$ rpki-client -vvf repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/0/4E52504397B6835784BD4E67D8048C0D1CE3B242.mft File: 4E52504397B6835784BD4E67D8048C0D1CE3B242.mft (raw, json) Hash identifier: v1YqX8CJ9nZ/meCO6/qb1fonniUPh92qABVpNvJZoqs= Subject key identifier: CF:F3:E1:3C:ED:8E:E8:5A:BA:C6:E5:54:82:CB:6A:F9:1A:A7:12:52 Authority key identifier: 4E:52:50:43:97:B6:83:57:84:BD:4E:67:D8:04:8C:0D:1C:E3:B2:42 Certificate issuer: /CN=4E52504397B6835784BD4E67D8048C0D1CE3B242 Certificate serial: 3B5636E393D0A18E0F6994AD274979A715A73ACF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E52504397B6835784BD4E67D8048C0D1CE3B242.cer Subject info access: rsync://repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/0/4E52504397B6835784BD4E67D8048C0D1CE3B242.mft Manifest number: 04FA Signing time: Thu 07 Aug 2025 08:12:14 +0000 Manifest this update: Thu 07 Aug 2025 08:07:14 +0000 Manifest next update: Sun 10 Aug 2025 11:31:14 +0000 Files and hashes: 1: 34332e3234352e3138382e302f32322d3234203d3e203538333736.roa (hash: AI/USbQ/a0LFBdjZWtV22hxC6HEFmmDia8w1dNa/lbM=) 2: 323430333a653630303a6630303a3a2f34302d3430203d3e203538333736.roa (hash: AgqSIkRIGOrQPc+1mZW5lGFc3zRhyUQtTv3vz8FdAPU=) 3: 3130332e32392e3134382e302f32322d3234203d3e203538333736.roa (hash: kZ6+BhGljQylz/AhW+5O41yNHq5oDRG+mIs3e+fq18E=) 4: 323430333a653630303a3a2f33322d3332203d3e203538333736.roa (hash: bVu2SaAa9IWvlQ6o6+veKHD0ZA7xlveBNCWEZ2Ja1Z4=) 5: 4E52504397B6835784BD4E67D8048C0D1CE3B242.crl (hash: CJhIK/cUoJVs7yQeXc76cTLHYjIZcDDjp0xJ7EW09wA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/0/4E52504397B6835784BD4E67D8048C0D1CE3B242.crl rsync://repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/0/4E52504397B6835784BD4E67D8048C0D1CE3B242.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E52504397B6835784BD4E67D8048C0D1CE3B242.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 11:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:56:36:e3:93:d0:a1:8e:0f:69:94:ad:27:49:79:a7:15:a7:3a:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4E52504397B6835784BD4E67D8048C0D1CE3B242 Validity Not Before: Aug 7 08:07:14 2025 GMT Not After : Aug 10 11:31:14 2025 GMT Subject: CN=CFF3E13CED8EE85ABAC6E55482CB6AF91AA71252 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:65:dd:bd:b5:18:91:69:98:fd:d0:83:62:5b: 0f:72:cf:0c:f1:98:29:ba:bf:85:3b:99:18:64:82: d0:ef:6f:a2:50:28:8c:d4:a5:3a:63:91:7f:c1:96: 7c:c2:c3:10:bb:be:96:1a:56:4f:1f:1b:f5:90:6b: 08:a2:1f:f3:44:b4:3b:a8:41:24:a5:66:60:8d:e4: 5b:18:45:11:74:0b:42:44:49:81:d7:12:ff:07:0b: 6c:1f:12:49:08:9e:20:03:8a:d8:4d:69:95:06:13: 2c:98:4e:4e:1a:62:5d:24:8c:ce:c3:12:f8:b3:67: 08:60:5b:16:cf:8e:bc:74:02:0f:11:02:75:45:28: cc:f1:0c:78:44:b6:9e:12:0f:c2:43:f1:6b:67:7e: 0f:6d:11:31:59:66:d1:fb:d8:84:47:f0:17:0b:fa: 63:f5:fd:42:66:93:92:31:53:dc:a4:af:03:2b:43: 7c:e5:3b:20:1f:71:c4:bf:67:81:16:ee:35:56:73: 2a:1a:d0:df:12:8b:d1:e1:f8:2f:63:d7:43:b1:4a: 5d:8e:bf:46:10:e9:6b:80:b4:d1:57:4f:57:b2:e6: 6f:63:bb:5d:4d:93:cf:39:dd:c1:b4:d3:36:49:d5: f4:0c:94:51:70:4c:12:d3:d2:cd:a2:5b:36:2f:cc: b2:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:F3:E1:3C:ED:8E:E8:5A:BA:C6:E5:54:82:CB:6A:F9:1A:A7:12:52 X509v3 Authority Key Identifier: keyid:4E:52:50:43:97:B6:83:57:84:BD:4E:67:D8:04:8C:0D:1C:E3:B2:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/0/4E52504397B6835784BD4E67D8048C0D1CE3B242.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E52504397B6835784BD4E67D8048C0D1CE3B242.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/0/4E52504397B6835784BD4E67D8048C0D1CE3B242.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:b1:c2:e9:a9:b4:9a:17:d3:6a:17:5e:c0:e3:02:e9:90:bd: b2:86:9c:c5:10:af:50:8a:60:ac:54:4c:2f:f9:71:e6:82:da: 3d:c9:40:14:6c:af:25:10:d7:6a:28:27:91:99:f2:b5:e8:8b: ac:d1:db:15:b5:fc:0c:a4:4b:d8:c1:90:1b:eb:ca:5c:5f:3c: 10:1a:53:71:7f:aa:ff:25:8b:52:ac:c4:20:a9:2c:82:5d:1d: 57:93:04:28:3f:2a:55:3e:86:2e:20:95:c3:9e:33:3f:6c:37: 9c:c6:ed:1a:d5:41:5a:d4:fa:02:2d:e8:fe:ec:86:af:ef:a6: fa:92:bd:a0:3f:40:30:0f:1c:c6:51:d3:3d:3d:59:09:82:63: c9:40:93:4b:fa:c2:b6:53:32:c2:4c:6f:89:f0:2e:b0:d8:91: 84:ca:71:6c:ac:12:0a:a1:04:d3:3a:fe:5e:be:5c:a1:09:4f: ae:17:4e:10:c8:c2:a9:a8:2a:2f:50:b7:2a:c3:03:18:88:7e: 21:57:b7:45:e8:8d:4c:70:33:64:c3:78:c5:75:5f:7a:b2:52: 4d:26:aa:cd:5d:c3:a6:60:59:8e:6d:80:00:28:4e:5e:50:5d: 40:a3:8d:c2:0c:f3:59:3b:07:7f:c8:b0:b7:ab:43:f4:6e:32: 1d:dd:fb:49 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO1Y245PQoY4PaZStJ0l5pxWnOs8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEU1MjUwNDM5N0I2ODM1Nzg0QkQ0RTY3RDgwNDhDMEQx Q0UzQjI0MjAeFw0yNTA4MDcwODA3MTRaFw0yNTA4MTAxMTMxMTRaMDMxMTAvBgNV BAMTKENGRjNFMTNDRUQ4RUU4NUFCQUM2RTU1NDgyQ0I2QUY5MUFBNzEyNTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD5Zd29tRiRaZj90INiWw9yzwzx mCm6v4U7mRhkgtDvb6JQKIzUpTpjkX/BlnzCwxC7vpYaVk8fG/WQawiiH/NEtDuo QSSlZmCN5FsYRRF0C0JESYHXEv8HC2wfEkkIniADithNaZUGEyyYTk4aYl0kjM7D EvizZwhgWxbPjrx0Ag8RAnVFKMzxDHhEtp4SD8JD8Wtnfg9tETFZZtH72IRH8BcL +mP1/UJmk5IxU9ykrwMrQ3zlOyAfccS/Z4EW7jVWcyoa0N8Si9Hh+C9j10OxSl2O v0YQ6WuAtNFXT1ey5m9ju11Nk8853cG00zZJ1fQMlFFwTBLT0s2iWzYvzLJ/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUz/PhPO2O6Fq6xuVUgstq+RqnElIwHwYDVR0j BBgwFoAUTlJQQ5e2g1eEvU5n2ASMDRzjskIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OTFkM2MzMC05NWRjLTRiNzItYWUxYi1hZDFlOThiMGUxNzkvMC80RTUyNTA0Mzk3 QjY4MzU3ODRCRDRFNjdEODA0OEMwRDFDRTNCMjQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEU1MjUwNDM5N0I2ODM1Nzg0QkQ0RTY3RDgwNDhDMEQxQ0Uz QjI0Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODkxZDNjMzAtOTVkYy00YjcyLWFl MWItYWQxZTk4YjBlMTc5LzAvNEU1MjUwNDM5N0I2ODM1Nzg0QkQ0RTY3RDgwNDhD MEQxQ0UzQjI0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEyxwumptJoX02oXXsDjAumQvbKGnMUQr1CK YKxUTC/5ceaC2j3JQBRsryUQ12ooJ5GZ8rXoi6zR2xW1/AykS9jBkBvrylxfPBAa U3F/qv8li1KsxCCpLIJdHVeTBCg/KlU+hi4glcOeMz9sN5zG7RrVQVrU+gIt6P7s hq/vpvqSvaA/QDAPHMZR0z09WQmCY8lAk0v6wrZTMsJMb4nwLrDYkYTKcWysEgqh BNM6/l6+XKEJT64XThDIwqmoKi9QtyrDAxiIfiFXt0XojUxwM2TDeMV1X3qyUk0m qs1dw6ZgWY5tgAAoTl5QXUCjjcIM81k7B3/IsLerQ/RuMh3d+0k= -----END CERTIFICATE-----Generated at Sat Aug 9 01:00:13 2025 by rpki-client