$ rpki-client -vvf repo-rpki.idnic.net/repo/960f8461-bb2c-4d3e-a5be-700939427c8c/0/4BC6236908AF9F36A8057E2BB1A5B34BCD6B7DBA.mft File: 4BC6236908AF9F36A8057E2BB1A5B34BCD6B7DBA.mft (raw, json) Hash identifier: 4Eeko5gSK+bV4BlQIFvOZKO0joNrna2unEFCHUWnXVM= Subject key identifier: 2E:25:E2:ED:DC:25:DC:06:9F:6A:AD:BA:E4:21:D0:EE:96:83:ED:6D Authority key identifier: 4B:C6:23:69:08:AF:9F:36:A8:05:7E:2B:B1:A5:B3:4B:CD:6B:7D:BA Certificate issuer: /CN=4BC6236908AF9F36A8057E2BB1A5B34BCD6B7DBA Certificate serial: 433850DA3DB49DA43978F72901E8CF2058517152 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BC6236908AF9F36A8057E2BB1A5B34BCD6B7DBA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/960f8461-bb2c-4d3e-a5be-700939427c8c/0/4BC6236908AF9F36A8057E2BB1A5B34BCD6B7DBA.mft Manifest number: 018D Signing time: Tue 05 Aug 2025 07:41:34 +0000 Manifest this update: Tue 05 Aug 2025 07:36:34 +0000 Manifest next update: Fri 08 Aug 2025 10:02:34 +0000 Files and hashes: 1: 4BC6236908AF9F36A8057E2BB1A5B34BCD6B7DBA.crl (hash: filvpT+33ro8oat5SbJvRKI9QznwgGsMo3iHau1c1DA=) 2: 3130332e3139392e3131372e302f32342d3234203d3e20313530393234.roa (hash: 6oB2NEdb1J8wzFdKjlXlM7HaXvyVJb+FJhi1JoqHPbo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/960f8461-bb2c-4d3e-a5be-700939427c8c/0/4BC6236908AF9F36A8057E2BB1A5B34BCD6B7DBA.crl rsync://repo-rpki.idnic.net/repo/960f8461-bb2c-4d3e-a5be-700939427c8c/0/4BC6236908AF9F36A8057E2BB1A5B34BCD6B7DBA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BC6236908AF9F36A8057E2BB1A5B34BCD6B7DBA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 10:02:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:38:50:da:3d:b4:9d:a4:39:78:f7:29:01:e8:cf:20:58:51:71:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4BC6236908AF9F36A8057E2BB1A5B34BCD6B7DBA Validity Not Before: Aug 5 07:36:34 2025 GMT Not After : Aug 8 10:02:34 2025 GMT Subject: CN=2E25E2EDDC25DC069F6AADBAE421D0EE9683ED6D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:b0:cf:ee:25:ff:cc:16:81:5f:81:a0:e3:45: 3d:23:1b:8c:23:45:16:40:e0:fa:e3:ca:fe:5e:e9: f3:75:f1:ce:10:bf:1e:0e:f4:4e:a5:21:fb:e7:48: 33:0d:17:27:87:f1:91:ec:2c:c7:30:d0:ec:39:06: 07:4a:93:ac:f3:bc:24:ef:25:86:7d:85:48:3a:d0: 63:52:29:fb:87:d4:67:62:f8:25:ae:34:7c:d5:52: 7c:c2:8e:2e:e6:b7:c2:1c:d3:d6:8a:b7:58:a6:bf: de:cc:b5:91:67:18:42:0c:84:48:02:d3:da:08:22: ac:b3:fe:a0:34:dc:27:5e:76:5b:52:e8:7b:ac:65: 0d:7c:32:2e:5f:75:3a:53:1e:8e:b0:3e:b2:39:76: 24:dc:7b:57:49:9e:a4:3e:24:a6:c1:2d:c6:73:c6: 9b:0e:e7:a9:d1:23:fb:79:74:95:31:df:d4:6e:11: d9:8f:04:6a:2b:f7:c9:6f:a8:9f:fa:0d:98:06:60: 9c:4f:6d:4c:75:ab:b5:17:0c:88:b4:32:f4:33:c2: 03:43:04:2e:67:dc:07:dd:eb:1a:a3:08:4f:29:a5: 5a:ee:55:cb:6c:59:19:fa:29:72:1f:0f:f4:2c:4b: e1:7c:7f:01:5c:c7:d6:ba:d9:cf:e1:92:8b:1f:fe: 1d:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:25:E2:ED:DC:25:DC:06:9F:6A:AD:BA:E4:21:D0:EE:96:83:ED:6D X509v3 Authority Key Identifier: keyid:4B:C6:23:69:08:AF:9F:36:A8:05:7E:2B:B1:A5:B3:4B:CD:6B:7D:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/960f8461-bb2c-4d3e-a5be-700939427c8c/0/4BC6236908AF9F36A8057E2BB1A5B34BCD6B7DBA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BC6236908AF9F36A8057E2BB1A5B34BCD6B7DBA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/960f8461-bb2c-4d3e-a5be-700939427c8c/0/4BC6236908AF9F36A8057E2BB1A5B34BCD6B7DBA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:91:08:a3:67:6c:8c:44:b5:7c:ce:35:d8:94:de:e3:93:cc: e2:1d:bf:e8:7e:d1:58:8e:8e:ef:5c:b3:c2:3e:57:a9:d8:a9: 6f:5d:9e:51:fa:d4:cb:41:04:d9:2e:d3:c4:37:b6:7c:8e:cc: 62:ce:dd:0f:42:39:2c:29:ef:be:85:25:b5:10:be:62:3d:65: 3b:2a:9c:c6:d2:de:aa:a6:f7:29:c1:a6:69:6f:b7:bb:8b:d5: ba:6c:4c:a1:ba:d1:3c:60:92:f4:dc:6e:74:d5:e0:c1:1e:00: ed:92:d0:f2:57:82:52:22:40:01:48:9a:1c:fb:60:86:45:a5: 20:15:11:eb:bb:d5:49:77:5b:1c:78:f0:8d:3e:ab:39:ad:b1: 44:c6:40:11:b1:73:2a:9b:43:99:5b:45:a3:38:e4:28:27:94: 64:a9:c6:e1:52:4c:ae:58:ab:68:b9:16:06:62:98:86:cc:ce: ce:3b:21:4d:65:71:57:29:92:70:52:a7:06:6e:7d:be:94:a9: ce:52:8e:07:3a:3d:ce:c5:2e:bc:2f:08:1d:13:b0:2d:49:2e: 47:bf:b5:13:c4:cf:00:87:75:fa:84:4f:9f:d9:12:bf:5d:d2: 32:47:77:ff:b3:b6:d6:28:6f:07:8f:45:fa:89:e3:32:2e:e6: 2c:66:73:c8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQzhQ2j20naQ5ePcpAejPIFhRcVIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEJDNjIzNjkwOEFGOUYzNkE4MDU3RTJCQjFBNUIzNEJD RDZCN0RCQTAeFw0yNTA4MDUwNzM2MzRaFw0yNTA4MDgxMDAyMzRaMDMxMTAvBgNV BAMTKDJFMjVFMkVEREMyNURDMDY5RjZBQURCQUU0MjFEMEVFOTY4M0VENkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpsM/uJf/MFoFfgaDjRT0jG4wj RRZA4Prjyv5e6fN18c4Qvx4O9E6lIfvnSDMNFyeH8ZHsLMcw0Ow5BgdKk6zzvCTv JYZ9hUg60GNSKfuH1Gdi+CWuNHzVUnzCji7mt8Ic09aKt1imv97MtZFnGEIMhEgC 09oIIqyz/qA03CdedltS6HusZQ18Mi5fdTpTHo6wPrI5diTce1dJnqQ+JKbBLcZz xpsO56nRI/t5dJUx39RuEdmPBGor98lvqJ/6DZgGYJxPbUx1q7UXDIi0MvQzwgND BC5n3Afd6xqjCE8ppVruVctsWRn6KXIfD/QsS+F8fwFcx9a62c/hkosf/h3tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULiXi7dwl3Aafaq265CHQ7paD7W0wHwYDVR0j BBgwFoAUS8YjaQivnzaoBX4rsaWzS81rfbowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NjBmODQ2MS1iYjJjLTRkM2UtYTViZS03MDA5Mzk0MjdjOGMvMC80QkM2MjM2OTA4 QUY5RjM2QTgwNTdFMkJCMUE1QjM0QkNENkI3REJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEJDNjIzNjkwOEFGOUYzNkE4MDU3RTJCQjFBNUIzNEJDRDZC N0RCQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTYwZjg0NjEtYmIyYy00ZDNlLWE1 YmUtNzAwOTM5NDI3YzhjLzAvNEJDNjIzNjkwOEFGOUYzNkE4MDU3RTJCQjFBNUIz NEJDRDZCN0RCQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAASRCKNnbIxEtXzONdiU3uOTzOIdv+h+0ViO ju9cs8I+V6nYqW9dnlH61MtBBNku08Q3tnyOzGLO3Q9COSwp776FJbUQvmI9ZTsq nMbS3qqm9ynBpmlvt7uL1bpsTKG60TxgkvTcbnTV4MEeAO2S0PJXglIiQAFImhz7 YIZFpSAVEeu71Ul3Wxx48I0+qzmtsUTGQBGxcyqbQ5lbRaM45CgnlGSpxuFSTK5Y q2i5FgZimIbMzs47IU1lcVcpknBSpwZufb6Uqc5Sjgc6Pc7FLrwvCB0TsC1JLke/ tRPEzwCHdfqET5/ZEr9d0jJHd/+zttYobwePRfqJ4zIu5ixmc8g= -----END CERTIFICATE-----Generated at Thu Aug 7 11:12:22 2025 by rpki-client