$ rpki-client -vvf repo-rpki.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/4EE959798755CD4BA407AEB6EBDD3100261EAA55.mft File: 4EE959798755CD4BA407AEB6EBDD3100261EAA55.mft (raw, json) Hash identifier: 41ouQg2O86qqqPrz7JJ/IsAij8VCloGao5YWX/oxMV4= Subject key identifier: 4E:D5:FB:C8:33:12:97:52:C7:F5:06:33:15:2E:56:0B:F0:E7:0D:D5 Authority key identifier: 4E:E9:59:79:87:55:CD:4B:A4:07:AE:B6:EB:DD:31:00:26:1E:AA:55 Certificate issuer: /CN=4EE959798755CD4BA407AEB6EBDD3100261EAA55 Certificate serial: 16467652539C61515E5A22406DE35DD2211038C6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4EE959798755CD4BA407AEB6EBDD3100261EAA55.cer Subject info access: rsync://repo-rpki.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/4EE959798755CD4BA407AEB6EBDD3100261EAA55.mft Manifest number: 02FD Signing time: Wed 04 Jun 2025 12:52:09 +0000 Manifest this update: Wed 04 Jun 2025 12:47:09 +0000 Manifest next update: Sat 07 Jun 2025 17:38:09 +0000 Files and hashes: 1: 3130332e3136382e3235312e302f32342d3234203d3e20313432333237.roa (hash: KY5Q38tghqbGAveqQA6JKe7i+KFoXalouHQ/ChXrWvk=) 2: 4EE959798755CD4BA407AEB6EBDD3100261EAA55.crl (hash: /27VrOwyxjSObQzOuIHCDfHgfWgjq9QqC4GPD9IWHf4=) 3: 3130332e3136382e3235302e302f32342d3234203d3e20313432333237.roa (hash: fwyJa5mhG/p5zrm7WsD823rq8IWOTIX6aI5FYC++s0M=) 4: 3130332e3136382e3235302e302f32332d3233203d3e20313432333237.roa (hash: ik9rrWYA9D4GBjhetTFAP4k0XQKOPTBWebSo28sOHb8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/4EE959798755CD4BA407AEB6EBDD3100261EAA55.crl rsync://repo-rpki.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/4EE959798755CD4BA407AEB6EBDD3100261EAA55.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4EE959798755CD4BA407AEB6EBDD3100261EAA55.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 17:38:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:46:76:52:53:9c:61:51:5e:5a:22:40:6d:e3:5d:d2:21:10:38:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4EE959798755CD4BA407AEB6EBDD3100261EAA55 Validity Not Before: Jun 4 12:47:09 2025 GMT Not After : Jun 7 17:38:09 2025 GMT Subject: CN=4ED5FBC833129752C7F50633152E560BF0E70DD5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:ef:86:40:56:13:58:54:17:a0:46:bc:6e:4f: b9:3a:51:b2:89:ca:84:68:55:43:69:5f:14:29:6f: d1:e6:fa:b0:29:2d:62:48:f8:15:a4:fd:d2:98:f6: 1c:95:c2:8a:ed:26:ed:b8:74:1e:90:15:59:6e:ee: 5e:1d:7b:ef:6d:07:e3:c9:a0:e1:b9:d4:24:cd:56: 94:e7:c5:41:a6:60:7b:83:e2:cc:97:63:74:06:ac: 37:6b:25:66:20:c2:69:1b:14:1a:7e:a5:02:ea:c1: 13:9e:3d:78:08:10:27:0b:6b:97:22:a1:92:88:80: d7:95:a3:ff:f0:80:e7:d6:7f:87:2e:61:e5:9f:0d: 22:21:e9:4b:eb:a0:a7:c6:6a:0c:b8:49:3b:87:63: 7c:74:c7:33:76:96:bc:8f:0b:6f:ab:90:64:71:66: 00:39:04:f5:31:c5:42:c4:5a:db:d7:cd:82:5f:53: be:e5:38:14:e6:a9:63:ff:d9:03:2f:2e:0f:58:9a: b1:46:0b:b9:1a:a9:cb:d2:65:96:ee:92:87:e9:8a: a7:6e:d6:42:1b:43:5b:0d:19:ea:51:85:6d:3a:68: 32:21:d8:54:0e:ae:d4:43:f5:5b:24:30:d6:e7:9b: 90:38:4e:4c:c8:79:a7:31:d0:0c:e6:a7:21:66:eb: fb:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:D5:FB:C8:33:12:97:52:C7:F5:06:33:15:2E:56:0B:F0:E7:0D:D5 X509v3 Authority Key Identifier: keyid:4E:E9:59:79:87:55:CD:4B:A4:07:AE:B6:EB:DD:31:00:26:1E:AA:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/4EE959798755CD4BA407AEB6EBDD3100261EAA55.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4EE959798755CD4BA407AEB6EBDD3100261EAA55.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/4EE959798755CD4BA407AEB6EBDD3100261EAA55.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:09:b7:a8:09:99:86:64:54:89:69:88:d5:d9:fb:a7:47:14: 65:bb:a1:c2:40:df:52:75:4a:c0:b5:a6:1f:71:76:a0:c5:37: 8d:31:5a:40:d3:4c:95:ce:94:6d:15:ca:c6:dc:26:52:39:f1: 36:d4:7d:e7:ce:9a:23:ac:78:3f:22:53:67:55:a1:f9:0b:56: e5:ac:54:92:0f:9a:0b:6e:c7:79:2f:c7:89:29:34:4b:80:9e: ef:6f:89:c1:27:ac:e1:c3:2d:ce:ae:51:7e:52:ec:0e:f5:89: 0a:ef:15:00:f1:55:00:13:70:dc:4f:89:56:1b:84:05:8d:59: e1:69:89:3c:61:2b:1e:17:76:00:52:f4:94:cc:24:05:7e:28: e2:8e:5b:a5:55:07:3f:6a:c5:40:b8:e0:f2:d6:02:ce:fb:72: 32:d7:c9:5b:fc:d2:b9:57:de:94:4f:9f:fe:d5:65:1d:46:71: b3:44:2b:b8:83:84:04:ee:1f:6c:e9:dd:12:c4:f2:97:5a:3d: f1:0b:a8:ea:6b:ef:16:51:a2:bd:6c:2a:c2:eb:96:93:3a:8d: 0e:2d:75:16:48:aa:b0:d7:4b:66:65:65:fc:c1:86:60:0b:a5: a5:2e:57:44:77:82:de:66:ad:36:53:9b:ae:fc:43:f0:2f:92: ef:0c:e6:85 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFkZ2UlOcYVFeWiJAbeNd0iEQOMYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEVFOTU5Nzk4NzU1Q0Q0QkE0MDdBRUI2RUJERDMxMDAy NjFFQUE1NTAeFw0yNTA2MDQxMjQ3MDlaFw0yNTA2MDcxNzM4MDlaMDMxMTAvBgNV BAMTKDRFRDVGQkM4MzMxMjk3NTJDN0Y1MDYzMzE1MkU1NjBCRjBFNzBERDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD274ZAVhNYVBegRrxuT7k6UbKJ yoRoVUNpXxQpb9Hm+rApLWJI+BWk/dKY9hyVwortJu24dB6QFVlu7l4de+9tB+PJ oOG51CTNVpTnxUGmYHuD4syXY3QGrDdrJWYgwmkbFBp+pQLqwROePXgIECcLa5ci oZKIgNeVo//wgOfWf4cuYeWfDSIh6UvroKfGagy4STuHY3x0xzN2lryPC2+rkGRx ZgA5BPUxxULEWtvXzYJfU77lOBTmqWP/2QMvLg9YmrFGC7kaqcvSZZbukofpiqdu 1kIbQ1sNGepRhW06aDIh2FQOrtRD9VskMNbnm5A4TkzIeacx0AzmpyFm6/tNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTtX7yDMSl1LH9QYzFS5WC/DnDdUwHwYDVR0j BBgwFoAUTulZeYdVzUukB662690xACYeqlUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MzhkNTgwYi00NTJlLTQyZDctYjA0MS05MDFkYzMzZDY4NTcvMC80RUU5NTk3OTg3 NTVDRDRCQTQwN0FFQjZFQkREMzEwMDI2MUVBQTU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEVFOTU5Nzk4NzU1Q0Q0QkE0MDdBRUI2RUJERDMxMDAyNjFF QUE1NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDM4ZDU4MGItNDUyZS00MmQ3LWIw NDEtOTAxZGMzM2Q2ODU3LzAvNEVFOTU5Nzk4NzU1Q0Q0QkE0MDdBRUI2RUJERDMx MDAyNjFFQUE1NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFAJt6gJmYZkVIlpiNXZ+6dHFGW7ocJA31J1 SsC1ph9xdqDFN40xWkDTTJXOlG0VysbcJlI58TbUfefOmiOseD8iU2dVofkLVuWs VJIPmgtux3kvx4kpNEuAnu9vicEnrOHDLc6uUX5S7A71iQrvFQDxVQATcNxPiVYb hAWNWeFpiTxhKx4XdgBS9JTMJAV+KOKOW6VVBz9qxUC44PLWAs77cjLXyVv80rlX 3pRPn/7VZR1GcbNEK7iDhATuH2zp3RLE8pdaPfELqOpr7xZRor1sKsLrlpM6jQ4t dRZIqrDXS2ZlZfzBhmALpaUuV0R3gt5mrTZTm678Q/Avku8M5oU= -----END CERTIFICATE-----Generated at Thu Jun 5 19:43:09 2025 by rpki-client