$ rpki-client -vvf repo-rpki.idnic.net/repo/faa6a67d-cba3-427b-9055-5f528f2d232f/0/4A688B72A804A426A9096ECA60105A4D831C5FA8.mft File: 4A688B72A804A426A9096ECA60105A4D831C5FA8.mft (raw, json) Hash identifier: 0tagcUeuT661omJGgkX7AfejMhyeT10podloGy7vCZo= Subject key identifier: 3B:DA:77:58:13:2D:7F:6D:58:D8:E0:7F:F7:B4:12:3F:2A:82:9F:6C Authority key identifier: 4A:68:8B:72:A8:04:A4:26:A9:09:6E:CA:60:10:5A:4D:83:1C:5F:A8 Certificate issuer: /CN=4A688B72A804A426A9096ECA60105A4D831C5FA8 Certificate serial: 7F8FC57769D10FD762B5E14E4EE68D57BF53A93C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A688B72A804A426A9096ECA60105A4D831C5FA8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/faa6a67d-cba3-427b-9055-5f528f2d232f/0/4A688B72A804A426A9096ECA60105A4D831C5FA8.mft Manifest number: 02C4 Signing time: Sat 28 Jun 2025 18:41:39 +0000 Manifest this update: Sat 28 Jun 2025 18:36:39 +0000 Manifest next update: Wed 02 Jul 2025 03:02:39 +0000 Files and hashes: 1: 4A688B72A804A426A9096ECA60105A4D831C5FA8.crl (hash: Vog4f91C+oGsGTmDllz7HtivXH4TiXT7Q9X3mA+bYGc=) 2: 3130332e3137352e3230362e302f32342d3234203d3e20313437313234.roa (hash: eQ2W59Sl25b9+tbhRBYK+eiWkdxaKDr4YfWFXlk9jXI=) 3: 3130332e3137352e3230372e302f32342d3234203d3e20313437313234.roa (hash: aQ3bZ8U/53lOgq6IbJ4jaeEks7cypqeVb0bEi+y+Pus=) 4: 3130332e3137352e3230362e302f32332d3234203d3e20313437313234.roa (hash: FLVGwqj4yD54Hf3ac0cSht3WEYb1ToOJ+k3OEsbAbwE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/faa6a67d-cba3-427b-9055-5f528f2d232f/0/4A688B72A804A426A9096ECA60105A4D831C5FA8.crl rsync://repo-rpki.idnic.net/repo/faa6a67d-cba3-427b-9055-5f528f2d232f/0/4A688B72A804A426A9096ECA60105A4D831C5FA8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A688B72A804A426A9096ECA60105A4D831C5FA8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 03:02:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:8f:c5:77:69:d1:0f:d7:62:b5:e1:4e:4e:e6:8d:57:bf:53:a9:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A688B72A804A426A9096ECA60105A4D831C5FA8 Validity Not Before: Jun 28 18:36:39 2025 GMT Not After : Jul 2 03:02:39 2025 GMT Subject: CN=3BDA7758132D7F6D58D8E07FF7B4123F2A829F6C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:39:6f:35:39:39:53:eb:5f:c0:1c:ee:48:ea: 5a:d8:8f:fb:29:12:25:0e:91:05:35:ad:04:70:72: cb:cb:e7:e0:2f:2d:52:b4:d7:45:44:4c:1c:2d:c9: 04:3c:16:d8:53:04:31:3c:1b:fe:ce:33:b3:a6:8a: 5f:ac:16:39:69:d7:13:21:db:65:e1:1f:68:bf:79: f2:4c:a6:c8:ee:9f:8d:b1:34:6a:7b:6c:9f:75:53: dc:9a:bd:62:7b:82:f9:5e:96:7f:90:7f:69:e3:84: 77:1e:a2:34:27:6b:6f:53:c4:a2:8a:0a:5b:fc:d2: 0a:42:5f:eb:9e:a4:93:1f:d1:2a:e7:24:39:a8:06: b5:24:06:23:17:8b:9e:c6:83:f1:10:f4:1b:5a:0c: 43:8b:ce:0c:7f:fb:00:94:ac:c7:01:83:e3:3d:f7: ad:d5:b2:db:4f:49:39:82:e4:41:6a:71:be:d2:c8: 2f:76:fd:1c:02:66:97:c3:02:82:89:59:f2:8b:84: 32:d5:07:31:05:50:27:ad:e0:58:da:b4:90:c7:ad: b6:1c:8a:3e:33:3f:83:d7:a1:63:fd:31:91:d9:46: 76:2e:97:53:84:64:f8:2d:3d:9d:21:d6:3f:25:57: 4f:b3:2f:ea:80:4e:a7:da:d5:6f:47:07:84:1d:7b: df:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:DA:77:58:13:2D:7F:6D:58:D8:E0:7F:F7:B4:12:3F:2A:82:9F:6C X509v3 Authority Key Identifier: keyid:4A:68:8B:72:A8:04:A4:26:A9:09:6E:CA:60:10:5A:4D:83:1C:5F:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/faa6a67d-cba3-427b-9055-5f528f2d232f/0/4A688B72A804A426A9096ECA60105A4D831C5FA8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A688B72A804A426A9096ECA60105A4D831C5FA8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/faa6a67d-cba3-427b-9055-5f528f2d232f/0/4A688B72A804A426A9096ECA60105A4D831C5FA8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:b9:6b:af:f9:3d:49:49:d2:ec:b8:6f:e0:d0:63:8b:91:d6: 75:6c:84:c2:30:d5:30:15:1c:31:24:8d:17:f3:ad:c0:14:c9: 92:79:b2:5b:94:d0:86:f4:b3:da:58:d3:fd:29:f4:7d:5f:6a: 54:ef:73:51:22:97:57:ba:00:e3:92:58:5d:6e:64:dd:cc:e6: ca:ea:8e:83:9d:81:4a:18:23:b9:1a:24:45:fb:f4:f3:1e:0a: 1c:b2:65:d2:53:ac:45:03:c6:0a:87:b2:72:28:e1:65:8d:07: 3d:1f:85:dc:53:1c:49:7c:75:2f:e1:51:43:93:21:e0:da:26: 35:17:50:6f:9c:d7:53:70:77:6f:bb:4a:b0:38:11:4b:66:59: 99:4d:81:2f:0e:f9:86:d2:09:6a:b9:07:c8:02:2b:86:b3:58: 9d:5b:ee:ad:ff:20:f6:7d:47:e7:7b:ef:e1:12:58:44:c3:f3: 36:b6:35:9c:d1:0a:67:58:9a:13:58:ed:de:10:7c:93:71:3e: 49:1f:b0:35:72:18:82:6a:e6:9e:0e:19:fd:5f:65:d1:19:c4: 1b:b0:d9:03:17:33:50:6a:a9:d7:09:ee:4d:e7:de:5c:18:f8: 96:a2:d4:e4:29:8d:b4:a6:84:44:b8:9b:f7:8a:f1:1e:ff:d2: e6:87:ca:b2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf4/Fd2nRD9diteFOTuaNV79TqTwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEE2ODhCNzJBODA0QTQyNkE5MDk2RUNBNjAxMDVBNEQ4 MzFDNUZBODAeFw0yNTA2MjgxODM2MzlaFw0yNTA3MDIwMzAyMzlaMDMxMTAvBgNV BAMTKDNCREE3NzU4MTMyRDdGNkQ1OEQ4RTA3RkY3QjQxMjNGMkE4MjlGNkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCROW81OTlT61/AHO5I6lrYj/sp EiUOkQU1rQRwcsvL5+AvLVK010VETBwtyQQ8FthTBDE8G/7OM7Omil+sFjlp1xMh 22XhH2i/efJMpsjun42xNGp7bJ91U9yavWJ7gvleln+Qf2njhHceojQna29TxKKK Clv80gpCX+uepJMf0SrnJDmoBrUkBiMXi57Gg/EQ9BtaDEOLzgx/+wCUrMcBg+M9 963VsttPSTmC5EFqcb7SyC92/RwCZpfDAoKJWfKLhDLVBzEFUCet4FjatJDHrbYc ij4zP4PXoWP9MZHZRnYul1OEZPgtPZ0h1j8lV0+zL+qATqfa1W9HB4Qde98hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUO9p3WBMtf21Y2OB/97QSPyqCn2wwHwYDVR0j BBgwFoAUSmiLcqgEpCapCW7KYBBaTYMcX6gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YWE2YTY3ZC1jYmEzLTQyN2ItOTA1NS01ZjUyOGYyZDIzMmYvMC80QTY4OEI3MkE4 MDRBNDI2QTkwOTZFQ0E2MDEwNUE0RDgzMUM1RkE4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEE2ODhCNzJBODA0QTQyNkE5MDk2RUNBNjAxMDVBNEQ4MzFD NUZBOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmFhNmE2N2QtY2JhMy00MjdiLTkw NTUtNWY1MjhmMmQyMzJmLzAvNEE2ODhCNzJBODA0QTQyNkE5MDk2RUNBNjAxMDVB NEQ4MzFDNUZBOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEC5a6/5PUlJ0uy4b+DQY4uR1nVshMIw1TAV HDEkjRfzrcAUyZJ5sluU0Ib0s9pY0/0p9H1falTvc1Eil1e6AOOSWF1uZN3M5srq joOdgUoYI7kaJEX79PMeChyyZdJTrEUDxgqHsnIo4WWNBz0fhdxTHEl8dS/hUUOT IeDaJjUXUG+c11Nwd2+7SrA4EUtmWZlNgS8O+YbSCWq5B8gCK4azWJ1b7q3/IPZ9 R+d77+ESWETD8za2NZzRCmdYmhNY7d4QfJNxPkkfsDVyGIJq5p4OGf1fZdEZxBuw 2QMXM1BqqdcJ7k3n3lwY+Jai1OQpjbSmhES4m/eK8R7/0uaHyrI= -----END CERTIFICATE-----Generated at Mon Jun 30 16:06:01 2025 by rpki-client