$ rpki-client -vvf repo-rpki.idnic.net/repo/ae89e859-3c2c-4a09-a4a9-37323ea5de22/0/4A906D4F534B26A0E62898882630292936CEA54A.mft File: 4A906D4F534B26A0E62898882630292936CEA54A.mft (raw, json) Hash identifier: OgjeWh5AdCuwzkfTQzQt1XhQoE7UtlR3yiBNc0JppNc= Subject key identifier: DB:B9:39:11:63:25:9A:82:AC:57:B8:2D:7A:7B:34:99:5A:19:14:39 Authority key identifier: 4A:90:6D:4F:53:4B:26:A0:E6:28:98:88:26:30:29:29:36:CE:A5:4A Certificate issuer: /CN=4A906D4F534B26A0E62898882630292936CEA54A Certificate serial: 7A860A8C977DCE01A5FEC592A7C22E17AA39C852 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A906D4F534B26A0E62898882630292936CEA54A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ae89e859-3c2c-4a09-a4a9-37323ea5de22/0/4A906D4F534B26A0E62898882630292936CEA54A.mft Manifest number: 0117 Signing time: Sun 29 Jun 2025 19:51:45 +0000 Manifest this update: Sun 29 Jun 2025 19:46:45 +0000 Manifest next update: Wed 02 Jul 2025 20:11:45 +0000 Files and hashes: 1: 3130332e3137312e38332e302f32342d3234203d3e20313432333733.roa (hash: q1try4eWeXGNMJXVZs9ilwAbNDidILu0Qdkiuiy95SY=) 2: 3130332e3137312e38322e302f32342d3234203d3e20313432333733.roa (hash: QW0riT2ZIbJQ6bDdQHJpDVDRJpk68aw/94juFPRXEvU=) 3: 4A906D4F534B26A0E62898882630292936CEA54A.crl (hash: WImObfpW2Nr6u99cFXd+Ypm59EImr40LrItW37A4T8g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ae89e859-3c2c-4a09-a4a9-37323ea5de22/0/4A906D4F534B26A0E62898882630292936CEA54A.crl rsync://repo-rpki.idnic.net/repo/ae89e859-3c2c-4a09-a4a9-37323ea5de22/0/4A906D4F534B26A0E62898882630292936CEA54A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A906D4F534B26A0E62898882630292936CEA54A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 20:11:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:86:0a:8c:97:7d:ce:01:a5:fe:c5:92:a7:c2:2e:17:aa:39:c8:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A906D4F534B26A0E62898882630292936CEA54A Validity Not Before: Jun 29 19:46:45 2025 GMT Not After : Jul 2 20:11:45 2025 GMT Subject: CN=DBB9391163259A82AC57B82D7A7B34995A191439 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:d9:a3:c0:a3:a0:eb:e4:3e:dc:1e:8a:45:3a: 76:59:1c:42:e2:4f:d8:c6:d4:34:87:65:8e:38:31: c9:52:5a:0a:dc:12:c0:1c:60:88:15:a4:ee:9f:4d: af:80:b7:06:ec:e2:ce:39:73:7a:a3:84:79:d3:a7: cf:62:c6:38:ed:ac:e4:5d:55:df:1d:1d:eb:77:b8: 34:24:3e:4c:a6:eb:20:cf:04:4a:e5:de:9f:0a:13: 7b:bb:25:c9:6f:f1:b0:d7:d3:1c:89:77:f0:92:c3: 33:27:cc:ae:13:cb:05:da:3c:50:10:dc:bb:a7:1d: 37:fb:2b:35:36:be:a3:30:76:40:88:15:eb:9f:e5: 72:e1:93:43:c2:7f:38:a5:f7:15:cd:e7:5e:1b:f6: 75:27:0b:30:92:db:c9:a1:be:1a:e8:03:fa:3a:16: ef:5f:27:6c:7f:49:dd:80:4d:24:80:fd:6e:69:c3: d5:de:27:d5:f9:76:87:ba:c4:20:b9:2f:f5:6f:0a: 4a:92:4e:73:2e:6a:98:b9:74:e3:7c:c5:e6:6d:3f: 6d:7d:2e:28:2a:7c:18:69:ef:9b:4d:c7:b7:cd:2c: d9:3e:51:f6:5d:a4:78:11:ff:d9:bb:e8:c2:b5:81: 86:e4:bc:30:8c:e3:56:69:63:39:9b:55:9a:3d:b4: 03:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:B9:39:11:63:25:9A:82:AC:57:B8:2D:7A:7B:34:99:5A:19:14:39 X509v3 Authority Key Identifier: keyid:4A:90:6D:4F:53:4B:26:A0:E6:28:98:88:26:30:29:29:36:CE:A5:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ae89e859-3c2c-4a09-a4a9-37323ea5de22/0/4A906D4F534B26A0E62898882630292936CEA54A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A906D4F534B26A0E62898882630292936CEA54A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae89e859-3c2c-4a09-a4a9-37323ea5de22/0/4A906D4F534B26A0E62898882630292936CEA54A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:73:ca:cb:e9:80:51:f6:c0:1a:55:db:f7:67:12:af:d3:c2: 26:eb:84:09:f2:69:bd:31:bb:93:d4:0b:6a:08:5e:75:8d:7b: fe:fa:fc:28:cc:66:67:0d:db:8c:3d:1e:c9:2e:0a:9a:98:03: 94:48:02:4f:11:0a:06:8c:7a:f7:33:94:0e:cd:ef:2d:db:65: de:ac:e7:f9:10:ff:e0:d4:b3:b6:b0:9c:0d:ff:bd:8c:72:85: 19:a3:44:a9:82:5c:cd:24:7d:93:bc:41:14:c4:95:bf:83:de: 10:61:d9:2e:38:3f:23:41:f0:97:8b:6b:06:f5:87:59:a7:e9: b1:cc:bf:68:ff:1c:7c:d9:08:9d:c1:5f:52:98:39:7f:ba:46: 4a:4b:50:82:86:01:2e:52:4c:28:75:0d:1c:e9:e9:b0:22:ab: 80:7f:5f:a3:6b:94:e2:29:3f:11:ce:df:dc:67:41:37:c0:5d: e8:13:2a:32:8b:75:4c:e7:51:08:97:37:a9:5a:a9:88:4d:15: b8:0f:c7:8e:82:73:b8:86:82:23:ea:3e:d2:60:67:69:46:a2: 02:d9:27:97:da:08:24:81:64:eb:3a:9e:70:7d:6c:dc:17:36: 7c:e8:39:99:36:aa:cb:77:b5:05:a8:2e:4c:fa:8a:1a:b3:4b: eb:d2:b3:0f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeoYKjJd9zgGl/sWSp8IuF6o5yFIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEE5MDZENEY1MzRCMjZBMEU2Mjg5ODg4MjYzMDI5Mjkz NkNFQTU0QTAeFw0yNTA2MjkxOTQ2NDVaFw0yNTA3MDIyMDExNDVaMDMxMTAvBgNV BAMTKERCQjkzOTExNjMyNTlBODJBQzU3QjgyRDdBN0IzNDk5NUExOTE0MzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn2aPAo6Dr5D7cHopFOnZZHELi T9jG1DSHZY44MclSWgrcEsAcYIgVpO6fTa+Atwbs4s45c3qjhHnTp89ixjjtrORd Vd8dHet3uDQkPkym6yDPBErl3p8KE3u7Jclv8bDX0xyJd/CSwzMnzK4TywXaPFAQ 3LunHTf7KzU2vqMwdkCIFeuf5XLhk0PCfzil9xXN514b9nUnCzCS28mhvhroA/o6 Fu9fJ2x/Sd2ATSSA/W5pw9XeJ9X5doe6xCC5L/VvCkqSTnMuapi5dON8xeZtP219 LigqfBhp75tNx7fNLNk+UfZdpHgR/9m76MK1gYbkvDCM41ZpYzmbVZo9tAPZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU27k5EWMlmoKsV7gtens0mVoZFDkwHwYDVR0j BBgwFoAUSpBtT1NLJqDmKJiIJjApKTbOpUowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZTg5ZTg1OS0zYzJjLTRhMDktYTRhOS0zNzMyM2VhNWRlMjIvMC80QTkwNkQ0RjUz NEIyNkEwRTYyODk4ODgyNjMwMjkyOTM2Q0VBNTRBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEE5MDZENEY1MzRCMjZBMEU2Mjg5ODg4MjYzMDI5MjkzNkNF QTU0QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWU4OWU4NTktM2MyYy00YTA5LWE0 YTktMzczMjNlYTVkZTIyLzAvNEE5MDZENEY1MzRCMjZBMEU2Mjg5ODg4MjYzMDI5 MjkzNkNFQTU0QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFFzysvpgFH2wBpV2/dnEq/TwibrhAnyab0x u5PUC2oIXnWNe/76/CjMZmcN24w9HskuCpqYA5RIAk8RCgaMevczlA7N7y3bZd6s 5/kQ/+DUs7awnA3/vYxyhRmjRKmCXM0kfZO8QRTElb+D3hBh2S44PyNB8JeLawb1 h1mn6bHMv2j/HHzZCJ3BX1KYOX+6RkpLUIKGAS5STCh1DRzp6bAiq4B/X6NrlOIp PxHO39xnQTfAXegTKjKLdUznUQiXN6laqYhNFbgPx46Cc7iGgiPqPtJgZ2lGogLZ J5faCCSBZOs6nnB9bNwXNnzoOZk2qst3tQWoLkz6ihqzS+vSsw8= -----END CERTIFICATE-----Generated at Mon Jun 30 13:14:59 2025 by rpki-client