$ rpki-client -vvf repo-rpki.idnic.net/repo/40457d20-023a-4509-bb4a-62c86929dd97/0/4960A8427FEA5814EF9E80EF3786E0CAAE063745.mft File: 4960A8427FEA5814EF9E80EF3786E0CAAE063745.mft (raw, json) Hash identifier: 8n+aLnJre+KqHPL2YK2xvmoGtlqCYHjan0gHmeET2x0= Subject key identifier: 08:AC:8C:31:7B:DF:C7:A5:54:E7:43:27:52:71:39:47:77:B7:79:AD Authority key identifier: 49:60:A8:42:7F:EA:58:14:EF:9E:80:EF:37:86:E0:CA:AE:06:37:45 Certificate issuer: /CN=4960A8427FEA5814EF9E80EF3786E0CAAE063745 Certificate serial: 16A8EEC37109C81C824E0B493B9AD2C05C2240C1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4960A8427FEA5814EF9E80EF3786E0CAAE063745.cer Subject info access: rsync://repo-rpki.idnic.net/repo/40457d20-023a-4509-bb4a-62c86929dd97/0/4960A8427FEA5814EF9E80EF3786E0CAAE063745.mft Manifest number: 78 Signing time: Wed 04 Jun 2025 04:52:04 +0000 Manifest this update: Wed 04 Jun 2025 04:47:04 +0000 Manifest next update: Sat 07 Jun 2025 13:30:04 +0000 Files and hashes: 1: 4960A8427FEA5814EF9E80EF3786E0CAAE063745.crl (hash: thN2P90i5TEFN1l0FovarYhhrLTblhxPOrj4uiZAlBQ=) 2: 3130332e3233302e3138382e302f32332d3234203d3e20313333333439.roa (hash: HSCUNLaKeqcd7Fit+HRGDE0GHJLW2sIkUfc8pivqrjg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/40457d20-023a-4509-bb4a-62c86929dd97/0/4960A8427FEA5814EF9E80EF3786E0CAAE063745.crl rsync://repo-rpki.idnic.net/repo/40457d20-023a-4509-bb4a-62c86929dd97/0/4960A8427FEA5814EF9E80EF3786E0CAAE063745.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4960A8427FEA5814EF9E80EF3786E0CAAE063745.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 13:30:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:a8:ee:c3:71:09:c8:1c:82:4e:0b:49:3b:9a:d2:c0:5c:22:40:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4960A8427FEA5814EF9E80EF3786E0CAAE063745 Validity Not Before: Jun 4 04:47:04 2025 GMT Not After : Jun 7 13:30:04 2025 GMT Subject: CN=08AC8C317BDFC7A554E743275271394777B779AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:8d:d5:f5:bd:6c:b4:57:90:3a:fc:59:42:8c: fb:17:23:a2:d0:ae:5a:40:3f:0e:65:69:25:80:be: 33:26:c2:fc:c6:0e:ed:11:2d:c5:d1:13:0a:3e:76: 82:2f:05:b8:c0:3b:1f:a7:46:78:43:0e:cb:64:65: f7:26:c1:61:57:4f:14:c4:43:49:1b:8f:3c:a0:a1: 6f:32:eb:ab:46:53:dc:56:05:11:aa:e3:fe:a7:44: fb:e6:be:28:c3:d3:24:3f:84:af:05:c2:dc:b9:1d: ad:f4:6b:76:83:25:cb:6b:da:8d:ca:51:a7:70:f0: 34:ad:16:82:de:c4:53:4b:46:89:f3:e8:11:a3:4c: 15:5d:9a:ad:b8:6b:08:9a:f6:5e:d5:90:98:b9:39: 6b:f2:e9:d2:9e:21:4e:92:20:ec:9b:f1:a1:b3:fc: 5a:61:de:fd:bb:3f:86:49:78:2c:71:6d:02:f2:db: 11:ca:76:ea:3f:1f:05:2e:34:53:29:83:cb:95:c9: 7c:bc:90:9d:a9:69:b7:5e:dd:af:6a:cb:17:ef:cf: d7:61:95:23:c2:b0:89:9e:ea:b9:b7:2c:b1:6e:93: 16:72:2c:7d:6c:df:5d:8e:f7:4a:e5:e3:d2:f5:01: 24:88:9b:84:65:47:41:27:f0:b4:6a:e4:e2:37:32: af:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:AC:8C:31:7B:DF:C7:A5:54:E7:43:27:52:71:39:47:77:B7:79:AD X509v3 Authority Key Identifier: keyid:49:60:A8:42:7F:EA:58:14:EF:9E:80:EF:37:86:E0:CA:AE:06:37:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/40457d20-023a-4509-bb4a-62c86929dd97/0/4960A8427FEA5814EF9E80EF3786E0CAAE063745.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4960A8427FEA5814EF9E80EF3786E0CAAE063745.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/40457d20-023a-4509-bb4a-62c86929dd97/0/4960A8427FEA5814EF9E80EF3786E0CAAE063745.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:59:0f:e7:87:51:28:d8:ea:2d:dd:c5:37:78:69:27:63:cb: e4:ec:c4:33:73:41:79:99:ac:89:8e:19:b5:d1:56:55:0b:8f: bd:4e:df:4c:db:e6:ae:83:0a:2f:53:e1:82:0d:7e:dc:16:76: 70:57:bb:42:6e:ac:f9:14:97:8c:0e:d2:00:f9:ac:63:9b:88: 15:e7:21:96:f0:be:36:9f:39:8d:5a:39:a7:40:f4:84:f5:9c: 06:17:2d:b0:c0:68:50:d5:67:38:5b:a0:7f:e0:3d:c7:86:5b: 6c:bd:0b:1c:b9:e7:86:2d:af:6b:cc:9d:50:59:e5:6d:ca:64: e9:e8:2d:51:15:fb:c1:89:d7:27:ad:1b:d1:e5:38:5d:22:c8: 0e:10:7a:f4:9d:02:55:22:f6:5e:81:1f:e7:35:d0:37:04:c4: 7a:a4:5c:4c:98:57:c9:d8:5c:a0:d8:79:41:97:3c:1a:32:d4: 2c:56:71:58:5e:18:fd:38:5a:db:53:80:72:36:38:bb:44:05: 42:51:a6:a2:93:16:b5:fe:d5:c3:82:0d:d6:01:c1:22:ba:67: 38:6e:72:3a:89:a9:f3:fc:b2:29:e3:0a:58:95:ed:8c:04:15: 52:d3:c6:a6:b7:27:e4:9c:1a:b0:b5:c2:e8:4e:f2:17:20:86: 7b:ee:7e:96 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFqjuw3EJyByCTgtJO5rSwFwiQMEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDk2MEE4NDI3RkVBNTgxNEVGOUU4MEVGMzc4NkUwQ0FB RTA2Mzc0NTAeFw0yNTA2MDQwNDQ3MDRaFw0yNTA2MDcxMzMwMDRaMDMxMTAvBgNV BAMTKDA4QUM4QzMxN0JERkM3QTU1NEU3NDMyNzUyNzEzOTQ3NzdCNzc5QUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4jdX1vWy0V5A6/FlCjPsXI6LQ rlpAPw5laSWAvjMmwvzGDu0RLcXREwo+doIvBbjAOx+nRnhDDstkZfcmwWFXTxTE Q0kbjzygoW8y66tGU9xWBRGq4/6nRPvmvijD0yQ/hK8Fwty5Ha30a3aDJctr2o3K Uadw8DStFoLexFNLRonz6BGjTBVdmq24awia9l7VkJi5OWvy6dKeIU6SIOyb8aGz /Fph3v27P4ZJeCxxbQLy2xHKduo/HwUuNFMpg8uVyXy8kJ2pabde3a9qyxfvz9dh lSPCsIme6rm3LLFukxZyLH1s312O90rl49L1ASSIm4RlR0En8LRq5OI3Mq8bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCKyMMXvfx6VU50MnUnE5R3e3ea0wHwYDVR0j BBgwFoAUSWCoQn/qWBTvnoDvN4bgyq4GN0UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MDQ1N2QyMC0wMjNhLTQ1MDktYmI0YS02MmM4NjkyOWRkOTcvMC80OTYwQTg0MjdG RUE1ODE0RUY5RTgwRUYzNzg2RTBDQUFFMDYzNzQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDk2MEE4NDI3RkVBNTgxNEVGOUU4MEVGMzc4NkUwQ0FBRTA2 Mzc0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDA0NTdkMjAtMDIzYS00NTA5LWJi NGEtNjJjODY5MjlkZDk3LzAvNDk2MEE4NDI3RkVBNTgxNEVGOUU4MEVGMzc4NkUw Q0FBRTA2Mzc0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJxZD+eHUSjY6i3dxTd4aSdjy+TsxDNzQXmZ rImOGbXRVlULj71O30zb5q6DCi9T4YINftwWdnBXu0JurPkUl4wO0gD5rGObiBXn IZbwvjafOY1aOadA9IT1nAYXLbDAaFDVZzhboH/gPceGW2y9Cxy554Ytr2vMnVBZ 5W3KZOnoLVEV+8GJ1yetG9HlOF0iyA4QevSdAlUi9l6BH+c10DcExHqkXEyYV8nY XKDYeUGXPBoy1CxWcVheGP04WttTgHI2OLtEBUJRpqKTFrX+1cOCDdYBwSK6Zzhu cjqJqfP8sinjCliV7YwEFVLTxqa3J+ScGrC1wuhO8hcghnvufpY= -----END CERTIFICATE-----Generated at Thu Jun 5 20:01:51 2025 by rpki-client