$ rpki-client -vvf repo-rpki.idnic.net/repo/9eeb45de-5183-4a3a-b06d-8bb8d4506b06/0/849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.mft File: 849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.mft (raw, json) Hash identifier: JHzikiUv1A4DSf5opTm4LYL1do8ndkW+MneqPakSfHo= Subject key identifier: 23:53:2E:53:A1:CC:99:CE:4B:88:B1:36:8A:C7:A3:E6:B9:E9:F7:F4 Authority key identifier: 84:9E:9E:24:0A:6B:F4:42:3B:1E:7D:22:05:D4:1E:C8:0D:6E:AB:4F Certificate issuer: /CN=849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F Certificate serial: 337D8C1E3C12977F80E45229E540F866F2A8F309 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9eeb45de-5183-4a3a-b06d-8bb8d4506b06/0/849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.mft Manifest number: 01C4 Signing time: Thu 21 Aug 2025 14:32:01 +0000 Manifest this update: Thu 21 Aug 2025 14:27:01 +0000 Manifest next update: Sun 24 Aug 2025 20:05:01 +0000 Files and hashes: 1: 849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.crl (hash: 6r1TeQd4QZrYcHxPOl3z2E7TUsb/+dHNxWZBTmyfxiI=) 2: 3130332e362e3136362e302f32342d3234203d3e20313439393335.roa (hash: qsAO4cOsO4ax3oPbTen8Sd837s3C+50yjyG9ueyoUI8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9eeb45de-5183-4a3a-b06d-8bb8d4506b06/0/849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.crl rsync://repo-rpki.idnic.net/repo/9eeb45de-5183-4a3a-b06d-8bb8d4506b06/0/849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 20:05:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:7d:8c:1e:3c:12:97:7f:80:e4:52:29:e5:40:f8:66:f2:a8:f3:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F Validity Not Before: Aug 21 14:27:01 2025 GMT Not After : Aug 24 20:05:01 2025 GMT Subject: CN=23532E53A1CC99CE4B88B1368AC7A3E6B9E9F7F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:16:8a:9c:1b:28:99:a4:a5:c6:98:de:f6:41: 09:0c:81:71:84:ae:e1:c4:0d:46:3a:4d:40:34:63: 9e:d9:e0:29:72:70:69:33:88:26:22:6b:e6:ac:8e: 6c:24:9e:bb:8b:79:e1:00:0d:6d:c8:90:f1:69:05: e3:23:ef:d3:ce:da:3f:d5:b1:08:f4:a0:f2:8f:48: 5e:5f:c6:94:db:13:e9:26:4c:ab:12:45:08:ff:cf: 40:af:84:c8:d2:51:30:41:99:78:98:29:35:67:c1: 97:98:28:e4:7b:cc:7f:16:08:1d:af:fa:8b:9c:80: c4:ef:53:e7:6a:ef:d4:8f:58:1b:a6:5a:c0:1c:1c: c7:f8:eb:bd:35:4b:e6:e7:0f:28:23:27:0f:22:a9: ff:b6:fc:34:45:7c:e1:93:05:e0:1e:dc:55:aa:28: 52:54:0e:0a:e6:62:27:50:05:be:69:5e:16:5e:d0: 7d:c2:4e:b8:8f:5f:13:1d:85:58:52:59:64:c9:02: 57:42:22:50:28:63:2f:23:94:67:4a:ba:22:d6:81: 4b:e4:1c:e2:9a:b0:e3:bc:c1:61:a2:f1:07:90:06: 3d:f7:24:21:cd:4e:65:79:bb:12:09:bc:39:df:1d: c8:17:5b:fd:0c:90:99:64:1d:92:c2:9f:cf:e5:3c: 48:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:53:2E:53:A1:CC:99:CE:4B:88:B1:36:8A:C7:A3:E6:B9:E9:F7:F4 X509v3 Authority Key Identifier: keyid:84:9E:9E:24:0A:6B:F4:42:3B:1E:7D:22:05:D4:1E:C8:0D:6E:AB:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9eeb45de-5183-4a3a-b06d-8bb8d4506b06/0/849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9eeb45de-5183-4a3a-b06d-8bb8d4506b06/0/849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:a6:8d:cc:b6:fb:b2:86:8a:5e:3f:38:2d:49:23:32:ef:ff: 1b:ef:ee:0d:37:bd:48:f3:13:c8:4c:59:f3:de:1a:a5:74:91: c5:f8:ca:db:b4:c2:ba:7e:21:d0:75:49:61:c8:2f:45:38:be: eb:a1:20:bb:38:31:2b:45:40:3e:28:8e:4d:2c:54:8e:6d:d2: b2:a5:f3:7b:cf:0e:df:36:fa:6d:a3:2b:34:fe:aa:03:da:70: 73:81:0c:98:cf:7e:94:02:2a:e8:3f:83:55:29:72:bd:93:ee: c7:09:97:76:18:f4:86:27:ea:19:c7:6d:ac:df:d7:94:78:d8: 74:33:a3:be:4c:6d:0b:bf:ff:fc:5f:6d:be:ec:57:53:d4:fa: 63:69:f4:89:5c:54:e6:9e:d2:00:43:84:b9:fe:af:05:3c:e7: d2:58:15:f4:e6:68:65:b2:97:d2:5e:a7:ea:47:70:c4:b5:3e: 9f:03:fc:b6:f0:5e:e6:2b:b3:de:e9:53:f7:65:99:4b:94:5a: 22:ca:73:ca:90:11:3d:a4:43:ce:37:cf:b0:0a:89:d7:ee:fe: 96:5c:0a:38:94:1c:a8:53:7c:c4:5f:7a:6c:9b:4e:e9:41:d6: 07:63:1f:b9:41:5f:ea:23:43:69:b4:ac:94:73:61:5c:82:69: fd:93:81:53 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM32MHjwSl3+A5FIp5UD4ZvKo8wkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQ5RTlFMjQwQTZCRjQ0MjNCMUU3RDIyMDVENDFFQzgw RDZFQUI0RjAeFw0yNTA4MjExNDI3MDFaFw0yNTA4MjQyMDA1MDFaMDMxMTAvBgNV BAMTKDIzNTMyRTUzQTFDQzk5Q0U0Qjg4QjEzNjhBQzdBM0U2QjlFOUY3RjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMFoqcGyiZpKXGmN72QQkMgXGE ruHEDUY6TUA0Y57Z4ClycGkziCYia+asjmwknruLeeEADW3IkPFpBeMj79PO2j/V sQj0oPKPSF5fxpTbE+kmTKsSRQj/z0CvhMjSUTBBmXiYKTVnwZeYKOR7zH8WCB2v +oucgMTvU+dq79SPWBumWsAcHMf46701S+bnDygjJw8iqf+2/DRFfOGTBeAe3FWq KFJUDgrmYidQBb5pXhZe0H3CTriPXxMdhVhSWWTJAldCIlAoYy8jlGdKuiLWgUvk HOKasOO8wWGi8QeQBj33JCHNTmV5uxIJvDnfHcgXW/0MkJlkHZLCn8/lPEjBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUI1MuU6HMmc5LiLE2isej5rnp9/QwHwYDVR0j BBgwFoAUhJ6eJApr9EI7Hn0iBdQeyA1uq08wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZWViNDVkZS01MTgzLTRhM2EtYjA2ZC04YmI4ZDQ1MDZiMDYvMC84NDlFOUUyNDBB NkJGNDQyM0IxRTdEMjIwNUQ0MUVDODBENkVBQjRGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODQ5RTlFMjQwQTZCRjQ0MjNCMUU3RDIyMDVENDFFQzgwRDZF QUI0Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWVlYjQ1ZGUtNTE4My00YTNhLWIw NmQtOGJiOGQ0NTA2YjA2LzAvODQ5RTlFMjQwQTZCRjQ0MjNCMUU3RDIyMDVENDFF QzgwRDZFQUI0Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIimjcy2+7KGil4/OC1JIzLv/xvv7g03vUjz E8hMWfPeGqV0kcX4ytu0wrp+IdB1SWHIL0U4vuuhILs4MStFQD4ojk0sVI5t0rKl 83vPDt82+m2jKzT+qgPacHOBDJjPfpQCKug/g1Upcr2T7scJl3YY9IYn6hnHbazf 15R42HQzo75MbQu///xfbb7sV1PU+mNp9IlcVOae0gBDhLn+rwU859JYFfTmaGWy l9Jep+pHcMS1Pp8D/LbwXuYrs97pU/dlmUuUWiLKc8qQET2kQ843z7AKidfu/pZc CjiUHKhTfMRfemybTulB1gdjH7lBX+ojQ2m0rJRzYVyCaf2TgVM= -----END CERTIFICATE-----Generated at Sat Aug 23 21:05:38 2025 by rpki-client