$ rpki-client -vvf repo-rpki.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.mft File: 4A9E8C61BE3670D865B8A79D7D32798550E64F2B.mft (raw, json) Hash identifier: 9YA9a75jV+stRPE2gAf4iAu0gE/GSFY0KQgDJoPt3Os= Subject key identifier: 90:59:64:D5:9A:49:F7:48:91:EE:62:2F:47:CC:C7:43:AB:3F:96:03 Authority key identifier: 4A:9E:8C:61:BE:36:70:D8:65:B8:A7:9D:7D:32:79:85:50:E6:4F:2B Certificate issuer: /CN=4A9E8C61BE3670D865B8A79D7D32798550E64F2B Certificate serial: 0F437B97314C136C6F75897613DFC2D80D7ECC2B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.mft Manifest number: 0111 Signing time: Sat 28 Jun 2025 13:12:20 +0000 Manifest this update: Sat 28 Jun 2025 13:07:20 +0000 Manifest next update: Tue 01 Jul 2025 23:43:20 +0000 Files and hashes: 1: 4A9E8C61BE3670D865B8A79D7D32798550E64F2B.crl (hash: bqodh4hxOmNqi6LCTF3ilCPIlUzodFgldNaYlRGfoK4=) 2: 3130332e3234352e33382e302f32332d3234203d3e203535363838.roa (hash: sfkJ0JTL5ebL+3NyzyS4seDOCuegsswJp2YAbd6RC9s=) 3: 323030313a6466323a656434303a3a2f34382d3438203d3e203535363838.roa (hash: 3LwTWTq6lR7/gbSdsCbSOqta9JhN0Eij75z5muuvESg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.crl rsync://repo-rpki.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 23:43:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:43:7b:97:31:4c:13:6c:6f:75:89:76:13:df:c2:d8:0d:7e:cc:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A9E8C61BE3670D865B8A79D7D32798550E64F2B Validity Not Before: Jun 28 13:07:20 2025 GMT Not After : Jul 1 23:43:20 2025 GMT Subject: CN=905964D59A49F74891EE622F47CCC743AB3F9603 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:4c:8b:84:9f:1d:e7:ea:62:91:3c:40:e1:cf: 7e:1c:5f:4e:43:58:77:35:f7:f3:bb:e5:52:f5:e2: fc:31:79:93:2b:5d:5d:4b:85:5f:61:f2:67:5d:68: c9:19:bf:b4:e8:bd:f6:4a:f9:e6:35:3d:c7:14:df: c7:35:32:6b:55:2a:bd:f8:ca:ec:4b:c7:ed:f8:28: 28:2c:23:75:c3:ad:af:c2:fa:b2:d7:24:11:b5:d7: 5d:8a:29:20:a2:8b:7d:ca:6b:05:42:a8:6e:85:83: 1f:04:64:8f:dc:e6:9b:b0:cd:89:45:6b:38:93:ee: 6b:46:1e:81:ed:cf:05:7e:d2:c5:1e:23:21:e4:b6: 66:61:5a:ff:7b:a7:41:79:7f:4e:ec:22:ec:de:14: 9e:28:76:97:5e:8a:15:cf:7d:4c:ff:2e:65:71:cf: aa:3c:2b:d1:46:7a:28:44:68:bb:fc:f7:9f:1c:5b: 51:db:44:25:b7:00:62:c4:6e:c6:0e:25:ee:06:06: 15:9f:d3:62:98:13:b9:6e:a7:32:eb:88:e6:ba:20: b7:d4:ef:7e:a7:64:73:71:1d:1f:7f:f2:00:72:33: da:31:0f:60:34:e1:d9:67:ea:1a:df:a6:5e:9a:cb: a8:af:c9:2d:f9:08:a7:96:c7:98:b1:82:17:56:48: 96:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:59:64:D5:9A:49:F7:48:91:EE:62:2F:47:CC:C7:43:AB:3F:96:03 X509v3 Authority Key Identifier: keyid:4A:9E:8C:61:BE:36:70:D8:65:B8:A7:9D:7D:32:79:85:50:E6:4F:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:85:bb:42:c4:70:c7:71:ba:78:d9:db:18:ac:48:48:f0:91: 6d:6b:ee:15:89:5f:ee:28:d8:25:66:71:01:64:7a:95:1f:0f: 7d:ed:71:1a:bd:97:d2:a6:d8:f6:72:69:f8:32:55:e2:a9:48: 77:57:66:c2:01:1e:ae:cd:a0:7c:7c:db:c5:81:69:26:0b:99: 7f:06:51:f1:94:0b:d1:91:2b:a5:51:46:2e:5d:f2:08:70:80: 8a:75:0f:55:33:1c:86:2b:90:7a:ff:ab:bb:9d:0a:f3:67:75: 47:a7:cb:6d:53:24:ca:87:89:de:0b:32:ff:a3:1e:44:fc:2a: 81:62:ec:7f:9a:8e:5c:f4:80:e1:18:c7:64:a0:8b:b1:b6:05: ad:fe:93:22:52:33:c7:b6:a4:14:64:28:26:c7:84:39:4e:e1: eb:ac:ac:43:46:fd:2a:50:ae:24:f4:7b:53:f1:6a:39:cd:a8: 1b:c2:54:38:1c:3b:de:08:ee:48:cd:12:0f:e1:a9:10:f5:54: cf:60:79:9d:1a:b8:cc:7e:45:76:de:38:fc:80:84:e2:c9:5d: 6e:77:26:98:ff:3b:da:bf:1c:50:60:fd:77:43:8e:b1:95:ac: 7d:ef:6c:9f:22:67:7c:aa:cb:0e:ed:9e:60:9e:2c:06:13:15: 3b:40:6a:8a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD0N7lzFME2xvdYl2E9/C2A1+zCswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEE5RThDNjFCRTM2NzBEODY1QjhBNzlEN0QzMjc5ODU1 MEU2NEYyQjAeFw0yNTA2MjgxMzA3MjBaFw0yNTA3MDEyMzQzMjBaMDMxMTAvBgNV BAMTKDkwNTk2NEQ1OUE0OUY3NDg5MUVFNjIyRjQ3Q0NDNzQzQUIzRjk2MDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdTIuEnx3n6mKRPEDhz34cX05D WHc19/O75VL14vwxeZMrXV1LhV9h8mddaMkZv7TovfZK+eY1PccU38c1MmtVKr34 yuxLx+34KCgsI3XDra/C+rLXJBG1112KKSCii33KawVCqG6Fgx8EZI/c5puwzYlF aziT7mtGHoHtzwV+0sUeIyHktmZhWv97p0F5f07sIuzeFJ4odpdeihXPfUz/LmVx z6o8K9FGeihEaLv8958cW1HbRCW3AGLEbsYOJe4GBhWf02KYE7lupzLriOa6ILfU 736nZHNxHR9/8gByM9oxD2A04dln6hrfpl6ay6ivyS35CKeWx5ixghdWSJYnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkFlk1ZpJ90iR7mIvR8zHQ6s/lgMwHwYDVR0j BBgwFoAUSp6MYb42cNhluKedfTJ5hVDmTyswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YzQ5MzVkOC05NmEyLTQ1NjQtODVhMy0zMmE1MzE4OTM2N2UvMC80QTlFOEM2MUJF MzY3MEQ4NjVCOEE3OUQ3RDMyNzk4NTUwRTY0RjJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEE5RThDNjFCRTM2NzBEODY1QjhBNzlEN0QzMjc5ODU1MEU2 NEYyQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2M0OTM1ZDgtOTZhMi00NTY0LTg1 YTMtMzJhNTMxODkzNjdlLzAvNEE5RThDNjFCRTM2NzBEODY1QjhBNzlEN0QzMjc5 ODU1MEU2NEYyQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAESFu0LEcMdxunjZ2xisSEjwkW1r7hWJX+4o 2CVmcQFkepUfD33tcRq9l9Km2PZyafgyVeKpSHdXZsIBHq7NoHx828WBaSYLmX8G UfGUC9GRK6VRRi5d8ghwgIp1D1UzHIYrkHr/q7udCvNndUeny21TJMqHid4LMv+j HkT8KoFi7H+ajlz0gOEYx2Sgi7G2Ba3+kyJSM8e2pBRkKCbHhDlO4eusrENG/SpQ riT0e1PxajnNqBvCVDgcO94I7kjNEg/hqRD1VM9geZ0auMx+RXbeOPyAhOLJXW53 Jpj/O9q/HFBg/XdDjrGVrH3vbJ8iZ3yqyw7tnmCeLAYTFTtAaoo= -----END CERTIFICATE-----Generated at Mon Jun 30 05:03:42 2025 by rpki-client