$ rpki-client -vvf repo-rpki.idnic.net/repo/68184fab-0fa5-43bb-811c-2eeb0a5fe8d7/0/4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1.mft File: 4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1.mft (raw, json) Hash identifier: Fx6st1B5DyH5nsWdMROd99np9cw4B/TWxkACfxv6Qnk= Subject key identifier: A2:6D:70:E5:2B:40:3F:87:99:F0:40:F3:7B:BA:CD:9A:BF:27:42:BE Authority key identifier: 4D:57:27:02:D7:7E:3A:9A:4A:FA:80:33:A2:A3:DC:59:7B:2C:8D:A1 Certificate issuer: /CN=4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1 Certificate serial: 7EA66014C133F07A50F267D9C262DCDB8F20E231 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/68184fab-0fa5-43bb-811c-2eeb0a5fe8d7/0/4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1.mft Manifest number: 01E5 Signing time: Thu 21 Aug 2025 12:11:43 +0000 Manifest this update: Thu 21 Aug 2025 12:06:43 +0000 Manifest next update: Sun 24 Aug 2025 16:26:43 +0000 Files and hashes: 1: 3131382e3135312e3232302e302f32322d3234203d3e2039333236.roa (hash: MqS7xa1gZ4sxYF09hDVlXuThuOKNijdrU/YubMLE0nE=) 2: 4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1.crl (hash: HGgC7KT1w1y2vyWxfZefDwvliIZ+NIxCGgGxj0gP9HI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/68184fab-0fa5-43bb-811c-2eeb0a5fe8d7/0/4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1.crl rsync://repo-rpki.idnic.net/repo/68184fab-0fa5-43bb-811c-2eeb0a5fe8d7/0/4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 16:26:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:a6:60:14:c1:33:f0:7a:50:f2:67:d9:c2:62:dc:db:8f:20:e2:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1 Validity Not Before: Aug 21 12:06:43 2025 GMT Not After : Aug 24 16:26:43 2025 GMT Subject: CN=A26D70E52B403F8799F040F37BBACD9ABF2742BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:88:55:76:c5:45:35:a6:90:fb:0f:60:73:cc: 8e:94:02:62:52:39:3d:ab:a5:14:eb:5c:aa:9c:2a: 19:42:25:5a:52:d1:bb:b7:4d:4b:55:08:dd:cf:e4: 8a:42:85:52:b4:bc:04:30:7e:53:be:36:5c:ef:cf: 01:20:88:6e:73:7a:87:92:1d:8f:a5:2d:71:3d:55: 88:14:5d:4b:7b:2b:68:46:4c:af:de:35:2d:0c:81: 9a:cf:25:d8:97:3f:a2:11:d7:c9:ee:c7:e3:83:52: 39:00:e6:cb:88:0e:ed:c9:95:60:c6:27:18:33:2c: ae:e0:ae:63:28:28:36:4d:31:3d:8d:77:ce:fd:db: bb:50:69:67:79:d8:3e:a1:e5:05:e9:9c:01:a1:bd: b4:8b:72:e6:87:37:de:16:7d:ca:38:ec:da:21:d6: a0:ed:0b:bf:f4:a5:2a:2e:0c:29:de:eb:92:72:08: 3a:83:4d:78:ff:45:a2:93:e2:3e:c6:76:b2:44:a9: 26:06:7c:e0:e2:70:30:72:14:71:3a:b6:0d:90:33: 42:7e:5e:90:52:20:b8:df:f1:c6:31:a5:4b:89:ba: ec:f2:c2:37:46:07:9b:49:29:8f:95:0e:d9:84:be: 42:6c:2c:5c:95:df:38:1e:67:bd:36:49:49:7c:f1: 1d:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:6D:70:E5:2B:40:3F:87:99:F0:40:F3:7B:BA:CD:9A:BF:27:42:BE X509v3 Authority Key Identifier: keyid:4D:57:27:02:D7:7E:3A:9A:4A:FA:80:33:A2:A3:DC:59:7B:2C:8D:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/68184fab-0fa5-43bb-811c-2eeb0a5fe8d7/0/4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/68184fab-0fa5-43bb-811c-2eeb0a5fe8d7/0/4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:c6:86:20:67:db:3b:c4:41:43:12:c7:8e:81:dd:45:e9:9b: 14:f7:7e:d9:9c:3a:fd:49:9d:4f:93:1e:0c:99:46:c6:84:b9: df:b9:ce:af:16:a6:c7:60:c4:80:c4:af:86:58:1f:e0:05:18: f7:6a:87:4e:5e:7d:82:ef:38:40:44:f7:63:04:27:c5:20:56: 34:78:57:d4:28:e8:fc:2e:2c:d7:34:3d:b8:a0:4e:cd:fa:a3: 97:9b:bf:a1:86:3e:33:da:77:ac:4b:dc:53:7d:59:37:c7:b6: 7d:fd:ac:ca:ac:90:8f:6e:2e:0f:01:b5:47:ae:0f:23:cb:dd: c9:8c:41:4d:ab:3a:ba:72:0b:ba:68:4f:d7:f3:d1:d3:dc:db: b4:9d:0e:3e:f9:3d:d8:29:53:1d:f2:e9:f5:96:ef:7b:90:b0: 84:a2:b4:16:6a:9b:8d:2a:77:16:a7:bf:b6:2e:7e:f1:0e:79: 53:1f:b0:b0:f6:3a:9f:26:34:47:46:14:14:7c:2a:e0:ed:2e: 0f:2a:02:62:01:bf:8a:6c:a6:2f:a1:1c:58:d2:3f:12:52:7e: 54:2f:db:b4:df:79:32:35:34:3d:08:43:d8:ed:8f:1b:82:4a: 1f:4d:40:12:93:fb:85:9f:56:15:5b:94:79:b0:40:47:0d:a9: c9:27:7c:c7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfqZgFMEz8HpQ8mfZwmLc248g4jEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEQ1NzI3MDJENzdFM0E5QTRBRkE4MDMzQTJBM0RDNTk3 QjJDOERBMTAeFw0yNTA4MjExMjA2NDNaFw0yNTA4MjQxNjI2NDNaMDMxMTAvBgNV BAMTKEEyNkQ3MEU1MkI0MDNGODc5OUYwNDBGMzdCQkFDRDlBQkYyNzQyQkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOiFV2xUU1ppD7D2BzzI6UAmJS OT2rpRTrXKqcKhlCJVpS0bu3TUtVCN3P5IpChVK0vAQwflO+NlzvzwEgiG5zeoeS HY+lLXE9VYgUXUt7K2hGTK/eNS0MgZrPJdiXP6IR18nux+ODUjkA5suIDu3JlWDG JxgzLK7grmMoKDZNMT2Nd87927tQaWd52D6h5QXpnAGhvbSLcuaHN94Wfco47Noh 1qDtC7/0pSouDCne65JyCDqDTXj/RaKT4j7GdrJEqSYGfODicDByFHE6tg2QM0J+ XpBSILjf8cYxpUuJuuzywjdGB5tJKY+VDtmEvkJsLFyV3zgeZ702SUl88R0fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUom1w5StAP4eZ8EDze7rNmr8nQr4wHwYDVR0j BBgwFoAUTVcnAtd+OppK+oAzoqPcWXssjaEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ODE4NGZhYi0wZmE1LTQzYmItODExYy0yZWViMGE1ZmU4ZDcvMC80RDU3MjcwMkQ3 N0UzQTlBNEFGQTgwMzNBMkEzREM1OTdCMkM4REExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEQ1NzI3MDJENzdFM0E5QTRBRkE4MDMzQTJBM0RDNTk3QjJD OERBMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjgxODRmYWItMGZhNS00M2JiLTgx MWMtMmVlYjBhNWZlOGQ3LzAvNEQ1NzI3MDJENzdFM0E5QTRBRkE4MDMzQTJBM0RD NTk3QjJDOERBMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG7GhiBn2zvEQUMSx46B3UXpmxT3ftmcOv1J nU+THgyZRsaEud+5zq8WpsdgxIDEr4ZYH+AFGPdqh05efYLvOEBE92MEJ8UgVjR4 V9Qo6PwuLNc0PbigTs36o5ebv6GGPjPad6xL3FN9WTfHtn39rMqskI9uLg8BtUeu DyPL3cmMQU2rOrpyC7poT9fz0dPc27SdDj75PdgpUx3y6fWW73uQsISitBZqm40q dxanv7YufvEOeVMfsLD2Op8mNEdGFBR8KuDtLg8qAmIBv4pspi+hHFjSPxJSflQv 27TfeTI1ND0IQ9jtjxuCSh9NQBKT+4WfVhVblHmwQEcNqcknfMc= -----END CERTIFICATE-----Generated at Sat Aug 23 18:42:59 2025 by rpki-client