$ rpki-client -vvf repo-rpki.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0/4617272EE875B55CD5F2A88330A95F6410A3EB1B.mft File: 4617272EE875B55CD5F2A88330A95F6410A3EB1B.mft (raw, json) Hash identifier: UOx5R928FewBZkcxjtgpy2OVt3Ajiu9IAcW1BL63/l8= Subject key identifier: EE:3E:0C:E0:AF:7F:3C:08:C4:79:C6:33:18:DD:06:03:E1:67:D4:D3 Authority key identifier: 46:17:27:2E:E8:75:B5:5C:D5:F2:A8:83:30:A9:5F:64:10:A3:EB:1B Certificate issuer: /CN=4617272EE875B55CD5F2A88330A95F6410A3EB1B Certificate serial: 27508DDD01BFDF04B4A8196F5210159941200AB8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4617272EE875B55CD5F2A88330A95F6410A3EB1B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0/4617272EE875B55CD5F2A88330A95F6410A3EB1B.mft Manifest number: E8 Signing time: Mon 11 Aug 2025 17:51:10 +0000 Manifest this update: Mon 11 Aug 2025 17:46:10 +0000 Manifest next update: Fri 15 Aug 2025 02:49:10 +0000 Files and hashes: 1: 4617272EE875B55CD5F2A88330A95F6410A3EB1B.crl (hash: rvSlDteocXs6nxgSf33H593OohDjRxEGDJq2jWQ8MYg=) 2: 3135372e31352e34342e302f32332d3233203d3e20313532333931.roa (hash: CWrSRGIb9DWeCqXVEcCNk243mh86Y3a1VFur2jkpr3Y=) 3: 3135372e31352e34342e302f32342d3234203d3e20313532333931.roa (hash: GmvMNkypXN/dIsdT8yqrh6k/wsMAgACMxsXszxhLEFE=) 4: 3135372e31352e34352e302f32342d3234203d3e20313532333931.roa (hash: 2CY8OOUSlhDxwOprH4RWK6WUcOME935meBmsXq8UBEQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0/4617272EE875B55CD5F2A88330A95F6410A3EB1B.crl rsync://repo-rpki.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0/4617272EE875B55CD5F2A88330A95F6410A3EB1B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4617272EE875B55CD5F2A88330A95F6410A3EB1B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 15 Aug 2025 02:49:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:50:8d:dd:01:bf:df:04:b4:a8:19:6f:52:10:15:99:41:20:0a:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4617272EE875B55CD5F2A88330A95F6410A3EB1B Validity Not Before: Aug 11 17:46:10 2025 GMT Not After : Aug 15 02:49:10 2025 GMT Subject: CN=EE3E0CE0AF7F3C08C479C63318DD0603E167D4D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ca:80:7a:42:d6:c6:c5:9b:02:11:ea:ae:84: 2a:de:7e:cb:ba:c7:d6:67:d7:f6:62:c3:54:9d:1e: 41:22:62:e6:f7:7d:a1:5e:38:f3:a8:76:aa:38:13: f7:07:eb:4e:49:eb:e8:69:7a:64:44:e3:21:85:9b: 66:77:9c:98:80:cd:c2:93:aa:db:55:99:c2:d7:48: 7e:07:fd:d9:1f:d5:a6:6c:41:34:66:69:6d:3f:f9: 49:d0:67:64:de:e9:80:41:8c:d9:bc:bb:d4:91:07: 57:17:65:55:21:e6:93:1e:17:6d:e7:bb:16:ac:0f: 25:a1:a0:de:ed:07:75:98:27:b6:ae:30:74:01:1a: a2:c0:18:6d:3c:f3:c1:fc:39:d2:54:00:14:17:d7: 18:94:83:e0:68:5b:7a:7e:40:20:50:87:1c:44:24: 4d:12:51:ff:38:4b:c8:46:7f:c2:94:4a:be:2a:87: 65:eb:c9:c7:9d:03:37:3c:df:ca:0f:1a:b8:d8:9d: 0c:ca:fa:95:c1:8d:dd:b9:ce:d9:a0:ee:90:91:dc: 75:9a:df:4a:7b:b8:f2:07:42:e3:0f:34:6a:7f:b0: 87:f8:b2:e7:80:2f:4a:70:ff:20:f9:f1:39:bf:bc: fa:7e:2d:6f:57:4f:f3:30:07:24:63:41:95:9b:99: fd:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:3E:0C:E0:AF:7F:3C:08:C4:79:C6:33:18:DD:06:03:E1:67:D4:D3 X509v3 Authority Key Identifier: keyid:46:17:27:2E:E8:75:B5:5C:D5:F2:A8:83:30:A9:5F:64:10:A3:EB:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0/4617272EE875B55CD5F2A88330A95F6410A3EB1B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4617272EE875B55CD5F2A88330A95F6410A3EB1B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0/4617272EE875B55CD5F2A88330A95F6410A3EB1B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:77:e6:32:2c:28:16:6c:f3:0a:74:91:68:ed:78:28:e6:a7: 00:5b:4b:a8:d7:18:4f:de:0b:9f:e7:b5:50:7b:b7:4f:16:0d: 6d:02:29:09:23:00:ae:b6:32:8e:6a:59:2c:6f:12:3f:07:9a: de:38:9a:c5:36:7c:b7:83:a4:b5:ac:fa:a8:a1:2e:ab:3b:66: fe:a9:15:bd:29:db:c0:9b:9e:f3:4e:5b:69:1d:29:80:63:b3: a6:0d:18:f1:bc:c2:69:e0:75:b8:8c:15:d3:f6:bc:33:80:fd: a5:7a:c5:65:f6:1c:03:7b:af:82:0e:bc:61:f5:86:22:3d:c3: 3c:6a:0b:a5:d9:ca:69:42:89:05:1e:9c:28:91:30:4f:bd:7c: 97:8d:16:90:10:b3:43:fc:2b:09:2e:cf:a0:f9:dc:90:d7:3d: 50:13:5a:f0:77:c1:5e:f0:a7:03:5e:da:7c:2d:26:7a:f2:d2: 9a:76:d5:91:6b:30:db:90:ab:8e:26:84:78:fb:28:d0:91:b3: 75:04:3a:6f:98:f7:60:56:13:f7:4f:18:0e:d0:0d:56:0e:e1: 38:25:56:f3:8b:2c:25:a9:26:36:17:b3:83:9d:2e:78:7e:c1: b0:74:ce:94:25:b2:ab:20:1c:32:3a:05:fe:7a:bf:18:a0:34: c5:87:33:bb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ1CN3QG/3wS0qBlvUhAVmUEgCrgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDYxNzI3MkVFODc1QjU1Q0Q1RjJBODgzMzBBOTVGNjQx MEEzRUIxQjAeFw0yNTA4MTExNzQ2MTBaFw0yNTA4MTUwMjQ5MTBaMDMxMTAvBgNV BAMTKEVFM0UwQ0UwQUY3RjNDMDhDNDc5QzYzMzE4REQwNjAzRTE2N0Q0RDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAyoB6QtbGxZsCEequhCrefsu6 x9Zn1/Ziw1SdHkEiYub3faFeOPOodqo4E/cH605J6+hpemRE4yGFm2Z3nJiAzcKT qttVmcLXSH4H/dkf1aZsQTRmaW0/+UnQZ2Te6YBBjNm8u9SRB1cXZVUh5pMeF23n uxasDyWhoN7tB3WYJ7auMHQBGqLAGG0888H8OdJUABQX1xiUg+BoW3p+QCBQhxxE JE0SUf84S8hGf8KUSr4qh2XrycedAzc838oPGrjYnQzK+pXBjd25ztmg7pCR3HWa 30p7uPIHQuMPNGp/sIf4sueAL0pw/yD58Tm/vPp+LW9XT/MwByRjQZWbmf3lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7j4M4K9/PAjEecYzGN0GA+Fn1NMwHwYDVR0j BBgwFoAURhcnLuh1tVzV8qiDMKlfZBCj6xswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZmRhZjA2YS1mNjI0LTQyY2YtYmIxOS1iNmJiZjkzMWFhYzgvMC80NjE3MjcyRUU4 NzVCNTVDRDVGMkE4ODMzMEE5NUY2NDEwQTNFQjFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNDYxNzI3MkVFODc1QjU1Q0Q1RjJBODgzMzBBOTVGNjQxMEEz RUIxQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWZkYWYwNmEtZjYyNC00MmNmLWJi MTktYjZiYmY5MzFhYWM4LzAvNDYxNzI3MkVFODc1QjU1Q0Q1RjJBODgzMzBBOTVG NjQxMEEzRUIxQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABB35jIsKBZs8wp0kWjteCjmpwBbS6jXGE/e C5/ntVB7t08WDW0CKQkjAK62Mo5qWSxvEj8Hmt44msU2fLeDpLWs+qihLqs7Zv6p Fb0p28CbnvNOW2kdKYBjs6YNGPG8wmngdbiMFdP2vDOA/aV6xWX2HAN7r4IOvGH1 hiI9wzxqC6XZymlCiQUenCiRME+9fJeNFpAQs0P8Kwkuz6D53JDXPVATWvB3wV7w pwNe2nwtJnry0pp21ZFrMNuQq44mhHj7KNCRs3UEOm+Y92BWE/dPGA7QDVYO4Tgl VvOLLCWpJjYXs4OdLnh+wbB0zpQlsqsgHDI6Bf56vxigNMWHM7s= -----END CERTIFICATE-----Generated at Wed Aug 13 05:52:26 2025 by rpki-client