$ rpki-client -vvf repo-rpki.idnic.net/repo/5e4aba0a-1c2c-4f8a-a4b4-ea72d9b2a60a/0/C4632299E016D269164FA40AEF99CC8602E2B7C1.mft File: C4632299E016D269164FA40AEF99CC8602E2B7C1.mft (raw, json) Hash identifier: vC5Lu63lFY6NWsHClo1nlyHXyBiAylP/GFgQYK28WZ4= Subject key identifier: BD:E8:F9:A4:CC:E4:C0:29:9A:C5:F7:B1:3F:37:82:42:2C:6A:60:61 Authority key identifier: C4:63:22:99:E0:16:D2:69:16:4F:A4:0A:EF:99:CC:86:02:E2:B7:C1 Certificate issuer: /CN=C4632299E016D269164FA40AEF99CC8602E2B7C1 Certificate serial: 5A5A385D1DCAC25349DEC8A02FB9976DC81AB85E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C4632299E016D269164FA40AEF99CC8602E2B7C1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5e4aba0a-1c2c-4f8a-a4b4-ea72d9b2a60a/0/C4632299E016D269164FA40AEF99CC8602E2B7C1.mft Manifest number: B8 Signing time: Fri 22 Aug 2025 17:31:35 +0000 Manifest this update: Fri 22 Aug 2025 17:26:35 +0000 Manifest next update: Mon 25 Aug 2025 18:42:35 +0000 Files and hashes: 1: 3136302e32322e36342e302f32332d3234203d3e203435333035.roa (hash: gDEeaK4MqvoH1/Rybnd4HP4RdLEQVc8gkFhCRcLn6ys=) 2: C4632299E016D269164FA40AEF99CC8602E2B7C1.crl (hash: Qju1id9LWN0sXQ8xEaDmPwOIMVuUQGlho/BykTVC5S4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5e4aba0a-1c2c-4f8a-a4b4-ea72d9b2a60a/0/C4632299E016D269164FA40AEF99CC8602E2B7C1.crl rsync://repo-rpki.idnic.net/repo/5e4aba0a-1c2c-4f8a-a4b4-ea72d9b2a60a/0/C4632299E016D269164FA40AEF99CC8602E2B7C1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C4632299E016D269164FA40AEF99CC8602E2B7C1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 18:42:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:5a:38:5d:1d:ca:c2:53:49:de:c8:a0:2f:b9:97:6d:c8:1a:b8:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C4632299E016D269164FA40AEF99CC8602E2B7C1 Validity Not Before: Aug 22 17:26:35 2025 GMT Not After : Aug 25 18:42:35 2025 GMT Subject: CN=BDE8F9A4CCE4C0299AC5F7B13F3782422C6A6061 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:57:c8:8c:53:47:ed:44:39:b4:9d:28:87:71: e1:b4:f6:86:b8:52:0a:15:a5:ce:ad:5e:c7:d2:eb: 10:df:fe:da:d7:8e:c7:18:0f:62:7d:f6:62:36:58: 71:55:33:44:39:6f:89:40:8d:e6:f6:5d:1d:55:c2: d0:a2:62:84:50:a0:ba:2b:ab:c5:38:23:38:04:79: c7:8e:42:16:f3:c1:e8:97:b3:78:7e:f2:b7:17:e8: 81:10:73:c7:88:ba:d6:32:2e:4e:9c:41:28:53:8d: 7d:af:b6:81:5b:32:35:14:fa:d0:38:03:aa:f9:11: 9f:95:11:64:71:17:b6:52:71:69:23:ca:46:f7:ac: c9:4c:a3:15:1e:41:70:ab:27:c7:d1:50:94:f2:09: 63:7f:ad:bc:04:be:b0:88:5a:08:39:52:05:12:9b: 25:61:50:55:b3:ce:8c:e1:e9:f2:65:d3:ba:60:6b: ec:2f:e9:53:69:6a:52:e9:66:1d:55:07:b4:d0:a3: 00:c9:94:22:a2:40:05:8b:98:4b:dc:45:b9:2c:52: 0d:6c:bc:9f:a1:3f:43:8a:4f:0f:8c:f4:04:9b:83: 01:d0:32:52:95:de:c4:b0:5b:69:c3:e8:b5:47:02: 3b:6c:59:e0:b0:23:4f:79:b9:76:61:01:38:df:77: 13:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:E8:F9:A4:CC:E4:C0:29:9A:C5:F7:B1:3F:37:82:42:2C:6A:60:61 X509v3 Authority Key Identifier: keyid:C4:63:22:99:E0:16:D2:69:16:4F:A4:0A:EF:99:CC:86:02:E2:B7:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5e4aba0a-1c2c-4f8a-a4b4-ea72d9b2a60a/0/C4632299E016D269164FA40AEF99CC8602E2B7C1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C4632299E016D269164FA40AEF99CC8602E2B7C1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5e4aba0a-1c2c-4f8a-a4b4-ea72d9b2a60a/0/C4632299E016D269164FA40AEF99CC8602E2B7C1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:27:f3:9d:13:e2:95:df:e2:0d:7c:83:91:e2:e5:ea:be:9e: 04:f0:80:d4:e7:5f:ac:87:fd:40:d7:8a:6a:da:c2:f3:63:1e: 17:bb:a3:26:0d:32:51:49:20:29:21:6f:3d:06:00:ad:3a:4e: 2a:f7:00:85:5b:65:7f:63:76:95:7b:e0:f5:2d:b7:9d:84:e2: bd:9e:92:77:8e:49:09:d7:f7:18:5f:a3:a5:33:19:ba:c9:b5: d4:a9:93:36:c9:e3:86:90:b9:b0:78:82:38:49:c0:2f:77:99: 6e:54:16:fa:f8:b1:56:d6:c9:75:7e:4f:63:69:4f:90:75:2a: 42:1c:94:49:0a:27:6e:01:95:e7:84:d3:10:89:a9:04:d3:f3: 55:e7:57:9f:84:1a:3f:3d:59:f4:07:37:07:85:cd:19:69:df: 87:be:83:7a:8d:3e:20:98:dd:f4:de:fb:d1:eb:05:bc:58:20: 37:9a:8d:d7:1e:26:c5:a1:12:7d:1c:da:2b:95:30:12:a9:a5: 89:c1:ac:9e:d5:94:7f:dc:77:2c:a0:3c:b2:9a:e9:2d:57:c3: 0e:a9:07:de:1c:a5:34:a4:56:ae:c3:7a:2a:c3:b0:5c:1a:04: 4e:f1:6f:e8:0c:9e:5d:19:f5:2c:00:2b:2d:e6:5f:fd:cd:d8: 99:2b:9d:cb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWlo4XR3KwlNJ3sigL7mXbcgauF4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzQ2MzIyOTlFMDE2RDI2OTE2NEZBNDBBRUY5OUNDODYw MkUyQjdDMTAeFw0yNTA4MjIxNzI2MzVaFw0yNTA4MjUxODQyMzVaMDMxMTAvBgNV BAMTKEJERThGOUE0Q0NFNEMwMjk5QUM1RjdCMTNGMzc4MjQyMkM2QTYwNjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIV8iMU0ftRDm0nSiHceG09oa4 UgoVpc6tXsfS6xDf/trXjscYD2J99mI2WHFVM0Q5b4lAjeb2XR1VwtCiYoRQoLor q8U4IzgEeceOQhbzweiXs3h+8rcX6IEQc8eIutYyLk6cQShTjX2vtoFbMjUU+tA4 A6r5EZ+VEWRxF7ZScWkjykb3rMlMoxUeQXCrJ8fRUJTyCWN/rbwEvrCIWgg5UgUS myVhUFWzzozh6fJl07pga+wv6VNpalLpZh1VB7TQowDJlCKiQAWLmEvcRbksUg1s vJ+hP0OKTw+M9ASbgwHQMlKV3sSwW2nD6LVHAjtsWeCwI095uXZhATjfdxMDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvej5pMzkwCmaxfexPzeCQixqYGEwHwYDVR0j BBgwFoAUxGMimeAW0mkWT6QK75nMhgLit8EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZTRhYmEwYS0xYzJjLTRmOGEtYTRiNC1lYTcyZDliMmE2MGEvMC9DNDYzMjI5OUUw MTZEMjY5MTY0RkE0MEFFRjk5Q0M4NjAyRTJCN0MxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQzQ2MzIyOTlFMDE2RDI2OTE2NEZBNDBBRUY5OUNDODYwMkUy QjdDMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWU0YWJhMGEtMWMyYy00ZjhhLWE0 YjQtZWE3MmQ5YjJhNjBhLzAvQzQ2MzIyOTlFMDE2RDI2OTE2NEZBNDBBRUY5OUND ODYwMkUyQjdDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALIn850T4pXf4g18g5Hi5eq+ngTwgNTnX6yH /UDXimrawvNjHhe7oyYNMlFJICkhbz0GAK06Tir3AIVbZX9jdpV74PUtt52E4r2e kneOSQnX9xhfo6UzGbrJtdSpkzbJ44aQubB4gjhJwC93mW5UFvr4sVbWyXV+T2Np T5B1KkIclEkKJ24BleeE0xCJqQTT81XnV5+EGj89WfQHNweFzRlp34e+g3qNPiCY 3fTe+9HrBbxYIDeajdceJsWhEn0c2iuVMBKppYnBrJ7VlH/cdyygPLKa6S1Xww6p B94cpTSkVq7DeirDsFwaBE7xb+gMnl0Z9SwAKy3mX/3N2Jkrncs= -----END CERTIFICATE-----Generated at Sat Aug 23 19:21:15 2025 by rpki-client