$ rpki-client -vvf repo-rpki.idnic.net/repo/b3991f7a-0a71-4f0d-933f-ecf813530274/0/A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.mft File: A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.mft (raw, json) Hash identifier: 4E4wUW18OR3DyAhDBbHZ0g+JrtITe040cef0crHXbEA= Subject key identifier: F8:8A:D4:C7:A5:97:81:46:0B:59:58:8D:85:5E:19:5C:6A:7A:FC:29 Authority key identifier: A4:B6:31:C8:CF:E0:EE:72:AC:D5:F2:08:FC:12:39:06:4F:6C:DE:44 Certificate issuer: /CN=A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44 Certificate serial: 6E5FF6FACEAE3598CB2CD4973B75C193D0753D49 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b3991f7a-0a71-4f0d-933f-ecf813530274/0/A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.mft Manifest number: BB Signing time: Fri 08 Aug 2025 06:01:09 +0000 Manifest this update: Fri 08 Aug 2025 05:56:09 +0000 Manifest next update: Mon 11 Aug 2025 12:32:09 +0000 Files and hashes: 1: 3135372e36362e3234382e302f32332d3234203d3e20313532373937.roa (hash: vC1sLrROQammNbgh64OVHa3goyUf/oRsNt6WGQKKJQo=) 2: A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.crl (hash: NutNJyPLpdO8u9DKlcRVjbxnO7/khawBA2lUBxq2Lcs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b3991f7a-0a71-4f0d-933f-ecf813530274/0/A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.crl rsync://repo-rpki.idnic.net/repo/b3991f7a-0a71-4f0d-933f-ecf813530274/0/A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 12:32:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:5f:f6:fa:ce:ae:35:98:cb:2c:d4:97:3b:75:c1:93:d0:75:3d:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44 Validity Not Before: Aug 8 05:56:09 2025 GMT Not After : Aug 11 12:32:09 2025 GMT Subject: CN=F88AD4C7A59781460B59588D855E195C6A7AFC29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:cb:39:52:2c:50:87:78:17:91:e9:c4:f6:86: 31:fb:fa:c6:ff:18:45:b9:66:7e:b4:2e:b7:2e:b5: 94:75:4b:47:8e:21:45:84:e7:12:ca:13:20:9a:a1: 65:05:6f:3e:17:8f:51:7a:b4:ce:20:b0:07:79:64: 5d:e5:92:ab:ea:93:9b:4e:33:c6:f6:d4:66:bb:10: 1c:fc:cd:a3:8c:45:1c:83:5e:58:e0:c8:d7:ee:9e: c6:95:cb:83:b4:d8:ba:88:4d:cc:64:72:85:f3:f4: 22:fb:a5:21:30:c5:0c:a8:1f:96:55:8a:cc:7b:a7: 51:5f:7b:a0:f4:ae:e3:82:bc:5d:aa:db:51:14:f2: df:32:f0:0b:d4:4d:fb:6c:79:b9:fd:02:8d:9e:70: 60:23:f3:48:3a:f3:93:f0:36:a4:04:9e:32:44:46: 37:ac:6e:6d:06:2c:4e:6c:63:7e:96:44:a5:c3:1a: 22:3e:d0:95:6f:bc:d9:be:32:ba:d8:1c:c3:fc:33: 61:9f:a6:24:b3:ab:42:cc:e6:03:48:00:4d:c8:3f: f3:89:6a:93:ba:87:c1:f7:95:e5:93:76:1b:70:b1: 42:c4:61:e2:49:56:3c:53:22:87:f3:d2:2e:f8:40: b8:6a:97:39:56:9c:9e:98:5b:66:49:96:ec:7e:b3: cb:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:8A:D4:C7:A5:97:81:46:0B:59:58:8D:85:5E:19:5C:6A:7A:FC:29 X509v3 Authority Key Identifier: keyid:A4:B6:31:C8:CF:E0:EE:72:AC:D5:F2:08:FC:12:39:06:4F:6C:DE:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b3991f7a-0a71-4f0d-933f-ecf813530274/0/A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b3991f7a-0a71-4f0d-933f-ecf813530274/0/A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:2f:a5:fa:ce:1b:7f:79:86:04:33:5c:be:57:c1:28:17:d0: dd:03:2e:a1:ff:40:9d:28:78:65:bb:cb:76:69:9f:11:68:34: 79:f4:e0:aa:05:b5:f9:b7:29:97:5f:3a:63:a9:43:b6:ae:52: c9:3e:77:61:a9:f9:ec:ed:75:39:46:81:08:45:65:08:67:37: 98:0b:46:38:da:49:bc:96:e7:86:72:f5:2e:01:1d:6d:61:e3: 55:70:04:bf:86:3b:5a:be:6b:21:ff:09:9f:56:7b:e3:0d:8b: 41:49:61:89:c3:fa:3e:56:a5:bc:79:5d:33:09:58:09:2c:e3: 20:1d:45:26:95:90:ea:25:30:e8:5e:4d:99:27:02:08:7c:ae: f9:27:78:5f:ac:3a:4e:95:49:54:0a:64:f3:2e:bf:4f:37:c1: 9a:bb:8b:d8:ca:45:15:ce:42:38:79:be:9f:6f:ac:4c:20:1a: 76:eb:c4:fc:0f:19:60:20:12:b4:48:61:3e:db:d4:b2:ea:04: 6a:4b:da:a0:00:ca:b8:c3:8e:b0:17:04:16:07:1b:a8:ed:e4: 2e:18:26:5a:5c:46:25:fd:84:4e:b0:9d:a5:c0:22:48:da:dd: 38:b7:4d:bd:11:39:2d:3b:b6:d8:34:e5:d0:e4:bc:df:c7:17: b1:51:f0:fc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbl/2+s6uNZjLLNSXO3XBk9B1PUkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTRCNjMxQzhDRkUwRUU3MkFDRDVGMjA4RkMxMjM5MDY0 RjZDREU0NDAeFw0yNTA4MDgwNTU2MDlaFw0yNTA4MTExMjMyMDlaMDMxMTAvBgNV BAMTKEY4OEFENEM3QTU5NzgxNDYwQjU5NTg4RDg1NUUxOTVDNkE3QUZDMjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuyzlSLFCHeBeR6cT2hjH7+sb/ GEW5Zn60LrcutZR1S0eOIUWE5xLKEyCaoWUFbz4Xj1F6tM4gsAd5ZF3lkqvqk5tO M8b21Ga7EBz8zaOMRRyDXljgyNfunsaVy4O02LqITcxkcoXz9CL7pSEwxQyoH5ZV isx7p1Ffe6D0ruOCvF2q21EU8t8y8AvUTftsebn9Ao2ecGAj80g685PwNqQEnjJE Rjesbm0GLE5sY36WRKXDGiI+0JVvvNm+MrrYHMP8M2GfpiSzq0LM5gNIAE3IP/OJ apO6h8H3leWTdhtwsULEYeJJVjxTIofz0i74QLhqlzlWnJ6YW2ZJlux+s8vRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+IrUx6WXgUYLWViNhV4ZXGp6/CkwHwYDVR0j BBgwFoAUpLYxyM/g7nKs1fII/BI5Bk9s3kQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i Mzk5MWY3YS0wYTcxLTRmMGQtOTMzZi1lY2Y4MTM1MzAyNzQvMC9BNEI2MzFDOENG RTBFRTcyQUNENUYyMDhGQzEyMzkwNjRGNkNERTQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQTRCNjMxQzhDRkUwRUU3MkFDRDVGMjA4RkMxMjM5MDY0RjZD REU0NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjM5OTFmN2EtMGE3MS00ZjBkLTkz M2YtZWNmODEzNTMwMjc0LzAvQTRCNjMxQzhDRkUwRUU3MkFDRDVGMjA4RkMxMjM5 MDY0RjZDREU0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIMvpfrOG395hgQzXL5XwSgX0N0DLqH/QJ0o eGW7y3ZpnxFoNHn04KoFtfm3KZdfOmOpQ7auUsk+d2Gp+eztdTlGgQhFZQhnN5gL RjjaSbyW54Zy9S4BHW1h41VwBL+GO1q+ayH/CZ9We+MNi0FJYYnD+j5Wpbx5XTMJ WAks4yAdRSaVkOolMOheTZknAgh8rvkneF+sOk6VSVQKZPMuv083wZq7i9jKRRXO Qjh5vp9vrEwgGnbrxPwPGWAgErRIYT7b1LLqBGpL2qAAyrjDjrAXBBYHG6jt5C4Y JlpcRiX9hE6wnaXAIkja3Ti3Tb0ROS07ttg05dDkvN/HF7FR8Pw= -----END CERTIFICATE-----Generated at Fri Aug 8 13:07:43 2025 by rpki-client