$ rpki-client -vvf repo-rpki.idnic.net/repo/90de231f-fb8a-427a-aa36-0a3fc972328d/0/4DEFBDD9854BE8D1E28F7330A0B802C3EE6AD1F9.mft File: 4DEFBDD9854BE8D1E28F7330A0B802C3EE6AD1F9.mft (raw, json) Hash identifier: XNvdYB2GF6SAAb6vgbvgs9fF6QqckzsfqFtyrDaGtaU= Subject key identifier: A8:C4:5E:BC:25:13:71:D0:A2:87:99:01:8C:21:7F:B7:5E:9D:DD:45 Authority key identifier: 4D:EF:BD:D9:85:4B:E8:D1:E2:8F:73:30:A0:B8:02:C3:EE:6A:D1:F9 Certificate issuer: /CN=4DEFBDD9854BE8D1E28F7330A0B802C3EE6AD1F9 Certificate serial: 2839D0C2BCE5CD5B95A177F9765B7A6B3A38BC4A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DEFBDD9854BE8D1E28F7330A0B802C3EE6AD1F9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/90de231f-fb8a-427a-aa36-0a3fc972328d/0/4DEFBDD9854BE8D1E28F7330A0B802C3EE6AD1F9.mft Manifest number: 0509 Signing time: Fri 22 Aug 2025 21:20:01 +0000 Manifest this update: Fri 22 Aug 2025 21:15:01 +0000 Manifest next update: Tue 26 Aug 2025 08:25:01 +0000 Files and hashes: 1: 3130332e3132352e3131372e302f32342d3234203d3e20313338313032.roa (hash: ZMeuRsHtVSwXmTeOlP2EBAn6yOUfUCueHpz1hHvcg+E=) 2: 4DEFBDD9854BE8D1E28F7330A0B802C3EE6AD1F9.crl (hash: XKq8em764486eFyRmhLWtjYEBiacKmpo2Qn7VW2+SfY=) 3: 3130332e3132352e3131392e302f32342d3234203d3e20313338313032.roa (hash: 8llNfwrUTFXUaOZxOG2FdVdGooONQqY0triO7boP8ZE=) 4: 3130332e3132352e3131362e302f32322d3232203d3e20313338313032.roa (hash: y8ADkM9INdo4B5YpCY3N+ofggmxgoMYRUDnTX9TJFJg=) 5: 3130332e3132352e3131382e302f32342d3234203d3e20313338313032.roa (hash: KvTsgODxSTYXSwM09nr1mlGXAPY3uRhzMZlaVsc+OC4=) 6: 3130332e3132352e3131362e302f32342d3234203d3e20313338313032.roa (hash: RbezRzshmathyV4EoiQ/5deOypXsD7H6MYLkfw1/pRw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/90de231f-fb8a-427a-aa36-0a3fc972328d/0/4DEFBDD9854BE8D1E28F7330A0B802C3EE6AD1F9.crl rsync://repo-rpki.idnic.net/repo/90de231f-fb8a-427a-aa36-0a3fc972328d/0/4DEFBDD9854BE8D1E28F7330A0B802C3EE6AD1F9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DEFBDD9854BE8D1E28F7330A0B802C3EE6AD1F9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 08:25:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:39:d0:c2:bc:e5:cd:5b:95:a1:77:f9:76:5b:7a:6b:3a:38:bc:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4DEFBDD9854BE8D1E28F7330A0B802C3EE6AD1F9 Validity Not Before: Aug 22 21:15:01 2025 GMT Not After : Aug 26 08:25:01 2025 GMT Subject: CN=A8C45EBC251371D0A28799018C217FB75E9DDD45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:39:0b:fc:2a:a7:e9:d9:f3:2c:82:05:a8:36: 4a:a5:e0:3e:68:64:b2:a1:fa:c6:63:9f:7f:27:9f: dc:0a:e2:c4:ea:ad:4e:47:8c:34:1d:a1:36:e3:52: 94:02:c9:1f:9b:f5:94:37:7c:5b:c4:2d:a7:16:7c: bd:44:00:e2:4c:e6:52:45:33:77:a8:04:15:6f:57: 13:da:4d:93:28:4f:05:1a:ae:a2:d3:7c:27:a7:bb: 36:b2:e9:fc:a7:a1:82:cf:a0:d5:91:0c:8b:c8:f6: 36:d8:42:13:a2:c4:b0:cd:13:fe:8e:81:d8:5e:eb: 3b:19:bc:dd:a8:d7:c1:65:af:fb:30:a3:62:1d:8e: fd:cd:45:c5:6c:fe:59:0f:4c:6d:c8:c1:0d:9e:fa: d8:67:20:e6:a2:8e:61:2c:9a:6c:d5:bd:4c:a9:77: 0e:01:4e:6a:5d:34:01:4a:06:a6:7a:f1:a8:7a:5c: 36:11:22:d5:72:8b:cc:be:fb:d8:04:81:a5:02:e3: 03:86:4c:41:1d:bd:1c:9f:39:d0:23:29:e4:af:db: f5:23:d7:cc:5f:52:93:30:b5:05:fa:46:f6:e3:71: d0:19:98:ac:04:b9:24:7e:f2:87:91:42:8b:23:bc: 66:7b:99:6a:e8:df:b9:c7:a3:95:3b:14:f3:ec:ab: 4b:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:C4:5E:BC:25:13:71:D0:A2:87:99:01:8C:21:7F:B7:5E:9D:DD:45 X509v3 Authority Key Identifier: keyid:4D:EF:BD:D9:85:4B:E8:D1:E2:8F:73:30:A0:B8:02:C3:EE:6A:D1:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/90de231f-fb8a-427a-aa36-0a3fc972328d/0/4DEFBDD9854BE8D1E28F7330A0B802C3EE6AD1F9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DEFBDD9854BE8D1E28F7330A0B802C3EE6AD1F9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/90de231f-fb8a-427a-aa36-0a3fc972328d/0/4DEFBDD9854BE8D1E28F7330A0B802C3EE6AD1F9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:18:8a:dd:6e:53:e4:19:ff:e3:2c:a8:99:be:22:72:f6:9b: f2:25:02:a0:64:c2:4b:ca:44:83:cb:f4:97:64:f5:eb:68:d6: a4:5c:6a:72:51:79:74:4a:d4:a5:37:9f:90:73:d2:46:b2:2b: 48:56:e7:7c:b3:2e:57:f8:1c:bd:f3:b3:f3:cd:8f:cd:59:b6: 10:c9:f0:90:5e:68:58:36:5f:55:ed:62:de:36:68:f0:53:a1: a9:f2:5c:c3:d7:54:f4:65:44:e0:48:bb:0c:87:5b:9f:f8:4d: 3f:ee:e0:ce:4e:46:95:8e:ec:db:c8:49:b1:55:87:b0:8a:db: 5e:ee:57:a8:de:d5:01:3f:10:4f:bc:68:c2:51:e1:db:99:a5: 29:da:cf:2b:9c:dd:ef:d6:3e:21:de:85:3a:13:fa:33:73:8a: 54:c6:6f:7a:ef:5d:27:4e:e1:34:fe:46:f8:59:1c:04:4d:a3: d4:68:7a:85:ec:0d:91:22:07:a0:dd:70:66:47:91:71:89:fb: 85:b9:ac:7f:c1:45:27:1e:87:53:45:32:80:2d:f8:56:b4:ca: 6e:71:94:06:19:8f:a2:28:d3:3e:1c:4c:ba:7a:d5:7c:b4:f3: 91:53:39:f2:9b:6a:ff:bd:a4:4a:47:90:62:75:e4:a2:82:5b: 2a:19:00:a6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKDnQwrzlzVuVoXf5dlt6azo4vEowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNERFRkJERDk4NTRCRThEMUUyOEY3MzMwQTBCODAyQzNF RTZBRDFGOTAeFw0yNTA4MjIyMTE1MDFaFw0yNTA4MjYwODI1MDFaMDMxMTAvBgNV BAMTKEE4QzQ1RUJDMjUxMzcxRDBBMjg3OTkwMThDMjE3RkI3NUU5RERENDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLOQv8Kqfp2fMsggWoNkql4D5o ZLKh+sZjn38nn9wK4sTqrU5HjDQdoTbjUpQCyR+b9ZQ3fFvELacWfL1EAOJM5lJF M3eoBBVvVxPaTZMoTwUarqLTfCenuzay6fynoYLPoNWRDIvI9jbYQhOixLDNE/6O gdhe6zsZvN2o18Flr/swo2Idjv3NRcVs/lkPTG3IwQ2e+thnIOaijmEsmmzVvUyp dw4BTmpdNAFKBqZ68ah6XDYRItVyi8y++9gEgaUC4wOGTEEdvRyfOdAjKeSv2/Uj 18xfUpMwtQX6RvbjcdAZmKwEuSR+8oeRQosjvGZ7mWro37nHo5U7FPPsq0u9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqMRevCUTcdCih5kBjCF/t16d3UUwHwYDVR0j BBgwFoAUTe+92YVL6NHij3MwoLgCw+5q0fkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MGRlMjMxZi1mYjhhLTQyN2EtYWEzNi0wYTNmYzk3MjMyOGQvMC80REVGQkREOTg1 NEJFOEQxRTI4RjczMzBBMEI4MDJDM0VFNkFEMUY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNERFRkJERDk4NTRCRThEMUUyOEY3MzMwQTBCODAyQzNFRTZB RDFGOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTBkZTIzMWYtZmI4YS00MjdhLWFh MzYtMGEzZmM5NzIzMjhkLzAvNERFRkJERDk4NTRCRThEMUUyOEY3MzMwQTBCODAy QzNFRTZBRDFGOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEMYit1uU+QZ/+MsqJm+InL2m/IlAqBkwkvK RIPL9Jdk9eto1qRcanJReXRK1KU3n5Bz0kayK0hW53yzLlf4HL3zs/PNj81ZthDJ 8JBeaFg2X1XtYt42aPBToanyXMPXVPRlROBIuwyHW5/4TT/u4M5ORpWO7NvISbFV h7CK217uV6je1QE/EE+8aMJR4duZpSnazyuc3e/WPiHehToT+jNzilTGb3rvXSdO 4TT+RvhZHARNo9RoeoXsDZEiB6DdcGZHkXGJ+4W5rH/BRSceh1NFMoAt+Fa0ym5x lAYZj6Io0z4cTLp61Xy085FTOfKbav+9pEpHkGJ15KKCWyoZAKY= -----END CERTIFICATE-----Generated at Sat Aug 23 14:59:27 2025 by rpki-client