$ rpki-client -vvf repo-rpki.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0/4617272EE875B55CD5F2A88330A95F6410A3EB1B.mft File: 4617272EE875B55CD5F2A88330A95F6410A3EB1B.mft (raw, json) Hash identifier: gW4NKjS0tGxRLXXgRIm7vjX2536NG/935aAfh2Stvbw= Subject key identifier: ED:42:82:30:2E:44:70:38:03:F4:DC:78:07:E5:B0:BC:F7:F4:BE:B4 Authority key identifier: 46:17:27:2E:E8:75:B5:5C:D5:F2:A8:83:30:A9:5F:64:10:A3:EB:1B Certificate issuer: /CN=4617272EE875B55CD5F2A88330A95F6410A3EB1B Certificate serial: 64ECAF7C05EFD2452F0045C5E40A870E7DC88679 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4617272EE875B55CD5F2A88330A95F6410A3EB1B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0/4617272EE875B55CD5F2A88330A95F6410A3EB1B.mft Manifest number: A4 Signing time: Thu 13 Mar 2025 01:21:07 +0000 Manifest this update: Thu 13 Mar 2025 01:16:07 +0000 Manifest next update: Sun 16 Mar 2025 08:35:07 +0000 Files and hashes: 1: 3135372e31352e34352e302f32342d3234203d3e20313532333931.roa (hash: 2CY8OOUSlhDxwOprH4RWK6WUcOME935meBmsXq8UBEQ=) 2: 4617272EE875B55CD5F2A88330A95F6410A3EB1B.crl (hash: ANmCC8Pn1HZI3nCDa7uePsghkhoZMi2fypnZHIT83Tc=) 3: 3135372e31352e34342e302f32332d3233203d3e20313532333931.roa (hash: CWrSRGIb9DWeCqXVEcCNk243mh86Y3a1VFur2jkpr3Y=) 4: 3135372e31352e34342e302f32342d3234203d3e20313532333931.roa (hash: GmvMNkypXN/dIsdT8yqrh6k/wsMAgACMxsXszxhLEFE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0/4617272EE875B55CD5F2A88330A95F6410A3EB1B.crl rsync://repo-rpki.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0/4617272EE875B55CD5F2A88330A95F6410A3EB1B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4617272EE875B55CD5F2A88330A95F6410A3EB1B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 15 Mar 2025 11:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:ec:af:7c:05:ef:d2:45:2f:00:45:c5:e4:0a:87:0e:7d:c8:86:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4617272EE875B55CD5F2A88330A95F6410A3EB1B Validity Not Before: Mar 13 01:16:07 2025 GMT Not After : Mar 16 08:35:07 2025 GMT Subject: CN=ED4282302E44703803F4DC7807E5B0BCF7F4BEB4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:83:dd:6c:f9:04:7a:7f:b4:c5:41:3a:35:d3: 67:5f:4f:fc:45:33:1d:79:d1:8f:9e:22:9e:f0:3e: 43:c8:df:b3:14:8c:4d:58:34:82:2a:6c:91:6e:b4: 5f:4a:13:9b:3a:0e:5b:c8:e0:c3:db:17:94:3a:2c: 76:fd:f1:17:08:f1:be:2f:c8:de:01:14:e2:48:83: ae:05:e5:f0:6a:9a:37:85:2d:e6:db:a8:60:6d:3e: c4:2e:d7:9c:29:cb:3f:6a:48:93:a5:5c:b6:1e:56: 40:6c:17:73:99:78:0a:d9:59:ae:9f:d1:7f:45:b1: 40:d8:01:7f:98:5b:1c:6a:09:69:4d:5b:77:96:0a: 68:bf:24:cf:97:f2:ce:55:b9:43:0e:d3:17:f0:c5: c9:ac:7b:58:70:b8:4b:c3:94:75:eb:6b:aa:1c:80: 86:e6:70:c8:9b:38:86:ab:c0:5b:e7:8c:26:22:46: 8a:2f:05:2f:f8:7b:ab:b2:f4:a0:27:c4:af:3a:98: 56:4c:c6:a9:b1:01:3c:ee:9b:84:4b:4d:54:d6:43: ad:38:4c:4e:49:9d:bb:3a:a0:27:a6:b7:d0:a9:a3: ff:ef:b4:24:97:4d:af:12:8b:10:4a:6d:19:4b:af: 69:1b:bf:6d:16:79:f5:6e:03:57:d5:c6:a7:9d:84: 38:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:42:82:30:2E:44:70:38:03:F4:DC:78:07:E5:B0:BC:F7:F4:BE:B4 X509v3 Authority Key Identifier: keyid:46:17:27:2E:E8:75:B5:5C:D5:F2:A8:83:30:A9:5F:64:10:A3:EB:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0/4617272EE875B55CD5F2A88330A95F6410A3EB1B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4617272EE875B55CD5F2A88330A95F6410A3EB1B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0/4617272EE875B55CD5F2A88330A95F6410A3EB1B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:95:7a:56:d9:05:0b:71:63:f8:c0:1a:c3:66:f0:54:bd:78: 09:84:c1:c3:73:74:a4:f2:f9:52:4e:be:04:49:26:ca:1c:c6: 17:2a:fc:07:62:9a:1d:19:f7:a0:d1:20:fb:25:81:c0:28:73: 96:79:4b:f0:fe:28:28:77:ec:a6:4f:0a:92:16:28:42:c4:c9: 9d:bc:9c:46:4f:37:5c:ec:28:8c:20:77:7d:20:2e:9a:4a:3d: 11:1a:5c:f3:a0:63:1c:a8:0a:77:23:cc:dd:27:c4:06:00:19: 0c:51:b9:cd:1c:52:a0:3a:93:f5:1e:85:f3:37:b1:4c:7a:f5: 64:7c:3e:7e:ff:11:01:1b:79:91:03:41:18:33:32:c7:a9:9b: 34:25:4b:c6:8d:72:98:be:cc:28:bc:25:2f:72:cf:c5:67:43: 1a:cf:d7:4a:a8:f4:d8:53:6d:4c:9f:fc:7d:6a:93:e9:32:0a: 3e:5c:30:23:04:43:55:27:47:1a:e1:6c:7d:46:47:65:34:4d: 99:80:5a:01:c9:67:96:cb:03:51:c0:89:78:03:a7:1f:36:94: 2e:ba:d6:55:0f:79:12:25:d8:e9:47:57:1b:f6:3d:57:01:c2: 3f:70:bd:9d:ad:28:56:9c:ce:c9:c1:78:ff:7e:87:39:19:f2: 63:7d:b1:72 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZOyvfAXv0kUvAEXF5AqHDn3IhnkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDYxNzI3MkVFODc1QjU1Q0Q1RjJBODgzMzBBOTVGNjQx MEEzRUIxQjAeFw0yNTAzMTMwMTE2MDdaFw0yNTAzMTYwODM1MDdaMDMxMTAvBgNV BAMTKEVENDI4MjMwMkU0NDcwMzgwM0Y0REM3ODA3RTVCMEJDRjdGNEJFQjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDg91s+QR6f7TFQTo102dfT/xF Mx150Y+eIp7wPkPI37MUjE1YNIIqbJFutF9KE5s6DlvI4MPbF5Q6LHb98RcI8b4v yN4BFOJIg64F5fBqmjeFLebbqGBtPsQu15wpyz9qSJOlXLYeVkBsF3OZeArZWa6f 0X9FsUDYAX+YWxxqCWlNW3eWCmi/JM+X8s5VuUMO0xfwxcmse1hwuEvDlHXra6oc gIbmcMibOIarwFvnjCYiRoovBS/4e6uy9KAnxK86mFZMxqmxATzum4RLTVTWQ604 TE5Jnbs6oCemt9Cpo//vtCSXTa8SixBKbRlLr2kbv20WefVuA1fVxqedhDhHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7UKCMC5EcDgD9Nx4B+WwvPf0vrQwHwYDVR0j BBgwFoAURhcnLuh1tVzV8qiDMKlfZBCj6xswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZmRhZjA2YS1mNjI0LTQyY2YtYmIxOS1iNmJiZjkzMWFhYzgvMC80NjE3MjcyRUU4 NzVCNTVDRDVGMkE4ODMzMEE5NUY2NDEwQTNFQjFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNDYxNzI3MkVFODc1QjU1Q0Q1RjJBODgzMzBBOTVGNjQxMEEz RUIxQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWZkYWYwNmEtZjYyNC00MmNmLWJi MTktYjZiYmY5MzFhYWM4LzAvNDYxNzI3MkVFODc1QjU1Q0Q1RjJBODgzMzBBOTVG NjQxMEEzRUIxQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKOVelbZBQtxY/jAGsNm8FS9eAmEwcNzdKTy +VJOvgRJJsocxhcq/Adimh0Z96DRIPslgcAoc5Z5S/D+KCh37KZPCpIWKELEyZ28 nEZPN1zsKIwgd30gLppKPREaXPOgYxyoCncjzN0nxAYAGQxRuc0cUqA6k/UehfM3 sUx69WR8Pn7/EQEbeZEDQRgzMsepmzQlS8aNcpi+zCi8JS9yz8VnQxrP10qo9NhT bUyf/H1qk+kyCj5cMCMEQ1UnRxrhbH1GR2U0TZmAWgHJZ5bLA1HAiXgDpx82lC66 1lUPeRIl2OlHVxv2PVcBwj9wvZ2tKFaczsnBeP9+hzkZ8mN9sXI= -----END CERTIFICATE-----Generated at Thu Mar 13 21:32:58 2025 by rpki-client