$ rpki-client -vvf repo-rpki.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.mft File: 4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.mft (raw, json) Hash identifier: HfssoaiHWWv7ht+F3gAp0OrGE/JoaF7QSNprS0TicSM= Subject key identifier: E7:FB:F9:BA:B1:9F:C9:7A:79:54:F1:4B:48:CB:31:CD:18:BD:8C:A1 Authority key identifier: 4D:D0:C9:5B:43:B8:B6:53:60:1F:ED:39:AB:01:0E:1D:D0:DC:17:F2 Certificate issuer: /CN=4DD0C95B43B8B653601FED39AB010E1DD0DC17F2 Certificate serial: 7F6AB91A2C7129F8E2223C9B11F9572A5F7A8C02 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.mft Manifest number: 04DD Signing time: Wed 04 Jun 2025 12:01:09 +0000 Manifest this update: Wed 04 Jun 2025 11:56:09 +0000 Manifest next update: Sat 07 Jun 2025 20:28:09 +0000 Files and hashes: 1: 323030313a6466323a626530303a3a2f34382d3438203d3e20313335343537.roa (hash: h6RVxpLnAMaDIfRa4gc3qjSTKqM6GqzTQIycSjUOXA8=) 2: 34352e3132302e3234342e302f32322d3234203d3e20313335343537.roa (hash: PuA0O7on+Tv+yi4m5sFC8JVnpsZv77062xaCNSQ10PY=) 3: 3130332e36362e35352e302f32342d3234203d3e20313335343537.roa (hash: mMt8TohptJaTB3iEAIHl/vZT9ocBsY0iZQRajhpLuKo=) 4: 4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.crl (hash: 7UTq+VtKwFG4i7gg8CEoEm5Xu/J3dyrtR3ywEiWJw60=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.crl rsync://repo-rpki.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 20:28:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:6a:b9:1a:2c:71:29:f8:e2:22:3c:9b:11:f9:57:2a:5f:7a:8c:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4DD0C95B43B8B653601FED39AB010E1DD0DC17F2 Validity Not Before: Jun 4 11:56:09 2025 GMT Not After : Jun 7 20:28:09 2025 GMT Subject: CN=E7FBF9BAB19FC97A7954F14B48CB31CD18BD8CA1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:33:a1:07:e9:af:36:b2:27:e5:be:9b:94:27: ca:47:e6:6f:9f:71:02:f5:b2:ba:fb:11:14:e5:ae: 49:99:5c:bc:6b:32:1c:79:68:44:61:b1:9b:54:10: 8d:ed:ce:d6:f8:76:76:89:a1:f2:dc:de:1e:0f:e1: 08:1e:83:ac:e7:7f:84:8e:b4:e4:0e:8b:d8:7b:a5: 79:90:7d:10:5e:9b:50:f7:25:fd:d9:95:14:dd:cf: 2d:9b:87:b8:a1:96:4f:46:b1:d8:6d:e8:50:47:35: 0e:db:ce:8e:6f:e4:18:0a:ef:51:a1:9d:84:5e:92: e4:fe:23:6b:70:42:84:5c:0c:69:2c:bb:c0:84:f7: 7c:5c:70:32:7c:fd:9b:5b:c8:4a:b6:c2:bb:13:97: 14:b2:63:84:08:dc:48:a9:d2:c8:f7:c4:cd:f3:24: d5:6a:0d:5d:9c:13:c9:0a:95:e0:d8:07:d8:7c:cf: 6a:c4:13:c3:4d:8f:e4:56:5f:47:a8:43:58:bc:56: c8:98:2c:76:09:eb:5f:d4:d8:ab:52:96:66:26:bb: 73:2f:f2:24:c9:ed:dd:eb:10:02:93:b1:58:62:75: 55:a4:15:0b:a4:a3:ee:47:3f:4f:a4:a7:bd:ae:bf: ff:85:b4:cb:01:4e:9b:af:74:0f:b6:8c:19:a0:0b: a8:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:FB:F9:BA:B1:9F:C9:7A:79:54:F1:4B:48:CB:31:CD:18:BD:8C:A1 X509v3 Authority Key Identifier: keyid:4D:D0:C9:5B:43:B8:B6:53:60:1F:ED:39:AB:01:0E:1D:D0:DC:17:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:43:b3:83:eb:66:0e:97:75:25:0b:22:ef:19:0e:86:8b:fe: 1e:69:c6:aa:eb:31:e0:17:58:cf:31:64:a9:90:e7:f4:3e:3b: 4a:f6:02:ce:ba:c5:34:2b:0f:93:2c:96:87:4b:01:9e:10:8c: a0:a2:ba:5c:9d:37:2e:f0:09:eb:6b:3b:ae:ba:1f:3a:57:41: 77:07:9a:a7:69:4b:dc:a7:4c:06:bf:84:c2:52:aa:83:52:e5: 69:9b:22:85:2a:d7:28:1e:87:39:bb:d4:35:26:ad:7a:35:5c: ac:0c:1c:b3:f5:80:98:3a:55:5b:37:a5:16:45:f6:35:a0:ee: 18:bf:a4:66:7b:d9:b0:26:bf:52:16:cb:4a:7b:27:a4:fb:25: bf:b9:53:ad:80:9c:f3:03:35:9f:a2:60:58:ac:b6:7c:77:97: be:5f:12:33:9c:4f:ee:40:d6:fc:e1:b4:22:b5:87:a0:2d:a9: 07:8c:4f:fe:e8:6d:62:39:1c:bd:93:b9:ac:b7:07:d1:e7:12: f0:f8:20:81:95:38:4f:68:2d:28:3c:91:9e:e9:fe:24:80:7a: 12:b1:f0:84:39:41:51:16:9b:9d:18:94:51:d7:05:38:14:cd: 93:cd:f9:3f:07:b4:63:1e:d2:0d:8d:7d:5b:bc:d1:ed:f8:37: 78:09:f1:d8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf2q5GixxKfjiIjybEflXKl96jAIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEREMEM5NUI0M0I4QjY1MzYwMUZFRDM5QUIwMTBFMURE MERDMTdGMjAeFw0yNTA2MDQxMTU2MDlaFw0yNTA2MDcyMDI4MDlaMDMxMTAvBgNV BAMTKEU3RkJGOUJBQjE5RkM5N0E3OTU0RjE0QjQ4Q0IzMUNEMThCRDhDQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZM6EH6a82siflvpuUJ8pH5m+f cQL1srr7ERTlrkmZXLxrMhx5aERhsZtUEI3tztb4dnaJofLc3h4P4Qgeg6znf4SO tOQOi9h7pXmQfRBem1D3Jf3ZlRTdzy2bh7ihlk9Gsdht6FBHNQ7bzo5v5BgK71Gh nYRekuT+I2twQoRcDGksu8CE93xccDJ8/ZtbyEq2wrsTlxSyY4QI3Eip0sj3xM3z JNVqDV2cE8kKleDYB9h8z2rEE8NNj+RWX0eoQ1i8VsiYLHYJ61/U2KtSlmYmu3Mv 8iTJ7d3rEAKTsVhidVWkFQuko+5HP0+kp72uv/+FtMsBTpuvdA+2jBmgC6jHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5/v5urGfyXp5VPFLSMsxzRi9jKEwHwYDVR0j BBgwFoAUTdDJW0O4tlNgH+05qwEOHdDcF/IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 Mjc4MGY4NS1lZjJmLTRjZjgtYTRiOC01MjI1YzQ1Yjk2YTEvMC80REQwQzk1QjQz QjhCNjUzNjAxRkVEMzlBQjAxMEUxREQwREMxN0YyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEREMEM5NUI0M0I4QjY1MzYwMUZFRDM5QUIwMTBFMUREMERD MTdGMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODI3ODBmODUtZWYyZi00Y2Y4LWE0 YjgtNTIyNWM0NWI5NmExLzAvNEREMEM5NUI0M0I4QjY1MzYwMUZFRDM5QUIwMTBF MUREMERDMTdGMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAVDs4PrZg6XdSULIu8ZDoaL/h5pxqrrMeAX WM8xZKmQ5/Q+O0r2As66xTQrD5MslodLAZ4QjKCiulydNy7wCetrO666HzpXQXcH mqdpS9ynTAa/hMJSqoNS5WmbIoUq1ygehzm71DUmrXo1XKwMHLP1gJg6VVs3pRZF 9jWg7hi/pGZ72bAmv1IWy0p7J6T7Jb+5U62AnPMDNZ+iYFistnx3l75fEjOcT+5A 1vzhtCK1h6AtqQeMT/7obWI5HL2Tuay3B9HnEvD4IIGVOE9oLSg8kZ7p/iSAehKx 8IQ5QVEWm50YlFHXBTgUzZPN+T8HtGMe0g2NfVu80e34N3gJ8dg= -----END CERTIFICATE-----Generated at Fri Jun 6 16:44:47 2025 by rpki-client