$ rpki-client -vvf repo-rpki.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.mft File: 4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.mft (raw, json) Hash identifier: snqqK4hChHMcr7mm51906ygRorUNBP94pxCRiyqCXn8= Subject key identifier: 02:20:AB:FD:9D:37:EF:F3:EB:55:1C:3A:FA:6D:2C:E1:08:15:85:FB Authority key identifier: 4E:CF:7D:FB:09:FB:3B:5C:21:DD:E6:61:15:0B:95:76:8B:6B:D3:19 Certificate issuer: /CN=4ECF7DFB09FB3B5C21DDE661150B95768B6BD319 Certificate serial: 024944B71856199FB8755FD4CD81D4A03A867734 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.mft Manifest number: 020C Signing time: Sat 23 Aug 2025 03:11:22 +0000 Manifest this update: Sat 23 Aug 2025 03:06:22 +0000 Manifest next update: Tue 26 Aug 2025 14:26:22 +0000 Files and hashes: 1: 3130332e3136332e3233302e302f32342d3234203d3e20313431393037.roa (hash: BplHdHRvA1GeP43VsiSGj8a+Gmuq6dP6VgR2vhuZ0uU=) 2: 3130332e3136332e3233302e302f32332d3233203d3e20313431393037.roa (hash: TWsMpo4cWVJOgLuAED46zFpQBaqLsvvEiv7xGtW44bE=) 3: 3130332e3136332e3233312e302f32342d3234203d3e20313431393037.roa (hash: yg4jobWhxttigVY/iZoK6bsKdtykwi2az+8aCa0nyW4=) 4: 4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.crl (hash: jGiGue2Roo5vL42izyCtFKDDQCze74mKJQjrV9ZO4lQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.crl rsync://repo-rpki.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 14:26:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:49:44:b7:18:56:19:9f:b8:75:5f:d4:cd:81:d4:a0:3a:86:77:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ECF7DFB09FB3B5C21DDE661150B95768B6BD319 Validity Not Before: Aug 23 03:06:22 2025 GMT Not After : Aug 26 14:26:22 2025 GMT Subject: CN=0220ABFD9D37EFF3EB551C3AFA6D2CE1081585FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:ff:e6:7b:c8:82:94:f3:d3:7e:5d:bc:d5:0d: 65:44:b2:82:c1:e1:a7:89:9f:d0:c1:ca:f4:25:5c: ef:55:24:ae:ba:a8:de:ad:e6:96:ef:c5:ad:30:86: 1d:6b:7f:55:da:1c:62:e9:1a:6d:de:73:49:ee:17: 02:43:dd:f0:8b:e7:76:d9:bd:a7:9c:89:dd:55:80: 7e:cc:c4:84:56:c6:b6:cb:46:35:6a:b2:0d:01:32: 80:af:6d:12:cc:f5:b7:30:ca:2a:d4:78:1e:ed:96: c7:b1:1d:da:ca:08:b9:1c:67:22:92:43:b0:40:73: 9b:93:28:79:7f:b7:98:de:96:be:54:13:19:7f:5f: e6:93:d9:a1:5d:93:90:e3:d1:4f:dc:17:2b:7e:31: 86:77:11:59:f1:73:e7:3c:19:01:5d:a7:d8:1c:12: a1:71:52:0e:21:b6:24:cf:67:fa:77:62:71:c6:76: 75:ee:b2:72:83:47:95:b6:7a:be:b9:13:bd:63:9a: 21:91:db:35:84:57:77:c4:eb:0d:1b:9d:26:c2:b9: 4e:67:5d:2e:c2:65:95:84:25:53:14:d8:0d:f2:38: 0c:c7:ea:6f:56:f9:7d:b3:34:ea:fc:e5:dc:a8:1c: 20:08:09:81:77:8f:86:48:5c:f4:d9:14:4c:8e:1f: f9:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:20:AB:FD:9D:37:EF:F3:EB:55:1C:3A:FA:6D:2C:E1:08:15:85:FB X509v3 Authority Key Identifier: keyid:4E:CF:7D:FB:09:FB:3B:5C:21:DD:E6:61:15:0B:95:76:8B:6B:D3:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:1b:79:a0:71:ce:5e:c7:cd:3d:4a:a4:2a:7b:2f:d6:4b:5b: 5f:f5:3e:8f:75:6e:be:eb:2c:13:1c:a5:f0:42:9a:06:e8:b2: 81:b7:24:db:f3:9e:bf:07:7c:1f:43:01:99:8a:12:61:47:14: 21:e2:fa:24:2a:52:14:a2:11:90:56:6f:7e:2c:ac:40:71:73: 5e:d3:04:20:c5:bf:a9:b1:a0:c0:77:27:0b:48:44:e9:82:be: fb:5c:40:3a:95:e1:4c:26:40:4f:b1:72:c5:f8:21:45:ec:ef: 88:bd:5e:43:8a:65:f0:d4:cf:6c:8c:69:81:29:78:a1:d3:69: 0f:c4:ec:69:be:e2:cd:cb:b2:12:88:6a:1b:f4:27:48:e5:96: c6:d4:1c:22:a7:45:f3:42:9d:62:b0:c4:5e:2a:40:b8:06:7c: ca:d0:0d:dd:b1:7b:5f:9a:fc:43:7a:39:61:c3:f8:9f:55:50: f2:0c:93:62:06:b7:32:cf:e5:dd:8a:de:c2:96:bc:a4:11:25: 8f:14:52:77:cf:f3:1a:40:24:91:74:5d:5b:86:b4:8e:13:6d: 4d:2b:40:56:e5:60:8a:d6:a1:7d:13:c2:d7:97:e7:52:34:0d: 90:86:19:9f:eb:a5:c1:0d:1d:f0:c3:50:a4:fc:d0:9b:57:17: ff:7a:73:39 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAklEtxhWGZ+4dV/UzYHUoDqGdzQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEVDRjdERkIwOUZCM0I1QzIxRERFNjYxMTUwQjk1NzY4 QjZCRDMxOTAeFw0yNTA4MjMwMzA2MjJaFw0yNTA4MjYxNDI2MjJaMDMxMTAvBgNV BAMTKDAyMjBBQkZEOUQzN0VGRjNFQjU1MUMzQUZBNkQyQ0UxMDgxNTg1RkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDz/+Z7yIKU89N+XbzVDWVEsoLB 4aeJn9DByvQlXO9VJK66qN6t5pbvxa0whh1rf1XaHGLpGm3ec0nuFwJD3fCL53bZ vaecid1VgH7MxIRWxrbLRjVqsg0BMoCvbRLM9bcwyirUeB7tlsexHdrKCLkcZyKS Q7BAc5uTKHl/t5jelr5UExl/X+aT2aFdk5Dj0U/cFyt+MYZ3EVnxc+c8GQFdp9gc EqFxUg4htiTPZ/p3YnHGdnXusnKDR5W2er65E71jmiGR2zWEV3fE6w0bnSbCuU5n XS7CZZWEJVMU2A3yOAzH6m9W+X2zNOr85dyoHCAICYF3j4ZIXPTZFEyOH/nTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAiCr/Z037/PrVRw6+m0s4QgVhfswHwYDVR0j BBgwFoAUTs99+wn7O1wh3eZhFQuVdotr0xkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZDAzNWIzYi1lNmM1LTQ3ZjgtOTliNC0xY2IwMzI2ZWRhZTUvMC80RUNGN0RGQjA5 RkIzQjVDMjFEREU2NjExNTBCOTU3NjhCNkJEMzE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEVDRjdERkIwOUZCM0I1QzIxRERFNjYxMTUwQjk1NzY4QjZC RDMxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2QwMzViM2ItZTZjNS00N2Y4LTk5 YjQtMWNiMDMyNmVkYWU1LzAvNEVDRjdERkIwOUZCM0I1QzIxRERFNjYxMTUwQjk1 NzY4QjZCRDMxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHgbeaBxzl7HzT1KpCp7L9ZLW1/1Po91br7r LBMcpfBCmgbosoG3JNvznr8HfB9DAZmKEmFHFCHi+iQqUhSiEZBWb34srEBxc17T BCDFv6mxoMB3JwtIROmCvvtcQDqV4UwmQE+xcsX4IUXs74i9XkOKZfDUz2yMaYEp eKHTaQ/E7Gm+4s3LshKIahv0J0jllsbUHCKnRfNCnWKwxF4qQLgGfMrQDd2xe1+a /EN6OWHD+J9VUPIMk2IGtzLP5d2K3sKWvKQRJY8UUnfP8xpAJJF0XVuGtI4TbU0r QFblYIrWoX0TwteX51I0DZCGGZ/rpcENHfDDUKT80JtXF/96czk= -----END CERTIFICATE-----Generated at Sat Aug 23 16:49:35 2025 by rpki-client