$ rpki-client -vvf repo-rpki.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/4DF415D2DB760C39855B3F3D9CF3CE441A783E36.mft File: 4DF415D2DB760C39855B3F3D9CF3CE441A783E36.mft (raw, json) Hash identifier: 3PVVe3VI0PmZ1bWW3b5ze+1wXOZmqsoA+9xBACKUBqk= Subject key identifier: 41:57:51:0C:40:45:EE:44:81:C9:93:2C:DE:6B:D7:4D:67:C5:70:FF Authority key identifier: 4D:F4:15:D2:DB:76:0C:39:85:5B:3F:3D:9C:F3:CE:44:1A:78:3E:36 Certificate issuer: /CN=4DF415D2DB760C39855B3F3D9CF3CE441A783E36 Certificate serial: 71CC8FF203BB03FEB34FFB9B01EDE00751BFF62F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF415D2DB760C39855B3F3D9CF3CE441A783E36.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/4DF415D2DB760C39855B3F3D9CF3CE441A783E36.mft Manifest number: 04DB Signing time: Fri 06 Jun 2025 13:31:52 +0000 Manifest this update: Fri 06 Jun 2025 13:26:52 +0000 Manifest next update: Mon 09 Jun 2025 17:32:52 +0000 Files and hashes: 1: 323030313a6466333a373130303a3a2f34382d3438203d3e20313336383638.roa (hash: gxzjhOqlSfyvVQV8GuZutKZCxMRY+U2lIgUsJNuDYjo=) 2: 3130332e3133332e32302e302f32332d3234203d3e20313336383638.roa (hash: kKOPYDd68IbPpSS7OOzul5ii2GOnq8I9waVsMp0r138=) 3: 3130332e3130352e39382e302f32332d3233203d3e20313336383638.roa (hash: KrFiIsKebuclmAnJCp7i0qAQI2dNZ1dLN7tW2prCRMk=) 4: 4DF415D2DB760C39855B3F3D9CF3CE441A783E36.crl (hash: aqGP/8flaiaTtz/mIpk26IfgRCL3Gi+Po+Ro8q85oe4=) 5: 3130332e3130352e39382e302f32342d3234203d3e20313336383638.roa (hash: gEF6XHOWRCqM+iWbvzjd5eE8QEvtBHMbgAap2D0U424=) 6: 3130332e3130352e39392e302f32342d3234203d3e20313336383638.roa (hash: RarippCnWnMmEjTgkPvYhkG55G9O0lUfwe2+0FeUYpg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/4DF415D2DB760C39855B3F3D9CF3CE441A783E36.crl rsync://repo-rpki.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/4DF415D2DB760C39855B3F3D9CF3CE441A783E36.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF415D2DB760C39855B3F3D9CF3CE441A783E36.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 17:32:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:cc:8f:f2:03:bb:03:fe:b3:4f:fb:9b:01:ed:e0:07:51:bf:f6:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4DF415D2DB760C39855B3F3D9CF3CE441A783E36 Validity Not Before: Jun 6 13:26:52 2025 GMT Not After : Jun 9 17:32:52 2025 GMT Subject: CN=4157510C4045EE4481C9932CDE6BD74D67C570FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:6d:91:5c:52:f3:31:5e:cf:0c:c2:75:7e:6d: 09:84:e5:be:7f:82:8c:d7:90:91:90:a2:72:47:28: 0c:c9:24:14:1f:d9:3f:64:fe:8f:d3:1d:38:c3:fa: 35:f8:5d:9d:fd:50:8e:0a:81:5b:0c:0e:5f:7b:e1: 5e:b5:f4:48:7d:7c:0b:8a:67:60:64:93:78:7b:d6: 51:23:20:56:49:09:38:f4:88:19:a1:37:4f:54:c1: 30:9d:66:75:5a:a7:4a:b8:6f:c3:6d:ab:c1:d0:55: 0f:5b:74:7c:ad:d2:0b:2e:28:0d:24:c9:ae:49:7a: c0:18:a0:e4:55:dd:fb:29:ee:f8:ef:75:b1:57:9a: 38:d2:1b:8b:06:01:f9:1d:c9:83:d1:1d:b6:6d:60: f5:32:b1:38:40:3c:b3:9c:ff:66:bb:22:9a:f7:55: 58:6f:89:b3:57:94:f2:90:07:49:7d:7e:99:61:26: ff:12:37:9c:98:13:c1:e8:60:5f:f3:66:9a:e2:a9: e0:37:57:c2:d5:c4:13:29:5a:3d:43:6e:d2:96:4a: e5:ff:8c:7a:11:cb:58:e0:87:cb:ff:b3:71:0d:e1: d0:ad:b5:65:73:b6:bb:1f:dc:81:03:92:60:d1:c5: 41:67:1c:ad:2f:2d:c5:8b:24:dd:dc:99:98:dd:a0: a0:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:57:51:0C:40:45:EE:44:81:C9:93:2C:DE:6B:D7:4D:67:C5:70:FF X509v3 Authority Key Identifier: keyid:4D:F4:15:D2:DB:76:0C:39:85:5B:3F:3D:9C:F3:CE:44:1A:78:3E:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/4DF415D2DB760C39855B3F3D9CF3CE441A783E36.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF415D2DB760C39855B3F3D9CF3CE441A783E36.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/4DF415D2DB760C39855B3F3D9CF3CE441A783E36.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:c7:a8:bc:68:ab:dd:12:bf:b4:cc:7a:a0:f1:e1:bd:67:ec: 0e:7f:d3:a8:0d:fa:e8:d9:1b:0b:ca:10:d3:9f:24:a2:04:a9: 2d:8e:81:b1:f2:f2:54:7e:4e:df:f0:3f:ec:41:0a:fc:82:dd: a0:de:94:22:2b:23:4f:5e:c4:cd:75:5e:85:a4:ed:8c:8c:53: f9:e8:6c:84:fc:3b:a7:b2:57:b6:a2:1c:c0:00:14:9d:0f:b2: e1:7c:21:da:5d:94:db:6d:52:c8:75:f3:ff:74:e9:ea:d3:cb: 25:d6:4e:ba:8b:97:17:77:ee:1b:b0:49:9c:ce:e7:a6:dd:4b: 78:61:11:2a:4c:83:1e:b5:31:e1:e8:ae:fd:fb:a5:5f:ea:9e: 62:57:f5:fb:9c:85:35:fa:eb:39:3a:93:90:75:02:f8:6e:75: 92:60:70:54:2f:25:c8:29:92:ba:7e:b7:b9:98:ce:84:a6:35: d7:61:47:c5:a0:d8:4c:ad:47:a2:9a:e3:bf:7b:05:09:ac:95: 17:23:f6:d0:41:60:8a:2e:f6:2f:28:62:bc:08:c8:bb:7c:13: d8:8b:9a:6f:01:16:77:54:3e:f6:45:a5:3d:b9:7c:73:f3:65: 44:86:1e:68:80:d0:19:51:f1:bf:1c:ea:8b:6f:ea:26:03:46: 61:e0:63:30 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUccyP8gO7A/6zT/ubAe3gB1G/9i8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNERGNDE1RDJEQjc2MEMzOTg1NUIzRjNEOUNGM0NFNDQx QTc4M0UzNjAeFw0yNTA2MDYxMzI2NTJaFw0yNTA2MDkxNzMyNTJaMDMxMTAvBgNV BAMTKDQxNTc1MTBDNDA0NUVFNDQ4MUM5OTMyQ0RFNkJENzRENjdDNTcwRkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDebZFcUvMxXs8MwnV+bQmE5b5/ gozXkJGQonJHKAzJJBQf2T9k/o/THTjD+jX4XZ39UI4KgVsMDl974V619Eh9fAuK Z2Bkk3h71lEjIFZJCTj0iBmhN09UwTCdZnVap0q4b8Ntq8HQVQ9bdHyt0gsuKA0k ya5JesAYoORV3fsp7vjvdbFXmjjSG4sGAfkdyYPRHbZtYPUysThAPLOc/2a7Ipr3 VVhvibNXlPKQB0l9fplhJv8SN5yYE8HoYF/zZpriqeA3V8LVxBMpWj1DbtKWSuX/ jHoRy1jgh8v/s3EN4dCttWVztrsf3IEDkmDRxUFnHK0vLcWLJN3cmZjdoKCJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQVdRDEBF7kSByZMs3mvXTWfFcP8wHwYDVR0j BBgwFoAUTfQV0tt2DDmFWz89nPPORBp4PjYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MTI0YWE4Yy1kZWRjLTQzNzYtOTM4MS0wYTgxZTZiY2M1NjQvMC80REY0MTVEMkRC NzYwQzM5ODU1QjNGM0Q5Q0YzQ0U0NDFBNzgzRTM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNERGNDE1RDJEQjc2MEMzOTg1NUIzRjNEOUNGM0NFNDQxQTc4 M0UzNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTEyNGFhOGMtZGVkYy00Mzc2LTkz ODEtMGE4MWU2YmNjNTY0LzAvNERGNDE1RDJEQjc2MEMzOTg1NUIzRjNEOUNGM0NF NDQxQTc4M0UzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABbHqLxoq90Sv7TMeqDx4b1n7A5/06gN+ujZ GwvKENOfJKIEqS2OgbHy8lR+Tt/wP+xBCvyC3aDelCIrI09exM11XoWk7YyMU/no bIT8O6eyV7aiHMAAFJ0PsuF8IdpdlNttUsh18/906erTyyXWTrqLlxd37huwSZzO 56bdS3hhESpMgx61MeHorv37pV/qnmJX9fuchTX66zk6k5B1AvhudZJgcFQvJcgp krp+t7mYzoSmNddhR8Wg2EytR6Ka4797BQmslRcj9tBBYIou9i8oYrwIyLt8E9iL mm8BFndUPvZFpT25fHPzZUSGHmiA0BlR8b8c6otv6iYDRmHgYzA= -----END CERTIFICATE-----Generated at Sat Jun 7 04:08:51 2025 by rpki-client