$ rpki-client -vvf repo-rpki.idnic.net/repo/9a2bfe9a-3823-44e9-97c0-2191a56bafd3/0/4F022459BA46CF30700E070671C752B44729E249.mft File: 4F022459BA46CF30700E070671C752B44729E249.mft (raw, json) Hash identifier: HwrEKzIs+Xc/QDGZGL9P9smXTvE/sEL8lzZn1mpH74E= Subject key identifier: 8C:50:FB:84:8F:97:FA:E6:07:97:6F:D4:A3:53:74:59:C3:27:B7:29 Authority key identifier: 4F:02:24:59:BA:46:CF:30:70:0E:07:06:71:C7:52:B4:47:29:E2:49 Certificate issuer: /CN=4F022459BA46CF30700E070671C752B44729E249 Certificate serial: 5950515B77849E61C7DF82A455575238B3421E53 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F022459BA46CF30700E070671C752B44729E249.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9a2bfe9a-3823-44e9-97c0-2191a56bafd3/0/4F022459BA46CF30700E070671C752B44729E249.mft Manifest number: 0164 Signing time: Thu 03 Apr 2025 16:02:08 +0000 Manifest this update: Thu 03 Apr 2025 15:57:08 +0000 Manifest next update: Sun 06 Apr 2025 23:01:08 +0000 Files and hashes: 1: 4F022459BA46CF30700E070671C752B44729E249.crl (hash: YBjoVSFtp3S2FeshK+sIZgFWsh9yheLVDsb0AwTG9ms=) 2: 3130332e36312e3233352e302f32342d3234203d3e20313530353130.roa (hash: OWWwKr6VgMTRSl2gHvmJwedkDbcvu1lGUMF7l6U0D14=) 3: 3130332e36312e3233342e302f32342d3234203d3e20313530353130.roa (hash: VvIxYiO1vpW4N2M0c206efZBd+dmDTRrTwPYKqia/UQ=) 4: 3130332e36312e3233342e302f32332d3233203d3e20313530353130.roa (hash: eReb0WjJwBofXwNbDwmRqsCz1oLf4D/ET0XbS0nqqnk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9a2bfe9a-3823-44e9-97c0-2191a56bafd3/0/4F022459BA46CF30700E070671C752B44729E249.crl rsync://repo-rpki.idnic.net/repo/9a2bfe9a-3823-44e9-97c0-2191a56bafd3/0/4F022459BA46CF30700E070671C752B44729E249.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F022459BA46CF30700E070671C752B44729E249.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Apr 2025 23:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:50:51:5b:77:84:9e:61:c7:df:82:a4:55:57:52:38:b3:42:1e:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4F022459BA46CF30700E070671C752B44729E249 Validity Not Before: Apr 3 15:57:08 2025 GMT Not After : Apr 6 23:01:08 2025 GMT Subject: CN=8C50FB848F97FAE607976FD4A3537459C327B729 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:0d:68:d3:35:30:68:31:dc:7d:99:9f:6d:3b: f0:31:8f:19:10:13:ac:66:db:e4:df:1a:3c:d3:f5: 9e:c6:bf:a3:e5:f1:0f:23:bc:82:23:55:9d:0f:71: 81:41:25:a7:29:26:49:1b:2f:dd:d6:7a:b1:d7:df: 69:8f:d4:cc:4b:d9:f5:d4:68:18:18:d2:20:03:41: c5:15:04:ae:80:82:3b:54:eb:01:64:37:f1:f0:1c: e4:1a:d7:01:0d:bf:d9:ea:5c:42:19:5a:0c:3a:b9: d0:e7:d3:db:d3:c6:c5:bc:c1:5a:33:1d:60:e3:5d: e6:d8:48:80:76:be:f8:85:0f:09:59:dd:57:2d:df: 5b:0b:50:65:30:44:43:0a:8c:8f:6c:24:a4:c1:9d: d2:e8:5b:03:dd:db:83:88:21:ed:d2:8b:4f:9f:65: b4:75:8e:f3:cf:0e:12:b4:c0:df:06:6d:73:ea:16: 76:54:ae:c1:7f:0f:7a:6f:be:5f:d2:cc:6c:e3:d9: 2a:7e:1f:80:3c:da:72:64:b0:63:54:32:b8:65:6a: a7:ca:dc:cd:81:b0:76:45:17:05:23:0b:eb:55:d5: 2d:d5:01:ed:9c:b7:83:c9:20:90:02:71:19:c1:ca: 16:75:b8:8a:2b:c1:8f:98:d3:46:79:73:b6:44:9d: cb:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:50:FB:84:8F:97:FA:E6:07:97:6F:D4:A3:53:74:59:C3:27:B7:29 X509v3 Authority Key Identifier: keyid:4F:02:24:59:BA:46:CF:30:70:0E:07:06:71:C7:52:B4:47:29:E2:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9a2bfe9a-3823-44e9-97c0-2191a56bafd3/0/4F022459BA46CF30700E070671C752B44729E249.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F022459BA46CF30700E070671C752B44729E249.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9a2bfe9a-3823-44e9-97c0-2191a56bafd3/0/4F022459BA46CF30700E070671C752B44729E249.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:02:63:f1:5a:58:08:81:23:b7:72:35:8b:f0:c5:73:8c:d0: bb:f1:0c:7f:be:f2:25:17:ce:cc:db:a7:b6:6a:d7:85:a5:bc: 7b:f5:98:f1:e4:94:b8:39:2b:1d:5f:80:54:fc:36:61:8a:18: 5f:b0:73:e8:ec:21:2f:0a:8b:7e:db:99:bc:34:73:6c:9c:29: d8:ac:6d:7c:8c:92:89:c9:04:59:db:4a:e0:80:b8:77:0e:98: 5d:12:f6:74:1a:c7:32:22:6b:c6:46:5a:f2:72:5d:e0:71:aa: d6:6a:63:d7:51:32:96:3a:b7:8f:06:ff:3e:db:da:bb:71:c9: 5d:23:7c:99:c0:2d:09:13:3c:5c:6d:85:82:5b:da:cd:c2:18: 85:00:fa:1b:e4:28:b3:23:f6:ba:7c:0a:4c:7f:61:34:b4:09: 03:dd:ff:d2:64:3d:94:38:81:9d:6c:7b:4e:10:0f:00:15:80: 8e:8f:64:14:44:80:bc:75:12:06:9e:c7:18:f3:72:a3:9f:fd: 78:8e:e6:38:00:9e:07:a8:68:b6:b9:94:65:3e:85:a1:b9:cc: ff:d5:25:a8:29:b5:09:b3:12:43:8c:f9:48:ff:64:c8:f3:36: ae:d8:51:b7:7b:13:d7:99:db:6e:dc:d9:e2:68:41:ef:28:58: c5:2d:f9:3b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWVBRW3eEnmHH34KkVVdSOLNCHlMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEYwMjI0NTlCQTQ2Q0YzMDcwMEUwNzA2NzFDNzUyQjQ0 NzI5RTI0OTAeFw0yNTA0MDMxNTU3MDhaFw0yNTA0MDYyMzAxMDhaMDMxMTAvBgNV BAMTKDhDNTBGQjg0OEY5N0ZBRTYwNzk3NkZENEEzNTM3NDU5QzMyN0I3MjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+DWjTNTBoMdx9mZ9tO/AxjxkQ E6xm2+TfGjzT9Z7Gv6Pl8Q8jvIIjVZ0PcYFBJacpJkkbL93WerHX32mP1MxL2fXU aBgY0iADQcUVBK6AgjtU6wFkN/HwHOQa1wENv9nqXEIZWgw6udDn09vTxsW8wVoz HWDjXebYSIB2vviFDwlZ3Vct31sLUGUwREMKjI9sJKTBndLoWwPd24OIIe3Si0+f ZbR1jvPPDhK0wN8GbXPqFnZUrsF/D3pvvl/SzGzj2Sp+H4A82nJksGNUMrhlaqfK 3M2BsHZFFwUjC+tV1S3VAe2ct4PJIJACcRnByhZ1uIorwY+Y00Z5c7ZEncsjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjFD7hI+X+uYHl2/Uo1N0WcMntykwHwYDVR0j BBgwFoAUTwIkWbpGzzBwDgcGccdStEcp4kkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YTJiZmU5YS0zODIzLTQ0ZTktOTdjMC0yMTkxYTU2YmFmZDMvMC80RjAyMjQ1OUJB NDZDRjMwNzAwRTA3MDY3MUM3NTJCNDQ3MjlFMjQ5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEYwMjI0NTlCQTQ2Q0YzMDcwMEUwNzA2NzFDNzUyQjQ0NzI5 RTI0OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWEyYmZlOWEtMzgyMy00NGU5LTk3 YzAtMjE5MWE1NmJhZmQzLzAvNEYwMjI0NTlCQTQ2Q0YzMDcwMEUwNzA2NzFDNzUy QjQ0NzI5RTI0OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHwCY/FaWAiBI7dyNYvwxXOM0LvxDH++8iUX zszbp7Zq14WlvHv1mPHklLg5Kx1fgFT8NmGKGF+wc+jsIS8Ki37bmbw0c2ycKdis bXyMkonJBFnbSuCAuHcOmF0S9nQaxzIia8ZGWvJyXeBxqtZqY9dRMpY6t48G/z7b 2rtxyV0jfJnALQkTPFxthYJb2s3CGIUA+hvkKLMj9rp8Ckx/YTS0CQPd/9JkPZQ4 gZ1se04QDwAVgI6PZBREgLx1EgaexxjzcqOf/XiO5jgAngeoaLa5lGU+haG5zP/V JagptQmzEkOM+Uj/ZMjzNq7YUbd7E9eZ227c2eJoQe8oWMUt+Ts= -----END CERTIFICATE-----Generated at Sat Apr 5 21:19:13 2025 by rpki-client