$ rpki-client -vvf repo-rpki.idnic.net/repo/ea47231f-02dd-49e8-aa25-2d54c0a999ca/0/439A4981549ABB151B12D6EC85FC8D0DBF99A81E.mft File: 439A4981549ABB151B12D6EC85FC8D0DBF99A81E.mft (raw, json) Hash identifier: 53gYhRacRjo05jSDiY23Rd/CL7FceW/qp65P1rmOzU8= Subject key identifier: 0B:DC:85:DA:AB:5C:37:27:FC:72:6B:23:DA:D4:F5:2E:83:61:2B:5D Authority key identifier: 43:9A:49:81:54:9A:BB:15:1B:12:D6:EC:85:FC:8D:0D:BF:99:A8:1E Certificate issuer: /CN=439A4981549ABB151B12D6EC85FC8D0DBF99A81E Certificate serial: 7D7544E12379474136A2A7DE773E2F482DD78C34 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/439A4981549ABB151B12D6EC85FC8D0DBF99A81E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ea47231f-02dd-49e8-aa25-2d54c0a999ca/0/439A4981549ABB151B12D6EC85FC8D0DBF99A81E.mft Manifest number: 0443 Signing time: Wed 06 Aug 2025 11:00:42 +0000 Manifest this update: Wed 06 Aug 2025 10:55:42 +0000 Manifest next update: Sat 09 Aug 2025 12:31:42 +0000 Files and hashes: 1: 3130332e3131322e3234342e302f32332d3234203d3e20313336313037.roa (hash: QOFHoPuY9NpdPQj6xa7cBpnTsr+iASD85o3lNcYlh68=) 2: 3130332e3233332e3130322e302f32332d3234203d3e20313336313037.roa (hash: JI3pjhPmyInlzEtZ8PXbjRWk78z+cy0q6o/inypVTws=) 3: 439A4981549ABB151B12D6EC85FC8D0DBF99A81E.crl (hash: i9TEO4lSSIhaGllWZEYSwiB89WImyulCEwOUwt0QVKE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ea47231f-02dd-49e8-aa25-2d54c0a999ca/0/439A4981549ABB151B12D6EC85FC8D0DBF99A81E.crl rsync://repo-rpki.idnic.net/repo/ea47231f-02dd-49e8-aa25-2d54c0a999ca/0/439A4981549ABB151B12D6EC85FC8D0DBF99A81E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/439A4981549ABB151B12D6EC85FC8D0DBF99A81E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 12:31:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:75:44:e1:23:79:47:41:36:a2:a7:de:77:3e:2f:48:2d:d7:8c:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=439A4981549ABB151B12D6EC85FC8D0DBF99A81E Validity Not Before: Aug 6 10:55:42 2025 GMT Not After : Aug 9 12:31:42 2025 GMT Subject: CN=0BDC85DAAB5C3727FC726B23DAD4F52E83612B5D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:92:0d:3a:96:a9:98:b1:60:b0:62:ab:ba:e4: 27:49:cc:9b:78:6c:56:0c:5d:21:58:68:23:ff:81: 21:61:d0:21:0d:e7:19:0d:2b:80:25:40:71:bb:19: 3b:d4:d6:6b:91:37:1d:ab:94:ec:05:d1:96:06:73: ba:8c:be:90:06:0d:cc:99:95:7a:df:6e:e5:fd:af: ac:17:b3:9c:db:90:57:dc:14:c2:78:e7:ec:62:c1: 36:33:3e:9f:bb:c4:09:eb:63:78:19:cb:90:ed:97: 5c:1d:de:e3:8c:46:ea:69:32:c3:30:f3:c8:f6:03: 4a:b5:43:b5:b1:34:7d:d8:df:09:d7:60:8d:e0:ad: 4d:35:0d:9d:a8:43:e4:27:70:6e:11:14:02:85:7c: 47:62:ff:e2:ed:fa:6c:02:f8:13:58:cb:58:23:8b: 35:16:d9:7e:97:89:07:a1:77:45:ad:25:e7:b2:4e: c2:fb:ba:63:97:6e:96:4f:70:57:dd:c3:9e:4b:01: de:fc:9c:24:4e:0e:3d:52:90:c1:61:16:02:98:71: ec:c1:73:90:49:3d:0c:32:5c:f4:bb:28:ac:be:2e: 6d:bb:51:45:ce:a9:01:32:9e:b3:a3:a8:b4:7a:6a: 13:80:78:9d:82:8d:1c:d7:e4:16:66:cf:53:2f:31: cb:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:DC:85:DA:AB:5C:37:27:FC:72:6B:23:DA:D4:F5:2E:83:61:2B:5D X509v3 Authority Key Identifier: keyid:43:9A:49:81:54:9A:BB:15:1B:12:D6:EC:85:FC:8D:0D:BF:99:A8:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ea47231f-02dd-49e8-aa25-2d54c0a999ca/0/439A4981549ABB151B12D6EC85FC8D0DBF99A81E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/439A4981549ABB151B12D6EC85FC8D0DBF99A81E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea47231f-02dd-49e8-aa25-2d54c0a999ca/0/439A4981549ABB151B12D6EC85FC8D0DBF99A81E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:46:b8:f3:69:34:05:84:2a:04:b3:ad:50:66:cd:46:23:64: e0:78:7d:93:fe:47:59:7c:31:31:69:c0:24:8d:54:76:98:ec: bf:be:ce:39:36:39:95:73:10:73:9c:7e:23:84:cf:7d:20:da: 25:e9:8e:81:8e:c2:d1:0a:54:f4:02:8d:07:82:95:98:eb:cd: db:2d:9c:4a:5e:e5:86:c1:89:a1:22:fe:31:34:25:ee:c5:89: 33:51:91:45:20:ea:57:37:0d:61:5e:34:27:79:30:e1:5b:20: 76:be:6c:68:51:9d:9a:96:53:37:c7:df:b9:27:b0:8f:0b:2e: 20:e2:60:a6:4b:56:e5:17:0e:05:23:15:34:d8:a3:06:e5:fc: 51:77:d7:25:00:2b:29:7a:1c:1a:d3:f7:53:a4:f1:b3:3c:c1: c1:c3:d2:6b:fa:de:51:63:56:d7:34:65:df:8b:fd:0e:5c:5b: 92:e7:37:00:6c:aa:bc:d7:0a:c1:df:b8:43:b5:e6:d1:93:bc: 69:dc:0a:0d:02:d9:c2:b0:30:cb:0c:db:c8:d4:4b:d7:be:5f: 67:dc:5f:6d:4f:8b:73:25:e9:94:03:c0:0d:7e:b8:b8:3e:77: 9b:f5:66:ba:68:25:dd:e8:45:e6:64:83:23:80:49:64:04:d9: 01:40:6f:06 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfXVE4SN5R0E2oqfedz4vSC3XjDQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDM5QTQ5ODE1NDlBQkIxNTFCMTJENkVDODVGQzhEMERC Rjk5QTgxRTAeFw0yNTA4MDYxMDU1NDJaFw0yNTA4MDkxMjMxNDJaMDMxMTAvBgNV BAMTKDBCREM4NURBQUI1QzM3MjdGQzcyNkIyM0RBRDRGNTJFODM2MTJCNUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQkg06lqmYsWCwYqu65CdJzJt4 bFYMXSFYaCP/gSFh0CEN5xkNK4AlQHG7GTvU1muRNx2rlOwF0ZYGc7qMvpAGDcyZ lXrfbuX9r6wXs5zbkFfcFMJ45+xiwTYzPp+7xAnrY3gZy5Dtl1wd3uOMRuppMsMw 88j2A0q1Q7WxNH3Y3wnXYI3grU01DZ2oQ+QncG4RFAKFfEdi/+Lt+mwC+BNYy1gj izUW2X6XiQehd0WtJeeyTsL7umOXbpZPcFfdw55LAd78nCRODj1SkMFhFgKYcezB c5BJPQwyXPS7KKy+Lm27UUXOqQEynrOjqLR6ahOAeJ2CjRzX5BZmz1MvMctlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUC9yF2qtcNyf8cmsj2tT1LoNhK10wHwYDVR0j BBgwFoAUQ5pJgVSauxUbEtbshfyNDb+ZqB4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YTQ3MjMxZi0wMmRkLTQ5ZTgtYWEyNS0yZDU0YzBhOTk5Y2EvMC80MzlBNDk4MTU0 OUFCQjE1MUIxMkQ2RUM4NUZDOEQwREJGOTlBODFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDM5QTQ5ODE1NDlBQkIxNTFCMTJENkVDODVGQzhEMERCRjk5 QTgxRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWE0NzIzMWYtMDJkZC00OWU4LWFh MjUtMmQ1NGMwYTk5OWNhLzAvNDM5QTQ5ODE1NDlBQkIxNTFCMTJENkVDODVGQzhE MERCRjk5QTgxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGhGuPNpNAWEKgSzrVBmzUYjZOB4fZP+R1l8 MTFpwCSNVHaY7L++zjk2OZVzEHOcfiOEz30g2iXpjoGOwtEKVPQCjQeClZjrzdst nEpe5YbBiaEi/jE0Je7FiTNRkUUg6lc3DWFeNCd5MOFbIHa+bGhRnZqWUzfH37kn sI8LLiDiYKZLVuUXDgUjFTTYowbl/FF31yUAKyl6HBrT91Ok8bM8wcHD0mv63lFj Vtc0Zd+L/Q5cW5LnNwBsqrzXCsHfuEO15tGTvGncCg0C2cKwMMsM28jUS9e+X2fc X21Pi3Ml6ZQDwA1+uLg+d5v1ZrpoJd3oReZkgyOASWQE2QFAbwY= -----END CERTIFICATE-----Generated at Thu Aug 7 00:33:39 2025 by rpki-client