$ rpki-client -vvf repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/4F40845626DE4E373F550B654EA4E833B6EB4D27.mft File: 4F40845626DE4E373F550B654EA4E833B6EB4D27.mft (raw, json) Hash identifier: ek6JpiusVIwrD/ZnXC7vnnmjVEtpAUOIin57hQpC3A8= Subject key identifier: B3:F0:4B:34:7A:9A:22:F4:97:6A:96:5C:14:A7:68:B5:3E:C8:BF:BD Authority key identifier: 4F:40:84:56:26:DE:4E:37:3F:55:0B:65:4E:A4:E8:33:B6:EB:4D:27 Certificate issuer: /CN=4F40845626DE4E373F550B654EA4E833B6EB4D27 Certificate serial: 7E0132A7B7B23315727060BEAFD53DDB8FE38160 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F40845626DE4E373F550B654EA4E833B6EB4D27.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/4F40845626DE4E373F550B654EA4E833B6EB4D27.mft Manifest number: 03A4 Signing time: Thu 21 Aug 2025 22:20:01 +0000 Manifest this update: Thu 21 Aug 2025 22:15:01 +0000 Manifest next update: Mon 25 Aug 2025 04:03:01 +0000 Files and hashes: 1: 4F40845626DE4E373F550B654EA4E833B6EB4D27.crl (hash: Kj9reNfCFOYgK8HkFvlq6LhWlH7WNag8tWaiQwGmLxc=) 2: 3130332e3136382e3134362e302f32332d3233203d3e20313430343433.roa (hash: gb5iQXmVJxzms9P45gaXkbTb5EFMl0u9BkF63p+v5Kk=) 3: 3130332e3136382e3134372e302f32342d3234203d3e20313430343433.roa (hash: vfImiFEds0caJl5aBP0MxYhFkdq8Ac7hTgD2QgZXO/g=) 4: 3130332e3136382e3134362e302f32342d3234203d3e20313430343433.roa (hash: fuK+11s2WzcqL7Onn6Tm/NBVUUPod7SmDLox9Y+iIpg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/4F40845626DE4E373F550B654EA4E833B6EB4D27.crl rsync://repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/4F40845626DE4E373F550B654EA4E833B6EB4D27.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F40845626DE4E373F550B654EA4E833B6EB4D27.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 04:03:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:01:32:a7:b7:b2:33:15:72:70:60:be:af:d5:3d:db:8f:e3:81:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4F40845626DE4E373F550B654EA4E833B6EB4D27 Validity Not Before: Aug 21 22:15:01 2025 GMT Not After : Aug 25 04:03:01 2025 GMT Subject: CN=B3F04B347A9A22F4976A965C14A768B53EC8BFBD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:75:40:21:07:bb:eb:b7:0d:fd:20:2e:e8:8d: 7c:1d:c0:18:96:9d:dd:10:2a:7e:35:ab:29:f2:9e: 29:14:53:95:06:2a:49:fb:a9:49:8c:7d:2d:e3:1b: f4:8d:0b:c2:19:2e:77:a2:2e:71:9d:d7:a0:5a:af: d1:e9:83:67:8b:2b:98:d6:c9:db:c1:66:bf:df:bd: 00:0d:e5:73:3c:33:48:9d:f5:07:4f:ad:40:28:83: 84:b9:ee:0c:a1:6c:20:a9:27:5f:ea:33:25:8a:41: e6:e2:61:b0:fc:a0:44:32:25:9e:49:4b:9e:24:80: a3:e0:d8:58:23:6c:74:a0:fc:be:9e:0d:6e:9e:02: f0:ea:47:2e:de:e0:fb:3c:74:f8:55:ee:43:7d:ed: c7:ee:fa:ba:c4:84:0c:bb:09:ac:36:15:75:3d:06: bd:c1:93:50:b4:78:7d:45:7e:f1:9e:8a:e8:fe:87: 38:78:ae:40:e8:aa:d1:dd:e3:fb:31:d4:0d:88:89: 77:3a:b3:73:ee:c0:b0:ef:8b:58:4a:7b:c4:72:c6: ee:16:7f:34:ba:34:2a:8a:9a:12:b1:61:19:31:4f: 35:91:ca:9f:29:dc:43:84:84:53:8f:a9:ed:3d:0b: e6:8c:91:c5:46:76:f8:a9:ea:39:48:62:6f:88:d6: 9a:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:F0:4B:34:7A:9A:22:F4:97:6A:96:5C:14:A7:68:B5:3E:C8:BF:BD X509v3 Authority Key Identifier: keyid:4F:40:84:56:26:DE:4E:37:3F:55:0B:65:4E:A4:E8:33:B6:EB:4D:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/4F40845626DE4E373F550B654EA4E833B6EB4D27.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F40845626DE4E373F550B654EA4E833B6EB4D27.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/4F40845626DE4E373F550B654EA4E833B6EB4D27.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:83:d2:87:02:ef:45:07:05:7c:3b:da:30:35:ec:d4:2a:73: c1:9b:25:41:95:0d:f5:fe:fe:56:36:16:58:ec:55:8d:27:ae: 5a:ea:82:3b:e1:16:a2:b3:a5:72:a6:68:02:1d:83:fa:20:81: b6:6b:dc:d3:08:94:f7:e3:1e:ca:77:63:7c:97:d3:21:7f:4b: 36:c5:c0:75:8e:3b:34:99:d4:b4:50:d9:c1:14:8e:a7:e5:c9: 01:fb:9e:d8:20:21:92:28:c2:ab:1e:9f:ec:c9:39:eb:94:e8: f4:4b:64:f8:30:8e:dd:a0:70:b3:d6:59:36:d4:da:9f:fd:77: b9:4c:1b:f3:92:0d:d5:b8:12:71:af:37:a5:f7:80:23:5f:41: 81:fc:ac:4d:0b:ad:b4:69:41:bc:f0:16:d8:bc:b5:38:95:1e: 63:8f:d4:ba:c9:1d:0e:3b:f7:61:a9:65:b9:5d:29:36:1b:fb: 6a:16:87:e2:06:65:10:d3:04:60:88:99:49:41:7d:c1:42:81: 3d:1c:6b:dc:be:10:0c:e9:c0:be:d5:6c:ce:d0:e7:4a:d1:0b: d3:a8:85:f6:d3:64:0b:10:5a:30:df:e2:5b:ef:81:2b:fd:67: 96:c5:b7:7c:cd:7c:bd:b7:74:6e:18:a7:fb:84:c7:33:74:a9: 79:e5:36:e6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfgEyp7eyMxVycGC+r9U924/jgWAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEY0MDg0NTYyNkRFNEUzNzNGNTUwQjY1NEVBNEU4MzNC NkVCNEQyNzAeFw0yNTA4MjEyMjE1MDFaFw0yNTA4MjUwNDAzMDFaMDMxMTAvBgNV BAMTKEIzRjA0QjM0N0E5QTIyRjQ5NzZBOTY1QzE0QTc2OEI1M0VDOEJGQkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChdUAhB7vrtw39IC7ojXwdwBiW nd0QKn41qynynikUU5UGKkn7qUmMfS3jG/SNC8IZLneiLnGd16Bar9Hpg2eLK5jW ydvBZr/fvQAN5XM8M0id9QdPrUAog4S57gyhbCCpJ1/qMyWKQebiYbD8oEQyJZ5J S54kgKPg2FgjbHSg/L6eDW6eAvDqRy7e4Ps8dPhV7kN97cfu+rrEhAy7Caw2FXU9 Br3Bk1C0eH1FfvGeiuj+hzh4rkDoqtHd4/sx1A2IiXc6s3PuwLDvi1hKe8Ryxu4W fzS6NCqKmhKxYRkxTzWRyp8p3EOEhFOPqe09C+aMkcVGdvip6jlIYm+I1porAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUs/BLNHqaIvSXapZcFKdotT7Iv70wHwYDVR0j BBgwFoAUT0CEVibeTjc/VQtlTqToM7brTScwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YTQ2MzYwZC02NjJiLTRmN2QtYmIxNy1kODYwODIxNTI0NzEvMC80RjQwODQ1NjI2 REU0RTM3M0Y1NTBCNjU0RUE0RTgzM0I2RUI0RDI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEY0MDg0NTYyNkRFNEUzNzNGNTUwQjY1NEVBNEU4MzNCNkVC NEQyNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2E0NjM2MGQtNjYyYi00ZjdkLWJi MTctZDg2MDgyMTUyNDcxLzAvNEY0MDg0NTYyNkRFNEUzNzNGNTUwQjY1NEVBNEU4 MzNCNkVCNEQyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIKD0ocC70UHBXw72jA17NQqc8GbJUGVDfX+ /lY2FljsVY0nrlrqgjvhFqKzpXKmaAIdg/oggbZr3NMIlPfjHsp3Y3yX0yF/SzbF wHWOOzSZ1LRQ2cEUjqflyQH7ntggIZIowqsen+zJOeuU6PRLZPgwjt2gcLPWWTbU 2p/9d7lMG/OSDdW4EnGvN6X3gCNfQYH8rE0LrbRpQbzwFti8tTiVHmOP1LrJHQ47 92GpZbldKTYb+2oWh+IGZRDTBGCImUlBfcFCgT0ca9y+EAzpwL7VbM7Q50rRC9Oo hfbTZAsQWjDf4lvvgSv9Z5bFt3zNfL23dG4Yp/uExzN0qXnlNuY= -----END CERTIFICATE-----Generated at Sat Aug 23 16:19:34 2025 by rpki-client