$ rpki-client -vvf repo-rpki.idnic.net/repo/3c47ef5c-5bba-4cd1-8dc9-173e2751f4f4/0/A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.mft File: A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.mft (raw, json) Hash identifier: bR/zO2WIkMKCQIroJCalw81QfdVALsmoGYUUplPQSg8= Subject key identifier: FD:43:1C:71:D5:39:BA:EB:C0:96:A7:85:16:9C:FB:D8:A8:FB:4D:0D Authority key identifier: A4:D9:09:9C:36:5D:8B:B9:FA:96:A2:A5:1F:A4:C6:1F:10:5E:F8:48 Certificate issuer: /CN=A4D9099C365D8BB9FA96A2A51FA4C61F105EF848 Certificate serial: 6BC3BD6CB59D0E8046A62C8AE048F77A1ADC8FA8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3c47ef5c-5bba-4cd1-8dc9-173e2751f4f4/0/A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.mft Manifest number: E4 Signing time: Thu 21 Aug 2025 15:02:21 +0000 Manifest this update: Thu 21 Aug 2025 14:57:21 +0000 Manifest next update: Sun 24 Aug 2025 23:20:21 +0000 Files and hashes: 1: 3130332e3235352e3136342e302f32342d3234203d3e20313531393934.roa (hash: +WwlmKdoXMg38Ivud82/QXjyd3ODqNLzlXpK9Yw3uY4=) 2: A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.crl (hash: Q3TNbJZ7Cf8xDAS6ZhEgoUypMI5aQvCBBcXMMt1TWJg=) 3: 3130332e3235352e3136342e302f32332d3233203d3e20313531393934.roa (hash: sEObMlhse4CyL4oCmxoxoPLEseBLcDvbzgfCGrhTjW0=) 4: 3130332e3235352e3136352e302f32342d3234203d3e20313531393934.roa (hash: /VKdsaTHmCyGCE586MO51z4LSl8AS7ykHk2hmgDFEO4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3c47ef5c-5bba-4cd1-8dc9-173e2751f4f4/0/A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.crl rsync://repo-rpki.idnic.net/repo/3c47ef5c-5bba-4cd1-8dc9-173e2751f4f4/0/A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 23:20:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:c3:bd:6c:b5:9d:0e:80:46:a6:2c:8a:e0:48:f7:7a:1a:dc:8f:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A4D9099C365D8BB9FA96A2A51FA4C61F105EF848 Validity Not Before: Aug 21 14:57:21 2025 GMT Not After : Aug 24 23:20:21 2025 GMT Subject: CN=FD431C71D539BAEBC096A785169CFBD8A8FB4D0D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:54:b8:43:0b:f4:00:8d:09:37:c0:61:ee:4b: 31:d5:1f:1a:58:78:f9:e9:27:16:55:ed:18:fd:fc: 64:24:c7:f3:c3:d4:88:45:0b:ba:fe:ec:fb:7f:b2: c4:88:48:27:a4:a7:e9:74:1b:72:5d:47:32:dd:07: df:e6:64:78:b9:0c:cd:0f:d6:88:85:5e:53:47:ba: 97:8c:1f:19:6f:b4:33:c3:b3:3b:44:bc:06:50:31: 0e:d1:ed:e1:ad:33:8c:41:22:35:25:15:2f:56:e6: 94:40:36:8e:b3:64:4a:22:6a:0a:60:40:a3:10:fa: 91:e8:c3:ef:87:ba:62:e1:38:e4:9e:bd:a8:a2:bf: d4:de:33:50:34:e2:0a:37:a0:c6:8a:44:8b:cb:9d: bf:a6:ff:90:df:13:f3:59:b6:4e:92:15:07:8f:07: 08:49:05:f1:ff:e1:40:b7:ac:74:dc:52:d7:04:0a: e5:a0:46:d9:93:ae:f0:06:2c:df:41:cc:5f:3a:6b: 9a:ad:ab:c4:79:25:03:42:62:57:f0:cf:1f:64:1e: 4e:99:30:76:36:d5:2e:72:e6:a5:9b:5d:cf:14:5d: 4c:cc:ed:90:1e:70:8a:f7:d8:d5:fb:e8:41:f3:c7: 29:ac:ec:b5:3d:b4:02:55:30:77:f4:65:fe:a7:9b: 93:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:43:1C:71:D5:39:BA:EB:C0:96:A7:85:16:9C:FB:D8:A8:FB:4D:0D X509v3 Authority Key Identifier: keyid:A4:D9:09:9C:36:5D:8B:B9:FA:96:A2:A5:1F:A4:C6:1F:10:5E:F8:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3c47ef5c-5bba-4cd1-8dc9-173e2751f4f4/0/A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3c47ef5c-5bba-4cd1-8dc9-173e2751f4f4/0/A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ce:82:33:f6:76:b4:1e:33:ce:9c:4a:81:5b:5c:0c:98:b3:4c: 3f:ed:c4:16:9f:e2:ec:37:10:8e:89:1f:1e:4b:a4:42:29:14: d7:02:fb:0a:04:71:7d:fa:20:58:c0:dc:47:77:a8:39:83:c9: 40:26:11:3a:01:ab:68:c1:84:a1:01:01:96:e9:57:27:ea:6b: 20:34:f0:c7:1d:e8:0c:d5:da:9f:e8:82:ba:9d:60:9c:63:e7: 31:5d:bb:f1:5c:43:ed:bc:1b:ca:43:b6:87:73:0d:e5:78:d8: 23:ba:b4:03:05:54:78:47:e6:5b:b3:43:d6:76:38:69:d2:2b: c5:c3:82:e4:fa:bb:f8:c3:b8:ea:ee:a2:34:a1:f9:32:6a:ff: a4:74:cc:3e:8d:a0:4a:22:2c:fa:75:b4:6d:02:4c:a5:37:8e: 49:18:c0:8a:68:ea:33:bb:78:49:0d:55:f7:30:e4:e0:27:94: c2:bf:b4:51:d3:a0:d9:c6:d4:ef:b7:7e:fc:81:31:db:9f:af: 8d:49:53:a0:b9:26:c4:8b:09:b7:dd:e2:ff:0d:e3:22:59:86: cb:ac:16:7d:38:f9:4e:36:2f:62:e1:eb:c4:2c:29:e3:73:aa: 47:e0:65:08:e7:eb:b4:fe:88:a5:b5:e7:ea:de:19:2b:f9:62: c9:9f:36:c4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa8O9bLWdDoBGpiyK4Ej3ehrcj6gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTREOTA5OUMzNjVEOEJCOUZBOTZBMkE1MUZBNEM2MUYx MDVFRjg0ODAeFw0yNTA4MjExNDU3MjFaFw0yNTA4MjQyMzIwMjFaMDMxMTAvBgNV BAMTKEZENDMxQzcxRDUzOUJBRUJDMDk2QTc4NTE2OUNGQkQ4QThGQjREMEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZVLhDC/QAjQk3wGHuSzHVHxpY ePnpJxZV7Rj9/GQkx/PD1IhFC7r+7Pt/ssSISCekp+l0G3JdRzLdB9/mZHi5DM0P 1oiFXlNHupeMHxlvtDPDsztEvAZQMQ7R7eGtM4xBIjUlFS9W5pRANo6zZEoiagpg QKMQ+pHow++HumLhOOSevaiiv9TeM1A04go3oMaKRIvLnb+m/5DfE/NZtk6SFQeP BwhJBfH/4UC3rHTcUtcECuWgRtmTrvAGLN9BzF86a5qtq8R5JQNCYlfwzx9kHk6Z MHY21S5y5qWbXc8UXUzM7ZAecIr32NX76EHzxyms7LU9tAJVMHf0Zf6nm5PBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/UMccdU5uuvAlqeFFpz72Kj7TQ0wHwYDVR0j BBgwFoAUpNkJnDZdi7n6lqKlH6TGHxBe+EgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YzQ3ZWY1Yy01YmJhLTRjZDEtOGRjOS0xNzNlMjc1MWY0ZjQvMC9BNEQ5MDk5QzM2 NUQ4QkI5RkE5NkEyQTUxRkE0QzYxRjEwNUVGODQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTREOTA5OUMzNjVEOEJCOUZBOTZBMkE1MUZBNEM2MUYxMDVF Rjg0OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2M0N2VmNWMtNWJiYS00Y2QxLThk YzktMTczZTI3NTFmNGY0LzAvQTREOTA5OUMzNjVEOEJCOUZBOTZBMkE1MUZBNEM2 MUYxMDVFRjg0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAM6CM/Z2tB4zzpxKgVtcDJizTD/txBaf4uw3 EI6JHx5LpEIpFNcC+woEcX36IFjA3Ed3qDmDyUAmEToBq2jBhKEBAZbpVyfqayA0 8Mcd6AzV2p/ogrqdYJxj5zFdu/FcQ+28G8pDtodzDeV42CO6tAMFVHhH5luzQ9Z2 OGnSK8XDguT6u/jDuOruojSh+TJq/6R0zD6NoEoiLPp1tG0CTKU3jkkYwIpo6jO7 eEkNVfcw5OAnlMK/tFHToNnG1O+3fvyBMdufr41JU6C5JsSLCbfd4v8N4yJZhsus Fn04+U42L2Lh68QsKeNzqkfgZQjn67T+iKW15+reGSv5YsmfNsQ= -----END CERTIFICATE-----Generated at Sat Aug 23 10:17:15 2025 by rpki-client