$ rpki-client -vvf repo-rpki.idnic.net/repo/9a2bfe9a-3823-44e9-97c0-2191a56bafd3/0/4F022459BA46CF30700E070671C752B44729E249.mft File: 4F022459BA46CF30700E070671C752B44729E249.mft (raw, json) Hash identifier: wrDfQYYfNifuiQSthWqkVIMqLmrVdwil+3vVlZP5Lrw= Subject key identifier: 5C:84:A2:39:F3:05:AA:3F:AF:BB:3E:85:6C:49:BF:66:0D:8B:23:1D Authority key identifier: 4F:02:24:59:BA:46:CF:30:70:0E:07:06:71:C7:52:B4:47:29:E2:49 Certificate issuer: /CN=4F022459BA46CF30700E070671C752B44729E249 Certificate serial: 4163B639AFCFF63E55FF3D1362FFDDB031F299B0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F022459BA46CF30700E070671C752B44729E249.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9a2bfe9a-3823-44e9-97c0-2191a56bafd3/0/4F022459BA46CF30700E070671C752B44729E249.mft Manifest number: 019C Signing time: Thu 07 Aug 2025 04:22:15 +0000 Manifest this update: Thu 07 Aug 2025 04:17:15 +0000 Manifest next update: Sun 10 Aug 2025 11:00:15 +0000 Files and hashes: 1: 3130332e36312e3233352e302f32342d3234203d3e20313530353130.roa (hash: OWWwKr6VgMTRSl2gHvmJwedkDbcvu1lGUMF7l6U0D14=) 2: 3130332e36312e3233342e302f32342d3234203d3e20313530353130.roa (hash: VvIxYiO1vpW4N2M0c206efZBd+dmDTRrTwPYKqia/UQ=) 3: 3130332e36312e3233342e302f32332d3233203d3e20313530353130.roa (hash: eReb0WjJwBofXwNbDwmRqsCz1oLf4D/ET0XbS0nqqnk=) 4: 4F022459BA46CF30700E070671C752B44729E249.crl (hash: ccG/q7M3cv9GTD7hBylAZ9gd4SKy9nteGiApOagVbHI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9a2bfe9a-3823-44e9-97c0-2191a56bafd3/0/4F022459BA46CF30700E070671C752B44729E249.crl rsync://repo-rpki.idnic.net/repo/9a2bfe9a-3823-44e9-97c0-2191a56bafd3/0/4F022459BA46CF30700E070671C752B44729E249.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F022459BA46CF30700E070671C752B44729E249.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 11:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:63:b6:39:af:cf:f6:3e:55:ff:3d:13:62:ff:dd:b0:31:f2:99:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4F022459BA46CF30700E070671C752B44729E249 Validity Not Before: Aug 7 04:17:15 2025 GMT Not After : Aug 10 11:00:15 2025 GMT Subject: CN=5C84A239F305AA3FAFBB3E856C49BF660D8B231D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:8c:65:a6:b5:b7:76:cb:af:6c:e2:80:b1:54: a5:77:57:7b:d9:ed:a1:ef:a3:3a:7c:1e:5b:bf:cf: 10:27:ea:7c:fd:2b:76:0c:a4:1b:bc:18:28:1c:a9: d2:3d:06:8e:e9:d4:58:1e:d0:3e:7e:83:37:5a:4f: 91:72:22:81:07:f7:5f:65:57:cc:8e:97:98:11:a5: e6:c2:ec:4d:42:d5:02:87:22:95:6a:c8:15:e4:da: 0a:00:41:2e:69:ee:aa:83:05:0d:99:71:e8:d9:0e: cb:fc:5b:ef:75:db:d7:17:63:b1:36:1c:2f:98:ac: 72:87:47:46:ea:5f:ff:27:19:7f:58:4f:28:37:d3: c5:4f:10:3a:58:6d:e5:62:88:91:70:5c:cc:e5:c4: 6d:d3:45:e4:5a:60:ba:de:37:4f:95:28:d5:69:d4: 37:c3:39:1a:4c:df:77:c6:c7:e7:29:86:7f:9a:1a: d7:cf:39:ba:a0:25:b5:64:32:ed:d3:77:cb:5b:86: c9:aa:69:d7:5e:d8:fb:ae:5d:dd:4f:66:b6:dd:70: 8e:2c:1f:f5:9f:d4:ca:1d:a2:1c:bd:8e:2a:c0:e4: 79:4d:de:56:d0:6b:a6:17:86:8e:2f:24:1c:f2:39: cd:43:c9:57:41:ab:f5:ca:2a:77:d5:c3:48:99:ae: 5a:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:84:A2:39:F3:05:AA:3F:AF:BB:3E:85:6C:49:BF:66:0D:8B:23:1D X509v3 Authority Key Identifier: keyid:4F:02:24:59:BA:46:CF:30:70:0E:07:06:71:C7:52:B4:47:29:E2:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9a2bfe9a-3823-44e9-97c0-2191a56bafd3/0/4F022459BA46CF30700E070671C752B44729E249.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F022459BA46CF30700E070671C752B44729E249.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9a2bfe9a-3823-44e9-97c0-2191a56bafd3/0/4F022459BA46CF30700E070671C752B44729E249.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c1:a1:0c:af:c6:12:17:43:c1:f5:6d:c1:ca:1a:97:dd:3f:3e: bb:31:80:f0:76:85:dc:dd:5f:9d:96:58:74:d7:22:23:1e:16: 76:69:51:af:67:41:51:a7:9e:c5:b3:5e:62:9a:64:56:b1:7d: 6e:5f:34:68:e0:8a:02:a6:40:8e:c0:ad:88:a0:fb:82:b4:0d: a2:07:b3:c1:eb:52:47:fb:fc:a4:54:42:6f:8d:be:d3:d1:fd: 18:a2:34:84:ed:d3:6c:33:fc:d6:75:dc:94:f7:eb:f8:ec:14: d8:0e:b6:5b:e5:8b:f6:fc:c9:57:78:d7:0f:85:9e:9c:5b:f6: 67:be:39:3f:4d:90:55:48:6a:4f:93:50:fd:ca:78:b6:bf:9c: ca:5b:eb:05:c0:d5:30:a9:e6:6b:2e:4d:2c:e0:4c:19:c1:0f: 3d:02:c8:c0:e8:69:10:34:5d:9a:e7:b3:6e:e6:f8:48:05:e3: 5b:c9:98:0a:88:05:3b:65:c7:a5:09:c0:aa:71:0d:0b:10:25: f9:a5:58:1c:08:11:13:26:9a:4c:de:1f:c0:e7:8d:d6:c3:7c: 88:5e:02:8d:65:6a:72:11:1c:3a:e1:51:9a:64:ad:22:ea:7b: 61:39:10:b8:e6:84:c4:82:27:4e:0a:2d:a0:f6:5e:96:3c:fa: 99:58:5b:1f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQWO2Oa/P9j5V/z0TYv/dsDHymbAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEYwMjI0NTlCQTQ2Q0YzMDcwMEUwNzA2NzFDNzUyQjQ0 NzI5RTI0OTAeFw0yNTA4MDcwNDE3MTVaFw0yNTA4MTAxMTAwMTVaMDMxMTAvBgNV BAMTKDVDODRBMjM5RjMwNUFBM0ZBRkJCM0U4NTZDNDlCRjY2MEQ4QjIzMUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1jGWmtbd2y69s4oCxVKV3V3vZ 7aHvozp8Hlu/zxAn6nz9K3YMpBu8GCgcqdI9Bo7p1Fge0D5+gzdaT5FyIoEH919l V8yOl5gRpebC7E1C1QKHIpVqyBXk2goAQS5p7qqDBQ2ZcejZDsv8W+9129cXY7E2 HC+YrHKHR0bqX/8nGX9YTyg308VPEDpYbeViiJFwXMzlxG3TReRaYLreN0+VKNVp 1DfDORpM33fGx+cphn+aGtfPObqgJbVkMu3Td8tbhsmqadde2PuuXd1PZrbdcI4s H/Wf1Modohy9jirA5HlN3lbQa6YXho4vJBzyOc1DyVdBq/XKKnfVw0iZrlq9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXISiOfMFqj+vuz6FbEm/Zg2LIx0wHwYDVR0j BBgwFoAUTwIkWbpGzzBwDgcGccdStEcp4kkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YTJiZmU5YS0zODIzLTQ0ZTktOTdjMC0yMTkxYTU2YmFmZDMvMC80RjAyMjQ1OUJB NDZDRjMwNzAwRTA3MDY3MUM3NTJCNDQ3MjlFMjQ5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEYwMjI0NTlCQTQ2Q0YzMDcwMEUwNzA2NzFDNzUyQjQ0NzI5 RTI0OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWEyYmZlOWEtMzgyMy00NGU5LTk3 YzAtMjE5MWE1NmJhZmQzLzAvNEYwMjI0NTlCQTQ2Q0YzMDcwMEUwNzA2NzFDNzUy QjQ0NzI5RTI0OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMGhDK/GEhdDwfVtwcoal90/PrsxgPB2hdzd X52WWHTXIiMeFnZpUa9nQVGnnsWzXmKaZFaxfW5fNGjgigKmQI7ArYig+4K0DaIH s8HrUkf7/KRUQm+NvtPR/RiiNITt02wz/NZ13JT36/jsFNgOtlvli/b8yVd41w+F npxb9me+OT9NkFVIak+TUP3KeLa/nMpb6wXA1TCp5msuTSzgTBnBDz0CyMDoaRA0 XZrns27m+EgF41vJmAqIBTtlx6UJwKpxDQsQJfmlWBwIERMmmkzeH8DnjdbDfIhe Ao1lanIRHDrhUZpkrSLqe2E5ELjmhMSCJ04KLaD2XpY8+plYWx8= -----END CERTIFICATE-----Generated at Thu Aug 7 07:22:31 2025 by rpki-client