$ rpki-client -vvf repo-rpki.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.mft File: C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.mft (raw, json) Hash identifier: TLMX+ApvBssNxDgpWSJTaNjgrW8FX5Imk51OvWniAGA= Subject key identifier: 8E:99:66:EB:35:FD:81:1B:A2:2D:C6:4D:99:85:7D:5B:87:61:A9:F7 Authority key identifier: C4:CE:1B:D3:CB:FB:01:5E:60:96:5A:65:E2:FB:31:A6:BA:26:18:9B Certificate issuer: /CN=C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B Certificate serial: 0B949734D45F3F2C8DED927A7DDC731257385FD1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.mft Manifest number: 04FD Signing time: Fri 22 Aug 2025 08:42:06 +0000 Manifest this update: Fri 22 Aug 2025 08:37:06 +0000 Manifest next update: Mon 25 Aug 2025 18:17:06 +0000 Files and hashes: 1: C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.crl (hash: p9Pb+b32xnYir3LIPKy2MtxyYn9I6u49eHCI/vY56RI=) 2: 3130332e3135352e3136362e302f32342d3234203d3e20313431303634.roa (hash: sI3bqifKZVIOhDY6Sh1Zbn3Bg29Wg0wSaItyUUWUok4=) 3: 3130332e3135352e3136372e302f32342d3234203d3e20313431303634.roa (hash: bjlsGk5J7SvEO5IoZ47H9V39bFhtmZq3wwyih52cSks=) 4: 3130332e3135352e3136362e302f32332d3233203d3e20313431303634.roa (hash: eyzaiFvv4c1HmHtA1p4wBBlGeENQrifGbWD1MbCWveE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.crl rsync://repo-rpki.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 18:17:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:94:97:34:d4:5f:3f:2c:8d:ed:92:7a:7d:dc:73:12:57:38:5f:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B Validity Not Before: Aug 22 08:37:06 2025 GMT Not After : Aug 25 18:17:06 2025 GMT Subject: CN=8E9966EB35FD811BA22DC64D99857D5B8761A9F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:de:17:5e:23:74:cc:d6:ae:c3:a9:c6:5d:87: 5b:3f:80:db:18:76:7b:ac:2d:20:ab:64:1f:d0:12: 2d:da:1b:6d:2d:f3:b5:2e:9a:7d:55:c0:56:ef:e0: 0c:f9:fb:41:de:c0:61:ae:b9:d1:d2:73:0a:88:72: c2:35:db:d6:2b:e0:2b:8d:27:08:0d:69:61:53:a7: 16:17:db:d1:77:8a:54:95:e1:77:ce:03:bf:74:b3: 77:40:24:42:9a:e3:7b:0e:e6:c7:aa:4f:ea:7f:3e: ac:c6:72:05:54:60:67:de:87:96:65:e0:58:c8:bd: 3e:9e:c2:44:15:a9:a7:17:43:75:6e:a6:4c:4f:cd: 54:c8:c0:b0:d4:0c:2c:94:f4:42:d0:4d:16:16:d7: 92:bf:a2:5b:75:16:a9:3e:82:ff:b9:b9:92:dc:5b: fb:3a:7f:0d:5d:e0:58:24:ed:ba:c5:47:53:cb:fc: 4f:93:b2:15:3b:07:04:02:8d:d2:11:33:d2:c9:7a: 65:bf:76:99:78:f7:93:a4:61:96:ce:3d:47:ce:46: 9c:65:16:ed:ec:f6:55:64:d6:44:bf:f6:b6:1d:54: f6:81:6d:4c:ba:a5:d3:47:24:1a:c0:7d:a9:8b:15: 97:b7:ff:79:8a:96:8b:51:09:d9:3d:08:ab:c4:5a: 67:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:99:66:EB:35:FD:81:1B:A2:2D:C6:4D:99:85:7D:5B:87:61:A9:F7 X509v3 Authority Key Identifier: keyid:C4:CE:1B:D3:CB:FB:01:5E:60:96:5A:65:E2:FB:31:A6:BA:26:18:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:78:70:c0:93:42:42:7f:6b:e6:3a:59:4b:75:de:e6:35:6a: f7:d4:53:32:ab:f2:67:ba:45:34:71:66:53:26:26:89:07:f1: 72:db:1e:bf:0e:33:1e:90:fe:e0:68:ca:c1:0b:8e:1e:57:67: 8f:f5:fd:ed:c4:3a:51:6f:94:6d:98:2a:31:a9:52:1a:28:ea: 20:f6:48:68:7c:d6:4f:cd:9d:45:e9:64:31:82:90:8c:8a:24: d2:7b:74:b6:21:e3:35:71:3d:b5:c8:4b:dd:ae:bf:67:62:3a: 9c:9c:47:9a:d1:34:18:84:ff:57:1a:cc:2d:74:d7:49:db:ec: 94:c2:53:6d:f3:7d:ca:9b:31:4d:f1:ed:bd:89:12:32:b6:48: 26:75:b6:85:8b:30:16:c1:69:19:91:45:e9:8d:53:5f:5b:bc: 7c:1e:40:3c:09:e9:34:84:1a:d5:f0:2c:db:a6:08:28:6d:a8: f3:31:14:1c:f5:4f:2a:d9:04:5d:6f:fb:33:69:e1:dd:5d:5b: 6b:74:b4:70:a8:6d:84:4b:dd:f5:f8:9d:88:18:af:61:22:cc: 64:2f:09:64:87:95:e8:ad:64:a3:40:b2:d8:08:f4:11:4c:ff: 5a:fc:cf:b7:fc:d9:1c:fc:aa:74:bc:8d:d9:78:c6:48:ad:bd: 72:a5:ae:f7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC5SXNNRfPyyN7ZJ6fdxzElc4X9EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzRDRTFCRDNDQkZCMDE1RTYwOTY1QTY1RTJGQjMxQTZC QTI2MTg5QjAeFw0yNTA4MjIwODM3MDZaFw0yNTA4MjUxODE3MDZaMDMxMTAvBgNV BAMTKDhFOTk2NkVCMzVGRDgxMUJBMjJEQzY0RDk5ODU3RDVCODc2MUE5RjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB3hdeI3TM1q7DqcZdh1s/gNsY dnusLSCrZB/QEi3aG20t87Uumn1VwFbv4Az5+0HewGGuudHScwqIcsI129Yr4CuN JwgNaWFTpxYX29F3ilSV4XfOA790s3dAJEKa43sO5seqT+p/PqzGcgVUYGfeh5Zl 4FjIvT6ewkQVqacXQ3VupkxPzVTIwLDUDCyU9ELQTRYW15K/olt1Fqk+gv+5uZLc W/s6fw1d4Fgk7brFR1PL/E+TshU7BwQCjdIRM9LJemW/dpl495OkYZbOPUfORpxl Fu3s9lVk1kS/9rYdVPaBbUy6pdNHJBrAfamLFZe3/3mKlotRCdk9CKvEWmfVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjplm6zX9gRuiLcZNmYV9W4dhqfcwHwYDVR0j BBgwFoAUxM4b08v7AV5gllpl4vsxpromGJswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YzZiMmJkNy1kN2YxLTQ4MTUtYTYwYS1jYWQ1NDAyOWNlODgvMC9DNENFMUJEM0NC RkIwMTVFNjA5NjVBNjVFMkZCMzFBNkJBMjYxODlCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzRDRTFCRDNDQkZCMDE1RTYwOTY1QTY1RTJGQjMxQTZCQTI2 MTg5Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGM2YjJiZDctZDdmMS00ODE1LWE2 MGEtY2FkNTQwMjljZTg4LzAvQzRDRTFCRDNDQkZCMDE1RTYwOTY1QTY1RTJGQjMx QTZCQTI2MTg5Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKR4cMCTQkJ/a+Y6WUt13uY1avfUUzKr8me6 RTRxZlMmJokH8XLbHr8OMx6Q/uBoysELjh5XZ4/1/e3EOlFvlG2YKjGpUhoo6iD2 SGh81k/NnUXpZDGCkIyKJNJ7dLYh4zVxPbXIS92uv2diOpycR5rRNBiE/1cazC10 10nb7JTCU23zfcqbMU3x7b2JEjK2SCZ1toWLMBbBaRmRRemNU19bvHweQDwJ6TSE GtXwLNumCChtqPMxFBz1TyrZBF1v+zNp4d1dW2t0tHCobYRL3fX4nYgYr2EizGQv CWSHleitZKNAstgI9BFM/1r8z7f82Rz8qnS8jdl4xkitvXKlrvc= -----END CERTIFICATE-----Generated at Sat Aug 23 12:12:54 2025 by rpki-client