$ rpki-client -vvf repo-rpki.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.mft File: C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.mft (raw, json) Hash identifier: xo89wvcHa7N+GeESNKrfQphyoSq+Q5C6TzrAEeOlDro= Subject key identifier: AD:1E:02:B1:09:4A:DB:E6:7D:5F:A7:5D:B4:26:F2:66:41:20:53:34 Authority key identifier: C1:84:D0:BB:A0:CD:19:44:C1:99:BF:20:D0:EB:A5:1A:9F:B4:7A:DD Certificate issuer: /CN=C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD Certificate serial: 2DAABE459457F85644074BF9B52D55CC383DEA29 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.mft Manifest number: B4 Signing time: Thu 05 Jun 2025 10:02:08 +0000 Manifest this update: Thu 05 Jun 2025 09:57:08 +0000 Manifest next update: Sun 08 Jun 2025 12:32:08 +0000 Files and hashes: 1: 3136302e31392e38342e302f32342d3234203d3e20313532373534.roa (hash: XsjHTUcHkRjkYPKHbvijLc/iJA9BjCnhWYDW42TR7Mc=) 2: 3136302e31392e38352e302f32342d3234203d3e20313532373534.roa (hash: frMDYjZLvx/PXC3WNp74+r5lWIhNgG/QgNa89ajNdXU=) 3: 3136302e31392e38342e302f32332d3233203d3e20313532373534.roa (hash: zJyhGvQzaDs1uZ/vkTZ4lisg94de9IwLPmGapH9vBW8=) 4: C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.crl (hash: IRYyMDrjhz4sDnrjDHI+IFIMCKryHsXBz3yLMpC6agE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.crl rsync://repo-rpki.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 12:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:aa:be:45:94:57:f8:56:44:07:4b:f9:b5:2d:55:cc:38:3d:ea:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD Validity Not Before: Jun 5 09:57:08 2025 GMT Not After : Jun 8 12:32:08 2025 GMT Subject: CN=AD1E02B1094ADBE67D5FA75DB426F26641205334 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:52:75:dc:78:d2:75:75:9a:23:27:17:a8:b0: 3b:e4:a6:91:9a:8b:65:9e:ab:06:01:b0:82:08:c8: 29:4f:bf:28:bd:33:c6:94:68:66:b9:c0:28:d6:89: 96:66:f4:22:fd:f0:3a:1b:49:34:fd:de:0f:41:3a: 94:d2:a2:07:0a:1a:62:ec:f8:73:f1:2b:73:b2:5b: 6d:ac:97:7a:8b:dd:22:c9:04:ec:5b:38:bd:70:fe: b3:87:12:1a:d4:db:ca:25:a0:b1:75:83:90:c4:51: 9c:59:62:96:42:bf:a3:8f:6a:1b:e4:07:ba:48:3d: 61:78:d5:2f:6a:e6:a0:60:37:33:e0:02:e2:ad:4b: 38:2a:1a:23:de:1f:ce:f9:55:35:0c:be:ac:66:5b: 6f:e3:10:e5:1a:cb:0d:db:23:6d:36:01:ee:ce:d3: aa:d8:a3:36:f9:59:99:5e:8f:19:29:b5:ec:4e:c6: ec:10:7a:d3:4f:84:83:00:8b:5a:44:8b:65:5d:d9: 34:ce:93:e1:1c:b0:09:90:7e:ef:96:10:cb:9f:1e: 0c:ed:18:d4:bf:d5:e6:6e:b1:07:e4:b5:17:59:f3: 00:86:43:a5:34:c6:06:77:d9:e7:39:38:79:a3:88: c9:78:d1:0a:89:48:cf:de:af:3a:43:50:b9:13:db: ab:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:1E:02:B1:09:4A:DB:E6:7D:5F:A7:5D:B4:26:F2:66:41:20:53:34 X509v3 Authority Key Identifier: keyid:C1:84:D0:BB:A0:CD:19:44:C1:99:BF:20:D0:EB:A5:1A:9F:B4:7A:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:f3:cc:08:f9:83:51:aa:54:22:fc:53:c4:85:d3:17:ff:d9: 1f:6e:d8:b0:c8:73:3a:84:24:f8:f3:c2:93:3a:71:e0:c8:71: 53:ae:06:8f:56:1c:a3:74:18:f8:b8:2d:c6:b9:c7:ee:b8:8f: d6:ed:f4:1e:47:43:5b:bb:0c:4d:47:0b:39:b2:c5:06:53:4c: f3:25:10:8a:4f:74:66:0c:b9:44:ea:72:35:07:15:a6:dd:53: d7:11:81:3b:68:09:25:93:a4:b2:27:8d:e4:fe:ab:9c:6b:22: c2:d2:20:30:e7:96:e5:a4:45:9c:ce:6a:cd:e4:f7:e2:29:cc: 32:b6:41:5c:e6:bb:9b:25:0a:aa:e2:f9:6f:33:2a:97:4c:84: 8e:37:84:e2:db:42:c5:30:f9:43:eb:42:98:72:05:d3:4c:04: 34:45:50:6e:49:2e:60:32:47:ae:b4:ce:f3:e9:e6:4e:c1:f9: ff:bc:80:fe:76:34:17:3a:bc:41:a2:36:7a:fa:d6:f3:8d:f4: 86:36:bc:b3:68:99:a5:7e:c1:de:a3:15:c4:93:5d:46:da:0e: 86:e8:36:74:96:24:0a:1e:0e:1a:f5:60:42:2b:f2:7f:48:ab: 4c:d7:bf:08:92:f7:37:c8:85:6f:7d:f6:b7:41:65:ee:42:61: 5f:54:bb:4a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULaq+RZRX+FZEB0v5tS1VzDg96ikwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzE4NEQwQkJBMENEMTk0NEMxOTlCRjIwRDBFQkE1MUE5 RkI0N0FERDAeFw0yNTA2MDUwOTU3MDhaFw0yNTA2MDgxMjMyMDhaMDMxMTAvBgNV BAMTKEFEMUUwMkIxMDk0QURCRTY3RDVGQTc1REI0MjZGMjY2NDEyMDUzMzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzUnXceNJ1dZojJxeosDvkppGa i2WeqwYBsIIIyClPvyi9M8aUaGa5wCjWiZZm9CL98DobSTT93g9BOpTSogcKGmLs +HPxK3OyW22sl3qL3SLJBOxbOL1w/rOHEhrU28oloLF1g5DEUZxZYpZCv6OPahvk B7pIPWF41S9q5qBgNzPgAuKtSzgqGiPeH875VTUMvqxmW2/jEOUayw3bI202Ae7O 06rYozb5WZlejxkptexOxuwQetNPhIMAi1pEi2Vd2TTOk+EcsAmQfu+WEMufHgzt GNS/1eZusQfktRdZ8wCGQ6U0xgZ32ec5OHmjiMl40QqJSM/erzpDULkT26sZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrR4CsQlK2+Z9X6ddtCbyZkEgUzQwHwYDVR0j BBgwFoAUwYTQu6DNGUTBmb8g0OulGp+0et0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZTM3NGQ0OC01YTcwLTRjN2YtYmRmZC1kODA1MmViYWYwYWIvMC9DMTg0RDBCQkEw Q0QxOTQ0QzE5OUJGMjBEMEVCQTUxQTlGQjQ3QURELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQzE4NEQwQkJBMENEMTk0NEMxOTlCRjIwRDBFQkE1MUE5RkI0 N0FERC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGUzNzRkNDgtNWE3MC00YzdmLWJk ZmQtZDgwNTJlYmFmMGFiLzAvQzE4NEQwQkJBMENEMTk0NEMxOTlCRjIwRDBFQkE1 MUE5RkI0N0FERC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABvzzAj5g1GqVCL8U8SF0xf/2R9u2LDIczqE JPjzwpM6ceDIcVOuBo9WHKN0GPi4Lca5x+64j9bt9B5HQ1u7DE1HCzmyxQZTTPMl EIpPdGYMuUTqcjUHFabdU9cRgTtoCSWTpLInjeT+q5xrIsLSIDDnluWkRZzOas3k 9+IpzDK2QVzmu5slCqri+W8zKpdMhI43hOLbQsUw+UPrQphyBdNMBDRFUG5JLmAy R660zvPp5k7B+f+8gP52NBc6vEGiNnr61vON9IY2vLNomaV+wd6jFcSTXUbaDobo NnSWJAoeDhr1YEIr8n9Iq0zXvwiS9zfIhW999rdBZe5CYV9Uu0o= -----END CERTIFICATE-----Generated at Fri Jun 6 19:10:44 2025 by rpki-client