$ rpki-client -vvf repo-rpki.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.mft File: 4A9E8C61BE3670D865B8A79D7D32798550E64F2B.mft (raw, json) Hash identifier: bQkiV0aWaPBxHP5qSo1ddySt26pid5yGFbno0ih0qQQ= Subject key identifier: 44:E0:D6:FC:67:1F:81:79:34:2A:A1:47:8B:49:D8:9B:BA:37:E3:E3 Authority key identifier: 4A:9E:8C:61:BE:36:70:D8:65:B8:A7:9D:7D:32:79:85:50:E6:4F:2B Certificate issuer: /CN=4A9E8C61BE3670D865B8A79D7D32798550E64F2B Certificate serial: 456CDA44608DD48DC86E10050DFFD3173167AF36 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.mft Manifest number: 0105 Signing time: Sun 01 Jun 2025 14:52:18 +0000 Manifest this update: Sun 01 Jun 2025 14:47:18 +0000 Manifest next update: Thu 05 Jun 2025 01:48:18 +0000 Files and hashes: 1: 3130332e3234352e33382e302f32332d3234203d3e203535363838.roa (hash: sfkJ0JTL5ebL+3NyzyS4seDOCuegsswJp2YAbd6RC9s=) 2: 323030313a6466323a656434303a3a2f34382d3438203d3e203535363838.roa (hash: 3LwTWTq6lR7/gbSdsCbSOqta9JhN0Eij75z5muuvESg=) 3: 4A9E8C61BE3670D865B8A79D7D32798550E64F2B.crl (hash: 4MEeXR5LobLUS2t+yxVlnpyR5t/AhUb93Wq50LoK56E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.crl rsync://repo-rpki.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 01:48:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:6c:da:44:60:8d:d4:8d:c8:6e:10:05:0d:ff:d3:17:31:67:af:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A9E8C61BE3670D865B8A79D7D32798550E64F2B Validity Not Before: Jun 1 14:47:18 2025 GMT Not After : Jun 5 01:48:18 2025 GMT Subject: CN=44E0D6FC671F8179342AA1478B49D89BBA37E3E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:f0:26:ac:4c:17:2b:32:00:d8:61:2e:74:68: 3f:80:58:8f:59:4a:7e:50:3b:11:46:56:5f:56:a9: 7e:f7:90:9d:a1:0a:b0:24:af:79:d0:a0:76:c8:a5: 8c:93:33:05:d4:dc:7c:41:e8:11:a2:c0:1c:f3:52: f8:58:67:06:2d:d8:10:f0:bd:87:6f:09:74:18:7d: f6:b6:0f:57:01:69:41:f2:0d:a1:61:ee:81:2f:47: ea:28:59:9e:ee:55:5e:01:dd:b6:0b:b0:4a:02:17: 72:0c:21:9a:b1:59:d3:cd:dd:85:01:19:67:4f:69: 1e:36:67:e1:cb:b7:63:17:6c:d2:59:f8:1d:ba:a5: e0:37:e5:fe:74:4f:86:d6:3a:2e:48:97:32:14:2d: 95:96:5e:90:ce:1a:fd:b1:9c:0a:24:21:40:23:a5: a6:6e:cd:48:f4:ad:27:da:64:e0:4e:68:a0:33:a9: 5a:05:92:ea:85:c2:2a:8c:b8:9b:d3:f6:1a:da:84: dc:e2:29:1c:68:0e:1c:60:83:ee:21:a7:da:fe:b4: 88:7e:4b:af:4c:c6:cb:36:ed:4a:5b:13:95:f8:25: 18:6a:74:97:f2:5e:ae:c5:c7:0c:c0:e2:1b:d8:65: 84:84:cc:0f:31:7b:33:16:51:6a:30:27:0c:c6:b9: 6a:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:E0:D6:FC:67:1F:81:79:34:2A:A1:47:8B:49:D8:9B:BA:37:E3:E3 X509v3 Authority Key Identifier: keyid:4A:9E:8C:61:BE:36:70:D8:65:B8:A7:9D:7D:32:79:85:50:E6:4F:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:28:ab:0e:51:38:53:ab:80:41:3c:53:69:e8:48:08:fc:61: a0:df:ef:dc:7e:18:34:31:8c:b2:2e:76:73:04:71:7d:12:0d: 64:c0:4a:67:e9:ca:92:9e:c1:cb:46:27:10:26:b3:d6:be:1a: 8d:b8:a5:75:d4:5c:02:1f:84:f4:91:d6:bb:a6:cf:8e:79:44: 18:37:93:86:e7:40:88:b9:30:08:97:aa:27:f3:86:1a:42:47: 27:45:c5:d2:81:c5:17:84:ca:d8:3a:3f:e6:a0:5c:ba:09:9b: e7:eb:12:0a:4b:ee:84:06:14:0e:51:a6:8b:95:79:46:ec:2c: 58:d7:a1:76:66:4c:8c:db:f4:d2:21:28:fd:93:b6:74:8e:cb: 98:fd:27:17:3f:2f:07:86:e8:0e:49:7b:9a:b4:ec:5a:9b:db: 43:31:fd:70:95:93:81:ff:99:a1:03:f4:7d:c6:2d:e3:46:10: 9a:0f:fa:1b:87:ba:10:2b:7a:32:15:e8:83:28:99:11:3a:a7: fa:2b:9b:2c:3a:f2:e5:2a:e3:40:99:f7:16:5e:48:e5:ed:21: 4f:3d:d5:d2:d3:c8:9a:53:c4:71:fd:cf:68:28:3e:a7:a2:38: 6a:bf:dc:11:1b:ce:0a:69:6f:a4:67:45:74:fe:ff:ee:e3:27: d8:c8:7c:7d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURWzaRGCN1I3IbhAFDf/TFzFnrzYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEE5RThDNjFCRTM2NzBEODY1QjhBNzlEN0QzMjc5ODU1 MEU2NEYyQjAeFw0yNTA2MDExNDQ3MThaFw0yNTA2MDUwMTQ4MThaMDMxMTAvBgNV BAMTKDQ0RTBENkZDNjcxRjgxNzkzNDJBQTE0NzhCNDlEODlCQkEzN0UzRTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG8CasTBcrMgDYYS50aD+AWI9Z Sn5QOxFGVl9WqX73kJ2hCrAkr3nQoHbIpYyTMwXU3HxB6BGiwBzzUvhYZwYt2BDw vYdvCXQYffa2D1cBaUHyDaFh7oEvR+ooWZ7uVV4B3bYLsEoCF3IMIZqxWdPN3YUB GWdPaR42Z+HLt2MXbNJZ+B26peA35f50T4bWOi5IlzIULZWWXpDOGv2xnAokIUAj paZuzUj0rSfaZOBOaKAzqVoFkuqFwiqMuJvT9hrahNziKRxoDhxgg+4hp9r+tIh+ S69Mxss27UpbE5X4JRhqdJfyXq7FxwzA4hvYZYSEzA8xezMWUWowJwzGuWpfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURODW/GcfgXk0KqFHi0nYm7o34+MwHwYDVR0j BBgwFoAUSp6MYb42cNhluKedfTJ5hVDmTyswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YzQ5MzVkOC05NmEyLTQ1NjQtODVhMy0zMmE1MzE4OTM2N2UvMC80QTlFOEM2MUJF MzY3MEQ4NjVCOEE3OUQ3RDMyNzk4NTUwRTY0RjJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEE5RThDNjFCRTM2NzBEODY1QjhBNzlEN0QzMjc5ODU1MEU2 NEYyQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2M0OTM1ZDgtOTZhMi00NTY0LTg1 YTMtMzJhNTMxODkzNjdlLzAvNEE5RThDNjFCRTM2NzBEODY1QjhBNzlEN0QzMjc5 ODU1MEU2NEYyQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFQoqw5ROFOrgEE8U2noSAj8YaDf79x+GDQx jLIudnMEcX0SDWTASmfpypKewctGJxAms9a+Go24pXXUXAIfhPSR1rumz455RBg3 k4bnQIi5MAiXqifzhhpCRydFxdKBxReEytg6P+agXLoJm+frEgpL7oQGFA5RpouV eUbsLFjXoXZmTIzb9NIhKP2TtnSOy5j9Jxc/LweG6A5Je5q07Fqb20Mx/XCVk4H/ maED9H3GLeNGEJoP+huHuhArejIV6IMomRE6p/ormyw68uUq40CZ9xZeSOXtIU89 1dLTyJpTxHH9z2goPqeiOGq/3BEbzgppb6RnRXT+/+7jJ9jIfH0= -----END CERTIFICATE-----Generated at Tue Jun 3 23:31:41 2025 by rpki-client