$ rpki-client -vvf repo-rpki.idnic.net/repo/40457d20-023a-4509-bb4a-62c86929dd97/0/4960A8427FEA5814EF9E80EF3786E0CAAE063745.mft File: 4960A8427FEA5814EF9E80EF3786E0CAAE063745.mft (raw, json) Hash identifier: /Ce+V3KgYxLNYd6Przzz7xErGale0KjKS4GPy9b2kOs= Subject key identifier: CA:08:52:C9:23:05:B3:0A:19:E2:BF:17:F4:78:E8:FF:91:64:CF:80 Authority key identifier: 49:60:A8:42:7F:EA:58:14:EF:9E:80:EF:37:86:E0:CA:AE:06:37:45 Certificate issuer: /CN=4960A8427FEA5814EF9E80EF3786E0CAAE063745 Certificate serial: 3A6430700DC14C6B353F00D1D0DF9D5ED66EDBDD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4960A8427FEA5814EF9E80EF3786E0CAAE063745.cer Subject info access: rsync://repo-rpki.idnic.net/repo/40457d20-023a-4509-bb4a-62c86929dd97/0/4960A8427FEA5814EF9E80EF3786E0CAAE063745.mft Manifest number: 95 Signing time: Sun 10 Aug 2025 10:42:07 +0000 Manifest this update: Sun 10 Aug 2025 10:37:07 +0000 Manifest next update: Wed 13 Aug 2025 20:00:07 +0000 Files and hashes: 1: 3130332e3233302e3138382e302f32332d3234203d3e20313333333439.roa (hash: HSCUNLaKeqcd7Fit+HRGDE0GHJLW2sIkUfc8pivqrjg=) 2: 4960A8427FEA5814EF9E80EF3786E0CAAE063745.crl (hash: OUX8ED+srTH4kg5S355/NTDn30PfNPsR5jpyI4kNV7U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/40457d20-023a-4509-bb4a-62c86929dd97/0/4960A8427FEA5814EF9E80EF3786E0CAAE063745.crl rsync://repo-rpki.idnic.net/repo/40457d20-023a-4509-bb4a-62c86929dd97/0/4960A8427FEA5814EF9E80EF3786E0CAAE063745.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4960A8427FEA5814EF9E80EF3786E0CAAE063745.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 20:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:64:30:70:0d:c1:4c:6b:35:3f:00:d1:d0:df:9d:5e:d6:6e:db:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4960A8427FEA5814EF9E80EF3786E0CAAE063745 Validity Not Before: Aug 10 10:37:07 2025 GMT Not After : Aug 13 20:00:07 2025 GMT Subject: CN=CA0852C92305B30A19E2BF17F478E8FF9164CF80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:96:6b:02:8d:fb:ea:48:fc:6e:d2:83:1c:a8: 1c:bd:aa:04:76:d8:a5:cc:7e:0a:bc:69:ae:2a:d1: a4:46:7f:1c:68:0d:46:5b:26:f8:d9:d5:61:2c:83: 6a:79:8d:e6:8b:a7:7e:c3:0e:51:99:c4:c1:77:c1: ae:52:2a:5b:c0:69:77:1d:50:52:02:89:53:86:11: 2b:c7:99:55:71:e1:b4:90:76:e7:23:b1:f4:e3:8e: 22:8a:e7:4a:c6:d1:65:dc:20:6f:0d:99:c5:df:fe: b2:30:67:2e:42:63:91:de:c4:4f:24:dc:29:2c:63: 29:b4:c7:2c:22:ac:ae:0e:8a:d7:40:88:e7:45:a5: 71:34:03:f4:e5:dd:7e:34:d0:ff:31:ee:51:d0:cc: 2e:1c:42:f0:28:20:65:66:40:1f:de:0d:e8:e4:cf: ab:3c:b5:48:37:a9:89:e4:e8:77:88:49:40:75:99: 2a:f5:86:81:b6:6c:1b:4d:61:db:39:65:e8:98:7e: 24:5a:4a:fe:45:51:09:58:e4:2d:7b:ec:a1:e4:aa: 77:3f:4a:a8:f4:cf:68:6f:33:02:4d:ab:17:5a:92: 5d:57:28:97:8b:11:b1:5c:1c:e5:d6:e9:e7:61:3f: b3:70:50:05:0a:60:fd:54:09:33:b6:18:32:d3:83: c0:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:08:52:C9:23:05:B3:0A:19:E2:BF:17:F4:78:E8:FF:91:64:CF:80 X509v3 Authority Key Identifier: keyid:49:60:A8:42:7F:EA:58:14:EF:9E:80:EF:37:86:E0:CA:AE:06:37:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/40457d20-023a-4509-bb4a-62c86929dd97/0/4960A8427FEA5814EF9E80EF3786E0CAAE063745.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4960A8427FEA5814EF9E80EF3786E0CAAE063745.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/40457d20-023a-4509-bb4a-62c86929dd97/0/4960A8427FEA5814EF9E80EF3786E0CAAE063745.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:a3:73:87:47:f8:ff:c3:0d:e4:57:e4:6a:7b:01:cf:e2:d5: 7c:5f:cd:97:fb:bc:34:28:3d:51:ee:22:df:88:7a:cb:ad:7b: 41:e8:c3:c0:31:9c:cb:33:1b:36:dc:b9:05:0e:f7:f9:f5:3f: be:ea:0e:e4:c1:8b:84:02:e7:f8:f9:7f:ea:6c:68:7f:27:a2: 89:8a:9a:22:ad:07:53:fe:3b:87:f7:8d:64:da:fd:e9:c4:38: c8:c6:8e:3c:df:ac:ab:d2:ad:b9:5f:cc:89:3b:cd:b1:fe:20: 38:fd:7b:18:76:df:7d:65:46:6a:8e:96:4c:a7:00:b9:b6:b7: b0:5c:44:43:6c:c1:2a:be:77:ac:86:1d:78:cf:48:30:c1:35: 4e:c2:b3:e0:50:44:a1:a6:25:c7:53:5c:e2:62:5f:82:9e:3f: eb:25:ba:99:66:2b:8c:d7:67:a1:55:ed:9b:5c:ef:45:a6:de: 38:2a:23:ca:26:e7:03:bb:cf:ca:ec:ca:ea:3d:e1:3c:4e:ac: 54:d5:26:25:3a:ce:08:87:df:3b:fe:0e:3b:82:16:cd:d5:a5: 92:72:77:2c:59:49:9f:be:e8:f0:b2:ce:3f:c8:79:d5:34:45: fa:d6:b1:37:65:3a:bc:83:83:a9:09:ff:83:d9:10:12:82:b9: 7a:01:b2:3c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOmQwcA3BTGs1PwDR0N+dXtZu290wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDk2MEE4NDI3RkVBNTgxNEVGOUU4MEVGMzc4NkUwQ0FB RTA2Mzc0NTAeFw0yNTA4MTAxMDM3MDdaFw0yNTA4MTMyMDAwMDdaMDMxMTAvBgNV BAMTKENBMDg1MkM5MjMwNUIzMEExOUUyQkYxN0Y0NzhFOEZGOTE2NENGODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDlmsCjfvqSPxu0oMcqBy9qgR2 2KXMfgq8aa4q0aRGfxxoDUZbJvjZ1WEsg2p5jeaLp37DDlGZxMF3wa5SKlvAaXcd UFICiVOGESvHmVVx4bSQducjsfTjjiKK50rG0WXcIG8NmcXf/rIwZy5CY5HexE8k 3CksYym0xywirK4OitdAiOdFpXE0A/Tl3X400P8x7lHQzC4cQvAoIGVmQB/eDejk z6s8tUg3qYnk6HeISUB1mSr1hoG2bBtNYds5ZeiYfiRaSv5FUQlY5C177KHkqnc/ Sqj0z2hvMwJNqxdakl1XKJeLEbFcHOXW6edhP7NwUAUKYP1UCTO2GDLTg8B1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyghSySMFswoZ4r8X9Hjo/5Fkz4AwHwYDVR0j BBgwFoAUSWCoQn/qWBTvnoDvN4bgyq4GN0UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MDQ1N2QyMC0wMjNhLTQ1MDktYmI0YS02MmM4NjkyOWRkOTcvMC80OTYwQTg0MjdG RUE1ODE0RUY5RTgwRUYzNzg2RTBDQUFFMDYzNzQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDk2MEE4NDI3RkVBNTgxNEVGOUU4MEVGMzc4NkUwQ0FBRTA2 Mzc0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDA0NTdkMjAtMDIzYS00NTA5LWJi NGEtNjJjODY5MjlkZDk3LzAvNDk2MEE4NDI3RkVBNTgxNEVGOUU4MEVGMzc4NkUw Q0FBRTA2Mzc0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGCjc4dH+P/DDeRX5Gp7Ac/i1XxfzZf7vDQo PVHuIt+Iesute0How8AxnMszGzbcuQUO9/n1P77qDuTBi4QC5/j5f+psaH8noomK miKtB1P+O4f3jWTa/enEOMjGjjzfrKvSrblfzIk7zbH+IDj9exh2331lRmqOlkyn ALm2t7BcRENswSq+d6yGHXjPSDDBNU7Cs+BQRKGmJcdTXOJiX4KeP+sluplmK4zX Z6FV7Ztc70Wm3jgqI8om5wO7z8rsyuo94TxOrFTVJiU6zgiH3zv+DjuCFs3VpZJy dyxZSZ++6PCyzj/IedU0RfrWsTdlOryDg6kJ/4PZEBKCuXoBsjw= -----END CERTIFICATE-----Generated at Sun Aug 10 18:49:46 2025 by rpki-client