$ rpki-client -vvf repo-rpki.idnic.net/repo/9eab0a01-8ee4-4825-840d-112daef0aca8/0/4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.mft File: 4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.mft (raw, json) Hash identifier: bSmWkbkpHAD/WIOZnZRk0OCX7Ri6MSrvP/o9d4mLL5E= Subject key identifier: E7:E2:E9:AA:03:34:8D:E0:32:30:F8:CF:22:B6:8D:9A:05:B4:E9:B6 Authority key identifier: 4E:2A:A9:ED:35:DB:0F:27:6A:5F:F0:D4:02:0D:BE:A1:3E:04:C6:23 Certificate issuer: /CN=4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623 Certificate serial: 5CEC50FC0630852F99B296BF3B0864F408AFF73E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9eab0a01-8ee4-4825-840d-112daef0aca8/0/4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.mft Manifest number: 019D Signing time: Sat 23 Aug 2025 05:41:32 +0000 Manifest this update: Sat 23 Aug 2025 05:36:32 +0000 Manifest next update: Tue 26 Aug 2025 09:25:32 +0000 Files and hashes: 1: 323030313a6466303a6134303a3a2f34382d3438203d3e20313439333532.roa (hash: lidUKpIUI42q8veE3vysCaBMTq0HxAiYVl6H5XafxIU=) 2: 3130332e3137342e31342e302f32332d3234203d3e20313439333532.roa (hash: cJjmG0CdhjaR+QAVA5ZLIDFXiWwjI5yTIKuxLgCeRRg=) 3: 4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.crl (hash: uxiMOinc41Ow+naZGPs6C+fijJ9iHg3BayJR4lZ1StE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9eab0a01-8ee4-4825-840d-112daef0aca8/0/4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.crl rsync://repo-rpki.idnic.net/repo/9eab0a01-8ee4-4825-840d-112daef0aca8/0/4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 09:25:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:ec:50:fc:06:30:85:2f:99:b2:96:bf:3b:08:64:f4:08:af:f7:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623 Validity Not Before: Aug 23 05:36:32 2025 GMT Not After : Aug 26 09:25:32 2025 GMT Subject: CN=E7E2E9AA03348DE03230F8CF22B68D9A05B4E9B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a8:9a:83:ba:3e:c0:d3:7b:a6:86:ee:45:11: 8c:d9:ba:64:8e:4a:60:a9:55:46:30:51:db:88:e9: 00:57:f7:c8:3f:51:e9:97:62:22:b5:1d:66:5f:18: 7e:96:d7:b7:9e:df:68:38:6b:d5:dc:ba:8b:8d:d7: 63:8e:9f:4b:bb:f4:8b:80:4b:7d:d7:41:23:21:b9: 03:de:90:f7:f4:51:51:a0:99:4f:32:d5:e9:1c:cc: 9f:d4:ec:d6:e5:90:05:ec:13:4d:1e:37:72:64:98: 12:c7:99:af:e8:60:b6:5a:26:05:9e:8b:96:fc:31: 34:df:3c:7e:38:3f:43:13:03:01:99:ef:e8:6a:30: 5a:4b:48:c6:11:85:01:a3:4d:d0:71:37:82:4f:48: 80:6a:55:7c:b1:46:35:af:cc:0f:d9:df:a4:09:c6: 21:00:d0:f9:16:80:6a:6f:3a:60:ce:18:14:84:54: 9f:6d:9f:21:a8:45:c3:a8:3f:7e:c5:9a:69:5d:ee: 6c:e0:9d:7a:3a:84:ef:22:74:51:c4:79:36:f6:51: 96:bc:6e:f9:a4:80:ea:ba:ec:3c:a8:82:89:4d:d1: 54:b3:a1:5f:25:a3:fd:02:27:34:e7:c2:73:4b:13: d9:6f:f4:92:fc:ba:ed:5d:31:a1:99:59:92:4f:80: d9:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:E2:E9:AA:03:34:8D:E0:32:30:F8:CF:22:B6:8D:9A:05:B4:E9:B6 X509v3 Authority Key Identifier: keyid:4E:2A:A9:ED:35:DB:0F:27:6A:5F:F0:D4:02:0D:BE:A1:3E:04:C6:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9eab0a01-8ee4-4825-840d-112daef0aca8/0/4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9eab0a01-8ee4-4825-840d-112daef0aca8/0/4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:91:68:49:56:c5:6f:19:7b:b9:cd:85:54:a7:b7:d3:db:22: a8:42:00:18:09:35:49:0c:70:1c:fe:07:f0:59:9b:06:68:ca: 5f:3d:88:b7:72:d7:97:80:33:ee:94:f0:e8:3a:ac:9f:8c:38: 36:d7:0c:fb:91:31:e8:3b:09:41:80:e4:7a:ac:b0:4a:c4:7e: 9e:ad:ed:2e:f2:7a:f8:ca:a6:0c:1d:c3:8a:d1:5f:be:31:50: fe:db:33:64:32:30:71:2b:32:7c:91:4d:bf:ba:d2:92:a5:20: 2c:24:bd:bd:29:49:e8:58:7f:ce:2d:38:17:f5:59:1f:c6:34: 12:19:02:0d:76:70:84:08:60:b8:aa:86:9c:9c:d8:ee:1d:12: 9f:9e:51:f8:15:d1:27:b9:ae:f8:82:2c:71:a0:e1:4b:3c:87: 90:12:e7:ef:08:f1:f0:3f:8a:f4:2e:cd:4d:ba:03:30:82:e3: 53:fa:ae:17:ca:68:b9:8c:a4:5c:34:6e:8c:3b:70:85:49:79: b3:31:0c:39:9a:b7:65:5f:58:7c:50:59:c3:8e:25:60:7c:eb: ff:68:4d:a7:60:d4:44:d0:6e:e6:39:97:c9:5c:37:06:7d:77: 58:7d:10:68:f0:c1:fb:7a:5d:33:f2:90:96:76:b6:ea:4a:dc: 8d:7d:81:de -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXOxQ/AYwhS+Zspa/Owhk9Aiv9z4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEUyQUE5RUQzNURCMEYyNzZBNUZGMEQ0MDIwREJFQTEz RTA0QzYyMzAeFw0yNTA4MjMwNTM2MzJaFw0yNTA4MjYwOTI1MzJaMDMxMTAvBgNV BAMTKEU3RTJFOUFBMDMzNDhERTAzMjMwRjhDRjIyQjY4RDlBMDVCNEU5QjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3qJqDuj7A03umhu5FEYzZumSO SmCpVUYwUduI6QBX98g/UemXYiK1HWZfGH6W17ee32g4a9XcuouN12OOn0u79IuA S33XQSMhuQPekPf0UVGgmU8y1ekczJ/U7NblkAXsE00eN3JkmBLHma/oYLZaJgWe i5b8MTTfPH44P0MTAwGZ7+hqMFpLSMYRhQGjTdBxN4JPSIBqVXyxRjWvzA/Z36QJ xiEA0PkWgGpvOmDOGBSEVJ9tnyGoRcOoP37Fmmld7mzgnXo6hO8idFHEeTb2UZa8 bvmkgOq67DyogolN0VSzoV8lo/0CJzTnwnNLE9lv9JL8uu1dMaGZWZJPgNlzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5+LpqgM0jeAyMPjPIraNmgW06bYwHwYDVR0j BBgwFoAUTiqp7TXbDydqX/DUAg2+oT4ExiMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZWFiMGEwMS04ZWU0LTQ4MjUtODQwZC0xMTJkYWVmMGFjYTgvMC80RTJBQTlFRDM1 REIwRjI3NkE1RkYwRDQwMjBEQkVBMTNFMDRDNjIzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEUyQUE5RUQzNURCMEYyNzZBNUZGMEQ0MDIwREJFQTEzRTA0 QzYyMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWVhYjBhMDEtOGVlNC00ODI1LTg0 MGQtMTEyZGFlZjBhY2E4LzAvNEUyQUE5RUQzNURCMEYyNzZBNUZGMEQ0MDIwREJF QTEzRTA0QzYyMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADGRaElWxW8Ze7nNhVSnt9PbIqhCABgJNUkM cBz+B/BZmwZoyl89iLdy15eAM+6U8Og6rJ+MODbXDPuRMeg7CUGA5HqssErEfp6t 7S7yevjKpgwdw4rRX74xUP7bM2QyMHErMnyRTb+60pKlICwkvb0pSehYf84tOBf1 WR/GNBIZAg12cIQIYLiqhpyc2O4dEp+eUfgV0Se5rviCLHGg4Us8h5AS5+8I8fA/ ivQuzU26AzCC41P6rhfKaLmMpFw0bow7cIVJebMxDDmat2VfWHxQWcOOJWB86/9o Tadg1ETQbuY5l8lcNwZ9d1h9EGjwwft6XTPykJZ2tupK3I19gd4= -----END CERTIFICATE-----Generated at Sat Aug 23 12:29:24 2025 by rpki-client