$ rpki-client -vvf repo-rpki.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/4A4CC1D625A4519B23D73717C879F10A6173AEAB.mft File: 4A4CC1D625A4519B23D73717C879F10A6173AEAB.mft (raw, json) Hash identifier: 9e8Fcw7xoyKCcO/leWhvb9RxecdkB43RbuIFJTznMJk= Subject key identifier: A4:A6:1E:59:42:40:34:AD:C0:EA:3D:B8:CD:CE:00:67:98:27:C5:47 Authority key identifier: 4A:4C:C1:D6:25:A4:51:9B:23:D7:37:17:C8:79:F1:0A:61:73:AE:AB Certificate issuer: /CN=4A4CC1D625A4519B23D73717C879F10A6173AEAB Certificate serial: 3A54F065B04302954F872F2BDA6D216E6F51D4D9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A4CC1D625A4519B23D73717C879F10A6173AEAB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/4A4CC1D625A4519B23D73717C879F10A6173AEAB.mft Manifest number: 02AE Signing time: Thu 21 Aug 2025 11:01:35 +0000 Manifest this update: Thu 21 Aug 2025 10:56:35 +0000 Manifest next update: Sun 24 Aug 2025 16:34:35 +0000 Files and hashes: 1: 3130332e3233332e3130392e302f32342d3234203d3e203633343838.roa (hash: GdSTW/OHYTEI/PWuMmTToeVUXPmcixtoxCsRQug+8zk=) 2: 3130332e3233332e3130382e302f32342d3234203d3e203633343838.roa (hash: NTu0pfg5O9FNTQVT/y9O87yuBsSqMNv0sxLjGwJCf2Y=) 3: 3130332e3233332e3131312e302f32342d3234203d3e203633343838.roa (hash: z/YOZWWGc41LH9oZ4KGtThI9u3npxHOn37nVJl/FSQI=) 4: 4A4CC1D625A4519B23D73717C879F10A6173AEAB.crl (hash: PdixXtVSnbbACOgfjS5hjhwMg8yg/1SiTV9leV5klIs=) 5: 3130332e3233332e3131302e302f32342d3234203d3e203338373538.roa (hash: XkLmfviGVp2EGPILR+re9nqIYX0YPT0FpVRTvK0kmBs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/4A4CC1D625A4519B23D73717C879F10A6173AEAB.crl rsync://repo-rpki.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/4A4CC1D625A4519B23D73717C879F10A6173AEAB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A4CC1D625A4519B23D73717C879F10A6173AEAB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 16:34:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:54:f0:65:b0:43:02:95:4f:87:2f:2b:da:6d:21:6e:6f:51:d4:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A4CC1D625A4519B23D73717C879F10A6173AEAB Validity Not Before: Aug 21 10:56:35 2025 GMT Not After : Aug 24 16:34:35 2025 GMT Subject: CN=A4A61E59424034ADC0EA3DB8CDCE00679827C547 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:53:ce:b2:c5:5c:08:f8:73:f8:9e:e0:b8:81: 71:ea:2b:fb:41:2b:75:38:29:a0:d4:5f:34:66:fa: e2:40:84:ea:0d:9a:96:38:c0:61:19:26:f1:d9:3f: 1f:bd:c1:28:0f:af:0c:1a:47:ea:99:6d:64:3c:9a: b5:c9:bc:b5:8b:37:fa:04:5e:0c:a5:a2:cf:25:c7: 02:36:83:f4:80:d1:b1:a5:1c:3a:38:09:ac:2a:ef: 18:39:32:a1:ba:03:47:f0:65:15:1a:6f:3a:09:23: 30:00:aa:70:e2:0b:23:1d:ee:20:e3:36:8a:3d:41: 39:5b:26:63:9f:00:6d:67:1a:ce:bd:fc:23:a8:cf: c4:35:c1:2b:8b:0d:91:8c:9c:11:09:84:2e:29:03: a3:73:c0:63:d3:25:a7:cd:6a:3b:48:3f:70:68:a7: cf:cb:f7:85:c6:ab:34:41:0c:ba:ad:00:1e:ce:d7: 5e:20:ad:5f:8b:14:28:b2:b1:f3:9c:bf:f4:25:50: e0:3c:c8:d1:af:74:28:f8:f2:ec:9c:0d:54:df:45: ad:77:0d:ba:2b:c4:0c:72:6e:e4:63:29:a8:b1:c1: 33:0e:66:e5:22:b9:0b:f3:65:4b:bd:37:04:7a:16: 45:85:99:cf:60:f5:7d:b5:95:91:12:73:ea:52:f3: 4e:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:A6:1E:59:42:40:34:AD:C0:EA:3D:B8:CD:CE:00:67:98:27:C5:47 X509v3 Authority Key Identifier: keyid:4A:4C:C1:D6:25:A4:51:9B:23:D7:37:17:C8:79:F1:0A:61:73:AE:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/4A4CC1D625A4519B23D73717C879F10A6173AEAB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A4CC1D625A4519B23D73717C879F10A6173AEAB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/4A4CC1D625A4519B23D73717C879F10A6173AEAB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:36:2b:5d:4b:89:5e:a2:64:fa:f1:e7:5e:10:5d:b9:c4:39: 51:0c:0e:f7:4b:eb:79:6e:cf:3a:d0:41:b9:01:4e:e8:92:5d: cb:a0:4c:74:4a:19:bd:95:48:a1:08:f0:be:e3:6b:60:89:d4: 21:ff:06:d4:1d:34:71:63:e2:85:3a:ba:eb:6e:81:7a:30:21: c9:4a:46:a6:1b:40:30:6e:95:d3:fc:83:81:72:dc:bb:e1:97: 1d:e2:8b:ce:8a:00:f3:90:db:77:cc:13:ac:47:b2:07:19:17: be:7e:60:b4:76:51:19:a8:fc:7e:b0:40:a0:f9:b0:2c:92:9f: f8:77:7f:d2:ff:aa:74:04:43:a9:a7:34:67:8b:d9:f8:fd:7d: 99:73:80:e7:38:13:fd:af:3c:1e:2c:67:88:bc:93:d6:fa:2a: af:b3:c1:04:99:8c:94:20:08:f7:fe:7b:c5:9d:a2:53:57:e8: af:81:1d:62:6a:59:ab:2c:16:cc:56:d6:af:65:0a:af:15:4e: 19:e0:99:61:2e:83:5e:f4:f2:f7:e8:54:17:57:08:63:17:ef: 06:b5:7a:1d:27:ee:99:f0:df:28:93:f0:71:f7:ad:e7:be:e8: 2b:bf:b3:d8:f8:26:7c:d0:87:c6:90:3d:fa:2a:e4:81:12:1d: 19:05:65:b6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOlTwZbBDApVPhy8r2m0hbm9R1NkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEE0Q0MxRDYyNUE0NTE5QjIzRDczNzE3Qzg3OUYxMEE2 MTczQUVBQjAeFw0yNTA4MjExMDU2MzVaFw0yNTA4MjQxNjM0MzVaMDMxMTAvBgNV BAMTKEE0QTYxRTU5NDI0MDM0QURDMEVBM0RCOENEQ0UwMDY3OTgyN0M1NDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRU86yxVwI+HP4nuC4gXHqK/tB K3U4KaDUXzRm+uJAhOoNmpY4wGEZJvHZPx+9wSgPrwwaR+qZbWQ8mrXJvLWLN/oE Xgylos8lxwI2g/SA0bGlHDo4Cawq7xg5MqG6A0fwZRUabzoJIzAAqnDiCyMd7iDj Noo9QTlbJmOfAG1nGs69/COoz8Q1wSuLDZGMnBEJhC4pA6NzwGPTJafNajtIP3Bo p8/L94XGqzRBDLqtAB7O114grV+LFCiysfOcv/QlUOA8yNGvdCj48uycDVTfRa13 DborxAxybuRjKaixwTMOZuUiuQvzZUu9NwR6FkWFmc9g9X21lZESc+pS804XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpKYeWUJANK3A6j24zc4AZ5gnxUcwHwYDVR0j BBgwFoAUSkzB1iWkUZsj1zcXyHnxCmFzrqswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZWQ0NmY4Mi1jZjExLTRlMzItYjA1MS02YWMzMzRhOTI2MjIvMC80QTRDQzFENjI1 QTQ1MTlCMjNENzM3MTdDODc5RjEwQTYxNzNBRUFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEE0Q0MxRDYyNUE0NTE5QjIzRDczNzE3Qzg3OUYxMEE2MTcz QUVBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWVkNDZmODItY2YxMS00ZTMyLWIw NTEtNmFjMzM0YTkyNjIyLzAvNEE0Q0MxRDYyNUE0NTE5QjIzRDczNzE3Qzg3OUYx MEE2MTczQUVBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABM2K11LiV6iZPrx514QXbnEOVEMDvdL63lu zzrQQbkBTuiSXcugTHRKGb2VSKEI8L7ja2CJ1CH/BtQdNHFj4oU6uutugXowIclK RqYbQDBuldP8g4Fy3Lvhlx3ii86KAPOQ23fME6xHsgcZF75+YLR2URmo/H6wQKD5 sCySn/h3f9L/qnQEQ6mnNGeL2fj9fZlzgOc4E/2vPB4sZ4i8k9b6Kq+zwQSZjJQg CPf+e8WdolNX6K+BHWJqWassFsxW1q9lCq8VThngmWEug1708vfoVBdXCGMX7wa1 eh0n7pnw3yiT8HH3ree+6Cu/s9j4JnzQh8aQPfoq5IESHRkFZbY= -----END CERTIFICATE-----Generated at Sat Aug 23 17:27:21 2025 by rpki-client