$ rpki-client -vvf repo-rpki.idnic.net/repo/f1b267a4-5030-4a4f-bb86-71fd230f53d1/0/C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.mft File: C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.mft (raw, json) Hash identifier: sUynuUiOoendbutx+Laftnp91mHssVLynPo5BtOClUk= Subject key identifier: 2B:A4:5F:25:26:93:82:2E:2E:9F:7A:00:6A:B8:88:6B:DA:D9:F0:5A Authority key identifier: C4:FC:DC:42:4C:5B:4B:2A:56:3F:0D:07:25:73:A5:49:2A:CF:8E:36 Certificate issuer: /CN=C4FCDC424C5B4B2A563F0D072573A5492ACF8E36 Certificate serial: 092F6CDC89D9DBA949B52B1002C4681ADDE4D4B8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f1b267a4-5030-4a4f-bb86-71fd230f53d1/0/C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.mft Manifest number: CB Signing time: Thu 07 Aug 2025 05:41:55 +0000 Manifest this update: Thu 07 Aug 2025 05:36:55 +0000 Manifest next update: Sun 10 Aug 2025 14:42:55 +0000 Files and hashes: 1: 3135372e36362e33382e302f32332d3234203d3e203633383635.roa (hash: ul03DJPa84uV+wn7V8w/eIH5fK3BBIC1WxDMCBsM/QQ=) 2: 3135372e36362e33382e302f32342d3234203d3e203435333035.roa (hash: cD0fi1g8RJKzuqT2bKPT18EYQnEf1eQo9O4WH9FMt7c=) 3: C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.crl (hash: gJ+yC1Us7lvkLIH/0fkHB/gm6LK4lMKQn5GKyQmGzkA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f1b267a4-5030-4a4f-bb86-71fd230f53d1/0/C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.crl rsync://repo-rpki.idnic.net/repo/f1b267a4-5030-4a4f-bb86-71fd230f53d1/0/C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 14:42:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:2f:6c:dc:89:d9:db:a9:49:b5:2b:10:02:c4:68:1a:dd:e4:d4:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C4FCDC424C5B4B2A563F0D072573A5492ACF8E36 Validity Not Before: Aug 7 05:36:55 2025 GMT Not After : Aug 10 14:42:55 2025 GMT Subject: CN=2BA45F252693822E2E9F7A006AB8886BDAD9F05A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:42:83:20:71:d9:9d:84:76:d1:f7:57:df:0c: 12:81:b6:9c:09:49:79:d3:d8:34:e1:9f:4e:c9:da: 40:28:56:3f:4c:3d:a6:60:7f:d8:b7:b9:44:0d:f9: f4:f3:8f:59:c9:11:a1:70:12:f4:42:2b:2f:09:ca: 95:14:29:99:be:42:47:7c:b6:d4:72:db:de:25:6e: 1f:e0:76:ac:6a:dc:57:7a:f1:66:74:b4:80:c4:09: 13:1b:c9:da:d4:2c:51:fd:73:95:45:07:92:1b:a0: fd:3b:cd:ee:fa:be:1f:cd:36:e9:99:4c:6d:c1:4b: 48:e6:85:3d:a3:08:fe:a6:96:61:c5:00:a5:7c:a3: c4:cb:d4:e9:a8:87:d3:8c:62:12:25:94:cd:a6:8a: d6:9d:e3:6b:f5:59:5b:6a:d0:b8:5d:ac:69:58:f6: 7c:3e:c0:46:35:ae:cf:04:3a:ef:07:13:64:90:fc: 8a:6b:3c:48:e5:fc:54:91:ef:0a:5c:8e:3a:e9:00: bf:39:b0:d1:a1:6c:af:7a:7a:4e:23:e8:4f:61:df: 80:82:3a:ff:51:65:00:b4:70:f5:66:78:bf:77:86: e0:48:e8:c4:a4:44:d9:46:8b:b7:a9:4c:89:4a:76: 66:5b:9f:5a:15:17:42:d5:92:50:72:7a:49:15:74: e2:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:A4:5F:25:26:93:82:2E:2E:9F:7A:00:6A:B8:88:6B:DA:D9:F0:5A X509v3 Authority Key Identifier: keyid:C4:FC:DC:42:4C:5B:4B:2A:56:3F:0D:07:25:73:A5:49:2A:CF:8E:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f1b267a4-5030-4a4f-bb86-71fd230f53d1/0/C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f1b267a4-5030-4a4f-bb86-71fd230f53d1/0/C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:04:26:f3:68:60:90:61:d2:50:37:2d:81:3e:34:2a:4d:e0: 22:3f:f6:07:88:52:26:17:95:b7:a8:cb:c2:91:5e:27:c8:79: 12:0b:6f:06:a7:e1:dc:26:b2:38:d2:6f:6d:46:12:3f:e6:c3: 22:d7:77:f4:3a:53:6e:6f:b2:a4:de:27:17:22:49:ee:6b:db: eb:98:b2:10:98:fe:11:72:b6:58:61:68:a8:1d:e6:3e:17:cf: 71:bd:da:ca:64:6f:bc:65:b3:a7:68:75:64:bf:a4:7c:cc:21: fb:c2:44:e0:4b:bd:3a:65:04:f5:00:ed:eb:9c:23:5a:74:5c: af:bf:5b:ca:8a:4e:d0:84:b4:6b:f6:45:cb:fe:50:39:5b:96: 3f:ac:eb:9f:c1:1d:bf:2a:06:c5:bd:4b:18:03:97:31:17:0b: 0e:6e:0f:0c:84:07:c2:56:00:fd:64:98:e5:29:9a:61:ec:d7: 6a:f5:90:3f:53:39:ce:31:a7:62:e3:dc:5d:db:fa:ad:ef:f5: 19:49:a9:60:b1:1e:88:9c:2e:6d:62:29:c8:66:e0:85:f5:9c: d2:1c:b3:6a:9c:aa:4c:39:fd:6a:cc:8f:a2:fe:de:c6:ab:23: 6c:2c:03:7f:d0:f0:bf:51:4f:87:8e:30:94:25:96:4b:0b:53: 77:af:64:1e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCS9s3InZ26lJtSsQAsRoGt3k1LgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzRGQ0RDNDI0QzVCNEIyQTU2M0YwRDA3MjU3M0E1NDky QUNGOEUzNjAeFw0yNTA4MDcwNTM2NTVaFw0yNTA4MTAxNDQyNTVaMDMxMTAvBgNV BAMTKDJCQTQ1RjI1MjY5MzgyMkUyRTlGN0EwMDZBQjg4ODZCREFEOUYwNUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChQoMgcdmdhHbR91ffDBKBtpwJ SXnT2DThn07J2kAoVj9MPaZgf9i3uUQN+fTzj1nJEaFwEvRCKy8JypUUKZm+Qkd8 ttRy294lbh/gdqxq3Fd68WZ0tIDECRMbydrULFH9c5VFB5IboP07ze76vh/NNumZ TG3BS0jmhT2jCP6mlmHFAKV8o8TL1Omoh9OMYhIllM2mitad42v1WVtq0LhdrGlY 9nw+wEY1rs8EOu8HE2SQ/IprPEjl/FSR7wpcjjrpAL85sNGhbK96ek4j6E9h34CC Ov9RZQC0cPVmeL93huBI6MSkRNlGi7epTIlKdmZbn1oVF0LVklByekkVdOIzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUK6RfJSaTgi4un3oAariIa9rZ8FowHwYDVR0j BBgwFoAUxPzcQkxbSypWPw0HJXOlSSrPjjYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MWIyNjdhNC01MDMwLTRhNGYtYmI4Ni03MWZkMjMwZjUzZDEvMC9DNEZDREM0MjRD NUI0QjJBNTYzRjBEMDcyNTczQTU0OTJBQ0Y4RTM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQzRGQ0RDNDI0QzVCNEIyQTU2M0YwRDA3MjU3M0E1NDkyQUNG OEUzNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjFiMjY3YTQtNTAzMC00YTRmLWJi ODYtNzFmZDIzMGY1M2QxLzAvQzRGQ0RDNDI0QzVCNEIyQTU2M0YwRDA3MjU3M0E1 NDkyQUNGOEUzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMIEJvNoYJBh0lA3LYE+NCpN4CI/9geIUiYX lbeoy8KRXifIeRILbwan4dwmsjjSb21GEj/mwyLXd/Q6U25vsqTeJxciSe5r2+uY shCY/hFytlhhaKgd5j4Xz3G92spkb7xls6dodWS/pHzMIfvCROBLvTplBPUA7euc I1p0XK+/W8qKTtCEtGv2Rcv+UDlblj+s65/BHb8qBsW9SxgDlzEXCw5uDwyEB8JW AP1kmOUpmmHs12r1kD9TOc4xp2Lj3F3b+q3v9RlJqWCxHoicLm1iKchm4IX1nNIc s2qcqkw5/WrMj6L+3sarI2wsA3/Q8L9RT4eOMJQllksLU3evZB4= -----END CERTIFICATE-----Generated at Sat Aug 9 15:06:38 2025 by rpki-client