$ rpki-client -vvf repo-rpki.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/4CDDA0597DCBCA2C92A176D00847EB50F6122354.mft File: 4CDDA0597DCBCA2C92A176D00847EB50F6122354.mft (raw, json) Hash identifier: aynFKrCPy7BqcsDYSEGk2F8KDc/ACDbB86pJHSlMxtk= Subject key identifier: A9:80:10:51:D8:44:25:75:38:2B:B1:FF:B3:15:C2:F6:60:5A:C0:40 Authority key identifier: 4C:DD:A0:59:7D:CB:CA:2C:92:A1:76:D0:08:47:EB:50:F6:12:23:54 Certificate issuer: /CN=4CDDA0597DCBCA2C92A176D00847EB50F6122354 Certificate serial: 219D7D20553CABB7067A85DC927B5A2EF66E505F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4CDDA0597DCBCA2C92A176D00847EB50F6122354.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/4CDDA0597DCBCA2C92A176D00847EB50F6122354.mft Manifest number: A7 Signing time: Thu 05 Jun 2025 22:20:37 +0000 Manifest this update: Thu 05 Jun 2025 22:15:37 +0000 Manifest next update: Mon 09 Jun 2025 03:14:37 +0000 Files and hashes: 1: 3130332e3234342e3130352e302f32342d3234203d3e20313531353534.roa (hash: A1hnHJuSS/CjegeZCbVDBe+9fc3PzAjrhUV0+3BfwCE=) 2: 3130332e3234342e3130342e302f32342d3234203d3e20313531353534.roa (hash: yG4+2M7fws6C52HoixX4PcNGnAAet0z0xRyi0LE26aU=) 3: 4CDDA0597DCBCA2C92A176D00847EB50F6122354.crl (hash: U5hY6hhtPRgK+poGWQreV2B6v/Lc7SZGT93KfxDE+CM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/4CDDA0597DCBCA2C92A176D00847EB50F6122354.crl rsync://repo-rpki.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/4CDDA0597DCBCA2C92A176D00847EB50F6122354.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4CDDA0597DCBCA2C92A176D00847EB50F6122354.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 03:14:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:9d:7d:20:55:3c:ab:b7:06:7a:85:dc:92:7b:5a:2e:f6:6e:50:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4CDDA0597DCBCA2C92A176D00847EB50F6122354 Validity Not Before: Jun 5 22:15:37 2025 GMT Not After : Jun 9 03:14:37 2025 GMT Subject: CN=A9801051D8442575382BB1FFB315C2F6605AC040 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:03:a6:c0:77:eb:8f:34:1d:c9:1d:cd:c2:b3: e3:0d:30:70:c1:aa:0d:2c:f0:db:33:63:d0:9a:0d: 17:c6:d5:aa:a9:ea:2d:04:de:31:23:cd:12:28:ab: 4c:a1:c0:dd:1f:fd:ce:1f:70:be:ab:32:d8:eb:32: 30:8d:07:37:2c:3b:ae:ca:cc:38:7a:81:5d:2a:6d: cf:a1:eb:df:96:c1:fd:8f:af:f9:75:96:86:4f:f8: 39:34:a7:7b:73:41:b4:8b:35:8c:41:90:6a:b9:b5: f3:0b:ce:43:bd:35:b4:33:82:99:14:70:3a:7f:5c: e9:01:97:d4:44:bd:b2:8a:48:1f:99:b5:16:8c:30: 4b:eb:5b:ba:24:e9:e5:12:d0:36:db:af:0f:6e:51: 75:e0:ba:cf:7d:53:3e:de:7b:6b:e3:52:c8:e3:3e: 0e:63:28:76:53:99:ef:fb:1e:d5:a5:24:a4:2f:1b: 93:5c:64:e1:51:ec:04:46:d0:3d:2f:a1:6f:50:db: 93:26:20:d0:bf:4f:1b:72:5e:ae:5b:61:5b:76:97: 4c:4a:5f:da:9d:7c:c3:b8:d9:5d:29:6d:66:a5:b6: af:e0:21:8b:b8:26:2f:82:de:e4:dd:62:2f:5e:ac: 87:8d:7d:5e:b1:6a:51:cb:ed:06:b0:9c:08:e9:df: bc:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:80:10:51:D8:44:25:75:38:2B:B1:FF:B3:15:C2:F6:60:5A:C0:40 X509v3 Authority Key Identifier: keyid:4C:DD:A0:59:7D:CB:CA:2C:92:A1:76:D0:08:47:EB:50:F6:12:23:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/4CDDA0597DCBCA2C92A176D00847EB50F6122354.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4CDDA0597DCBCA2C92A176D00847EB50F6122354.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/4CDDA0597DCBCA2C92A176D00847EB50F6122354.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:17:c5:a0:2a:f6:b8:7f:d4:b0:66:86:72:e7:df:06:e4:26: 59:ca:cc:2c:0d:fd:20:bc:2c:eb:bc:49:e2:9c:44:20:75:e2: cc:07:fc:e8:ac:fe:7b:1f:30:6c:28:66:53:ee:f9:d2:d2:22: 8c:bd:9c:ba:41:9b:78:14:f4:43:fa:ff:05:cf:a8:45:62:3d: 90:3b:6e:81:b4:a3:11:29:fc:a7:62:5c:64:aa:4f:86:9c:35: e5:53:a4:58:9d:b7:b0:2d:07:4d:5e:08:18:a4:73:3d:d8:73: 74:4a:02:fc:c4:13:70:71:e0:2c:86:6d:1b:4d:74:89:94:3c: 16:85:4f:8a:e2:4a:73:63:45:cb:c2:19:66:84:fb:61:8b:80: c8:16:82:29:84:6e:c6:57:f6:81:5b:f4:67:d2:a2:b4:cd:7f: 34:86:7d:ce:2e:c8:1e:ff:27:cb:f8:02:07:6b:ca:e9:f8:0b: 65:8d:62:7d:0b:a3:3f:7f:2d:8e:2e:9b:15:94:7d:5e:32:cf: 31:2d:19:df:4c:84:19:bf:b5:20:79:71:30:5b:35:a0:20:5d: ce:44:16:c9:83:ec:30:16:44:93:ac:0c:58:cb:52:5a:e3:36: 20:f4:ed:96:03:90:0b:14:12:5f:fb:1a:4b:8b:a2:66:08:b8: f5:4a:4e:46 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIZ19IFU8q7cGeoXckntaLvZuUF8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNENEREEwNTk3RENCQ0EyQzkyQTE3NkQwMDg0N0VCNTBG NjEyMjM1NDAeFw0yNTA2MDUyMjE1MzdaFw0yNTA2MDkwMzE0MzdaMDMxMTAvBgNV BAMTKEE5ODAxMDUxRDg0NDI1NzUzODJCQjFGRkIzMTVDMkY2NjA1QUMwNDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2A6bAd+uPNB3JHc3Cs+MNMHDB qg0s8NszY9CaDRfG1aqp6i0E3jEjzRIoq0yhwN0f/c4fcL6rMtjrMjCNBzcsO67K zDh6gV0qbc+h69+Wwf2Pr/l1loZP+Dk0p3tzQbSLNYxBkGq5tfMLzkO9NbQzgpkU cDp/XOkBl9REvbKKSB+ZtRaMMEvrW7ok6eUS0Dbbrw9uUXXgus99Uz7ee2vjUsjj Pg5jKHZTme/7HtWlJKQvG5NcZOFR7ARG0D0voW9Q25MmINC/TxtyXq5bYVt2l0xK X9qdfMO42V0pbWaltq/gIYu4Ji+C3uTdYi9erIeNfV6xalHL7QawnAjp37yDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqYAQUdhEJXU4K7H/sxXC9mBawEAwHwYDVR0j BBgwFoAUTN2gWX3LyiySoXbQCEfrUPYSI1QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZDJmYTUxZS0zZmQ0LTQ1MjAtYjM3NS0wOWVlZjVlMGU1MTAvMC80Q0REQTA1OTdE Q0JDQTJDOTJBMTc2RDAwODQ3RUI1MEY2MTIyMzU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNENEREEwNTk3RENCQ0EyQzkyQTE3NkQwMDg0N0VCNTBGNjEy MjM1NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWQyZmE1MWUtM2ZkNC00NTIwLWIz NzUtMDllZWY1ZTBlNTEwLzAvNENEREEwNTk3RENCQ0EyQzkyQTE3NkQwMDg0N0VC NTBGNjEyMjM1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE8XxaAq9rh/1LBmhnLn3wbkJlnKzCwN/SC8 LOu8SeKcRCB14swH/Ois/nsfMGwoZlPu+dLSIoy9nLpBm3gU9EP6/wXPqEViPZA7 boG0oxEp/KdiXGSqT4acNeVTpFidt7AtB01eCBikcz3Yc3RKAvzEE3Bx4CyGbRtN dImUPBaFT4riSnNjRcvCGWaE+2GLgMgWgimEbsZX9oFb9GfSorTNfzSGfc4uyB7/ J8v4Agdryun4C2WNYn0Loz9/LY4umxWUfV4yzzEtGd9MhBm/tSB5cTBbNaAgXc5E FsmD7DAWRJOsDFjLUlrjNiD07ZYDkAsUEl/7GkuLomYIuPVKTkY= -----END CERTIFICATE-----Generated at Sat Jun 7 22:42:25 2025 by rpki-client