$ rpki-client -vvf repo-rpki.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/4EE959798755CD4BA407AEB6EBDD3100261EAA55.mft File: 4EE959798755CD4BA407AEB6EBDD3100261EAA55.mft (raw, json) Hash identifier: mykl1agI4ayekBkgCTMIjeCpi8poC9dLl/RlTamYJPI= Subject key identifier: 74:BD:E1:03:A5:6B:96:EF:15:49:47:63:C8:99:64:21:4D:2C:E5:09 Authority key identifier: 4E:E9:59:79:87:55:CD:4B:A4:07:AE:B6:EB:DD:31:00:26:1E:AA:55 Certificate issuer: /CN=4EE959798755CD4BA407AEB6EBDD3100261EAA55 Certificate serial: 3ED57DB4DE03BD91A56622002A7BFF0C30AAEC3E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4EE959798755CD4BA407AEB6EBDD3100261EAA55.cer Subject info access: rsync://repo-rpki.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/4EE959798755CD4BA407AEB6EBDD3100261EAA55.mft Manifest number: 0321 Signing time: Fri 22 Aug 2025 12:02:17 +0000 Manifest this update: Fri 22 Aug 2025 11:57:17 +0000 Manifest next update: Mon 25 Aug 2025 14:25:17 +0000 Files and hashes: 1: 3130332e3136382e3235312e302f32342d3234203d3e20313432333237.roa (hash: mP3dXLTjkrRr0prh2Jzplj5CirAMZtpiVu7s//8AY3w=) 2: 3130332e3136382e3235302e302f32342d3234203d3e20313432333237.roa (hash: vUWQBZ0/r7vI2v8KbhMfVsf4gR9LmNP6bUrY9mudCfU=) 3: 4EE959798755CD4BA407AEB6EBDD3100261EAA55.crl (hash: Z2Q7+tUwVtXHDTCtaefzqkR4EMfT0s2d72lKd1+c8f8=) 4: 3130332e3136382e3235302e302f32332d3233203d3e20313432333237.roa (hash: ik9rrWYA9D4GBjhetTFAP4k0XQKOPTBWebSo28sOHb8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/4EE959798755CD4BA407AEB6EBDD3100261EAA55.crl rsync://repo-rpki.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/4EE959798755CD4BA407AEB6EBDD3100261EAA55.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4EE959798755CD4BA407AEB6EBDD3100261EAA55.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 14:25:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:d5:7d:b4:de:03:bd:91:a5:66:22:00:2a:7b:ff:0c:30:aa:ec:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4EE959798755CD4BA407AEB6EBDD3100261EAA55 Validity Not Before: Aug 22 11:57:17 2025 GMT Not After : Aug 25 14:25:17 2025 GMT Subject: CN=74BDE103A56B96EF15494763C89964214D2CE509 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:f2:72:cf:a0:43:8a:64:01:17:aa:0b:ef:2e: a9:da:a3:16:1f:b5:3c:c3:60:8b:1e:f9:df:37:24: 31:63:c4:e8:a2:e6:51:88:b1:eb:b2:0e:8c:25:ef: 8f:30:e5:c1:ee:31:86:9b:52:af:40:61:77:8b:ae: 12:73:84:ed:10:ce:c1:14:8a:70:27:d7:83:4c:48: 98:98:4e:08:fd:c4:01:5a:23:08:5a:c0:7e:a6:64: d1:74:a3:8d:53:73:ee:9b:4f:e5:0e:35:f6:05:9c: 67:ec:8a:2c:fb:6f:80:48:d4:25:9f:d2:fb:e7:0d: e8:7a:58:ae:11:19:5f:6a:a6:a0:2e:7f:e6:c9:bb: 16:14:89:5d:ce:3f:4d:28:1f:bd:a2:3a:b1:03:96: 91:e1:76:f8:5e:fb:f3:01:f6:8b:a3:8c:fc:03:b0: e2:f8:c1:0c:db:03:57:04:b9:ae:19:12:25:ac:02: d0:51:de:c7:ec:0b:a7:f0:d5:5e:df:84:d2:b1:1f: 50:98:cb:4d:9b:e1:7c:ed:4d:40:93:95:f8:f6:0d: 0e:46:69:6f:2c:ef:f9:d4:c1:b8:6f:bc:88:b4:14: 92:a8:b5:53:1a:2b:ac:fd:9c:ff:ed:76:2a:90:2b: d0:fb:45:0d:2d:3e:60:7b:66:d3:d9:a4:dd:67:aa: 8d:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:BD:E1:03:A5:6B:96:EF:15:49:47:63:C8:99:64:21:4D:2C:E5:09 X509v3 Authority Key Identifier: keyid:4E:E9:59:79:87:55:CD:4B:A4:07:AE:B6:EB:DD:31:00:26:1E:AA:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/4EE959798755CD4BA407AEB6EBDD3100261EAA55.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4EE959798755CD4BA407AEB6EBDD3100261EAA55.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/4EE959798755CD4BA407AEB6EBDD3100261EAA55.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:c8:88:02:cc:f9:d2:14:ab:7a:36:18:e4:6c:53:75:cc:e5: 39:85:bf:e5:f5:5f:d0:7d:0a:2e:09:9a:6b:81:c0:9f:4a:f4: e3:de:b3:3c:06:cf:fc:29:14:f9:bd:fc:83:d2:2e:a5:96:6f: b3:83:3c:f5:59:2b:9e:95:05:c3:c2:18:7b:94:ca:db:8a:24: d1:8a:62:95:10:08:49:af:71:ab:9c:db:38:2c:b5:72:0b:4c: 02:5a:b6:20:83:a9:c8:01:71:ab:d2:51:14:7e:42:6f:dc:04: 23:63:bf:74:1c:25:f0:b3:0d:ed:89:31:d0:31:d1:5e:57:b6: ce:61:a9:13:23:46:25:94:c0:9c:56:d8:f1:ab:bc:77:cd:3b: 0e:70:9f:5d:2d:42:2a:7d:ef:5e:33:43:21:d7:e7:e9:06:0b: 4a:ed:3c:fd:5b:c2:75:7b:51:94:51:9b:c4:00:e2:5c:47:85: f2:28:c6:d8:0c:47:83:b2:be:2c:ea:3e:7b:99:74:05:31:e2: 57:07:a0:56:66:8c:66:d3:c0:fa:6c:a1:bc:2e:51:3e:f6:9d: 58:6c:e1:ec:9e:48:b2:18:58:25:46:76:9e:e6:a3:97:df:f6: 40:6d:c6:e8:72:1b:6f:9c:e4:07:78:83:37:98:86:41:2e:00: e5:16:7f:66 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPtV9tN4DvZGlZiIAKnv/DDCq7D4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEVFOTU5Nzk4NzU1Q0Q0QkE0MDdBRUI2RUJERDMxMDAy NjFFQUE1NTAeFw0yNTA4MjIxMTU3MTdaFw0yNTA4MjUxNDI1MTdaMDMxMTAvBgNV BAMTKDc0QkRFMTAzQTU2Qjk2RUYxNTQ5NDc2M0M4OTk2NDIxNEQyQ0U1MDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDY8nLPoEOKZAEXqgvvLqnaoxYf tTzDYIse+d83JDFjxOii5lGIseuyDowl748w5cHuMYabUq9AYXeLrhJzhO0QzsEU inAn14NMSJiYTgj9xAFaIwhawH6mZNF0o41Tc+6bT+UONfYFnGfsiiz7b4BI1CWf 0vvnDeh6WK4RGV9qpqAuf+bJuxYUiV3OP00oH72iOrEDlpHhdvhe+/MB9oujjPwD sOL4wQzbA1cEua4ZEiWsAtBR3sfsC6fw1V7fhNKxH1CYy02b4XztTUCTlfj2DQ5G aW8s7/nUwbhvvIi0FJKotVMaK6z9nP/tdiqQK9D7RQ0tPmB7ZtPZpN1nqo17AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdL3hA6Vrlu8VSUdjyJlkIU0s5QkwHwYDVR0j BBgwFoAUTulZeYdVzUukB662690xACYeqlUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MzhkNTgwYi00NTJlLTQyZDctYjA0MS05MDFkYzMzZDY4NTcvMC80RUU5NTk3OTg3 NTVDRDRCQTQwN0FFQjZFQkREMzEwMDI2MUVBQTU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEVFOTU5Nzk4NzU1Q0Q0QkE0MDdBRUI2RUJERDMxMDAyNjFF QUE1NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDM4ZDU4MGItNDUyZS00MmQ3LWIw NDEtOTAxZGMzM2Q2ODU3LzAvNEVFOTU5Nzk4NzU1Q0Q0QkE0MDdBRUI2RUJERDMx MDAyNjFFQUE1NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFvIiALM+dIUq3o2GORsU3XM5TmFv+X1X9B9 Ci4JmmuBwJ9K9OPeszwGz/wpFPm9/IPSLqWWb7ODPPVZK56VBcPCGHuUytuKJNGK YpUQCEmvcauc2zgstXILTAJatiCDqcgBcavSURR+Qm/cBCNjv3QcJfCzDe2JMdAx 0V5Xts5hqRMjRiWUwJxW2PGrvHfNOw5wn10tQip9714zQyHX5+kGC0rtPP1bwnV7 UZRRm8QA4lxHhfIoxtgMR4OyvizqPnuZdAUx4lcHoFZmjGbTwPpsobwuUT72nVhs 4eyeSLIYWCVGdp7mo5ff9kBtxuhyG2+c5Ad4gzeYhkEuAOUWf2Y= -----END CERTIFICATE-----Generated at Sat Aug 23 12:21:26 2025 by rpki-client