$ rpki-client -vvf repo-rpki.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.mft File: A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.mft (raw, json) Hash identifier: S84xpbEzulGUvNIco3igX69DfAch/F0lTjXquyYXO+o= Subject key identifier: 32:86:55:CF:92:65:26:84:6E:8A:51:EB:BB:E8:CC:4F:D1:04:21:F0 Authority key identifier: A4:AC:49:C4:F5:5B:F5:D4:AF:3D:42:10:4A:8A:5E:C1:F2:12:3E:6F Certificate issuer: /CN=A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F Certificate serial: 554D399C054D7042F90E5C522415581F3E202AB8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.mft Manifest number: 0151 Signing time: Sat 05 Apr 2025 19:20:38 +0000 Manifest this update: Sat 05 Apr 2025 19:15:38 +0000 Manifest next update: Wed 09 Apr 2025 02:01:38 +0000 Files and hashes: 1: A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.crl (hash: C+cO05Okxq4+VKJeZ/ghugt2aC+z7EysdV3qOyCqKfw=) 2: 3130332e38312e36342e302f32342d3234203d3e20313336303535.roa (hash: y3JEoAzXm85iAZbdeyBRtgaEYRsohXOZAIq9VTQKw9c=) 3: 323430303a363463303a3a2f33322d3438203d3e20313336303535.roa (hash: nVKz/Z4lzOOXkiUaEAcb0AwZb+JTb9lrVFfeSZMfmCY=) 4: 3130332e38312e36362e302f32342d3234203d3e20313336303535.roa (hash: ydDiCNEc8GtyBNnN5/EnWTfulbTrIFBSv+6Rl5EThhQ=) 5: 3130332e38312e36342e302f32322d3234203d3e20313336303535.roa (hash: ETGqi4em3d7iFPvTTbLzNEGHVb50jTVFKGpxmfQ15GI=) 6: 3130332e38312e36372e302f32342d3234203d3e20313336303535.roa (hash: H8auSRebds2J33fqyI35g62j14OOISp/2tVGTFdwJS4=) 7: 3130332e38312e36352e302f32342d3234203d3e20313336303535.roa (hash: Pd8St+ikqWO1fGrUN5HXXiSM76VpvJPSZDK4vFya57U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.crl rsync://repo-rpki.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:4d:39:9c:05:4d:70:42:f9:0e:5c:52:24:15:58:1f:3e:20:2a:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F Validity Not Before: Apr 5 19:15:38 2025 GMT Not After : Apr 9 02:01:38 2025 GMT Subject: CN=328655CF926526846E8A51EBBBE8CC4FD10421F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a8:79:66:69:03:f5:31:8e:c0:ef:90:d9:16: 43:6f:d3:3a:fe:4d:97:95:7e:75:9c:ac:74:90:17: ca:7c:82:a1:9e:7e:0b:2b:54:10:63:f9:f3:0a:e8: dd:05:ad:28:49:dc:96:8e:d5:e9:7b:9d:85:ca:ac: 99:ef:87:ce:f7:9e:8a:af:c1:cb:aa:2a:ca:a3:03: a3:10:96:d1:3b:0d:4d:13:39:53:aa:cd:cb:cb:3c: 62:fc:e1:94:e9:72:a7:bd:2e:de:43:72:f2:0d:9e: ac:08:c3:c8:20:34:ff:eb:7c:ef:95:e7:59:8f:4b: 5d:7a:7b:b6:a9:ab:40:0e:6d:bf:67:58:98:6a:de: df:4c:e1:ae:7c:20:f9:90:2f:b2:b2:f4:e7:4a:04: 4c:f7:72:3d:89:51:27:cb:21:22:fd:37:15:bf:6d: c5:b6:fe:4a:0d:d1:f1:60:30:92:69:af:83:7d:f4: 96:7d:d8:c6:f4:15:79:16:ed:40:41:cd:40:e8:50: 9a:2e:5a:d8:c1:75:9e:85:6e:41:0e:53:67:f9:a8: 6b:4c:79:41:b4:58:d4:db:5b:2a:38:62:dc:a6:24: 3a:ab:d4:a0:15:1d:a2:c7:7f:ec:0d:ec:25:00:30: 3a:71:a0:6b:f7:3c:0d:fb:0f:d7:aa:d8:be:09:5c: 7c:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:86:55:CF:92:65:26:84:6E:8A:51:EB:BB:E8:CC:4F:D1:04:21:F0 X509v3 Authority Key Identifier: keyid:A4:AC:49:C4:F5:5B:F5:D4:AF:3D:42:10:4A:8A:5E:C1:F2:12:3E:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:b6:46:94:b1:c8:6d:76:67:7c:0d:91:8f:d2:47:3a:50:af: a3:6b:5f:8c:bd:90:8b:0f:50:d6:8b:f1:1a:fe:fe:7e:da:da: 20:57:fe:67:f4:22:ea:01:6b:2c:21:0b:75:e5:68:6b:5a:17: 1b:97:1f:f1:37:ca:c7:bf:30:c3:f4:d7:af:58:6a:db:d1:32: 58:6b:14:22:14:dc:2e:60:55:38:4a:f7:9b:78:f2:45:36:f6: d7:4c:a5:f5:40:3c:e2:b0:25:61:19:62:81:8b:c6:e1:82:f4: 2d:ff:ed:9f:97:be:a9:f1:03:14:cb:fc:a2:ef:4e:29:e8:d2: 32:c6:48:63:1e:f8:ca:af:d9:aa:ef:a3:30:0d:34:07:f2:89: 99:81:c1:99:20:2c:7e:95:7c:42:82:c3:c8:c8:5e:52:e1:e3: 7e:9d:96:a5:c7:91:ae:a8:db:c4:73:14:b6:29:c0:85:ac:5f: fd:b8:28:f9:ee:1b:76:37:46:c0:90:aa:1f:ac:42:ce:c9:c2: a7:25:8c:73:b3:40:ef:95:e9:8b:db:b7:4e:bb:48:06:a8:72: 85:50:de:44:fc:8b:76:74:cb:65:ac:dc:4c:e4:85:a0:61:10: 5a:71:cd:07:11:72:22:1b:ea:c8:58:3c:74:8b:24:92:65:1c: 71:e9:c4:c3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVU05nAVNcEL5DlxSJBVYHz4gKrgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTRBQzQ5QzRGNTVCRjVENEFGM0Q0MjEwNEE4QTVFQzFG MjEyM0U2RjAeFw0yNTA0MDUxOTE1MzhaFw0yNTA0MDkwMjAxMzhaMDMxMTAvBgNV BAMTKDMyODY1NUNGOTI2NTI2ODQ2RThBNTFFQkJCRThDQzRGRDEwNDIxRjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1qHlmaQP1MY7A75DZFkNv0zr+ TZeVfnWcrHSQF8p8gqGefgsrVBBj+fMK6N0FrShJ3JaO1el7nYXKrJnvh873noqv wcuqKsqjA6MQltE7DU0TOVOqzcvLPGL84ZTpcqe9Lt5DcvINnqwIw8ggNP/rfO+V 51mPS116e7apq0AObb9nWJhq3t9M4a58IPmQL7Ky9OdKBEz3cj2JUSfLISL9NxW/ bcW2/koN0fFgMJJpr4N99JZ92Mb0FXkW7UBBzUDoUJouWtjBdZ6FbkEOU2f5qGtM eUG0WNTbWyo4YtymJDqr1KAVHaLHf+wN7CUAMDpxoGv3PA37D9eq2L4JXHy1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMoZVz5JlJoRuilHru+jMT9EEIfAwHwYDVR0j BBgwFoAUpKxJxPVb9dSvPUIQSopewfISPm8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NzI4MDQwMC05NjU0LTRkNDUtODg4Yi05MDY3YmFkYTE5MGIvMC9BNEFDNDlDNEY1 NUJGNUQ0QUYzRDQyMTA0QThBNUVDMUYyMTIzRTZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTRBQzQ5QzRGNTVCRjVENEFGM0Q0MjEwNEE4QTVFQzFGMjEy M0U2Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTcyODA0MDAtOTY1NC00ZDQ1LTg4 OGItOTA2N2JhZGExOTBiLzAvQTRBQzQ5QzRGNTVCRjVENEFGM0Q0MjEwNEE4QTVF QzFGMjEyM0U2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEO2RpSxyG12Z3wNkY/SRzpQr6NrX4y9kIsP UNaL8Rr+/n7a2iBX/mf0IuoBaywhC3XlaGtaFxuXH/E3yse/MMP0169YatvRMlhr FCIU3C5gVThK95t48kU29tdMpfVAPOKwJWEZYoGLxuGC9C3/7Z+XvqnxAxTL/KLv Tino0jLGSGMe+Mqv2arvozANNAfyiZmBwZkgLH6VfEKCw8jIXlLh436dlqXHka6o 28RzFLYpwIWsX/24KPnuG3Y3RsCQqh+sQs7JwqcljHOzQO+V6Yvbt067SAaocoVQ 3kT8i3Z0y2Ws3EzkhaBhEFpxzQcRciIb6shYPHSLJJJlHHHpxMM= -----END CERTIFICATE-----Generated at Sat Apr 5 21:49:31 2025 by rpki-client