$ rpki-client -vvf repo-rpki.idnic.net/repo/81c9ce5a-6690-4901-9e0a-c27b319316be/0/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.mft File: 4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.mft (raw, json) Hash identifier: vyVgajzNCp9pH1GWL+vYdNgsiIx8fsMAIs8hB//YxUw= Subject key identifier: 78:94:ED:84:B2:33:D5:62:B6:C2:8D:2C:4B:CE:85:1C:65:4A:44:D5 Authority key identifier: 4C:34:08:B6:E0:82:54:22:DC:2D:07:1E:49:0B:D7:CB:1F:BD:2A:3F Certificate issuer: /CN=4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F Certificate serial: 0673A3B04B9DB097AE70C67D6BF11F45D5BB891C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/81c9ce5a-6690-4901-9e0a-c27b319316be/0/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.mft Manifest number: 0472 Signing time: Fri 08 Aug 2025 15:32:25 +0000 Manifest this update: Fri 08 Aug 2025 15:27:25 +0000 Manifest next update: Mon 11 Aug 2025 21:04:25 +0000 Files and hashes: 1: 3130332e37312e34342e302f32332d3233203d3e203436303232.roa (hash: OTd8RtkXs2m+VF5BpzyjcTZytiPZTBuAWTpwxqI9xFY=) 2: 4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.crl (hash: Wv/iXMW91ujmlkKcJKdkKQ7UPZdvBqZzIG5YoHpChKY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/81c9ce5a-6690-4901-9e0a-c27b319316be/0/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.crl rsync://repo-rpki.idnic.net/repo/81c9ce5a-6690-4901-9e0a-c27b319316be/0/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 21:04:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:73:a3:b0:4b:9d:b0:97:ae:70:c6:7d:6b:f1:1f:45:d5:bb:89:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F Validity Not Before: Aug 8 15:27:25 2025 GMT Not After : Aug 11 21:04:25 2025 GMT Subject: CN=7894ED84B233D562B6C28D2C4BCE851C654A44D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:69:1d:be:1c:de:5c:62:c6:cd:e8:4e:51:80: 3c:8b:9d:92:01:52:43:77:4a:c4:dd:d3:b8:c0:49: f5:23:09:81:f9:2f:fe:ef:f3:07:c6:2d:62:63:d7: e3:25:af:80:78:e7:3f:6c:5a:43:dd:5f:63:0b:c0: d4:81:a5:11:f4:49:78:b4:02:fc:c1:35:15:01:b7: f9:ef:4f:7a:77:08:b7:fa:14:3f:3e:8e:a4:ae:21: 30:ca:06:aa:b8:24:63:91:3a:ff:ad:46:24:7c:1e: 85:75:9a:9c:e8:53:71:a9:e4:1b:8f:ba:55:b0:0a: 25:d6:f7:17:ec:41:9a:53:99:24:db:9e:73:a8:84: fe:63:47:36:b2:0a:51:46:e5:91:16:69:1f:b1:1e: dd:50:2b:10:9d:63:eb:34:36:0f:d9:bb:9c:56:a9: a8:67:d1:6f:dd:83:ae:8e:b0:2f:af:ab:bc:23:8e: c0:57:e1:0a:e1:24:08:e7:2c:1b:8b:0c:67:6b:65: ef:20:d5:2d:f6:d5:12:53:3c:4b:60:6c:4e:1b:67: ed:18:6a:8f:60:71:e9:82:37:82:89:67:92:ac:f8: 71:e7:5e:31:fb:31:ab:de:3f:0d:e1:45:d5:19:67: b4:ff:4e:38:bb:78:f8:df:67:5a:b6:e0:b8:38:ec: ec:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:94:ED:84:B2:33:D5:62:B6:C2:8D:2C:4B:CE:85:1C:65:4A:44:D5 X509v3 Authority Key Identifier: keyid:4C:34:08:B6:E0:82:54:22:DC:2D:07:1E:49:0B:D7:CB:1F:BD:2A:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/81c9ce5a-6690-4901-9e0a-c27b319316be/0/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/81c9ce5a-6690-4901-9e0a-c27b319316be/0/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:ab:b5:33:53:79:52:13:07:36:6e:cd:ed:1f:0a:0a:90:6e: 3c:9a:c1:8d:29:94:f1:48:98:af:86:5b:14:9c:15:53:c9:c9: 40:e2:5a:39:cd:6a:04:f4:0a:52:96:42:42:88:ec:ae:cd:18: 7c:a2:07:7b:2b:f8:cc:55:12:3a:66:6d:ea:07:bc:3a:f1:fe: 68:37:93:80:20:ab:11:4d:44:98:a3:3a:1d:0a:24:eb:4e:c3: a1:bf:7f:03:50:79:e8:25:77:20:4e:6c:7a:b8:fc:6f:41:8e: e1:8a:34:59:95:00:44:65:c1:61:88:b8:b4:b4:7a:80:81:15: dd:9c:da:46:73:13:08:3f:cc:05:70:30:4f:21:ab:82:1e:b9: 10:d4:df:e9:17:c3:e0:17:6f:ea:62:5d:70:ca:03:57:b7:83: c7:35:ce:b9:0b:3a:64:7b:0d:9c:f2:84:d3:6b:ac:bb:c6:6d: ce:7a:0d:bc:69:28:78:19:77:f4:aa:8e:ed:b5:fd:bc:fd:db: 61:65:20:99:2c:71:7c:02:03:f5:f8:48:bc:0a:27:61:c5:58: 04:42:68:d5:7d:88:e0:0d:eb:f0:ad:93:4b:69:0b:a2:06:1f: d2:5b:e3:d0:d6:bb:b4:87:78:a1:4a:dc:16:5d:51:88:ec:e2: a9:42:75:fb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBnOjsEudsJeucMZ9a/EfRdW7iRwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEMzNDA4QjZFMDgyNTQyMkRDMkQwNzFFNDkwQkQ3Q0Ix RkJEMkEzRjAeFw0yNTA4MDgxNTI3MjVaFw0yNTA4MTEyMTA0MjVaMDMxMTAvBgNV BAMTKDc4OTRFRDg0QjIzM0Q1NjJCNkMyOEQyQzRCQ0U4NTFDNjU0QTQ0RDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD5aR2+HN5cYsbN6E5RgDyLnZIB UkN3SsTd07jASfUjCYH5L/7v8wfGLWJj1+Mlr4B45z9sWkPdX2MLwNSBpRH0SXi0 AvzBNRUBt/nvT3p3CLf6FD8+jqSuITDKBqq4JGOROv+tRiR8HoV1mpzoU3Gp5BuP ulWwCiXW9xfsQZpTmSTbnnOohP5jRzayClFG5ZEWaR+xHt1QKxCdY+s0Ng/Zu5xW qahn0W/dg66OsC+vq7wjjsBX4QrhJAjnLBuLDGdrZe8g1S321RJTPEtgbE4bZ+0Y ao9gcemCN4KJZ5Ks+HHnXjH7MavePw3hRdUZZ7T/Tji7ePjfZ1q24Lg47OxXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeJTthLIz1WK2wo0sS86FHGVKRNUwHwYDVR0j BBgwFoAUTDQItuCCVCLcLQceSQvXyx+9Kj8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MWM5Y2U1YS02NjkwLTQ5MDEtOWUwYS1jMjdiMzE5MzE2YmUvMC80QzM0MDhCNkUw ODI1NDIyREMyRDA3MUU0OTBCRDdDQjFGQkQyQTNGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEMzNDA4QjZFMDgyNTQyMkRDMkQwNzFFNDkwQkQ3Q0IxRkJE MkEzRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODFjOWNlNWEtNjY5MC00OTAxLTll MGEtYzI3YjMxOTMxNmJlLzAvNEMzNDA4QjZFMDgyNTQyMkRDMkQwNzFFNDkwQkQ3 Q0IxRkJEMkEzRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIirtTNTeVITBzZuze0fCgqQbjyawY0plPFI mK+GWxScFVPJyUDiWjnNagT0ClKWQkKI7K7NGHyiB3sr+MxVEjpmbeoHvDrx/mg3 k4AgqxFNRJijOh0KJOtOw6G/fwNQeegldyBObHq4/G9BjuGKNFmVAERlwWGIuLS0 eoCBFd2c2kZzEwg/zAVwME8hq4IeuRDU3+kXw+AXb+piXXDKA1e3g8c1zrkLOmR7 DZzyhNNrrLvGbc56DbxpKHgZd/Sqju21/bz922FlIJkscXwCA/X4SLwKJ2HFWARC aNV9iOAN6/Ctk0tpC6IGH9Jb49DWu7SHeKFK3BZdUYjs4qlCdfs= -----END CERTIFICATE-----Generated at Sun Aug 10 16:10:45 2025 by rpki-client