$ rpki-client -vvf repo-rpki.idnic.net/repo/68002f3f-bf17-4e48-9e85-8436063313d2/0/4C493E592E006837A093CD288BB55329BE38D2D2.mft File: 4C493E592E006837A093CD288BB55329BE38D2D2.mft (raw, json) Hash identifier: aLzzF5GUahtdvoW0gXo0+LqJHKl9/PRGxl1PpdEfq4o= Subject key identifier: 30:60:8C:4E:46:A7:B7:6C:DB:12:D8:2F:47:81:38:66:38:B9:7C:D1 Authority key identifier: 4C:49:3E:59:2E:00:68:37:A0:93:CD:28:8B:B5:53:29:BE:38:D2:D2 Certificate issuer: /CN=4C493E592E006837A093CD288BB55329BE38D2D2 Certificate serial: 505383FF146507855A86BDBC69F91DE8EEEC9260 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C493E592E006837A093CD288BB55329BE38D2D2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/68002f3f-bf17-4e48-9e85-8436063313d2/0/4C493E592E006837A093CD288BB55329BE38D2D2.mft Manifest number: 04FE Signing time: Fri 22 Aug 2025 09:30:05 +0000 Manifest this update: Fri 22 Aug 2025 09:25:05 +0000 Manifest next update: Mon 25 Aug 2025 13:42:05 +0000 Files and hashes: 1: 4C493E592E006837A093CD288BB55329BE38D2D2.crl (hash: te8ZLDPJxpHevorKRaPD+8phb5ImieFUe/CqGGeA1jY=) 2: 3130332e33302e302e302f32322d3234203d3e20313331373738.roa (hash: N5m6EQloSn7cPSOHDMXggl0h6eDrNc8qhyGZ+DM46fM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/68002f3f-bf17-4e48-9e85-8436063313d2/0/4C493E592E006837A093CD288BB55329BE38D2D2.crl rsync://repo-rpki.idnic.net/repo/68002f3f-bf17-4e48-9e85-8436063313d2/0/4C493E592E006837A093CD288BB55329BE38D2D2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C493E592E006837A093CD288BB55329BE38D2D2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 13:42:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:53:83:ff:14:65:07:85:5a:86:bd:bc:69:f9:1d:e8:ee:ec:92:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4C493E592E006837A093CD288BB55329BE38D2D2 Validity Not Before: Aug 22 09:25:05 2025 GMT Not After : Aug 25 13:42:05 2025 GMT Subject: CN=30608C4E46A7B76CDB12D82F4781386638B97CD1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:5c:eb:18:e1:51:a5:91:e6:4c:1d:09:38:57: 8e:81:eb:62:b9:46:a4:46:61:0c:0b:8b:70:87:ec: 96:94:93:2c:b2:37:90:c9:8e:a4:8d:69:47:30:4b: d2:d6:12:d2:99:1e:3c:ca:ca:06:7e:5a:c1:4f:58: fe:72:0a:06:f1:40:fe:a7:99:24:74:6f:79:35:a9: 19:05:f3:91:9a:24:d0:1d:00:0c:17:ed:b4:aa:cb: 35:40:b7:11:03:bc:a7:88:c6:c7:db:24:7f:5f:d4: e5:b5:72:41:12:d3:ca:40:09:94:d4:5d:04:01:8e: b2:d4:1f:93:c1:6a:39:ed:61:b0:0c:bd:be:62:67: 66:16:7e:16:f5:53:65:e0:6d:53:22:a7:02:8f:f3: 14:c7:e4:a1:b8:40:86:5c:db:e5:0a:ad:46:e6:de: 22:18:0c:8f:ea:11:15:ed:ba:8f:d3:a0:8e:92:a8: d3:c2:cd:d7:ee:65:24:ab:2d:65:ac:ea:65:c1:ec: 22:2b:b0:0e:3b:6d:a3:af:ef:89:45:88:46:dd:32: 72:55:66:bc:2b:57:4e:59:f4:cc:c3:92:9a:03:82: 27:87:90:d6:3c:ea:9f:1e:92:c0:09:2f:c2:58:88: 36:97:c0:03:2d:93:57:b1:bf:d6:0d:7e:74:85:03: 5a:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:60:8C:4E:46:A7:B7:6C:DB:12:D8:2F:47:81:38:66:38:B9:7C:D1 X509v3 Authority Key Identifier: keyid:4C:49:3E:59:2E:00:68:37:A0:93:CD:28:8B:B5:53:29:BE:38:D2:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/68002f3f-bf17-4e48-9e85-8436063313d2/0/4C493E592E006837A093CD288BB55329BE38D2D2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C493E592E006837A093CD288BB55329BE38D2D2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/68002f3f-bf17-4e48-9e85-8436063313d2/0/4C493E592E006837A093CD288BB55329BE38D2D2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:1b:92:ad:7f:54:5a:7d:3f:02:21:29:2f:4c:8b:db:6d:27: be:b0:e4:c1:8c:ed:ff:d5:bb:cb:ab:25:85:6d:05:1e:ab:aa: ca:36:62:b5:e8:69:30:22:0d:cc:d9:bd:5e:4e:e6:ca:c6:b2: fb:77:72:c4:e7:2b:99:3b:8d:6d:dd:2c:20:b8:71:42:16:a2: 5a:6c:11:ba:02:b0:b8:1e:2b:5e:ad:4e:e8:e3:65:7b:5a:b4: 9a:f1:a2:24:eb:c0:ec:4f:b4:be:2d:f1:ac:dd:ba:3d:30:f7: 23:9c:1a:33:f0:4a:90:d9:84:81:d0:d0:d3:a6:45:ba:4e:3d: 34:a3:8d:8d:a7:3c:b8:be:42:23:47:38:2f:0e:32:f5:b9:d5: 3c:47:9c:44:c2:e8:7c:be:07:05:a6:97:9e:d2:9b:d3:ec:b2: 8d:a5:e6:ac:10:9f:77:7c:7c:8c:38:ac:e6:e7:dc:b0:c4:7c: 7a:21:a8:bc:c6:04:a2:f0:e5:c8:8d:b7:e5:70:ec:c6:c3:d9: 83:17:48:77:cb:ce:3c:26:01:c6:08:79:c5:d3:64:a8:75:c1: c8:6f:e7:1b:1a:a1:f3:27:12:36:8b:93:0f:ff:81:23:b4:ef: 96:27:d9:7d:15:2d:a3:35:b7:7c:5f:50:a4:81:17:7a:3f:9d: 2c:c5:39:65 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUFOD/xRlB4Vahr28afkd6O7skmAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEM0OTNFNTkyRTAwNjgzN0EwOTNDRDI4OEJCNTUzMjlC RTM4RDJEMjAeFw0yNTA4MjIwOTI1MDVaFw0yNTA4MjUxMzQyMDVaMDMxMTAvBgNV BAMTKDMwNjA4QzRFNDZBN0I3NkNEQjEyRDgyRjQ3ODEzODY2MzhCOTdDRDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGXOsY4VGlkeZMHQk4V46B62K5 RqRGYQwLi3CH7JaUkyyyN5DJjqSNaUcwS9LWEtKZHjzKygZ+WsFPWP5yCgbxQP6n mSR0b3k1qRkF85GaJNAdAAwX7bSqyzVAtxEDvKeIxsfbJH9f1OW1ckES08pACZTU XQQBjrLUH5PBajntYbAMvb5iZ2YWfhb1U2XgbVMipwKP8xTH5KG4QIZc2+UKrUbm 3iIYDI/qERXtuo/ToI6SqNPCzdfuZSSrLWWs6mXB7CIrsA47baOv74lFiEbdMnJV ZrwrV05Z9MzDkpoDgieHkNY86p8eksAJL8JYiDaXwAMtk1exv9YNfnSFA1rrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMGCMTkant2zbEtgvR4E4Zji5fNEwHwYDVR0j BBgwFoAUTEk+WS4AaDegk80oi7VTKb440tIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ODAwMmYzZi1iZjE3LTRlNDgtOWU4NS04NDM2MDYzMzEzZDIvMC80QzQ5M0U1OTJF MDA2ODM3QTA5M0NEMjg4QkI1NTMyOUJFMzhEMkQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEM0OTNFNTkyRTAwNjgzN0EwOTNDRDI4OEJCNTUzMjlCRTM4 RDJEMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjgwMDJmM2YtYmYxNy00ZTQ4LTll ODUtODQzNjA2MzMxM2QyLzAvNEM0OTNFNTkyRTAwNjgzN0EwOTNDRDI4OEJCNTUz MjlCRTM4RDJEMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIsbkq1/VFp9PwIhKS9Mi9ttJ76w5MGM7f/V u8urJYVtBR6rqso2YrXoaTAiDczZvV5O5srGsvt3csTnK5k7jW3dLCC4cUIWolps EboCsLgeK16tTujjZXtatJrxoiTrwOxPtL4t8azduj0w9yOcGjPwSpDZhIHQ0NOm RbpOPTSjjY2nPLi+QiNHOC8OMvW51TxHnETC6Hy+BwWml57Sm9Psso2l5qwQn3d8 fIw4rObn3LDEfHohqLzGBKLw5ciNt+Vw7MbD2YMXSHfLzjwmAcYIecXTZKh1wchv 5xsaofMnEjaLkw//gSO075Yn2X0VLaM1t3xfUKSBF3o/nSzFOWU= -----END CERTIFICATE-----Generated at Sat Aug 23 12:22:46 2025 by rpki-client