$ rpki-client -vvf repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/0/4E52504397B6835784BD4E67D8048C0D1CE3B242.mft File: 4E52504397B6835784BD4E67D8048C0D1CE3B242.mft (raw, json) Hash identifier: ejq+q+xBfC9Hmsk5XNCgH3/L9K7Dl6xgB+tTn0Y2dCQ= Subject key identifier: 6A:4D:6D:50:C4:10:0C:B6:50:83:A8:6E:FE:B5:70:6C:33:AE:AF:AC Authority key identifier: 4E:52:50:43:97:B6:83:57:84:BD:4E:67:D8:04:8C:0D:1C:E3:B2:42 Certificate issuer: /CN=4E52504397B6835784BD4E67D8048C0D1CE3B242 Certificate serial: 1245E724A1F8748538FA7B171983128DC57F8E9E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E52504397B6835784BD4E67D8048C0D1CE3B242.cer Subject info access: rsync://repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/0/4E52504397B6835784BD4E67D8048C0D1CE3B242.mft Manifest number: 04C2 Signing time: Sat 05 Apr 2025 18:32:07 +0000 Manifest this update: Sat 05 Apr 2025 18:27:07 +0000 Manifest next update: Wed 09 Apr 2025 03:13:07 +0000 Files and hashes: 1: 323430333a653630303a6630303a3a2f34302d3430203d3e203538333736.roa (hash: 28/7yzYFPU2INXX42MopSeFSOK24RIpHwZvJY6Bghl8=) 2: 323430333a653630303a3a2f33322d3332203d3e203538333736.roa (hash: j7YamreoNvDtpRRCa1576yblhtpzYGNi0GVQwvs+/uU=) 3: 3130332e32392e3134382e302f32322d3234203d3e203538333736.roa (hash: BdJaFao8B+TjAWAlyv2cIwAqEFZulu5t7ZhP4Qtv2fY=) 4: 4E52504397B6835784BD4E67D8048C0D1CE3B242.crl (hash: D/Jb02kkF7Xso0d3F5JzLw41b3AtkBhFN1i8qZS1Ivg=) 5: 34332e3234352e3138382e302f32322d3234203d3e203538333736.roa (hash: XNyUIRQtKNQg0scHLvGfTd1iQ5fTzdzUb2EnWutkjlI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/0/4E52504397B6835784BD4E67D8048C0D1CE3B242.crl rsync://repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/0/4E52504397B6835784BD4E67D8048C0D1CE3B242.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E52504397B6835784BD4E67D8048C0D1CE3B242.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:45:e7:24:a1:f8:74:85:38:fa:7b:17:19:83:12:8d:c5:7f:8e:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4E52504397B6835784BD4E67D8048C0D1CE3B242 Validity Not Before: Apr 5 18:27:07 2025 GMT Not After : Apr 9 03:13:07 2025 GMT Subject: CN=6A4D6D50C4100CB65083A86EFEB5706C33AEAFAC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:72:78:4d:0d:69:51:7b:05:91:a8:6b:30:49: 05:92:49:d6:2d:ba:9a:ca:61:2a:71:79:a1:c4:7e: c3:5d:8a:b1:66:b5:e2:3c:aa:d6:85:8a:36:a0:41: 47:bc:d9:2d:74:ed:25:84:88:b1:02:2f:99:8f:85: 08:14:11:ad:8c:c3:7a:c1:bb:6c:28:be:58:a7:bc: 69:7a:4b:85:3a:82:75:9c:22:9e:86:4e:09:94:eb: be:d9:4a:89:73:78:f5:73:3c:56:cb:c1:fb:88:83: 2e:db:b1:05:48:10:ff:3a:c3:f3:19:dc:d8:35:1c: ff:bd:ab:10:f7:0b:39:d0:fd:b3:52:9b:93:99:d1: 74:60:f0:5b:29:cc:31:e9:77:ca:08:2d:93:9d:fd: ed:99:ff:82:5a:e5:e9:b7:f3:0e:aa:f0:c4:f4:5e: c9:8c:4d:eb:f8:ad:8d:45:26:19:ea:66:29:26:8a: 6a:f1:1c:52:d6:f9:a7:23:d4:60:45:31:81:5c:57: cc:fb:83:11:16:0d:47:03:69:38:44:24:bc:8d:db: 05:77:89:36:14:59:f5:ee:c7:cc:6a:b2:5a:02:de: 2e:29:e4:db:e5:88:b7:76:ca:9f:2c:89:78:a4:88: e5:4b:53:1b:e5:25:66:c0:f1:2a:65:b8:39:f8:73: 30:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:4D:6D:50:C4:10:0C:B6:50:83:A8:6E:FE:B5:70:6C:33:AE:AF:AC X509v3 Authority Key Identifier: keyid:4E:52:50:43:97:B6:83:57:84:BD:4E:67:D8:04:8C:0D:1C:E3:B2:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/0/4E52504397B6835784BD4E67D8048C0D1CE3B242.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E52504397B6835784BD4E67D8048C0D1CE3B242.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/0/4E52504397B6835784BD4E67D8048C0D1CE3B242.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:fb:99:42:71:ba:c9:ac:2d:d4:2d:c0:7c:25:8a:27:bb:cc: 5f:6f:dd:74:21:f2:6d:7e:c6:f0:46:95:3f:b9:50:91:33:31: 3b:64:d1:bd:fc:b4:7e:bf:a8:90:ff:41:59:4a:f1:57:9b:e8: 84:0b:f7:77:91:3a:21:78:1b:5f:77:00:6c:6e:a1:db:8c:31: 21:6a:1e:0e:68:df:c9:16:be:68:40:f9:08:93:49:0e:d3:70: a3:ac:fe:d2:56:1a:06:b0:7c:64:09:83:17:f4:79:18:5a:ce: f1:5a:d7:71:3f:49:57:fb:41:f2:a2:13:a4:a2:bd:6e:d0:0a: 14:34:ad:d0:33:90:b9:54:95:09:1f:aa:4a:ca:8f:59:6d:4a: 72:2c:47:72:b2:bd:57:88:3f:f8:c5:59:92:47:a8:a6:c8:88: 06:63:ae:18:52:4a:66:a3:e0:7a:fe:b7:1c:32:f8:b2:08:7c: 67:61:dc:26:7c:a5:15:39:ff:9b:53:6a:ff:00:bb:b6:e5:2a: 34:5d:eb:ab:41:80:1c:c8:3c:fd:f7:a1:1e:e1:d5:51:5a:69: bf:c4:d2:c8:69:e1:78:b9:4b:a3:01:00:bc:2e:0d:38:cc:79: cb:5f:78:03:1e:48:28:07:50:dd:a8:ba:ef:5f:1b:81:45:b2: 10:4e:92:90 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEkXnJKH4dIU4+nsXGYMSjcV/jp4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEU1MjUwNDM5N0I2ODM1Nzg0QkQ0RTY3RDgwNDhDMEQx Q0UzQjI0MjAeFw0yNTA0MDUxODI3MDdaFw0yNTA0MDkwMzEzMDdaMDMxMTAvBgNV BAMTKDZBNEQ2RDUwQzQxMDBDQjY1MDgzQTg2RUZFQjU3MDZDMzNBRUFGQUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVcnhNDWlRewWRqGswSQWSSdYt uprKYSpxeaHEfsNdirFmteI8qtaFijagQUe82S107SWEiLECL5mPhQgUEa2Mw3rB u2wovlinvGl6S4U6gnWcIp6GTgmU677ZSolzePVzPFbLwfuIgy7bsQVIEP86w/MZ 3Ng1HP+9qxD3CznQ/bNSm5OZ0XRg8FspzDHpd8oILZOd/e2Z/4Ja5em38w6q8MT0 XsmMTev4rY1FJhnqZikmimrxHFLW+acj1GBFMYFcV8z7gxEWDUcDaThEJLyN2wV3 iTYUWfXux8xqsloC3i4p5NvliLd2yp8siXikiOVLUxvlJWbA8SpluDn4czC9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUak1tUMQQDLZQg6hu/rVwbDOur6wwHwYDVR0j BBgwFoAUTlJQQ5e2g1eEvU5n2ASMDRzjskIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OTFkM2MzMC05NWRjLTRiNzItYWUxYi1hZDFlOThiMGUxNzkvMC80RTUyNTA0Mzk3 QjY4MzU3ODRCRDRFNjdEODA0OEMwRDFDRTNCMjQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEU1MjUwNDM5N0I2ODM1Nzg0QkQ0RTY3RDgwNDhDMEQxQ0Uz QjI0Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODkxZDNjMzAtOTVkYy00YjcyLWFl MWItYWQxZTk4YjBlMTc5LzAvNEU1MjUwNDM5N0I2ODM1Nzg0QkQ0RTY3RDgwNDhD MEQxQ0UzQjI0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAj7mUJxusmsLdQtwHwliie7zF9v3XQh8m1+ xvBGlT+5UJEzMTtk0b38tH6/qJD/QVlK8Veb6IQL93eROiF4G193AGxuoduMMSFq Hg5o38kWvmhA+QiTSQ7TcKOs/tJWGgawfGQJgxf0eRhazvFa13E/SVf7QfKiE6Si vW7QChQ0rdAzkLlUlQkfqkrKj1ltSnIsR3KyvVeIP/jFWZJHqKbIiAZjrhhSSmaj 4Hr+txwy+LIIfGdh3CZ8pRU5/5tTav8Au7blKjRd66tBgBzIPP33oR7h1VFaab/E 0shp4Xi5S6MBALwuDTjMectfeAMeSCgHUN2ouu9fG4FFshBOkpA= -----END CERTIFICATE-----Generated at Sat Apr 5 23:19:30 2025 by rpki-client