$ rpki-client -vvf repo-rpki.idnic.net/repo/b3991f7a-0a71-4f0d-933f-ecf813530274/0/A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.mft File: A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.mft (raw, json) Hash identifier: /5xp9eTkinT8snDnadpxusRPC3xW/o1/iYpJ9d92at8= Subject key identifier: 0E:98:07:A5:8D:FA:EA:6E:0B:6B:5C:26:11:39:C7:DD:28:F0:9A:43 Authority key identifier: A4:B6:31:C8:CF:E0:EE:72:AC:D5:F2:08:FC:12:39:06:4F:6C:DE:44 Certificate issuer: /CN=A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44 Certificate serial: 36FABBD45274A319B1EDFA262447FD1CD4497BF4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b3991f7a-0a71-4f0d-933f-ecf813530274/0/A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.mft Manifest number: 9E Signing time: Thu 05 Jun 2025 17:11:09 +0000 Manifest this update: Thu 05 Jun 2025 17:06:09 +0000 Manifest next update: Sun 08 Jun 2025 18:28:09 +0000 Files and hashes: 1: 3135372e36362e3234382e302f32332d3234203d3e20313532373937.roa (hash: vC1sLrROQammNbgh64OVHa3goyUf/oRsNt6WGQKKJQo=) 2: A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.crl (hash: JX768/QRDQdlOcV6Dnzj/WkU5DgJNJGcf/dlfKWmfrA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b3991f7a-0a71-4f0d-933f-ecf813530274/0/A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.crl rsync://repo-rpki.idnic.net/repo/b3991f7a-0a71-4f0d-933f-ecf813530274/0/A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 18:28:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:fa:bb:d4:52:74:a3:19:b1:ed:fa:26:24:47:fd:1c:d4:49:7b:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44 Validity Not Before: Jun 5 17:06:09 2025 GMT Not After : Jun 8 18:28:09 2025 GMT Subject: CN=0E9807A58DFAEA6E0B6B5C261139C7DD28F09A43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:19:6e:9b:67:09:25:7d:f9:43:48:11:e2:24: 85:fc:13:0a:e2:e1:f4:73:0b:cf:61:fc:c6:9e:8a: ec:85:54:be:44:9c:19:ff:ca:aa:00:35:92:07:3f: 0e:18:86:cd:d6:94:45:c6:cb:74:fe:f6:0a:24:c1: 9b:dd:7a:82:83:70:c5:6c:86:0d:1b:35:77:f2:23: e7:fb:a2:bd:2c:3a:db:c5:af:88:e0:47:88:24:18: 57:55:59:20:99:18:38:44:7e:be:5a:75:5e:67:11: 8f:77:90:7d:11:9a:4e:ef:b6:f7:51:2d:33:48:77: 08:cb:33:93:f6:dd:3c:3d:99:b9:cc:c6:3f:1f:9e: e4:f0:90:73:9a:06:a4:2e:1b:88:7e:64:b5:dc:21: 53:da:2a:55:9d:90:1c:a4:de:63:33:a6:f5:4c:71: 98:c8:52:bc:67:09:2f:75:5b:e2:01:d9:ce:1a:ba: 17:9f:9f:35:9a:40:9f:5a:a9:49:f4:eb:6e:47:51: 92:9d:6e:11:59:c2:80:a3:c2:1b:3a:70:1f:43:4b: 3c:90:9f:9d:8d:2c:0e:14:3c:2b:47:92:ad:f3:bc: d8:34:d9:a2:a2:43:cb:b5:87:a8:1c:9c:15:08:c6: c9:7a:c5:a9:b5:3d:06:0e:68:88:cf:a9:83:7b:e1: ea:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:98:07:A5:8D:FA:EA:6E:0B:6B:5C:26:11:39:C7:DD:28:F0:9A:43 X509v3 Authority Key Identifier: keyid:A4:B6:31:C8:CF:E0:EE:72:AC:D5:F2:08:FC:12:39:06:4F:6C:DE:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b3991f7a-0a71-4f0d-933f-ecf813530274/0/A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b3991f7a-0a71-4f0d-933f-ecf813530274/0/A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:77:51:fb:f6:21:dc:a4:24:fa:42:51:33:f0:0a:73:43:fa: 47:0c:2a:f2:26:45:3a:85:37:f2:c2:42:c7:72:83:5c:09:15: bf:55:2c:4a:08:e1:aa:ba:67:78:bd:ed:c8:26:5b:47:df:0e: 71:8c:a7:d6:ee:be:9c:d4:93:46:c8:c7:99:32:60:b4:7c:4c: 1b:cb:77:09:c5:9e:c9:18:c3:04:a9:f5:78:83:87:86:1c:0b: 97:60:96:08:63:c3:0f:84:6a:c5:5d:93:b9:06:35:21:67:d1: 70:12:53:dc:41:f2:b5:fe:e7:58:c2:f9:50:2b:84:4a:b5:99: 0d:9b:ac:2a:13:7c:15:ed:ce:23:a3:d2:5b:de:f8:78:aa:82: 35:30:91:60:5c:95:b7:8d:58:5a:51:32:5c:7b:d0:44:7f:18: 46:b6:f5:a1:14:b6:0e:20:98:e1:df:1a:f3:b1:0f:5a:05:ed: b6:2f:8d:5a:10:dd:c1:1f:a9:33:23:70:db:e1:81:94:c9:e3: b6:a4:26:4b:48:d2:35:02:59:a7:aa:8e:41:d6:bb:13:ce:7c: 79:d5:12:04:61:19:e6:44:31:bb:2e:ff:88:a6:bc:d5:23:3c: 59:0a:ac:e7:2c:96:c6:67:c2:2a:14:48:95:61:bd:a5:be:ae: de:4c:6a:57 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNvq71FJ0oxmx7fomJEf9HNRJe/QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTRCNjMxQzhDRkUwRUU3MkFDRDVGMjA4RkMxMjM5MDY0 RjZDREU0NDAeFw0yNTA2MDUxNzA2MDlaFw0yNTA2MDgxODI4MDlaMDMxMTAvBgNV BAMTKDBFOTgwN0E1OERGQUVBNkUwQjZCNUMyNjExMzlDN0REMjhGMDlBNDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwGW6bZwklfflDSBHiJIX8Ewri 4fRzC89h/MaeiuyFVL5EnBn/yqoANZIHPw4Yhs3WlEXGy3T+9gokwZvdeoKDcMVs hg0bNXfyI+f7or0sOtvFr4jgR4gkGFdVWSCZGDhEfr5adV5nEY93kH0Rmk7vtvdR LTNIdwjLM5P23Tw9mbnMxj8fnuTwkHOaBqQuG4h+ZLXcIVPaKlWdkByk3mMzpvVM cZjIUrxnCS91W+IB2c4auhefnzWaQJ9aqUn0625HUZKdbhFZwoCjwhs6cB9DSzyQ n52NLA4UPCtHkq3zvNg02aKiQ8u1h6gcnBUIxsl6xam1PQYOaIjPqYN74eoXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDpgHpY366m4La1wmETnH3SjwmkMwHwYDVR0j BBgwFoAUpLYxyM/g7nKs1fII/BI5Bk9s3kQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i Mzk5MWY3YS0wYTcxLTRmMGQtOTMzZi1lY2Y4MTM1MzAyNzQvMC9BNEI2MzFDOENG RTBFRTcyQUNENUYyMDhGQzEyMzkwNjRGNkNERTQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQTRCNjMxQzhDRkUwRUU3MkFDRDVGMjA4RkMxMjM5MDY0RjZD REU0NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjM5OTFmN2EtMGE3MS00ZjBkLTkz M2YtZWNmODEzNTMwMjc0LzAvQTRCNjMxQzhDRkUwRUU3MkFDRDVGMjA4RkMxMjM5 MDY0RjZDREU0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKd3Ufv2IdykJPpCUTPwCnND+kcMKvImRTqF N/LCQsdyg1wJFb9VLEoI4aq6Z3i97cgmW0ffDnGMp9buvpzUk0bIx5kyYLR8TBvL dwnFnskYwwSp9XiDh4YcC5dglghjww+EasVdk7kGNSFn0XASU9xB8rX+51jC+VAr hEq1mQ2brCoTfBXtziOj0lve+HiqgjUwkWBclbeNWFpRMlx70ER/GEa29aEUtg4g mOHfGvOxD1oF7bYvjVoQ3cEfqTMjcNvhgZTJ47akJktI0jUCWaeqjkHWuxPOfHnV EgRhGeZEMbsu/4imvNUjPFkKrOcslsZnwioUSJVhvaW+rt5Malc= -----END CERTIFICATE-----Generated at Fri Jun 6 06:44:22 2025 by rpki-client