$ rpki-client -vvf repo-rpki.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.mft File: C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.mft (raw, json) Hash identifier: 7C0o8W9+XWY9cqTEV3yVmAtIh1glvEEZYMQo9dr/ddo= Subject key identifier: FE:B4:97:9C:18:C6:6A:3C:5F:25:17:18:46:76:63:7B:BA:75:58:E5 Authority key identifier: C4:CE:1B:D3:CB:FB:01:5E:60:96:5A:65:E2:FB:31:A6:BA:26:18:9B Certificate issuer: /CN=C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B Certificate serial: 7ED3F88FBCD684BB3171C0B8BBB53E4D82E1ACAC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.mft Manifest number: 04D9 Signing time: Mon 02 Jun 2025 01:02:26 +0000 Manifest this update: Mon 02 Jun 2025 00:57:26 +0000 Manifest next update: Thu 05 Jun 2025 09:46:26 +0000 Files and hashes: 1: C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.crl (hash: REMRAi1Uv7HRKfRzZ4oMYEk4g0sCWBpm/n/2DDdhNOo=) 2: 3130332e3135352e3136362e302f32342d3234203d3e20313431303634.roa (hash: sI3bqifKZVIOhDY6Sh1Zbn3Bg29Wg0wSaItyUUWUok4=) 3: 3130332e3135352e3136362e302f32332d3233203d3e20313431303634.roa (hash: eyzaiFvv4c1HmHtA1p4wBBlGeENQrifGbWD1MbCWveE=) 4: 3130332e3135352e3136372e302f32342d3234203d3e20313431303634.roa (hash: bjlsGk5J7SvEO5IoZ47H9V39bFhtmZq3wwyih52cSks=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.crl rsync://repo-rpki.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 09:46:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:d3:f8:8f:bc:d6:84:bb:31:71:c0:b8:bb:b5:3e:4d:82:e1:ac:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B Validity Not Before: Jun 2 00:57:26 2025 GMT Not After : Jun 5 09:46:26 2025 GMT Subject: CN=FEB4979C18C66A3C5F2517184676637BBA7558E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:19:b8:97:7a:c3:d3:f8:7d:c3:3a:91:3a:ff: 9f:8a:3a:74:d2:16:a3:05:56:df:87:ec:1d:84:49: 75:5d:54:ec:7d:b5:bf:aa:47:fa:4b:ec:99:7c:b7: b6:74:fc:5a:62:b7:1f:df:a4:81:7f:f8:b4:06:cd: 10:06:2e:0f:be:76:cb:7b:2a:50:fb:76:c3:9e:06: e9:e6:7e:30:ec:66:11:aa:13:f1:c0:0b:fd:b8:e6: f6:50:62:bc:a8:ca:f7:89:6d:64:52:c9:70:55:cd: e4:91:25:c8:96:53:52:13:37:32:37:5d:fd:ea:67: b1:f5:8c:43:f1:24:f6:21:e5:e2:58:d7:51:81:ef: 2d:d2:15:32:1f:c0:13:38:0a:de:58:4a:10:f9:25: c8:38:1f:b3:a2:41:81:65:d7:cb:f1:05:d9:17:39: 79:04:6a:cc:dc:18:ed:68:8a:48:8d:ca:db:bf:80: 80:f9:81:10:ff:9f:e9:29:d9:15:00:d3:a0:62:60: 92:96:2e:ca:b6:06:ab:93:79:c7:ea:f0:b3:31:c4: 8c:48:ec:47:52:e4:d2:38:1c:aa:da:c5:18:3c:d7: fc:bb:86:5d:90:da:07:9a:e6:8c:1e:4c:4e:ce:d4: ba:63:35:63:6e:77:7c:d7:53:23:00:9e:49:87:68: 4e:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:B4:97:9C:18:C6:6A:3C:5F:25:17:18:46:76:63:7B:BA:75:58:E5 X509v3 Authority Key Identifier: keyid:C4:CE:1B:D3:CB:FB:01:5E:60:96:5A:65:E2:FB:31:A6:BA:26:18:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:4a:5d:3d:92:89:8e:9a:16:a7:24:79:f2:1d:a0:a8:a1:b7: fc:9b:44:6a:c8:8d:66:10:98:00:25:b1:ee:4f:b1:e2:de:dc: 8c:06:42:f9:28:36:ca:47:83:c0:db:96:88:1d:97:2b:5c:cb: 92:11:ba:9c:a9:71:bf:7d:3a:99:ab:8f:5e:bd:a5:f5:26:65: 5a:43:22:f8:8e:05:a8:f2:db:75:d0:53:a0:75:c7:e9:d6:68: 85:8a:b7:a4:06:c7:29:28:93:1b:6a:c9:e6:d1:b3:5c:de:49: f7:a9:e9:e7:24:df:62:11:57:79:73:dc:33:0c:df:08:8d:e4: a9:5d:35:7b:5d:f3:ee:03:0f:9c:fb:e4:77:94:ed:82:03:05: 51:2e:e3:9b:07:1b:41:e0:19:6c:80:b5:e1:e8:2c:c1:48:5a: 31:57:21:21:66:80:d6:dd:f3:fa:01:90:b8:ee:2b:76:62:87: fd:92:5a:be:5b:a0:ad:db:3a:17:dc:0c:ea:2d:82:7a:66:83: 8e:44:8e:e6:01:06:59:81:83:31:a8:13:8e:7c:a3:1a:84:96: bb:92:5c:7b:92:a7:d8:f0:a3:d1:80:e0:09:eb:78:5b:1c:dd: c5:59:20:d9:30:bc:88:52:80:87:f8:ae:3a:fb:b7:e5:6b:24: 9f:83:b0:82 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUftP4j7zWhLsxccC4u7U+TYLhrKwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzRDRTFCRDNDQkZCMDE1RTYwOTY1QTY1RTJGQjMxQTZC QTI2MTg5QjAeFw0yNTA2MDIwMDU3MjZaFw0yNTA2MDUwOTQ2MjZaMDMxMTAvBgNV BAMTKEZFQjQ5NzlDMThDNjZBM0M1RjI1MTcxODQ2NzY2MzdCQkE3NTU4RTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChGbiXesPT+H3DOpE6/5+KOnTS FqMFVt+H7B2ESXVdVOx9tb+qR/pL7Jl8t7Z0/Fpitx/fpIF/+LQGzRAGLg++dst7 KlD7dsOeBunmfjDsZhGqE/HAC/245vZQYryoyveJbWRSyXBVzeSRJciWU1ITNzI3 Xf3qZ7H1jEPxJPYh5eJY11GB7y3SFTIfwBM4Ct5YShD5Jcg4H7OiQYFl18vxBdkX OXkEaszcGO1oikiNytu/gID5gRD/n+kp2RUA06BiYJKWLsq2BquTecfq8LMxxIxI 7EdS5NI4HKraxRg81/y7hl2Q2gea5oweTE7O1LpjNWNud3zXUyMAnkmHaE7PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/rSXnBjGajxfJRcYRnZje7p1WOUwHwYDVR0j BBgwFoAUxM4b08v7AV5gllpl4vsxpromGJswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YzZiMmJkNy1kN2YxLTQ4MTUtYTYwYS1jYWQ1NDAyOWNlODgvMC9DNENFMUJEM0NC RkIwMTVFNjA5NjVBNjVFMkZCMzFBNkJBMjYxODlCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzRDRTFCRDNDQkZCMDE1RTYwOTY1QTY1RTJGQjMxQTZCQTI2 MTg5Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGM2YjJiZDctZDdmMS00ODE1LWE2 MGEtY2FkNTQwMjljZTg4LzAvQzRDRTFCRDNDQkZCMDE1RTYwOTY1QTY1RTJGQjMx QTZCQTI2MTg5Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJZKXT2SiY6aFqckefIdoKiht/ybRGrIjWYQ mAAlse5PseLe3IwGQvkoNspHg8Dblogdlytcy5IRupypcb99Opmrj169pfUmZVpD IviOBajy23XQU6B1x+nWaIWKt6QGxykokxtqyebRs1zeSfep6eck32IRV3lz3DMM 3wiN5KldNXtd8+4DD5z75HeU7YIDBVEu45sHG0HgGWyAteHoLMFIWjFXISFmgNbd 8/oBkLjuK3Zih/2SWr5boK3bOhfcDOotgnpmg45EjuYBBlmBgzGoE458oxqElruS XHuSp9jwo9GA4AnreFsc3cVZINkwvIhSgIf4rjr7t+VrJJ+DsII= -----END CERTIFICATE-----Generated at Tue Jun 3 23:26:41 2025 by rpki-client