$ rpki-client -vvf repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/0/4538753AD01FB91D7B028CC53F5AEC24AD6CD082.mft File: 4538753AD01FB91D7B028CC53F5AEC24AD6CD082.mft (raw, json) Hash identifier: Pz4gaVm+2BTlFQvmPQ4LAngtOGt7auCR/s93m23OcHs= Subject key identifier: CE:2A:7B:47:5D:39:00:CA:7C:94:7C:EB:79:A3:5D:F2:08:20:D1:27 Authority key identifier: 45:38:75:3A:D0:1F:B9:1D:7B:02:8C:C5:3F:5A:EC:24:AD:6C:D0:82 Certificate issuer: /CN=4538753AD01FB91D7B028CC53F5AEC24AD6CD082 Certificate serial: 32778BFEBF6B475CDB74844D7CFC7F7606DC037F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4538753AD01FB91D7B028CC53F5AEC24AD6CD082.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/0/4538753AD01FB91D7B028CC53F5AEC24AD6CD082.mft Manifest number: B3 Signing time: Sat 23 Aug 2025 12:02:22 +0000 Manifest this update: Sat 23 Aug 2025 11:57:22 +0000 Manifest next update: Tue 26 Aug 2025 14:33:22 +0000 Files and hashes: 1: 4538753AD01FB91D7B028CC53F5AEC24AD6CD082.crl (hash: jmJLjb6dlzGx7DCEmHDET4n3iCDxj6XPbWYNwnCkYGc=) 2: 3135372e36362e3137342e302f32332d3234203d3e20313532373439.roa (hash: 5hBop//FL91nh6eglb7Afoy10VVM0UIJy8JFCFrZk+s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/0/4538753AD01FB91D7B028CC53F5AEC24AD6CD082.crl rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/0/4538753AD01FB91D7B028CC53F5AEC24AD6CD082.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4538753AD01FB91D7B028CC53F5AEC24AD6CD082.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 10:24:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:77:8b:fe:bf:6b:47:5c:db:74:84:4d:7c:fc:7f:76:06:dc:03:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4538753AD01FB91D7B028CC53F5AEC24AD6CD082 Validity Not Before: Aug 23 11:57:22 2025 GMT Not After : Aug 26 14:33:22 2025 GMT Subject: CN=CE2A7B475D3900CA7C947CEB79A35DF20820D127 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:a7:6e:da:27:8c:ee:81:d5:2c:45:65:7f:61: 01:06:37:d2:2c:b6:7a:f0:4f:d7:9d:f6:10:b4:e7: 43:9d:1b:dd:0a:4b:b5:75:50:3b:0c:86:2e:25:21: 87:cb:5d:2d:b7:b6:4d:c8:f4:4b:1c:46:fa:44:b7: 73:11:db:7d:4c:95:93:6f:64:15:a1:5d:21:ee:96: 43:b7:cb:10:7e:ec:d0:41:eb:2e:4c:71:59:d6:3e: 25:eb:e6:ab:65:0a:12:b4:d7:5e:fa:cb:b0:04:0e: f3:53:34:e2:58:22:04:b0:6d:18:1e:f7:9d:de:3f: 06:fd:28:a0:2d:61:f6:5e:5b:cd:0b:ed:c7:bc:62: d6:21:d2:70:43:74:87:e1:3c:b0:7e:7a:ba:2a:40: 80:9a:8b:ef:3c:70:9c:85:a3:d6:27:c6:ea:0c:b5: 61:97:bb:02:30:b5:d6:a4:d8:42:52:80:37:42:ed: 22:7e:13:1e:11:e3:9f:67:9d:da:0b:a0:15:2e:92: c8:10:90:99:3f:89:27:9f:12:9c:22:ac:29:1f:16: 5b:56:b7:a6:f4:25:cf:c5:aa:9d:ac:c2:42:ca:f5: b5:a6:1e:72:01:54:69:8d:e5:47:61:86:80:a6:7f: a5:fd:22:20:f4:cf:d0:e2:72:7d:99:36:9a:7e:78: 41:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:2A:7B:47:5D:39:00:CA:7C:94:7C:EB:79:A3:5D:F2:08:20:D1:27 X509v3 Authority Key Identifier: keyid:45:38:75:3A:D0:1F:B9:1D:7B:02:8C:C5:3F:5A:EC:24:AD:6C:D0:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/0/4538753AD01FB91D7B028CC53F5AEC24AD6CD082.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4538753AD01FB91D7B028CC53F5AEC24AD6CD082.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/0/4538753AD01FB91D7B028CC53F5AEC24AD6CD082.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:05:87:c7:03:dd:c1:b5:9d:a8:23:41:13:de:c6:a8:58:f0: a8:d9:37:ca:c1:68:9e:43:fd:44:87:45:75:13:83:e8:9c:d3: 15:14:61:0d:3b:0c:7f:59:30:77:66:34:7d:6d:13:1a:52:f6: 82:ea:61:18:d9:0e:d9:94:fc:bc:68:58:8f:86:16:2e:1b:cd: bd:bb:63:75:30:be:16:d7:04:c9:8f:5a:76:b4:d8:bf:11:14: 2a:0a:cd:21:ef:4c:76:79:01:6e:67:76:d9:51:7b:d6:29:95: 14:ad:1c:ed:2e:27:07:2c:3b:6b:e1:38:3b:f9:d2:7e:e1:46: 19:2b:d8:a8:4b:8d:6f:d8:06:de:6b:f0:89:77:55:2b:8d:06: 4a:db:5b:43:e5:45:a5:d4:c8:76:13:5c:56:9b:d2:c0:6b:db: ca:c5:a3:44:21:d2:20:af:26:20:cd:dc:95:95:26:54:3c:2a: 30:7b:9a:b5:5d:36:1e:6f:ef:3b:ec:2d:9e:12:4e:eb:13:42: 72:05:e1:4f:9d:10:fc:9e:4f:6d:c9:19:1b:79:99:13:3d:06: 95:79:e1:3a:36:3f:17:40:99:e3:f6:78:11:62:dc:67:d9:c0: cd:48:cc:65:0e:76:86:f7:91:7e:9b:1e:4e:5b:35:b5:5f:1f: 1c:e4:47:e8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMneL/r9rR1zbdIRNfPx/dgbcA38wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUzODc1M0FEMDFGQjkxRDdCMDI4Q0M1M0Y1QUVDMjRB RDZDRDA4MjAeFw0yNTA4MjMxMTU3MjJaFw0yNTA4MjYxNDMzMjJaMDMxMTAvBgNV BAMTKENFMkE3QjQ3NUQzOTAwQ0E3Qzk0N0NFQjc5QTM1REYyMDgyMEQxMjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZp27aJ4zugdUsRWV/YQEGN9Is tnrwT9ed9hC050OdG90KS7V1UDsMhi4lIYfLXS23tk3I9EscRvpEt3MR231MlZNv ZBWhXSHulkO3yxB+7NBB6y5McVnWPiXr5qtlChK01176y7AEDvNTNOJYIgSwbRge 953ePwb9KKAtYfZeW80L7ce8YtYh0nBDdIfhPLB+eroqQICai+88cJyFo9YnxuoM tWGXuwIwtdak2EJSgDdC7SJ+Ex4R459nndoLoBUuksgQkJk/iSefEpwirCkfFltW t6b0Jc/Fqp2swkLK9bWmHnIBVGmN5UdhhoCmf6X9IiD0z9Dicn2ZNpp+eEEbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzip7R105AMp8lHzreaNd8ggg0ScwHwYDVR0j BBgwFoAURTh1OtAfuR17AozFP1rsJK1s0IIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YjczM2RjZi05ZjVlLTQ3NzUtOWNlNy05ZGQ1MjViNDRiODYvMC80NTM4NzUzQUQw MUZCOTFEN0IwMjhDQzUzRjVBRUMyNEFENkNEMDgyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNDUzODc1M0FEMDFGQjkxRDdCMDI4Q0M1M0Y1QUVDMjRBRDZD RDA4Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWI3MzNkY2YtOWY1ZS00Nzc1LTlj ZTctOWRkNTI1YjQ0Yjg2LzAvNDUzODc1M0FEMDFGQjkxRDdCMDI4Q0M1M0Y1QUVD MjRBRDZDRDA4Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAcFh8cD3cG1nagjQRPexqhY8KjZN8rBaJ5D /USHRXUTg+ic0xUUYQ07DH9ZMHdmNH1tExpS9oLqYRjZDtmU/LxoWI+GFi4bzb27 Y3UwvhbXBMmPWna02L8RFCoKzSHvTHZ5AW5ndtlRe9YplRStHO0uJwcsO2vhODv5 0n7hRhkr2KhLjW/YBt5r8Il3VSuNBkrbW0PlRaXUyHYTXFab0sBr28rFo0Qh0iCv JiDN3JWVJlQ8KjB7mrVdNh5v7zvsLZ4STusTQnIF4U+dEPyeT23JGRt5mRM9BpV5 4To2PxdAmeP2eBFi3GfZwM1IzGUOdob3kX6bHk5bNbVfHxzkR+g= -----END CERTIFICATE-----Generated at Sat Aug 23 21:53:32 2025 by rpki-client