$ rpki-client -vvf repo-rpki.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.mft File: 4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.mft (raw, json) Hash identifier: fhwCfTPNgh43EkKDhWIsWtTeuF78TewI0RIPBLEN898= Subject key identifier: 83:03:6A:5B:F3:D6:AB:8C:FC:D9:99:D8:EC:31:8C:BC:76:F4:C7:FE Authority key identifier: 4B:E0:EB:AF:EF:1E:20:6C:AD:8B:4E:AD:6D:6A:08:D3:A8:C0:1B:50 Certificate issuer: /CN=4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50 Certificate serial: 7F719DE9FFBBD8A1929A916D8D9D30CCA0037DEE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.cer Subject info access: rsync://repo-rpki.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.mft Manifest number: 01CD Signing time: Wed 04 Jun 2025 02:12:47 +0000 Manifest this update: Wed 04 Jun 2025 02:07:47 +0000 Manifest next update: Sat 07 Jun 2025 09:21:47 +0000 Files and hashes: 1: 4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.crl (hash: CEiAN13uYPLcj2urBnlOPKyhGsKznoyckLw7ZqqV56w=) 2: 3130332e38362e3132382e302f32332d3234203d3e2034383030.roa (hash: D4xO8SkIE8jeNebf9M5hiqlhcLrsrkGAhopy0O7d3p0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.crl rsync://repo-rpki.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 09:21:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:71:9d:e9:ff:bb:d8:a1:92:9a:91:6d:8d:9d:30:cc:a0:03:7d:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50 Validity Not Before: Jun 4 02:07:47 2025 GMT Not After : Jun 7 09:21:47 2025 GMT Subject: CN=83036A5BF3D6AB8CFCD999D8EC318CBC76F4C7FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:c3:91:d8:3a:c4:cf:a0:61:f3:b3:e9:8a:e8: 0d:8c:07:80:6e:a0:14:ba:6c:40:73:4e:9e:7d:4f: 88:27:7b:c6:8c:cb:10:82:32:d8:ef:b0:bc:43:2f: 0a:92:98:83:83:e0:cb:f3:8d:ea:bf:21:e3:c1:5e: 10:9a:0b:e5:25:18:be:48:c7:a6:45:a6:70:5b:aa: 69:29:aa:57:ff:e9:51:a5:d3:20:dd:81:fd:b3:cb: 78:13:e3:8a:23:66:ae:18:c0:a5:5f:fd:c4:5a:b5: 61:e7:2f:0e:b5:3e:fb:43:bd:cd:9a:4f:16:fc:f3: da:23:74:62:dd:6f:a3:35:83:1f:f7:d9:88:13:84: c6:50:20:ef:62:1f:1b:4d:3a:9a:43:dd:05:4f:0c: 79:12:b6:11:a3:6d:37:1f:6b:ce:cc:68:94:d8:c2: 3b:9c:b0:85:9f:23:9a:57:dd:96:16:ef:7d:93:bc: a6:5f:89:e1:34:59:0b:58:83:ed:6f:9d:fa:da:3b: a8:fd:86:4e:7d:a2:41:b1:7c:d9:e8:a6:96:e5:6f: e9:02:78:3f:01:d5:54:03:0c:df:b6:be:07:f2:22: b7:8c:92:cf:ea:01:09:43:b7:02:5a:46:01:d1:f0: 07:55:18:af:fd:8c:43:f2:fc:97:c4:0c:9f:ce:ae: 09:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:03:6A:5B:F3:D6:AB:8C:FC:D9:99:D8:EC:31:8C:BC:76:F4:C7:FE X509v3 Authority Key Identifier: keyid:4B:E0:EB:AF:EF:1E:20:6C:AD:8B:4E:AD:6D:6A:08:D3:A8:C0:1B:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:ed:1d:7f:ea:01:22:f6:02:8b:57:e6:d3:87:70:0e:1e:a5: 7d:3d:b2:de:83:2a:3b:0d:d6:3a:f1:36:9e:4f:5e:62:4e:f0: 55:40:c4:d0:43:82:27:3c:07:e7:eb:b8:a8:25:75:6d:f9:78: 86:76:10:94:78:f1:13:e3:b3:5b:54:91:58:fa:2e:81:1c:88: 29:36:c3:ba:92:b0:d7:3a:9c:47:88:b7:ca:55:7f:cb:26:3d: 42:ef:12:88:87:72:4d:dc:0e:7f:35:af:3d:b7:7f:2e:ab:e6: 00:32:f2:df:df:5e:95:2a:75:0f:cd:62:f1:51:ae:c7:75:09: ea:7f:ed:35:12:4b:64:c6:71:c8:7d:56:3c:9f:01:52:b3:70: 1b:f0:b5:82:73:0c:4b:62:39:8e:67:8f:41:7d:57:63:d0:ce: 06:81:f6:85:ca:3e:81:2d:f1:97:62:12:b2:77:1d:e4:7b:1d: fc:5c:b8:2b:12:6f:d1:fc:18:ea:7c:e1:a8:22:38:b4:5e:84: aa:c6:9c:24:9a:64:1e:c4:df:96:4f:bd:fc:f0:6b:c0:4a:e7: 45:8c:55:fb:76:5c:9c:53:37:59:46:88:4f:9b:44:91:25:1f: db:76:8d:04:48:14:47:b8:e1:44:ef:1b:48:ba:10:29:85:bb: 99:53:a8:0f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf3Gd6f+72KGSmpFtjZ0wzKADfe4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEJFMEVCQUZFRjFFMjA2Q0FEOEI0RUFENkQ2QTA4RDNB OEMwMUI1MDAeFw0yNTA2MDQwMjA3NDdaFw0yNTA2MDcwOTIxNDdaMDMxMTAvBgNV BAMTKDgzMDM2QTVCRjNENkFCOENGQ0Q5OTlEOEVDMzE4Q0JDNzZGNEM3RkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkw5HYOsTPoGHzs+mK6A2MB4Bu oBS6bEBzTp59T4gne8aMyxCCMtjvsLxDLwqSmIOD4Mvzjeq/IePBXhCaC+UlGL5I x6ZFpnBbqmkpqlf/6VGl0yDdgf2zy3gT44ojZq4YwKVf/cRatWHnLw61PvtDvc2a Txb889ojdGLdb6M1gx/32YgThMZQIO9iHxtNOppD3QVPDHkSthGjbTcfa87MaJTY wjucsIWfI5pX3ZYW732TvKZfieE0WQtYg+1vnfraO6j9hk59okGxfNnoppblb+kC eD8B1VQDDN+2vgfyIreMks/qAQlDtwJaRgHR8AdVGK/9jEPy/JfEDJ/OrgkdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgwNqW/PWq4z82ZnY7DGMvHb0x/4wHwYDVR0j BBgwFoAUS+Drr+8eIGyti06tbWoI06jAG1AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OGE3ZjM1NS1mMjI1LTQ4ZjMtODdmOC0wYmZiMGM4ZTU4ZjAvMC80QkUwRUJBRkVG MUUyMDZDQUQ4QjRFQUQ2RDZBMDhEM0E4QzAxQjUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEJFMEVCQUZFRjFFMjA2Q0FEOEI0RUFENkQ2QTA4RDNBOEMw MUI1MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOThhN2YzNTUtZjIyNS00OGYzLTg3 ZjgtMGJmYjBjOGU1OGYwLzAvNEJFMEVCQUZFRjFFMjA2Q0FEOEI0RUFENkQ2QTA4 RDNBOEMwMUI1MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACftHX/qASL2AotX5tOHcA4epX09st6DKjsN 1jrxNp5PXmJO8FVAxNBDgic8B+fruKgldW35eIZ2EJR48RPjs1tUkVj6LoEciCk2 w7qSsNc6nEeIt8pVf8smPULvEoiHck3cDn81rz23fy6r5gAy8t/fXpUqdQ/NYvFR rsd1Cep/7TUSS2TGcch9VjyfAVKzcBvwtYJzDEtiOY5nj0F9V2PQzgaB9oXKPoEt 8ZdiErJ3HeR7HfxcuCsSb9H8GOp84agiOLRehKrGnCSaZB7E35ZPvfzwa8BK50WM Vft2XJxTN1lGiE+bRJElH9t2jQRIFEe44UTvG0i6ECmFu5lTqA8= -----END CERTIFICATE-----Generated at Thu Jun 5 19:39:40 2025 by rpki-client