$ rpki-client -vvf repo-rpki.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.mft File: 4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.mft (raw, json) Hash identifier: ir8333+2B+cQQLSBCMkS//E+gp9dpqAWfJYth9LPJ28= Subject key identifier: B4:08:81:0A:66:CB:AA:61:6D:B2:6B:85:8D:8E:94:6B:93:11:58:D9 Authority key identifier: 4B:E0:EB:AF:EF:1E:20:6C:AD:8B:4E:AD:6D:6A:08:D3:A8:C0:1B:50 Certificate issuer: /CN=4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50 Certificate serial: 5566229FF5B359415141086AB14C4361C5980A79 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.cer Subject info access: rsync://repo-rpki.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.mft Manifest number: 01B2 Signing time: Sat 05 Apr 2025 11:40:47 +0000 Manifest this update: Sat 05 Apr 2025 11:35:47 +0000 Manifest next update: Tue 08 Apr 2025 12:33:47 +0000 Files and hashes: 1: 4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.crl (hash: rQZ8GJ2KYjvbynlKlpFwGB5RCVrpKCbrtOzbsj0WFB0=) 2: 3130332e38362e3132382e302f32332d3234203d3e2034383030.roa (hash: ER09/d673Zei97k2o4R+YDy6neQAyCBVuW6CuWOZSDM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.crl rsync://repo-rpki.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:66:22:9f:f5:b3:59:41:51:41:08:6a:b1:4c:43:61:c5:98:0a:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50 Validity Not Before: Apr 5 11:35:47 2025 GMT Not After : Apr 8 12:33:47 2025 GMT Subject: CN=B408810A66CBAA616DB26B858D8E946B931158D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:4e:46:fc:d4:a6:50:0b:70:b8:43:a7:98:e1: 3c:f6:16:62:15:76:6a:a9:fa:6f:9f:3e:43:da:13: e6:cb:30:73:42:96:11:44:aa:0c:b2:e6:87:6e:b2: 3a:b3:9c:07:a1:e0:84:4d:ae:9b:54:67:b5:2a:5e: 9a:b2:06:25:7a:c8:ce:46:dd:b7:92:3c:31:a2:c6: da:ed:d4:b5:83:f0:36:cf:82:e0:96:3e:78:75:c4: d1:db:c8:1b:61:be:59:8f:d0:f2:09:c2:c5:c5:45: 09:ae:ca:45:d6:58:a6:68:a8:c5:ff:80:95:6a:ec: e9:65:24:22:5f:44:50:5f:48:d3:79:9f:99:da:59: 07:bb:a6:19:6d:64:cc:6c:fb:ce:36:53:3d:e5:48: 08:39:ff:4b:ee:44:ac:76:fb:cf:d4:92:d5:4f:a3: f1:3b:2c:46:33:54:f8:d8:52:78:c9:c5:b8:9b:65: 66:98:6a:a9:3c:e7:4e:30:67:2a:90:e7:13:77:2f: e8:5d:6c:14:36:3c:ac:ef:59:f9:3c:e3:a5:75:68: f0:03:a2:63:86:da:6e:0d:4f:c1:62:df:16:58:e2: 2d:3a:9d:a6:13:5a:a9:48:a9:86:7f:45:ae:7b:54: 4b:fa:b3:cc:75:34:a3:f7:f1:1d:b3:37:95:54:7e: e8:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:08:81:0A:66:CB:AA:61:6D:B2:6B:85:8D:8E:94:6B:93:11:58:D9 X509v3 Authority Key Identifier: keyid:4B:E0:EB:AF:EF:1E:20:6C:AD:8B:4E:AD:6D:6A:08:D3:A8:C0:1B:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:97:a1:14:8c:c0:e2:c0:fe:5e:94:af:3e:2a:04:8e:6c:63: d5:39:72:46:7a:f1:f5:f5:22:34:94:4b:bb:3f:23:9a:3f:a8: 23:3b:3a:99:d2:75:2f:77:02:59:d3:75:2e:3b:1f:d7:b4:b1: 57:de:9a:1e:37:ff:9e:0b:36:b1:a2:00:8a:10:bd:65:c2:a7: 50:1c:bf:ac:ae:e3:22:e4:15:45:28:1d:f8:4b:b9:e7:9a:3c: 32:97:9c:ba:f0:26:1d:83:f9:40:49:19:5f:9a:dc:9d:af:42: ec:31:39:62:ec:0c:aa:6f:41:b6:27:d8:0a:fc:ee:9a:61:88: 60:d8:ea:1c:b2:71:34:53:cb:a5:26:ee:8f:32:a7:fe:07:fe: 98:5d:bc:26:52:dc:62:80:9b:ba:bb:df:2d:de:44:a8:c5:e6: 54:f1:08:4a:31:97:19:fc:29:49:cd:75:35:de:06:89:d3:6e: f4:16:c5:2c:ce:76:14:86:42:88:8d:d4:3b:dc:0f:35:12:73: 3a:28:ac:f0:ff:16:52:ac:c9:e1:6f:a5:54:e6:02:cb:e3:e2: 6d:d4:06:ef:3e:1c:d7:95:75:63:05:19:1c:d2:63:66:ab:0b: cf:30:05:43:02:44:5a:3b:84:c5:bb:9d:f5:48:d0:8b:70:75: 67:38:86:3e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVWYin/WzWUFRQQhqsUxDYcWYCnkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEJFMEVCQUZFRjFFMjA2Q0FEOEI0RUFENkQ2QTA4RDNB OEMwMUI1MDAeFw0yNTA0MDUxMTM1NDdaFw0yNTA0MDgxMjMzNDdaMDMxMTAvBgNV BAMTKEI0MDg4MTBBNjZDQkFBNjE2REIyNkI4NThEOEU5NDZCOTMxMTU4RDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0Tkb81KZQC3C4Q6eY4Tz2FmIV dmqp+m+fPkPaE+bLMHNClhFEqgyy5odusjqznAeh4IRNrptUZ7UqXpqyBiV6yM5G 3beSPDGixtrt1LWD8DbPguCWPnh1xNHbyBthvlmP0PIJwsXFRQmuykXWWKZoqMX/ gJVq7OllJCJfRFBfSNN5n5naWQe7phltZMxs+842Uz3lSAg5/0vuRKx2+8/UktVP o/E7LEYzVPjYUnjJxbibZWaYaqk8504wZyqQ5xN3L+hdbBQ2PKzvWfk846V1aPAD omOG2m4NT8Fi3xZY4i06naYTWqlIqYZ/Ra57VEv6s8x1NKP38R2zN5VUfui/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtAiBCmbLqmFtsmuFjY6Ua5MRWNkwHwYDVR0j BBgwFoAUS+Drr+8eIGyti06tbWoI06jAG1AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OGE3ZjM1NS1mMjI1LTQ4ZjMtODdmOC0wYmZiMGM4ZTU4ZjAvMC80QkUwRUJBRkVG MUUyMDZDQUQ4QjRFQUQ2RDZBMDhEM0E4QzAxQjUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEJFMEVCQUZFRjFFMjA2Q0FEOEI0RUFENkQ2QTA4RDNBOEMw MUI1MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOThhN2YzNTUtZjIyNS00OGYzLTg3 ZjgtMGJmYjBjOGU1OGYwLzAvNEJFMEVCQUZFRjFFMjA2Q0FEOEI0RUFENkQ2QTA4 RDNBOEMwMUI1MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHSXoRSMwOLA/l6Urz4qBI5sY9U5ckZ68fX1 IjSUS7s/I5o/qCM7OpnSdS93AlnTdS47H9e0sVfemh43/54LNrGiAIoQvWXCp1Ac v6yu4yLkFUUoHfhLueeaPDKXnLrwJh2D+UBJGV+a3J2vQuwxOWLsDKpvQbYn2Ar8 7pphiGDY6hyycTRTy6Um7o8yp/4H/phdvCZS3GKAm7q73y3eRKjF5lTxCEoxlxn8 KUnNdTXeBonTbvQWxSzOdhSGQoiN1DvcDzUSczoorPD/FlKsyeFvpVTmAsvj4m3U Bu8+HNeVdWMFGRzSY2arC88wBUMCRFo7hMW7nfVI0ItwdWc4hj4= -----END CERTIFICATE-----Generated at Sat Apr 5 19:06:30 2025 by rpki-client