$ rpki-client -vvf repo-rpki.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.mft File: 4AC7DCD8EB1234ADC427AEBE3949E8691638A707.mft (raw, json) Hash identifier: lxSXWsVlfRD784UbNr+W3T95TKgKyUhMxhAWpdLd3TQ= Subject key identifier: 23:43:3C:F1:BE:0E:AE:47:1B:40:AD:8C:00:53:C8:94:F0:5B:97:55 Authority key identifier: 4A:C7:DC:D8:EB:12:34:AD:C4:27:AE:BE:39:49:E8:69:16:38:A7:07 Certificate issuer: /CN=4AC7DCD8EB1234ADC427AEBE3949E8691638A707 Certificate serial: 46657C5A344F29FF1A6AFEDBE685C7FF5BCA3319 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.cer Subject info access: rsync://repo-rpki.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.mft Manifest number: 01E3 Signing time: Tue 03 Jun 2025 15:31:05 +0000 Manifest this update: Tue 03 Jun 2025 15:26:05 +0000 Manifest next update: Fri 06 Jun 2025 19:18:05 +0000 Files and hashes: 1: 4AC7DCD8EB1234ADC427AEBE3949E8691638A707.crl (hash: CMDtTOsyoXxPcy4QdROLHhWz/RZj/EO6kg32wjMOKts=) 2: 323030313a6466363a366630303a3a2f34382d3438203d3e20313331373034.roa (hash: 3CBY+1byt2hh1kG4N61+QCfs3v8FSbnr3cgZmaX/kYc=) 3: 3131392e322e36342e302f31392d3234203d3e203137343530.roa (hash: Uce528/KV3oCstaRCZguiOogFuox/yiwX1g2nJn55uk=) 4: 3230322e362e3230382e302f32302d3234203d3e203137343530.roa (hash: wpi+A3QiGq0ZlH1T9XK03PNS16oXniLKGOp2khUpYoA=) 5: 3130332e382e39362e302f32322d3234203d3e203137343530.roa (hash: E/ANh8Obcj2c5y2FA6Ly1F0NL4tMRGMfZqDmckfRl5E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.crl rsync://repo-rpki.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 19:18:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:65:7c:5a:34:4f:29:ff:1a:6a:fe:db:e6:85:c7:ff:5b:ca:33:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4AC7DCD8EB1234ADC427AEBE3949E8691638A707 Validity Not Before: Jun 3 15:26:05 2025 GMT Not After : Jun 6 19:18:05 2025 GMT Subject: CN=23433CF1BE0EAE471B40AD8C0053C894F05B9755 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:1f:2b:a8:7b:f7:c6:c3:eb:c4:32:2c:5c:e7: a9:6f:78:38:a2:bb:a6:3f:80:8d:7b:73:49:cd:d0: 1c:f6:a6:68:ee:79:ed:4b:6d:79:c8:e7:e9:03:cb: e3:cf:b9:4e:5a:60:30:f2:9a:9f:40:b6:2b:36:d8: c8:e6:fc:4d:75:d0:07:cc:81:1a:ab:e3:33:75:e2: 22:51:48:fc:86:33:b9:14:86:dd:e3:e9:f9:06:6b: 57:b7:52:d7:85:b5:d2:0e:7d:30:a3:e2:a0:01:2f: 6a:eb:31:bd:a2:78:45:b2:21:c0:6d:3a:f1:55:2d: 15:4c:fb:bb:fd:20:0d:10:df:fc:70:9b:63:76:2c: e7:1b:1a:75:33:ca:ab:ca:79:38:2c:18:90:82:6e: c4:d8:80:04:e5:db:ba:cc:90:b3:24:ff:e7:88:e3: 2a:21:9c:dd:11:4f:53:ea:89:ca:b8:3a:77:72:4e: 8d:58:8d:bd:a8:e0:a0:55:43:66:36:03:9c:eb:e0: 8b:5c:c3:e9:76:e8:b6:f6:3c:07:9a:b2:78:ab:6a: 89:25:d5:a2:9f:79:8d:aa:60:af:78:7e:1f:80:a4: 3d:65:75:9f:fb:d2:e2:25:ca:c8:13:b4:94:14:e1: 9a:2a:f2:5b:1e:ab:f1:24:3e:58:f2:d4:62:74:b6: 39:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:43:3C:F1:BE:0E:AE:47:1B:40:AD:8C:00:53:C8:94:F0:5B:97:55 X509v3 Authority Key Identifier: keyid:4A:C7:DC:D8:EB:12:34:AD:C4:27:AE:BE:39:49:E8:69:16:38:A7:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:25:04:6f:f2:0e:7e:0c:fe:c9:31:6d:ab:6d:41:19:ed:73: a6:e3:6e:cb:e9:38:53:a8:be:f0:99:09:0d:74:19:dc:0b:c1: 68:fc:48:99:23:3e:e7:49:64:e1:9c:8e:fc:83:ef:31:63:10: e4:14:ab:19:36:8f:57:6d:69:cc:bb:82:86:e2:d2:20:8d:1d: ac:af:21:3e:b9:f4:da:1f:84:92:96:0e:70:61:7d:d0:cf:c7: 1c:75:29:cf:21:3c:04:09:91:65:1d:91:9c:b5:13:7d:b8:21: 21:aa:f7:7e:80:b8:8a:64:78:48:81:1c:6c:a0:f3:be:70:57: 07:a7:66:34:53:da:c0:cc:3c:d5:95:84:be:70:e4:39:39:0d: a2:a4:23:cc:a2:a8:65:2a:2b:61:05:15:9b:cb:b5:60:38:38: 0e:46:7c:5f:16:f0:b1:d0:15:28:21:22:ac:bf:e4:55:59:41: 51:4e:ef:5a:dd:0e:5e:11:2d:a4:89:2c:f4:82:b3:c7:6d:d5: 34:8e:ab:db:6e:6f:43:e3:bf:c3:14:cf:9f:2e:81:00:7a:c0: ed:bb:24:f9:ba:8f:88:01:e1:14:f2:3f:bf:42:b8:6e:ce:df: 2a:a7:6d:0b:ab:b3:e7:dc:cb:69:7f:2d:fb:70:93:c1:58:4e: 3e:d7:5b:f0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURmV8WjRPKf8aav7b5oXH/1vKMxkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEFDN0RDRDhFQjEyMzRBREM0MjdBRUJFMzk0OUU4Njkx NjM4QTcwNzAeFw0yNTA2MDMxNTI2MDVaFw0yNTA2MDYxOTE4MDVaMDMxMTAvBgNV BAMTKDIzNDMzQ0YxQkUwRUFFNDcxQjQwQUQ4QzAwNTNDODk0RjA1Qjk3NTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEHyuoe/fGw+vEMixc56lveDii u6Y/gI17c0nN0Bz2pmjuee1LbXnI5+kDy+PPuU5aYDDymp9Atis22Mjm/E110AfM gRqr4zN14iJRSPyGM7kUht3j6fkGa1e3UteFtdIOfTCj4qABL2rrMb2ieEWyIcBt OvFVLRVM+7v9IA0Q3/xwm2N2LOcbGnUzyqvKeTgsGJCCbsTYgATl27rMkLMk/+eI 4yohnN0RT1Pqicq4OndyTo1Yjb2o4KBVQ2Y2A5zr4Itcw+l26Lb2PAeasniraokl 1aKfeY2qYK94fh+ApD1ldZ/70uIlysgTtJQU4Zoq8lseq/EkPljy1GJ0tjnBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUI0M88b4OrkcbQK2MAFPIlPBbl1UwHwYDVR0j BBgwFoAUSsfc2OsSNK3EJ66+OUnoaRY4pwcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MzgwNjFmMS1mYTMwLTRiZDYtODFhMC0yZWM2NzA4MzZjNDIvMC80QUM3RENEOEVC MTIzNEFEQzQyN0FFQkUzOTQ5RTg2OTE2MzhBNzA3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEFDN0RDRDhFQjEyMzRBREM0MjdBRUJFMzk0OUU4NjkxNjM4 QTcwNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDM4MDYxZjEtZmEzMC00YmQ2LTgx YTAtMmVjNjcwODM2YzQyLzAvNEFDN0RDRDhFQjEyMzRBREM0MjdBRUJFMzk0OUU4 NjkxNjM4QTcwNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAMlBG/yDn4M/skxbattQRntc6bjbsvpOFOo vvCZCQ10GdwLwWj8SJkjPudJZOGcjvyD7zFjEOQUqxk2j1dtacy7gobi0iCNHayv IT659NofhJKWDnBhfdDPxxx1Kc8hPAQJkWUdkZy1E324ISGq936AuIpkeEiBHGyg 875wVwenZjRT2sDMPNWVhL5w5Dk5DaKkI8yiqGUqK2EFFZvLtWA4OA5GfF8W8LHQ FSghIqy/5FVZQVFO71rdDl4RLaSJLPSCs8dt1TSOq9tub0Pjv8MUz58ugQB6wO27 JPm6j4gB4RTyP79CuG7O3yqnbQurs+fcy2l/Lftwk8FYTj7XW/A= -----END CERTIFICATE-----Generated at Tue Jun 3 23:36:40 2025 by rpki-client