$ rpki-client -vvf repo-rpki.idnic.net/repo/fd3a2fdf-bcba-4757-b366-e1a0ad2d374a/0/4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.mft File: 4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.mft (raw, json) Hash identifier: ypjnR4MBks8beDLaxKt2BdMfXy3/ciDz+Gqp/d5DsPU= Subject key identifier: 9C:AE:8F:DB:13:3B:E3:16:A4:3B:17:63:35:03:28:4F:3F:B8:80:4F Authority key identifier: 4A:37:76:4C:C8:0D:1B:8A:68:19:E0:F0:F1:45:46:6E:0B:E5:2C:BD Certificate issuer: /CN=4A37764CC80D1B8A6819E0F0F145466E0BE52CBD Certificate serial: 55A1ECFED57DCA012C92290B63E8D3977AFB8430 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fd3a2fdf-bcba-4757-b366-e1a0ad2d374a/0/4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.mft Manifest number: CC Signing time: Thu 03 Jul 2025 03:41:35 +0000 Manifest this update: Thu 03 Jul 2025 03:36:35 +0000 Manifest next update: Sun 06 Jul 2025 08:22:35 +0000 Files and hashes: 1: 3135372e31302e36332e302f32342d3234203d3e20313532303835.roa (hash: 9mpAVpAO+aHJhHpBlGcLDx3eGU5On+hoBdAGOhixT1Q=) 2: 4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.crl (hash: AGvP97p4mL4fFkLn5NXuNMAYY5vkyoumUgkq3UwMKm4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fd3a2fdf-bcba-4757-b366-e1a0ad2d374a/0/4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.crl rsync://repo-rpki.idnic.net/repo/fd3a2fdf-bcba-4757-b366-e1a0ad2d374a/0/4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 05:44:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:a1:ec:fe:d5:7d:ca:01:2c:92:29:0b:63:e8:d3:97:7a:fb:84:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A37764CC80D1B8A6819E0F0F145466E0BE52CBD Validity Not Before: Jul 3 03:36:35 2025 GMT Not After : Jul 6 08:22:35 2025 GMT Subject: CN=9CAE8FDB133BE316A43B17633503284F3FB8804F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b3:a9:44:2f:9c:17:59:7b:b3:b7:98:62:2f: cc:fa:ce:5d:7f:53:f2:0d:78:60:13:4f:0b:96:64: 80:29:33:72:67:c9:b6:4f:18:ae:b0:fb:30:25:00: 59:43:d7:d2:e1:8c:62:2e:07:e1:de:da:8e:8f:68: 87:7b:da:f6:0e:dc:26:fe:92:f2:a2:d5:da:bd:68: b0:64:f9:f3:d5:3f:2d:d0:1c:04:cf:e8:3b:39:57: 55:7a:a2:02:d8:bb:54:cc:f5:f6:42:69:56:19:71: a9:4a:46:8e:7e:42:48:ca:39:bd:8e:54:66:d0:e5: fe:4e:83:32:3c:aa:8e:8e:c9:15:90:d3:a6:92:5d: 59:51:b8:c4:de:dd:2f:58:f2:37:06:52:47:8c:c5: 0c:07:0c:d3:63:3d:4b:3f:bc:af:78:fd:f1:2d:ac: 7b:e3:af:fa:c3:79:4c:83:7c:61:5f:fd:c2:50:7c: 7b:9b:b1:ee:b8:14:a2:73:82:69:67:83:9f:97:64: 23:37:72:14:39:1e:05:f4:4d:41:6e:c2:cc:99:fa: 9b:a3:f6:27:b2:13:00:8a:f0:3f:2c:87:e8:18:d6: 5c:70:9d:01:7e:f8:80:c1:c4:4a:f4:c9:c9:0b:d3: 62:97:74:f5:8c:68:13:4f:13:83:64:22:1b:50:7b: ae:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:AE:8F:DB:13:3B:E3:16:A4:3B:17:63:35:03:28:4F:3F:B8:80:4F X509v3 Authority Key Identifier: keyid:4A:37:76:4C:C8:0D:1B:8A:68:19:E0:F0:F1:45:46:6E:0B:E5:2C:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fd3a2fdf-bcba-4757-b366-e1a0ad2d374a/0/4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fd3a2fdf-bcba-4757-b366-e1a0ad2d374a/0/4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cf:da:c2:ca:7d:21:e9:aa:3e:c6:9d:b3:ba:b9:f6:8b:4c:85: d8:56:26:25:02:af:b2:23:84:0f:9d:eb:b7:8e:aa:ba:01:bc: b2:ca:0b:cb:c5:1f:eb:9d:02:c4:41:b8:c7:26:f6:75:82:f4: e0:32:2b:e1:1e:bc:eb:f0:a6:05:b9:3a:53:9c:8d:d8:bb:13: 07:8c:15:e9:f0:53:75:e6:45:c5:37:e4:ce:9c:75:a1:cc:79: 27:3d:28:a6:7d:3d:cb:c6:d3:d3:5a:ae:51:25:5a:eb:8d:f1: 25:96:e6:99:ee:a4:a3:ae:e0:61:ac:11:ce:d1:2d:9a:a2:72: a0:8a:fd:c8:90:bc:83:6d:6c:f5:f0:43:23:62:c7:4d:a5:60: fb:c5:24:d5:7a:0d:10:0b:67:49:56:6f:31:10:33:72:b8:d1: 79:18:d9:50:a8:a4:e7:bb:00:00:16:d0:1d:8f:3b:33:9b:9f: 70:c6:81:ab:6f:ba:e8:ab:69:1a:ad:3a:9e:3f:b1:ff:23:28: c8:7c:dd:f4:11:5d:63:e9:ea:71:63:6a:32:be:c3:37:38:f4: 2e:98:1f:63:59:b1:7a:e1:3e:2d:0e:13:5d:fb:bd:1e:a8:27: ca:78:ea:2f:0c:30:6f:85:12:bd:4f:47:fe:39:1b:04:94:ca: 42:52:4b:dc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVaHs/tV9ygEskikLY+jTl3r7hDAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEEzNzc2NENDODBEMUI4QTY4MTlFMEYwRjE0NTQ2NkUw QkU1MkNCRDAeFw0yNTA3MDMwMzM2MzVaFw0yNTA3MDYwODIyMzVaMDMxMTAvBgNV BAMTKDlDQUU4RkRCMTMzQkUzMTZBNDNCMTc2MzM1MDMyODRGM0ZCODgwNEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4s6lEL5wXWXuzt5hiL8z6zl1/ U/INeGATTwuWZIApM3JnybZPGK6w+zAlAFlD19LhjGIuB+He2o6PaId72vYO3Cb+ kvKi1dq9aLBk+fPVPy3QHATP6Ds5V1V6ogLYu1TM9fZCaVYZcalKRo5+QkjKOb2O VGbQ5f5OgzI8qo6OyRWQ06aSXVlRuMTe3S9Y8jcGUkeMxQwHDNNjPUs/vK94/fEt rHvjr/rDeUyDfGFf/cJQfHubse64FKJzgmlng5+XZCM3chQ5HgX0TUFuwsyZ+puj 9ieyEwCK8D8sh+gY1lxwnQF++IDBxEr0yckL02KXdPWMaBNPE4NkIhtQe643AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnK6P2xM74xakOxdjNQMoTz+4gE8wHwYDVR0j BBgwFoAUSjd2TMgNG4poGeDw8UVGbgvlLL0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZDNhMmZkZi1iY2JhLTQ3NTctYjM2Ni1lMWEwYWQyZDM3NGEvMC80QTM3NzY0Q0M4 MEQxQjhBNjgxOUUwRjBGMTQ1NDY2RTBCRTUyQ0JELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNEEzNzc2NENDODBEMUI4QTY4MTlFMEYwRjE0NTQ2NkUwQkU1 MkNCRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmQzYTJmZGYtYmNiYS00NzU3LWIz NjYtZTFhMGFkMmQzNzRhLzAvNEEzNzc2NENDODBEMUI4QTY4MTlFMEYwRjE0NTQ2 NkUwQkU1MkNCRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAM/awsp9IemqPsads7q59otMhdhWJiUCr7Ij hA+d67eOqroBvLLKC8vFH+udAsRBuMcm9nWC9OAyK+EevOvwpgW5OlOcjdi7EweM FenwU3XmRcU35M6cdaHMeSc9KKZ9PcvG09NarlElWuuN8SWW5pnupKOu4GGsEc7R LZqicqCK/ciQvINtbPXwQyNix02lYPvFJNV6DRALZ0lWbzEQM3K40XkY2VCopOe7 AAAW0B2POzObn3DGgatvuuiraRqtOp4/sf8jKMh83fQRXWPp6nFjajK+wzc49C6Y H2NZsXrhPi0OE137vR6oJ8p46i8MMG+FEr1PR/45GwSUykJSS9w= -----END CERTIFICATE-----Generated at Thu Jul 3 06:59:55 2025 by rpki-client