$ rpki-client -vvf repo-rpki.idnic.net/repo/40457d20-023a-4509-bb4a-62c86929dd97/0/4960A8427FEA5814EF9E80EF3786E0CAAE063745.mft File: 4960A8427FEA5814EF9E80EF3786E0CAAE063745.mft (raw, json) Hash identifier: 08mrmRSl6kTt8OU1+UoBLhYvyr64ZlDKZcQ2BKbmLI0= Subject key identifier: BB:C2:DB:F2:C2:2E:AA:FD:94:37:EA:FC:EA:FC:AA:D4:96:D2:BF:8D Authority key identifier: 49:60:A8:42:7F:EA:58:14:EF:9E:80:EF:37:86:E0:CA:AE:06:37:45 Certificate issuer: /CN=4960A8427FEA5814EF9E80EF3786E0CAAE063745 Certificate serial: 3495BE13E66D8025CE0256CB920B369611B9543A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4960A8427FEA5814EF9E80EF3786E0CAAE063745.cer Subject info access: rsync://repo-rpki.idnic.net/repo/40457d20-023a-4509-bb4a-62c86929dd97/0/4960A8427FEA5814EF9E80EF3786E0CAAE063745.mft Manifest number: 9B Signing time: Sat 23 Aug 2025 05:52:36 +0000 Manifest this update: Sat 23 Aug 2025 05:47:36 +0000 Manifest next update: Tue 26 Aug 2025 06:10:36 +0000 Files and hashes: 1: 3130332e3233302e3138382e302f32332d3234203d3e20313333333439.roa (hash: BoTluS9h9fXmYVG5ixZmkF8QGw01I8U2x/hhTczYeKA=) 2: 4960A8427FEA5814EF9E80EF3786E0CAAE063745.crl (hash: JxxgEScF+xgG87SwbWUcbC4m33/mGR9PhN7d/NbhH2A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/40457d20-023a-4509-bb4a-62c86929dd97/0/4960A8427FEA5814EF9E80EF3786E0CAAE063745.crl rsync://repo-rpki.idnic.net/repo/40457d20-023a-4509-bb4a-62c86929dd97/0/4960A8427FEA5814EF9E80EF3786E0CAAE063745.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4960A8427FEA5814EF9E80EF3786E0CAAE063745.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 06:10:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:95:be:13:e6:6d:80:25:ce:02:56:cb:92:0b:36:96:11:b9:54:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4960A8427FEA5814EF9E80EF3786E0CAAE063745 Validity Not Before: Aug 23 05:47:36 2025 GMT Not After : Aug 26 06:10:36 2025 GMT Subject: CN=BBC2DBF2C22EAAFD9437EAFCEAFCAAD496D2BF8D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:da:06:7f:61:f2:1e:e8:95:b1:63:3a:b8:45: 77:02:7c:07:5c:89:85:52:86:1c:3d:fa:b6:a9:0d: d5:cc:62:6f:69:e8:46:c1:26:4b:66:5b:77:88:3a: 2f:0e:dc:45:26:64:4d:45:62:7b:81:f7:c2:42:1b: e7:b2:bd:6b:5d:00:8f:a5:4e:08:3f:ee:12:8c:87: 54:bc:52:75:0b:30:00:06:22:fc:58:46:c8:3b:c9: 5f:1d:da:75:69:50:c1:57:6c:49:23:d3:95:9e:e6: bf:b0:f6:bb:61:3b:de:51:1d:e8:f1:b0:08:5c:05: d3:98:84:40:8b:ba:82:30:ec:7a:c4:f6:88:ee:1a: 1c:60:b9:13:57:b8:fb:3a:83:50:a0:85:ba:57:c6: 5e:de:6d:cd:cf:82:b6:52:3c:fa:2f:36:16:b7:a3: 04:2b:91:ee:4b:62:d6:cd:98:e0:bc:32:f3:7a:9f: 01:81:78:b6:da:71:5d:8b:b5:c0:03:bd:4f:0b:e8: 6f:22:d1:ec:4b:ac:0c:61:df:66:a1:ef:fa:3c:21: 56:18:04:b4:a3:fd:58:a8:13:ce:a5:fe:27:11:4a: 61:a0:e2:77:4b:71:2a:39:3f:e2:23:8a:a8:b1:d7: 66:de:2b:4c:35:43:32:e6:3d:d6:26:76:6c:33:30: 20:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:C2:DB:F2:C2:2E:AA:FD:94:37:EA:FC:EA:FC:AA:D4:96:D2:BF:8D X509v3 Authority Key Identifier: keyid:49:60:A8:42:7F:EA:58:14:EF:9E:80:EF:37:86:E0:CA:AE:06:37:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/40457d20-023a-4509-bb4a-62c86929dd97/0/4960A8427FEA5814EF9E80EF3786E0CAAE063745.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4960A8427FEA5814EF9E80EF3786E0CAAE063745.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/40457d20-023a-4509-bb4a-62c86929dd97/0/4960A8427FEA5814EF9E80EF3786E0CAAE063745.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:12:37:d1:4f:02:2f:b5:67:a2:ac:8e:a0:a6:9c:36:8f:b9: e4:70:a1:d3:a1:fb:16:2d:30:31:2d:11:fd:34:1c:0e:e7:12: 96:b9:9d:2c:dd:4e:13:65:9e:7b:f2:fb:06:6e:b0:40:20:90: b3:1c:c8:c4:fe:7a:f2:c5:a2:c1:e0:f7:e8:07:3d:97:a6:24: e2:01:1d:1d:9f:24:e9:3e:3f:1b:49:79:cb:84:f2:ce:fa:bb: 32:54:14:48:ac:eb:7d:c8:ce:e1:c1:8a:3b:21:8c:ab:be:a2: 17:ff:47:a5:8d:a6:a2:be:b8:f8:d9:88:fa:c3:8a:ae:64:6c: a2:bd:76:89:51:b9:15:78:8b:87:80:02:57:48:c5:3f:e3:1a: 9c:45:f1:d5:68:4e:91:db:6e:fb:c7:a5:2b:c2:84:3c:07:63: af:37:8e:56:6e:ad:a7:df:62:61:7b:2a:6a:d6:30:d5:1e:d7: d5:07:2a:b6:43:b3:6f:f7:8a:08:d3:29:d5:dd:1b:98:3f:4a: 09:f9:3c:22:6c:36:98:9c:6d:15:23:e3:90:28:8c:cf:8f:bc: 57:9d:b1:88:05:0e:6c:56:c9:ea:72:d2:39:01:80:75:e9:47: 4e:0e:69:e8:78:f7:67:2b:cd:77:ed:12:e0:57:2c:47:97:b5: 1d:30:78:27 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNJW+E+ZtgCXOAlbLkgs2lhG5VDowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDk2MEE4NDI3RkVBNTgxNEVGOUU4MEVGMzc4NkUwQ0FB RTA2Mzc0NTAeFw0yNTA4MjMwNTQ3MzZaFw0yNTA4MjYwNjEwMzZaMDMxMTAvBgNV BAMTKEJCQzJEQkYyQzIyRUFBRkQ5NDM3RUFGQ0VBRkNBQUQ0OTZEMkJGOEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDr2gZ/YfIe6JWxYzq4RXcCfAdc iYVShhw9+rapDdXMYm9p6EbBJktmW3eIOi8O3EUmZE1FYnuB98JCG+eyvWtdAI+l Tgg/7hKMh1S8UnULMAAGIvxYRsg7yV8d2nVpUMFXbEkj05We5r+w9rthO95RHejx sAhcBdOYhECLuoIw7HrE9ojuGhxguRNXuPs6g1CghbpXxl7ebc3PgrZSPPovNha3 owQrke5LYtbNmOC8MvN6nwGBeLbacV2LtcADvU8L6G8i0exLrAxh32ah7/o8IVYY BLSj/VioE86l/icRSmGg4ndLcSo5P+Ijiqix12beK0w1QzLmPdYmdmwzMCCjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUu8Lb8sIuqv2UN+r86vyq1JbSv40wHwYDVR0j BBgwFoAUSWCoQn/qWBTvnoDvN4bgyq4GN0UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MDQ1N2QyMC0wMjNhLTQ1MDktYmI0YS02MmM4NjkyOWRkOTcvMC80OTYwQTg0MjdG RUE1ODE0RUY5RTgwRUYzNzg2RTBDQUFFMDYzNzQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDk2MEE4NDI3RkVBNTgxNEVGOUU4MEVGMzc4NkUwQ0FBRTA2 Mzc0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDA0NTdkMjAtMDIzYS00NTA5LWJi NGEtNjJjODY5MjlkZDk3LzAvNDk2MEE4NDI3RkVBNTgxNEVGOUU4MEVGMzc4NkUw Q0FBRTA2Mzc0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADgSN9FPAi+1Z6KsjqCmnDaPueRwodOh+xYt MDEtEf00HA7nEpa5nSzdThNlnnvy+wZusEAgkLMcyMT+evLFosHg9+gHPZemJOIB HR2fJOk+PxtJecuE8s76uzJUFEis633IzuHBijshjKu+ohf/R6WNpqK+uPjZiPrD iq5kbKK9dolRuRV4i4eAAldIxT/jGpxF8dVoTpHbbvvHpSvChDwHY683jlZuraff YmF7KmrWMNUe19UHKrZDs2/3igjTKdXdG5g/Sgn5PCJsNpicbRUj45AojM+PvFed sYgFDmxWyepy0jkBgHXpR04Oaeh492crzXftEuBXLEeXtR0weCc= -----END CERTIFICATE-----Generated at Sat Aug 23 20:24:24 2025 by rpki-client