$ rpki-client -vvf repo-rpki.idnic.net/repo/12c511be-67a2-44c9-b182-a911ba95be00/0/4412C369832E86CF255C7255EB1ECA7938910246.mft File: 4412C369832E86CF255C7255EB1ECA7938910246.mft (raw, json) Hash identifier: 1y9vKlA3nPy4ySXuR9DuyoID3pm29CEWnBdMteD33cY= Subject key identifier: E5:74:D2:9B:FB:93:58:98:7F:BE:2C:89:D7:F3:D8:2B:90:A5:5A:75 Authority key identifier: 44:12:C3:69:83:2E:86:CF:25:5C:72:55:EB:1E:CA:79:38:91:02:46 Certificate issuer: /CN=4412C369832E86CF255C7255EB1ECA7938910246 Certificate serial: 132A75BD1204F729CF40D764BAFD8E4710268FA7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4412C369832E86CF255C7255EB1ECA7938910246.cer Subject info access: rsync://repo-rpki.idnic.net/repo/12c511be-67a2-44c9-b182-a911ba95be00/0/4412C369832E86CF255C7255EB1ECA7938910246.mft Manifest number: 046E Signing time: Tue 03 Jun 2025 00:51:08 +0000 Manifest this update: Tue 03 Jun 2025 00:46:08 +0000 Manifest next update: Fri 06 Jun 2025 05:41:08 +0000 Files and hashes: 1: 4412C369832E86CF255C7255EB1ECA7938910246.crl (hash: HTLokKbbaG7doLf8r/0gCx5Qo2E9i0QXbZiKrE8MFcQ=) 2: 323030313a6466353a353238303a3a2f34382d3438203d3e20313431313237.roa (hash: ytsbJoowjejam8im/CXHpxBx0NQjILkSC74yHsn7Jos=) 3: 3130332e3135382e3132312e302f32342d3234203d3e20313431313237.roa (hash: BsPjaPAJfoOsDEE1I3aoHNDcatuZ5kuXKVlMx6806B8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/12c511be-67a2-44c9-b182-a911ba95be00/0/4412C369832E86CF255C7255EB1ECA7938910246.crl rsync://repo-rpki.idnic.net/repo/12c511be-67a2-44c9-b182-a911ba95be00/0/4412C369832E86CF255C7255EB1ECA7938910246.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4412C369832E86CF255C7255EB1ECA7938910246.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 05:41:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:2a:75:bd:12:04:f7:29:cf:40:d7:64:ba:fd:8e:47:10:26:8f:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4412C369832E86CF255C7255EB1ECA7938910246 Validity Not Before: Jun 3 00:46:08 2025 GMT Not After : Jun 6 05:41:08 2025 GMT Subject: CN=E574D29BFB9358987FBE2C89D7F3D82B90A55A75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:e2:1a:b8:d5:68:1b:b0:28:90:99:40:b9:1f: 89:22:a8:3f:7e:f1:4b:a7:47:40:4f:1c:ef:91:6c: d7:00:3d:85:bc:ac:a5:67:74:ca:d0:f6:81:ca:22: a3:c2:a0:c4:8e:a3:be:f0:54:1e:9c:3a:23:b5:f5: 02:06:a8:9a:83:16:39:72:bf:d7:2e:76:f1:5c:fa: 12:48:46:b5:f9:c6:7c:22:cf:12:2e:6f:4c:87:2f: 80:3e:f7:d5:cb:1a:2f:a3:59:6e:70:83:6e:93:35: 6f:ab:06:7d:aa:dd:66:4e:20:0c:02:d8:f9:eb:3b: 15:a3:cd:8e:43:af:eb:fa:67:a8:79:4e:8e:02:93: 37:ce:25:4d:fb:9a:b8:2d:52:93:27:87:61:bb:ba: b2:cc:98:32:9d:76:00:59:69:12:34:56:b8:cd:fd: dd:6f:ef:28:6b:b2:81:a8:26:08:96:ef:88:4e:b6: 9f:1b:83:36:e4:d8:0e:f2:1b:52:e2:9f:13:9d:f4: 0d:e5:b8:e6:32:b3:5e:35:7a:5b:de:f9:e2:66:ab: 40:ed:0d:71:33:8c:02:39:0c:c3:be:3e:87:46:3d: 13:a8:14:be:ca:23:a8:29:6f:01:23:19:4f:63:5f: 8a:6f:dd:1d:73:47:37:d5:bf:de:12:a2:ab:d3:7d: 9f:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:74:D2:9B:FB:93:58:98:7F:BE:2C:89:D7:F3:D8:2B:90:A5:5A:75 X509v3 Authority Key Identifier: keyid:44:12:C3:69:83:2E:86:CF:25:5C:72:55:EB:1E:CA:79:38:91:02:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/12c511be-67a2-44c9-b182-a911ba95be00/0/4412C369832E86CF255C7255EB1ECA7938910246.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4412C369832E86CF255C7255EB1ECA7938910246.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/12c511be-67a2-44c9-b182-a911ba95be00/0/4412C369832E86CF255C7255EB1ECA7938910246.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:c7:80:f1:96:86:af:97:02:cf:4d:60:8e:ab:8c:ea:94:d0: eb:7c:3b:92:fa:ed:15:a0:aa:bd:98:f3:2c:d1:00:c0:ea:1c: b5:05:83:c0:07:04:db:f3:6e:73:8f:6d:ec:f7:a4:4e:f5:1b: aa:17:4c:3b:7b:11:15:b8:c6:05:a7:d6:6a:e0:85:54:1e:fa: 17:d3:6d:30:c7:4c:ec:e8:a4:41:e1:de:3c:9a:6c:55:14:b6: 33:a5:6d:c7:41:3d:cb:99:15:82:3e:9b:d2:38:80:52:25:e6: 37:a8:99:69:65:b9:49:2d:e4:a2:c1:39:a3:b5:7a:d3:ce:0f: d6:00:22:46:d2:25:89:0e:4d:dc:82:e8:93:b2:4b:21:5a:04: b6:c0:63:f2:aa:53:df:13:27:4e:cf:2c:e5:bc:5b:e3:5e:ea: a7:86:14:41:d1:81:84:45:1b:3e:21:07:0d:3a:fe:b1:2b:cd: 4a:c0:8e:c1:84:b6:dc:ad:4c:2a:08:d7:20:e0:78:ed:0c:a3: 61:a9:b1:5b:ac:e7:4b:7d:4c:e1:1d:b6:95:bf:7d:09:d1:c4: 39:74:41:86:3b:73:1b:e5:90:68:25:f9:0e:f8:73:40:fb:5b: f3:5b:ea:fe:81:fd:5f:e7:c3:dd:a8:2c:27:9f:8a:5b:05:d5: 7b:e0:e2:84 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEyp1vRIE9ynPQNdkuv2ORxAmj6cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDQxMkMzNjk4MzJFODZDRjI1NUM3MjU1RUIxRUNBNzkz ODkxMDI0NjAeFw0yNTA2MDMwMDQ2MDhaFw0yNTA2MDYwNTQxMDhaMDMxMTAvBgNV BAMTKEU1NzREMjlCRkI5MzU4OTg3RkJFMkM4OUQ3RjNEODJCOTBBNTVBNzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT4hq41WgbsCiQmUC5H4kiqD9+ 8UunR0BPHO+RbNcAPYW8rKVndMrQ9oHKIqPCoMSOo77wVB6cOiO19QIGqJqDFjly v9cudvFc+hJIRrX5xnwizxIub0yHL4A+99XLGi+jWW5wg26TNW+rBn2q3WZOIAwC 2PnrOxWjzY5Dr+v6Z6h5To4CkzfOJU37mrgtUpMnh2G7urLMmDKddgBZaRI0VrjN /d1v7yhrsoGoJgiW74hOtp8bgzbk2A7yG1LinxOd9A3luOYys141elve+eJmq0Dt DXEzjAI5DMO+PodGPROoFL7KI6gpbwEjGU9jX4pv3R1zRzfVv94SoqvTfZ/XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5XTSm/uTWJh/viyJ1/PYK5ClWnUwHwYDVR0j BBgwFoAURBLDaYMuhs8lXHJV6x7KeTiRAkYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MmM1MTFiZS02N2EyLTQ0YzktYjE4Mi1hOTExYmE5NWJlMDAvMC80NDEyQzM2OTgz MkU4NkNGMjU1QzcyNTVFQjFFQ0E3OTM4OTEwMjQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDQxMkMzNjk4MzJFODZDRjI1NUM3MjU1RUIxRUNBNzkzODkx MDI0Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTJjNTExYmUtNjdhMi00NGM5LWIx ODItYTkxMWJhOTViZTAwLzAvNDQxMkMzNjk4MzJFODZDRjI1NUM3MjU1RUIxRUNB NzkzODkxMDI0Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEvHgPGWhq+XAs9NYI6rjOqU0Ot8O5L67RWg qr2Y8yzRAMDqHLUFg8AHBNvzbnOPbez3pE71G6oXTDt7ERW4xgWn1mrghVQe+hfT bTDHTOzopEHh3jyabFUUtjOlbcdBPcuZFYI+m9I4gFIl5jeomWlluUkt5KLBOaO1 etPOD9YAIkbSJYkOTdyC6JOySyFaBLbAY/KqU98TJ07PLOW8W+Ne6qeGFEHRgYRF Gz4hBw06/rErzUrAjsGEttytTCoI1yDgeO0Mo2GpsVus50t9TOEdtpW/fQnRxDl0 QYY7cxvlkGgl+Q74c0D7W/Nb6v6B/V/nw92oLCefilsF1Xvg4oQ= -----END CERTIFICATE-----Generated at Tue Jun 3 23:20:43 2025 by rpki-client