$ rpki-client -vvf repo-rpki.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.mft File: 4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.mft (raw, json) Hash identifier: SAcE16B84M8kLGkkw2SzNUQbgneq4LzkEHoVNPND9Zg= Subject key identifier: F6:3F:49:A1:DD:D2:0E:0A:EF:40:8D:B7:6A:16:1B:35:EB:61:0A:56 Authority key identifier: 4F:29:04:EA:E6:6A:DD:5D:3A:C5:3C:6A:CC:B9:21:33:B4:26:DF:48 Certificate issuer: /CN=4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48 Certificate serial: 5B87AAF90335B9BA50BC19D7015FC33802540C28 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.cer Subject info access: rsync://repo-rpki.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.mft Manifest number: 04F8 Signing time: Wed 06 Aug 2025 04:02:17 +0000 Manifest this update: Wed 06 Aug 2025 03:57:17 +0000 Manifest next update: Sat 09 Aug 2025 11:22:17 +0000 Files and hashes: 1: 3130332e3134362e3138342e302f32332d3234203d3e20313339393637.roa (hash: RvVL0eKqhvW5Nd9pF2jqsL2iAerie+UOp2Ou6UGubqQ=) 2: 4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.crl (hash: 6ScMWvXll0AwZDV+nswNGH87zVNu5nu3og7zFgg1W3M=) 3: 323430353a396363303a3a2f33322d3438203d3e20313339393637.roa (hash: dqqK2b30QcWDUvsFT2ynFnDCTSvisXhj5I9h/iJg6fA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.crl rsync://repo-rpki.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 11:22:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:87:aa:f9:03:35:b9:ba:50:bc:19:d7:01:5f:c3:38:02:54:0c:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48 Validity Not Before: Aug 6 03:57:17 2025 GMT Not After : Aug 9 11:22:17 2025 GMT Subject: CN=F63F49A1DDD20E0AEF408DB76A161B35EB610A56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b6:7d:46:06:c0:80:fd:80:af:c2:5b:e7:65: 8d:98:ce:42:a0:bb:00:26:76:93:71:0d:59:de:f5: 9e:80:51:75:cb:c3:ff:84:8d:2d:ec:c5:4a:02:1d: 3d:10:50:14:e6:18:3d:b9:bc:33:e2:78:92:db:d9: f7:0b:4d:b4:52:d2:3c:67:26:ec:c8:13:bb:65:84: 65:c7:5f:19:b9:a2:b3:8b:25:5f:17:58:38:ff:43: 53:52:0e:77:3a:56:d4:c1:33:1f:d1:d7:0c:e4:3c: b1:54:3c:41:f9:42:61:5f:5b:05:29:e2:15:c2:1a: 58:f8:06:69:98:e8:3a:31:33:41:14:4f:bb:a4:14: b1:95:a1:7a:ea:af:b4:4c:9c:f6:99:bd:66:d9:b9: b6:2f:4a:ce:94:c0:39:ae:4e:64:4b:36:95:69:97: 2b:5a:30:19:7b:ce:9e:5a:8f:34:bd:49:df:2f:b1: 91:b1:4f:21:38:c1:08:c7:a5:3f:8e:d9:84:cd:88: e9:8c:60:30:8b:a5:f1:df:51:55:92:b4:5f:8d:3b: e9:a1:fb:a2:92:c3:38:6d:62:94:4e:24:19:ca:57: a3:3e:4a:92:07:a1:ba:3c:ab:92:27:28:e2:97:40: a6:5e:66:27:0b:52:3b:ce:ac:bf:ec:3f:71:74:f5: 80:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:3F:49:A1:DD:D2:0E:0A:EF:40:8D:B7:6A:16:1B:35:EB:61:0A:56 X509v3 Authority Key Identifier: keyid:4F:29:04:EA:E6:6A:DD:5D:3A:C5:3C:6A:CC:B9:21:33:B4:26:DF:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:f0:ec:3b:5b:69:9a:f6:08:d3:45:6d:33:59:fa:74:8c:b7: de:b9:e9:1c:12:53:35:0d:98:c8:ec:d4:a8:35:77:14:62:f7: 6f:95:ed:fb:67:ed:90:59:c4:59:d5:97:a8:68:11:69:d2:37: 28:59:b1:f1:a3:3f:64:7e:aa:4f:cc:1b:30:c1:dd:d5:8e:39: 6c:ff:d0:fe:03:f8:e3:0c:1c:db:34:42:b5:35:98:a6:22:48: 03:43:af:ef:7f:22:46:9b:d5:12:8d:d1:c2:0e:54:0d:a0:3c: a4:25:ac:f9:17:c2:a7:53:96:d8:f8:d4:71:4d:9b:d9:18:cb: af:bc:99:54:ec:ee:b6:b2:5e:5a:51:7b:91:0b:2f:49:17:a8: db:ab:96:6d:d4:5b:22:ad:b6:06:94:f5:f7:1d:27:98:88:97: a4:36:8b:4d:3c:85:c4:78:6a:ac:ef:e4:58:85:11:40:08:97: e3:30:11:89:0a:88:e9:50:31:97:fc:4a:57:0b:40:ed:d2:e5: 3a:36:04:fb:1a:df:9a:9e:75:49:e5:91:08:07:6d:25:2e:23: 8c:16:5d:6e:71:fa:79:9d:6a:23:b2:89:2e:9c:79:3a:0d:cc: 1d:7d:cf:2c:6a:a3:96:09:ce:69:da:57:58:59:66:95:8d:4c: d8:f8:d4:b3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW4eq+QM1ubpQvBnXAV/DOAJUDCgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEYyOTA0RUFFNjZBREQ1RDNBQzUzQzZBQ0NCOTIxMzNC NDI2REY0ODAeFw0yNTA4MDYwMzU3MTdaFw0yNTA4MDkxMTIyMTdaMDMxMTAvBgNV BAMTKEY2M0Y0OUExREREMjBFMEFFRjQwOERCNzZBMTYxQjM1RUI2MTBBNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9tn1GBsCA/YCvwlvnZY2YzkKg uwAmdpNxDVne9Z6AUXXLw/+EjS3sxUoCHT0QUBTmGD25vDPieJLb2fcLTbRS0jxn JuzIE7tlhGXHXxm5orOLJV8XWDj/Q1NSDnc6VtTBMx/R1wzkPLFUPEH5QmFfWwUp 4hXCGlj4BmmY6DoxM0EUT7ukFLGVoXrqr7RMnPaZvWbZubYvSs6UwDmuTmRLNpVp lytaMBl7zp5ajzS9Sd8vsZGxTyE4wQjHpT+O2YTNiOmMYDCLpfHfUVWStF+NO+mh +6KSwzhtYpROJBnKV6M+SpIHobo8q5InKOKXQKZeZicLUjvOrL/sP3F09YCFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9j9Jod3SDgrvQI23ahYbNethClYwHwYDVR0j BBgwFoAUTykE6uZq3V06xTxqzLkhM7Qm30gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y OWM1MzI3Zi0xMGZkLTRjZjAtODUxYy0wY2ZjZDNjM2M2OTcvMC80RjI5MDRFQUU2 NkFERDVEM0FDNTNDNkFDQ0I5MjEzM0I0MjZERjQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEYyOTA0RUFFNjZBREQ1RDNBQzUzQzZBQ0NCOTIxMzNCNDI2 REY0OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjljNTMyN2YtMTBmZC00Y2YwLTg1 MWMtMGNmY2QzYzNjNjk3LzAvNEYyOTA0RUFFNjZBREQ1RDNBQzUzQzZBQ0NCOTIx MzNCNDI2REY0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABLw7DtbaZr2CNNFbTNZ+nSMt9656RwSUzUN mMjs1Kg1dxRi92+V7ftn7ZBZxFnVl6hoEWnSNyhZsfGjP2R+qk/MGzDB3dWOOWz/ 0P4D+OMMHNs0QrU1mKYiSANDr+9/Ikab1RKN0cIOVA2gPKQlrPkXwqdTltj41HFN m9kYy6+8mVTs7rayXlpRe5ELL0kXqNurlm3UWyKttgaU9fcdJ5iIl6Q2i008hcR4 aqzv5FiFEUAIl+MwEYkKiOlQMZf8SlcLQO3S5To2BPsa35qedUnlkQgHbSUuI4wW XW5x+nmdaiOyiS6ceToNzB19zyxqo5YJzmnaV1hZZpWNTNj41LM= -----END CERTIFICATE-----Generated at Thu Aug 7 01:04:06 2025 by rpki-client