$ rpki-client -vvf repo-rpki.idnic.net/repo/8216f1bd-958e-47f5-948e-87e11e92e601/0/4E9222CE79B9CFEF260C837523FE2684407D535B.mft File: 4E9222CE79B9CFEF260C837523FE2684407D535B.mft (raw, json) Hash identifier: AgW5Lo0toYxxkUK+CXXPjX9cqi3g9BKo3hN3puDQpfc= Subject key identifier: 25:8C:82:11:0E:62:BF:62:D2:B4:2A:DD:04:AC:A7:C9:76:A7:49:DB Authority key identifier: 4E:92:22:CE:79:B9:CF:EF:26:0C:83:75:23:FE:26:84:40:7D:53:5B Certificate issuer: /CN=4E9222CE79B9CFEF260C837523FE2684407D535B Certificate serial: 44171DC81C50146AA3268B181D3DA5FDCC2B517A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E9222CE79B9CFEF260C837523FE2684407D535B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8216f1bd-958e-47f5-948e-87e11e92e601/0/4E9222CE79B9CFEF260C837523FE2684407D535B.mft Manifest number: 4F Signing time: Sun 01 Jun 2025 18:10:52 +0000 Manifest this update: Sun 01 Jun 2025 18:05:52 +0000 Manifest next update: Thu 05 Jun 2025 05:50:52 +0000 Files and hashes: 1: 3130332e3234322e37362e302f32342d3234203d3e20313338303737.roa (hash: fY5F0deZT0l+MXU2BONYTZar4gdW00dXgFRwhNWKnfo=) 2: 4E9222CE79B9CFEF260C837523FE2684407D535B.crl (hash: LgNsg7ujYJ6fTf46teCAfRawoGAxJcsSXD9cg2cqn+M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8216f1bd-958e-47f5-948e-87e11e92e601/0/4E9222CE79B9CFEF260C837523FE2684407D535B.crl rsync://repo-rpki.idnic.net/repo/8216f1bd-958e-47f5-948e-87e11e92e601/0/4E9222CE79B9CFEF260C837523FE2684407D535B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E9222CE79B9CFEF260C837523FE2684407D535B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 05:50:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:17:1d:c8:1c:50:14:6a:a3:26:8b:18:1d:3d:a5:fd:cc:2b:51:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4E9222CE79B9CFEF260C837523FE2684407D535B Validity Not Before: Jun 1 18:05:52 2025 GMT Not After : Jun 5 05:50:52 2025 GMT Subject: CN=258C82110E62BF62D2B42ADD04ACA7C976A749DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:bc:6e:08:5b:ac:fc:ca:c6:8a:4d:74:11:40: fc:5b:e1:bf:f9:31:fc:de:8b:04:2c:be:33:50:cf: 5c:37:12:24:c1:f1:f3:97:ab:f8:7b:97:38:27:1b: af:29:90:fd:b2:a4:54:5c:86:91:4f:d8:a3:8c:7a: 0c:d5:91:fa:e6:0c:85:c5:c2:79:bd:57:14:42:ee: 3b:20:4f:18:26:4c:aa:d1:dd:cc:0e:0b:fd:9f:07: ba:8d:2d:46:c2:5d:53:a1:62:13:90:a1:fa:bf:bc: 4f:88:94:7a:89:c1:53:b5:a1:e5:1c:da:26:c8:e3: c1:be:ef:c1:cb:2e:58:e9:aa:09:65:bd:e1:47:bf: ed:47:20:60:91:cf:f7:81:d2:8c:33:9b:0a:f6:07: e2:0e:f9:5c:5c:52:93:e8:b9:2c:01:1d:b8:34:06: 32:34:ae:f0:c0:1b:96:03:cf:3f:ac:6d:fe:85:c7: c7:21:de:5d:b3:12:59:7d:de:ab:87:59:5f:e4:9a: 1d:6b:fb:02:22:45:be:be:47:31:a4:a4:19:2d:b0: 35:7b:2b:c7:04:a9:85:4a:eb:4d:e0:d7:ae:bf:f0: 96:26:30:86:5b:6e:80:eb:0c:8d:40:b6:6f:59:f9: 3a:26:6f:0d:6c:8b:b0:78:db:38:07:dc:de:b0:7f: 21:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:8C:82:11:0E:62:BF:62:D2:B4:2A:DD:04:AC:A7:C9:76:A7:49:DB X509v3 Authority Key Identifier: keyid:4E:92:22:CE:79:B9:CF:EF:26:0C:83:75:23:FE:26:84:40:7D:53:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8216f1bd-958e-47f5-948e-87e11e92e601/0/4E9222CE79B9CFEF260C837523FE2684407D535B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E9222CE79B9CFEF260C837523FE2684407D535B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8216f1bd-958e-47f5-948e-87e11e92e601/0/4E9222CE79B9CFEF260C837523FE2684407D535B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:66:ee:13:3b:85:39:e4:fd:32:ec:be:96:2b:4d:af:b4:3e: 0e:3a:cd:3e:b2:21:78:f1:19:aa:15:9f:a2:99:e0:6c:0f:44: 3b:66:93:67:ee:0d:e9:fa:b5:6a:f2:34:ac:e1:6a:1f:7d:83: 34:30:3c:f1:18:a2:42:23:e7:51:ef:2f:c2:b1:61:50:b7:fb: f8:0e:cf:d4:00:a2:98:6d:78:73:64:80:c8:04:55:86:d6:9c: 74:a4:39:30:79:07:cb:ce:e1:01:fc:72:24:3c:26:6e:eb:25: 3d:56:fe:96:91:eb:28:07:f7:8b:d6:ca:f9:2f:0c:f5:4b:54: c3:d7:3c:a9:77:2f:d9:13:c2:13:d8:77:c1:55:a0:94:24:e8: 5d:ef:d1:1c:1a:66:00:c2:fb:98:b1:55:0b:0f:8a:ab:68:d4: 01:bf:0b:a0:4f:79:cf:28:1b:0c:ae:49:90:8a:99:a4:50:9d: ae:91:6e:96:f6:8b:42:83:48:be:0f:32:82:a2:20:53:31:45: 52:e3:21:dd:94:92:0a:16:99:40:9e:41:65:39:52:32:3d:c2: 51:2e:48:28:49:c6:84:9e:40:34:3d:0c:92:89:45:3c:39:22: 55:19:a9:e8:dd:da:9e:c3:8c:76:40:67:45:0d:b2:9a:7f:dd: af:c1:65:a7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURBcdyBxQFGqjJosYHT2l/cwrUXowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEU5MjIyQ0U3OUI5Q0ZFRjI2MEM4Mzc1MjNGRTI2ODQ0 MDdENTM1QjAeFw0yNTA2MDExODA1NTJaFw0yNTA2MDUwNTUwNTJaMDMxMTAvBgNV BAMTKDI1OEM4MjExMEU2MkJGNjJEMkI0MkFERDA0QUNBN0M5NzZBNzQ5REIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJvG4IW6z8ysaKTXQRQPxb4b/5 MfzeiwQsvjNQz1w3EiTB8fOXq/h7lzgnG68pkP2ypFRchpFP2KOMegzVkfrmDIXF wnm9VxRC7jsgTxgmTKrR3cwOC/2fB7qNLUbCXVOhYhOQofq/vE+IlHqJwVO1oeUc 2ibI48G+78HLLljpqgllveFHv+1HIGCRz/eB0owzmwr2B+IO+VxcUpPouSwBHbg0 BjI0rvDAG5YDzz+sbf6Fx8ch3l2zEll93quHWV/kmh1r+wIiRb6+RzGkpBktsDV7 K8cEqYVK603g166/8JYmMIZbboDrDI1Atm9Z+Tombw1si7B42zgH3N6wfyGXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJYyCEQ5iv2LStCrdBKynyXanSdswHwYDVR0j BBgwFoAUTpIiznm5z+8mDIN1I/4mhEB9U1swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MjE2ZjFiZC05NThlLTQ3ZjUtOTQ4ZS04N2UxMWU5MmU2MDEvMC80RTkyMjJDRTc5 QjlDRkVGMjYwQzgzNzUyM0ZFMjY4NDQwN0Q1MzVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEU5MjIyQ0U3OUI5Q0ZFRjI2MEM4Mzc1MjNGRTI2ODQ0MDdE NTM1Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODIxNmYxYmQtOTU4ZS00N2Y1LTk0 OGUtODdlMTFlOTJlNjAxLzAvNEU5MjIyQ0U3OUI5Q0ZFRjI2MEM4Mzc1MjNGRTI2 ODQ0MDdENTM1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEBm7hM7hTnk/TLsvpYrTa+0Pg46zT6yIXjx GaoVn6KZ4GwPRDtmk2fuDen6tWryNKzhah99gzQwPPEYokIj51HvL8KxYVC3+/gO z9QAophteHNkgMgEVYbWnHSkOTB5B8vO4QH8ciQ8Jm7rJT1W/paR6ygH94vWyvkv DPVLVMPXPKl3L9kTwhPYd8FVoJQk6F3v0RwaZgDC+5ixVQsPiqto1AG/C6BPec8o GwyuSZCKmaRQna6Rbpb2i0KDSL4PMoKiIFMxRVLjId2UkgoWmUCeQWU5UjI9wlEu SChJxoSeQDQ9DJKJRTw5IlUZqejd2p7DjHZAZ0UNspp/3a/BZac= -----END CERTIFICATE-----Generated at Tue Jun 3 23:33:25 2025 by rpki-client