$ rpki-client -vvf repo-rpki.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.mft File: 4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.mft (raw, json) Hash identifier: N4Uq8p3R8CB2JUjH/kaIHf9coS0wGP7i92dmAprflo4= Subject key identifier: 6D:50:01:AC:43:B8:87:80:90:CD:C5:26:84:02:5F:67:AC:89:D2:CF Authority key identifier: 4D:D0:C9:5B:43:B8:B6:53:60:1F:ED:39:AB:01:0E:1D:D0:DC:17:F2 Certificate issuer: /CN=4DD0C95B43B8B653601FED39AB010E1DD0DC17F2 Certificate serial: 22F84BB868D75EEF1B6BAB9BED3F36A547BDA112 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.mft Manifest number: 0500 Signing time: Fri 22 Aug 2025 11:11:09 +0000 Manifest this update: Fri 22 Aug 2025 11:06:09 +0000 Manifest next update: Mon 25 Aug 2025 22:28:09 +0000 Files and hashes: 1: 323030313a6466323a626530303a3a2f34382d3438203d3e20313335343537.roa (hash: Y9NxdO2uUmExgp5HT4f9RxRPtt01n/EQdy4OmAOBACk=) 2: 34352e3132302e3234342e302f32322d3234203d3e20313335343537.roa (hash: PuA0O7on+Tv+yi4m5sFC8JVnpsZv77062xaCNSQ10PY=) 3: 4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.crl (hash: lHPsC/T+NbgfG3dmgbhBvaEybHOkZsfg0sLuGiF3+rg=) 4: 3130332e36362e35352e302f32342d3234203d3e20313335343537.roa (hash: ljnKYF4WQqtb0yfOcUdymtJM6+GnXJyNyFLsK7GZ494=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.crl rsync://repo-rpki.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 22:28:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:f8:4b:b8:68:d7:5e:ef:1b:6b:ab:9b:ed:3f:36:a5:47:bd:a1:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4DD0C95B43B8B653601FED39AB010E1DD0DC17F2 Validity Not Before: Aug 22 11:06:09 2025 GMT Not After : Aug 25 22:28:09 2025 GMT Subject: CN=6D5001AC43B8878090CDC52684025F67AC89D2CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:28:2c:90:16:80:42:47:e8:50:ed:ef:bf:d8: 3f:67:dc:7f:8d:12:d6:0c:33:4b:04:b5:b9:97:6c: 7d:1e:f9:f8:23:4d:09:ab:6d:dc:7f:d5:84:26:ef: 66:dc:0b:ec:45:2b:2c:11:df:98:67:31:89:98:bc: bd:7b:4f:b2:bc:30:f6:5a:a1:18:95:c4:47:cb:23: 66:22:27:11:95:f8:41:db:90:04:25:75:5f:f6:15: 0f:58:64:63:16:1a:3a:1f:95:51:f6:a3:ad:bc:24: 33:a0:a5:54:7b:8b:9f:eb:43:2b:57:48:94:ec:9c: eb:49:ea:8a:95:42:39:f4:48:87:dc:1f:74:7b:a4: 28:91:1f:67:af:07:08:e0:37:45:fb:44:af:32:b1: b2:7d:49:18:de:72:3c:4d:ba:5b:0d:7e:dd:5c:68: 0e:57:36:9d:0c:03:56:c6:f4:aa:9e:57:98:6a:fc: 89:55:48:9d:40:24:80:09:40:76:85:06:20:20:7d: 9a:16:6e:e7:85:fa:36:b0:ce:c7:e9:a7:b3:30:38: 34:d8:fd:c8:ee:bf:3e:9f:19:37:a2:f6:25:8e:03: d5:ba:f0:45:cd:60:22:07:ff:3f:89:32:bd:94:6e: 8c:22:39:b5:94:5c:8f:8d:e1:ff:d9:43:c5:32:52: 76:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:50:01:AC:43:B8:87:80:90:CD:C5:26:84:02:5F:67:AC:89:D2:CF X509v3 Authority Key Identifier: keyid:4D:D0:C9:5B:43:B8:B6:53:60:1F:ED:39:AB:01:0E:1D:D0:DC:17:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:3b:7e:31:cf:a3:4d:bc:80:ac:b1:39:e4:2b:91:99:22:24: 96:69:74:0f:ae:21:4d:28:98:32:fb:35:43:8d:8c:ac:66:fa: f9:cb:37:e6:32:2e:49:26:06:b2:09:14:e6:2a:26:63:40:2c: 57:1c:d6:29:4c:7e:47:54:44:5c:79:7a:ac:87:20:67:be:56: ea:15:b5:af:ee:c4:2b:61:03:9a:a3:d8:e1:81:c0:0b:d1:5a: 94:86:01:aa:3e:25:30:4c:f5:6c:a8:ff:bd:8d:ca:b7:27:7a: fb:4e:0e:c1:5d:19:ab:8c:9f:c3:c9:d0:2a:ec:45:c9:18:18: 25:b2:2c:bb:b1:91:e2:e0:db:27:20:ff:61:17:6a:c8:29:24: 1b:d0:f1:2e:55:be:cd:09:d7:51:1a:df:e6:ff:57:11:5f:fb: ad:ca:bf:4e:3a:92:9b:20:a6:1d:00:6d:9f:b3:ff:ed:95:6c: b7:88:19:dd:a5:75:e2:f1:2f:d1:3a:35:30:66:fc:ed:bc:b5: 12:2c:3e:df:8a:c3:98:d5:ae:21:77:59:e5:d9:48:5e:3a:0d: a2:39:7c:25:43:54:e4:24:34:55:64:c8:0d:90:37:7a:f9:92: 2c:a6:0d:9f:87:2f:62:05:45:fa:96:ee:7b:81:fd:bd:ba:3c: 87:b3:92:98 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIvhLuGjXXu8ba6ub7T82pUe9oRIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEREMEM5NUI0M0I4QjY1MzYwMUZFRDM5QUIwMTBFMURE MERDMTdGMjAeFw0yNTA4MjIxMTA2MDlaFw0yNTA4MjUyMjI4MDlaMDMxMTAvBgNV BAMTKDZENTAwMUFDNDNCODg3ODA5MENEQzUyNjg0MDI1RjY3QUM4OUQyQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9KCyQFoBCR+hQ7e+/2D9n3H+N EtYMM0sEtbmXbH0e+fgjTQmrbdx/1YQm72bcC+xFKywR35hnMYmYvL17T7K8MPZa oRiVxEfLI2YiJxGV+EHbkAQldV/2FQ9YZGMWGjoflVH2o628JDOgpVR7i5/rQytX SJTsnOtJ6oqVQjn0SIfcH3R7pCiRH2evBwjgN0X7RK8ysbJ9SRjecjxNulsNft1c aA5XNp0MA1bG9KqeV5hq/IlVSJ1AJIAJQHaFBiAgfZoWbueF+jawzsfpp7MwODTY /cjuvz6fGTei9iWOA9W68EXNYCIH/z+JMr2UbowiObWUXI+N4f/ZQ8UyUnalAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbVABrEO4h4CQzcUmhAJfZ6yJ0s8wHwYDVR0j BBgwFoAUTdDJW0O4tlNgH+05qwEOHdDcF/IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 Mjc4MGY4NS1lZjJmLTRjZjgtYTRiOC01MjI1YzQ1Yjk2YTEvMC80REQwQzk1QjQz QjhCNjUzNjAxRkVEMzlBQjAxMEUxREQwREMxN0YyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEREMEM5NUI0M0I4QjY1MzYwMUZFRDM5QUIwMTBFMUREMERD MTdGMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODI3ODBmODUtZWYyZi00Y2Y4LWE0 YjgtNTIyNWM0NWI5NmExLzAvNEREMEM5NUI0M0I4QjY1MzYwMUZFRDM5QUIwMTBF MUREMERDMTdGMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACk7fjHPo028gKyxOeQrkZkiJJZpdA+uIU0o mDL7NUONjKxm+vnLN+YyLkkmBrIJFOYqJmNALFcc1ilMfkdURFx5eqyHIGe+VuoV ta/uxCthA5qj2OGBwAvRWpSGAao+JTBM9Wyo/72NyrcnevtODsFdGauMn8PJ0Crs RckYGCWyLLuxkeLg2ycg/2EXasgpJBvQ8S5Vvs0J11Ea3+b/VxFf+63Kv046kpsg ph0AbZ+z/+2VbLeIGd2ldeLxL9E6NTBm/O28tRIsPt+Kw5jVriF3WeXZSF46DaI5 fCVDVOQkNFVkyA2QN3r5kiymDZ+HL2IFRfqW7nuB/b26PIezkpg= -----END CERTIFICATE-----Generated at Sat Aug 23 14:04:50 2025 by rpki-client