$ rpki-client -vvf repo-rpki.idnic.net/repo/cc09e13c-cea0-47ff-9c96-f49b39d43920/0/4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A.mft File: 4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A.mft (raw, json) Hash identifier: SDjSP+sSlaUhB4npA88sjA4XJegiDCV3Z5WeZZ7WL0o= Subject key identifier: 4E:85:4A:8A:91:9E:96:74:4D:30:C7:CF:CD:A9:41:D9:27:07:49:DA Authority key identifier: 4A:6F:D7:E0:79:F5:43:A5:D5:FD:E4:43:3F:7B:D5:3D:CE:42:6E:5A Certificate issuer: /CN=4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A Certificate serial: 31E2FA408417EE4F6361450786F8AB63CA25BAE5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cc09e13c-cea0-47ff-9c96-f49b39d43920/0/4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A.mft Manifest number: 04DB Signing time: Fri 06 Jun 2025 05:51:40 +0000 Manifest this update: Fri 06 Jun 2025 05:46:40 +0000 Manifest next update: Mon 09 Jun 2025 07:34:40 +0000 Files and hashes: 1: 4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A.crl (hash: jL9GNU2l7oBwN3R8FBKsr78i3XfA6LZliEiDZufxQos=) 2: 3130332e3231312e34392e302f32342d3234203d3e203633353035.roa (hash: jSA7+l89fySFyM7Bs9jzEHqShE9HEzseLTVhKTYttZk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cc09e13c-cea0-47ff-9c96-f49b39d43920/0/4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A.crl rsync://repo-rpki.idnic.net/repo/cc09e13c-cea0-47ff-9c96-f49b39d43920/0/4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 07:34:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:e2:fa:40:84:17:ee:4f:63:61:45:07:86:f8:ab:63:ca:25:ba:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A Validity Not Before: Jun 6 05:46:40 2025 GMT Not After : Jun 9 07:34:40 2025 GMT Subject: CN=4E854A8A919E96744D30C7CFCDA941D9270749DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:30:bd:cc:96:a5:58:30:37:91:a6:4c:eb:89: 7d:0c:3d:8e:74:68:ff:1f:97:31:23:3c:86:70:85: 30:61:5c:ea:cb:f9:9a:29:56:8d:72:d3:19:e7:73: db:80:c5:7b:a2:eb:44:8b:c0:0d:bb:39:5e:77:e6: 54:7b:15:ad:a1:f6:9d:3b:1e:3d:1e:27:6c:39:58: 1a:94:cb:6f:24:6d:96:39:ff:59:75:8b:6f:fd:66: f7:fc:ef:31:1c:d9:bf:cc:48:31:8b:96:9d:75:7a: 2a:39:d4:9d:4e:f8:44:68:7f:70:62:c1:7d:72:7e: e1:4b:47:a8:7d:f2:30:19:f9:11:5c:5d:eb:70:bf: 51:ee:df:ed:36:23:9d:0c:e7:3e:90:05:f5:8c:57: b7:9d:94:82:d8:0c:e3:76:a1:ca:92:48:d1:93:4e: 2f:7e:95:ff:ff:2f:3b:3f:bc:7c:07:2b:01:a8:df: ab:66:86:c5:6e:94:f8:3e:d4:97:f0:ab:ee:26:46: b0:0e:e7:5b:c6:6a:95:71:5e:23:07:28:2b:ea:c7: fc:5e:15:a0:2e:77:b4:ac:ee:c8:cb:be:dd:02:80: 56:05:df:60:3a:27:8b:1c:86:a4:3c:59:ed:80:cd: 0f:3c:3c:52:ff:73:62:61:70:d2:dd:da:21:10:02: e0:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:85:4A:8A:91:9E:96:74:4D:30:C7:CF:CD:A9:41:D9:27:07:49:DA X509v3 Authority Key Identifier: keyid:4A:6F:D7:E0:79:F5:43:A5:D5:FD:E4:43:3F:7B:D5:3D:CE:42:6E:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cc09e13c-cea0-47ff-9c96-f49b39d43920/0/4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cc09e13c-cea0-47ff-9c96-f49b39d43920/0/4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:8c:8f:d8:f2:48:b3:bf:c9:eb:6b:08:68:e8:ba:6c:5c:d7: 46:15:d2:15:d6:c1:53:a5:17:c0:13:70:66:5d:2a:92:9c:37: 97:4b:a5:8e:37:88:6f:96:0d:89:39:29:fe:5a:ea:8e:a7:48: 00:ea:23:43:d6:c9:30:6d:2c:5a:64:0b:93:ab:82:4b:ad:45: 88:2c:e7:d1:d3:7c:0a:c9:fe:d0:b6:bc:94:26:99:5a:96:b4: 32:e8:ee:6b:3f:46:be:a3:5a:48:c1:fd:a6:c7:47:53:c7:8a: d3:19:9b:33:39:07:e0:3e:ed:9e:86:c7:83:b3:38:91:f1:cd: bb:34:29:6c:2b:15:44:9e:a6:7a:f8:eb:93:62:25:e0:63:10: 84:b8:0f:be:39:ce:90:a9:4f:a9:19:f2:1a:72:41:be:1e:95: 4b:a1:50:ef:e1:73:fb:dc:d9:53:ce:41:64:eb:57:02:81:3f: 0b:3f:a4:96:b9:79:5d:07:d6:80:a0:51:a1:41:38:44:39:1c: 72:20:7f:e2:b1:6e:9c:55:a0:69:5b:88:b6:f8:f3:e8:8f:9c: 28:d1:53:be:39:22:34:f0:f8:e0:ba:9f:fc:21:62:b1:03:88: 1d:5a:4e:4d:26:b3:b2:c3:7e:f8:75:16:12:30:f2:24:fe:ba: 67:41:8b:1d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMeL6QIQX7k9jYUUHhvirY8oluuUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEE2RkQ3RTA3OUY1NDNBNUQ1RkRFNDQzM0Y3QkQ1M0RD RTQyNkU1QTAeFw0yNTA2MDYwNTQ2NDBaFw0yNTA2MDkwNzM0NDBaMDMxMTAvBgNV BAMTKDRFODU0QThBOTE5RTk2NzQ0RDMwQzdDRkNEQTk0MUQ5MjcwNzQ5REEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHML3MlqVYMDeRpkzriX0MPY50 aP8flzEjPIZwhTBhXOrL+ZopVo1y0xnnc9uAxXui60SLwA27OV535lR7Fa2h9p07 Hj0eJ2w5WBqUy28kbZY5/1l1i2/9Zvf87zEc2b/MSDGLlp11eio51J1O+ERof3Bi wX1yfuFLR6h98jAZ+RFcXetwv1Hu3+02I50M5z6QBfWMV7edlILYDON2ocqSSNGT Ti9+lf//Lzs/vHwHKwGo36tmhsVulPg+1Jfwq+4mRrAO51vGapVxXiMHKCvqx/xe FaAud7Ss7sjLvt0CgFYF32A6J4schqQ8We2AzQ88PFL/c2JhcNLd2iEQAuATAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUToVKipGelnRNMMfPzalB2ScHSdowHwYDVR0j BBgwFoAUSm/X4Hn1Q6XV/eRDP3vVPc5CblowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YzA5ZTEzYy1jZWEwLTQ3ZmYtOWM5Ni1mNDliMzlkNDM5MjAvMC80QTZGRDdFMDc5 RjU0M0E1RDVGREU0NDMzRjdCRDUzRENFNDI2RTVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEE2RkQ3RTA3OUY1NDNBNUQ1RkRFNDQzM0Y3QkQ1M0RDRTQy NkU1QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2MwOWUxM2MtY2VhMC00N2ZmLTlj OTYtZjQ5YjM5ZDQzOTIwLzAvNEE2RkQ3RTA3OUY1NDNBNUQ1RkRFNDQzM0Y3QkQ1 M0RDRTQyNkU1QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEmMj9jySLO/yetrCGjoumxc10YV0hXWwVOl F8ATcGZdKpKcN5dLpY43iG+WDYk5Kf5a6o6nSADqI0PWyTBtLFpkC5OrgkutRYgs 59HTfArJ/tC2vJQmmVqWtDLo7ms/Rr6jWkjB/abHR1PHitMZmzM5B+A+7Z6Gx4Oz OJHxzbs0KWwrFUSepnr465NiJeBjEIS4D745zpCpT6kZ8hpyQb4elUuhUO/hc/vc 2VPOQWTrVwKBPws/pJa5eV0H1oCgUaFBOEQ5HHIgf+KxbpxVoGlbiLb48+iPnCjR U745IjTw+OC6n/whYrEDiB1aTk0ms7LDfvh1FhIw8iT+umdBix0= -----END CERTIFICATE-----Generated at Sat Jun 7 03:57:52 2025 by rpki-client