$ rpki-client -vvf repo-rpki.idnic.net/repo/fd3a2fdf-bcba-4757-b366-e1a0ad2d374a/0/4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.mft File: 4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.mft (raw, json) Hash identifier: Han4J4/DE2Tc0FTV39/vdvKhTveLpu2PWo/wiiJZYbs= Subject key identifier: AA:ED:57:45:AA:CC:77:F4:83:E8:15:FB:DC:00:0D:CA:89:AC:FD:B4 Authority key identifier: 4A:37:76:4C:C8:0D:1B:8A:68:19:E0:F0:F1:45:46:6E:0B:E5:2C:BD Certificate issuer: /CN=4A37764CC80D1B8A6819E0F0F145466E0BE52CBD Certificate serial: 5F5FF6379260201C2A584EF140FC10ABA56E8C8F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fd3a2fdf-bcba-4757-b366-e1a0ad2d374a/0/4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.mft Manifest number: E2 Signing time: Thu 21 Aug 2025 22:51:41 +0000 Manifest this update: Thu 21 Aug 2025 22:46:41 +0000 Manifest next update: Mon 25 Aug 2025 06:33:41 +0000 Files and hashes: 1: 3135372e31302e36332e302f32342d3234203d3e20313532303835.roa (hash: 9mpAVpAO+aHJhHpBlGcLDx3eGU5On+hoBdAGOhixT1Q=) 2: 4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.crl (hash: ezG06/F4/7ai6YSeaWLg3nynSHzxEldj/EaZRAmM0qI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fd3a2fdf-bcba-4757-b366-e1a0ad2d374a/0/4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.crl rsync://repo-rpki.idnic.net/repo/fd3a2fdf-bcba-4757-b366-e1a0ad2d374a/0/4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 06:33:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:5f:f6:37:92:60:20:1c:2a:58:4e:f1:40:fc:10:ab:a5:6e:8c:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A37764CC80D1B8A6819E0F0F145466E0BE52CBD Validity Not Before: Aug 21 22:46:41 2025 GMT Not After : Aug 25 06:33:41 2025 GMT Subject: CN=AAED5745AACC77F483E815FBDC000DCA89ACFDB4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:55:39:15:8b:45:99:9e:9b:0a:fb:24:3b:8b: 71:fd:27:50:74:8f:ce:e7:6b:53:c9:83:c3:d7:f3: 8e:15:62:33:f8:8b:47:cc:e7:55:af:18:57:51:b8: e8:0c:f0:90:c2:d0:7b:dd:fd:c6:73:b6:bf:aa:94: aa:48:05:5d:3d:4f:0f:71:cd:85:5c:a3:60:cf:50: 05:85:12:86:9c:6e:07:73:58:97:af:38:6f:42:9a: 89:bb:71:90:f9:c1:d3:86:8f:9b:95:4b:57:33:82: 8d:d2:ea:e7:c4:a6:1e:d3:ac:33:b7:13:88:5e:1d: c4:42:82:38:0d:e0:fa:8d:b5:fa:1e:aa:77:cd:1a: e1:6b:ae:7f:7f:b5:0a:cd:dc:98:62:d1:55:0c:2b: c7:2c:09:44:04:ab:1f:82:73:af:e0:c2:82:94:3e: dd:48:5a:41:3d:74:0f:7e:c2:2c:54:1f:59:84:ae: 3f:89:68:f0:b4:c1:14:c0:b4:db:d8:da:ba:50:0b: 95:26:6d:53:6e:b5:79:ff:7f:5a:63:aa:aa:01:c7: 4d:b4:7b:ff:55:65:10:c8:d3:b9:cb:b6:99:a0:c5: b7:4e:7d:2c:e4:94:f0:42:10:cc:1d:76:46:5f:d4: 43:97:65:05:cf:95:eb:f2:2d:50:6a:35:6d:0f:b1: 12:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:ED:57:45:AA:CC:77:F4:83:E8:15:FB:DC:00:0D:CA:89:AC:FD:B4 X509v3 Authority Key Identifier: keyid:4A:37:76:4C:C8:0D:1B:8A:68:19:E0:F0:F1:45:46:6E:0B:E5:2C:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fd3a2fdf-bcba-4757-b366-e1a0ad2d374a/0/4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fd3a2fdf-bcba-4757-b366-e1a0ad2d374a/0/4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:54:48:36:ea:24:08:2a:e8:33:b0:ac:89:9c:b2:32:d1:e2: 1d:06:a5:b6:42:8b:f4:5e:0f:23:46:60:8e:66:3d:78:c9:2b: a9:15:2d:ae:71:d5:3f:c0:b2:c4:0b:2b:a7:70:e6:6a:63:38: 53:02:9a:ad:c3:4c:5f:cd:52:e9:d8:65:db:5a:ea:5e:56:dd: 5e:78:dc:5b:78:65:7b:ca:56:eb:51:4e:b8:14:18:25:c7:16: 59:b1:38:52:c0:a2:f9:b1:6b:30:20:9c:b3:b3:55:b6:90:e1: 30:c1:f2:63:93:c6:20:8d:bf:5e:4e:b9:0e:c0:48:4e:e3:44: ea:da:3a:36:c1:cd:77:4b:7e:0b:08:f4:46:6a:f3:f8:d2:d4: 67:8d:2a:fa:a9:6b:21:85:e3:6e:1f:fc:c7:47:9e:b4:d5:ba: ac:bb:86:ab:96:55:c3:7f:9b:b7:3e:2f:60:fb:6e:13:4e:50: 80:26:e0:4d:23:4e:1b:23:58:e3:da:7d:0b:24:62:fd:4e:6f: 35:df:ab:85:36:94:fd:47:f8:4f:58:d9:8d:79:88:5b:01:32: 06:79:1b:24:60:a6:b4:89:e9:76:35:c1:79:9d:ce:7e:f4:e6: 35:ad:f6:67:45:c3:2f:b0:af:a7:ba:3f:03:8c:2a:91:8d:af: 94:3c:a9:66 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX1/2N5JgIBwqWE7xQPwQq6VujI8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEEzNzc2NENDODBEMUI4QTY4MTlFMEYwRjE0NTQ2NkUw QkU1MkNCRDAeFw0yNTA4MjEyMjQ2NDFaFw0yNTA4MjUwNjMzNDFaMDMxMTAvBgNV BAMTKEFBRUQ1NzQ1QUFDQzc3RjQ4M0U4MTVGQkRDMDAwRENBODlBQ0ZEQjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrVTkVi0WZnpsK+yQ7i3H9J1B0 j87na1PJg8PX844VYjP4i0fM51WvGFdRuOgM8JDC0Hvd/cZztr+qlKpIBV09Tw9x zYVco2DPUAWFEoacbgdzWJevOG9Cmom7cZD5wdOGj5uVS1czgo3S6ufEph7TrDO3 E4heHcRCgjgN4PqNtfoeqnfNGuFrrn9/tQrN3Jhi0VUMK8csCUQEqx+Cc6/gwoKU Pt1IWkE9dA9+wixUH1mErj+JaPC0wRTAtNvY2rpQC5UmbVNutXn/f1pjqqoBx020 e/9VZRDI07nLtpmgxbdOfSzklPBCEMwddkZf1EOXZQXPlevyLVBqNW0PsRJHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqu1XRarMd/SD6BX73AANyoms/bQwHwYDVR0j BBgwFoAUSjd2TMgNG4poGeDw8UVGbgvlLL0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZDNhMmZkZi1iY2JhLTQ3NTctYjM2Ni1lMWEwYWQyZDM3NGEvMC80QTM3NzY0Q0M4 MEQxQjhBNjgxOUUwRjBGMTQ1NDY2RTBCRTUyQ0JELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNEEzNzc2NENDODBEMUI4QTY4MTlFMEYwRjE0NTQ2NkUwQkU1 MkNCRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmQzYTJmZGYtYmNiYS00NzU3LWIz NjYtZTFhMGFkMmQzNzRhLzAvNEEzNzc2NENDODBEMUI4QTY4MTlFMEYwRjE0NTQ2 NkUwQkU1MkNCRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGVUSDbqJAgq6DOwrImcsjLR4h0GpbZCi/Re DyNGYI5mPXjJK6kVLa5x1T/AssQLK6dw5mpjOFMCmq3DTF/NUunYZdta6l5W3V54 3Ft4ZXvKVutRTrgUGCXHFlmxOFLAovmxazAgnLOzVbaQ4TDB8mOTxiCNv15OuQ7A SE7jROraOjbBzXdLfgsI9EZq8/jS1GeNKvqpayGF424f/MdHnrTVuqy7hquWVcN/ m7c+L2D7bhNOUIAm4E0jThsjWOPafQskYv1ObzXfq4U2lP1H+E9Y2Y15iFsBMgZ5 GyRgprSJ6XY1wXmdzn705jWt9mdFwy+wr6e6PwOMKpGNr5Q8qWY= -----END CERTIFICATE-----Generated at Sat Aug 23 23:54:15 2025 by rpki-client