDIyLzAvNEZBODEyRkU2QTRBODVGNzkwQ0IyNzQwRUYwODgz Njg4MzcxNjkxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG4yFHKhZgscHSOL81i6da1uBXhcm9Wx/XfF Hit0Ew1hDv+vxIOnhGT5mHEQ5jATQqBkYjcZSH+TObxqwLO8fbF8Bm0b+gfa4mmM 8ztdFf5XJEG/bdrmkU32sCy53wo20q05mdso7WoF0CYTtW1l76sp2Fo/plhaqaPC ybvlUJpTpddqeVK6/hb3hXGSRolnLbINaApeBDRnRU206+xvnYljcd4/ijPtZQaU A+BcFMdZFXkj+VSwADgbh0BH4lE7QkYuyhX7ENau/sETAKnBLESeDlYlGiGxS0jX ciUZwBtLKVfMh4fP/veLMRQKDwN/6IRMoVdJbNsfcOUl2BrCpq8= -----END CERTIFICATE-----Generated at Sun Aug 10 15:57:12 2025 by rpki-client