$ rpki-client -vvf repo-rpki.idnic.net/repo/cc09e13c-cea0-47ff-9c96-f49b39d43920/0/4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A.mft File: 4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A.mft (raw, json) Hash identifier: oXY180GgBZqWt5gzjOOqHq3AMvyaL7tWLf4uqJhuUs8= Subject key identifier: 82:53:6A:8C:64:42:5B:F8:10:63:25:85:E5:E2:C2:22:47:D8:78:A0 Authority key identifier: 4A:6F:D7:E0:79:F5:43:A5:D5:FD:E4:43:3F:7B:D5:3D:CE:42:6E:5A Certificate issuer: /CN=4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A Certificate serial: 09B2125C9708AE8F9E1CDDB3BA95380E0DB23CEA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cc09e13c-cea0-47ff-9c96-f49b39d43920/0/4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A.mft Manifest number: 04F6 Signing time: Wed 06 Aug 2025 09:21:42 +0000 Manifest this update: Wed 06 Aug 2025 09:16:42 +0000 Manifest next update: Sat 09 Aug 2025 11:09:42 +0000 Files and hashes: 1: 4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A.crl (hash: XACHs/MyuSnHsXwHuE1rumdu0xqN1zR0NrxKxFu5/ds=) 2: 3130332e3231312e34392e302f32342d3234203d3e203633353035.roa (hash: jSA7+l89fySFyM7Bs9jzEHqShE9HEzseLTVhKTYttZk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cc09e13c-cea0-47ff-9c96-f49b39d43920/0/4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A.crl rsync://repo-rpki.idnic.net/repo/cc09e13c-cea0-47ff-9c96-f49b39d43920/0/4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 11:09:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:b2:12:5c:97:08:ae:8f:9e:1c:dd:b3:ba:95:38:0e:0d:b2:3c:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A Validity Not Before: Aug 6 09:16:42 2025 GMT Not After : Aug 9 11:09:42 2025 GMT Subject: CN=82536A8C64425BF810632585E5E2C22247D878A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:36:58:9f:ac:1a:5d:bd:b6:0e:14:c7:d0:12: 6e:27:a9:77:bf:3f:f3:4a:df:16:25:2e:b4:6d:78: 45:9b:1e:99:6a:2d:b9:d9:a3:f2:df:a3:e7:36:da: e9:b6:22:31:49:94:d0:3c:a5:a1:f4:cb:f9:6e:9a: 61:c7:34:54:6d:97:69:c0:e4:eb:b5:cc:df:08:f7: 81:0f:f5:bb:f4:e0:44:6b:d9:ac:6d:8e:96:1c:c0: bc:0a:63:6c:ac:cb:fe:0a:36:87:91:ac:21:f2:78: f7:c6:32:65:a3:83:04:44:26:f9:4a:43:89:e3:99: 85:7b:c2:32:40:eb:24:34:6c:e2:24:5e:24:61:8a: 1d:68:6f:bc:b8:7e:68:e4:b1:cd:c2:a6:19:65:90: af:f7:e7:29:0d:21:71:5c:50:de:d2:72:a6:b5:e5: 3f:ab:b8:f6:b1:35:9f:cb:21:6e:c2:c8:df:bd:0f: d9:da:32:47:88:49:6a:e1:f2:1c:17:c0:5d:f6:eb: 40:28:f1:cc:04:44:4c:74:3e:98:c9:83:06:34:9c: a2:e0:d2:e7:26:41:10:c1:7a:8b:b8:8a:51:d3:87: 96:f1:2f:35:a3:69:74:fa:f3:5b:f9:8e:5d:d9:4b: 0d:c7:0f:fe:83:c1:a8:8f:e6:fd:aa:3f:a6:b5:db: d6:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:53:6A:8C:64:42:5B:F8:10:63:25:85:E5:E2:C2:22:47:D8:78:A0 X509v3 Authority Key Identifier: keyid:4A:6F:D7:E0:79:F5:43:A5:D5:FD:E4:43:3F:7B:D5:3D:CE:42:6E:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cc09e13c-cea0-47ff-9c96-f49b39d43920/0/4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cc09e13c-cea0-47ff-9c96-f49b39d43920/0/4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:a9:d9:31:85:8a:5a:21:34:0b:a9:9a:77:49:0c:ec:3a:91: 79:36:89:31:24:40:6b:a2:82:e3:b0:dc:d5:5a:67:d1:c2:85: 45:ca:bf:ed:13:48:5a:ff:9d:d3:3c:1e:85:be:95:3d:c9:8d: 80:18:7b:5e:da:0e:87:b0:30:24:40:0d:9f:58:7f:b0:97:5d: 80:81:2b:95:ca:bd:bd:31:1d:17:02:12:e6:f5:4c:dd:20:80: 42:30:dd:7a:4c:9f:c2:bf:f2:82:95:88:9a:5d:1d:85:1d:e9: ed:db:08:3f:1c:ed:60:d4:84:db:e0:ed:0c:2b:1f:96:42:94: c0:c4:f1:4d:a7:7b:3c:4b:22:19:7a:21:fb:c7:56:ad:81:88: c9:40:06:f6:15:0e:c1:f3:e1:69:e3:61:3f:a6:42:3c:97:0a: 64:0c:b9:26:88:74:73:00:ad:4a:d7:0b:af:0e:0f:62:5a:8e: e2:0f:b2:cd:6b:9e:31:c0:e8:ae:eb:b7:6b:b9:45:d7:e6:97: 29:59:4a:b0:87:b1:cd:b1:8d:5f:63:c9:a7:f0:f7:28:c4:bf: 84:4c:aa:22:e7:ee:b7:11:0f:1b:b9:23:68:bf:46:a6:39:9a: 2c:63:da:6e:60:45:e2:33:f5:b2:e7:c5:23:be:85:7c:48:41: 94:09:08:99 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCbISXJcIro+eHN2zupU4Dg2yPOowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEE2RkQ3RTA3OUY1NDNBNUQ1RkRFNDQzM0Y3QkQ1M0RD RTQyNkU1QTAeFw0yNTA4MDYwOTE2NDJaFw0yNTA4MDkxMTA5NDJaMDMxMTAvBgNV BAMTKDgyNTM2QThDNjQ0MjVCRjgxMDYzMjU4NUU1RTJDMjIyNDdEODc4QTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwNlifrBpdvbYOFMfQEm4nqXe/ P/NK3xYlLrRteEWbHplqLbnZo/Lfo+c22um2IjFJlNA8paH0y/lummHHNFRtl2nA 5Ou1zN8I94EP9bv04ERr2axtjpYcwLwKY2ysy/4KNoeRrCHyePfGMmWjgwREJvlK Q4njmYV7wjJA6yQ0bOIkXiRhih1ob7y4fmjksc3CphllkK/35ykNIXFcUN7Scqa1 5T+ruPaxNZ/LIW7CyN+9D9naMkeISWrh8hwXwF3260Ao8cwEREx0PpjJgwY0nKLg 0ucmQRDBeou4ilHTh5bxLzWjaXT681v5jl3ZSw3HD/6DwaiP5v2qP6a129ZFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUglNqjGRCW/gQYyWF5eLCIkfYeKAwHwYDVR0j BBgwFoAUSm/X4Hn1Q6XV/eRDP3vVPc5CblowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YzA5ZTEzYy1jZWEwLTQ3ZmYtOWM5Ni1mNDliMzlkNDM5MjAvMC80QTZGRDdFMDc5 RjU0M0E1RDVGREU0NDMzRjdCRDUzRENFNDI2RTVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEE2RkQ3RTA3OUY1NDNBNUQ1RkRFNDQzM0Y3QkQ1M0RDRTQy NkU1QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2MwOWUxM2MtY2VhMC00N2ZmLTlj OTYtZjQ5YjM5ZDQzOTIwLzAvNEE2RkQ3RTA3OUY1NDNBNUQ1RkRFNDQzM0Y3QkQ1 M0RDRTQyNkU1QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGip2TGFilohNAupmndJDOw6kXk2iTEkQGui guOw3NVaZ9HChUXKv+0TSFr/ndM8HoW+lT3JjYAYe17aDoewMCRADZ9Yf7CXXYCB K5XKvb0xHRcCEub1TN0ggEIw3XpMn8K/8oKViJpdHYUd6e3bCD8c7WDUhNvg7Qwr H5ZClMDE8U2nezxLIhl6IfvHVq2BiMlABvYVDsHz4WnjYT+mQjyXCmQMuSaIdHMA rUrXC68OD2JajuIPss1rnjHA6K7rt2u5RdfmlylZSrCHsc2xjV9jyafw9yjEv4RM qiLn7rcRDxu5I2i/RqY5mixj2m5gReIz9bLnxSO+hXxIQZQJCJk= -----END CERTIFICATE-----Generated at Thu Aug 7 00:26:40 2025 by rpki-client