$ rpki-client -vvf repo-rpki.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/4CDDA0597DCBCA2C92A176D00847EB50F6122354.mft File: 4CDDA0597DCBCA2C92A176D00847EB50F6122354.mft (raw, json) Hash identifier: M3lGxWoGVj/zetHBzzAeEXYLiWnpZUPqAnhlk4oz6MQ= Subject key identifier: 8A:77:75:E7:AE:97:3F:DE:D6:04:6B:20:8D:5B:4E:47:2E:B9:21:11 Authority key identifier: 4C:DD:A0:59:7D:CB:CA:2C:92:A1:76:D0:08:47:EB:50:F6:12:23:54 Certificate issuer: /CN=4CDDA0597DCBCA2C92A176D00847EB50F6122354 Certificate serial: 4EBE33EA0B4FD50A81DC1F39405B8188CCA2EC53 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4CDDA0597DCBCA2C92A176D00847EB50F6122354.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/4CDDA0597DCBCA2C92A176D00847EB50F6122354.mft Manifest number: C9 Signing time: Thu 21 Aug 2025 11:30:38 +0000 Manifest this update: Thu 21 Aug 2025 11:25:38 +0000 Manifest next update: Sun 24 Aug 2025 22:32:38 +0000 Files and hashes: 1: 3130332e3234342e3130352e302f32342d3234203d3e20313531353534.roa (hash: A1hnHJuSS/CjegeZCbVDBe+9fc3PzAjrhUV0+3BfwCE=) 2: 4CDDA0597DCBCA2C92A176D00847EB50F6122354.crl (hash: 5l9A97R3Svl3Y0fTtM+hu8UJ+9tOUqLpyTv+0YCQhOU=) 3: 3130332e3234342e3130342e302f32342d3234203d3e20313531353534.roa (hash: yG4+2M7fws6C52HoixX4PcNGnAAet0z0xRyi0LE26aU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/4CDDA0597DCBCA2C92A176D00847EB50F6122354.crl rsync://repo-rpki.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/4CDDA0597DCBCA2C92A176D00847EB50F6122354.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4CDDA0597DCBCA2C92A176D00847EB50F6122354.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 22:32:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:be:33:ea:0b:4f:d5:0a:81:dc:1f:39:40:5b:81:88:cc:a2:ec:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4CDDA0597DCBCA2C92A176D00847EB50F6122354 Validity Not Before: Aug 21 11:25:38 2025 GMT Not After : Aug 24 22:32:38 2025 GMT Subject: CN=8A7775E7AE973FDED6046B208D5B4E472EB92111 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b4:a0:1a:0a:1b:dc:61:c9:46:71:40:4d:8e: 85:91:67:70:dc:84:87:f0:93:f9:87:94:89:3d:b5: a2:56:3f:17:7f:60:0f:2f:7a:b6:91:9d:96:ef:78: 2d:90:4f:5e:3d:6a:bc:a9:23:5c:78:49:9a:94:39: 87:52:d9:99:8d:b8:c6:29:0f:14:bd:57:10:11:e4: 64:aa:8f:3e:f0:db:a2:e6:67:b6:ba:de:2f:dc:3a: af:8a:43:dd:eb:d7:c0:dd:4f:8d:ea:d8:00:fd:e7: d0:54:d7:bd:21:0c:43:cd:83:c8:fb:a5:4e:5d:fb: e9:96:14:78:c1:bb:5f:d3:ee:eb:1d:77:06:e1:a4: a6:36:8e:69:84:b2:9f:0b:b2:8d:1b:01:c6:3a:3b: f6:29:34:52:a3:f0:29:dd:da:ae:47:51:e1:ea:45: ef:a8:d7:d1:00:0e:90:10:96:71:18:d4:6b:94:3c: d1:d1:be:c5:5d:55:f5:d8:05:80:d6:c6:cd:4a:e5: 03:d9:7e:4c:24:eb:ca:ad:69:af:0b:96:6f:03:e2: e9:15:6d:0f:d5:20:97:26:b8:32:9b:b1:7a:6b:38: 86:c8:57:66:6b:a0:eb:82:d6:d8:06:d8:76:ef:e5: 52:89:74:fa:57:f5:28:db:37:89:41:84:7b:3a:f3: c1:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:77:75:E7:AE:97:3F:DE:D6:04:6B:20:8D:5B:4E:47:2E:B9:21:11 X509v3 Authority Key Identifier: keyid:4C:DD:A0:59:7D:CB:CA:2C:92:A1:76:D0:08:47:EB:50:F6:12:23:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/4CDDA0597DCBCA2C92A176D00847EB50F6122354.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4CDDA0597DCBCA2C92A176D00847EB50F6122354.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/4CDDA0597DCBCA2C92A176D00847EB50F6122354.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:32:b1:e6:34:22:53:bb:54:ba:8f:99:1c:c1:a9:8a:6c:60: 7d:ef:06:95:fb:4e:a7:59:6b:fa:37:af:e8:aa:fc:29:21:83: d9:27:da:7c:d2:ff:b1:6d:bf:8f:af:fb:8f:9e:6a:f6:56:be: db:9a:ff:2b:07:c9:02:9f:89:b0:92:3e:96:82:27:d8:06:4c: f1:1a:ae:52:38:84:31:f4:84:a9:00:fe:4b:e9:ff:85:41:40: 6c:17:7a:7c:ca:bd:ba:4f:56:20:c1:ec:88:1b:6d:21:cb:39: 80:c3:c6:0f:97:9a:61:72:99:d2:ad:b0:ab:ee:87:08:c5:9e: cd:3f:c2:cd:77:6f:07:c2:3c:4d:33:59:32:2c:12:80:a8:3f: 52:2a:08:17:d9:a5:fc:57:8f:5e:10:0a:ca:23:73:16:6a:37: f1:a9:b4:e8:ab:bd:16:13:df:b4:03:29:b7:93:c7:e5:53:af: df:a1:4e:1d:71:10:a5:e5:65:f9:21:06:4d:85:cc:47:5f:69: f8:74:05:b2:20:ac:4e:ce:bb:54:b1:23:35:77:1b:d8:95:61: 0e:0d:e0:a2:35:8f:35:e0:ff:ae:61:7d:f8:d4:90:31:c9:ba: b2:12:33:ef:43:dd:9b:1f:d0:dd:1d:70:6d:ae:9c:45:29:c5: 24:7f:38:4c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTr4z6gtP1QqB3B85QFuBiMyi7FMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNENEREEwNTk3RENCQ0EyQzkyQTE3NkQwMDg0N0VCNTBG NjEyMjM1NDAeFw0yNTA4MjExMTI1MzhaFw0yNTA4MjQyMjMyMzhaMDMxMTAvBgNV BAMTKDhBNzc3NUU3QUU5NzNGREVENjA0NkIyMDhENUI0RTQ3MkVCOTIxMTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCztKAaChvcYclGcUBNjoWRZ3Dc hIfwk/mHlIk9taJWPxd/YA8veraRnZbveC2QT149arypI1x4SZqUOYdS2ZmNuMYp DxS9VxAR5GSqjz7w26LmZ7a63i/cOq+KQ93r18DdT43q2AD959BU170hDEPNg8j7 pU5d++mWFHjBu1/T7usddwbhpKY2jmmEsp8Lso0bAcY6O/YpNFKj8Cnd2q5HUeHq Re+o19EADpAQlnEY1GuUPNHRvsVdVfXYBYDWxs1K5QPZfkwk68qtaa8Llm8D4ukV bQ/VIJcmuDKbsXprOIbIV2ZroOuC1tgG2Hbv5VKJdPpX9SjbN4lBhHs688E5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUind1566XP97WBGsgjVtORy65IREwHwYDVR0j BBgwFoAUTN2gWX3LyiySoXbQCEfrUPYSI1QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZDJmYTUxZS0zZmQ0LTQ1MjAtYjM3NS0wOWVlZjVlMGU1MTAvMC80Q0REQTA1OTdE Q0JDQTJDOTJBMTc2RDAwODQ3RUI1MEY2MTIyMzU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNENEREEwNTk3RENCQ0EyQzkyQTE3NkQwMDg0N0VCNTBGNjEy MjM1NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWQyZmE1MWUtM2ZkNC00NTIwLWIz NzUtMDllZWY1ZTBlNTEwLzAvNENEREEwNTk3RENCQ0EyQzkyQTE3NkQwMDg0N0VC NTBGNjEyMjM1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADAyseY0IlO7VLqPmRzBqYpsYH3vBpX7TqdZ a/o3r+iq/Ckhg9kn2nzS/7Ftv4+v+4+eavZWvtua/ysHyQKfibCSPpaCJ9gGTPEa rlI4hDH0hKkA/kvp/4VBQGwXenzKvbpPViDB7IgbbSHLOYDDxg+XmmFymdKtsKvu hwjFns0/ws13bwfCPE0zWTIsEoCoP1IqCBfZpfxXj14QCsojcxZqN/GptOirvRYT 37QDKbeTx+VTr9+hTh1xEKXlZfkhBk2FzEdfafh0BbIgrE7Ou1SxIzV3G9iVYQ4N 4KI1jzXg/65hffjUkDHJurISM+9D3Zsf0N0dcG2unEUpxSR/OEw= -----END CERTIFICATE-----Generated at Sat Aug 23 15:33:24 2025 by rpki-client