$ rpki-client -vvf repo-rpki.idnic.net/repo/960f8461-bb2c-4d3e-a5be-700939427c8c/0/4BC6236908AF9F36A8057E2BB1A5B34BCD6B7DBA.mft File: 4BC6236908AF9F36A8057E2BB1A5B34BCD6B7DBA.mft (raw, json) Hash identifier: kheZ44OshENcR7RrjXqefZObULGbLyhrKZOcHAsv42A= Subject key identifier: 38:A6:4C:B1:9B:0C:21:7B:99:21:08:54:2C:56:B8:0C:3A:8D:E8:08 Authority key identifier: 4B:C6:23:69:08:AF:9F:36:A8:05:7E:2B:B1:A5:B3:4B:CD:6B:7D:BA Certificate issuer: /CN=4BC6236908AF9F36A8057E2BB1A5B34BCD6B7DBA Certificate serial: 2B2A2BF27EF30CD03DB85B5865E6193C0A5B0B75 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BC6236908AF9F36A8057E2BB1A5B34BCD6B7DBA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/960f8461-bb2c-4d3e-a5be-700939427c8c/0/4BC6236908AF9F36A8057E2BB1A5B34BCD6B7DBA.mft Manifest number: 017D Signing time: Sun 29 Jun 2025 23:31:31 +0000 Manifest this update: Sun 29 Jun 2025 23:26:31 +0000 Manifest next update: Thu 03 Jul 2025 07:53:31 +0000 Files and hashes: 1: 4BC6236908AF9F36A8057E2BB1A5B34BCD6B7DBA.crl (hash: CKTmF3oGLJ1CfadbNEN5SwleP85noRYYl3YNajXg3Ts=) 2: 3130332e3139392e3131372e302f32342d3234203d3e20313530393234.roa (hash: 6oB2NEdb1J8wzFdKjlXlM7HaXvyVJb+FJhi1JoqHPbo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/960f8461-bb2c-4d3e-a5be-700939427c8c/0/4BC6236908AF9F36A8057E2BB1A5B34BCD6B7DBA.crl rsync://repo-rpki.idnic.net/repo/960f8461-bb2c-4d3e-a5be-700939427c8c/0/4BC6236908AF9F36A8057E2BB1A5B34BCD6B7DBA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BC6236908AF9F36A8057E2BB1A5B34BCD6B7DBA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 07:53:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:2a:2b:f2:7e:f3:0c:d0:3d:b8:5b:58:65:e6:19:3c:0a:5b:0b:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4BC6236908AF9F36A8057E2BB1A5B34BCD6B7DBA Validity Not Before: Jun 29 23:26:31 2025 GMT Not After : Jul 3 07:53:31 2025 GMT Subject: CN=38A64CB19B0C217B992108542C56B80C3A8DE808 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:8d:33:22:b6:73:30:c4:b2:36:93:b0:3c:e5: 96:a0:fd:71:50:22:c5:b2:31:80:b0:de:43:1c:1f: 1f:56:c6:2b:02:b8:c3:8a:b8:51:ad:b9:7f:7e:91: fc:6a:18:19:df:ed:f5:1e:69:55:12:e3:17:36:d5: df:61:6f:4e:98:52:7c:b5:d4:51:95:6b:0f:fb:57: 7d:f2:11:f2:d3:6c:0d:68:90:24:81:6b:15:a5:2b: 9e:82:6d:7a:0b:d7:18:7f:59:03:ae:af:fd:19:10: 5f:bf:dc:34:51:63:83:46:8b:b7:52:69:f5:f4:a1: 38:74:93:02:52:57:e1:20:f6:58:8b:e7:b7:e5:9d: 6d:2b:ff:d3:eb:47:b8:38:a6:c1:16:99:9c:58:61: 03:10:01:14:e9:38:1d:25:9d:13:5b:45:21:81:fa: 1f:70:26:e4:8f:15:3e:b1:08:95:a5:d7:52:a3:cc: 21:cb:bf:55:72:4b:97:58:c0:d4:87:98:00:25:56: 1d:dd:e3:dc:06:35:91:b0:db:66:26:d2:d4:4d:cf: 0c:52:89:0d:8f:ac:53:75:1c:0b:53:d8:15:d7:10: 86:c5:ef:9a:35:51:3b:9a:4c:51:d2:77:3d:4a:29: 8a:b7:9c:4c:4f:8c:b8:ab:1c:e2:7d:ff:d9:2a:14: 28:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:A6:4C:B1:9B:0C:21:7B:99:21:08:54:2C:56:B8:0C:3A:8D:E8:08 X509v3 Authority Key Identifier: keyid:4B:C6:23:69:08:AF:9F:36:A8:05:7E:2B:B1:A5:B3:4B:CD:6B:7D:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/960f8461-bb2c-4d3e-a5be-700939427c8c/0/4BC6236908AF9F36A8057E2BB1A5B34BCD6B7DBA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BC6236908AF9F36A8057E2BB1A5B34BCD6B7DBA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/960f8461-bb2c-4d3e-a5be-700939427c8c/0/4BC6236908AF9F36A8057E2BB1A5B34BCD6B7DBA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:69:9a:d8:a0:37:13:3e:cd:2e:e2:7f:86:6d:92:45:a4:66: 66:00:22:37:e8:75:00:46:65:82:c9:e5:4e:63:96:bc:aa:a9: c0:c8:27:44:3d:a9:eb:8b:f1:a4:eb:8c:b3:a7:17:18:c6:b2: ee:dd:32:8a:ae:95:7a:7c:54:fe:88:b6:ed:fa:38:db:e7:35: 94:40:29:4d:1c:8d:b9:6d:e1:99:2e:7a:95:2a:13:f2:7e:02: b8:89:6c:3d:ce:bb:36:cd:3e:6b:4a:8c:b6:2f:fc:5a:00:5d: 4b:03:aa:9d:ce:b8:80:b5:0f:38:f7:30:7b:b2:ca:cb:ed:40: d1:50:61:c1:19:3f:b5:6f:a4:55:84:20:13:04:47:66:98:44: 2d:cd:c2:2c:98:8e:b1:c0:ce:4d:0a:37:20:78:e7:df:1a:d9: d2:02:c3:11:1d:5e:66:fb:00:74:51:be:89:87:03:8c:5a:96: 7f:c2:6c:a5:03:58:62:27:d2:6f:03:9b:52:b3:37:96:40:37: bb:85:78:8c:ec:43:de:80:c2:46:49:ce:0f:9a:f4:b0:8b:47: 50:6b:85:38:65:5b:bd:73:04:5b:b8:18:e6:05:82:a7:55:9f: 67:8f:d9:7b:55:c6:e9:19:74:1c:ba:73:22:28:04:14:c7:1d: d7:2e:e8:2d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKyor8n7zDNA9uFtYZeYZPApbC3UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEJDNjIzNjkwOEFGOUYzNkE4MDU3RTJCQjFBNUIzNEJD RDZCN0RCQTAeFw0yNTA2MjkyMzI2MzFaFw0yNTA3MDMwNzUzMzFaMDMxMTAvBgNV BAMTKDM4QTY0Q0IxOUIwQzIxN0I5OTIxMDg1NDJDNTZCODBDM0E4REU4MDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbjTMitnMwxLI2k7A85Zag/XFQ IsWyMYCw3kMcHx9WxisCuMOKuFGtuX9+kfxqGBnf7fUeaVUS4xc21d9hb06YUny1 1FGVaw/7V33yEfLTbA1okCSBaxWlK56CbXoL1xh/WQOur/0ZEF+/3DRRY4NGi7dS afX0oTh0kwJSV+Eg9liL57flnW0r/9PrR7g4psEWmZxYYQMQARTpOB0lnRNbRSGB +h9wJuSPFT6xCJWl11KjzCHLv1VyS5dYwNSHmAAlVh3d49wGNZGw22Ym0tRNzwxS iQ2PrFN1HAtT2BXXEIbF75o1UTuaTFHSdz1KKYq3nExPjLirHOJ9/9kqFCiZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOKZMsZsMIXuZIQhULFa4DDqN6AgwHwYDVR0j BBgwFoAUS8YjaQivnzaoBX4rsaWzS81rfbowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NjBmODQ2MS1iYjJjLTRkM2UtYTViZS03MDA5Mzk0MjdjOGMvMC80QkM2MjM2OTA4 QUY5RjM2QTgwNTdFMkJCMUE1QjM0QkNENkI3REJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEJDNjIzNjkwOEFGOUYzNkE4MDU3RTJCQjFBNUIzNEJDRDZC N0RCQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTYwZjg0NjEtYmIyYy00ZDNlLWE1 YmUtNzAwOTM5NDI3YzhjLzAvNEJDNjIzNjkwOEFGOUYzNkE4MDU3RTJCQjFBNUIz NEJDRDZCN0RCQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ1pmtigNxM+zS7if4ZtkkWkZmYAIjfodQBG ZYLJ5U5jlryqqcDIJ0Q9qeuL8aTrjLOnFxjGsu7dMoqulXp8VP6Itu36ONvnNZRA KU0cjblt4ZkuepUqE/J+AriJbD3OuzbNPmtKjLYv/FoAXUsDqp3OuIC1Dzj3MHuy ysvtQNFQYcEZP7VvpFWEIBMER2aYRC3NwiyYjrHAzk0KNyB4598a2dICwxEdXmb7 AHRRvomHA4xaln/CbKUDWGIn0m8Dm1KzN5ZAN7uFeIzsQ96AwkZJzg+a9LCLR1Br hThlW71zBFu4GOYFgqdVn2eP2XtVxukZdBy6cyIoBBTHHdcu6C0= -----END CERTIFICATE-----Generated at Mon Jun 30 13:29:57 2025 by rpki-client