$ rpki-client -vvf repo-rpki.idnic.net/repo/b3991f7a-0a71-4f0d-933f-ecf813530274/0/A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.mft File: A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.mft (raw, json) Hash identifier: mbxFj5/eX4owNsUpzQXJ+cVLsGvtFeJI1IyL+qyLD/4= Subject key identifier: 50:FF:43:B7:3A:89:7C:96:26:DC:1B:22:FA:36:66:FA:C7:9F:2E:55 Authority key identifier: A4:B6:31:C8:CF:E0:EE:72:AC:D5:F2:08:FC:12:39:06:4F:6C:DE:44 Certificate issuer: /CN=A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44 Certificate serial: 2F3F35EBBA0A2469C9F719383EDB7E4BE61E534A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b3991f7a-0a71-4f0d-933f-ecf813530274/0/A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.mft Manifest number: C1 Signing time: Fri 22 Aug 2025 02:11:10 +0000 Manifest this update: Fri 22 Aug 2025 02:06:10 +0000 Manifest next update: Mon 25 Aug 2025 11:07:10 +0000 Files and hashes: 1: A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.crl (hash: DPXO1AnG0TPM8W7YSy32Ylc1bK1fufvmSEwjFkv8hN4=) 2: 3135372e36362e3234382e302f32332d3234203d3e20313532373937.roa (hash: vC1sLrROQammNbgh64OVHa3goyUf/oRsNt6WGQKKJQo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b3991f7a-0a71-4f0d-933f-ecf813530274/0/A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.crl rsync://repo-rpki.idnic.net/repo/b3991f7a-0a71-4f0d-933f-ecf813530274/0/A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 11:07:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:3f:35:eb:ba:0a:24:69:c9:f7:19:38:3e:db:7e:4b:e6:1e:53:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44 Validity Not Before: Aug 22 02:06:10 2025 GMT Not After : Aug 25 11:07:10 2025 GMT Subject: CN=50FF43B73A897C9626DC1B22FA3666FAC79F2E55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:0e:38:2f:c3:3c:74:8d:4b:d1:42:a6:e1:04: 31:f5:d2:55:92:f5:dc:d4:a1:23:9d:f5:2f:dd:98: 03:24:80:6e:d7:48:97:30:c7:de:21:44:c5:94:be: de:6b:0a:83:55:25:33:ac:6e:b1:fc:ff:bb:2e:47: ad:97:1e:f3:d5:ec:a1:10:b8:de:84:c5:04:31:47: d4:ce:85:11:d8:1c:7e:a4:c2:77:cb:44:66:5e:a1: 7f:c2:e5:9b:cc:42:b7:59:48:b9:e9:22:28:5b:d3: d8:16:cf:e6:15:a3:cb:95:71:2c:e7:d7:1f:95:c9: cf:c8:44:ce:fe:7c:8a:96:22:c7:1e:f3:58:1e:7d: 72:47:fe:30:3b:b6:8f:28:82:d9:6d:57:27:99:2c: 25:d0:a2:f3:e1:94:03:45:ef:20:cf:4a:3b:d3:ae: 33:d4:15:34:16:8b:62:30:d1:a3:a5:d5:78:9c:d4: 68:bd:02:03:d5:55:a7:8e:8d:56:8c:ef:0e:ea:5f: bc:ce:8f:8d:5b:de:86:5e:98:86:bc:df:03:00:f1: 6b:41:a1:be:e4:a1:bf:02:bc:a3:b5:d5:50:fe:c8: 89:16:68:cd:bb:b3:c4:32:85:da:2a:16:7b:1f:25: d8:6f:f4:ce:a7:75:e5:95:ce:43:9a:a5:c0:8e:e2: b2:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:FF:43:B7:3A:89:7C:96:26:DC:1B:22:FA:36:66:FA:C7:9F:2E:55 X509v3 Authority Key Identifier: keyid:A4:B6:31:C8:CF:E0:EE:72:AC:D5:F2:08:FC:12:39:06:4F:6C:DE:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b3991f7a-0a71-4f0d-933f-ecf813530274/0/A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b3991f7a-0a71-4f0d-933f-ecf813530274/0/A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:c5:c2:11:ed:7a:19:fa:a3:3c:f9:b3:6d:50:d3:3d:65:83: 9f:38:a4:05:92:13:2e:79:1b:f1:45:b8:16:ac:70:07:91:78: 59:a2:84:7c:ad:4e:7d:d6:ec:2f:a3:0c:e1:a6:b8:4e:5b:c8: 32:01:fb:d0:03:f3:1a:54:e0:73:8f:22:f9:c0:6a:20:fc:c5: d7:f0:69:fc:70:e3:92:5c:ef:7e:9f:41:78:e2:60:14:94:c1: 84:72:f3:48:1a:1a:7f:82:45:b2:d4:ce:75:18:e5:81:e8:f2: 6b:87:ef:7b:24:f3:a0:2a:4a:65:54:8c:2b:49:b2:73:5b:1a: 9c:d4:d6:6d:9f:c0:51:9f:3d:c3:51:00:b3:63:a6:37:40:39: 89:eb:43:67:ba:72:20:d6:0e:88:d4:1f:ef:91:db:8b:ae:b7: 9e:5f:2d:a9:d7:30:d6:b4:d3:b0:7d:c9:34:62:92:07:30:4b: 06:06:13:49:f3:83:4e:15:ed:fd:d5:d8:fc:6b:87:0f:53:21: f2:60:84:7e:ec:0f:44:82:8c:78:f2:8c:43:b2:2e:de:ce:0a: bf:ff:39:99:af:9f:1e:e8:f6:bd:bb:75:e5:aa:af:42:c3:6e: 86:78:86:36:87:61:94:b9:5f:4a:8a:52:81:c5:6e:32:e0:8c: cb:ac:b2:56 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULz8167oKJGnJ9xk4Ptt+S+YeU0owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTRCNjMxQzhDRkUwRUU3MkFDRDVGMjA4RkMxMjM5MDY0 RjZDREU0NDAeFw0yNTA4MjIwMjA2MTBaFw0yNTA4MjUxMTA3MTBaMDMxMTAvBgNV BAMTKDUwRkY0M0I3M0E4OTdDOTYyNkRDMUIyMkZBMzY2NkZBQzc5RjJFNTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJDjgvwzx0jUvRQqbhBDH10lWS 9dzUoSOd9S/dmAMkgG7XSJcwx94hRMWUvt5rCoNVJTOsbrH8/7suR62XHvPV7KEQ uN6ExQQxR9TOhRHYHH6kwnfLRGZeoX/C5ZvMQrdZSLnpIihb09gWz+YVo8uVcSzn 1x+Vyc/IRM7+fIqWIsce81gefXJH/jA7to8ogtltVyeZLCXQovPhlANF7yDPSjvT rjPUFTQWi2Iw0aOl1Xic1Gi9AgPVVaeOjVaM7w7qX7zOj41b3oZemIa83wMA8WtB ob7kob8CvKO11VD+yIkWaM27s8QyhdoqFnsfJdhv9M6ndeWVzkOapcCO4rKRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUP9DtzqJfJYm3Bsi+jZm+sefLlUwHwYDVR0j BBgwFoAUpLYxyM/g7nKs1fII/BI5Bk9s3kQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i Mzk5MWY3YS0wYTcxLTRmMGQtOTMzZi1lY2Y4MTM1MzAyNzQvMC9BNEI2MzFDOENG RTBFRTcyQUNENUYyMDhGQzEyMzkwNjRGNkNERTQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQTRCNjMxQzhDRkUwRUU3MkFDRDVGMjA4RkMxMjM5MDY0RjZD REU0NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjM5OTFmN2EtMGE3MS00ZjBkLTkz M2YtZWNmODEzNTMwMjc0LzAvQTRCNjMxQzhDRkUwRUU3MkFDRDVGMjA4RkMxMjM5 MDY0RjZDREU0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGLFwhHtehn6ozz5s21Q0z1lg584pAWSEy55 G/FFuBascAeReFmihHytTn3W7C+jDOGmuE5byDIB+9AD8xpU4HOPIvnAaiD8xdfw afxw45Jc736fQXjiYBSUwYRy80gaGn+CRbLUznUY5YHo8muH73sk86AqSmVUjCtJ snNbGpzU1m2fwFGfPcNRALNjpjdAOYnrQ2e6ciDWDojUH++R24uut55fLanXMNa0 07B9yTRikgcwSwYGE0nzg04V7f3V2Pxrhw9TIfJghH7sD0SCjHjyjEOyLt7OCr// OZmvnx7o9r27deWqr0LDboZ4hjaHYZS5X0qKUoHFbjLgjMusslY= -----END CERTIFICATE-----Generated at Sun Aug 24 09:38:01 2025 by rpki-client