$ rpki-client -vvf repo-rpki.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.mft File: 4A9E8C61BE3670D865B8A79D7D32798550E64F2B.mft (raw, json) Hash identifier: 5gMGj8LzKtwJexxDezkmt+gfTokjpgf+HIeYWT4+QiA= Subject key identifier: 5B:27:51:9F:38:79:7E:F2:07:37:2B:1B:C7:67:D6:E9:62:B7:4F:4A Authority key identifier: 4A:9E:8C:61:BE:36:70:D8:65:B8:A7:9D:7D:32:79:85:50:E6:4F:2B Certificate issuer: /CN=4A9E8C61BE3670D865B8A79D7D32798550E64F2B Certificate serial: 75CD14A925D7F367854F0F56D494966E15F308B6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.mft Manifest number: 0129 Signing time: Thu 21 Aug 2025 06:42:34 +0000 Manifest this update: Thu 21 Aug 2025 06:37:34 +0000 Manifest next update: Sun 24 Aug 2025 10:49:34 +0000 Files and hashes: 1: 323030313a6466323a656434303a3a2f34382d3438203d3e203535363838.roa (hash: 3LwTWTq6lR7/gbSdsCbSOqta9JhN0Eij75z5muuvESg=) 2: 3130332e3234352e33382e302f32332d3234203d3e203535363838.roa (hash: sfkJ0JTL5ebL+3NyzyS4seDOCuegsswJp2YAbd6RC9s=) 3: 4A9E8C61BE3670D865B8A79D7D32798550E64F2B.crl (hash: yGtan2lvxtjP/xf4/NKM17ih+7oTRc68nzZAx29/DdY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.crl rsync://repo-rpki.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 10:49:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:cd:14:a9:25:d7:f3:67:85:4f:0f:56:d4:94:96:6e:15:f3:08:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A9E8C61BE3670D865B8A79D7D32798550E64F2B Validity Not Before: Aug 21 06:37:34 2025 GMT Not After : Aug 24 10:49:34 2025 GMT Subject: CN=5B27519F38797EF207372B1BC767D6E962B74F4A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:4c:0e:93:b0:f9:5c:71:34:17:83:ca:c4:65: ec:95:07:d7:a6:da:36:1b:30:69:42:a8:51:4a:4a: 45:2b:82:b4:43:35:d8:58:9d:08:2f:ad:20:3f:b9: 5f:b4:53:de:8c:90:da:99:d7:d0:0d:fb:1a:c7:f5: 28:76:d1:3b:25:6d:39:34:d8:36:c3:7b:a0:03:be: c8:5c:b8:f7:27:ad:d8:1a:f8:4e:81:4e:eb:61:e7: e3:11:3b:f6:6c:c0:df:e4:03:db:63:b2:f4:3b:87: ca:ea:d8:47:0d:a0:bf:5e:f3:2c:58:63:1e:c8:55: 81:ca:11:93:3d:2a:df:2b:9e:52:9a:71:e4:83:ac: 5b:70:d5:88:84:6d:da:79:05:9c:b4:4e:fe:0c:30: f0:9d:5c:ae:fa:e5:29:7b:49:9a:9a:6f:1f:a0:d9: 49:77:8b:a7:5c:62:1d:23:1e:9f:f9:a9:27:f3:46: 47:4e:c4:c9:6a:19:57:a1:e2:1a:0d:18:ee:67:a6: 24:22:48:61:3b:20:ac:ea:66:75:05:3d:ee:f4:3f: d0:b1:a6:7e:7c:b2:cf:84:08:79:36:94:9c:d7:b5: 87:2d:11:13:84:43:76:ee:7e:b0:06:76:57:9c:3c: 41:ff:68:9f:68:61:6a:8c:18:44:5c:4c:83:1d:f1: 36:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:27:51:9F:38:79:7E:F2:07:37:2B:1B:C7:67:D6:E9:62:B7:4F:4A X509v3 Authority Key Identifier: keyid:4A:9E:8C:61:BE:36:70:D8:65:B8:A7:9D:7D:32:79:85:50:E6:4F:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:0e:a9:18:27:68:3c:9e:03:0e:d6:66:a2:6f:38:39:65:17: ab:ec:52:6d:71:0b:fa:bf:ea:98:85:ea:80:25:dd:84:86:64: a3:89:1c:90:8d:b9:39:58:fa:c3:27:ff:88:0d:76:c3:15:02: 6d:ba:be:c7:75:85:70:c7:50:9d:4d:66:a2:71:7b:65:c2:5f: 05:d5:f0:cf:cd:a9:f0:f7:4d:e4:f5:72:b5:3e:76:90:4d:e3: 0b:85:80:6c:6e:87:ac:03:1d:7e:64:89:f4:99:ce:3a:80:12: b9:a8:c6:a0:e7:ea:77:bf:ae:40:48:08:45:40:ae:bd:c6:cc: c6:ed:a1:56:00:22:27:e9:96:cb:1f:aa:95:c1:48:7f:0a:f1: 54:08:9d:51:86:c0:08:6f:43:b1:62:de:29:c2:e3:22:72:62: b1:72:8c:6e:ea:42:fb:ce:ce:c0:c9:13:ff:65:2f:41:62:f6: 81:a9:08:fa:48:fe:e4:fa:00:e5:f6:12:3c:3c:c0:10:75:a3: d7:b0:ba:b7:3c:5b:59:31:fa:7c:4a:b2:e8:30:71:25:51:3d: 07:15:b8:ac:e0:73:1a:09:0a:03:df:60:44:e1:68:56:b3:11: 89:6a:9c:ad:89:7a:0d:56:ae:db:0d:30:f1:18:1f:ca:e3:ef: bb:17:56:ff -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdc0UqSXX82eFTw9W1JSWbhXzCLYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEE5RThDNjFCRTM2NzBEODY1QjhBNzlEN0QzMjc5ODU1 MEU2NEYyQjAeFw0yNTA4MjEwNjM3MzRaFw0yNTA4MjQxMDQ5MzRaMDMxMTAvBgNV BAMTKDVCMjc1MTlGMzg3OTdFRjIwNzM3MkIxQkM3NjdENkU5NjJCNzRGNEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1TA6TsPlccTQXg8rEZeyVB9em 2jYbMGlCqFFKSkUrgrRDNdhYnQgvrSA/uV+0U96MkNqZ19AN+xrH9Sh20TslbTk0 2DbDe6ADvshcuPcnrdga+E6BTuth5+MRO/ZswN/kA9tjsvQ7h8rq2EcNoL9e8yxY Yx7IVYHKEZM9Kt8rnlKaceSDrFtw1YiEbdp5BZy0Tv4MMPCdXK765Sl7SZqabx+g 2Ul3i6dcYh0jHp/5qSfzRkdOxMlqGVeh4hoNGO5npiQiSGE7IKzqZnUFPe70P9Cx pn58ss+ECHk2lJzXtYctEROEQ3bufrAGdlecPEH/aJ9oYWqMGERcTIMd8TaLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWydRnzh5fvIHNysbx2fW6WK3T0owHwYDVR0j BBgwFoAUSp6MYb42cNhluKedfTJ5hVDmTyswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YzQ5MzVkOC05NmEyLTQ1NjQtODVhMy0zMmE1MzE4OTM2N2UvMC80QTlFOEM2MUJF MzY3MEQ4NjVCOEE3OUQ3RDMyNzk4NTUwRTY0RjJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEE5RThDNjFCRTM2NzBEODY1QjhBNzlEN0QzMjc5ODU1MEU2 NEYyQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2M0OTM1ZDgtOTZhMi00NTY0LTg1 YTMtMzJhNTMxODkzNjdlLzAvNEE5RThDNjFCRTM2NzBEODY1QjhBNzlEN0QzMjc5 ODU1MEU2NEYyQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF8OqRgnaDyeAw7WZqJvODllF6vsUm1xC/q/ 6piF6oAl3YSGZKOJHJCNuTlY+sMn/4gNdsMVAm26vsd1hXDHUJ1NZqJxe2XCXwXV 8M/NqfD3TeT1crU+dpBN4wuFgGxuh6wDHX5kifSZzjqAErmoxqDn6ne/rkBICEVA rr3GzMbtoVYAIifplssfqpXBSH8K8VQInVGGwAhvQ7Fi3inC4yJyYrFyjG7qQvvO zsDJE/9lL0Fi9oGpCPpI/uT6AOX2Ejw8wBB1o9ewurc8W1kx+nxKsugwcSVRPQcV uKzgcxoJCgPfYEThaFazEYlqnK2Jeg1WrtsNMPEYH8rj77sXVv8= -----END CERTIFICATE-----Generated at Sat Aug 23 10:33:05 2025 by rpki-client