$ rpki-client -vvf repo-rpki.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/4CDDA0597DCBCA2C92A176D00847EB50F6122354.mft File: 4CDDA0597DCBCA2C92A176D00847EB50F6122354.mft (raw, json) Hash identifier: 4FSD2PqZOnJo+BsiLZToEpYLc8hI7h1YJt7pOwyzbro= Subject key identifier: A9:19:2F:32:F4:13:47:97:2B:67:1D:7A:22:11:80:08:47:E5:50:20 Authority key identifier: 4C:DD:A0:59:7D:CB:CA:2C:92:A1:76:D0:08:47:EB:50:F6:12:23:54 Certificate issuer: /CN=4CDDA0597DCBCA2C92A176D00847EB50F6122354 Certificate serial: 0411D063318518A86338C7F9E3BC4B998D7B5AFE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4CDDA0597DCBCA2C92A176D00847EB50F6122354.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/4CDDA0597DCBCA2C92A176D00847EB50F6122354.mft Manifest number: B1 Signing time: Sat 28 Jun 2025 19:10:40 +0000 Manifest this update: Sat 28 Jun 2025 19:05:40 +0000 Manifest next update: Tue 01 Jul 2025 23:57:40 +0000 Files and hashes: 1: 4CDDA0597DCBCA2C92A176D00847EB50F6122354.crl (hash: VI6FMGe7KwRZQS3zGdWEvIuDpUvUKlO4sYwU0ekDDvA=) 2: 3130332e3234342e3130352e302f32342d3234203d3e20313531353534.roa (hash: A1hnHJuSS/CjegeZCbVDBe+9fc3PzAjrhUV0+3BfwCE=) 3: 3130332e3234342e3130342e302f32342d3234203d3e20313531353534.roa (hash: yG4+2M7fws6C52HoixX4PcNGnAAet0z0xRyi0LE26aU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/4CDDA0597DCBCA2C92A176D00847EB50F6122354.crl rsync://repo-rpki.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/4CDDA0597DCBCA2C92A176D00847EB50F6122354.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4CDDA0597DCBCA2C92A176D00847EB50F6122354.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 23:57:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:11:d0:63:31:85:18:a8:63:38:c7:f9:e3:bc:4b:99:8d:7b:5a:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4CDDA0597DCBCA2C92A176D00847EB50F6122354 Validity Not Before: Jun 28 19:05:40 2025 GMT Not After : Jul 1 23:57:40 2025 GMT Subject: CN=A9192F32F41347972B671D7A2211800847E55020 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:b1:97:db:4b:7d:1a:59:88:11:1e:9c:64:27: c4:10:e4:72:bb:0d:8f:02:96:56:95:83:ba:e9:f9: 01:04:c3:37:e1:0e:f0:6d:22:92:d6:5c:d3:35:e4: 15:25:1b:92:1d:92:7b:e8:f8:55:91:1f:c2:97:69: 91:36:6e:99:99:36:c3:0f:42:29:33:58:28:6e:15: de:24:28:49:1e:aa:24:24:6c:e7:f7:6c:75:61:c3: 8c:ec:1e:7c:96:ae:18:23:71:df:44:6b:8f:c8:db: d7:c1:ef:e3:2f:81:76:90:b5:2f:a8:ad:76:92:c4: 7e:ad:0f:85:44:e6:a5:06:8d:00:49:13:76:33:45: fa:7f:fb:a1:e8:2a:cc:24:6c:57:cb:4b:02:0c:82: 90:5b:d5:58:5a:0c:97:b3:fe:e5:5f:27:76:79:ab: 4e:1c:32:2a:3f:e6:4c:64:88:a6:f1:39:6b:6d:aa: 47:12:46:80:2a:f7:0b:0e:46:f3:d8:ca:b3:f4:d2: 1f:ff:87:9b:ba:5d:11:64:ca:c2:08:43:64:6c:47: 24:5f:d0:0e:56:a6:7f:a6:6b:a2:a2:9b:44:22:14: 04:77:c0:3f:66:00:f3:8a:dd:c4:f4:95:7f:4e:e4: 31:3f:c0:bb:9a:40:4b:3f:d2:51:cd:d6:8e:ee:99: 64:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:19:2F:32:F4:13:47:97:2B:67:1D:7A:22:11:80:08:47:E5:50:20 X509v3 Authority Key Identifier: keyid:4C:DD:A0:59:7D:CB:CA:2C:92:A1:76:D0:08:47:EB:50:F6:12:23:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/4CDDA0597DCBCA2C92A176D00847EB50F6122354.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4CDDA0597DCBCA2C92A176D00847EB50F6122354.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/4CDDA0597DCBCA2C92A176D00847EB50F6122354.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:60:90:73:f8:36:6d:39:b4:5f:37:db:c0:81:b3:aa:4b:54: 66:b8:a8:e3:a6:e0:2a:7a:c6:2e:f2:97:ab:cb:d2:db:f3:05: cf:90:7f:d4:67:f8:fa:06:f1:3e:90:f9:d4:00:c8:93:6d:ea: de:d2:2e:26:ba:e7:3f:02:92:75:9f:5d:96:77:1b:f7:04:d1: 52:6a:1f:36:14:75:3b:8c:6d:e3:2e:66:d7:3b:81:03:47:eb: 7d:87:e8:79:aa:c3:78:c8:ae:8b:5a:c5:1e:d3:35:0a:d5:94: 85:fc:85:c3:47:b0:28:77:0f:a1:fd:65:bb:d9:01:b7:dd:fa: bb:85:a2:1b:4e:d0:d3:85:aa:1f:ea:1d:83:cb:c5:07:41:20: e3:65:2b:8d:37:75:cc:63:ad:96:dd:52:8d:10:71:6b:fe:e8: 27:5d:89:ce:64:d8:34:ac:12:9c:6b:f0:f0:51:fe:09:54:43: e8:d0:17:f0:63:0f:72:3a:c7:2e:75:6e:f1:cd:b6:96:e2:c6: 0a:1d:c3:c8:49:04:15:ca:e3:28:ed:ca:e3:d1:9e:93:5c:fa: 2e:60:c3:09:15:ca:10:bb:05:38:d4:60:fe:3f:cd:30:ac:9c: bc:43:61:9a:c0:0b:d4:c9:83:9c:d4:14:8a:28:09:66:cf:0f: 0d:75:ae:72 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBBHQYzGFGKhjOMf547xLmY17Wv4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNENEREEwNTk3RENCQ0EyQzkyQTE3NkQwMDg0N0VCNTBG NjEyMjM1NDAeFw0yNTA2MjgxOTA1NDBaFw0yNTA3MDEyMzU3NDBaMDMxMTAvBgNV BAMTKEE5MTkyRjMyRjQxMzQ3OTcyQjY3MUQ3QTIyMTE4MDA4NDdFNTUwMjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHsZfbS30aWYgRHpxkJ8QQ5HK7 DY8CllaVg7rp+QEEwzfhDvBtIpLWXNM15BUlG5Idknvo+FWRH8KXaZE2bpmZNsMP QikzWChuFd4kKEkeqiQkbOf3bHVhw4zsHnyWrhgjcd9Ea4/I29fB7+MvgXaQtS+o rXaSxH6tD4VE5qUGjQBJE3YzRfp/+6HoKswkbFfLSwIMgpBb1VhaDJez/uVfJ3Z5 q04cMio/5kxkiKbxOWttqkcSRoAq9wsORvPYyrP00h//h5u6XRFkysIIQ2RsRyRf 0A5Wpn+ma6Kim0QiFAR3wD9mAPOK3cT0lX9O5DE/wLuaQEs/0lHN1o7umWSdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqRkvMvQTR5crZx16IhGACEflUCAwHwYDVR0j BBgwFoAUTN2gWX3LyiySoXbQCEfrUPYSI1QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZDJmYTUxZS0zZmQ0LTQ1MjAtYjM3NS0wOWVlZjVlMGU1MTAvMC80Q0REQTA1OTdE Q0JDQTJDOTJBMTc2RDAwODQ3RUI1MEY2MTIyMzU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNENEREEwNTk3RENCQ0EyQzkyQTE3NkQwMDg0N0VCNTBGNjEy MjM1NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWQyZmE1MWUtM2ZkNC00NTIwLWIz NzUtMDllZWY1ZTBlNTEwLzAvNENEREEwNTk3RENCQ0EyQzkyQTE3NkQwMDg0N0VC NTBGNjEyMjM1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKBgkHP4Nm05tF8328CBs6pLVGa4qOOm4Cp6 xi7yl6vL0tvzBc+Qf9Rn+PoG8T6Q+dQAyJNt6t7SLia65z8CknWfXZZ3G/cE0VJq HzYUdTuMbeMuZtc7gQNH632H6Hmqw3jIrotaxR7TNQrVlIX8hcNHsCh3D6H9ZbvZ Abfd+ruFohtO0NOFqh/qHYPLxQdBIONlK403dcxjrZbdUo0QcWv+6Cddic5k2DSs Epxr8PBR/glUQ+jQF/BjD3I6xy51bvHNtpbixgodw8hJBBXK4yjtyuPRnpNc+i5g wwkVyhC7BTjUYP4/zTCsnLxDYZrAC9TJg5zUFIooCWbPDw11rnI= -----END CERTIFICATE-----Generated at Sun Jun 29 18:51:41 2025 by rpki-client