$ rpki-client -vvf repo-rpki.idnic.net/repo/4027fa02-e49f-4215-862b-7faaefd8ab3e/0/461B039429CF609C76235D70C58DE1D0AB6EA915.mft File: 461B039429CF609C76235D70C58DE1D0AB6EA915.mft (raw, json) Hash identifier: jOg06Sq5OpaoeNzDAGCe10Nu7bbLnr/SVA6bxc0XYHM= Subject key identifier: B9:C2:D6:7E:63:F6:2A:17:AA:58:7E:27:F6:5C:72:76:6A:3B:4E:76 Authority key identifier: 46:1B:03:94:29:CF:60:9C:76:23:5D:70:C5:8D:E1:D0:AB:6E:A9:15 Certificate issuer: /CN=461B039429CF609C76235D70C58DE1D0AB6EA915 Certificate serial: 4C559E7725EA2699CE7B99875CA1A281A122501F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/461B039429CF609C76235D70C58DE1D0AB6EA915.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4027fa02-e49f-4215-862b-7faaefd8ab3e/0/461B039429CF609C76235D70C58DE1D0AB6EA915.mft Manifest number: C8 Signing time: Thu 05 Jun 2025 15:11:29 +0000 Manifest this update: Thu 05 Jun 2025 15:06:29 +0000 Manifest next update: Sun 08 Jun 2025 19:38:29 +0000 Files and hashes: 1: 461B039429CF609C76235D70C58DE1D0AB6EA915.crl (hash: qqwvt7umqit14m5Q/KAoOebF2KC458yRFba6If08N+Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4027fa02-e49f-4215-862b-7faaefd8ab3e/0/461B039429CF609C76235D70C58DE1D0AB6EA915.crl rsync://repo-rpki.idnic.net/repo/4027fa02-e49f-4215-862b-7faaefd8ab3e/0/461B039429CF609C76235D70C58DE1D0AB6EA915.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/461B039429CF609C76235D70C58DE1D0AB6EA915.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 19:38:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:55:9e:77:25:ea:26:99:ce:7b:99:87:5c:a1:a2:81:a1:22:50:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=461B039429CF609C76235D70C58DE1D0AB6EA915 Validity Not Before: Jun 5 15:06:29 2025 GMT Not After : Jun 8 19:38:29 2025 GMT Subject: CN=B9C2D67E63F62A17AA587E27F65C72766A3B4E76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:9f:34:f0:b3:b1:3f:12:2f:d8:c1:54:99:24: ec:5e:44:41:11:42:f7:af:b1:a5:23:94:5b:3b:1e: 66:06:7f:b5:ef:37:d9:9d:0f:98:ff:ec:70:23:0f: 34:11:10:f4:34:c1:0e:45:da:9a:12:4a:91:c1:23: a8:4e:67:02:a1:1f:4a:07:4c:7f:ca:af:2b:9a:60: 96:e4:2b:bb:d3:61:a5:ab:a6:aa:a1:91:33:52:8f: 4a:85:f5:75:32:89:81:41:f6:69:eb:5a:25:e7:3f: a3:55:0b:20:47:af:63:37:61:3b:5e:44:01:c4:17: 6d:e6:97:1c:8b:23:48:da:91:e0:08:50:9a:65:2a: bc:40:47:0d:17:8a:74:bf:3b:e2:e5:95:44:8a:cd: a3:bd:9e:e7:62:44:2f:5f:29:f6:f2:10:1b:1a:5d: 90:b9:f8:93:3c:86:1f:9f:f9:2d:02:2b:0d:90:7b: 4a:48:90:e1:64:51:aa:ef:e4:f1:56:a1:b5:55:c1: fa:4b:0d:e9:bf:a9:81:1e:fa:9b:b9:ff:fb:dc:b4: e0:fa:a2:73:b7:8d:04:e4:45:82:96:e4:10:81:32: 6b:b4:eb:67:cf:8d:ba:96:2c:8b:d4:2f:7f:6a:4f: 17:6c:95:7b:e6:9a:fe:0b:5f:76:e6:28:9b:cd:ec: cc:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:C2:D6:7E:63:F6:2A:17:AA:58:7E:27:F6:5C:72:76:6A:3B:4E:76 X509v3 Authority Key Identifier: keyid:46:1B:03:94:29:CF:60:9C:76:23:5D:70:C5:8D:E1:D0:AB:6E:A9:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4027fa02-e49f-4215-862b-7faaefd8ab3e/0/461B039429CF609C76235D70C58DE1D0AB6EA915.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/461B039429CF609C76235D70C58DE1D0AB6EA915.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4027fa02-e49f-4215-862b-7faaefd8ab3e/0/461B039429CF609C76235D70C58DE1D0AB6EA915.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:a6:f3:7e:c7:fa:b8:98:15:f2:c6:00:5b:06:6c:bb:30:5f: 2b:9e:86:d4:2d:c1:59:16:61:5f:94:a7:b5:09:d0:d7:f7:5c: f2:3e:82:b4:8c:f4:2e:35:a4:94:87:d3:b9:ca:b8:41:14:75: 69:48:ab:80:ae:ba:ed:5e:e6:9e:7e:d9:00:f9:6f:9d:aa:35: 15:57:5b:95:62:e2:5d:a8:84:6b:aa:8b:dc:86:41:a6:a2:fa: 4d:83:18:78:e1:a3:c7:2d:e6:6d:ac:0d:53:8e:1f:da:b5:05: 6a:79:f0:ef:7c:87:07:db:a3:9f:8e:b2:ef:ed:4f:f4:1e:97: e7:64:07:0a:cf:01:67:fd:e9:35:bf:04:47:67:c6:98:c2:02: 7a:ae:0f:f8:f0:ed:8e:1b:79:1e:ad:38:58:34:86:34:07:71: a3:9d:87:5e:4b:74:b1:fb:ea:9c:9c:c1:b8:5b:29:79:2a:dd: 6a:e9:a7:23:53:08:6c:d1:48:f6:33:b2:d3:a1:f6:da:0c:5a: 6a:1b:e6:44:00:75:71:63:bf:1c:75:76:41:69:de:2a:5d:4c: 59:b1:0b:25:2c:3c:e9:45:42:08:8c:16:bc:3d:63:fa:34:33: 84:17:d3:06:3a:68:7b:6f:9f:01:c3:b6:64:01:a3:39:3a:13: 7e:33:a8:e1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTFWedyXqJpnOe5mHXKGigaEiUB8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDYxQjAzOTQyOUNGNjA5Qzc2MjM1RDcwQzU4REUxRDBB QjZFQTkxNTAeFw0yNTA2MDUxNTA2MjlaFw0yNTA2MDgxOTM4MjlaMDMxMTAvBgNV BAMTKEI5QzJENjdFNjNGNjJBMTdBQTU4N0UyN0Y2NUM3Mjc2NkEzQjRFNzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJnzTws7E/Ei/YwVSZJOxeREER QvevsaUjlFs7HmYGf7XvN9mdD5j/7HAjDzQREPQ0wQ5F2poSSpHBI6hOZwKhH0oH TH/KryuaYJbkK7vTYaWrpqqhkTNSj0qF9XUyiYFB9mnrWiXnP6NVCyBHr2M3YTte RAHEF23mlxyLI0jakeAIUJplKrxARw0XinS/O+LllUSKzaO9nudiRC9fKfbyEBsa XZC5+JM8hh+f+S0CKw2Qe0pIkOFkUarv5PFWobVVwfpLDem/qYEe+pu5//vctOD6 onO3jQTkRYKW5BCBMmu062fPjbqWLIvUL39qTxdslXvmmv4LX3bmKJvN7MxDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUucLWfmP2KheqWH4n9lxydmo7TnYwHwYDVR0j BBgwFoAURhsDlCnPYJx2I11wxY3h0KtuqRUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MDI3ZmEwMi1lNDlmLTQyMTUtODYyYi03ZmFhZWZkOGFiM2UvMC80NjFCMDM5NDI5 Q0Y2MDlDNzYyMzVENzBDNThERTFEMEFCNkVBOTE1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDYxQjAzOTQyOUNGNjA5Qzc2MjM1RDcwQzU4REUxRDBBQjZF QTkxNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDAyN2ZhMDItZTQ5Zi00MjE1LTg2 MmItN2ZhYWVmZDhhYjNlLzAvNDYxQjAzOTQyOUNGNjA5Qzc2MjM1RDcwQzU4REUx RDBBQjZFQTkxNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHGm837H+riYFfLGAFsGbLswXyuehtQtwVkW YV+Up7UJ0Nf3XPI+grSM9C41pJSH07nKuEEUdWlIq4Cuuu1e5p5+2QD5b52qNRVX W5Vi4l2ohGuqi9yGQaai+k2DGHjho8ct5m2sDVOOH9q1BWp58O98hwfbo5+Osu/t T/Qel+dkBwrPAWf96TW/BEdnxpjCAnquD/jw7Y4beR6tOFg0hjQHcaOdh15LdLH7 6pycwbhbKXkq3WrppyNTCGzRSPYzstOh9toMWmob5kQAdXFjvxx1dkFp3ipdTFmx CyUsPOlFQgiMFrw9Y/o0M4QX0wY6aHtvnwHDtmQBozk6E34zqOE= -----END CERTIFICATE-----Generated at Fri Jun 6 16:52:09 2025 by rpki-client