$ rpki-client -vvf repo-rpki.idnic.net/repo/81c9ce5a-6690-4901-9e0a-c27b319316be/0/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.mft File: 4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.mft (raw, json) Hash identifier: WpqfoMN7WXDdwpZjtEcBuKaUiKU9hTKjvkwO18p0jcI= Subject key identifier: 23:2B:29:54:D6:8D:74:B3:1F:7A:F6:26:5B:11:7F:0A:16:6D:ED:EE Authority key identifier: 4C:34:08:B6:E0:82:54:22:DC:2D:07:1E:49:0B:D7:CB:1F:BD:2A:3F Certificate issuer: /CN=4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F Certificate serial: 3CCC0275638E4BC3B7B939424D87A78B0D76362F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/81c9ce5a-6690-4901-9e0a-c27b319316be/0/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.mft Manifest number: 0455 Signing time: Tue 03 Jun 2025 12:24:08 +0000 Manifest this update: Tue 03 Jun 2025 12:19:08 +0000 Manifest next update: Fri 06 Jun 2025 23:10:08 +0000 Files and hashes: 1: 3130332e37312e34342e302f32332d3233203d3e203436303232.roa (hash: OTd8RtkXs2m+VF5BpzyjcTZytiPZTBuAWTpwxqI9xFY=) 2: 4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.crl (hash: X+8eEkWryDDfq1K6CjFeVBNmoY4weXIMrM8rbuOMNBU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/81c9ce5a-6690-4901-9e0a-c27b319316be/0/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.crl rsync://repo-rpki.idnic.net/repo/81c9ce5a-6690-4901-9e0a-c27b319316be/0/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 23:10:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:cc:02:75:63:8e:4b:c3:b7:b9:39:42:4d:87:a7:8b:0d:76:36:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F Validity Not Before: Jun 3 12:19:08 2025 GMT Not After : Jun 6 23:10:08 2025 GMT Subject: CN=232B2954D68D74B31F7AF6265B117F0A166DEDEE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:2c:3d:8a:14:a2:ee:eb:64:83:e9:4c:33:11: b5:51:e6:81:22:5d:ab:a7:3c:db:68:7d:69:3e:e0: f7:d4:6c:46:b8:8e:d2:d7:c8:8b:42:75:3c:b5:1c: a9:d7:07:a7:63:a4:c8:2d:24:b7:82:48:c4:02:c2: 33:a0:02:53:1f:3d:ce:96:7e:df:ca:64:a2:1a:65: 12:7d:1b:57:b0:02:a5:27:ff:15:9c:5d:c1:ee:52: 86:1a:09:4e:21:3d:c5:61:2a:c9:46:ac:d8:ba:84: b3:6e:f9:9f:e2:9d:c2:96:36:2f:95:96:03:15:ee: 88:76:b7:4d:3d:9f:12:c0:bc:4c:03:78:ed:54:c5: d3:6b:5b:af:7c:7b:b3:62:99:89:18:3c:f4:58:a2: 4e:b5:c2:3a:31:61:f7:0d:5f:3c:22:cf:e6:74:4c: 63:98:55:07:e1:e0:a5:82:7c:85:b2:cd:e1:b8:de: 48:c2:94:5b:b1:b6:f4:e6:74:18:09:d7:ee:fa:4a: 73:51:3d:ea:94:7e:b0:02:db:95:ae:db:be:45:7a: 45:5d:aa:0c:8a:83:40:7d:38:74:95:37:66:16:b8: d8:c3:c0:ea:9d:c0:d5:7d:2e:08:f8:17:b8:52:34: 87:c6:3d:00:6b:35:67:c2:4a:82:0c:b9:85:e5:1a: e5:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:2B:29:54:D6:8D:74:B3:1F:7A:F6:26:5B:11:7F:0A:16:6D:ED:EE X509v3 Authority Key Identifier: keyid:4C:34:08:B6:E0:82:54:22:DC:2D:07:1E:49:0B:D7:CB:1F:BD:2A:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/81c9ce5a-6690-4901-9e0a-c27b319316be/0/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/81c9ce5a-6690-4901-9e0a-c27b319316be/0/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:a6:76:93:d7:8c:1b:20:ea:8a:2c:1d:d1:2d:1e:68:1d:b7: a8:73:00:44:e3:03:b9:6a:54:c9:fb:0e:3a:a7:0a:f1:7d:26: ab:53:be:1a:f8:60:ce:49:70:e2:37:c4:45:9a:c7:b6:c0:46: e0:fa:fa:a4:27:e2:8e:df:76:a2:08:67:cd:38:52:17:92:30: 13:8c:95:c0:9f:1f:2e:c1:e9:c7:28:27:2d:5f:bc:df:2b:0e: 7b:ba:03:fa:f1:29:a6:8c:9b:ea:fa:6e:5b:9d:d8:ab:3a:85: 8d:f4:ce:93:76:55:34:c1:0d:8e:18:a0:68:be:e0:4b:b5:59: 8b:21:41:65:31:71:bf:1d:ae:85:bd:42:5e:36:93:b3:42:da: 94:a3:17:66:c8:47:6d:e2:8d:8a:d8:8e:91:bb:70:e4:a5:1e: 04:70:03:ef:62:b1:56:97:79:63:bf:e1:4e:d7:a1:cf:56:53: 1b:f2:b0:5d:ea:21:00:aa:97:22:92:ee:70:6c:59:c3:a5:97: 5c:51:8e:5b:9d:e8:b6:6e:ef:3b:b7:c8:08:26:b6:0e:7b:bb: 6a:8d:b2:f3:9b:ce:29:08:c7:1b:21:7f:de:d4:a8:06:ba:9c: 6c:ee:5c:b3:59:59:66:3e:1b:f9:14:e2:60:0b:d8:69:6b:d6: 4c:b0:62:7e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPMwCdWOOS8O3uTlCTYeniw12Ni8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEMzNDA4QjZFMDgyNTQyMkRDMkQwNzFFNDkwQkQ3Q0Ix RkJEMkEzRjAeFw0yNTA2MDMxMjE5MDhaFw0yNTA2MDYyMzEwMDhaMDMxMTAvBgNV BAMTKDIzMkIyOTU0RDY4RDc0QjMxRjdBRjYyNjVCMTE3RjBBMTY2REVERUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsLD2KFKLu62SD6UwzEbVR5oEi XaunPNtofWk+4PfUbEa4jtLXyItCdTy1HKnXB6djpMgtJLeCSMQCwjOgAlMfPc6W ft/KZKIaZRJ9G1ewAqUn/xWcXcHuUoYaCU4hPcVhKslGrNi6hLNu+Z/incKWNi+V lgMV7oh2t009nxLAvEwDeO1UxdNrW698e7NimYkYPPRYok61wjoxYfcNXzwiz+Z0 TGOYVQfh4KWCfIWyzeG43kjClFuxtvTmdBgJ1+76SnNRPeqUfrAC25Wu275FekVd qgyKg0B9OHSVN2YWuNjDwOqdwNV9Lgj4F7hSNIfGPQBrNWfCSoIMuYXlGuW/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIyspVNaNdLMfevYmWxF/ChZt7e4wHwYDVR0j BBgwFoAUTDQItuCCVCLcLQceSQvXyx+9Kj8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MWM5Y2U1YS02NjkwLTQ5MDEtOWUwYS1jMjdiMzE5MzE2YmUvMC80QzM0MDhCNkUw ODI1NDIyREMyRDA3MUU0OTBCRDdDQjFGQkQyQTNGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEMzNDA4QjZFMDgyNTQyMkRDMkQwNzFFNDkwQkQ3Q0IxRkJE MkEzRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODFjOWNlNWEtNjY5MC00OTAxLTll MGEtYzI3YjMxOTMxNmJlLzAvNEMzNDA4QjZFMDgyNTQyMkRDMkQwNzFFNDkwQkQ3 Q0IxRkJEMkEzRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFemdpPXjBsg6oosHdEtHmgdt6hzAETjA7lq VMn7DjqnCvF9JqtTvhr4YM5JcOI3xEWax7bARuD6+qQn4o7fdqIIZ804UheSMBOM lcCfHy7B6ccoJy1fvN8rDnu6A/rxKaaMm+r6blud2Ks6hY30zpN2VTTBDY4YoGi+ 4Eu1WYshQWUxcb8droW9Ql42k7NC2pSjF2bIR23ijYrYjpG7cOSlHgRwA+9isVaX eWO/4U7Xoc9WUxvysF3qIQCqlyKS7nBsWcOll1xRjlud6LZu7zu3yAgmtg57u2qN svObzikIxxshf97UqAa6nGzuXLNZWWY+G/kU4mAL2Glr1kywYn4= -----END CERTIFICATE-----Generated at Thu Jun 5 19:16:04 2025 by rpki-client