$ rpki-client -vvf repo-rpki.idnic.net/repo/ae89e859-3c2c-4a09-a4a9-37323ea5de22/0/4A906D4F534B26A0E62898882630292936CEA54A.mft File: 4A906D4F534B26A0E62898882630292936CEA54A.mft (raw, json) Hash identifier: 8/ctkAZwiYghncvB0n7hN/ADgRVzAGhnalcSaR1ufks= Subject key identifier: B2:A0:94:1A:85:2D:D8:45:26:81:E3:23:E1:9D:91:D2:A9:59:0C:9C Authority key identifier: 4A:90:6D:4F:53:4B:26:A0:E6:28:98:88:26:30:29:29:36:CE:A5:4A Certificate issuer: /CN=4A906D4F534B26A0E62898882630292936CEA54A Certificate serial: 272052A649437E1A379B2AA9BA3D94B0474690CC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A906D4F534B26A0E62898882630292936CEA54A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ae89e859-3c2c-4a09-a4a9-37323ea5de22/0/4A906D4F534B26A0E62898882630292936CEA54A.mft Manifest number: 0128 Signing time: Wed 06 Aug 2025 18:31:40 +0000 Manifest this update: Wed 06 Aug 2025 18:26:40 +0000 Manifest next update: Sun 10 Aug 2025 01:16:40 +0000 Files and hashes: 1: 3130332e3137312e38332e302f32342d3234203d3e20313432333733.roa (hash: q1try4eWeXGNMJXVZs9ilwAbNDidILu0Qdkiuiy95SY=) 2: 3130332e3137312e38322e302f32342d3234203d3e20313432333733.roa (hash: QW0riT2ZIbJQ6bDdQHJpDVDRJpk68aw/94juFPRXEvU=) 3: 4A906D4F534B26A0E62898882630292936CEA54A.crl (hash: mp7Mi1rb+TcZ+a60+b2JBoF8AXKZN2AFEfqQELXX5PQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ae89e859-3c2c-4a09-a4a9-37323ea5de22/0/4A906D4F534B26A0E62898882630292936CEA54A.crl rsync://repo-rpki.idnic.net/repo/ae89e859-3c2c-4a09-a4a9-37323ea5de22/0/4A906D4F534B26A0E62898882630292936CEA54A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A906D4F534B26A0E62898882630292936CEA54A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 01:16:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:20:52:a6:49:43:7e:1a:37:9b:2a:a9:ba:3d:94:b0:47:46:90:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A906D4F534B26A0E62898882630292936CEA54A Validity Not Before: Aug 6 18:26:40 2025 GMT Not After : Aug 10 01:16:40 2025 GMT Subject: CN=B2A0941A852DD8452681E323E19D91D2A9590C9C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:7a:3e:67:a7:f0:c8:79:dd:39:91:87:d3:e0: da:5c:fa:23:a7:4f:9b:9b:c7:0f:78:20:e3:90:03: f4:ec:c6:9b:16:65:47:21:4d:d8:49:74:c0:bf:ed: 97:5f:9d:af:6c:f9:9a:cd:d7:32:b9:24:9b:b1:8b: 0c:5f:e7:13:91:76:86:50:f1:50:9c:37:9b:db:a6: 58:63:6b:4f:85:d8:ec:65:0b:a7:d6:e1:f4:7f:6b: 89:2b:66:02:01:75:77:87:0b:d5:6a:0a:6b:93:bf: b6:21:ef:46:2c:60:a1:e3:2b:2f:37:0f:f0:c7:4c: 79:8e:8b:c5:4a:af:b3:7b:32:bd:b5:2f:33:08:a8: 5a:a4:81:1c:f3:e2:ec:cb:e9:ac:e5:24:36:1f:a3: ca:48:37:4d:d4:38:9f:52:5a:f4:80:db:13:a8:7b: aa:14:63:1e:8c:19:bc:a6:44:5b:88:64:fc:9f:ac: eb:69:de:1d:f1:c6:6e:61:85:2e:5a:d0:45:4b:73: bb:8e:5a:72:04:7b:bb:9d:ec:26:f3:45:2a:68:c1: 51:1c:4a:a5:a0:21:f0:e2:8f:8c:6d:19:62:a6:22: 2e:6d:60:dd:fe:d0:f6:08:19:ab:3a:23:01:25:cc: a2:df:16:67:3e:4c:b9:ef:43:b0:9f:e5:64:6b:13: db:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:A0:94:1A:85:2D:D8:45:26:81:E3:23:E1:9D:91:D2:A9:59:0C:9C X509v3 Authority Key Identifier: keyid:4A:90:6D:4F:53:4B:26:A0:E6:28:98:88:26:30:29:29:36:CE:A5:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ae89e859-3c2c-4a09-a4a9-37323ea5de22/0/4A906D4F534B26A0E62898882630292936CEA54A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A906D4F534B26A0E62898882630292936CEA54A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae89e859-3c2c-4a09-a4a9-37323ea5de22/0/4A906D4F534B26A0E62898882630292936CEA54A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:89:89:8b:5f:23:50:71:68:cc:e7:8e:a4:c7:97:91:bf:f3: 98:02:2a:23:10:d0:de:d7:d6:6d:ab:61:a0:77:93:70:c6:6d: 90:70:d7:5a:de:62:c9:f9:25:2d:7a:2a:3d:d9:a0:ce:3b:b7: 6b:58:80:be:d2:84:c0:4a:fb:ff:47:7d:4d:a9:69:fa:f4:a1: b8:52:12:ed:0e:93:b1:85:98:47:bf:ed:ae:71:83:73:bc:f1: fc:bc:ce:2c:ea:2f:25:94:bc:b8:e9:da:29:c8:e0:83:dd:da: 78:b8:fd:c9:30:ac:4a:8c:a6:e2:21:76:03:5c:6c:9c:7e:b4: 7d:0d:b9:c4:e7:23:fb:4d:c9:a8:42:5d:cd:4b:af:77:b5:7e: 8a:e9:f4:85:a4:81:36:11:5a:22:62:72:2b:f7:8d:a7:77:17: 16:4b:91:6b:0c:cb:b3:f4:00:3a:c1:ff:ea:97:7e:8a:b0:62: 14:4d:4f:48:d3:7d:0d:93:f2:af:5c:c1:52:f6:92:19:78:28: c7:40:c1:54:47:91:1a:6b:81:22:25:7a:11:5c:05:0c:e8:bb: 38:f9:6c:7a:e2:5c:86:da:57:e2:2e:45:2a:fd:32:70:96:86: 4f:f1:4f:74:28:54:31:20:b5:29:44:66:2c:b5:84:6c:7b:40: 48:e5:22:07 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJyBSpklDfho3myqpuj2UsEdGkMwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEE5MDZENEY1MzRCMjZBMEU2Mjg5ODg4MjYzMDI5Mjkz NkNFQTU0QTAeFw0yNTA4MDYxODI2NDBaFw0yNTA4MTAwMTE2NDBaMDMxMTAvBgNV BAMTKEIyQTA5NDFBODUyREQ4NDUyNjgxRTMyM0UxOUQ5MUQyQTk1OTBDOUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZej5np/DIed05kYfT4Npc+iOn T5ubxw94IOOQA/TsxpsWZUchTdhJdMC/7Zdfna9s+ZrN1zK5JJuxiwxf5xORdoZQ 8VCcN5vbplhja0+F2OxlC6fW4fR/a4krZgIBdXeHC9VqCmuTv7Yh70YsYKHjKy83 D/DHTHmOi8VKr7N7Mr21LzMIqFqkgRzz4uzL6azlJDYfo8pIN03UOJ9SWvSA2xOo e6oUYx6MGbymRFuIZPyfrOtp3h3xxm5hhS5a0EVLc7uOWnIEe7ud7CbzRSpowVEc SqWgIfDij4xtGWKmIi5tYN3+0PYIGas6IwElzKLfFmc+TLnvQ7Cf5WRrE9uXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsqCUGoUt2EUmgeMj4Z2R0qlZDJwwHwYDVR0j BBgwFoAUSpBtT1NLJqDmKJiIJjApKTbOpUowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZTg5ZTg1OS0zYzJjLTRhMDktYTRhOS0zNzMyM2VhNWRlMjIvMC80QTkwNkQ0RjUz NEIyNkEwRTYyODk4ODgyNjMwMjkyOTM2Q0VBNTRBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEE5MDZENEY1MzRCMjZBMEU2Mjg5ODg4MjYzMDI5MjkzNkNF QTU0QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWU4OWU4NTktM2MyYy00YTA5LWE0 YTktMzczMjNlYTVkZTIyLzAvNEE5MDZENEY1MzRCMjZBMEU2Mjg5ODg4MjYzMDI5 MjkzNkNFQTU0QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHyJiYtfI1BxaMznjqTHl5G/85gCKiMQ0N7X 1m2rYaB3k3DGbZBw11reYsn5JS16Kj3ZoM47t2tYgL7ShMBK+/9HfU2pafr0obhS Eu0Ok7GFmEe/7a5xg3O88fy8zizqLyWUvLjp2inI4IPd2ni4/ckwrEqMpuIhdgNc bJx+tH0NucTnI/tNyahCXc1Lr3e1forp9IWkgTYRWiJiciv3jad3FxZLkWsMy7P0 ADrB/+qXfoqwYhRNT0jTfQ2T8q9cwVL2khl4KMdAwVRHkRprgSIlehFcBQzouzj5 bHriXIbaV+IuRSr9MnCWhk/xT3QoVDEgtSlEZiy1hGx7QEjlIgc= -----END CERTIFICATE-----Generated at Fri Aug 8 12:48:19 2025 by rpki-client