$ rpki-client -vvf repo-rpki.idnic.net/repo/12c511be-67a2-44c9-b182-a911ba95be00/0/4412C369832E86CF255C7255EB1ECA7938910246.mft File: 4412C369832E86CF255C7255EB1ECA7938910246.mft (raw, json) Hash identifier: VhNTmtb5E/unye4ZOC5LtC0QSL9QRzIdAFp5ddOzHSM= Subject key identifier: 11:A7:0C:1F:26:67:AE:DE:19:8A:82:81:6A:49:7D:19:8B:1B:A4:B5 Authority key identifier: 44:12:C3:69:83:2E:86:CF:25:5C:72:55:EB:1E:CA:79:38:91:02:46 Certificate issuer: /CN=4412C369832E86CF255C7255EB1ECA7938910246 Certificate serial: 24ADB8C849A24612EBE1B5240DBA55F551E651D8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4412C369832E86CF255C7255EB1ECA7938910246.cer Subject info access: rsync://repo-rpki.idnic.net/repo/12c511be-67a2-44c9-b182-a911ba95be00/0/4412C369832E86CF255C7255EB1ECA7938910246.mft Manifest number: 0491 Signing time: Fri 22 Aug 2025 13:30:51 +0000 Manifest this update: Fri 22 Aug 2025 13:25:51 +0000 Manifest next update: Mon 25 Aug 2025 19:48:51 +0000 Files and hashes: 1: 323030313a6466353a353238303a3a2f34382d3438203d3e20313431313237.roa (hash: ytsbJoowjejam8im/CXHpxBx0NQjILkSC74yHsn7Jos=) 2: 3130332e3135382e3132312e302f32342d3234203d3e20313431313237.roa (hash: BsPjaPAJfoOsDEE1I3aoHNDcatuZ5kuXKVlMx6806B8=) 3: 4412C369832E86CF255C7255EB1ECA7938910246.crl (hash: mWIeoNuQIdlxIalZVM3C+oAI/BM8xvoWzAMSHPsJW2U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/12c511be-67a2-44c9-b182-a911ba95be00/0/4412C369832E86CF255C7255EB1ECA7938910246.crl rsync://repo-rpki.idnic.net/repo/12c511be-67a2-44c9-b182-a911ba95be00/0/4412C369832E86CF255C7255EB1ECA7938910246.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4412C369832E86CF255C7255EB1ECA7938910246.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 19:48:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:ad:b8:c8:49:a2:46:12:eb:e1:b5:24:0d:ba:55:f5:51:e6:51:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4412C369832E86CF255C7255EB1ECA7938910246 Validity Not Before: Aug 22 13:25:51 2025 GMT Not After : Aug 25 19:48:51 2025 GMT Subject: CN=11A70C1F2667AEDE198A82816A497D198B1BA4B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:88:bb:e6:a6:dd:57:1a:6b:43:e9:c1:be:d9: 8e:d8:21:70:3f:1b:56:1c:39:6a:5e:de:9a:d7:86: b3:9b:8a:df:b8:19:73:49:f9:7a:55:b5:ab:1a:61: d6:4b:a5:95:cb:dc:4f:81:d7:dd:ac:7c:df:a0:6c: fd:29:f1:92:14:17:14:75:3e:9b:67:42:ed:51:98: 32:dd:f2:97:32:b9:51:dd:f6:42:00:c4:6e:bb:78: d0:33:2b:00:e4:e2:8f:f6:f9:60:2f:6c:d2:89:ee: 2b:8e:f6:0e:26:6f:16:d0:2d:7d:e9:5b:43:be:e0: fc:f7:8b:27:59:a6:a6:26:f3:87:96:f5:87:3a:9e: fe:22:67:03:a7:46:c2:18:52:53:1f:d0:23:4f:c3: e6:87:8c:83:7f:1a:51:f8:83:8a:9f:01:ea:6d:67: dc:53:3a:25:13:70:49:96:08:32:90:7e:59:bb:91: d3:fc:c7:e8:d9:ca:41:87:a9:ad:5d:a4:71:a1:85: d9:cc:7e:bb:e4:64:a5:bd:2c:dd:ba:e5:0e:85:e2: 7a:dc:64:6a:f3:79:cb:1d:19:70:75:15:10:5a:54: 88:17:7a:30:ae:6c:cf:ac:92:bd:00:d6:b9:d2:86: f5:57:88:ca:83:ae:90:3b:27:87:2d:01:e6:30:14: 85:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:A7:0C:1F:26:67:AE:DE:19:8A:82:81:6A:49:7D:19:8B:1B:A4:B5 X509v3 Authority Key Identifier: keyid:44:12:C3:69:83:2E:86:CF:25:5C:72:55:EB:1E:CA:79:38:91:02:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/12c511be-67a2-44c9-b182-a911ba95be00/0/4412C369832E86CF255C7255EB1ECA7938910246.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4412C369832E86CF255C7255EB1ECA7938910246.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/12c511be-67a2-44c9-b182-a911ba95be00/0/4412C369832E86CF255C7255EB1ECA7938910246.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:de:69:b1:28:ec:24:2f:23:16:52:80:38:1f:0a:b4:41:5f: 56:a1:87:26:27:54:f3:45:5d:d0:19:21:88:00:1d:88:f6:49: 5e:ea:29:94:57:fe:f5:eb:32:99:ef:f9:05:de:42:e5:8d:48: a6:ac:e7:e2:0c:41:60:26:89:29:72:93:5c:93:7b:43:88:63: 90:ea:84:27:bb:40:c5:32:29:b5:81:91:e2:aa:b0:65:81:66: d3:6d:d0:12:a7:f6:d1:fe:1d:7a:d2:3f:e2:f9:47:81:a5:2c: c9:31:85:bc:82:11:8a:5c:72:b9:44:f0:0e:d6:58:db:70:bd: 13:08:78:16:bc:d5:3e:34:cc:84:c4:f6:fc:09:7e:63:74:eb: 80:99:b7:f6:29:7a:23:44:25:67:d0:a1:9b:66:56:ab:de:ce: 48:b9:a8:3c:ac:f1:d6:5f:21:81:42:5d:c7:71:c1:d9:33:3c: 5f:af:35:a2:50:41:21:e4:33:a3:b2:ad:49:54:9d:38:98:5d: b1:7a:d3:01:28:6f:f9:09:53:da:f8:6c:af:d0:6d:5b:04:27: fe:da:4e:a7:ac:7f:48:7d:c2:c6:76:59:f4:4c:f6:80:52:e3: 1a:81:71:4c:32:c0:90:42:1b:da:a1:22:4f:d9:61:1c:3f:4c: 5a:23:08:c7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJK24yEmiRhLr4bUkDbpV9VHmUdgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDQxMkMzNjk4MzJFODZDRjI1NUM3MjU1RUIxRUNBNzkz ODkxMDI0NjAeFw0yNTA4MjIxMzI1NTFaFw0yNTA4MjUxOTQ4NTFaMDMxMTAvBgNV BAMTKDExQTcwQzFGMjY2N0FFREUxOThBODI4MTZBNDk3RDE5OEIxQkE0QjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMiLvmpt1XGmtD6cG+2Y7YIXA/ G1YcOWpe3prXhrObit+4GXNJ+XpVtasaYdZLpZXL3E+B192sfN+gbP0p8ZIUFxR1 PptnQu1RmDLd8pcyuVHd9kIAxG67eNAzKwDk4o/2+WAvbNKJ7iuO9g4mbxbQLX3p W0O+4Pz3iydZpqYm84eW9Yc6nv4iZwOnRsIYUlMf0CNPw+aHjIN/GlH4g4qfAept Z9xTOiUTcEmWCDKQflm7kdP8x+jZykGHqa1dpHGhhdnMfrvkZKW9LN265Q6F4nrc ZGrzecsdGXB1FRBaVIgXejCubM+skr0A1rnShvVXiMqDrpA7J4ctAeYwFIULAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEacMHyZnrt4ZioKBakl9GYsbpLUwHwYDVR0j BBgwFoAURBLDaYMuhs8lXHJV6x7KeTiRAkYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MmM1MTFiZS02N2EyLTQ0YzktYjE4Mi1hOTExYmE5NWJlMDAvMC80NDEyQzM2OTgz MkU4NkNGMjU1QzcyNTVFQjFFQ0E3OTM4OTEwMjQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDQxMkMzNjk4MzJFODZDRjI1NUM3MjU1RUIxRUNBNzkzODkx MDI0Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTJjNTExYmUtNjdhMi00NGM5LWIx ODItYTkxMWJhOTViZTAwLzAvNDQxMkMzNjk4MzJFODZDRjI1NUM3MjU1RUIxRUNB NzkzODkxMDI0Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH3eabEo7CQvIxZSgDgfCrRBX1ahhyYnVPNF XdAZIYgAHYj2SV7qKZRX/vXrMpnv+QXeQuWNSKas5+IMQWAmiSlyk1yTe0OIY5Dq hCe7QMUyKbWBkeKqsGWBZtNt0BKn9tH+HXrSP+L5R4GlLMkxhbyCEYpccrlE8A7W WNtwvRMIeBa81T40zITE9vwJfmN064CZt/YpeiNEJWfQoZtmVqvezki5qDys8dZf IYFCXcdxwdkzPF+vNaJQQSHkM6OyrUlUnTiYXbF60wEob/kJU9r4bK/QbVsEJ/7a Tqesf0h9wsZ2WfRM9oBS4xqBcUwywJBCG9qhIk/ZYRw/TFojCMc= -----END CERTIFICATE-----Generated at Sat Aug 23 12:11:40 2025 by rpki-client