$ rpki-client -vvf repo-rpki.idnic.net/repo/4bf2ad4f-a72a-46d1-bd7d-a560c31efcad/0/483F366E1FE9C068ED4417FD71D5B18420D56B62.mft File: 483F366E1FE9C068ED4417FD71D5B18420D56B62.mft (raw, json) Hash identifier: RaGKAgLB5l4eZCB3oiM0TwcZof14218UQxE5aUMv99M= Subject key identifier: 53:89:95:DD:40:7D:A0:92:AA:A7:45:A1:0B:08:7F:22:0A:67:53:17 Authority key identifier: 48:3F:36:6E:1F:E9:C0:68:ED:44:17:FD:71:D5:B1:84:20:D5:6B:62 Certificate issuer: /CN=483F366E1FE9C068ED4417FD71D5B18420D56B62 Certificate serial: 09FB44EA1DC533553EA4D38E083F4A5D86BD0B53 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/483F366E1FE9C068ED4417FD71D5B18420D56B62.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4bf2ad4f-a72a-46d1-bd7d-a560c31efcad/0/483F366E1FE9C068ED4417FD71D5B18420D56B62.mft Manifest number: 0484 Signing time: Thu 03 Apr 2025 16:00:41 +0000 Manifest this update: Thu 03 Apr 2025 15:55:41 +0000 Manifest next update: Mon 07 Apr 2025 00:00:41 +0000 Files and hashes: 1: 483F366E1FE9C068ED4417FD71D5B18420D56B62.crl (hash: vjg7AdAK8XsTORb6Uud3RMI3K5SS7ltrQecjL9BEKlg=) 2: 3230332e3137312e3232312e302f32342d3234203d3e203435323938.roa (hash: nJfbDfnLQ0hPzTdK1jvw4RWKNmgPHIKJaKdLROAz98U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4bf2ad4f-a72a-46d1-bd7d-a560c31efcad/0/483F366E1FE9C068ED4417FD71D5B18420D56B62.crl rsync://repo-rpki.idnic.net/repo/4bf2ad4f-a72a-46d1-bd7d-a560c31efcad/0/483F366E1FE9C068ED4417FD71D5B18420D56B62.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/483F366E1FE9C068ED4417FD71D5B18420D56B62.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:fb:44:ea:1d:c5:33:55:3e:a4:d3:8e:08:3f:4a:5d:86:bd:0b:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=483F366E1FE9C068ED4417FD71D5B18420D56B62 Validity Not Before: Apr 3 15:55:41 2025 GMT Not After : Apr 7 00:00:41 2025 GMT Subject: CN=538995DD407DA092AAA745A10B087F220A675317 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:96:8f:68:e9:b3:4d:bc:f6:d2:da:dd:4e:2c: 73:bd:a9:f9:c7:17:a1:45:50:1b:ef:74:58:12:18: 7d:34:ac:f6:cc:64:95:3d:84:d2:c7:b7:ee:84:b5: a0:ae:37:84:91:9c:7f:be:42:bb:e6:78:e5:98:2b: 07:20:b4:04:85:fd:f7:58:2d:f1:c9:d8:fb:e8:b7: 57:bb:92:56:1b:61:c1:11:e9:b3:5e:0f:46:17:d7: d8:cf:53:fe:c4:8b:ad:db:44:c9:4f:2f:4b:7b:e0: e0:9c:38:33:53:22:e8:8b:8d:d4:e0:de:a7:02:2a: d5:c1:41:64:2d:14:ea:b6:ca:51:33:da:b9:b9:66: 02:68:37:4f:c9:1f:3f:89:e5:ba:48:8c:ab:c4:f0: a6:51:1c:29:14:ae:c1:b0:7d:48:f4:b2:2e:c8:20: 72:1e:f7:b5:28:1e:e7:f3:1e:f3:19:9b:67:56:0f: 8b:fc:f8:ba:35:ec:27:24:bb:03:c2:b1:f4:49:c0: ed:40:a2:23:9f:9c:fe:d5:1a:38:69:75:0b:51:e2: d0:da:2d:28:0f:c6:9b:94:a6:1c:7b:aa:44:de:98: 39:36:d7:8a:1d:7c:42:01:09:2e:24:a1:7b:0d:cf: e5:cd:ad:18:55:e1:f2:2a:e9:60:69:a6:54:8b:b6: 37:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:89:95:DD:40:7D:A0:92:AA:A7:45:A1:0B:08:7F:22:0A:67:53:17 X509v3 Authority Key Identifier: keyid:48:3F:36:6E:1F:E9:C0:68:ED:44:17:FD:71:D5:B1:84:20:D5:6B:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4bf2ad4f-a72a-46d1-bd7d-a560c31efcad/0/483F366E1FE9C068ED4417FD71D5B18420D56B62.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/483F366E1FE9C068ED4417FD71D5B18420D56B62.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bf2ad4f-a72a-46d1-bd7d-a560c31efcad/0/483F366E1FE9C068ED4417FD71D5B18420D56B62.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:b7:75:b9:80:e9:3e:45:e5:c1:ac:f5:d9:a8:50:d4:c8:ae: e8:76:10:40:27:65:59:0d:87:3f:ac:c9:1a:25:95:b1:ae:95: b6:c4:af:e9:1e:61:a5:fa:af:a4:36:c0:dc:48:50:33:f7:ac: 97:0a:4a:65:ca:f8:e9:91:1a:d1:56:50:e0:7c:bd:b3:c2:3a: 95:1a:28:c7:54:24:2b:9b:a1:77:76:63:aa:95:22:7a:9f:ee: ae:e3:c7:8e:5f:02:ea:b4:d8:40:03:ed:48:8e:d4:48:72:18: 0b:99:27:07:25:c5:a5:74:5a:7a:74:f0:ba:24:b1:9b:a8:14: b1:0a:c5:3b:be:19:bf:0c:12:b4:30:45:db:3b:eb:36:a5:df: a1:b7:85:92:61:08:2e:1e:b2:57:c2:15:fe:33:0a:bd:ba:cf: 82:d7:7b:fe:da:d3:72:1f:fd:23:41:67:7e:c1:42:ab:81:24: a2:c3:fb:65:de:20:b7:92:59:b1:7e:e7:c9:54:d1:06:bb:96: 9e:22:a9:7a:a9:93:80:81:43:82:43:06:dd:27:31:15:8a:f2: 54:b6:db:23:70:49:e5:b8:e2:0d:23:ea:c7:f3:7b:6c:f4:79: bd:80:fb:37:2c:0a:7f:9a:49:bd:29:95:8f:82:59:21:6b:4c: 74:14:96:84 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCftE6h3FM1U+pNOOCD9KXYa9C1MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDgzRjM2NkUxRkU5QzA2OEVENDQxN0ZENzFENUIxODQy MEQ1NkI2MjAeFw0yNTA0MDMxNTU1NDFaFw0yNTA0MDcwMDAwNDFaMDMxMTAvBgNV BAMTKDUzODk5NURENDA3REEwOTJBQUE3NDVBMTBCMDg3RjIyMEE2NzUzMTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIlo9o6bNNvPbS2t1OLHO9qfnH F6FFUBvvdFgSGH00rPbMZJU9hNLHt+6EtaCuN4SRnH++QrvmeOWYKwcgtASF/fdY LfHJ2Pvot1e7klYbYcER6bNeD0YX19jPU/7Ei63bRMlPL0t74OCcODNTIuiLjdTg 3qcCKtXBQWQtFOq2ylEz2rm5ZgJoN0/JHz+J5bpIjKvE8KZRHCkUrsGwfUj0si7I IHIe97UoHufzHvMZm2dWD4v8+Lo17CckuwPCsfRJwO1AoiOfnP7VGjhpdQtR4tDa LSgPxpuUphx7qkTemDk214odfEIBCS4koXsNz+XNrRhV4fIq6WBpplSLtjefAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUU4mV3UB9oJKqp0WhCwh/IgpnUxcwHwYDVR0j BBgwFoAUSD82bh/pwGjtRBf9cdWxhCDVa2IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YmYyYWQ0Zi1hNzJhLTQ2ZDEtYmQ3ZC1hNTYwYzMxZWZjYWQvMC80ODNGMzY2RTFG RTlDMDY4RUQ0NDE3RkQ3MUQ1QjE4NDIwRDU2QjYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDgzRjM2NkUxRkU5QzA2OEVENDQxN0ZENzFENUIxODQyMEQ1 NkI2Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGJmMmFkNGYtYTcyYS00NmQxLWJk N2QtYTU2MGMzMWVmY2FkLzAvNDgzRjM2NkUxRkU5QzA2OEVENDQxN0ZENzFENUIx ODQyMEQ1NkI2Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADK3dbmA6T5F5cGs9dmoUNTIruh2EEAnZVkN hz+syRollbGulbbEr+keYaX6r6Q2wNxIUDP3rJcKSmXK+OmRGtFWUOB8vbPCOpUa KMdUJCuboXd2Y6qVInqf7q7jx45fAuq02EAD7UiO1EhyGAuZJwclxaV0Wnp08Lok sZuoFLEKxTu+Gb8MErQwRds76zal36G3hZJhCC4eslfCFf4zCr26z4LXe/7a03If /SNBZ37BQquBJKLD+2XeILeSWbF+58lU0Qa7lp4iqXqpk4CBQ4JDBt0nMRWK8lS2 2yNwSeW44g0j6sfze2z0eb2A+zcsCn+aSb0plY+CWSFrTHQUloQ= -----END CERTIFICATE-----Generated at Sat Apr 5 23:15:23 2025 by rpki-client