$ rpki-client -vvf repo-rpki.idnic.net/repo/cc09e13c-cea0-47ff-9c96-f49b39d43920/0/4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A.mft File: 4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A.mft (raw, json) Hash identifier: 6SbnBePsfpCWl9iNL8PcGSlGJ+srEF6Hut4mSbHUHRY= Subject key identifier: B9:87:77:BA:E9:55:87:A0:55:2C:1C:1A:F0:1A:80:EC:77:60:54:ED Authority key identifier: 4A:6F:D7:E0:79:F5:43:A5:D5:FD:E4:43:3F:7B:D5:3D:CE:42:6E:5A Certificate issuer: /CN=4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A Certificate serial: DFA59BC0E39BF4AFACB3D6FBDB4AA86A74BD60 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cc09e13c-cea0-47ff-9c96-f49b39d43920/0/4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A.mft Manifest number: 04E5 Signing time: Sat 28 Jun 2025 12:31:40 +0000 Manifest this update: Sat 28 Jun 2025 12:26:40 +0000 Manifest next update: Tue 01 Jul 2025 14:26:40 +0000 Files and hashes: 1: 3130332e3231312e34392e302f32342d3234203d3e203633353035.roa (hash: jSA7+l89fySFyM7Bs9jzEHqShE9HEzseLTVhKTYttZk=) 2: 4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A.crl (hash: Igf53RaPE/G65CiRha1Tksn8UPJPR5g0f3uT/zlX6Gw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cc09e13c-cea0-47ff-9c96-f49b39d43920/0/4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A.crl rsync://repo-rpki.idnic.net/repo/cc09e13c-cea0-47ff-9c96-f49b39d43920/0/4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 14:26:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: df:a5:9b:c0:e3:9b:f4:af:ac:b3:d6:fb:db:4a:a8:6a:74:bd:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A Validity Not Before: Jun 28 12:26:40 2025 GMT Not After : Jul 1 14:26:40 2025 GMT Subject: CN=B98777BAE95587A0552C1C1AF01A80EC776054ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:57:97:fe:b3:4b:67:9e:0c:5d:86:a5:96:d9: d0:ae:fc:43:dd:f1:d6:41:05:37:a8:cf:26:60:8d: b8:8b:69:0f:32:25:8a:5b:1a:03:df:63:33:c5:f6: b4:61:fb:a3:4f:58:24:a8:d8:a4:5d:5e:09:05:e8: 81:71:f9:e2:f6:a6:03:45:6b:77:d2:ec:1f:19:58: e2:ea:73:7a:1b:f6:6d:1d:57:2d:15:9b:bf:0f:c9: ac:c2:1d:ad:1f:d3:5d:d6:d4:b3:01:2b:0e:0f:b2: 74:3e:2e:b2:35:8c:03:2b:1b:80:db:60:83:fa:df: 4b:90:2f:08:fa:4b:c3:bf:12:ff:fd:b1:a5:ef:ec: 7f:ef:07:0e:d5:63:47:af:8b:e0:09:09:0b:c8:82: b2:5d:03:c1:b6:e3:3d:14:e5:4b:ad:2c:25:32:ce: d4:ac:e9:45:7e:49:56:e6:f8:dd:ec:0e:83:10:e5: 2e:04:79:49:1a:10:11:0a:95:af:08:8a:89:f0:8f: a5:92:43:16:ef:55:d9:f1:3c:86:1a:ae:62:ab:f6: 66:0f:77:7a:77:f1:14:83:7f:c2:8f:ac:b2:cf:3c: 86:2d:0e:31:56:3a:a3:09:57:7a:2d:48:f3:2d:c8: 51:09:fd:da:49:e9:50:6a:9a:9e:28:39:7e:36:4d: 58:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:87:77:BA:E9:55:87:A0:55:2C:1C:1A:F0:1A:80:EC:77:60:54:ED X509v3 Authority Key Identifier: keyid:4A:6F:D7:E0:79:F5:43:A5:D5:FD:E4:43:3F:7B:D5:3D:CE:42:6E:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cc09e13c-cea0-47ff-9c96-f49b39d43920/0/4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cc09e13c-cea0-47ff-9c96-f49b39d43920/0/4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:35:7f:c8:9b:b5:5d:9c:44:48:a3:c6:d6:12:c4:8c:75:42: e9:e8:de:df:ea:ef:9f:bc:c9:4c:99:e2:05:4c:34:e3:e8:00: 68:de:dd:4c:14:13:b6:f7:31:c4:3b:c1:58:3a:70:bd:a1:38: 06:d1:bf:d1:2e:3b:b9:68:d6:57:c4:50:cf:9b:b4:cf:1d:ec: 28:11:ca:8c:56:a2:f2:d6:b1:00:91:09:f1:27:dc:47:e7:e8: 6a:04:a6:e1:8a:37:3a:72:87:27:31:64:9e:1b:49:ff:55:ef: 80:5d:1f:fa:2c:7f:8d:c4:cb:ea:4b:d5:21:c2:21:37:e6:9d: 0e:51:57:41:01:cc:8d:8c:02:96:81:3d:a3:f1:7a:af:3d:c1: 53:8a:aa:f1:fb:be:0d:f5:cb:c5:23:6c:fc:ca:f4:90:f7:95: ef:76:fa:f5:f2:e4:ac:c6:59:ea:48:f2:f3:6b:27:cd:40:5d: 80:82:07:ae:57:f1:39:99:d0:76:a0:64:75:00:a4:d2:46:4f: a6:73:be:21:4f:0d:7d:07:d8:4c:f3:df:b6:af:f0:34:71:f9: 69:c7:33:53:8c:72:e5:a7:17:b8:87:59:66:a4:14:d7:02:b2: 2c:48:dd:93:b8:af:f8:f5:8a:8e:c8:50:5f:f4:86:95:83:f6: 4f:63:3f:f1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAN+lm8Djm/SvrLPW+9tKqGp0vWAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEE2RkQ3RTA3OUY1NDNBNUQ1RkRFNDQzM0Y3QkQ1M0RD RTQyNkU1QTAeFw0yNTA2MjgxMjI2NDBaFw0yNTA3MDExNDI2NDBaMDMxMTAvBgNV BAMTKEI5ODc3N0JBRTk1NTg3QTA1NTJDMUMxQUYwMUE4MEVDNzc2MDU0RUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/V5f+s0tnngxdhqWW2dCu/EPd 8dZBBTeozyZgjbiLaQ8yJYpbGgPfYzPF9rRh+6NPWCSo2KRdXgkF6IFx+eL2pgNF a3fS7B8ZWOLqc3ob9m0dVy0Vm78PyazCHa0f013W1LMBKw4PsnQ+LrI1jAMrG4Db YIP630uQLwj6S8O/Ev/9saXv7H/vBw7VY0evi+AJCQvIgrJdA8G24z0U5UutLCUy ztSs6UV+SVbm+N3sDoMQ5S4EeUkaEBEKla8Iionwj6WSQxbvVdnxPIYarmKr9mYP d3p38RSDf8KPrLLPPIYtDjFWOqMJV3otSPMtyFEJ/dpJ6VBqmp4oOX42TVgXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuYd3uulVh6BVLBwa8BqA7HdgVO0wHwYDVR0j BBgwFoAUSm/X4Hn1Q6XV/eRDP3vVPc5CblowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YzA5ZTEzYy1jZWEwLTQ3ZmYtOWM5Ni1mNDliMzlkNDM5MjAvMC80QTZGRDdFMDc5 RjU0M0E1RDVGREU0NDMzRjdCRDUzRENFNDI2RTVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEE2RkQ3RTA3OUY1NDNBNUQ1RkRFNDQzM0Y3QkQ1M0RDRTQy NkU1QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2MwOWUxM2MtY2VhMC00N2ZmLTlj OTYtZjQ5YjM5ZDQzOTIwLzAvNEE2RkQ3RTA3OUY1NDNBNUQ1RkRFNDQzM0Y3QkQ1 M0RDRTQyNkU1QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL81f8ibtV2cREijxtYSxIx1Quno3t/q75+8 yUyZ4gVMNOPoAGje3UwUE7b3McQ7wVg6cL2hOAbRv9EuO7lo1lfEUM+btM8d7CgR yoxWovLWsQCRCfEn3Efn6GoEpuGKNzpyhycxZJ4bSf9V74BdH/osf43Ey+pL1SHC ITfmnQ5RV0EBzI2MApaBPaPxeq89wVOKqvH7vg31y8UjbPzK9JD3le92+vXy5KzG WepI8vNrJ81AXYCCB65X8TmZ0HagZHUApNJGT6ZzviFPDX0H2Ezz37av8DRx+WnH M1OMcuWnF7iHWWakFNcCsixI3ZO4r/j1io7IUF/0hpWD9k9jP/E= -----END CERTIFICATE-----Generated at Sun Jun 29 18:18:14 2025 by rpki-client