$ rpki-client -vvf repo-rpki.idnic.net/repo/24d108f7-08b2-409f-8a70-a9c67ae5ed22/0/4FA812FE6A4A85F790CB2740EF08836883716912.mft File: 4FA812FE6A4A85F790CB2740EF08836883716912.mft (raw, json) Hash identifier: X6rp79S6OhEjeKbZQvfumhYuZ+AyGDYaD2+UBKlV+qw= Subject key identifier: D1:2A:EC:E0:79:C0:7F:B3:D0:54:81:B8:85:01:7C:20:E0:54:16:72 Authority key identifier: 4F:A8:12:FE:6A:4A:85:F7:90:CB:27:40:EF:08:83:68:83:71:69:12 Certificate issuer: /CN=4FA812FE6A4A85F790CB2740EF08836883716912 Certificate serial: 43824BD4F22372985F9E838E8E1252B6874569BF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4FA812FE6A4A85F790CB2740EF08836883716912.cer Subject info access: rsync://repo-rpki.idnic.net/repo/24d108f7-08b2-409f-8a70-a9c67ae5ed22/0/4FA812FE6A4A85F790CB2740EF08836883716912.mft Manifest number: 0489 Signing time: Thu 03 Apr 2025 09:30:47 +0000 Manifest this update: Thu 03 Apr 2025 09:25:47 +0000 Manifest next update: Sun 06 Apr 2025 19:16:47 +0000 Files and hashes: 1: 323430303a386238303a3a2f33322d3332203d3e20313331373637.roa (hash: mE4j7gpBCxYCzmtebP+W7JvzIm1JCi0eQIsNW6AvGWY=) 2: 3130332e39302e3139362e302f32322d3234203d3e20313331373637.roa (hash: muMEUhzqqugv6Zj6iFpUQ9PcnrfD7MobXuiftjt5U7I=) 3: 4FA812FE6A4A85F790CB2740EF08836883716912.crl (hash: FSTeSxGE67D0/eUEK5+fDLhmOJzksaiK1k3m+ebtBEs=) 4: 3137352e3130362e31362e302f32322d3234203d3e20313331373637.roa (hash: oMeLoSJYkTTS27i9zqAo4l29kftt3eMvJ5Fk3r50iQ0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/24d108f7-08b2-409f-8a70-a9c67ae5ed22/0/4FA812FE6A4A85F790CB2740EF08836883716912.crl rsync://repo-rpki.idnic.net/repo/24d108f7-08b2-409f-8a70-a9c67ae5ed22/0/4FA812FE6A4A85F790CB2740EF08836883716912.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4FA812FE6A4A85F790CB2740EF08836883716912.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Apr 2025 19:16:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:82:4b:d4:f2:23:72:98:5f:9e:83:8e:8e:12:52:b6:87:45:69:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4FA812FE6A4A85F790CB2740EF08836883716912 Validity Not Before: Apr 3 09:25:47 2025 GMT Not After : Apr 6 19:16:47 2025 GMT Subject: CN=D12AECE079C07FB3D05481B885017C20E0541672 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:17:19:98:14:51:c5:a3:fa:3e:e1:94:34:20: b4:ba:d2:12:19:c2:15:17:25:54:05:45:e9:28:a8: 52:db:4d:29:bd:c8:ba:b9:85:9c:09:2a:fd:80:b5: a7:33:a2:9f:b0:44:7a:21:45:bf:91:ac:a3:ec:5b: ca:7e:aa:db:a7:66:b8:2c:30:5c:23:49:70:6a:4f: 23:ce:f4:99:c0:dd:bd:37:63:9a:ed:8c:60:a6:9c: af:19:a5:29:fb:d7:6e:c9:18:93:e3:7a:f3:06:3e: b5:7b:e3:a3:eb:cc:76:99:fa:9a:f1:12:2a:b7:af: 23:83:9c:c6:e3:75:97:21:a7:13:7c:8f:99:82:56: c0:dc:6e:96:e2:0e:b4:90:b5:78:b5:fe:3b:de:4e: 70:49:1e:8d:92:68:e5:86:65:05:99:ef:d7:ad:f9: 91:e5:36:87:6e:35:d6:ee:5f:48:6e:a8:3f:0c:9d: de:66:07:6c:3d:08:6e:09:f6:71:05:8d:b6:ff:4d: 99:0f:3a:2b:25:c1:29:20:a2:2c:5c:4d:3e:31:f0: 4e:97:ac:dd:af:f7:ac:00:b3:02:df:ee:07:a4:e7: fb:1e:5b:81:86:e7:2f:ab:61:1f:69:54:a5:22:cd: 37:08:7f:23:a3:aa:53:7b:77:d7:17:35:01:64:76: 64:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:2A:EC:E0:79:C0:7F:B3:D0:54:81:B8:85:01:7C:20:E0:54:16:72 X509v3 Authority Key Identifier: keyid:4F:A8:12:FE:6A:4A:85:F7:90:CB:27:40:EF:08:83:68:83:71:69:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/24d108f7-08b2-409f-8a70-a9c67ae5ed22/0/4FA812FE6A4A85F790CB2740EF08836883716912.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4FA812FE6A4A85F790CB2740EF08836883716912.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/24d108f7-08b2-409f-8a70-a9c67ae5ed22/0/4FA812FE6A4A85F790CB2740EF08836883716912.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:bf:4b:6e:56:4f:07:dd:01:a4:9b:20:54:32:bf:79:bf:7f: 15:67:10:fc:0b:1b:b4:16:2a:48:73:d5:3b:dc:9c:a6:09:1b: ab:7c:c2:2d:b5:7a:b0:24:c4:3a:0b:d8:95:c8:5d:83:bd:b2: cb:42:8e:2e:25:43:f9:e1:a1:99:e1:ae:cf:2f:0b:55:f0:7c: 39:ee:e2:7f:da:97:41:ab:5a:ec:b1:44:f9:78:6a:75:cd:2e: 10:78:af:04:39:b0:98:aa:bf:25:ae:d0:9a:3a:47:af:c6:f4: 53:74:c3:86:f6:02:a1:d7:73:6f:00:13:57:fc:f4:99:c3:f0: db:d8:81:5d:77:06:d0:cf:89:e0:d6:ba:af:c5:b7:71:31:5e: 13:56:e3:14:ee:21:c2:f9:85:af:6f:80:3a:79:dd:d4:a6:8b: d2:06:33:8e:ec:03:55:58:6c:83:37:51:78:de:09:b1:57:c1: 4a:f1:de:49:46:60:14:fb:cf:ca:43:58:76:d4:f9:e0:fe:c9: 8e:c7:2c:26:8d:1b:05:16:4e:a3:26:04:a6:63:81:b3:dd:2f: 1f:c6:87:cd:b9:75:d0:c0:81:9c:fd:10:d6:0c:d1:b6:ac:bd: 88:a7:57:19:8d:ba:8c:7a:e8:db:ae:99:51:30:7b:88:2f:0e: fa:64:31:0c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ4JL1PIjcphfnoOOjhJStodFab8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEZBODEyRkU2QTRBODVGNzkwQ0IyNzQwRUYwODgzNjg4 MzcxNjkxMjAeFw0yNTA0MDMwOTI1NDdaFw0yNTA0MDYxOTE2NDdaMDMxMTAvBgNV BAMTKEQxMkFFQ0UwNzlDMDdGQjNEMDU0ODFCODg1MDE3QzIwRTA1NDE2NzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxFxmYFFHFo/o+4ZQ0ILS60hIZ whUXJVQFRekoqFLbTSm9yLq5hZwJKv2Ataczop+wRHohRb+RrKPsW8p+qtunZrgs MFwjSXBqTyPO9JnA3b03Y5rtjGCmnK8ZpSn7127JGJPjevMGPrV746PrzHaZ+prx Eiq3ryODnMbjdZchpxN8j5mCVsDcbpbiDrSQtXi1/jveTnBJHo2SaOWGZQWZ79et +ZHlNoduNdbuX0huqD8Mnd5mB2w9CG4J9nEFjbb/TZkPOislwSkgoixcTT4x8E6X rN2v96wAswLf7gek5/seW4GG5y+rYR9pVKUizTcIfyOjqlN7d9cXNQFkdmTVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0Srs4HnAf7PQVIG4hQF8IOBUFnIwHwYDVR0j BBgwFoAUT6gS/mpKhfeQyydA7wiDaINxaRIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NGQxMDhmNy0wOGIyLTQwOWYtOGE3MC1hOWM2N2FlNWVkMjIvMC80RkE4MTJGRTZB NEE4NUY3OTBDQjI3NDBFRjA4ODM2ODgzNzE2OTEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEZBODEyRkU2QTRBODVGNzkwQ0IyNzQwRUYwODgzNjg4Mzcx NjkxMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjRkMTA4ZjctMDhiMi00MDlmLThh NzAtYTljNjdhZTVlZDIyLzAvNEZBODEyRkU2QTRBODVGNzkwQ0IyNzQwRUYwODgz Njg4MzcxNjkxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFu/S25WTwfdAaSbIFQyv3m/fxVnEPwLG7QW Kkhz1TvcnKYJG6t8wi21erAkxDoL2JXIXYO9sstCji4lQ/nhoZnhrs8vC1XwfDnu 4n/al0GrWuyxRPl4anXNLhB4rwQ5sJiqvyWu0Jo6R6/G9FN0w4b2AqHXc28AE1f8 9JnD8NvYgV13BtDPieDWuq/Ft3ExXhNW4xTuIcL5ha9vgDp53dSmi9IGM47sA1VY bIM3UXjeCbFXwUrx3klGYBT7z8pDWHbU+eD+yY7HLCaNGwUWTqMmBKZjgbPdLx/G h825ddDAgZz9ENYM0basvYinVxmNuox66NuumVEwe4gvDvpkMQw= -----END CERTIFICATE-----Generated at Sat Apr 5 16:40:06 2025 by rpki-client