$ rpki-client -vvf repo-rpki.idnic.net/repo/5c34dc3f-308f-4de1-a365-701bd9cf1004/0/4337E9FF91A0CB65CE1EB8FAEB6108F5E37BB657.mft File: 4337E9FF91A0CB65CE1EB8FAEB6108F5E37BB657.mft (raw, json) Hash identifier: Q+sCBUqzqAFf0Z81WAqkthOQSy99Nz1nMfVE71qAH5U= Subject key identifier: 30:D4:36:92:87:F7:DC:8E:DD:55:0F:09:3E:B9:A1:6F:BA:D8:E6:BD Authority key identifier: 43:37:E9:FF:91:A0:CB:65:CE:1E:B8:FA:EB:61:08:F5:E3:7B:B6:57 Certificate issuer: /CN=4337E9FF91A0CB65CE1EB8FAEB6108F5E37BB657 Certificate serial: 4384093B4E522E0967CD9539BB90B81A3AC96A6A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4337E9FF91A0CB65CE1EB8FAEB6108F5E37BB657.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5c34dc3f-308f-4de1-a365-701bd9cf1004/0/4337E9FF91A0CB65CE1EB8FAEB6108F5E37BB657.mft Manifest number: 02D2 Signing time: Fri 22 Aug 2025 14:51:10 +0000 Manifest this update: Fri 22 Aug 2025 14:46:10 +0000 Manifest next update: Tue 26 Aug 2025 01:12:10 +0000 Files and hashes: 1: 4337E9FF91A0CB65CE1EB8FAEB6108F5E37BB657.crl (hash: htW5HTayyzW+OB4fQlYYm3D4MxDKikuanV4q3SjLRXY=) 2: 3130332e3137362e39372e302f32342d3234203d3e20313437313331.roa (hash: gcQbwwcsgWLto/MeqdtpULkQCdJ/hBMpFsyWHdzWTU8=) 3: 3130332e3137362e39362e302f32342d3234203d3e20313437313331.roa (hash: omt0on/osncWzWrbGIk75aVtn8fXGKFlF84iedQ76S8=) 4: 3130332e3137362e39362e302f32332d3233203d3e20313437313331.roa (hash: RvlNgfW0J+bVY7d2yjeoXrc2sRB1/6Dnvn34DHTz4kU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5c34dc3f-308f-4de1-a365-701bd9cf1004/0/4337E9FF91A0CB65CE1EB8FAEB6108F5E37BB657.crl rsync://repo-rpki.idnic.net/repo/5c34dc3f-308f-4de1-a365-701bd9cf1004/0/4337E9FF91A0CB65CE1EB8FAEB6108F5E37BB657.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4337E9FF91A0CB65CE1EB8FAEB6108F5E37BB657.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 01:12:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:84:09:3b:4e:52:2e:09:67:cd:95:39:bb:90:b8:1a:3a:c9:6a:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4337E9FF91A0CB65CE1EB8FAEB6108F5E37BB657 Validity Not Before: Aug 22 14:46:10 2025 GMT Not After : Aug 26 01:12:10 2025 GMT Subject: CN=30D4369287F7DC8EDD550F093EB9A16FBAD8E6BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:18:28:b0:95:b2:43:a4:e3:83:a4:25:56:40: ef:f8:9b:95:c6:2f:c9:a2:cf:53:94:1d:1c:35:dc: 43:2d:0e:da:41:61:f1:a7:4b:ce:0d:ad:dd:57:dd: 3e:6e:17:0e:f5:42:10:84:82:fa:56:fd:f3:03:1e: c3:26:19:f3:5d:9c:0a:db:e2:cc:c0:27:ef:b9:3c: bc:ae:1c:81:54:b8:e6:8c:77:bf:67:31:bc:6e:1b: c4:aa:08:56:eb:f2:2b:b9:62:32:03:76:cd:88:5e: 58:d4:7a:3b:13:f7:84:e5:cb:21:61:d2:91:53:45: 61:36:ae:4d:7c:29:ec:fe:a7:b9:89:de:aa:0f:29: 33:55:10:fd:e7:05:a5:10:ca:e1:98:f6:be:64:d0: a4:3f:0e:b6:05:35:d8:39:73:01:c7:e8:a7:23:06: 6d:c1:ba:17:7b:2b:fd:b6:8c:7b:67:0f:68:21:e4: 95:59:ec:d7:12:97:d0:c5:8c:ee:bf:44:f7:55:c3: 8d:05:bf:dd:4c:8f:95:f3:a6:82:17:22:7d:8e:e0: 41:02:c1:73:bc:47:29:13:e7:1e:bf:0c:98:0f:9d: 19:4e:7c:e1:d1:5c:7f:03:72:5e:df:b1:5c:6c:42: 0f:7e:85:0e:8f:da:8e:2d:2f:cf:6f:c4:e1:96:94: a6:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:D4:36:92:87:F7:DC:8E:DD:55:0F:09:3E:B9:A1:6F:BA:D8:E6:BD X509v3 Authority Key Identifier: keyid:43:37:E9:FF:91:A0:CB:65:CE:1E:B8:FA:EB:61:08:F5:E3:7B:B6:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5c34dc3f-308f-4de1-a365-701bd9cf1004/0/4337E9FF91A0CB65CE1EB8FAEB6108F5E37BB657.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4337E9FF91A0CB65CE1EB8FAEB6108F5E37BB657.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5c34dc3f-308f-4de1-a365-701bd9cf1004/0/4337E9FF91A0CB65CE1EB8FAEB6108F5E37BB657.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:42:8a:a2:7f:a5:61:a8:46:4c:8d:f0:b9:3a:cc:37:01:f3: 14:38:62:a5:44:7d:25:c4:3f:ea:15:58:4e:07:cd:13:82:5c: a7:59:66:c8:25:a2:14:96:7c:ae:3e:14:7b:7d:3f:32:55:92: f3:2b:b2:ac:38:55:cf:00:bb:cb:11:93:4d:f9:4e:ca:67:ea: f0:5d:59:c4:9d:2c:4c:c8:4c:84:8f:72:2b:8b:a6:71:3a:36: a8:cc:21:51:91:f0:2c:8b:19:e2:55:d2:73:a8:61:c7:93:19: cf:72:4d:29:90:5f:f5:9b:3a:d7:f3:d2:30:51:25:33:b0:2c: 8b:57:52:4b:f1:32:14:df:da:05:bc:93:52:bc:89:f8:3f:bc: a3:c9:be:11:db:19:68:de:e3:b5:e3:9a:70:ee:28:45:ab:1b: a7:39:55:18:0c:3c:9a:c9:4e:45:ca:56:32:67:80:11:8c:2e: 6e:20:09:a5:60:dd:dc:05:01:ec:83:db:94:be:8d:2e:2a:1f: 5f:de:61:92:08:1b:e8:4b:c0:b6:13:d3:c7:43:dc:90:ed:aa: e7:79:9a:47:db:3f:ab:db:43:6d:34:03:bc:84:d2:ef:f5:7d: 4b:82:d0:a6:d6:47:3b:37:51:8a:6a:ce:f2:a2:58:90:6a:06: 5f:1c:39:a3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ4QJO05SLglnzZU5u5C4GjrJamowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDMzN0U5RkY5MUEwQ0I2NUNFMUVCOEZBRUI2MTA4RjVF MzdCQjY1NzAeFw0yNTA4MjIxNDQ2MTBaFw0yNTA4MjYwMTEyMTBaMDMxMTAvBgNV BAMTKDMwRDQzNjkyODdGN0RDOEVERDU1MEYwOTNFQjlBMTZGQkFEOEU2QkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKGCiwlbJDpOODpCVWQO/4m5XG L8miz1OUHRw13EMtDtpBYfGnS84Nrd1X3T5uFw71QhCEgvpW/fMDHsMmGfNdnArb 4szAJ++5PLyuHIFUuOaMd79nMbxuG8SqCFbr8iu5YjIDds2IXljUejsT94TlyyFh 0pFTRWE2rk18Kez+p7mJ3qoPKTNVEP3nBaUQyuGY9r5k0KQ/DrYFNdg5cwHH6Kcj Bm3Buhd7K/22jHtnD2gh5JVZ7NcSl9DFjO6/RPdVw40Fv91Mj5XzpoIXIn2O4EEC wXO8RykT5x6/DJgPnRlOfOHRXH8Dcl7fsVxsQg9+hQ6P2o4tL89vxOGWlKbnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMNQ2kof33I7dVQ8JPrmhb7rY5r0wHwYDVR0j BBgwFoAUQzfp/5Ggy2XOHrj662EI9eN7tlcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YzM0ZGMzZi0zMDhmLTRkZTEtYTM2NS03MDFiZDljZjEwMDQvMC80MzM3RTlGRjkx QTBDQjY1Q0UxRUI4RkFFQjYxMDhGNUUzN0JCNjU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDMzN0U5RkY5MUEwQ0I2NUNFMUVCOEZBRUI2MTA4RjVFMzdC QjY1Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWMzNGRjM2YtMzA4Zi00ZGUxLWEz NjUtNzAxYmQ5Y2YxMDA0LzAvNDMzN0U5RkY5MUEwQ0I2NUNFMUVCOEZBRUI2MTA4 RjVFMzdCQjY1Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK9CiqJ/pWGoRkyN8Lk6zDcB8xQ4YqVEfSXE P+oVWE4HzROCXKdZZsglohSWfK4+FHt9PzJVkvMrsqw4Vc8Au8sRk035Tspn6vBd WcSdLEzITISPciuLpnE6NqjMIVGR8CyLGeJV0nOoYceTGc9yTSmQX/WbOtfz0jBR JTOwLItXUkvxMhTf2gW8k1K8ifg/vKPJvhHbGWje47XjmnDuKEWrG6c5VRgMPJrJ TkXKVjJngBGMLm4gCaVg3dwFAeyD25S+jS4qH1/eYZIIG+hLwLYT08dD3JDtqud5 mkfbP6vbQ200A7yE0u/1fUuC0KbWRzs3UYpqzvKiWJBqBl8cOaM= -----END CERTIFICATE-----Generated at Sat Aug 23 15:23:49 2025 by rpki-client