$ rpki-client -vvf repo-rpki.idnic.net/repo/2c280af3-aa1d-4271-8c06-a3fa28898426/0/4AA76DED689FD4420809D0962087A03BCF018FEA.mft File: 4AA76DED689FD4420809D0962087A03BCF018FEA.mft (raw, json) Hash identifier: rdCFG2uzioI8sDnyVdfp52w1szHJRqqB6TkOShUrCno= Subject key identifier: 06:EF:C1:8F:CA:B3:4D:18:DC:3C:7C:63:DD:9A:50:31:91:10:AF:02 Authority key identifier: 4A:A7:6D:ED:68:9F:D4:42:08:09:D0:96:20:87:A0:3B:CF:01:8F:EA Certificate issuer: /CN=4AA76DED689FD4420809D0962087A03BCF018FEA Certificate serial: 75BD9879C46A4AF1CB8FD8DE87272F67FA93088B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AA76DED689FD4420809D0962087A03BCF018FEA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2c280af3-aa1d-4271-8c06-a3fa28898426/0/4AA76DED689FD4420809D0962087A03BCF018FEA.mft Manifest number: B4 Signing time: Mon 04 Aug 2025 17:41:41 +0000 Manifest this update: Mon 04 Aug 2025 17:36:41 +0000 Manifest next update: Thu 07 Aug 2025 23:28:41 +0000 Files and hashes: 1: 4AA76DED689FD4420809D0962087A03BCF018FEA.crl (hash: DhyaZEbwyAmW2uBgEQylAooeSIItNRe4l4K3OJZi9jo=) 2: 3130332e39392e3133372e302f32342d3234203d3e20313531353735.roa (hash: qGUv354O5bgjhTMZ45JMcvyFGWQg1EdVxERPegJoKCQ=) 3: 323030313a6466343a3763303a3a2f34382d3438203d3e20313531353735.roa (hash: khEVLFQtH+a45cc9yGf67pi2XkwhJ0LBpc+mc2azWiQ=) 4: 3130332e39392e3133362e302f32332d3233203d3e20313531353735.roa (hash: bYo0zSG/Y+l/kRQWqzhvCy7R5Romzqih1iDCz89t3mk=) 5: 3130332e39392e3133362e302f32342d3234203d3e20313531353735.roa (hash: 2CpAucK+rvU21eAZmyDV5IqqR6dCAIafzExn8g2LOMw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2c280af3-aa1d-4271-8c06-a3fa28898426/0/4AA76DED689FD4420809D0962087A03BCF018FEA.crl rsync://repo-rpki.idnic.net/repo/2c280af3-aa1d-4271-8c06-a3fa28898426/0/4AA76DED689FD4420809D0962087A03BCF018FEA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AA76DED689FD4420809D0962087A03BCF018FEA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 07 Aug 2025 23:28:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:bd:98:79:c4:6a:4a:f1:cb:8f:d8:de:87:27:2f:67:fa:93:08:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4AA76DED689FD4420809D0962087A03BCF018FEA Validity Not Before: Aug 4 17:36:41 2025 GMT Not After : Aug 7 23:28:41 2025 GMT Subject: CN=06EFC18FCAB34D18DC3C7C63DD9A50319110AF02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:01:39:62:8c:97:30:99:97:2b:b6:05:94:17: 59:b4:7a:f2:38:b4:82:9a:18:09:05:aa:d4:2f:88: fb:ee:a9:62:1e:66:52:28:70:4b:78:08:9a:c2:a7: 7c:7d:6c:18:84:59:12:cc:d1:92:1c:a4:f0:d4:f5: bc:a3:1b:78:b9:87:56:5c:62:c1:5e:6d:2a:1f:f8: c2:fb:cd:4e:5a:c5:ce:a6:fc:cc:46:c9:a9:57:81: c1:24:6d:96:64:c8:8a:d3:d9:2e:eb:aa:3a:08:54: ca:b1:02:59:e2:e6:5f:1a:65:55:98:c8:fa:77:05: 42:6f:b9:64:6d:4a:6d:b7:65:0f:51:80:0a:e1:43: 99:85:b6:35:f9:8f:46:0a:c4:dd:03:81:36:78:8b: f6:96:ec:96:a3:6e:3c:a4:db:bd:88:58:65:ec:0c: 2d:c0:c9:62:ea:8b:a4:73:aa:69:73:d7:7a:c9:a4: 16:7e:66:da:96:ae:52:70:99:1e:a9:73:9f:ad:0d: cd:63:59:c4:1b:aa:7a:dd:36:cf:b7:59:a0:53:ce: 79:10:f5:57:ce:d5:08:9c:ed:fc:8c:3b:af:4a:70: d8:f7:84:7b:e4:93:a2:0d:71:cb:72:d1:85:0a:1e: e8:11:19:48:01:d3:e8:ea:c3:1d:eb:5a:f4:c8:d7: 54:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:EF:C1:8F:CA:B3:4D:18:DC:3C:7C:63:DD:9A:50:31:91:10:AF:02 X509v3 Authority Key Identifier: keyid:4A:A7:6D:ED:68:9F:D4:42:08:09:D0:96:20:87:A0:3B:CF:01:8F:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2c280af3-aa1d-4271-8c06-a3fa28898426/0/4AA76DED689FD4420809D0962087A03BCF018FEA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AA76DED689FD4420809D0962087A03BCF018FEA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2c280af3-aa1d-4271-8c06-a3fa28898426/0/4AA76DED689FD4420809D0962087A03BCF018FEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:1a:f5:ed:2d:d3:a9:04:e8:4d:4b:ba:ac:a3:ab:77:d0:c3: 48:b4:71:59:2e:df:9c:96:dd:0a:de:b6:ba:1e:d2:e2:ab:73: 49:1b:ad:9a:41:a4:9f:8d:89:2f:f8:51:7c:fe:71:06:fe:ca: dd:c3:2f:41:9f:d5:de:0c:6d:fa:79:a6:44:32:14:62:ee:1c: 39:19:c4:be:ea:96:af:2a:25:0c:12:64:2b:2c:58:5a:db:8a: 0d:f4:ad:46:a7:55:f6:6c:6a:55:20:56:2e:8f:42:db:31:b7: 5a:c6:a1:41:41:7e:1e:c6:48:2c:8f:0a:fd:64:e7:a1:c6:e1: 6f:47:0d:7c:f3:4c:96:31:da:c8:4f:ab:e3:f2:b5:e2:40:19: 70:32:b0:30:e4:12:f9:14:2f:06:ba:2c:5e:a3:04:af:f3:e5: 33:f3:83:0d:ed:d3:b3:de:af:91:d5:2c:64:4a:c9:ee:87:02: cf:d0:79:f7:ac:01:a5:e9:0d:1c:de:ae:5a:96:9e:dc:d4:3f: 23:b6:83:ed:36:47:36:83:1e:3c:1a:49:92:c8:f7:77:dc:99: 22:97:3d:cc:bb:70:31:db:39:3d:71:e5:29:77:8d:5e:94:f5: c5:ec:55:5c:37:28:0c:36:86:14:2f:17:69:43:51:a5:0a:2e: 7e:c7:14:fc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdb2YecRqSvHLj9jehycvZ/qTCIswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEFBNzZERUQ2ODlGRDQ0MjA4MDlEMDk2MjA4N0EwM0JD RjAxOEZFQTAeFw0yNTA4MDQxNzM2NDFaFw0yNTA4MDcyMzI4NDFaMDMxMTAvBgNV BAMTKDA2RUZDMThGQ0FCMzREMThEQzNDN0M2M0REOUE1MDMxOTExMEFGMDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0ATlijJcwmZcrtgWUF1m0evI4 tIKaGAkFqtQviPvuqWIeZlIocEt4CJrCp3x9bBiEWRLM0ZIcpPDU9byjG3i5h1Zc YsFebSof+ML7zU5axc6m/MxGyalXgcEkbZZkyIrT2S7rqjoIVMqxAlni5l8aZVWY yPp3BUJvuWRtSm23ZQ9RgArhQ5mFtjX5j0YKxN0DgTZ4i/aW7Jajbjyk272IWGXs DC3AyWLqi6Rzqmlz13rJpBZ+ZtqWrlJwmR6pc5+tDc1jWcQbqnrdNs+3WaBTznkQ 9VfO1Qic7fyMO69KcNj3hHvkk6INccty0YUKHugRGUgB0+jqwx3rWvTI11Q3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBu/Bj8qzTRjcPHxj3ZpQMZEQrwIwHwYDVR0j BBgwFoAUSqdt7Wif1EIICdCWIIegO88Bj+owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YzI4MGFmMy1hYTFkLTQyNzEtOGMwNi1hM2ZhMjg4OTg0MjYvMC80QUE3NkRFRDY4 OUZENDQyMDgwOUQwOTYyMDg3QTAzQkNGMDE4RkVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEFBNzZERUQ2ODlGRDQ0MjA4MDlEMDk2MjA4N0EwM0JDRjAx OEZFQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmMyODBhZjMtYWExZC00MjcxLThj MDYtYTNmYTI4ODk4NDI2LzAvNEFBNzZERUQ2ODlGRDQ0MjA4MDlEMDk2MjA4N0Ew M0JDRjAxOEZFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHga9e0t06kE6E1Luqyjq3fQw0i0cVku35yW 3Qretroe0uKrc0kbrZpBpJ+NiS/4UXz+cQb+yt3DL0Gf1d4Mbfp5pkQyFGLuHDkZ xL7qlq8qJQwSZCssWFrbig30rUanVfZsalUgVi6PQtsxt1rGoUFBfh7GSCyPCv1k 56HG4W9HDXzzTJYx2shPq+PyteJAGXAysDDkEvkULwa6LF6jBK/z5TPzgw3t07Pe r5HVLGRKye6HAs/QefesAaXpDRzerlqWntzUPyO2g+02RzaDHjwaSZLI93fcmSKX Pcy7cDHbOT1x5Sl3jV6U9cXsVVw3KAw2hhQvF2lDUaUKLn7HFPw= -----END CERTIFICATE-----Generated at Thu Aug 7 00:26:53 2025 by rpki-client