$ rpki-client -vvf repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.mft File: 4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.mft (raw, json) Hash identifier: lBr8Lma8h7mKF4RZTVG8krQ/I/+2+WszJOChspunW2k= Subject key identifier: 9F:39:68:80:6E:5E:0C:74:21:6F:2C:BE:A2:41:57:50:3A:F7:B2:93 Authority key identifier: 4B:F1:DC:C0:BC:C5:B1:A4:B6:BE:52:6A:75:FF:33:39:7F:C3:87:87 Certificate issuer: /CN=4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787 Certificate serial: 37EFA7853F253F793C75528811426DC18F3E0AA2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.mft Manifest number: 04F6 Signing time: Sun 29 Jun 2025 12:20:55 +0000 Manifest this update: Sun 29 Jun 2025 12:15:55 +0000 Manifest next update: Wed 02 Jul 2025 17:58:55 +0000 Files and hashes: 1: 4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.crl (hash: EWpBSKxOni8HI4lFTrdtrmOwChCrF+V1AIYiagq7+TM=) 2: 3232332e32352e3130342e302f32342d3234203d3e20313530323238.roa (hash: 5Yjn1xzYUyXHAIu8ieYmhhXRGkoBPybJZRq7aWT18y0=) 3: 3232332e32352e3130362e302f32342d3234203d3e20313336383733.roa (hash: S8lyObQBOuPDRueBj8YjzK0Yqke0dcnMl7Vcc48vuVs=) 4: 3232332e32352e3131302e302f32342d3234203d3e20313336383733.roa (hash: d7TlxPMnZWo9NiIWBhiGrIW1xBkbQUYDXZcwgsom8Dk=) 5: 323430323a613530303a3a2f33322d3332203d3e2034383231.roa (hash: moNwAWlPkj0rtokbSnZwVDheKPDbut9HTHNYooRQM7Q=) 6: 3232332e32352e3130392e302f32342d3234203d3e20313439373138.roa (hash: d3eM98YfiQHd35IoK+KK/VXjFcXTY4k6PTjZu1TQR90=) 7: 3232332e32352e3130352e302f32342d3234203d3e2034383231.roa (hash: 8gu4g1bdcjin/i0TEIycNgxzwZksIdfr4ERNzQVV1jI=) 8: 3232332e32352e3130372e302f32342d3234203d3e20313439373138.roa (hash: DrBIeEQt6yULPW0r6792EagtEDf0ZZCsQyk/153rumY=) 9: 3232332e32352e3131312e302f32342d3234203d3e20313431363037.roa (hash: ZqT27QjOP9C+x+HxEBPLWbwm+mlgqdclma4hL/DLOAM=) 10: 3232332e32352e39362e302f32312d3234203d3e2039333431.roa (hash: Qjv/mGfQRB5AB46dWcHhxxNcs3aS1PJFtKLeGoBkxi0=) 11: 3232332e32352e3130382e302f32342d3234203d3e2034383231.roa (hash: kXwkhbJ+oGBQpIPdrmdbXU4UMfG2qJFbyPtaW45RBFo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.crl rsync://repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 17:58:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:ef:a7:85:3f:25:3f:79:3c:75:52:88:11:42:6d:c1:8f:3e:0a:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787 Validity Not Before: Jun 29 12:15:55 2025 GMT Not After : Jul 2 17:58:55 2025 GMT Subject: CN=9F3968806E5E0C74216F2CBEA24157503AF7B293 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:8d:6e:3b:43:a1:91:88:6a:e4:90:eb:e0:93: 44:97:e0:4e:df:b8:db:6a:36:c8:69:99:91:5e:e4: 1c:71:5f:fe:7c:ad:3b:85:8f:b4:be:a2:94:e5:ed: df:2f:f1:0e:9d:08:3c:37:e9:c5:e1:32:5c:20:99: 7f:3f:01:0d:6b:7b:b3:62:d6:f3:34:d2:df:74:fd: 35:48:be:8c:5d:2c:ae:eb:0c:8a:45:24:ac:0f:1e: fb:6f:fc:28:03:fe:de:bf:07:e3:87:22:0c:37:6c: 3e:67:25:d8:6c:85:13:13:61:d2:80:9c:f2:ae:cb: c7:8e:63:cb:43:15:30:f6:a8:3a:96:64:f0:4c:08: 64:60:81:c5:e9:f8:8a:94:b4:6a:a0:f4:a5:17:6a: 1a:8b:95:dd:63:7e:03:5d:ce:62:f4:a6:a2:8b:41: 7b:9b:27:27:5e:a5:65:45:df:35:23:e0:78:7f:1f: 79:d1:a0:ab:e8:dc:29:8d:48:40:54:54:9c:76:ac: 5b:9e:e1:bc:ab:31:09:6b:dd:b0:4b:b5:6d:6e:37: 7d:2b:8d:27:52:b9:23:c4:57:d0:5c:1a:05:55:bf: 7a:9d:9b:ec:e7:0d:6c:e7:ac:ae:d1:25:21:f5:88: 84:92:fd:03:ec:3c:f5:6d:de:1a:c6:45:f1:86:3c: 1c:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:39:68:80:6E:5E:0C:74:21:6F:2C:BE:A2:41:57:50:3A:F7:B2:93 X509v3 Authority Key Identifier: keyid:4B:F1:DC:C0:BC:C5:B1:A4:B6:BE:52:6A:75:FF:33:39:7F:C3:87:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:2f:47:c3:7a:7c:45:61:76:8e:a1:8b:72:4f:70:8e:1c:37: aa:fc:9d:8c:c7:d5:d6:86:7c:f7:45:8a:6b:16:18:38:a8:18: 5a:3c:1f:1b:17:34:7c:6e:a0:94:29:60:f5:ca:eb:88:e9:1f: a1:b6:68:71:6a:be:70:fc:e3:94:fb:05:8d:69:23:11:6b:c7: b1:3e:d7:cc:7c:9b:79:bd:bd:35:9e:ef:df:44:dc:ae:24:22: 84:e3:13:58:11:34:92:ee:25:1d:3c:16:ce:19:e8:30:dd:2f: 62:bc:eb:c5:a7:ba:39:12:d8:eb:53:23:71:f8:ab:99:b6:b4: fe:83:f0:0f:d0:a9:c3:b3:bf:b5:c8:61:37:4e:4f:23:46:f5: 86:17:bf:2b:b6:74:46:24:54:02:e2:8c:7d:58:84:9b:5d:9b: 2e:8b:a0:df:37:f9:44:50:27:48:14:f7:48:96:76:d1:f2:a1: a5:7f:66:fb:19:31:4b:ea:70:68:cc:8e:01:b3:39:44:2a:e3: 4d:b7:81:3b:37:76:9b:f8:c5:ef:94:4d:52:c9:6d:51:d7:78: 01:54:b4:d7:55:39:e9:13:28:fb:40:d0:46:8b:f3:d7:f6:39: 36:5e:87:84:b7:56:db:e9:39:63:d0:ce:1c:35:76:64:58:5b: 32:a3:86:8a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN++nhT8lP3k8dVKIEUJtwY8+CqIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEJGMURDQzBCQ0M1QjFBNEI2QkU1MjZBNzVGRjMzMzk3 RkMzODc4NzAeFw0yNTA2MjkxMjE1NTVaFw0yNTA3MDIxNzU4NTVaMDMxMTAvBgNV BAMTKDlGMzk2ODgwNkU1RTBDNzQyMTZGMkNCRUEyNDE1NzUwM0FGN0IyOTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZjW47Q6GRiGrkkOvgk0SX4E7f uNtqNshpmZFe5BxxX/58rTuFj7S+opTl7d8v8Q6dCDw36cXhMlwgmX8/AQ1re7Ni 1vM00t90/TVIvoxdLK7rDIpFJKwPHvtv/CgD/t6/B+OHIgw3bD5nJdhshRMTYdKA nPKuy8eOY8tDFTD2qDqWZPBMCGRggcXp+IqUtGqg9KUXahqLld1jfgNdzmL0pqKL QXubJydepWVF3zUj4Hh/H3nRoKvo3CmNSEBUVJx2rFue4byrMQlr3bBLtW1uN30r jSdSuSPEV9BcGgVVv3qdm+znDWznrK7RJSH1iISS/QPsPPVt3hrGRfGGPBzxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnzlogG5eDHQhbyy+okFXUDr3spMwHwYDVR0j BBgwFoAUS/HcwLzFsaS2vlJqdf8zOX/Dh4cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZDI1NDQxOS01M2JlLTRhZDQtYmY3Zi0yOWY4OTEyNTIzZDAvMC80QkYxRENDMEJD QzVCMUE0QjZCRTUyNkE3NUZGMzMzOTdGQzM4Nzg3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEJGMURDQzBCQ0M1QjFBNEI2QkU1MjZBNzVGRjMzMzk3RkMz ODc4Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGQyNTQ0MTktNTNiZS00YWQ0LWJm N2YtMjlmODkxMjUyM2QwLzAvNEJGMURDQzBCQ0M1QjFBNEI2QkU1MjZBNzVGRjMz Mzk3RkMzODc4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFIvR8N6fEVhdo6hi3JPcI4cN6r8nYzH1daG fPdFimsWGDioGFo8HxsXNHxuoJQpYPXK64jpH6G2aHFqvnD845T7BY1pIxFrx7E+ 18x8m3m9vTWe799E3K4kIoTjE1gRNJLuJR08Fs4Z6DDdL2K868WnujkS2OtTI3H4 q5m2tP6D8A/QqcOzv7XIYTdOTyNG9YYXvyu2dEYkVALijH1YhJtdmy6LoN83+URQ J0gU90iWdtHyoaV/ZvsZMUvqcGjMjgGzOUQq4023gTs3dpv4xe+UTVLJbVHXeAFU tNdVOekTKPtA0EaL89f2OTZeh4S3VtvpOWPQzhw1dmRYWzKjhoo= -----END CERTIFICATE-----Generated at Mon Jun 30 11:55:14 2025 by rpki-client