$ rpki-client -vvf repo-rpki.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.mft File: 4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.mft (raw, json) Hash identifier: a1ZhSgzGPwpaTamcucR8lZS1cny1WYZd1QiWm+Af1Wk= Subject key identifier: 5D:70:10:87:66:77:D2:9E:E2:79:62:22:46:A1:34:3F:3D:74:94:DC Authority key identifier: 4B:E0:EB:AF:EF:1E:20:6C:AD:8B:4E:AD:6D:6A:08:D3:A8:C0:1B:50 Certificate issuer: /CN=4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50 Certificate serial: 39E153EFA1F0766B46108700BCF52047603F932A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.cer Subject info access: rsync://repo-rpki.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.mft Manifest number: 01E9 Signing time: Tue 05 Aug 2025 19:00:52 +0000 Manifest this update: Tue 05 Aug 2025 18:55:52 +0000 Manifest next update: Sat 09 Aug 2025 06:16:52 +0000 Files and hashes: 1: 3130332e38362e3132382e302f32332d3234203d3e2034383030.roa (hash: D4xO8SkIE8jeNebf9M5hiqlhcLrsrkGAhopy0O7d3p0=) 2: 4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.crl (hash: llNjT26F24uL9eC7HIWZkd84yDzGzH88MKFc3r+x1Yo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.crl rsync://repo-rpki.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 06:16:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:e1:53:ef:a1:f0:76:6b:46:10:87:00:bc:f5:20:47:60:3f:93:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50 Validity Not Before: Aug 5 18:55:52 2025 GMT Not After : Aug 9 06:16:52 2025 GMT Subject: CN=5D7010876677D29EE279622246A1343F3D7494DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b2:cb:43:c3:a4:1e:af:08:27:9f:2a:4b:0c: 77:fc:41:84:76:f6:cd:06:60:6d:48:28:a9:47:27: c9:df:ea:be:69:7f:c2:c4:c3:7b:72:8c:62:59:7a: d4:55:b2:df:b3:a2:81:a0:ab:fd:f1:50:48:05:cf: 6d:cb:53:07:02:34:91:4e:41:c8:ad:25:6c:ea:20: af:98:fe:9a:4b:e5:38:63:b2:0f:24:03:87:c8:4f: 15:a5:b8:5b:a9:63:3c:64:d9:2a:c3:ba:c5:06:3b: 3c:5f:07:e7:db:a9:74:1a:99:a9:16:25:45:81:6e: 3b:ce:09:cd:55:12:da:3e:d1:78:cc:9c:c4:78:46: ae:26:87:d0:0f:59:5d:38:4a:a9:56:e5:68:df:38: 00:72:dc:e3:c8:65:f3:25:d9:71:2f:ea:de:df:c8: e4:68:b0:3c:a1:1c:2f:d7:35:36:6b:23:cb:dd:32: c9:c1:47:78:96:18:24:0f:51:82:ce:19:e4:9e:d3: 63:59:c4:6e:23:af:c0:a4:3b:93:e2:0d:37:62:4b: 8b:c2:9c:13:b2:3e:3a:24:c3:a0:d0:76:dc:02:62: f6:50:58:b4:fd:06:8a:e7:12:f3:da:2f:d2:fb:5b: 7a:2e:24:f6:87:b3:41:70:0a:4b:99:3f:8c:5c:b4: 3b:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:70:10:87:66:77:D2:9E:E2:79:62:22:46:A1:34:3F:3D:74:94:DC X509v3 Authority Key Identifier: keyid:4B:E0:EB:AF:EF:1E:20:6C:AD:8B:4E:AD:6D:6A:08:D3:A8:C0:1B:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:86:a9:59:f8:38:18:b9:fd:9e:9e:28:7b:1b:0a:40:ab:7b: 9d:49:81:6f:21:df:0b:fd:7d:a8:58:b3:0b:8e:d5:d6:dc:9b: 82:29:61:32:bf:e8:4e:1e:fe:68:5d:10:fb:db:11:c0:37:54: e8:21:96:d6:2b:85:ee:26:b5:fe:71:e2:cf:4b:f5:cd:7f:ec: 4e:5b:b1:73:d9:54:42:75:6b:69:c8:e1:57:dd:94:34:cf:98: 0a:4d:42:1d:ac:ca:2c:3a:28:56:7d:df:8f:7b:9a:d8:99:71: ee:9c:2f:48:86:76:4e:46:f6:f6:c9:13:10:fa:cc:3d:52:d6: c6:5f:d5:a0:65:e5:9d:62:0a:dc:8a:c9:85:cd:57:89:e1:80: 3e:ea:05:25:84:11:5f:70:db:7b:9b:5f:f3:21:20:84:8b:e1: dd:93:71:9b:f5:42:69:53:2b:a5:ae:27:83:4d:d4:15:ce:1a: 22:8c:33:8d:5d:34:9c:17:e2:02:9c:eb:2d:c5:8a:a6:fd:36: 3e:19:d6:93:f2:4b:54:f7:03:29:e7:62:34:93:13:67:a1:77: e2:f6:9c:d0:5a:d7:e6:2b:b6:16:a1:91:f0:49:0a:db:b5:22: 49:b2:3e:a7:f0:0b:e3:83:1d:4c:1c:19:03:1f:95:c5:40:12: 04:d4:31:68 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOeFT76HwdmtGEIcAvPUgR2A/kyowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEJFMEVCQUZFRjFFMjA2Q0FEOEI0RUFENkQ2QTA4RDNB OEMwMUI1MDAeFw0yNTA4MDUxODU1NTJaFw0yNTA4MDkwNjE2NTJaMDMxMTAvBgNV BAMTKDVENzAxMDg3NjY3N0QyOUVFMjc5NjIyMjQ2QTEzNDNGM0Q3NDk0REMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9sstDw6QerwgnnypLDHf8QYR2 9s0GYG1IKKlHJ8nf6r5pf8LEw3tyjGJZetRVst+zooGgq/3xUEgFz23LUwcCNJFO QcitJWzqIK+Y/ppL5Thjsg8kA4fITxWluFupYzxk2SrDusUGOzxfB+fbqXQamakW JUWBbjvOCc1VEto+0XjMnMR4Rq4mh9APWV04SqlW5WjfOABy3OPIZfMl2XEv6t7f yORosDyhHC/XNTZrI8vdMsnBR3iWGCQPUYLOGeSe02NZxG4jr8CkO5PiDTdiS4vC nBOyPjokw6DQdtwCYvZQWLT9BornEvPaL9L7W3ouJPaHs0FwCkuZP4xctDuhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXXAQh2Z30p7ieWIiRqE0Pz10lNwwHwYDVR0j BBgwFoAUS+Drr+8eIGyti06tbWoI06jAG1AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OGE3ZjM1NS1mMjI1LTQ4ZjMtODdmOC0wYmZiMGM4ZTU4ZjAvMC80QkUwRUJBRkVG MUUyMDZDQUQ4QjRFQUQ2RDZBMDhEM0E4QzAxQjUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEJFMEVCQUZFRjFFMjA2Q0FEOEI0RUFENkQ2QTA4RDNBOEMw MUI1MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOThhN2YzNTUtZjIyNS00OGYzLTg3 ZjgtMGJmYjBjOGU1OGYwLzAvNEJFMEVCQUZFRjFFMjA2Q0FEOEI0RUFENkQ2QTA4 RDNBOEMwMUI1MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI2GqVn4OBi5/Z6eKHsbCkCre51JgW8h3wv9 fahYswuO1dbcm4IpYTK/6E4e/mhdEPvbEcA3VOghltYrhe4mtf5x4s9L9c1/7E5b sXPZVEJ1a2nI4VfdlDTPmApNQh2syiw6KFZ93497mtiZce6cL0iGdk5G9vbJExD6 zD1S1sZf1aBl5Z1iCtyKyYXNV4nhgD7qBSWEEV9w23ubX/MhIISL4d2TcZv1QmlT K6WuJ4NN1BXOGiKMM41dNJwX4gKc6y3Fiqb9Nj4Z1pPyS1T3AynnYjSTE2ehd+L2 nNBa1+YrthahkfBJCtu1IkmyPqfwC+ODHUwcGQMflcVAEgTUMWg= -----END CERTIFICATE-----Generated at Thu Aug 7 05:02:15 2025 by rpki-client