$ rpki-client -vvf repo-rpki.idnic.net/repo/faa6a67d-cba3-427b-9055-5f528f2d232f/0/4A688B72A804A426A9096ECA60105A4D831C5FA8.mft File: 4A688B72A804A426A9096ECA60105A4D831C5FA8.mft (raw, json) Hash identifier: xKEXchSW0XH2N9YfDI0bc73EhSmnN75IEvvyPh22Ljc= Subject key identifier: CF:03:0C:99:31:1A:27:4E:52:0D:BE:BF:5C:45:27:06:73:AE:3B:4B Authority key identifier: 4A:68:8B:72:A8:04:A4:26:A9:09:6E:CA:60:10:5A:4D:83:1C:5F:A8 Certificate issuer: /CN=4A688B72A804A426A9096ECA60105A4D831C5FA8 Certificate serial: 2FAA8FF79A0759DD7170EEB3452CDD753CE7233F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A688B72A804A426A9096ECA60105A4D831C5FA8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/faa6a67d-cba3-427b-9055-5f528f2d232f/0/4A688B72A804A426A9096ECA60105A4D831C5FA8.mft Manifest number: 02DD Signing time: Fri 22 Aug 2025 11:31:42 +0000 Manifest this update: Fri 22 Aug 2025 11:26:42 +0000 Manifest next update: Mon 25 Aug 2025 23:16:42 +0000 Files and hashes: 1: 3130332e3137352e3230362e302f32332d3234203d3e20313437313234.roa (hash: eGEsrGBto/hQncn3YcGePX27GH/UT48OX+sETIcZ17o=) 2: 3130332e3137352e3230372e302f32342d3234203d3e20313437313234.roa (hash: aQ3bZ8U/53lOgq6IbJ4jaeEks7cypqeVb0bEi+y+Pus=) 3: 4A688B72A804A426A9096ECA60105A4D831C5FA8.crl (hash: urNb3KPhwoIHanbwgZXRnJewNpkR93RpdeZcGGdCj7A=) 4: 3130332e3137352e3230362e302f32342d3234203d3e20313437313234.roa (hash: eQ2W59Sl25b9+tbhRBYK+eiWkdxaKDr4YfWFXlk9jXI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/faa6a67d-cba3-427b-9055-5f528f2d232f/0/4A688B72A804A426A9096ECA60105A4D831C5FA8.crl rsync://repo-rpki.idnic.net/repo/faa6a67d-cba3-427b-9055-5f528f2d232f/0/4A688B72A804A426A9096ECA60105A4D831C5FA8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A688B72A804A426A9096ECA60105A4D831C5FA8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 23:16:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:aa:8f:f7:9a:07:59:dd:71:70:ee:b3:45:2c:dd:75:3c:e7:23:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A688B72A804A426A9096ECA60105A4D831C5FA8 Validity Not Before: Aug 22 11:26:42 2025 GMT Not After : Aug 25 23:16:42 2025 GMT Subject: CN=CF030C99311A274E520DBEBF5C45270673AE3B4B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:70:d2:54:73:77:c1:48:8b:0b:92:93:e6:ea: 32:11:95:81:d8:8d:93:65:20:63:42:c3:6e:8b:f5: d2:5d:e5:ae:fc:35:a3:68:91:b1:81:af:bb:5b:df: b8:ed:64:d1:dd:a6:19:8b:76:cd:a6:8d:cf:d5:b5: 0e:c5:2c:e9:5e:d7:fb:f3:dd:b3:b4:3d:bd:37:50: 83:54:0a:06:23:79:2d:dc:35:d4:de:b2:62:62:19: ae:6a:75:f0:56:7b:44:c7:61:92:2f:bf:67:ad:80: 21:3a:9b:48:99:fc:8c:a3:99:b6:bf:24:48:41:0b: 02:e3:1e:f1:2b:02:bd:83:1f:c7:e3:6d:e1:eb:ef: 4e:34:dd:ee:c2:f8:7d:bd:da:5d:73:f2:c8:c3:80: fc:7d:bb:0d:51:07:1e:b7:1f:fb:36:11:b3:d8:3c: 5f:7c:c7:03:48:10:fe:d9:ea:92:84:af:3b:ec:34: 9b:5e:e4:42:b2:df:71:81:ec:79:01:ee:76:a2:16: 08:da:11:ae:d5:d0:be:09:ab:31:b4:9e:56:bc:8c: 15:41:44:e1:fc:f4:8f:b2:e1:0e:a3:45:64:b2:a7: cf:bb:11:1b:cf:c5:55:81:b3:28:d2:a3:d4:32:6c: eb:ed:93:8c:13:74:0e:74:e6:69:fc:5d:94:92:98: ff:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:03:0C:99:31:1A:27:4E:52:0D:BE:BF:5C:45:27:06:73:AE:3B:4B X509v3 Authority Key Identifier: keyid:4A:68:8B:72:A8:04:A4:26:A9:09:6E:CA:60:10:5A:4D:83:1C:5F:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/faa6a67d-cba3-427b-9055-5f528f2d232f/0/4A688B72A804A426A9096ECA60105A4D831C5FA8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A688B72A804A426A9096ECA60105A4D831C5FA8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/faa6a67d-cba3-427b-9055-5f528f2d232f/0/4A688B72A804A426A9096ECA60105A4D831C5FA8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:b8:0d:43:b8:67:c2:80:e4:fc:f1:84:4f:af:c1:40:99:24: 83:30:a6:0d:bd:4e:6e:f5:7a:75:46:e7:28:be:b3:0e:c8:c1: fa:71:28:82:a7:0c:c4:ed:bd:98:81:bd:62:8d:96:68:ed:d0: ed:27:1f:05:66:f6:0a:30:92:61:26:8f:93:d2:52:5d:60:ae: a0:53:7f:1e:df:c1:44:81:40:1c:81:7a:80:df:a4:16:b8:e3: 16:0b:2d:aa:80:be:23:ba:a8:16:6d:91:9f:87:ba:fb:f8:ac: 50:ed:05:d1:84:8b:57:df:3f:49:92:6e:68:a3:48:ee:b0:52: 53:3e:08:a7:e0:e5:db:fc:a5:b7:18:46:8d:a7:f2:96:78:95: 5c:6d:da:f4:27:e9:1e:5b:3a:3a:1d:45:a3:48:f1:d9:4f:20: ec:9c:7a:27:94:60:98:fe:36:61:fb:88:0a:31:4f:95:08:cf: 47:66:58:47:31:3c:59:70:d4:48:cf:04:0a:cb:3f:f1:96:a2: 08:b3:7d:53:60:b5:74:66:82:08:33:6c:91:4b:f6:15:8c:2d: 14:33:03:55:f4:4a:45:94:24:5a:25:f7:98:36:78:ce:f4:b0: a8:bd:03:4d:5c:f0:31:53:0a:84:c9:3a:61:6c:64:d6:36:71: 69:5c:ce:01 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL6qP95oHWd1xcO6zRSzddTznIz8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEE2ODhCNzJBODA0QTQyNkE5MDk2RUNBNjAxMDVBNEQ4 MzFDNUZBODAeFw0yNTA4MjIxMTI2NDJaFw0yNTA4MjUyMzE2NDJaMDMxMTAvBgNV BAMTKENGMDMwQzk5MzExQTI3NEU1MjBEQkVCRjVDNDUyNzA2NzNBRTNCNEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxcNJUc3fBSIsLkpPm6jIRlYHY jZNlIGNCw26L9dJd5a78NaNokbGBr7tb37jtZNHdphmLds2mjc/VtQ7FLOle1/vz 3bO0Pb03UINUCgYjeS3cNdTesmJiGa5qdfBWe0THYZIvv2etgCE6m0iZ/Iyjmba/ JEhBCwLjHvErAr2DH8fjbeHr70403e7C+H292l1z8sjDgPx9uw1RBx63H/s2EbPY PF98xwNIEP7Z6pKErzvsNJte5EKy33GB7HkB7naiFgjaEa7V0L4JqzG0nla8jBVB ROH89I+y4Q6jRWSyp8+7ERvPxVWBsyjSo9QybOvtk4wTdA505mn8XZSSmP/jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzwMMmTEaJ05SDb6/XEUnBnOuO0swHwYDVR0j BBgwFoAUSmiLcqgEpCapCW7KYBBaTYMcX6gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YWE2YTY3ZC1jYmEzLTQyN2ItOTA1NS01ZjUyOGYyZDIzMmYvMC80QTY4OEI3MkE4 MDRBNDI2QTkwOTZFQ0E2MDEwNUE0RDgzMUM1RkE4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEE2ODhCNzJBODA0QTQyNkE5MDk2RUNBNjAxMDVBNEQ4MzFD NUZBOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmFhNmE2N2QtY2JhMy00MjdiLTkw NTUtNWY1MjhmMmQyMzJmLzAvNEE2ODhCNzJBODA0QTQyNkE5MDk2RUNBNjAxMDVB NEQ4MzFDNUZBOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKC4DUO4Z8KA5PzxhE+vwUCZJIMwpg29Tm71 enVG5yi+sw7IwfpxKIKnDMTtvZiBvWKNlmjt0O0nHwVm9gowkmEmj5PSUl1grqBT fx7fwUSBQByBeoDfpBa44xYLLaqAviO6qBZtkZ+Huvv4rFDtBdGEi1ffP0mSbmij SO6wUlM+CKfg5dv8pbcYRo2n8pZ4lVxt2vQn6R5bOjodRaNI8dlPIOyceieUYJj+ NmH7iAoxT5UIz0dmWEcxPFlw1EjPBArLP/GWogizfVNgtXRmgggzbJFL9hWMLRQz A1X0SkWUJFol95g2eM70sKi9A01c8DFTCoTJOmFsZNY2cWlczgE= -----END CERTIFICATE-----Generated at Sat Aug 23 12:25:31 2025 by rpki-client