$ rpki-client -vvf repo-rpki.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.mft File: 4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.mft (raw, json) Hash identifier: nUN2OI+OV0vd3xLc827TtEr/s8sEoO+y3FHzt+izykE= Subject key identifier: 03:5F:06:88:B4:19:80:D9:0E:78:13:1E:68:72:77:65:26:04:8A:04 Authority key identifier: 4F:29:04:EA:E6:6A:DD:5D:3A:C5:3C:6A:CC:B9:21:33:B4:26:DF:48 Certificate issuer: /CN=4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48 Certificate serial: 6D7B279078F8547D50D45B8AF8DE5763C169F14C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.cer Subject info access: rsync://repo-rpki.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.mft Manifest number: 04FF Signing time: Thu 21 Aug 2025 23:12:13 +0000 Manifest this update: Thu 21 Aug 2025 23:07:13 +0000 Manifest next update: Mon 25 Aug 2025 04:16:13 +0000 Files and hashes: 1: 4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.crl (hash: XV6VIydGSEep80B7hV9Ci85rqSxyWHQfqldGLvRbHmw=) 2: 3130332e3134362e3138342e302f32332d3234203d3e20313339393637.roa (hash: RvVL0eKqhvW5Nd9pF2jqsL2iAerie+UOp2Ou6UGubqQ=) 3: 323430353a396363303a3a2f33322d3438203d3e20313339393637.roa (hash: dqqK2b30QcWDUvsFT2ynFnDCTSvisXhj5I9h/iJg6fA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.crl rsync://repo-rpki.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 04:16:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:7b:27:90:78:f8:54:7d:50:d4:5b:8a:f8:de:57:63:c1:69:f1:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48 Validity Not Before: Aug 21 23:07:13 2025 GMT Not After : Aug 25 04:16:13 2025 GMT Subject: CN=035F0688B41980D90E78131E6872776526048A04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:e8:91:73:f1:f1:a4:c4:70:5b:bc:43:67:03: 80:09:e1:80:83:ef:37:2c:13:b8:f1:55:53:f9:87: 6e:19:53:94:be:2d:a0:a6:49:9e:0a:52:eb:11:3a: af:e6:47:63:5e:60:9f:4c:6f:c9:e4:b2:19:b2:9d: 76:e0:99:11:d3:29:86:fa:a5:35:b8:77:4d:4e:b9: a7:a0:c5:b7:9b:79:a6:3c:2e:b8:c4:69:7d:c2:6a: 9f:d9:d6:7d:e6:64:89:b8:37:0b:c3:b3:bc:e0:be: 50:74:98:8a:30:7d:b3:f4:0d:38:38:aa:e0:35:a1: 51:32:03:32:80:2d:0a:55:12:0b:08:83:a1:de:01: 97:58:4c:3c:0d:19:4d:88:c7:ae:4f:e2:aa:48:86: 5e:e7:2e:73:0f:2e:eb:98:98:c5:b2:37:6d:6c:c3: fd:c0:3c:b8:6a:f0:46:6e:f8:ae:ea:b5:59:93:8a: 38:86:99:b1:a7:bb:c7:36:11:66:38:2c:fa:56:25: 53:ed:47:73:77:80:43:e8:1d:9c:99:c2:71:a5:a6: 69:4a:e8:e2:c1:8a:7f:74:21:3b:25:4c:a7:e3:5a: 08:ef:a2:6f:67:01:7f:08:6f:fb:40:df:05:6f:0a: b7:ba:64:9b:8d:41:09:60:16:36:ed:aa:7d:dc:49: 42:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:5F:06:88:B4:19:80:D9:0E:78:13:1E:68:72:77:65:26:04:8A:04 X509v3 Authority Key Identifier: keyid:4F:29:04:EA:E6:6A:DD:5D:3A:C5:3C:6A:CC:B9:21:33:B4:26:DF:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:3e:f8:ac:9a:6c:78:f4:5f:01:0d:03:d7:8b:b3:6f:12:40: 69:ef:fd:13:43:17:e9:0d:5c:bd:02:6e:12:a8:67:15:11:04: ac:fa:62:00:0d:96:5c:2a:5c:8c:d6:42:79:67:44:01:a7:1a: 55:b5:f1:79:3c:ec:68:31:da:b6:1f:0f:6a:4d:09:e1:58:b9: 5e:3e:92:94:a1:49:eb:96:38:77:15:36:b3:46:90:b0:44:e9: a0:3d:f7:b6:73:b9:48:71:b1:14:ff:12:d7:c5:e3:3e:c3:db: 7f:0a:c9:99:bd:9e:33:8f:9d:32:c5:a9:df:ae:bd:f4:d2:15: a2:e7:6d:a1:8c:48:49:11:d7:28:8b:93:d9:10:31:95:05:c8: 5f:a9:ea:5b:9c:ed:02:25:31:b0:78:ce:e7:fd:78:fc:32:5a: 67:6a:ae:90:39:f1:75:84:d2:95:36:ef:1d:7f:6f:6b:7c:9e: f8:01:a3:be:48:e0:86:e8:f9:a6:cf:66:35:d3:1e:a1:f3:54: f7:bc:57:32:42:82:3f:34:ac:f8:40:a3:8c:3b:93:bc:55:03: de:a5:d5:69:c4:13:fb:0a:16:d2:c0:71:67:e1:37:c8:ed:26: 23:6e:1f:58:c3:b9:86:0d:a5:11:d4:43:06:19:79:11:ab:24: 12:4b:a4:fd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbXsnkHj4VH1Q1FuK+N5XY8Fp8UwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEYyOTA0RUFFNjZBREQ1RDNBQzUzQzZBQ0NCOTIxMzNC NDI2REY0ODAeFw0yNTA4MjEyMzA3MTNaFw0yNTA4MjUwNDE2MTNaMDMxMTAvBgNV BAMTKDAzNUYwNjg4QjQxOTgwRDkwRTc4MTMxRTY4NzI3NzY1MjYwNDhBMDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZ6JFz8fGkxHBbvENnA4AJ4YCD 7zcsE7jxVVP5h24ZU5S+LaCmSZ4KUusROq/mR2NeYJ9Mb8nkshmynXbgmRHTKYb6 pTW4d01OuaegxbebeaY8LrjEaX3Cap/Z1n3mZIm4NwvDs7zgvlB0mIowfbP0DTg4 quA1oVEyAzKALQpVEgsIg6HeAZdYTDwNGU2Ix65P4qpIhl7nLnMPLuuYmMWyN21s w/3APLhq8EZu+K7qtVmTijiGmbGnu8c2EWY4LPpWJVPtR3N3gEPoHZyZwnGlpmlK 6OLBin90ITslTKfjWgjvom9nAX8Ib/tA3wVvCre6ZJuNQQlgFjbtqn3cSUIpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUA18GiLQZgNkOeBMeaHJ3ZSYEigQwHwYDVR0j BBgwFoAUTykE6uZq3V06xTxqzLkhM7Qm30gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y OWM1MzI3Zi0xMGZkLTRjZjAtODUxYy0wY2ZjZDNjM2M2OTcvMC80RjI5MDRFQUU2 NkFERDVEM0FDNTNDNkFDQ0I5MjEzM0I0MjZERjQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEYyOTA0RUFFNjZBREQ1RDNBQzUzQzZBQ0NCOTIxMzNCNDI2 REY0OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjljNTMyN2YtMTBmZC00Y2YwLTg1 MWMtMGNmY2QzYzNjNjk3LzAvNEYyOTA0RUFFNjZBREQ1RDNBQzUzQzZBQ0NCOTIx MzNCNDI2REY0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB8++KyabHj0XwENA9eLs28SQGnv/RNDF+kN XL0CbhKoZxURBKz6YgANllwqXIzWQnlnRAGnGlW18Xk87Ggx2rYfD2pNCeFYuV4+ kpShSeuWOHcVNrNGkLBE6aA997ZzuUhxsRT/EtfF4z7D238KyZm9njOPnTLFqd+u vfTSFaLnbaGMSEkR1yiLk9kQMZUFyF+p6luc7QIlMbB4zuf9ePwyWmdqrpA58XWE 0pU27x1/b2t8nvgBo75I4Ibo+abPZjXTHqHzVPe8VzJCgj80rPhAo4w7k7xVA96l 1WnEE/sKFtLAcWfhN8jtJiNuH1jDuYYNpRHUQwYZeRGrJBJLpP0= -----END CERTIFICATE-----Generated at Sat Aug 23 12:08:19 2025 by rpki-client