$ rpki-client -vvf repo-rpki.idnic.net/repo/ea47231f-02dd-49e8-aa25-2d54c0a999ca/0/439A4981549ABB151B12D6EC85FC8D0DBF99A81E.mft File: 439A4981549ABB151B12D6EC85FC8D0DBF99A81E.mft (raw, json) Hash identifier: YXTU+au+vI5LNcb7twAXKE9HLS4uIehCSIA88gvfx88= Subject key identifier: C9:2B:AF:75:27:5E:ED:47:57:27:8D:82:AE:A4:C0:D2:DC:55:A8:33 Authority key identifier: 43:9A:49:81:54:9A:BB:15:1B:12:D6:EC:85:FC:8D:0D:BF:99:A8:1E Certificate issuer: /CN=439A4981549ABB151B12D6EC85FC8D0DBF99A81E Certificate serial: 68A3A015E705D199461954D027FABE06EC6962E9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/439A4981549ABB151B12D6EC85FC8D0DBF99A81E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ea47231f-02dd-49e8-aa25-2d54c0a999ca/0/439A4981549ABB151B12D6EC85FC8D0DBF99A81E.mft Manifest number: 044A Signing time: Thu 21 Aug 2025 15:00:42 +0000 Manifest this update: Thu 21 Aug 2025 14:55:42 +0000 Manifest next update: Mon 25 Aug 2025 01:11:42 +0000 Files and hashes: 1: 439A4981549ABB151B12D6EC85FC8D0DBF99A81E.crl (hash: XsrZ1huRwm8NlPrRtrNLqJK5Bhvy97fq9FY3k+N0sr8=) 2: 3130332e3131322e3234342e302f32332d3234203d3e20313336313037.roa (hash: QOFHoPuY9NpdPQj6xa7cBpnTsr+iASD85o3lNcYlh68=) 3: 3130332e3233332e3130322e302f32332d3234203d3e20313336313037.roa (hash: JI3pjhPmyInlzEtZ8PXbjRWk78z+cy0q6o/inypVTws=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ea47231f-02dd-49e8-aa25-2d54c0a999ca/0/439A4981549ABB151B12D6EC85FC8D0DBF99A81E.crl rsync://repo-rpki.idnic.net/repo/ea47231f-02dd-49e8-aa25-2d54c0a999ca/0/439A4981549ABB151B12D6EC85FC8D0DBF99A81E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/439A4981549ABB151B12D6EC85FC8D0DBF99A81E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 01:11:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:a3:a0:15:e7:05:d1:99:46:19:54:d0:27:fa:be:06:ec:69:62:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=439A4981549ABB151B12D6EC85FC8D0DBF99A81E Validity Not Before: Aug 21 14:55:42 2025 GMT Not After : Aug 25 01:11:42 2025 GMT Subject: CN=C92BAF75275EED4757278D82AEA4C0D2DC55A833 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:da:29:ba:f3:04:8a:20:24:28:08:ba:c2:8d: b0:8d:7c:ef:46:a8:83:8b:62:a0:e3:f3:a1:61:87: d8:7c:e9:0a:8d:bd:2d:46:20:7d:a0:c1:77:e0:3f: 3a:7a:d9:ed:2c:d6:86:88:30:c8:52:f1:19:c2:ac: 48:93:86:69:ba:6c:41:73:4c:e1:c9:5e:4b:b6:6d: 84:86:59:c3:9b:b5:68:8a:da:56:86:20:fd:e1:bc: 06:7f:27:47:e1:0b:89:39:8a:f1:2a:8b:e4:ff:75: 51:fa:44:d7:5f:6b:ee:b9:c3:4d:f9:68:37:85:01: e2:d3:87:57:52:91:1b:d1:f4:75:78:7f:2b:45:da: a6:68:ae:9d:40:d2:02:94:1b:20:40:06:cf:49:f7: 44:58:ec:a9:2e:0a:36:68:22:9b:d2:e4:36:e9:4b: 16:a6:f5:d1:39:98:c9:7e:7b:76:1e:bc:b6:b0:9c: 37:eb:aa:6f:36:17:af:1f:84:b0:9b:fd:a8:ee:eb: c2:fc:02:2c:77:77:bb:2b:87:35:b8:38:b8:32:6b: 23:0d:cb:2f:26:ee:4a:36:5d:99:d4:b9:c2:63:a7: 21:28:bd:45:d7:a5:de:67:50:36:17:07:8b:6e:9f: 4f:cf:e7:60:e3:1f:08:3e:91:f6:1d:b1:3d:70:c6: 85:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:2B:AF:75:27:5E:ED:47:57:27:8D:82:AE:A4:C0:D2:DC:55:A8:33 X509v3 Authority Key Identifier: keyid:43:9A:49:81:54:9A:BB:15:1B:12:D6:EC:85:FC:8D:0D:BF:99:A8:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ea47231f-02dd-49e8-aa25-2d54c0a999ca/0/439A4981549ABB151B12D6EC85FC8D0DBF99A81E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/439A4981549ABB151B12D6EC85FC8D0DBF99A81E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea47231f-02dd-49e8-aa25-2d54c0a999ca/0/439A4981549ABB151B12D6EC85FC8D0DBF99A81E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:7a:bb:7d:02:78:c3:e2:dd:16:41:2a:9b:31:c5:82:bf:ea: 28:db:37:88:8f:e1:8f:ee:6c:ec:ff:a2:c2:13:99:cd:52:1a: 70:b7:93:c5:78:91:c5:7e:39:ec:13:1c:3c:ae:01:8b:b8:36: 81:69:18:2b:b8:f8:2e:de:5f:2d:1d:08:2c:a7:2b:07:71:fa: 89:5a:23:02:26:87:65:56:f8:49:8e:58:ee:b8:15:a0:9f:33: 23:6f:ed:70:2d:84:77:7a:d5:d6:7b:37:b3:87:b4:7a:03:57: 9b:4a:ae:13:7b:d2:7c:9f:63:ed:df:d8:5b:41:f8:6c:b4:b4: 59:2e:16:da:48:e3:03:de:1a:d4:d5:06:12:c5:be:0b:d5:fa: eb:45:91:33:4f:63:d5:54:9c:99:9f:4c:6f:7e:d1:85:5c:53: c8:f9:31:1b:85:db:e8:35:c9:d1:75:66:3e:a2:c3:1a:84:9d: f7:a9:cd:c5:7b:6a:81:19:ab:f8:8e:fb:91:77:fc:49:a0:0c: cf:b5:43:6d:73:da:c3:80:24:16:e2:98:06:1b:18:fc:c3:12: 19:af:8e:f8:a1:33:fe:6a:01:73:66:07:58:40:ea:0e:38:97: 70:20:70:d5:58:57:01:64:79:29:7f:f7:a2:85:7a:fc:23:d6: bd:a3:45:74 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaKOgFecF0ZlGGVTQJ/q+BuxpYukwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDM5QTQ5ODE1NDlBQkIxNTFCMTJENkVDODVGQzhEMERC Rjk5QTgxRTAeFw0yNTA4MjExNDU1NDJaFw0yNTA4MjUwMTExNDJaMDMxMTAvBgNV BAMTKEM5MkJBRjc1Mjc1RUVENDc1NzI3OEQ4MkFFQTRDMEQyREM1NUE4MzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC92im68wSKICQoCLrCjbCNfO9G qIOLYqDj86Fhh9h86QqNvS1GIH2gwXfgPzp62e0s1oaIMMhS8RnCrEiThmm6bEFz TOHJXku2bYSGWcObtWiK2laGIP3hvAZ/J0fhC4k5ivEqi+T/dVH6RNdfa+65w035 aDeFAeLTh1dSkRvR9HV4fytF2qZorp1A0gKUGyBABs9J90RY7KkuCjZoIpvS5Dbp Sxam9dE5mMl+e3YevLawnDfrqm82F68fhLCb/aju68L8Aix3d7srhzW4OLgyayMN yy8m7ko2XZnUucJjpyEovUXXpd5nUDYXB4tun0/P52DjHwg+kfYdsT1wxoUXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUySuvdSde7UdXJ42CrqTA0txVqDMwHwYDVR0j BBgwFoAUQ5pJgVSauxUbEtbshfyNDb+ZqB4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YTQ3MjMxZi0wMmRkLTQ5ZTgtYWEyNS0yZDU0YzBhOTk5Y2EvMC80MzlBNDk4MTU0 OUFCQjE1MUIxMkQ2RUM4NUZDOEQwREJGOTlBODFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDM5QTQ5ODE1NDlBQkIxNTFCMTJENkVDODVGQzhEMERCRjk5 QTgxRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWE0NzIzMWYtMDJkZC00OWU4LWFh MjUtMmQ1NGMwYTk5OWNhLzAvNDM5QTQ5ODE1NDlBQkIxNTFCMTJENkVDODVGQzhE MERCRjk5QTgxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALN6u30CeMPi3RZBKpsxxYK/6ijbN4iP4Y/u bOz/osITmc1SGnC3k8V4kcV+OewTHDyuAYu4NoFpGCu4+C7eXy0dCCynKwdx+ola IwImh2VW+EmOWO64FaCfMyNv7XAthHd61dZ7N7OHtHoDV5tKrhN70nyfY+3f2FtB +Gy0tFkuFtpI4wPeGtTVBhLFvgvV+utFkTNPY9VUnJmfTG9+0YVcU8j5MRuF2+g1 ydF1Zj6iwxqEnfepzcV7aoEZq/iO+5F3/EmgDM+1Q21z2sOAJBbimAYbGPzDEhmv jvihM/5qAXNmB1hA6g44l3AgcNVYVwFkeSl/96KFevwj1r2jRXQ= -----END CERTIFICATE-----Generated at Sat Aug 23 10:16:16 2025 by rpki-client