$ rpki-client -vvf repo-rpki.idnic.net/repo/24d108f7-08b2-409f-8a70-a9c67ae5ed22/0/4FA812FE6A4A85F790CB2740EF08836883716912.mft File: 4FA812FE6A4A85F790CB2740EF08836883716912.mft (raw, json) Hash identifier: 9N4cSCPaOq20rjw+1nKZv2CD6aGK1qdU/rrBw4ArUJg= Subject key identifier: 77:35:C1:CF:F6:B0:19:05:E4:D0:ED:AF:C2:A0:D6:B5:88:78:CF:D0 Authority key identifier: 4F:A8:12:FE:6A:4A:85:F7:90:CB:27:40:EF:08:83:68:83:71:69:12 Certificate issuer: /CN=4FA812FE6A4A85F790CB2740EF08836883716912 Certificate serial: 066731E7B8B5F337F90A4B57DACC2D9EF00916BD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4FA812FE6A4A85F790CB2740EF08836883716912.cer Subject info access: rsync://repo-rpki.idnic.net/repo/24d108f7-08b2-409f-8a70-a9c67ae5ed22/0/4FA812FE6A4A85F790CB2740EF08836883716912.mft Manifest number: 04CA Signing time: Fri 22 Aug 2025 17:30:49 +0000 Manifest this update: Fri 22 Aug 2025 17:25:49 +0000 Manifest next update: Tue 26 Aug 2025 00:23:49 +0000 Files and hashes: 1: 4FA812FE6A4A85F790CB2740EF08836883716912.crl (hash: wAucEiN4nw871e2NbKRwumRFXD+YCWeDMbMB3KMUJEY=) 2: 3130332e39302e3139362e302f32322d3234203d3e20313331373637.roa (hash: 0If+6/mMOFFyP2FqyKGK3txMDLzFU3f4sqXMr4WKhzY=) 3: 323430303a386238303a3a2f33322d3332203d3e20313331373637.roa (hash: WzhaKVVHhW/0GGZkiM6FBwtbr9n3QYlgPERNMN1x09w=) 4: 3137352e3130362e31362e302f32322d3234203d3e20313331373637.roa (hash: FSa5jhvEvK/r9qXQQGlnZIm8LVRjHW9YNMDzzN5f0xI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/24d108f7-08b2-409f-8a70-a9c67ae5ed22/0/4FA812FE6A4A85F790CB2740EF08836883716912.crl rsync://repo-rpki.idnic.net/repo/24d108f7-08b2-409f-8a70-a9c67ae5ed22/0/4FA812FE6A4A85F790CB2740EF08836883716912.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4FA812FE6A4A85F790CB2740EF08836883716912.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 00:23:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:67:31:e7:b8:b5:f3:37:f9:0a:4b:57:da:cc:2d:9e:f0:09:16:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4FA812FE6A4A85F790CB2740EF08836883716912 Validity Not Before: Aug 22 17:25:49 2025 GMT Not After : Aug 26 00:23:49 2025 GMT Subject: CN=7735C1CFF6B01905E4D0EDAFC2A0D6B58878CFD0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:2f:2d:34:8f:ff:a1:f8:66:02:6b:29:35:a5: 2c:ef:1f:4c:c1:27:79:f5:ce:85:17:37:3c:8c:eb: 5d:b3:58:01:7f:38:7f:57:eb:b1:3e:af:3f:ce:72: ba:6d:5d:bd:42:17:de:47:e6:a2:1a:ab:8a:5d:82: 74:61:b6:9e:58:c6:b8:a7:2c:7a:8f:d6:0d:59:3a: c5:4f:e0:d3:3e:77:38:2f:5b:4c:23:df:16:fb:10: fa:fa:38:f9:c5:79:a0:72:77:60:39:fa:a0:5b:56: 73:17:e0:8b:ec:a9:74:49:a8:6c:b6:16:bc:60:9d: 44:75:4e:ba:b2:7d:28:05:e3:fc:58:a6:66:a1:0a: ab:b9:17:29:e8:e5:45:77:19:cf:fa:84:03:67:c2: a3:12:f5:cb:34:bf:2c:cf:b6:2e:92:82:c7:6c:9b: 0e:74:bd:d3:bb:9b:9b:e2:6d:40:2c:2e:99:38:5f: ae:64:97:a0:a8:5c:e8:99:34:d3:da:f8:a1:2a:69: 62:3a:ed:1d:ff:97:54:3d:6b:1c:a7:74:fc:f9:75: 57:cb:56:70:fb:43:87:03:b8:1b:0f:fb:82:d1:e2: 08:06:15:f4:52:9c:b4:c4:ab:96:51:1d:b4:91:62: 13:a2:71:b9:8e:b3:14:e4:5d:8b:48:50:d8:0a:84: 91:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:35:C1:CF:F6:B0:19:05:E4:D0:ED:AF:C2:A0:D6:B5:88:78:CF:D0 X509v3 Authority Key Identifier: keyid:4F:A8:12:FE:6A:4A:85:F7:90:CB:27:40:EF:08:83:68:83:71:69:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/24d108f7-08b2-409f-8a70-a9c67ae5ed22/0/4FA812FE6A4A85F790CB2740EF08836883716912.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4FA812FE6A4A85F790CB2740EF08836883716912.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/24d108f7-08b2-409f-8a70-a9c67ae5ed22/0/4FA812FE6A4A85F790CB2740EF08836883716912.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:38:5f:9a:af:b9:24:57:eb:7e:de:7e:5e:27:dc:e6:25:72: 17:b0:7e:97:2f:b6:83:56:74:ea:09:bd:57:05:7f:2d:e8:b0: e1:af:e4:0d:99:84:f2:ee:b1:d1:49:33:81:31:4d:e3:fa:ec: 59:70:3d:82:aa:2f:c8:2a:90:c2:a4:71:06:2d:1e:1d:4e:a3: b1:b0:84:f1:7b:4a:16:87:f1:58:4b:05:3a:77:2b:69:9e:cf: 58:f6:9d:51:7d:d7:4d:f0:6d:59:3a:05:cb:a1:61:85:33:d3: ff:8f:b7:c0:59:d1:28:94:ab:ad:8e:dd:03:bb:63:43:f9:15: f8:38:1d:e4:f3:61:2d:a6:39:c8:f7:c6:0a:16:b4:3e:1c:db: fd:8f:bf:85:37:5e:47:40:87:e0:31:16:83:00:29:7f:29:79: 13:69:e6:cc:90:a3:40:49:4a:41:0a:f0:cf:4a:61:ef:fc:8f: 06:84:44:23:10:16:11:d8:6a:f3:2d:65:39:8d:cc:b8:c4:81: 05:cc:c1:33:51:7b:e7:98:f1:39:a7:b1:18:33:25:1c:f0:7d: d3:1a:7f:7a:df:55:02:f6:7d:cb:81:02:97:a7:02:95:ee:06: 32:05:c9:ec:1b:cf:a8:c7:75:d2:57:c4:c3:1c:7f:42:76:c2: 05:79:36:c3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBmcx57i18zf5CktX2swtnvAJFr0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEZBODEyRkU2QTRBODVGNzkwQ0IyNzQwRUYwODgzNjg4 MzcxNjkxMjAeFw0yNTA4MjIxNzI1NDlaFw0yNTA4MjYwMDIzNDlaMDMxMTAvBgNV BAMTKDc3MzVDMUNGRjZCMDE5MDVFNEQwRURBRkMyQTBENkI1ODg3OENGRDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSLy00j/+h+GYCayk1pSzvH0zB J3n1zoUXNzyM612zWAF/OH9X67E+rz/OcrptXb1CF95H5qIaq4pdgnRhtp5Yxrin LHqP1g1ZOsVP4NM+dzgvW0wj3xb7EPr6OPnFeaByd2A5+qBbVnMX4IvsqXRJqGy2 FrxgnUR1TrqyfSgF4/xYpmahCqu5Fyno5UV3Gc/6hANnwqMS9cs0vyzPti6Sgsds mw50vdO7m5vibUAsLpk4X65kl6CoXOiZNNPa+KEqaWI67R3/l1Q9axyndPz5dVfL VnD7Q4cDuBsP+4LR4ggGFfRSnLTEq5ZRHbSRYhOicbmOsxTkXYtIUNgKhJF9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdzXBz/awGQXk0O2vwqDWtYh4z9AwHwYDVR0j BBgwFoAUT6gS/mpKhfeQyydA7wiDaINxaRIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NGQxMDhmNy0wOGIyLTQwOWYtOGE3MC1hOWM2N2FlNWVkMjIvMC80RkE4MTJGRTZB NEE4NUY3OTBDQjI3NDBFRjA4ODM2ODgzNzE2OTEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEZBODEyRkU2QTRBODVGNzkwQ0IyNzQwRUYwODgzNjg4Mzcx NjkxMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjRkMTA4ZjctMDhiMi00MDlmLThh NzAtYTljNjdhZTVlZDIyLzAvNEZBODEyRkU2QTRBODVGNzkwQ0IyNzQwRUYwODgz Njg4MzcxNjkxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALE4X5qvuSRX637efl4n3OYlchewfpcvtoNW dOoJvVcFfy3osOGv5A2ZhPLusdFJM4ExTeP67FlwPYKqL8gqkMKkcQYtHh1Oo7Gw hPF7ShaH8VhLBTp3K2mez1j2nVF9103wbVk6BcuhYYUz0/+Pt8BZ0SiUq62O3QO7 Y0P5Ffg4HeTzYS2mOcj3xgoWtD4c2/2Pv4U3XkdAh+AxFoMAKX8peRNp5syQo0BJ SkEK8M9KYe/8jwaERCMQFhHYavMtZTmNzLjEgQXMwTNRe+eY8TmnsRgzJRzwfdMa f3rfVQL2fcuBApenApXuBjIFyewbz6jHddJXxMMcf0J2wgV5NsM= -----END CERTIFICATE-----Generated at Sat Aug 23 10:34:15 2025 by rpki-client