$ rpki-client -vvf repo-rpki.idnic.net/repo/9eab0a01-8ee4-4825-840d-112daef0aca8/0/4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.mft File: 4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.mft (raw, json) Hash identifier: 2Nsf5awgzXMwrrwd3+q5o1lUdXMq/0keYx4JW/bnwyo= Subject key identifier: D5:C3:48:8C:95:39:F1:BD:91:22:BD:7F:7F:8B:5E:11:56:54:37:39 Authority key identifier: 4E:2A:A9:ED:35:DB:0F:27:6A:5F:F0:D4:02:0D:BE:A1:3E:04:C6:23 Certificate issuer: /CN=4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623 Certificate serial: 2F03EAC3C4F744C9829BEDF3B27932CC8EA7F993 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9eab0a01-8ee4-4825-840d-112daef0aca8/0/4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.mft Manifest number: 0195 Signing time: Wed 06 Aug 2025 05:21:32 +0000 Manifest this update: Wed 06 Aug 2025 05:16:32 +0000 Manifest next update: Sat 09 Aug 2025 11:16:32 +0000 Files and hashes: 1: 3130332e3137342e31342e302f32332d3234203d3e20313439333532.roa (hash: cJjmG0CdhjaR+QAVA5ZLIDFXiWwjI5yTIKuxLgCeRRg=) 2: 323030313a6466303a6134303a3a2f34382d3438203d3e20313439333532.roa (hash: lidUKpIUI42q8veE3vysCaBMTq0HxAiYVl6H5XafxIU=) 3: 4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.crl (hash: HMpjAxr5Q0S253PqWAsRsFY6zvnR9h+7nQ4+4xIjb9I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9eab0a01-8ee4-4825-840d-112daef0aca8/0/4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.crl rsync://repo-rpki.idnic.net/repo/9eab0a01-8ee4-4825-840d-112daef0aca8/0/4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 11:16:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:03:ea:c3:c4:f7:44:c9:82:9b:ed:f3:b2:79:32:cc:8e:a7:f9:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623 Validity Not Before: Aug 6 05:16:32 2025 GMT Not After : Aug 9 11:16:32 2025 GMT Subject: CN=D5C3488C9539F1BD9122BD7F7F8B5E1156543739 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ab:a7:8e:92:da:b6:01:92:cc:b8:45:33:42: 33:98:9a:d9:84:a3:84:71:c2:31:ed:52:5c:c9:14: 1a:de:b1:65:a2:4d:b3:d4:92:05:61:a9:ba:de:86: 5d:f6:dc:07:2d:a5:98:52:44:66:c0:45:82:63:67: 88:60:d0:94:1a:ba:74:96:70:da:ce:68:c0:73:fd: 26:13:de:f5:d5:74:64:1c:67:99:f5:f4:07:56:d1: b3:44:a2:14:c8:f1:81:ba:16:f2:13:7e:c4:78:12: 36:ba:57:c5:a7:4f:96:ea:91:f5:04:cc:f6:7e:43: 22:0d:2c:b4:8c:b7:76:79:6b:43:e2:7d:3a:9e:eb: fc:d6:6e:f2:3b:60:7b:00:01:cd:63:3b:64:fd:e0: dd:26:09:5c:9e:64:a3:e6:39:5f:9a:e1:7d:a7:b3: 0d:f1:db:c8:4c:ce:27:84:e9:3e:18:9a:3b:39:ad: 1a:cc:83:f7:13:8d:da:bd:5b:dd:9e:9a:b9:53:1e: e7:01:e8:25:6d:54:d2:e2:85:f0:ac:96:46:a8:0e: 53:d7:82:56:ff:44:6e:ea:c9:10:e5:32:e1:97:f1: 36:c5:6a:67:bf:06:5b:cf:77:fd:08:96:e9:02:3d: 95:de:29:6e:3a:a6:0f:5d:4b:df:0c:d0:d4:1e:c2: 3d:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:C3:48:8C:95:39:F1:BD:91:22:BD:7F:7F:8B:5E:11:56:54:37:39 X509v3 Authority Key Identifier: keyid:4E:2A:A9:ED:35:DB:0F:27:6A:5F:F0:D4:02:0D:BE:A1:3E:04:C6:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9eab0a01-8ee4-4825-840d-112daef0aca8/0/4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9eab0a01-8ee4-4825-840d-112daef0aca8/0/4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:6a:45:8f:6c:08:48:ab:7c:04:84:1b:69:9f:62:f6:12:c7: b9:55:32:4f:15:b2:7e:17:b3:7f:c3:bd:33:cf:b6:0d:7e:ce: 12:2e:68:74:27:75:18:a9:90:28:07:f4:58:d6:07:4c:9a:07: c9:85:31:55:a6:3c:43:0f:d5:b7:6a:98:f0:42:30:b2:24:43: a8:80:a5:97:de:38:7c:3d:e7:67:50:99:0e:cd:b2:67:0e:d3: bf:35:7b:48:9e:fe:64:a9:43:a0:8f:d2:95:4f:80:52:19:00: 44:64:a2:1c:77:ff:8e:dd:ca:0a:ac:da:15:3e:2c:7f:d4:5b: 3b:21:e4:13:ee:83:3a:b6:bf:29:ec:b7:44:04:3e:96:33:6f: e2:35:7a:ac:e7:c3:9e:86:87:3d:1c:5e:60:a6:65:98:36:77: 0c:19:7d:39:7b:4e:4f:e5:38:3b:17:a1:f1:fa:64:bb:7e:a2: 98:6a:ad:2e:5f:af:9f:fd:67:54:ab:67:7b:a1:02:a9:8e:58: bb:02:aa:3c:10:ac:e1:79:1d:c3:25:39:b3:5b:49:be:e8:20: 50:f9:e3:0e:56:8d:ab:f9:6c:69:13:b9:ff:a2:c4:0e:6d:3f: b6:17:4d:db:9e:d7:af:9c:b9:b7:96:21:9c:65:63:d0:0b:9b: 2a:17:67:b9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULwPqw8T3RMmCm+3zsnkyzI6n+ZMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEUyQUE5RUQzNURCMEYyNzZBNUZGMEQ0MDIwREJFQTEz RTA0QzYyMzAeFw0yNTA4MDYwNTE2MzJaFw0yNTA4MDkxMTE2MzJaMDMxMTAvBgNV BAMTKEQ1QzM0ODhDOTUzOUYxQkQ5MTIyQkQ3RjdGOEI1RTExNTY1NDM3MzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNq6eOktq2AZLMuEUzQjOYmtmE o4RxwjHtUlzJFBresWWiTbPUkgVhqbrehl323ActpZhSRGbARYJjZ4hg0JQaunSW cNrOaMBz/SYT3vXVdGQcZ5n19AdW0bNEohTI8YG6FvITfsR4Eja6V8WnT5bqkfUE zPZ+QyINLLSMt3Z5a0PifTqe6/zWbvI7YHsAAc1jO2T94N0mCVyeZKPmOV+a4X2n sw3x28hMzieE6T4Ymjs5rRrMg/cTjdq9W92emrlTHucB6CVtVNLihfCslkaoDlPX glb/RG7qyRDlMuGX8TbFame/BlvPd/0IlukCPZXeKW46pg9dS98M0NQewj2XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1cNIjJU58b2RIr1/f4teEVZUNzkwHwYDVR0j BBgwFoAUTiqp7TXbDydqX/DUAg2+oT4ExiMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZWFiMGEwMS04ZWU0LTQ4MjUtODQwZC0xMTJkYWVmMGFjYTgvMC80RTJBQTlFRDM1 REIwRjI3NkE1RkYwRDQwMjBEQkVBMTNFMDRDNjIzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEUyQUE5RUQzNURCMEYyNzZBNUZGMEQ0MDIwREJFQTEzRTA0 QzYyMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWVhYjBhMDEtOGVlNC00ODI1LTg0 MGQtMTEyZGFlZjBhY2E4LzAvNEUyQUE5RUQzNURCMEYyNzZBNUZGMEQ0MDIwREJF QTEzRTA0QzYyMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACVqRY9sCEirfASEG2mfYvYSx7lVMk8Vsn4X s3/DvTPPtg1+zhIuaHQndRipkCgH9FjWB0yaB8mFMVWmPEMP1bdqmPBCMLIkQ6iA pZfeOHw952dQmQ7NsmcO0781e0ie/mSpQ6CP0pVPgFIZAERkohx3/47dygqs2hU+ LH/UWzsh5BPugzq2vynst0QEPpYzb+I1eqznw56Ghz0cXmCmZZg2dwwZfTl7Tk/l ODsXofH6ZLt+ophqrS5fr5/9Z1SrZ3uhAqmOWLsCqjwQrOF5HcMlObNbSb7oIFD5 4w5Wjav5bGkTuf+ixA5tP7YXTdue16+cubeWIZxlY9ALmyoXZ7k= -----END CERTIFICATE-----Generated at Thu Aug 7 03:51:13 2025 by rpki-client