$ rpki-client -vvf repo-rpki.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/4CDDA0597DCBCA2C92A176D00847EB50F6122354.mft File: 4CDDA0597DCBCA2C92A176D00847EB50F6122354.mft (raw, json) Hash identifier: Xjmzfw86z3/gjJwi908X67Q3VwAhXM4xet1DjY3w/SI= Subject key identifier: 48:B2:FB:28:A4:C5:27:3D:08:8F:0A:D3:87:90:63:4E:25:32:D4:66 Authority key identifier: 4C:DD:A0:59:7D:CB:CA:2C:92:A1:76:D0:08:47:EB:50:F6:12:23:54 Certificate issuer: /CN=4CDDA0597DCBCA2C92A176D00847EB50F6122354 Certificate serial: 1364AFBD81A31717E9C41468F8BA3638699E9872 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4CDDA0597DCBCA2C92A176D00847EB50F6122354.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/4CDDA0597DCBCA2C92A176D00847EB50F6122354.mft Manifest number: 91 Signing time: Fri 18 Apr 2025 02:00:36 +0000 Manifest this update: Fri 18 Apr 2025 01:55:36 +0000 Manifest next update: Mon 21 Apr 2025 05:16:36 +0000 Files and hashes: 1: 4CDDA0597DCBCA2C92A176D00847EB50F6122354.crl (hash: dOWHfoZB/Ogn5JurIGH1W/tfvSxMhQ4odzbG57hkUVg=) 2: 3130332e3234342e3130342e302f32342d3234203d3e20313531353534.roa (hash: yG4+2M7fws6C52HoixX4PcNGnAAet0z0xRyi0LE26aU=) 3: 3130332e3234342e3130352e302f32342d3234203d3e20313531353534.roa (hash: A1hnHJuSS/CjegeZCbVDBe+9fc3PzAjrhUV0+3BfwCE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/4CDDA0597DCBCA2C92A176D00847EB50F6122354.crl rsync://repo-rpki.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/4CDDA0597DCBCA2C92A176D00847EB50F6122354.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4CDDA0597DCBCA2C92A176D00847EB50F6122354.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Apr 2025 05:16:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:64:af:bd:81:a3:17:17:e9:c4:14:68:f8:ba:36:38:69:9e:98:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4CDDA0597DCBCA2C92A176D00847EB50F6122354 Validity Not Before: Apr 18 01:55:36 2025 GMT Not After : Apr 21 05:16:36 2025 GMT Subject: CN=48B2FB28A4C5273D088F0AD38790634E2532D466 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:6a:ac:d5:b7:86:c8:b9:f4:3c:6f:da:b9:4b: 9b:8d:08:d6:63:ed:72:f9:91:85:de:c5:80:b7:13: 84:69:9c:0f:27:fe:9a:00:ad:44:5a:ca:24:ca:4f: 98:b0:20:da:fd:39:30:f0:b6:d5:51:5f:8c:91:ab: a4:e8:7c:d0:a9:ec:2a:0c:18:12:16:58:39:a5:ca: 96:dd:0e:70:bf:7a:44:7c:3a:16:9f:ed:6e:83:f1: ac:73:4c:ec:94:a6:ca:e8:c9:c5:82:e3:c4:65:96: db:a2:13:83:30:1f:dd:ac:64:6d:80:fd:ad:8b:a9: 00:e9:59:92:98:3a:2b:a5:b7:97:97:2c:c6:c7:41: 85:d8:d8:79:f8:36:4b:bf:99:0e:fa:10:9c:3b:46: 77:81:58:5e:02:d1:fa:b8:ff:1f:86:26:bf:8c:f9: ec:1b:1b:55:e3:10:3f:a3:9b:99:09:ef:2f:e9:c9: d7:5c:08:64:c8:c0:97:1f:94:75:84:5c:1b:8a:e3: d6:63:28:d4:69:5c:4f:0f:b7:7d:c8:df:96:6e:c5: f2:dd:39:21:dc:8d:8e:e2:e0:70:7e:61:09:47:d9: 0b:73:0b:19:f5:14:e2:b2:d4:a8:fa:d5:26:3d:4a: 1f:0b:b0:89:63:98:28:28:6d:52:bb:ef:be:e1:e5: 3e:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:B2:FB:28:A4:C5:27:3D:08:8F:0A:D3:87:90:63:4E:25:32:D4:66 X509v3 Authority Key Identifier: keyid:4C:DD:A0:59:7D:CB:CA:2C:92:A1:76:D0:08:47:EB:50:F6:12:23:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/4CDDA0597DCBCA2C92A176D00847EB50F6122354.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4CDDA0597DCBCA2C92A176D00847EB50F6122354.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/4CDDA0597DCBCA2C92A176D00847EB50F6122354.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:2c:63:87:b6:46:4e:dd:82:c2:b4:16:a8:ad:f8:87:40:59: 2b:8e:9d:2f:09:72:a2:3c:a8:49:1a:31:b7:16:b5:61:4e:ef: 76:64:21:ea:fc:0e:32:30:7c:68:b7:14:b1:a5:bd:14:73:ac: d9:f9:bd:5f:ce:f1:90:08:f1:4a:cc:ff:91:b9:c7:c7:62:67: 78:30:be:eb:73:c4:f8:ef:51:e4:21:44:45:2b:06:2c:38:4b: 28:13:c6:62:22:e7:b1:d5:f9:f1:32:62:c1:d3:67:54:9b:f0: be:dd:8d:37:27:7d:2d:cb:6b:74:fd:a1:de:ec:03:37:54:7b: d5:f4:68:14:e1:68:19:af:9b:eb:cb:aa:34:0b:9c:c3:41:25: 96:10:a6:ad:f4:1f:21:b7:17:e3:83:cd:93:7d:de:0f:df:20: b3:ae:5f:e8:25:f0:cf:ee:99:5f:de:83:c1:3a:c3:4f:18:15: 30:ec:bc:64:ad:f5:5e:1e:f4:b1:df:de:86:71:ba:f8:2d:39: 17:4e:c4:57:a1:75:6d:fe:e9:b8:72:bc:26:6d:f6:e8:92:ba: 58:ff:68:78:73:cd:b2:b7:e9:47:9c:ed:c6:6a:31:63:ed:45: 2a:73:08:f7:c9:1d:c0:26:db:5c:7c:be:7b:ce:e0:8d:b5:44: 88:d2:fc:f9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE2SvvYGjFxfpxBRo+Lo2OGmemHIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNENEREEwNTk3RENCQ0EyQzkyQTE3NkQwMDg0N0VCNTBG NjEyMjM1NDAeFw0yNTA0MTgwMTU1MzZaFw0yNTA0MjEwNTE2MzZaMDMxMTAvBgNV BAMTKDQ4QjJGQjI4QTRDNTI3M0QwODhGMEFEMzg3OTA2MzRFMjUzMkQ0NjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6aqzVt4bIufQ8b9q5S5uNCNZj 7XL5kYXexYC3E4RpnA8n/poArURayiTKT5iwINr9OTDwttVRX4yRq6TofNCp7CoM GBIWWDmlypbdDnC/ekR8Ohaf7W6D8axzTOyUpsroycWC48RlltuiE4MwH92sZG2A /a2LqQDpWZKYOiult5eXLMbHQYXY2Hn4Nku/mQ76EJw7RneBWF4C0fq4/x+GJr+M +ewbG1XjED+jm5kJ7y/pyddcCGTIwJcflHWEXBuK49ZjKNRpXE8Pt33I35ZuxfLd OSHcjY7i4HB+YQlH2QtzCxn1FOKy1Kj61SY9Sh8LsIljmCgobVK7777h5T43AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSLL7KKTFJz0IjwrTh5BjTiUy1GYwHwYDVR0j BBgwFoAUTN2gWX3LyiySoXbQCEfrUPYSI1QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZDJmYTUxZS0zZmQ0LTQ1MjAtYjM3NS0wOWVlZjVlMGU1MTAvMC80Q0REQTA1OTdE Q0JDQTJDOTJBMTc2RDAwODQ3RUI1MEY2MTIyMzU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNENEREEwNTk3RENCQ0EyQzkyQTE3NkQwMDg0N0VCNTBGNjEy MjM1NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWQyZmE1MWUtM2ZkNC00NTIwLWIz NzUtMDllZWY1ZTBlNTEwLzAvNENEREEwNTk3RENCQ0EyQzkyQTE3NkQwMDg0N0VC NTBGNjEyMjM1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADwsY4e2Rk7dgsK0Fqit+IdAWSuOnS8JcqI8 qEkaMbcWtWFO73ZkIer8DjIwfGi3FLGlvRRzrNn5vV/O8ZAI8UrM/5G5x8diZ3gw vutzxPjvUeQhREUrBiw4SygTxmIi57HV+fEyYsHTZ1Sb8L7djTcnfS3La3T9od7s AzdUe9X0aBThaBmvm+vLqjQLnMNBJZYQpq30HyG3F+ODzZN93g/fILOuX+gl8M/u mV/eg8E6w08YFTDsvGSt9V4e9LHf3oZxuvgtORdOxFehdW3+6bhyvCZt9uiSulj/ aHhzzbK36Uec7cZqMWPtRSpzCPfJHcAm21x8vnvO4I21RIjS/Pk= -----END CERTIFICATE-----Generated at Sun Apr 20 04:22:56 2025 by rpki-client