$ rpki-client -vvf repo-rpki.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/4A243A1EC4991C40D3A6148515E3C51981B425F7.mft File: 4A243A1EC4991C40D3A6148515E3C51981B425F7.mft (raw, json) Hash identifier: F2KlXrr8ChJ7HLAdxi5nCWvq/9brxkYG0G2O6FkDKwM= Subject key identifier: BD:48:3A:20:D6:AB:67:DA:A1:3F:9A:9C:D5:59:4D:CF:1C:FC:BB:BC Authority key identifier: 4A:24:3A:1E:C4:99:1C:40:D3:A6:14:85:15:E3:C5:19:81:B4:25:F7 Certificate issuer: /CN=4A243A1EC4991C40D3A6148515E3C51981B425F7 Certificate serial: 1707C28E684177959F8E4C97E313EBD1A417DC1F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A243A1EC4991C40D3A6148515E3C51981B425F7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/4A243A1EC4991C40D3A6148515E3C51981B425F7.mft Manifest number: 018E Signing time: Mon 04 Aug 2025 16:01:01 +0000 Manifest this update: Mon 04 Aug 2025 15:56:01 +0000 Manifest next update: Fri 08 Aug 2025 02:53:01 +0000 Files and hashes: 1: 3130332e3130392e3230362e302f32342d3234203d3e20313530393335.roa (hash: Rcu96XphgA8WvPbRK/1ptZ3CZTir4MCBj7MHKlWlNMw=) 2: 4A243A1EC4991C40D3A6148515E3C51981B425F7.crl (hash: D/mz9Vrz32G0sD9V90+g0ES3LL/NrbMvcOIzarXlBks=) 3: 3130332e3130392e3230372e302f32342d3234203d3e20313530393335.roa (hash: W7qNwUKI6yVYK0QKsHqMQf5TpfiakU3FHDTDzkx2y0k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/4A243A1EC4991C40D3A6148515E3C51981B425F7.crl rsync://repo-rpki.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/4A243A1EC4991C40D3A6148515E3C51981B425F7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A243A1EC4991C40D3A6148515E3C51981B425F7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 02:53:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:07:c2:8e:68:41:77:95:9f:8e:4c:97:e3:13:eb:d1:a4:17:dc:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A243A1EC4991C40D3A6148515E3C51981B425F7 Validity Not Before: Aug 4 15:56:01 2025 GMT Not After : Aug 8 02:53:01 2025 GMT Subject: CN=BD483A20D6AB67DAA13F9A9CD5594DCF1CFCBBBC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:fb:ed:c0:9f:33:3c:f3:f3:2c:9c:fa:d7:02: aa:2a:9c:42:90:44:43:73:43:e7:9b:46:d5:e5:15: 3c:16:fe:fd:24:6a:5d:23:2d:b7:13:70:76:81:07: f0:06:d5:23:d5:96:10:c3:18:50:89:c0:a4:44:6b: 02:ba:48:c3:db:b9:7c:eb:35:e3:74:6b:d4:43:09: be:4b:6d:5e:72:d0:34:a9:6d:3b:7c:58:96:77:6d: d4:81:d9:26:20:3b:9c:ab:86:39:4d:8a:19:68:d8: 98:c5:ee:cc:76:b8:80:de:45:45:b1:9c:81:b8:99: 63:36:93:7d:1a:a2:c9:fe:e4:67:71:e5:18:a4:09: a5:1d:84:8b:07:29:9e:59:83:65:76:17:3a:a1:01: aa:4c:a2:63:d6:7d:41:a8:60:0d:39:df:d2:9c:82: a6:ee:6f:03:00:90:b3:bf:da:32:ef:de:68:8a:6e: 9e:bf:72:28:34:de:5c:83:89:fc:ab:15:f0:4f:d5: 53:d9:33:1a:b5:1e:96:ee:a3:f2:f3:ef:c7:b4:e3: 29:50:67:6c:49:67:63:e3:f1:11:5f:d2:3a:db:e5: 3c:ed:c9:62:78:a3:74:00:61:7a:a4:e7:90:b3:f9: bc:b0:68:30:46:a4:13:78:cb:1a:19:09:81:d1:0b: 95:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:48:3A:20:D6:AB:67:DA:A1:3F:9A:9C:D5:59:4D:CF:1C:FC:BB:BC X509v3 Authority Key Identifier: keyid:4A:24:3A:1E:C4:99:1C:40:D3:A6:14:85:15:E3:C5:19:81:B4:25:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/4A243A1EC4991C40D3A6148515E3C51981B425F7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A243A1EC4991C40D3A6148515E3C51981B425F7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/4A243A1EC4991C40D3A6148515E3C51981B425F7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:74:36:87:3c:68:e6:06:db:ad:34:fe:a0:b1:6c:ee:a0:4b: 25:e6:63:31:d2:a5:d6:be:88:6e:c2:5c:55:30:8b:cc:bd:12: 50:c2:75:5e:ea:d9:39:75:57:50:b8:7a:c7:ae:63:71:b2:57: 69:14:b1:14:17:9c:c3:51:58:f2:7e:af:4b:5d:f7:58:9b:34: b8:fb:a7:aa:d0:71:1e:5e:e4:20:d1:44:70:32:1a:fb:52:88: 92:16:f3:a6:c8:89:ef:f1:d0:54:b4:44:f3:61:af:b4:a2:e5: d4:78:47:12:95:50:97:2a:2b:66:46:65:43:ae:02:61:66:fb: 6e:75:f7:5a:99:c5:62:c2:e0:f5:d7:f3:05:75:b9:ae:ec:fe: 5e:f4:99:9c:13:d4:d5:5f:7d:3c:65:77:c4:15:74:0e:95:6b: 23:76:d7:7a:e0:cc:4d:95:da:a0:69:2e:7e:2a:0a:ad:12:23: 4f:30:4a:0c:03:d8:70:1c:9b:84:0f:7d:a1:88:f3:2f:9a:e6: 90:75:d3:a4:57:0c:3a:51:c1:32:37:3c:8c:25:b8:bd:5e:63: 90:89:22:99:1e:69:24:2f:e0:85:99:8c:45:6b:e6:fd:96:e8: 74:aa:be:21:cc:28:08:d0:dd:fb:af:08:71:13:6d:f8:41:94: 24:34:17:96 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFwfCjmhBd5WfjkyX4xPr0aQX3B8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEEyNDNBMUVDNDk5MUM0MEQzQTYxNDg1MTVFM0M1MTk4 MUI0MjVGNzAeFw0yNTA4MDQxNTU2MDFaFw0yNTA4MDgwMjUzMDFaMDMxMTAvBgNV BAMTKEJENDgzQTIwRDZBQjY3REFBMTNGOUE5Q0Q1NTk0RENGMUNGQ0JCQkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDd++3AnzM88/MsnPrXAqoqnEKQ RENzQ+ebRtXlFTwW/v0kal0jLbcTcHaBB/AG1SPVlhDDGFCJwKREawK6SMPbuXzr NeN0a9RDCb5LbV5y0DSpbTt8WJZ3bdSB2SYgO5yrhjlNihlo2JjF7sx2uIDeRUWx nIG4mWM2k30aosn+5Gdx5RikCaUdhIsHKZ5Zg2V2FzqhAapMomPWfUGoYA0539Kc gqbubwMAkLO/2jLv3miKbp6/cig03lyDifyrFfBP1VPZMxq1Hpbuo/Lz78e04ylQ Z2xJZ2Pj8RFf0jrb5TztyWJ4o3QAYXqk55Cz+bywaDBGpBN4yxoZCYHRC5WdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvUg6INarZ9qhP5qc1VlNzxz8u7wwHwYDVR0j BBgwFoAUSiQ6HsSZHEDTphSFFePFGYG0JfcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l Yzg4OTJlYi1kZGMwLTRjYjYtOTU3Yy1iNjUzZjI4YmJmMzkvMC80QTI0M0ExRUM0 OTkxQzQwRDNBNjE0ODUxNUUzQzUxOTgxQjQyNUY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEEyNDNBMUVDNDk5MUM0MEQzQTYxNDg1MTVFM0M1MTk4MUI0 MjVGNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWM4ODkyZWItZGRjMC00Y2I2LTk1 N2MtYjY1M2YyOGJiZjM5LzAvNEEyNDNBMUVDNDk5MUM0MEQzQTYxNDg1MTVFM0M1 MTk4MUI0MjVGNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE90Noc8aOYG2600/qCxbO6gSyXmYzHSpda+ iG7CXFUwi8y9ElDCdV7q2Tl1V1C4eseuY3GyV2kUsRQXnMNRWPJ+r0td91ibNLj7 p6rQcR5e5CDRRHAyGvtSiJIW86bIie/x0FS0RPNhr7Si5dR4RxKVUJcqK2ZGZUOu AmFm+25191qZxWLC4PXX8wV1ua7s/l70mZwT1NVffTxld8QVdA6VayN213rgzE2V 2qBpLn4qCq0SI08wSgwD2HAcm4QPfaGI8y+a5pB106RXDDpRwTI3PIwluL1eY5CJ IpkeaSQv4IWZjEVr5v2W6HSqviHMKAjQ3fuvCHETbfhBlCQ0F5Y= -----END CERTIFICATE-----Generated at Thu Aug 7 00:26:52 2025 by rpki-client