$ rpki-client -vvf repo-rpki.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.mft File: 4A9E8C61BE3670D865B8A79D7D32798550E64F2B.mft (raw, json) Hash identifier: b/2NNNngmgow4pBQx53yoJID1L5YJiFJw64dJ6fND3k= Subject key identifier: B3:7F:F5:C2:0C:54:25:6A:0E:98:93:9A:3B:4B:66:9A:62:74:B2:AD Authority key identifier: 4A:9E:8C:61:BE:36:70:D8:65:B8:A7:9D:7D:32:79:85:50:E6:4F:2B Certificate issuer: /CN=4A9E8C61BE3670D865B8A79D7D32798550E64F2B Certificate serial: 2F7BBC8351AEA6C6D3B986083808553003FA8BF2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.mft Manifest number: EB Signing time: Fri 04 Apr 2025 12:52:19 +0000 Manifest this update: Fri 04 Apr 2025 12:47:19 +0000 Manifest next update: Mon 07 Apr 2025 13:41:19 +0000 Files and hashes: 1: 4A9E8C61BE3670D865B8A79D7D32798550E64F2B.crl (hash: 9rp/W1/Yp5ER9TUmvJNMU55A48LnUa4sXtvvocs2kmg=) 2: 3130332e3234352e33382e302f32332d3234203d3e203535363838.roa (hash: sfkJ0JTL5ebL+3NyzyS4seDOCuegsswJp2YAbd6RC9s=) 3: 323030313a6466323a656434303a3a2f34382d3438203d3e203535363838.roa (hash: 3LwTWTq6lR7/gbSdsCbSOqta9JhN0Eij75z5muuvESg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.crl rsync://repo-rpki.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 13:41:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:7b:bc:83:51:ae:a6:c6:d3:b9:86:08:38:08:55:30:03:fa:8b:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A9E8C61BE3670D865B8A79D7D32798550E64F2B Validity Not Before: Apr 4 12:47:19 2025 GMT Not After : Apr 7 13:41:19 2025 GMT Subject: CN=B37FF5C20C54256A0E98939A3B4B669A6274B2AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:78:71:e2:d3:fc:63:d4:8f:bf:68:c6:21:69: f5:6d:3b:33:6d:e9:2b:bf:93:7a:3b:24:18:d0:ea: 0c:74:a6:a0:b9:a2:04:e4:1f:b0:e4:c9:59:6a:a3: db:6c:9b:26:69:02:e4:fc:86:65:16:e7:9d:5c:47: 29:3e:b5:74:d7:9d:ed:ef:c5:5d:bb:52:8f:44:57: 47:f4:00:1c:ac:d1:81:b6:03:88:58:d9:7e:98:a8: 26:9f:5b:69:05:82:41:a7:11:46:ef:2e:40:ef:fa: ac:60:56:30:8e:c8:59:8b:ee:c8:4b:d1:dc:0b:a4: 0c:cc:9e:eb:c7:b2:b0:08:dd:4c:bb:cf:d8:3c:64: 0a:18:b3:bf:46:8e:bd:49:3d:f2:da:71:c7:1e:20: cc:76:60:91:35:c9:6c:51:5e:6d:cd:de:e6:03:da: 78:3f:56:cb:0b:87:3b:bb:cc:2e:dc:e7:c8:54:f6: 9f:71:84:97:33:4b:e1:31:83:6e:10:43:10:e1:ad: 1b:81:f0:a6:dc:99:9a:e3:fa:59:d1:c5:dd:7b:4f: e6:ec:c8:31:5c:34:35:20:88:74:ef:07:75:a4:23: 0c:19:fa:d3:68:be:a1:0f:a9:11:3c:21:71:1e:eb: ee:f4:2e:b7:ef:88:9a:ac:f2:9e:8b:65:c7:5c:fe: a7:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:7F:F5:C2:0C:54:25:6A:0E:98:93:9A:3B:4B:66:9A:62:74:B2:AD X509v3 Authority Key Identifier: keyid:4A:9E:8C:61:BE:36:70:D8:65:B8:A7:9D:7D:32:79:85:50:E6:4F:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:4d:ee:04:4a:43:19:34:b2:bd:46:3b:e2:53:e2:91:e8:dc: 94:a6:47:ec:e1:18:aa:ed:4a:24:7d:99:0a:63:1d:e8:35:f3: 57:b8:5d:bd:08:f0:a8:8f:6a:59:17:4d:19:d3:c3:a8:56:d4: 2a:3b:7a:92:96:94:00:0c:51:83:4d:65:af:23:c2:60:69:88: b7:ab:64:20:c2:50:fd:20:f8:1b:f6:0b:55:40:27:ed:81:a0: b5:11:69:4a:e8:a6:9f:79:33:40:33:f4:01:8c:d5:52:18:d4: 35:e1:a6:57:89:2d:8e:10:da:1d:ab:34:11:a0:e1:4b:94:d1: 29:cb:a3:17:4b:30:55:81:65:69:45:06:12:7d:2b:88:e8:69: 8b:c4:d3:af:5f:e7:d6:24:37:3b:5e:94:ab:0f:36:f3:89:56: 4e:56:e6:97:45:9c:7c:00:59:e0:20:e6:2c:a4:ca:e3:6d:3c: a4:68:da:51:fd:77:d4:c6:24:04:48:3d:47:e8:3f:ee:c9:92: f2:16:05:f2:2c:57:3b:3d:e9:d7:82:53:1a:82:b1:ca:c6:51: b9:1f:38:4c:84:6f:c7:b7:d1:63:3c:a8:76:86:01:49:d8:94: b4:8f:b3:40:8c:af:d5:7a:14:ed:9f:1f:5b:d0:d4:01:34:ab: 9e:ae:49:97 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL3u8g1GupsbTuYYIOAhVMAP6i/IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEE5RThDNjFCRTM2NzBEODY1QjhBNzlEN0QzMjc5ODU1 MEU2NEYyQjAeFw0yNTA0MDQxMjQ3MTlaFw0yNTA0MDcxMzQxMTlaMDMxMTAvBgNV BAMTKEIzN0ZGNUMyMEM1NDI1NkEwRTk4OTM5QTNCNEI2NjlBNjI3NEIyQUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKeHHi0/xj1I+/aMYhafVtOzNt 6Su/k3o7JBjQ6gx0pqC5ogTkH7DkyVlqo9tsmyZpAuT8hmUW551cRyk+tXTXne3v xV27Uo9EV0f0ABys0YG2A4hY2X6YqCafW2kFgkGnEUbvLkDv+qxgVjCOyFmL7shL 0dwLpAzMnuvHsrAI3Uy7z9g8ZAoYs79Gjr1JPfLaccceIMx2YJE1yWxRXm3N3uYD 2ng/VssLhzu7zC7c58hU9p9xhJczS+Exg24QQxDhrRuB8KbcmZrj+lnRxd17T+bs yDFcNDUgiHTvB3WkIwwZ+tNovqEPqRE8IXEe6+70LrfviJqs8p6LZcdc/qclAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUs3/1wgxUJWoOmJOaO0tmmmJ0sq0wHwYDVR0j BBgwFoAUSp6MYb42cNhluKedfTJ5hVDmTyswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YzQ5MzVkOC05NmEyLTQ1NjQtODVhMy0zMmE1MzE4OTM2N2UvMC80QTlFOEM2MUJF MzY3MEQ4NjVCOEE3OUQ3RDMyNzk4NTUwRTY0RjJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEE5RThDNjFCRTM2NzBEODY1QjhBNzlEN0QzMjc5ODU1MEU2 NEYyQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2M0OTM1ZDgtOTZhMi00NTY0LTg1 YTMtMzJhNTMxODkzNjdlLzAvNEE5RThDNjFCRTM2NzBEODY1QjhBNzlEN0QzMjc5 ODU1MEU2NEYyQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ9N7gRKQxk0sr1GO+JT4pHo3JSmR+zhGKrt SiR9mQpjHeg181e4Xb0I8KiPalkXTRnTw6hW1Co7epKWlAAMUYNNZa8jwmBpiLer ZCDCUP0g+Bv2C1VAJ+2BoLURaUropp95M0Az9AGM1VIY1DXhpleJLY4Q2h2rNBGg 4UuU0SnLoxdLMFWBZWlFBhJ9K4joaYvE069f59YkNztelKsPNvOJVk5W5pdFnHwA WeAg5iykyuNtPKRo2lH9d9TGJARIPUfoP+7JkvIWBfIsVzs96deCUxqCscrGUbkf OEyEb8e30WM8qHaGAUnYlLSPs0CMr9V6FO2fH1vQ1AE0q56uSZc= -----END CERTIFICATE-----Generated at Sat Apr 5 21:19:13 2025 by rpki-client