$ rpki-client -vvf repo-rpki.idnic.net/repo/8216f1bd-958e-47f5-948e-87e11e92e601/0/4E9222CE79B9CFEF260C837523FE2684407D535B.mft File: 4E9222CE79B9CFEF260C837523FE2684407D535B.mft (raw, json) Hash identifier: kJZlTvO7cJnQaonkFaKPe88ykasH/L6JcHhnzcvK6zc= Subject key identifier: B8:23:BD:4F:41:92:27:A0:4B:11:D1:10:91:B1:B3:9B:3F:12:83:24 Authority key identifier: 4E:92:22:CE:79:B9:CF:EF:26:0C:83:75:23:FE:26:84:40:7D:53:5B Certificate issuer: /CN=4E9222CE79B9CFEF260C837523FE2684407D535B Certificate serial: 1CFD1FA6BCAF626C3AFC4A0716F7FF0283B25D03 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E9222CE79B9CFEF260C837523FE2684407D535B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8216f1bd-958e-47f5-948e-87e11e92e601/0/4E9222CE79B9CFEF260C837523FE2684407D535B.mft Manifest number: 5B Signing time: Sun 29 Jun 2025 02:40:54 +0000 Manifest this update: Sun 29 Jun 2025 02:35:54 +0000 Manifest next update: Wed 02 Jul 2025 02:55:54 +0000 Files and hashes: 1: 3130332e3234322e37362e302f32342d3234203d3e20313338303737.roa (hash: fY5F0deZT0l+MXU2BONYTZar4gdW00dXgFRwhNWKnfo=) 2: 4E9222CE79B9CFEF260C837523FE2684407D535B.crl (hash: rkPN+W9TeDaCWCuE3uNJI2iSqmo/PwHJ0rQ7p5xyolE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8216f1bd-958e-47f5-948e-87e11e92e601/0/4E9222CE79B9CFEF260C837523FE2684407D535B.crl rsync://repo-rpki.idnic.net/repo/8216f1bd-958e-47f5-948e-87e11e92e601/0/4E9222CE79B9CFEF260C837523FE2684407D535B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E9222CE79B9CFEF260C837523FE2684407D535B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 02:55:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:fd:1f:a6:bc:af:62:6c:3a:fc:4a:07:16:f7:ff:02:83:b2:5d:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4E9222CE79B9CFEF260C837523FE2684407D535B Validity Not Before: Jun 29 02:35:54 2025 GMT Not After : Jul 2 02:55:54 2025 GMT Subject: CN=B823BD4F419227A04B11D11091B1B39B3F128324 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:6a:a6:bb:5e:59:8c:68:99:f0:5a:ba:a7:bb: f2:ee:c4:b3:f1:51:e6:74:43:c2:9c:a8:df:5a:ac: 8f:85:61:f3:b0:32:dc:be:eb:cd:45:c9:6e:ee:d4: ba:ae:d7:8a:70:32:7d:65:b0:b3:2e:ac:41:2a:9f: 88:6f:ca:78:3b:0e:e2:09:39:0b:e5:ec:19:d2:88: 9a:0d:d6:34:bb:22:89:e3:b8:72:a5:5b:58:4c:d3: c8:57:da:55:2b:c2:99:d5:51:9d:8c:3c:ed:54:56: 7a:a6:b3:2c:18:b1:3b:fa:96:7a:8e:6f:00:5e:45: 4f:7a:ea:92:17:d1:56:30:16:66:ee:fd:ec:31:16: 4f:5a:98:8f:d2:20:2c:d6:f4:eb:0b:6a:45:14:fa: a2:cb:fa:e9:5d:4f:60:8f:64:61:a0:87:f5:cc:c0: 84:9b:09:ef:98:1b:1f:7b:d8:77:93:c2:cb:03:85: 93:8d:02:8a:e7:bb:25:f4:76:15:ea:87:be:e0:7d: b3:e3:a8:e6:a0:8a:4c:2e:75:11:b7:83:f3:29:d1: cd:f1:8f:6f:be:99:de:15:30:2f:c3:fd:01:63:46: 35:67:09:08:f9:41:54:59:f1:6a:5c:1e:13:41:6a: 33:87:17:50:f0:b6:94:81:e9:a6:81:0b:28:00:ba: c1:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:23:BD:4F:41:92:27:A0:4B:11:D1:10:91:B1:B3:9B:3F:12:83:24 X509v3 Authority Key Identifier: keyid:4E:92:22:CE:79:B9:CF:EF:26:0C:83:75:23:FE:26:84:40:7D:53:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8216f1bd-958e-47f5-948e-87e11e92e601/0/4E9222CE79B9CFEF260C837523FE2684407D535B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E9222CE79B9CFEF260C837523FE2684407D535B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8216f1bd-958e-47f5-948e-87e11e92e601/0/4E9222CE79B9CFEF260C837523FE2684407D535B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:24:96:b0:62:36:df:fd:c6:db:ce:da:d6:ae:b2:e6:0b:5a: b9:3a:c0:d8:ec:54:b9:23:5b:a2:96:39:93:c6:d5:62:70:0b: 30:c4:e3:4e:54:17:e9:15:02:ca:ce:60:77:fd:3a:ac:8d:09: 65:bd:fe:57:5e:d3:df:c6:3c:2e:49:32:43:81:8e:88:31:14: 01:f3:c2:19:e9:16:31:ed:df:8d:a2:19:c2:e2:93:fb:6e:40: 60:dd:95:15:aa:26:7b:4c:53:9c:58:57:f7:4c:80:a5:a8:f5: 3d:08:9c:61:1a:cb:a6:3a:77:9d:f3:47:b0:5e:62:75:e9:7f: dd:99:0e:20:28:ee:c8:31:d5:42:bd:41:27:e9:4f:9d:8d:16: b4:e3:8b:e9:16:ff:70:2e:db:8e:11:b4:33:37:e9:43:88:dc: aa:0b:3d:b0:36:bb:4e:93:40:5e:20:82:a0:7d:5e:93:6f:09: 27:e1:88:5b:9c:41:4c:b3:2d:84:c2:39:9c:d9:42:db:a4:6c: 81:bf:f8:01:27:f2:16:ba:50:52:90:85:73:80:d2:30:ce:58: af:76:0d:6b:0f:86:e3:48:ae:46:cd:3e:7d:bd:fa:e0:73:90: 03:86:5a:03:9a:f7:91:3e:66:da:e5:22:e2:ae:bb:96:7a:cb: 4f:26:2a:2d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHP0fpryvYmw6/EoHFvf/AoOyXQMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEU5MjIyQ0U3OUI5Q0ZFRjI2MEM4Mzc1MjNGRTI2ODQ0 MDdENTM1QjAeFw0yNTA2MjkwMjM1NTRaFw0yNTA3MDIwMjU1NTRaMDMxMTAvBgNV BAMTKEI4MjNCRDRGNDE5MjI3QTA0QjExRDExMDkxQjFCMzlCM0YxMjgzMjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9aqa7XlmMaJnwWrqnu/LuxLPx UeZ0Q8KcqN9arI+FYfOwMty+681FyW7u1Lqu14pwMn1lsLMurEEqn4hvyng7DuIJ OQvl7BnSiJoN1jS7IonjuHKlW1hM08hX2lUrwpnVUZ2MPO1UVnqmsywYsTv6lnqO bwBeRU966pIX0VYwFmbu/ewxFk9amI/SICzW9OsLakUU+qLL+uldT2CPZGGgh/XM wISbCe+YGx972HeTwssDhZONAornuyX0dhXqh77gfbPjqOagikwudRG3g/Mp0c3x j2++md4VMC/D/QFjRjVnCQj5QVRZ8WpcHhNBajOHF1DwtpSB6aaBCygAusEjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuCO9T0GSJ6BLEdEQkbGzmz8SgyQwHwYDVR0j BBgwFoAUTpIiznm5z+8mDIN1I/4mhEB9U1swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MjE2ZjFiZC05NThlLTQ3ZjUtOTQ4ZS04N2UxMWU5MmU2MDEvMC80RTkyMjJDRTc5 QjlDRkVGMjYwQzgzNzUyM0ZFMjY4NDQwN0Q1MzVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEU5MjIyQ0U3OUI5Q0ZFRjI2MEM4Mzc1MjNGRTI2ODQ0MDdE NTM1Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODIxNmYxYmQtOTU4ZS00N2Y1LTk0 OGUtODdlMTFlOTJlNjAxLzAvNEU5MjIyQ0U3OUI5Q0ZFRjI2MEM4Mzc1MjNGRTI2 ODQ0MDdENTM1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGoklrBiNt/9xtvO2tausuYLWrk6wNjsVLkj W6KWOZPG1WJwCzDE405UF+kVAsrOYHf9OqyNCWW9/lde09/GPC5JMkOBjogxFAHz whnpFjHt342iGcLik/tuQGDdlRWqJntMU5xYV/dMgKWo9T0InGEay6Y6d53zR7Be YnXpf92ZDiAo7sgx1UK9QSfpT52NFrTji+kW/3Au244RtDM36UOI3KoLPbA2u06T QF4ggqB9XpNvCSfhiFucQUyzLYTCOZzZQtukbIG/+AEn8ha6UFKQhXOA0jDOWK92 DWsPhuNIrkbNPn29+uBzkAOGWgOa95E+ZtrlIuKuu5Z6y08mKi0= -----END CERTIFICATE-----Generated at Mon Jun 30 13:34:40 2025 by rpki-client