$ rpki-client -vvf repo-rpki.idnic.net/repo/29b3be62-3597-4fe8-a795-fc9ba1202344/0/B4381C63674B5D9A9B8C44C13CF19E7DD321F7C0.mft File: B4381C63674B5D9A9B8C44C13CF19E7DD321F7C0.mft (raw, json) Hash identifier: DxgLXD7JdsMvx4Z0rnC5HLiGfusHcW/FE3NduWhPoyM= Subject key identifier: 4E:BA:42:80:FB:BB:64:B3:B3:3C:CA:C5:D0:AA:B4:F6:B0:4E:8C:3F Authority key identifier: B4:38:1C:63:67:4B:5D:9A:9B:8C:44:C1:3C:F1:9E:7D:D3:21:F7:C0 Certificate issuer: /CN=B4381C63674B5D9A9B8C44C13CF19E7DD321F7C0 Certificate serial: 0BC7B4FBDD7AF948F0C044E533D0A951C9794EC1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4381C63674B5D9A9B8C44C13CF19E7DD321F7C0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/29b3be62-3597-4fe8-a795-fc9ba1202344/0/B4381C63674B5D9A9B8C44C13CF19E7DD321F7C0.mft Manifest number: 015D Signing time: Sat 05 Apr 2025 09:51:24 +0000 Manifest this update: Sat 05 Apr 2025 09:46:24 +0000 Manifest next update: Tue 08 Apr 2025 14:16:24 +0000 Files and hashes: 1: 3130332e32302e3231392e302f32342d3234203d3e20313439393638.roa (hash: O7tUFKX21rX6gYwZ1ZrwxitGOTUDY0G4VWaDfkWzuZ4=) 2: B4381C63674B5D9A9B8C44C13CF19E7DD321F7C0.crl (hash: KiZnTpDuuVHmYrf9VcJt6VIs9poixILh/yTSqLtpdqQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/29b3be62-3597-4fe8-a795-fc9ba1202344/0/B4381C63674B5D9A9B8C44C13CF19E7DD321F7C0.crl rsync://repo-rpki.idnic.net/repo/29b3be62-3597-4fe8-a795-fc9ba1202344/0/B4381C63674B5D9A9B8C44C13CF19E7DD321F7C0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4381C63674B5D9A9B8C44C13CF19E7DD321F7C0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:c7:b4:fb:dd:7a:f9:48:f0:c0:44:e5:33:d0:a9:51:c9:79:4e:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B4381C63674B5D9A9B8C44C13CF19E7DD321F7C0 Validity Not Before: Apr 5 09:46:24 2025 GMT Not After : Apr 8 14:16:24 2025 GMT Subject: CN=4EBA4280FBBB64B3B33CCAC5D0AAB4F6B04E8C3F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:c2:16:16:76:1e:8b:c3:cd:15:b8:5b:02:85: 89:21:b3:b3:82:a8:1a:32:d0:e9:27:c8:90:2f:2d: ac:73:21:dd:90:ec:cd:3b:52:8a:33:65:89:f7:e3: 4a:b7:b4:99:7a:b2:1b:6d:52:d4:bd:95:ec:ca:b6: 9c:7c:6c:da:05:38:d5:c2:ff:40:6b:f0:d6:c5:f0: 04:17:3d:3a:9a:52:65:65:3c:4e:7d:c2:c2:fc:b2: 88:45:ed:a3:ec:44:6a:62:91:15:b6:54:ed:d3:da: 64:21:32:ca:09:1d:24:9a:a1:4b:df:17:ee:29:80: 19:70:a1:7b:89:56:2a:65:91:9a:79:49:d6:7a:94: 6b:e6:86:5d:fd:dd:a2:9b:e7:2a:5f:50:83:68:6e: fc:b3:26:93:ae:33:41:1d:29:20:06:18:53:41:6e: 06:ec:80:0f:5e:4e:b7:1f:1b:ee:d2:02:bd:80:11: f7:ef:d6:f6:97:5b:e3:72:3e:60:6d:a0:fa:ba:51: 01:d3:99:7f:5d:de:6b:2e:18:d6:27:68:6a:2b:df: 75:f6:27:23:6c:3f:78:da:03:e0:a8:65:ef:48:92: 1c:1d:2c:ee:46:56:f2:b3:54:be:ac:68:4e:2a:98: 7e:db:f3:b6:30:64:fa:e9:aa:92:47:5a:dd:29:3c: 21:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:BA:42:80:FB:BB:64:B3:B3:3C:CA:C5:D0:AA:B4:F6:B0:4E:8C:3F X509v3 Authority Key Identifier: keyid:B4:38:1C:63:67:4B:5D:9A:9B:8C:44:C1:3C:F1:9E:7D:D3:21:F7:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/29b3be62-3597-4fe8-a795-fc9ba1202344/0/B4381C63674B5D9A9B8C44C13CF19E7DD321F7C0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4381C63674B5D9A9B8C44C13CF19E7DD321F7C0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/29b3be62-3597-4fe8-a795-fc9ba1202344/0/B4381C63674B5D9A9B8C44C13CF19E7DD321F7C0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:e8:84:89:ed:e0:27:8a:72:23:6f:e2:5d:97:2b:25:5d:5f: f0:12:56:2d:f4:81:ed:0c:43:da:4a:51:86:b8:82:bb:97:43: 73:87:08:75:ed:dc:e3:f6:12:ec:a0:14:cc:7d:f0:1b:18:78: 84:54:3e:2b:4e:f9:59:cd:51:7f:95:a6:b6:c9:71:a3:1a:26: 41:6a:4c:09:95:49:92:28:7d:91:09:a7:3e:24:85:6a:84:ca: 6e:9a:9c:a2:7f:77:71:65:f3:4a:f0:04:c9:f9:b9:86:44:ed: d5:95:90:1a:7a:f1:f2:2c:a4:83:5c:d4:1b:3d:1e:6e:62:55: b3:a7:23:21:ed:26:60:bc:28:5f:d4:a9:64:b8:49:df:9c:f6: 53:14:a4:fa:4b:ad:60:ee:85:19:cd:31:26:95:43:13:0e:97: 3e:cd:cd:19:aa:93:28:92:5d:12:e4:b0:67:c7:e3:b2:d9:05: ae:c3:70:26:fd:05:61:90:57:6c:90:c1:42:87:db:d7:3a:da: 0e:18:b8:da:e7:2f:df:c7:65:d2:17:ba:51:c5:07:a7:1c:80: 10:ba:73:ac:eb:e0:f0:1b:6d:9a:f4:dc:50:57:ea:79:ca:73: 76:f7:4d:e9:e0:58:9d:a5:04:e5:31:6f:d0:3c:21:3c:2b:b4: 7a:08:a7:3c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC8e0+916+UjwwETlM9CpUcl5TsEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjQzODFDNjM2NzRCNUQ5QTlCOEM0NEMxM0NGMTlFN0RE MzIxRjdDMDAeFw0yNTA0MDUwOTQ2MjRaFw0yNTA0MDgxNDE2MjRaMDMxMTAvBgNV BAMTKDRFQkE0MjgwRkJCQjY0QjNCMzNDQ0FDNUQwQUFCNEY2QjA0RThDM0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJwhYWdh6Lw80VuFsChYkhs7OC qBoy0OknyJAvLaxzId2Q7M07UoozZYn340q3tJl6shttUtS9lezKtpx8bNoFONXC /0Br8NbF8AQXPTqaUmVlPE59wsL8sohF7aPsRGpikRW2VO3T2mQhMsoJHSSaoUvf F+4pgBlwoXuJViplkZp5SdZ6lGvmhl393aKb5ypfUINobvyzJpOuM0EdKSAGGFNB bgbsgA9eTrcfG+7SAr2AEffv1vaXW+NyPmBtoPq6UQHTmX9d3msuGNYnaGor33X2 JyNsP3jaA+CoZe9IkhwdLO5GVvKzVL6saE4qmH7b87YwZPrpqpJHWt0pPCH9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTrpCgPu7ZLOzPMrF0Kq09rBOjD8wHwYDVR0j BBgwFoAUtDgcY2dLXZqbjETBPPGefdMh98AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y OWIzYmU2Mi0zNTk3LTRmZTgtYTc5NS1mYzliYTEyMDIzNDQvMC9CNDM4MUM2MzY3 NEI1RDlBOUI4QzQ0QzEzQ0YxOUU3REQzMjFGN0MwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjQzODFDNjM2NzRCNUQ5QTlCOEM0NEMxM0NGMTlFN0REMzIx RjdDMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjliM2JlNjItMzU5Ny00ZmU4LWE3 OTUtZmM5YmExMjAyMzQ0LzAvQjQzODFDNjM2NzRCNUQ5QTlCOEM0NEMxM0NGMTlF N0REMzIxRjdDMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADLohInt4CeKciNv4l2XKyVdX/ASVi30ge0M Q9pKUYa4gruXQ3OHCHXt3OP2EuygFMx98BsYeIRUPitO+VnNUX+VprbJcaMaJkFq TAmVSZIofZEJpz4khWqEym6anKJ/d3Fl80rwBMn5uYZE7dWVkBp68fIspINc1Bs9 Hm5iVbOnIyHtJmC8KF/UqWS4Sd+c9lMUpPpLrWDuhRnNMSaVQxMOlz7NzRmqkyiS XRLksGfH47LZBa7DcCb9BWGQV2yQwUKH29c62g4YuNrnL9/HZdIXulHFB6ccgBC6 c6zr4PAbbZr03FBX6nnKc3b3TengWJ2lBOUxb9A8ITwrtHoIpzw= -----END CERTIFICATE-----Generated at Sat Apr 5 16:42:19 2025 by rpki-client