$ rpki-client -vvf repo-rpki.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/4A243A1EC4991C40D3A6148515E3C51981B425F7.mft File: 4A243A1EC4991C40D3A6148515E3C51981B425F7.mft (raw, json) Hash identifier: t/PBfAXOfTnMVOC7u07/RUDOEpVsmkSVC4KaP8G7His= Subject key identifier: 41:A2:3B:FC:AD:0E:A7:74:11:26:C5:47:D1:5A:E9:7A:41:DD:06:40 Authority key identifier: 4A:24:3A:1E:C4:99:1C:40:D3:A6:14:85:15:E3:C5:19:81:B4:25:F7 Certificate issuer: /CN=4A243A1EC4991C40D3A6148515E3C51981B425F7 Certificate serial: 628ADDDE4CB8A2CCCB1FE32D63109DFA5B45C9A0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A243A1EC4991C40D3A6148515E3C51981B425F7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/4A243A1EC4991C40D3A6148515E3C51981B425F7.mft Manifest number: 0196 Signing time: Fri 22 Aug 2025 05:50:59 +0000 Manifest this update: Fri 22 Aug 2025 05:45:59 +0000 Manifest next update: Mon 25 Aug 2025 05:51:59 +0000 Files and hashes: 1: 3130332e3130392e3230372e302f32342d3234203d3e20313530393335.roa (hash: W7qNwUKI6yVYK0QKsHqMQf5TpfiakU3FHDTDzkx2y0k=) 2: 3130332e3130392e3230362e302f32342d3234203d3e20313530393335.roa (hash: Rcu96XphgA8WvPbRK/1ptZ3CZTir4MCBj7MHKlWlNMw=) 3: 4A243A1EC4991C40D3A6148515E3C51981B425F7.crl (hash: NQ2xGoPNXeUCJuZwII6u47roMuCfz2HFc7vWFfoX0Qw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/4A243A1EC4991C40D3A6148515E3C51981B425F7.crl rsync://repo-rpki.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/4A243A1EC4991C40D3A6148515E3C51981B425F7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A243A1EC4991C40D3A6148515E3C51981B425F7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 05:51:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:8a:dd:de:4c:b8:a2:cc:cb:1f:e3:2d:63:10:9d:fa:5b:45:c9:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A243A1EC4991C40D3A6148515E3C51981B425F7 Validity Not Before: Aug 22 05:45:59 2025 GMT Not After : Aug 25 05:51:59 2025 GMT Subject: CN=41A23BFCAD0EA7741126C547D15AE97A41DD0640 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:30:33:46:81:2a:3c:9d:bf:a9:8f:ac:58:8b: fe:e9:38:8b:4b:7d:39:9b:3e:5e:f3:d9:15:1c:6e: 98:5d:fe:af:90:c7:c8:fe:5b:13:a2:c2:48:c8:f3: 50:1b:77:3d:91:9c:cb:98:6b:86:24:19:e2:aa:1f: 66:8f:d9:46:99:0e:64:9e:91:49:2a:02:db:81:4a: 1b:8a:cf:4b:8b:9c:9a:a6:64:77:77:87:81:ce:b7: ea:dd:bd:9c:48:4b:37:84:89:b4:f8:ef:1d:27:b3: 47:a3:84:e1:3f:1c:6f:fc:eb:c1:f2:3f:29:07:b4: 69:d7:07:3e:be:37:09:ae:0b:e5:a4:d7:60:5f:08: 63:cb:f8:13:a5:9f:39:a3:84:7d:be:48:00:65:69: 61:37:32:b8:49:b3:87:3e:11:43:bc:42:14:b0:ed: b3:5f:25:1b:56:cc:3a:1f:04:e7:02:ad:99:7d:16: 58:0c:a8:71:bb:d9:b2:22:7a:80:9e:d6:f4:9e:38: 81:ea:99:e8:c4:69:a1:64:d1:27:b2:b0:d8:d0:41: 8e:2d:29:99:c8:29:2f:05:25:06:92:dc:d4:b1:d6: 80:56:69:b7:1f:fe:40:19:d2:f2:da:ec:ca:41:85: f2:40:ed:ac:24:bf:40:27:13:1a:40:af:05:ae:b3: ed:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:A2:3B:FC:AD:0E:A7:74:11:26:C5:47:D1:5A:E9:7A:41:DD:06:40 X509v3 Authority Key Identifier: keyid:4A:24:3A:1E:C4:99:1C:40:D3:A6:14:85:15:E3:C5:19:81:B4:25:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/4A243A1EC4991C40D3A6148515E3C51981B425F7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A243A1EC4991C40D3A6148515E3C51981B425F7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/4A243A1EC4991C40D3A6148515E3C51981B425F7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:b2:20:b7:95:28:12:ca:96:46:a0:36:b6:68:2b:5f:4b:2d: 3e:09:75:f8:e1:54:e7:6b:ab:e4:bf:d2:44:ed:40:36:cb:99: fd:39:f9:90:8e:f1:8a:4b:b6:ab:ec:dd:35:5d:f8:ad:db:7f: 2a:e0:15:9d:3e:94:ae:c8:c0:c0:ea:20:4e:ea:e2:7f:c9:37: 82:f9:f8:00:3f:66:b5:8d:d0:3f:67:9e:99:3a:69:5b:36:bd: 7f:57:89:19:59:69:cb:b3:47:c2:c8:18:e5:a7:fc:21:db:03: 57:27:9b:76:8f:3d:9c:e7:4c:69:fa:65:a9:63:92:c5:7f:8f: e2:bc:9c:7d:af:f7:9a:40:f1:52:6d:34:a9:f1:f4:d1:9e:9d: 12:d0:27:fc:0c:70:ae:5f:77:d0:5f:04:17:59:be:e9:4a:cf: f3:16:09:a8:29:e4:57:68:8e:dc:e7:06:50:8a:6d:f5:4b:17: 9d:f6:6f:f2:f3:e8:0b:b4:f4:af:27:2e:97:a9:ae:33:ee:a1: c3:02:ff:01:73:ff:44:4d:1f:06:6b:c9:88:02:15:15:4b:d9: 78:23:09:0d:87:ed:8c:0e:28:76:67:ad:65:77:4d:4b:e9:75: c7:6a:8f:09:e4:55:94:5c:5c:cc:20:4e:de:8b:40:71:c1:a9: 31:07:13:72 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYord3ky4oszLH+MtYxCd+ltFyaAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEEyNDNBMUVDNDk5MUM0MEQzQTYxNDg1MTVFM0M1MTk4 MUI0MjVGNzAeFw0yNTA4MjIwNTQ1NTlaFw0yNTA4MjUwNTUxNTlaMDMxMTAvBgNV BAMTKDQxQTIzQkZDQUQwRUE3NzQxMTI2QzU0N0QxNUFFOTdBNDFERDA2NDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtMDNGgSo8nb+pj6xYi/7pOItL fTmbPl7z2RUcbphd/q+Qx8j+WxOiwkjI81Abdz2RnMuYa4YkGeKqH2aP2UaZDmSe kUkqAtuBShuKz0uLnJqmZHd3h4HOt+rdvZxISzeEibT47x0ns0ejhOE/HG/868Hy PykHtGnXBz6+NwmuC+Wk12BfCGPL+BOlnzmjhH2+SABlaWE3MrhJs4c+EUO8QhSw 7bNfJRtWzDofBOcCrZl9FlgMqHG72bIieoCe1vSeOIHqmejEaaFk0SeysNjQQY4t KZnIKS8FJQaS3NSx1oBWabcf/kAZ0vLa7MpBhfJA7awkv0AnExpArwWus+0HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQaI7/K0Op3QRJsVH0VrpekHdBkAwHwYDVR0j BBgwFoAUSiQ6HsSZHEDTphSFFePFGYG0JfcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l Yzg4OTJlYi1kZGMwLTRjYjYtOTU3Yy1iNjUzZjI4YmJmMzkvMC80QTI0M0ExRUM0 OTkxQzQwRDNBNjE0ODUxNUUzQzUxOTgxQjQyNUY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEEyNDNBMUVDNDk5MUM0MEQzQTYxNDg1MTVFM0M1MTk4MUI0 MjVGNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWM4ODkyZWItZGRjMC00Y2I2LTk1 N2MtYjY1M2YyOGJiZjM5LzAvNEEyNDNBMUVDNDk5MUM0MEQzQTYxNDg1MTVFM0M1 MTk4MUI0MjVGNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKKyILeVKBLKlkagNrZoK19LLT4JdfjhVOdr q+S/0kTtQDbLmf05+ZCO8YpLtqvs3TVd+K3bfyrgFZ0+lK7IwMDqIE7q4n/JN4L5 +AA/ZrWN0D9nnpk6aVs2vX9XiRlZacuzR8LIGOWn/CHbA1cnm3aPPZznTGn6Zalj ksV/j+K8nH2v95pA8VJtNKnx9NGenRLQJ/wMcK5fd9BfBBdZvulKz/MWCagp5Fdo jtznBlCKbfVLF532b/Lz6Au09K8nLpeprjPuocMC/wFz/0RNHwZryYgCFRVL2Xgj CQ2H7YwOKHZnrWV3TUvpdcdqjwnkVZRcXMwgTt6LQHHBqTEHE3I= -----END CERTIFICATE-----Generated at Sat Aug 23 15:24:43 2025 by rpki-client