$ rpki-client -vvf repo-rpki.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/4A4CC1D625A4519B23D73717C879F10A6173AEAB.mft File: 4A4CC1D625A4519B23D73717C879F10A6173AEAB.mft (raw, json) Hash identifier: bptUP/XjzADbWSfB6d2wgzTlbIrPR3Y0vdGDgHV7tcU= Subject key identifier: 69:C5:CD:3A:5A:E3:FA:19:83:79:F3:73:5A:32:14:77:36:61:F1:53 Authority key identifier: 4A:4C:C1:D6:25:A4:51:9B:23:D7:37:17:C8:79:F1:0A:61:73:AE:AB Certificate issuer: /CN=4A4CC1D625A4519B23D73717C879F10A6173AEAB Certificate serial: 7D060A0E358B01DA3A747649108E8609C5F08CD0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A4CC1D625A4519B23D73717C879F10A6173AEAB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/4A4CC1D625A4519B23D73717C879F10A6173AEAB.mft Manifest number: 028A Signing time: Sun 01 Jun 2025 13:01:31 +0000 Manifest this update: Sun 01 Jun 2025 12:56:31 +0000 Manifest next update: Wed 04 Jun 2025 22:06:31 +0000 Files and hashes: 1: 3130332e3233332e3131312e302f32342d3234203d3e203633343838.roa (hash: z/YOZWWGc41LH9oZ4KGtThI9u3npxHOn37nVJl/FSQI=) 2: 3130332e3233332e3131302e302f32342d3234203d3e203338373538.roa (hash: XkLmfviGVp2EGPILR+re9nqIYX0YPT0FpVRTvK0kmBs=) 3: 3130332e3233332e3130392e302f32342d3234203d3e203633343838.roa (hash: GdSTW/OHYTEI/PWuMmTToeVUXPmcixtoxCsRQug+8zk=) 4: 4A4CC1D625A4519B23D73717C879F10A6173AEAB.crl (hash: 6XiJKS1UAp4WiLhR5QFq9IlApWI1Q8mI0iwVv+ZlPkQ=) 5: 3130332e3233332e3130382e302f32342d3234203d3e203633343838.roa (hash: NTu0pfg5O9FNTQVT/y9O87yuBsSqMNv0sxLjGwJCf2Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/4A4CC1D625A4519B23D73717C879F10A6173AEAB.crl rsync://repo-rpki.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/4A4CC1D625A4519B23D73717C879F10A6173AEAB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A4CC1D625A4519B23D73717C879F10A6173AEAB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Jun 2025 22:06:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:06:0a:0e:35:8b:01:da:3a:74:76:49:10:8e:86:09:c5:f0:8c:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A4CC1D625A4519B23D73717C879F10A6173AEAB Validity Not Before: Jun 1 12:56:31 2025 GMT Not After : Jun 4 22:06:31 2025 GMT Subject: CN=69C5CD3A5AE3FA198379F3735A3214773661F153 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:cc:a0:42:c2:54:ce:2c:38:7b:4a:36:7f:f5: a7:53:63:57:e3:b9:b6:12:d3:f0:bd:0e:f8:46:c4: af:6f:19:38:48:0d:bb:ef:df:25:59:f6:68:c7:27: 3d:dd:a7:d8:63:a4:81:45:c1:c3:b6:59:70:fc:a2: 98:6b:e5:a3:a4:40:ad:44:0f:28:59:c7:cd:2c:27: 9f:96:68:2f:ad:49:01:53:cf:a2:cf:08:37:f8:db: fa:6b:43:1d:07:50:f8:a6:bb:5e:2b:65:1f:cd:a0: 1a:cd:26:c5:66:77:b5:de:b5:c2:64:85:70:df:21: 7f:b1:9b:cd:49:4b:fa:a9:19:95:57:00:57:b0:c5: d3:ca:09:1d:e4:49:69:30:01:e7:0f:bd:d9:22:3a: 2a:de:54:8e:b8:a7:da:61:10:1c:b7:23:3e:71:f0: 81:06:b5:4c:ec:c3:97:0d:57:92:b7:fc:1d:a4:a1: 0e:c3:e0:6b:4d:16:78:e8:29:b5:46:5d:58:16:63: 68:06:86:85:d1:6e:26:3e:46:9f:20:89:4d:6b:0e: fd:e0:e7:d7:99:97:c5:dc:04:7d:68:c9:d5:47:00: f0:3c:1d:fe:13:73:ab:6b:86:31:dc:02:40:71:42: 32:73:6f:97:c1:13:3a:05:4d:72:47:c7:95:87:88: 69:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:C5:CD:3A:5A:E3:FA:19:83:79:F3:73:5A:32:14:77:36:61:F1:53 X509v3 Authority Key Identifier: keyid:4A:4C:C1:D6:25:A4:51:9B:23:D7:37:17:C8:79:F1:0A:61:73:AE:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/4A4CC1D625A4519B23D73717C879F10A6173AEAB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A4CC1D625A4519B23D73717C879F10A6173AEAB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/4A4CC1D625A4519B23D73717C879F10A6173AEAB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:87:20:6a:b7:38:c7:a9:d2:ed:4e:7b:48:0a:f7:43:2f:70: a7:22:61:4c:fc:70:08:ad:95:a3:f9:74:e4:fe:d4:de:75:d0: 2e:b8:68:d1:4f:29:53:b3:51:0b:21:be:11:75:15:f4:62:00: 81:19:6a:dc:d9:a7:5b:21:fb:d1:21:9d:97:71:f4:40:96:e2: ca:ed:8a:cb:d5:6f:e9:5d:66:ad:c8:9d:52:5b:f3:2e:b2:97: 8c:72:76:a7:87:5d:c0:63:67:17:40:06:1c:55:60:ec:92:c6: 0b:b9:d6:48:11:bc:9b:fc:f2:ac:44:5b:af:f2:11:4a:ca:01: 73:8c:6e:b6:f2:c1:4f:8e:97:57:0c:fa:8e:cc:b8:d2:35:b2: 05:82:4c:45:cf:8b:4c:be:26:97:3f:35:3f:eb:8b:c1:ea:3b: c8:9a:ab:dd:74:4d:9e:c4:a0:4b:d0:2f:5b:96:8a:52:1b:32: 8c:b6:27:82:5c:e3:e3:17:8e:1f:25:11:2f:c7:51:0f:f0:cb: a6:6f:c3:1a:82:8e:cc:fb:b7:39:07:a1:c5:b3:ad:bd:66:6e: 19:1a:f6:85:37:dc:3f:6d:6a:14:06:83:3e:92:ca:82:4b:47: 7b:f6:d3:25:ea:e0:a8:2b:98:67:51:b1:72:83:5a:cc:8b:16: c1:80:d3:e2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfQYKDjWLAdo6dHZJEI6GCcXwjNAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEE0Q0MxRDYyNUE0NTE5QjIzRDczNzE3Qzg3OUYxMEE2 MTczQUVBQjAeFw0yNTA2MDExMjU2MzFaFw0yNTA2MDQyMjA2MzFaMDMxMTAvBgNV BAMTKDY5QzVDRDNBNUFFM0ZBMTk4Mzc5RjM3MzVBMzIxNDc3MzY2MUYxNTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrzKBCwlTOLDh7SjZ/9adTY1fj ubYS0/C9DvhGxK9vGThIDbvv3yVZ9mjHJz3dp9hjpIFFwcO2WXD8ophr5aOkQK1E DyhZx80sJ5+WaC+tSQFTz6LPCDf42/prQx0HUPimu14rZR/NoBrNJsVmd7XetcJk hXDfIX+xm81JS/qpGZVXAFewxdPKCR3kSWkwAecPvdkiOireVI64p9phEBy3Iz5x 8IEGtUzsw5cNV5K3/B2koQ7D4GtNFnjoKbVGXVgWY2gGhoXRbiY+Rp8giU1rDv3g 59eZl8XcBH1oydVHAPA8Hf4Tc6trhjHcAkBxQjJzb5fBEzoFTXJHx5WHiGnxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUacXNOlrj+hmDefNzWjIUdzZh8VMwHwYDVR0j BBgwFoAUSkzB1iWkUZsj1zcXyHnxCmFzrqswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZWQ0NmY4Mi1jZjExLTRlMzItYjA1MS02YWMzMzRhOTI2MjIvMC80QTRDQzFENjI1 QTQ1MTlCMjNENzM3MTdDODc5RjEwQTYxNzNBRUFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEE0Q0MxRDYyNUE0NTE5QjIzRDczNzE3Qzg3OUYxMEE2MTcz QUVBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWVkNDZmODItY2YxMS00ZTMyLWIw NTEtNmFjMzM0YTkyNjIyLzAvNEE0Q0MxRDYyNUE0NTE5QjIzRDczNzE3Qzg3OUYx MEE2MTczQUVBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABqHIGq3OMep0u1Oe0gK90MvcKciYUz8cAit laP5dOT+1N510C64aNFPKVOzUQshvhF1FfRiAIEZatzZp1sh+9EhnZdx9ECW4srt isvVb+ldZq3InVJb8y6yl4xydqeHXcBjZxdABhxVYOySxgu51kgRvJv88qxEW6/y EUrKAXOMbrbywU+Ol1cM+o7MuNI1sgWCTEXPi0y+Jpc/NT/ri8HqO8iaq910TZ7E oEvQL1uWilIbMoy2J4Jc4+MXjh8lES/HUQ/wy6ZvwxqCjsz7tzkHocWzrb1mbhka 9oU33D9tahQGgz6SyoJLR3v20yXq4KgrmGdRsXKDWsyLFsGA0+I= -----END CERTIFICATE-----Generated at Tue Jun 3 23:18:15 2025 by rpki-client