$ rpki-client -vvf repo-rpki.idnic.net/repo/81c9ce5a-6690-4901-9e0a-c27b319316be/0/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.mft File: 4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.mft (raw, json) Hash identifier: gtZppwySB2DoHpzzgF/tmvnxVFg4U8GqZ98Xi1WHBNo= Subject key identifier: BD:2F:77:3A:86:4C:22:46:D6:F8:BC:30:9D:6A:CA:57:EE:53:C6:37 Authority key identifier: 4C:34:08:B6:E0:82:54:22:DC:2D:07:1E:49:0B:D7:CB:1F:BD:2A:3F Certificate issuer: /CN=4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F Certificate serial: 039BC81F0E677C5BF474B41BBE3290FD54E228C7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/81c9ce5a-6690-4901-9e0a-c27b319316be/0/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.mft Manifest number: 0478 Signing time: Thu 21 Aug 2025 19:32:22 +0000 Manifest this update: Thu 21 Aug 2025 19:27:22 +0000 Manifest next update: Sun 24 Aug 2025 20:46:22 +0000 Files and hashes: 1: 4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.crl (hash: U59YyHG26kGNqa1i/dY5bMKTB7PflSp5mjVp6heZHFo=) 2: 3130332e37312e34342e302f32332d3233203d3e203436303232.roa (hash: OTd8RtkXs2m+VF5BpzyjcTZytiPZTBuAWTpwxqI9xFY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/81c9ce5a-6690-4901-9e0a-c27b319316be/0/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.crl rsync://repo-rpki.idnic.net/repo/81c9ce5a-6690-4901-9e0a-c27b319316be/0/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 20:46:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:9b:c8:1f:0e:67:7c:5b:f4:74:b4:1b:be:32:90:fd:54:e2:28:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F Validity Not Before: Aug 21 19:27:22 2025 GMT Not After : Aug 24 20:46:22 2025 GMT Subject: CN=BD2F773A864C2246D6F8BC309D6ACA57EE53C637 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:e4:c7:f9:b5:e2:48:26:e5:24:9f:3f:e9:a1: ed:71:e0:fd:8f:a7:a5:bf:e3:b3:c7:82:36:cb:29: f5:a6:2d:8e:65:d7:8b:64:3a:a1:9b:fd:ac:98:10: a0:66:3a:60:92:21:55:b2:9b:cb:9c:28:fa:d4:a7: 69:82:4b:2c:e3:d2:53:2a:da:ec:1d:ca:72:82:46: c6:d4:d9:5e:5b:51:8e:59:ee:2e:72:9f:ea:92:72: 29:ba:98:de:a9:db:84:eb:f8:1c:b1:c0:88:af:ab: 85:87:7f:23:7e:8a:b0:9f:02:2a:b8:c9:a6:6b:5f: 94:4f:dd:b3:b4:47:32:fa:a0:85:bb:b7:da:f9:39: 36:0c:92:24:61:b9:1f:bb:54:c0:c5:84:eb:46:ff: b1:10:1a:06:2b:df:47:38:4f:55:f4:20:b0:09:b4: f4:15:fe:97:a2:5d:47:03:fa:6b:f1:d1:4e:9e:c6: 21:35:03:98:d8:e0:20:71:9f:7d:44:0b:22:bd:9f: 37:cf:cb:19:61:58:86:dc:65:59:77:73:d5:3e:f6: 2e:42:75:f2:9f:bb:5b:42:40:a3:f2:fb:12:9f:57: 25:eb:95:2e:4e:10:0d:21:51:69:7a:59:cd:b2:f1: 08:aa:bd:28:7b:0b:1d:6a:81:ba:42:8d:e2:6c:3b: d6:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:2F:77:3A:86:4C:22:46:D6:F8:BC:30:9D:6A:CA:57:EE:53:C6:37 X509v3 Authority Key Identifier: keyid:4C:34:08:B6:E0:82:54:22:DC:2D:07:1E:49:0B:D7:CB:1F:BD:2A:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/81c9ce5a-6690-4901-9e0a-c27b319316be/0/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/81c9ce5a-6690-4901-9e0a-c27b319316be/0/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:21:73:58:06:f7:57:47:b5:72:0c:33:8f:0e:06:7c:17:21: 07:cd:e0:98:71:83:a4:3d:61:4a:d2:3b:82:37:fc:c1:bc:d1: 9b:96:b6:a1:39:19:24:69:a9:36:01:38:93:b1:eb:cf:68:42: ae:11:aa:a3:3d:f9:62:cc:49:f8:73:c1:2b:d2:ff:ec:58:07: 44:31:a5:4a:da:ee:f7:4b:00:81:47:65:6f:af:91:7d:6a:50: 88:25:ce:1f:bb:8f:ee:6e:87:2f:27:d1:71:dc:47:0e:8c:1f: d8:02:b1:fd:e7:b0:8d:bb:8a:b3:ad:e7:a8:56:53:2b:63:d5: e0:e8:13:3b:42:a4:d5:cd:9e:aa:2c:35:f5:93:56:93:c6:ac: bc:61:97:44:96:dd:39:c9:d4:99:79:c6:70:ea:d7:0e:39:81: 4e:48:1e:20:dd:8c:f2:51:c2:58:f2:63:5f:24:41:95:95:ad: 20:d2:c1:c4:f3:24:68:59:aa:0f:d6:a1:7b:0f:68:e2:1d:e4: 49:a3:44:17:16:33:be:dd:69:40:29:be:cf:b4:22:98:6d:e3: 9c:46:6d:b1:37:cf:70:f2:8f:4d:d0:cd:b2:bf:31:1c:6f:07: 34:73:2d:98:1b:1a:88:97:3f:25:d5:99:5e:f7:77:9e:e0:4d: 4a:7a:54:53 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA5vIHw5nfFv0dLQbvjKQ/VTiKMcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEMzNDA4QjZFMDgyNTQyMkRDMkQwNzFFNDkwQkQ3Q0Ix RkJEMkEzRjAeFw0yNTA4MjExOTI3MjJaFw0yNTA4MjQyMDQ2MjJaMDMxMTAvBgNV BAMTKEJEMkY3NzNBODY0QzIyNDZENkY4QkMzMDlENkFDQTU3RUU1M0M2MzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD15Mf5teJIJuUknz/poe1x4P2P p6W/47PHgjbLKfWmLY5l14tkOqGb/ayYEKBmOmCSIVWym8ucKPrUp2mCSyzj0lMq 2uwdynKCRsbU2V5bUY5Z7i5yn+qScim6mN6p24Tr+ByxwIivq4WHfyN+irCfAiq4 yaZrX5RP3bO0RzL6oIW7t9r5OTYMkiRhuR+7VMDFhOtG/7EQGgYr30c4T1X0ILAJ tPQV/peiXUcD+mvx0U6exiE1A5jY4CBxn31ECyK9nzfPyxlhWIbcZVl3c9U+9i5C dfKfu1tCQKPy+xKfVyXrlS5OEA0hUWl6Wc2y8QiqvSh7Cx1qgbpCjeJsO9aHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvS93OoZMIkbW+LwwnWrKV+5TxjcwHwYDVR0j BBgwFoAUTDQItuCCVCLcLQceSQvXyx+9Kj8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MWM5Y2U1YS02NjkwLTQ5MDEtOWUwYS1jMjdiMzE5MzE2YmUvMC80QzM0MDhCNkUw ODI1NDIyREMyRDA3MUU0OTBCRDdDQjFGQkQyQTNGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEMzNDA4QjZFMDgyNTQyMkRDMkQwNzFFNDkwQkQ3Q0IxRkJE MkEzRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODFjOWNlNWEtNjY5MC00OTAxLTll MGEtYzI3YjMxOTMxNmJlLzAvNEMzNDA4QjZFMDgyNTQyMkRDMkQwNzFFNDkwQkQ3 Q0IxRkJEMkEzRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABwhc1gG91dHtXIMM48OBnwXIQfN4Jhxg6Q9 YUrSO4I3/MG80ZuWtqE5GSRpqTYBOJOx689oQq4RqqM9+WLMSfhzwSvS/+xYB0Qx pUra7vdLAIFHZW+vkX1qUIglzh+7j+5uhy8n0XHcRw6MH9gCsf3nsI27irOt56hW Uytj1eDoEztCpNXNnqosNfWTVpPGrLxhl0SW3TnJ1Jl5xnDq1w45gU5IHiDdjPJR wljyY18kQZWVrSDSwcTzJGhZqg/WoXsPaOId5EmjRBcWM77daUApvs+0Ipht45xG bbE3z3Dyj03QzbK/MRxvBzRzLZgbGoiXPyXVmV73d57gTUp6VFM= -----END CERTIFICATE-----Generated at Sat Aug 23 17:20:06 2025 by rpki-client