$ rpki-client -vvf repo-rpki.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0/4617272EE875B55CD5F2A88330A95F6410A3EB1B.mft File: 4617272EE875B55CD5F2A88330A95F6410A3EB1B.mft (raw, json) Hash identifier: 6Y/aLIJYs7vxSvF1aVP1BhFaZQFIhVGWDR6YE5RsbCI= Subject key identifier: 63:F8:26:D0:65:55:1A:CB:7D:29:A8:ED:05:1C:6E:F1:4E:B3:11:F5 Authority key identifier: 46:17:27:2E:E8:75:B5:5C:D5:F2:A8:83:30:A9:5F:64:10:A3:EB:1B Certificate issuer: /CN=4617272EE875B55CD5F2A88330A95F6410A3EB1B Certificate serial: 2F8293C2C1B3BD63BB4DFFF8342CB88D43832773 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4617272EE875B55CD5F2A88330A95F6410A3EB1B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0/4617272EE875B55CD5F2A88330A95F6410A3EB1B.mft Manifest number: ED Signing time: Sat 23 Aug 2025 03:01:10 +0000 Manifest this update: Sat 23 Aug 2025 02:56:09 +0000 Manifest next update: Tue 26 Aug 2025 05:24:09 +0000 Files and hashes: 1: 3135372e31352e34352e302f32342d3234203d3e20313532333931.roa (hash: 2CY8OOUSlhDxwOprH4RWK6WUcOME935meBmsXq8UBEQ=) 2: 3135372e31352e34342e302f32342d3234203d3e20313532333931.roa (hash: GmvMNkypXN/dIsdT8yqrh6k/wsMAgACMxsXszxhLEFE=) 3: 3135372e31352e34342e302f32332d3233203d3e20313532333931.roa (hash: CWrSRGIb9DWeCqXVEcCNk243mh86Y3a1VFur2jkpr3Y=) 4: 4617272EE875B55CD5F2A88330A95F6410A3EB1B.crl (hash: E3SHBD/uJ8OMp2A5Q0vIb5V51w2Vp2RZz5qyvhuStYE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0/4617272EE875B55CD5F2A88330A95F6410A3EB1B.crl rsync://repo-rpki.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0/4617272EE875B55CD5F2A88330A95F6410A3EB1B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4617272EE875B55CD5F2A88330A95F6410A3EB1B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 05:24:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:82:93:c2:c1:b3:bd:63:bb:4d:ff:f8:34:2c:b8:8d:43:83:27:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4617272EE875B55CD5F2A88330A95F6410A3EB1B Validity Not Before: Aug 23 02:56:09 2025 GMT Not After : Aug 26 05:24:09 2025 GMT Subject: CN=63F826D065551ACB7D29A8ED051C6EF14EB311F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:13:a8:bf:75:65:dd:14:d5:46:55:03:10:2b: 46:6c:0d:3e:20:59:44:09:47:cf:a9:d6:a3:bb:80: 8d:06:97:48:2b:f5:27:8e:4b:93:53:c2:01:cf:19: 0e:9d:29:2a:4b:8c:0d:3b:19:54:88:be:2c:40:b0: 04:fe:04:bd:54:08:81:56:2a:de:4a:3d:76:8a:3b: 61:29:3f:0e:44:66:f3:d0:4f:bf:9e:15:ce:bd:75: 9d:48:74:52:43:44:57:07:8a:72:d9:28:01:42:fd: 6e:1a:79:63:14:a0:f3:05:65:0f:95:b5:4a:16:92: 17:2d:8d:e5:92:a5:92:b5:4e:4e:4c:33:b3:69:ff: 70:aa:0c:65:e8:e4:cf:e5:20:62:bf:96:f2:90:a2: 6f:d3:b5:79:ed:14:6c:bb:16:ab:97:63:df:5d:15: ef:d7:89:8e:1e:3e:5d:28:24:f3:44:59:36:e7:c5: d6:94:71:02:2b:43:c8:fa:73:36:b9:c6:9e:40:88: 76:80:23:7a:94:ee:35:16:c3:3e:79:56:05:da:ae: dd:3a:e7:58:57:2f:68:d7:c8:ee:a0:fe:37:5f:c4: 80:c2:d9:1f:38:d9:4f:a6:41:11:18:2f:de:99:d1: b4:93:5d:e6:f8:fa:90:7c:08:0e:4a:1c:67:dc:7e: b2:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:F8:26:D0:65:55:1A:CB:7D:29:A8:ED:05:1C:6E:F1:4E:B3:11:F5 X509v3 Authority Key Identifier: keyid:46:17:27:2E:E8:75:B5:5C:D5:F2:A8:83:30:A9:5F:64:10:A3:EB:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0/4617272EE875B55CD5F2A88330A95F6410A3EB1B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4617272EE875B55CD5F2A88330A95F6410A3EB1B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0/4617272EE875B55CD5F2A88330A95F6410A3EB1B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:19:95:ac:e1:01:f2:ff:56:7c:3a:1d:84:e7:aa:fb:a2:44: b1:5c:c5:4a:33:8c:9b:b5:70:18:64:04:0c:a4:4c:c0:7d:c7: 5a:22:ee:63:94:5b:83:04:01:ce:8a:ff:be:de:c0:51:1f:e3: 47:d3:d1:d8:4f:8e:01:15:b7:34:d7:43:18:ee:cc:c7:af:37: a6:32:e4:3b:44:8b:3e:f9:38:bf:21:e6:c4:de:25:8d:ce:a5: bb:59:65:b4:c1:33:cf:16:52:6b:58:e0:80:8e:46:ca:c1:bc: 58:4c:7c:52:fd:ab:76:d9:7e:71:52:7d:be:d1:56:ae:80:a0: f1:f5:82:19:ba:cb:56:2f:c7:d4:91:45:2f:f8:3e:61:55:e2: 0e:5a:b4:04:21:d1:14:dd:e1:0c:20:7d:9d:0f:4b:83:d2:12: 93:28:ee:23:53:21:1f:a9:fd:47:cd:11:ff:6a:d2:15:74:e1: a8:31:32:64:bf:18:cb:39:54:55:77:28:f5:f2:fb:27:27:28: c3:f4:49:4e:46:5b:bf:9a:81:dd:e6:f0:32:19:24:30:a1:54: 88:6f:74:ae:17:8c:37:92:e1:42:de:e2:af:0f:be:8a:b2:d9: 41:02:68:b3:e4:fb:40:4f:f3:9f:cd:9b:86:11:e4:2b:a9:09: 3b:0e:d9:a4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL4KTwsGzvWO7Tf/4NCy4jUODJ3MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDYxNzI3MkVFODc1QjU1Q0Q1RjJBODgzMzBBOTVGNjQx MEEzRUIxQjAeFw0yNTA4MjMwMjU2MDlaFw0yNTA4MjYwNTI0MDlaMDMxMTAvBgNV BAMTKDYzRjgyNkQwNjU1NTFBQ0I3RDI5QThFRDA1MUM2RUYxNEVCMzExRjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsE6i/dWXdFNVGVQMQK0ZsDT4g WUQJR8+p1qO7gI0Gl0gr9SeOS5NTwgHPGQ6dKSpLjA07GVSIvixAsAT+BL1UCIFW Kt5KPXaKO2EpPw5EZvPQT7+eFc69dZ1IdFJDRFcHinLZKAFC/W4aeWMUoPMFZQ+V tUoWkhctjeWSpZK1Tk5MM7Np/3CqDGXo5M/lIGK/lvKQom/TtXntFGy7FquXY99d Fe/XiY4ePl0oJPNEWTbnxdaUcQIrQ8j6cza5xp5AiHaAI3qU7jUWwz55VgXart06 51hXL2jXyO6g/jdfxIDC2R842U+mQREYL96Z0bSTXeb4+pB8CA5KHGfcfrIhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUY/gm0GVVGst9KajtBRxu8U6zEfUwHwYDVR0j BBgwFoAURhcnLuh1tVzV8qiDMKlfZBCj6xswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZmRhZjA2YS1mNjI0LTQyY2YtYmIxOS1iNmJiZjkzMWFhYzgvMC80NjE3MjcyRUU4 NzVCNTVDRDVGMkE4ODMzMEE5NUY2NDEwQTNFQjFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNDYxNzI3MkVFODc1QjU1Q0Q1RjJBODgzMzBBOTVGNjQxMEEz RUIxQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWZkYWYwNmEtZjYyNC00MmNmLWJi MTktYjZiYmY5MzFhYWM4LzAvNDYxNzI3MkVFODc1QjU1Q0Q1RjJBODgzMzBBOTVG NjQxMEEzRUIxQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACMZlazhAfL/Vnw6HYTnqvuiRLFcxUozjJu1 cBhkBAykTMB9x1oi7mOUW4MEAc6K/77ewFEf40fT0dhPjgEVtzTXQxjuzMevN6Yy 5DtEiz75OL8h5sTeJY3OpbtZZbTBM88WUmtY4ICORsrBvFhMfFL9q3bZfnFSfb7R Vq6AoPH1ghm6y1Yvx9SRRS/4PmFV4g5atAQh0RTd4QwgfZ0PS4PSEpMo7iNTIR+p /UfNEf9q0hV04agxMmS/GMs5VFV3KPXy+ycnKMP0SU5GW7+agd3m8DIZJDChVIhv dK4XjDeS4ULe4q8Pvoqy2UECaLPk+0BP85/Nm4YR5CupCTsO2aQ= -----END CERTIFICATE-----Generated at Sun Aug 24 00:35:30 2025 by rpki-client