$ rpki-client -vvf repo-rpki.idnic.net/repo/533f60e6-afdd-4e10-83b4-e8cbd641c52f/0/4EB8521D8427720F50A3F65249F2D26C6CD22F13.mft File: 4EB8521D8427720F50A3F65249F2D26C6CD22F13.mft (raw, json) Hash identifier: rwdCX1ecJIboCpQKComQ1Kj2IEQeGKhJAe0t4j1Cg9g= Subject key identifier: 7D:A2:06:7E:0B:1B:56:E7:03:13:91:33:8A:42:A2:67:10:76:D1:46 Authority key identifier: 4E:B8:52:1D:84:27:72:0F:50:A3:F6:52:49:F2:D2:6C:6C:D2:2F:13 Certificate issuer: /CN=4EB8521D8427720F50A3F65249F2D26C6CD22F13 Certificate serial: 3571EFEAA34F2DE21041BAD3C9907F17E2534800 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4EB8521D8427720F50A3F65249F2D26C6CD22F13.cer Subject info access: rsync://repo-rpki.idnic.net/repo/533f60e6-afdd-4e10-83b4-e8cbd641c52f/0/4EB8521D8427720F50A3F65249F2D26C6CD22F13.mft Manifest number: 01EB Signing time: Fri 22 Aug 2025 21:01:31 +0000 Manifest this update: Fri 22 Aug 2025 20:56:31 +0000 Manifest next update: Mon 25 Aug 2025 21:28:31 +0000 Files and hashes: 1: 3130332e3135382e3135342e302f32332d3233203d3e20313431313236.roa (hash: KoxYk2ZRPcbgpF7xh9ACZAj2oe0zktHzsGiH4v0qag8=) 2: 3130332e3135382e3135342e302f32342d3234203d3e20313431313236.roa (hash: lpElssmpxfbgKNNgmUzWoL87GOZos951RTYVyi3dLoQ=) 3: 3130332e3135382e3135352e302f32342d3234203d3e20313431313236.roa (hash: OpAGSXy4nDXjC/N8zkYIDwXuoKZWJrsqeYGg4c9hm6U=) 4: 4EB8521D8427720F50A3F65249F2D26C6CD22F13.crl (hash: 2PBhe3joS3V/nPZShy745gkJLGGYdCWIdL7IiokAG9M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/533f60e6-afdd-4e10-83b4-e8cbd641c52f/0/4EB8521D8427720F50A3F65249F2D26C6CD22F13.crl rsync://repo-rpki.idnic.net/repo/533f60e6-afdd-4e10-83b4-e8cbd641c52f/0/4EB8521D8427720F50A3F65249F2D26C6CD22F13.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4EB8521D8427720F50A3F65249F2D26C6CD22F13.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 21:28:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:71:ef:ea:a3:4f:2d:e2:10:41:ba:d3:c9:90:7f:17:e2:53:48:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4EB8521D8427720F50A3F65249F2D26C6CD22F13 Validity Not Before: Aug 22 20:56:31 2025 GMT Not After : Aug 25 21:28:31 2025 GMT Subject: CN=7DA2067E0B1B56E7031391338A42A2671076D146 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:a0:d3:65:41:ba:76:23:f9:59:62:23:26:9e: ed:bd:c1:6f:3b:17:15:be:e8:87:7d:5e:e4:13:a2: 7e:9c:8c:cb:0a:b0:d0:a6:2a:07:0f:4d:09:0c:37: 03:80:25:bd:b1:db:18:97:25:53:5e:25:39:97:0f: 14:71:5e:81:45:c1:de:1b:64:99:7a:5a:4b:ba:10: 0d:75:af:2c:21:2f:04:41:79:dc:0d:08:5f:10:4f: b9:cc:71:fb:9c:57:32:35:e1:56:f8:62:5e:2d:12: 46:b9:2c:90:30:ca:05:e0:85:85:82:c6:3b:c2:9f: f0:d6:52:3d:27:f9:fc:73:9e:68:d2:bf:09:33:dd: ff:24:c7:f1:7c:4d:3a:6a:dc:61:66:4c:6d:10:48: 2e:d1:30:a0:46:28:30:3a:86:f7:a9:81:2d:ba:cb: a3:c7:51:11:15:f6:f8:0e:32:4e:62:83:8d:aa:bf: 12:62:6b:f2:3d:4c:5d:7f:cb:9f:39:5b:00:5f:f4: 39:af:f5:8e:93:05:a4:1d:56:25:29:c3:4e:11:e2: c8:58:b7:92:a2:90:9d:fe:5d:5a:56:33:c3:48:32: ee:90:14:db:6e:08:30:0c:80:73:a0:10:44:72:27: 8d:a9:90:62:ed:41:4d:8b:90:46:82:c9:6c:a3:5a: c1:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:A2:06:7E:0B:1B:56:E7:03:13:91:33:8A:42:A2:67:10:76:D1:46 X509v3 Authority Key Identifier: keyid:4E:B8:52:1D:84:27:72:0F:50:A3:F6:52:49:F2:D2:6C:6C:D2:2F:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/533f60e6-afdd-4e10-83b4-e8cbd641c52f/0/4EB8521D8427720F50A3F65249F2D26C6CD22F13.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4EB8521D8427720F50A3F65249F2D26C6CD22F13.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/533f60e6-afdd-4e10-83b4-e8cbd641c52f/0/4EB8521D8427720F50A3F65249F2D26C6CD22F13.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:54:6e:c9:4d:c4:8e:25:b4:95:b1:f8:5e:70:1b:7c:9a:65: 9a:7b:94:5c:b4:2e:5b:68:e3:f2:e4:a7:ce:2d:89:05:29:eb: 01:d0:c6:ae:4c:6f:03:82:a7:5f:5f:3a:3a:7b:8e:ca:ac:34: 55:6c:b5:8d:2e:b2:e7:34:f7:31:0a:6f:3b:2a:45:19:94:57: 27:e5:28:c8:e4:6e:57:6a:6e:e5:38:b7:d9:00:85:36:23:4e: d3:1d:55:7f:7f:b7:e5:0f:5c:4b:56:67:79:ee:12:57:22:c9: 4d:87:4c:f2:1c:b5:99:4e:f2:1e:94:df:41:15:1a:d0:b1:97: e0:0c:bb:66:b6:9a:ad:b0:d9:27:a5:5e:87:75:12:9a:48:01: 48:b5:10:b9:05:cb:8b:de:64:45:8b:f7:63:f9:11:6b:e3:19: bb:52:53:ab:3c:84:79:1f:bc:d8:bf:7c:9b:08:12:b4:90:e8: 26:22:07:2c:a9:d9:a0:aa:68:ff:06:31:f4:6a:d8:26:3f:0f: 19:c6:f3:87:c7:8e:de:e2:7c:6e:a0:aa:0c:0e:1a:ba:1b:8b: 00:55:b5:b8:3a:4b:98:69:ce:87:d5:46:60:89:cf:58:6d:25: 3c:54:8f:61:78:8d:7a:57:71:34:b0:df:22:a8:80:a7:88:e4: ff:03:ec:ee -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNXHv6qNPLeIQQbrTyZB/F+JTSAAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEVCODUyMUQ4NDI3NzIwRjUwQTNGNjUyNDlGMkQyNkM2 Q0QyMkYxMzAeFw0yNTA4MjIyMDU2MzFaFw0yNTA4MjUyMTI4MzFaMDMxMTAvBgNV BAMTKDdEQTIwNjdFMEIxQjU2RTcwMzEzOTEzMzhBNDJBMjY3MTA3NkQxNDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKoNNlQbp2I/lZYiMmnu29wW87 FxW+6Id9XuQTon6cjMsKsNCmKgcPTQkMNwOAJb2x2xiXJVNeJTmXDxRxXoFFwd4b ZJl6Wku6EA11rywhLwRBedwNCF8QT7nMcfucVzI14Vb4Yl4tEka5LJAwygXghYWC xjvCn/DWUj0n+fxznmjSvwkz3f8kx/F8TTpq3GFmTG0QSC7RMKBGKDA6hvepgS26 y6PHUREV9vgOMk5ig42qvxJia/I9TF1/y585WwBf9Dmv9Y6TBaQdViUpw04R4shY t5KikJ3+XVpWM8NIMu6QFNtuCDAMgHOgEERyJ42pkGLtQU2LkEaCyWyjWsE1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfaIGfgsbVucDE5EzikKiZxB20UYwHwYDVR0j BBgwFoAUTrhSHYQncg9Qo/ZSSfLSbGzSLxMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MzNmNjBlNi1hZmRkLTRlMTAtODNiNC1lOGNiZDY0MWM1MmYvMC80RUI4NTIxRDg0 Mjc3MjBGNTBBM0Y2NTI0OUYyRDI2QzZDRDIyRjEzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEVCODUyMUQ4NDI3NzIwRjUwQTNGNjUyNDlGMkQyNkM2Q0Qy MkYxMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTMzZjYwZTYtYWZkZC00ZTEwLTgz YjQtZThjYmQ2NDFjNTJmLzAvNEVCODUyMUQ4NDI3NzIwRjUwQTNGNjUyNDlGMkQy NkM2Q0QyMkYxMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAENUbslNxI4ltJWx+F5wG3yaZZp7lFy0Llto 4/Lkp84tiQUp6wHQxq5MbwOCp19fOjp7jsqsNFVstY0usuc09zEKbzsqRRmUVyfl KMjkbldqbuU4t9kAhTYjTtMdVX9/t+UPXEtWZ3nuElciyU2HTPIctZlO8h6U30EV GtCxl+AMu2a2mq2w2SelXod1EppIAUi1ELkFy4veZEWL92P5EWvjGbtSU6s8hHkf vNi/fJsIErSQ6CYiByyp2aCqaP8GMfRq2CY/DxnG84fHjt7ifG6gqgwOGrobiwBV tbg6S5hpzofVRmCJz1htJTxUj2F4jXpXcTSw3yKogKeI5P8D7O4= -----END CERTIFICATE-----Generated at Sat Aug 23 11:59:58 2025 by rpki-client