$ rpki-client -vvf repo-rpki.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.mft File: 4A9E8C61BE3670D865B8A79D7D32798550E64F2B.mft (raw, json) Hash identifier: w+KHtnpPTplZ0AaGLc94G5/RQ8w5v7Zg6buSUXbbxAE= Subject key identifier: 40:97:DF:4D:B0:3B:77:2E:C9:54:D9:1C:75:E7:C9:DB:E5:E5:CA:D8 Authority key identifier: 4A:9E:8C:61:BE:36:70:D8:65:B8:A7:9D:7D:32:79:85:50:E6:4F:2B Certificate issuer: /CN=4A9E8C61BE3670D865B8A79D7D32798550E64F2B Certificate serial: 70D53575EF2BF6D9E07257AFB9B2ACA5125C9C3E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.mft Manifest number: 0123 Signing time: Thu 07 Aug 2025 00:52:27 +0000 Manifest this update: Thu 07 Aug 2025 00:47:27 +0000 Manifest next update: Sun 10 Aug 2025 10:05:27 +0000 Files and hashes: 1: 4A9E8C61BE3670D865B8A79D7D32798550E64F2B.crl (hash: przwnMOjPfipc+NGPTM2qmLXwb4Lbdqmb+A/cl4pDI4=) 2: 3130332e3234352e33382e302f32332d3234203d3e203535363838.roa (hash: sfkJ0JTL5ebL+3NyzyS4seDOCuegsswJp2YAbd6RC9s=) 3: 323030313a6466323a656434303a3a2f34382d3438203d3e203535363838.roa (hash: 3LwTWTq6lR7/gbSdsCbSOqta9JhN0Eij75z5muuvESg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.crl rsync://repo-rpki.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 10:05:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:d5:35:75:ef:2b:f6:d9:e0:72:57:af:b9:b2:ac:a5:12:5c:9c:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A9E8C61BE3670D865B8A79D7D32798550E64F2B Validity Not Before: Aug 7 00:47:27 2025 GMT Not After : Aug 10 10:05:27 2025 GMT Subject: CN=4097DF4DB03B772EC954D91C75E7C9DBE5E5CAD8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:f3:7b:03:af:23:0f:56:6c:04:eb:6f:3e:3d: 3a:08:42:48:4d:6e:01:04:96:02:7c:d9:0c:94:d1: 04:18:fb:22:1b:69:e9:62:cf:46:8a:41:5a:01:52: 8e:a9:01:88:6c:6e:07:82:1e:f4:13:53:c4:ae:87: 78:6d:b5:23:3a:b3:7e:34:61:70:43:02:77:52:0a: 24:d5:91:3a:bb:aa:26:c0:b3:87:41:d2:ff:7e:c6: 89:f3:dc:4e:bb:2f:8a:ae:2b:0f:1a:72:0d:6e:14: 79:2d:00:eb:c8:70:bb:e8:b6:82:a9:f3:85:41:f9: 4b:1d:a7:b8:df:dd:55:d2:2c:d4:53:9b:aa:8b:b8: 1f:83:cc:75:84:e2:b7:af:c8:4d:34:0e:fb:e3:2b: 85:bd:d7:4f:0e:cb:99:47:7c:4d:14:44:e4:b2:87: f0:2e:6b:85:aa:bc:bc:cf:c2:4e:cb:ec:a6:fd:a1: 57:6d:22:b5:21:55:33:fb:01:a6:75:36:73:ea:9a: d2:17:70:d9:d4:00:60:be:4f:34:90:7f:82:41:44: d6:f2:ba:11:c2:ea:58:99:4f:10:63:d1:89:40:80: 8e:4a:5b:75:90:57:78:94:88:e6:ac:66:71:d2:34: 6d:73:2f:53:16:d2:46:e8:0c:fb:a9:01:49:d8:3a: f5:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:97:DF:4D:B0:3B:77:2E:C9:54:D9:1C:75:E7:C9:DB:E5:E5:CA:D8 X509v3 Authority Key Identifier: keyid:4A:9E:8C:61:BE:36:70:D8:65:B8:A7:9D:7D:32:79:85:50:E6:4F:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:7e:20:ba:7e:1d:d0:7b:9c:8b:18:a3:9c:84:82:b5:0e:45: d1:40:02:cc:fe:d8:23:c2:55:ab:b8:99:7c:88:70:b4:84:d2: 1f:ed:6d:cc:7a:85:1c:4d:aa:c0:08:82:99:0b:73:de:a7:fe: 72:f8:8d:1c:8b:29:5d:9a:77:c0:78:68:b1:77:11:b5:cd:7b: a1:20:c3:e5:d1:14:bb:04:e7:e0:f2:d0:74:34:73:3b:64:7b: c4:cc:56:95:9b:13:a1:dc:a5:97:80:55:be:f3:c6:4b:b9:49: b0:81:37:c5:1d:45:97:85:22:e8:b6:54:50:50:0a:49:54:8d: e2:98:ef:6d:35:ba:59:10:65:d6:c1:55:30:0b:3b:8d:62:5a: 91:59:07:0e:2d:f3:49:e8:87:e0:22:88:f7:27:f6:97:61:4b: 07:9f:27:8a:31:8b:29:56:06:b7:b0:82:ef:ec:0d:86:12:20: ac:3d:25:b0:8e:f2:50:bc:b5:bf:4f:dc:33:ba:7f:99:3e:31: 48:5e:29:22:5b:aa:17:42:0b:0f:f2:e7:ad:11:e8:00:21:1f: 74:0d:1e:01:be:5f:7f:cd:b3:d5:e6:2a:2e:a5:a2:a8:0f:d6: b4:ee:14:c9:e9:e3:7c:1b:95:4d:98:83:fb:1d:d9:ac:ca:0e: 18:08:a5:83 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcNU1de8r9tngclevubKspRJcnD4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEE5RThDNjFCRTM2NzBEODY1QjhBNzlEN0QzMjc5ODU1 MEU2NEYyQjAeFw0yNTA4MDcwMDQ3MjdaFw0yNTA4MTAxMDA1MjdaMDMxMTAvBgNV BAMTKDQwOTdERjREQjAzQjc3MkVDOTU0RDkxQzc1RTdDOURCRTVFNUNBRDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX83sDryMPVmwE628+PToIQkhN bgEElgJ82QyU0QQY+yIbaeliz0aKQVoBUo6pAYhsbgeCHvQTU8Suh3httSM6s340 YXBDAndSCiTVkTq7qibAs4dB0v9+xonz3E67L4quKw8acg1uFHktAOvIcLvotoKp 84VB+Usdp7jf3VXSLNRTm6qLuB+DzHWE4revyE00DvvjK4W9108Oy5lHfE0UROSy h/Aua4WqvLzPwk7L7Kb9oVdtIrUhVTP7AaZ1NnPqmtIXcNnUAGC+TzSQf4JBRNby uhHC6liZTxBj0YlAgI5KW3WQV3iUiOasZnHSNG1zL1MW0kboDPupAUnYOvVlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQJffTbA7dy7JVNkcdefJ2+XlytgwHwYDVR0j BBgwFoAUSp6MYb42cNhluKedfTJ5hVDmTyswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YzQ5MzVkOC05NmEyLTQ1NjQtODVhMy0zMmE1MzE4OTM2N2UvMC80QTlFOEM2MUJF MzY3MEQ4NjVCOEE3OUQ3RDMyNzk4NTUwRTY0RjJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEE5RThDNjFCRTM2NzBEODY1QjhBNzlEN0QzMjc5ODU1MEU2 NEYyQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2M0OTM1ZDgtOTZhMi00NTY0LTg1 YTMtMzJhNTMxODkzNjdlLzAvNEE5RThDNjFCRTM2NzBEODY1QjhBNzlEN0QzMjc5 ODU1MEU2NEYyQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABR+ILp+HdB7nIsYo5yEgrUORdFAAsz+2CPC Vau4mXyIcLSE0h/tbcx6hRxNqsAIgpkLc96n/nL4jRyLKV2ad8B4aLF3EbXNe6Eg w+XRFLsE5+Dy0HQ0cztke8TMVpWbE6HcpZeAVb7zxku5SbCBN8UdRZeFIui2VFBQ CklUjeKY7201ulkQZdbBVTALO41iWpFZBw4t80noh+AiiPcn9pdhSwefJ4oxiylW Brewgu/sDYYSIKw9JbCO8lC8tb9P3DO6f5k+MUheKSJbqhdCCw/y560R6AAhH3QN HgG+X3/Ns9XmKi6loqgP1rTuFMnp43wblU2Yg/sd2azKDhgIpYM= -----END CERTIFICATE-----Generated at Thu Aug 7 05:04:06 2025 by rpki-client