$ rpki-client -vvf repo-rpki.idnic.net/repo/5baebfb3-e29b-47c4-bd21-4571c30f441b/0/A4A4C426A4F42A29829636FB3223FA7F5C68509A.mft File: A4A4C426A4F42A29829636FB3223FA7F5C68509A.mft (raw, json) Hash identifier: NU8f5sN9hjoZPE0BpnMa9JKETx0w60Pwx+jypFHr97M= Subject key identifier: 34:62:54:00:78:48:E6:9D:BA:9D:24:C3:3A:76:15:93:C9:B9:B4:CA Authority key identifier: A4:A4:C4:26:A4:F4:2A:29:82:96:36:FB:32:23:FA:7F:5C:68:50:9A Certificate issuer: /CN=A4A4C426A4F42A29829636FB3223FA7F5C68509A Certificate serial: 6DC0378F99B65AD92EAF5B6B3D46426B53D32ED8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A4A4C426A4F42A29829636FB3223FA7F5C68509A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5baebfb3-e29b-47c4-bd21-4571c30f441b/0/A4A4C426A4F42A29829636FB3223FA7F5C68509A.mft Manifest number: 0202 Signing time: Tue 03 Jun 2025 09:21:48 +0000 Manifest this update: Tue 03 Jun 2025 09:16:48 +0000 Manifest next update: Fri 06 Jun 2025 12:27:48 +0000 Files and hashes: 1: A4A4C426A4F42A29829636FB3223FA7F5C68509A.crl (hash: LWWy5bRBxYDaKcNZCKRM8qX1ZmVF+ZqjH2lqvUlcHS4=) 2: 3130332e31332e33362e302f32342d3234203d3e20313331373231.roa (hash: 6F/+m53CI+OBq/k1F+jb2qhZ0UKG610wF81rsZOA7iw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5baebfb3-e29b-47c4-bd21-4571c30f441b/0/A4A4C426A4F42A29829636FB3223FA7F5C68509A.crl rsync://repo-rpki.idnic.net/repo/5baebfb3-e29b-47c4-bd21-4571c30f441b/0/A4A4C426A4F42A29829636FB3223FA7F5C68509A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A4A4C426A4F42A29829636FB3223FA7F5C68509A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 12:27:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:c0:37:8f:99:b6:5a:d9:2e:af:5b:6b:3d:46:42:6b:53:d3:2e:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A4A4C426A4F42A29829636FB3223FA7F5C68509A Validity Not Before: Jun 3 09:16:48 2025 GMT Not After : Jun 6 12:27:48 2025 GMT Subject: CN=346254007848E69DBA9D24C33A761593C9B9B4CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e3:92:fb:e3:e1:2c:71:e7:ff:de:b8:ff:7a: 52:f4:90:ba:f2:1e:4e:ed:21:15:67:ae:09:9e:41: df:e2:0c:b5:ae:a7:3e:48:4d:30:ed:90:a6:81:4d: 05:d6:f0:8b:6c:0a:07:f1:67:a2:b6:75:73:f7:80: 9e:70:cc:49:fd:69:1c:dc:e5:dc:94:e1:9f:b7:7f: bc:ba:91:92:f9:83:51:23:c8:de:36:52:19:0a:31: 04:af:ba:7d:c6:30:3e:04:15:f0:14:a2:5d:91:01: a8:3c:7c:be:66:9c:e7:42:f5:7e:63:4f:e1:a4:2b: 30:39:a9:17:03:af:83:50:b4:a3:fd:49:d9:a8:2d: f1:1b:c0:43:7a:a8:b6:7f:6e:65:26:5c:d3:d4:50: 5b:c0:c3:05:2f:a9:83:c9:88:af:48:95:95:bd:17: 3f:a2:b2:21:86:96:c4:95:57:af:77:37:5c:c5:60: 29:cd:f9:72:f6:c7:9e:e8:15:6d:68:01:da:51:b5: 19:1c:cb:5c:92:63:c7:b5:41:f2:b0:24:46:c4:48: 74:5e:0f:74:db:57:e6:28:fc:d4:96:e5:1f:7d:f6: f5:be:ff:b6:dd:07:8b:88:6d:8d:ce:6c:d4:e0:f9: 94:a4:d9:94:92:00:4e:3e:81:01:ab:4b:02:09:8b: d6:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:62:54:00:78:48:E6:9D:BA:9D:24:C3:3A:76:15:93:C9:B9:B4:CA X509v3 Authority Key Identifier: keyid:A4:A4:C4:26:A4:F4:2A:29:82:96:36:FB:32:23:FA:7F:5C:68:50:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5baebfb3-e29b-47c4-bd21-4571c30f441b/0/A4A4C426A4F42A29829636FB3223FA7F5C68509A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A4A4C426A4F42A29829636FB3223FA7F5C68509A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5baebfb3-e29b-47c4-bd21-4571c30f441b/0/A4A4C426A4F42A29829636FB3223FA7F5C68509A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:40:09:18:bd:4a:02:bb:be:a7:d1:99:f7:0f:a7:1d:c8:2d: 78:a7:b2:85:8f:05:94:19:8f:dd:a3:4e:77:7d:f7:2c:79:8e: 46:bc:8e:f8:df:a3:16:18:7f:d2:bd:77:12:19:24:2b:9e:09: ef:04:40:4f:63:87:2d:a4:f3:8a:48:d5:bf:d2:22:93:7b:d9: fe:2a:05:46:2a:a8:55:3b:2c:7f:d9:d6:fe:eb:13:7c:f9:89: 49:c4:4d:88:b4:49:a7:43:32:74:99:36:1a:de:3a:94:8d:90: bd:88:11:90:80:c6:ec:70:ba:56:87:40:4a:3b:8f:1b:34:1e: 30:c8:33:1f:b6:26:9f:97:44:94:2c:46:aa:72:2d:a5:9a:5a: dd:d3:df:35:c9:64:eb:0d:be:b2:5f:21:2b:56:0a:c7:36:bf: e8:d3:ff:a1:6b:e6:2a:3c:d0:f5:e7:3a:e2:1e:35:8e:f0:a3: 72:02:a9:79:44:f7:b6:5b:d0:36:01:76:db:a6:5d:f1:ca:40: f9:31:0e:5f:6b:11:d9:45:91:83:40:31:88:72:3d:c1:37:2b: 89:5e:ce:15:79:96:38:8f:c8:5d:bb:b4:c7:c2:9c:64:61:10: 8d:a3:54:c3:f0:ca:e2:7b:a1:0a:7b:bd:9b:61:dd:38:cf:f0: 1d:b4:c0:f0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbcA3j5m2Wtkur1trPUZCa1PTLtgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTRBNEM0MjZBNEY0MkEyOTgyOTYzNkZCMzIyM0ZBN0Y1 QzY4NTA5QTAeFw0yNTA2MDMwOTE2NDhaFw0yNTA2MDYxMjI3NDhaMDMxMTAvBgNV BAMTKDM0NjI1NDAwNzg0OEU2OURCQTlEMjRDMzNBNzYxNTkzQzlCOUI0Q0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/45L74+Escef/3rj/elL0kLry Hk7tIRVnrgmeQd/iDLWupz5ITTDtkKaBTQXW8ItsCgfxZ6K2dXP3gJ5wzEn9aRzc 5dyU4Z+3f7y6kZL5g1EjyN42UhkKMQSvun3GMD4EFfAUol2RAag8fL5mnOdC9X5j T+GkKzA5qRcDr4NQtKP9SdmoLfEbwEN6qLZ/bmUmXNPUUFvAwwUvqYPJiK9IlZW9 Fz+isiGGlsSVV693N1zFYCnN+XL2x57oFW1oAdpRtRkcy1ySY8e1QfKwJEbESHRe D3TbV+Yo/NSW5R999vW+/7bdB4uIbY3ObNTg+ZSk2ZSSAE4+gQGrSwIJi9Y1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNGJUAHhI5p26nSTDOnYVk8m5tMowHwYDVR0j BBgwFoAUpKTEJqT0KimCljb7MiP6f1xoUJowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YmFlYmZiMy1lMjliLTQ3YzQtYmQyMS00NTcxYzMwZjQ0MWIvMC9BNEE0QzQyNkE0 RjQyQTI5ODI5NjM2RkIzMjIzRkE3RjVDNjg1MDlBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTRBNEM0MjZBNEY0MkEyOTgyOTYzNkZCMzIyM0ZBN0Y1QzY4 NTA5QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWJhZWJmYjMtZTI5Yi00N2M0LWJk MjEtNDU3MWMzMGY0NDFiLzAvQTRBNEM0MjZBNEY0MkEyOTgyOTYzNkZCMzIyM0ZB N0Y1QzY4NTA5QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALpACRi9SgK7vqfRmfcPpx3ILXinsoWPBZQZ j92jTnd99yx5jka8jvjfoxYYf9K9dxIZJCueCe8EQE9jhy2k84pI1b/SIpN72f4q BUYqqFU7LH/Z1v7rE3z5iUnETYi0SadDMnSZNhreOpSNkL2IEZCAxuxwulaHQEo7 jxs0HjDIMx+2Jp+XRJQsRqpyLaWaWt3T3zXJZOsNvrJfIStWCsc2v+jT/6Fr5io8 0PXnOuIeNY7wo3ICqXlE97Zb0DYBdtumXfHKQPkxDl9rEdlFkYNAMYhyPcE3K4le zhV5ljiPyF27tMfCnGRhEI2jVMPwyuJ7oQp7vZth3TjP8B20wPA= -----END CERTIFICATE-----Generated at Wed Jun 4 00:07:04 2025 by rpki-client