$ rpki-client -vvf repo-rpki.idnic.net/repo/90de231f-fb8a-427a-aa36-0a3fc972328d/0/4DEFBDD9854BE8D1E28F7330A0B802C3EE6AD1F9.mft File: 4DEFBDD9854BE8D1E28F7330A0B802C3EE6AD1F9.mft (raw, json) Hash identifier: 7jA9FHbS347Ng7yW/KOJmjdIC0upnpd5GA1yhwN/5pw= Subject key identifier: 5F:FB:CF:8D:57:6C:48:1F:76:28:4D:DB:49:27:53:E6:9C:97:A8:C1 Authority key identifier: 4D:EF:BD:D9:85:4B:E8:D1:E2:8F:73:30:A0:B8:02:C3:EE:6A:D1:F9 Certificate issuer: /CN=4DEFBDD9854BE8D1E28F7330A0B802C3EE6AD1F9 Certificate serial: 413BC95F4183A2BEB07E0CAFFE86E058213B4F48 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DEFBDD9854BE8D1E28F7330A0B802C3EE6AD1F9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/90de231f-fb8a-427a-aa36-0a3fc972328d/0/4DEFBDD9854BE8D1E28F7330A0B802C3EE6AD1F9.mft Manifest number: 04F1 Signing time: Sun 29 Jun 2025 16:50:01 +0000 Manifest this update: Sun 29 Jun 2025 16:45:01 +0000 Manifest next update: Thu 03 Jul 2025 02:40:01 +0000 Files and hashes: 1: 3130332e3132352e3131362e302f32322d3232203d3e20313338313032.roa (hash: y8ADkM9INdo4B5YpCY3N+ofggmxgoMYRUDnTX9TJFJg=) 2: 3130332e3132352e3131372e302f32342d3234203d3e20313338313032.roa (hash: ZMeuRsHtVSwXmTeOlP2EBAn6yOUfUCueHpz1hHvcg+E=) 3: 4DEFBDD9854BE8D1E28F7330A0B802C3EE6AD1F9.crl (hash: 2xweS4Iv/u7KtRH8LIMD7Tt/vYSA+V2+lToazE6UtVE=) 4: 3130332e3132352e3131392e302f32342d3234203d3e20313338313032.roa (hash: 8llNfwrUTFXUaOZxOG2FdVdGooONQqY0triO7boP8ZE=) 5: 3130332e3132352e3131382e302f32342d3234203d3e20313338313032.roa (hash: KvTsgODxSTYXSwM09nr1mlGXAPY3uRhzMZlaVsc+OC4=) 6: 3130332e3132352e3131362e302f32342d3234203d3e20313338313032.roa (hash: RbezRzshmathyV4EoiQ/5deOypXsD7H6MYLkfw1/pRw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/90de231f-fb8a-427a-aa36-0a3fc972328d/0/4DEFBDD9854BE8D1E28F7330A0B802C3EE6AD1F9.crl rsync://repo-rpki.idnic.net/repo/90de231f-fb8a-427a-aa36-0a3fc972328d/0/4DEFBDD9854BE8D1E28F7330A0B802C3EE6AD1F9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DEFBDD9854BE8D1E28F7330A0B802C3EE6AD1F9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 02:40:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:3b:c9:5f:41:83:a2:be:b0:7e:0c:af:fe:86:e0:58:21:3b:4f:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4DEFBDD9854BE8D1E28F7330A0B802C3EE6AD1F9 Validity Not Before: Jun 29 16:45:01 2025 GMT Not After : Jul 3 02:40:01 2025 GMT Subject: CN=5FFBCF8D576C481F76284DDB492753E69C97A8C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:28:b8:73:88:c9:ef:ed:ba:aa:2a:48:5d:49: 6c:db:e9:39:af:16:b5:27:cf:f4:e8:ff:de:3f:2a: 2a:9a:80:fa:7d:ff:d1:84:ee:ef:4c:5f:23:aa:12: 20:c6:ec:21:26:d0:db:69:de:39:fb:2e:14:16:29: d2:e8:8a:38:46:f1:80:83:d0:ab:f6:cc:3f:44:6d: 8c:69:cb:9f:8d:5d:3f:03:cb:77:0a:46:b6:6f:a1: 75:ee:b5:03:37:4b:fa:db:0d:68:ab:2e:95:5f:c1: 98:7a:5b:4e:e9:90:aa:37:b2:fc:07:00:8c:ee:25: 8e:24:86:c1:16:9e:f4:fe:cb:9b:3c:84:0f:27:2f: cc:9c:5f:cb:f4:6b:c0:ed:bf:04:97:89:69:7f:58: 7c:01:ea:b4:e2:3c:6f:b0:c8:3a:8a:fb:be:8f:73: 64:5d:aa:76:b5:ee:1a:26:94:c9:e3:52:3d:e6:d1: 56:2c:fc:f2:a1:78:70:64:94:40:e3:40:ee:e4:42: 23:a5:bf:6f:2b:c5:5f:c2:99:3b:9f:e6:16:15:1c: 2b:f7:e4:49:7d:30:ab:86:3e:ab:44:7e:d2:c8:7f: 86:a8:0d:50:f1:d0:33:20:29:dd:32:2b:19:83:96: 1a:52:21:95:64:50:4b:57:77:40:fb:2f:ff:3b:f9: e1:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:FB:CF:8D:57:6C:48:1F:76:28:4D:DB:49:27:53:E6:9C:97:A8:C1 X509v3 Authority Key Identifier: keyid:4D:EF:BD:D9:85:4B:E8:D1:E2:8F:73:30:A0:B8:02:C3:EE:6A:D1:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/90de231f-fb8a-427a-aa36-0a3fc972328d/0/4DEFBDD9854BE8D1E28F7330A0B802C3EE6AD1F9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DEFBDD9854BE8D1E28F7330A0B802C3EE6AD1F9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/90de231f-fb8a-427a-aa36-0a3fc972328d/0/4DEFBDD9854BE8D1E28F7330A0B802C3EE6AD1F9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:a8:72:02:6c:8e:b7:e9:bc:96:d3:22:cf:31:eb:4f:58:58: 3b:18:75:a2:2d:dd:f7:a6:e3:97:74:f4:20:89:23:5b:1f:7b: 2a:c3:2c:0c:04:ef:91:70:11:65:44:2a:fb:94:4b:5a:23:ad: cd:e4:55:9d:a6:b0:c1:e9:fe:e9:8a:2d:17:e5:c1:49:f0:e8: dd:fc:42:a3:87:37:e7:b3:06:fd:bb:db:e5:83:b6:45:0f:ee: d3:a1:b0:ad:f6:7e:81:51:ed:dd:df:5c:f1:13:ae:2a:81:49: c2:23:a9:97:b2:7d:6a:9f:1a:e9:6c:34:c1:30:03:b8:65:7d: c4:a3:a9:cb:af:a5:70:92:74:b8:6a:d4:fe:40:e2:1c:96:46: a0:d7:57:94:3c:d3:a8:0f:7d:56:cc:36:58:a9:b1:98:36:46: d0:29:a9:ac:94:d3:8f:a2:23:15:a2:6a:29:7d:82:05:23:c4: 00:7a:4d:8f:10:4b:27:d0:5c:36:d6:58:ca:bd:87:47:b7:ee: 0e:9b:1b:85:11:92:80:88:ba:72:d0:bc:69:e8:83:49:f1:d1: 08:49:9d:6b:a1:2d:f3:91:58:1c:fd:85:ac:c7:27:59:6b:56: 9a:e0:9d:9f:7f:74:1c:af:49:16:c4:91:0b:76:46:fe:cb:16: a7:79:57:10 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQTvJX0GDor6wfgyv/obgWCE7T0gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNERFRkJERDk4NTRCRThEMUUyOEY3MzMwQTBCODAyQzNF RTZBRDFGOTAeFw0yNTA2MjkxNjQ1MDFaFw0yNTA3MDMwMjQwMDFaMDMxMTAvBgNV BAMTKDVGRkJDRjhENTc2QzQ4MUY3NjI4NEREQjQ5Mjc1M0U2OUM5N0E4QzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNKLhziMnv7bqqKkhdSWzb6Tmv FrUnz/To/94/KiqagPp9/9GE7u9MXyOqEiDG7CEm0Ntp3jn7LhQWKdLoijhG8YCD 0Kv2zD9EbYxpy5+NXT8Dy3cKRrZvoXXutQM3S/rbDWirLpVfwZh6W07pkKo3svwH AIzuJY4khsEWnvT+y5s8hA8nL8ycX8v0a8DtvwSXiWl/WHwB6rTiPG+wyDqK+76P c2Rdqna17homlMnjUj3m0VYs/PKheHBklEDjQO7kQiOlv28rxV/CmTuf5hYVHCv3 5El9MKuGPqtEftLIf4aoDVDx0DMgKd0yKxmDlhpSIZVkUEtXd0D7L/87+eGHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUX/vPjVdsSB92KE3bSSdT5pyXqMEwHwYDVR0j BBgwFoAUTe+92YVL6NHij3MwoLgCw+5q0fkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MGRlMjMxZi1mYjhhLTQyN2EtYWEzNi0wYTNmYzk3MjMyOGQvMC80REVGQkREOTg1 NEJFOEQxRTI4RjczMzBBMEI4MDJDM0VFNkFEMUY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNERFRkJERDk4NTRCRThEMUUyOEY3MzMwQTBCODAyQzNFRTZB RDFGOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTBkZTIzMWYtZmI4YS00MjdhLWFh MzYtMGEzZmM5NzIzMjhkLzAvNERFRkJERDk4NTRCRThEMUUyOEY3MzMwQTBCODAy QzNFRTZBRDFGOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE+ocgJsjrfpvJbTIs8x609YWDsYdaIt3fem 45d09CCJI1sfeyrDLAwE75FwEWVEKvuUS1ojrc3kVZ2msMHp/umKLRflwUnw6N38 QqOHN+ezBv272+WDtkUP7tOhsK32foFR7d3fXPETriqBScIjqZeyfWqfGulsNMEw A7hlfcSjqcuvpXCSdLhq1P5A4hyWRqDXV5Q806gPfVbMNlipsZg2RtApqayU04+i IxWiail9ggUjxAB6TY8QSyfQXDbWWMq9h0e37g6bG4URkoCIunLQvGnog0nx0QhJ nWuhLfORWBz9hazHJ1lrVprgnZ9/dByvSRbEkQt2Rv7LFqd5VxA= -----END CERTIFICATE-----Generated at Mon Jun 30 13:54:22 2025 by rpki-client