$ rpki-client -vvf repo-rpki.idnic.net/repo/d07cf202-f5ec-4101-8085-ceb86ea65b3e/0/4B6AF7335EC07FE746BC2A368302436EF6B1B9EB.mft File: 4B6AF7335EC07FE746BC2A368302436EF6B1B9EB.mft (raw, json) Hash identifier: lM9X/Co/dW5+QLJiIyM6BKaialN656t5MYmrUdQh6q0= Subject key identifier: AA:13:49:C8:51:37:95:F9:01:7A:14:6D:8A:98:05:87:22:D4:06:EF Authority key identifier: 4B:6A:F7:33:5E:C0:7F:E7:46:BC:2A:36:83:02:43:6E:F6:B1:B9:EB Certificate issuer: /CN=4B6AF7335EC07FE746BC2A368302436EF6B1B9EB Certificate serial: 035047C73E0534890A53AE704C14A2E98EA09D6E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4B6AF7335EC07FE746BC2A368302436EF6B1B9EB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d07cf202-f5ec-4101-8085-ceb86ea65b3e/0/4B6AF7335EC07FE746BC2A368302436EF6B1B9EB.mft Manifest number: 046B Signing time: Wed 04 Jun 2025 03:21:26 +0000 Manifest this update: Wed 04 Jun 2025 03:16:26 +0000 Manifest next update: Sat 07 Jun 2025 13:43:26 +0000 Files and hashes: 1: 4B6AF7335EC07FE746BC2A368302436EF6B1B9EB.crl (hash: a0ZA0wX2uBRWVY2j8CsyyqP4nlFQ7Kjmu0bD3ssEY84=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d07cf202-f5ec-4101-8085-ceb86ea65b3e/0/4B6AF7335EC07FE746BC2A368302436EF6B1B9EB.crl rsync://repo-rpki.idnic.net/repo/d07cf202-f5ec-4101-8085-ceb86ea65b3e/0/4B6AF7335EC07FE746BC2A368302436EF6B1B9EB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4B6AF7335EC07FE746BC2A368302436EF6B1B9EB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 13:43:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:50:47:c7:3e:05:34:89:0a:53:ae:70:4c:14:a2:e9:8e:a0:9d:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4B6AF7335EC07FE746BC2A368302436EF6B1B9EB Validity Not Before: Jun 4 03:16:26 2025 GMT Not After : Jun 7 13:43:26 2025 GMT Subject: CN=AA1349C8513795F9017A146D8A98058722D406EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:60:a1:a4:07:f9:25:b0:11:1c:5d:0a:49:40: cf:d5:d3:d5:d9:d1:6f:03:a9:08:bd:ad:50:c4:e8: da:10:8d:ee:1a:92:46:6e:7f:67:15:e7:b3:ac:7d: d4:cd:b0:ca:91:0a:b6:44:a4:f3:67:63:66:76:0a: a5:67:9e:e1:c7:7f:4e:53:67:f8:37:4d:5a:67:31: 53:3f:77:bc:1e:07:af:59:41:89:53:57:46:6e:4f: 30:59:8d:e4:57:3e:2e:65:f1:32:36:a2:58:15:86: 5d:5b:55:ad:a0:a4:cf:3f:a4:d4:dd:bb:3c:e4:95: 11:27:12:26:bd:3a:46:dc:7a:59:7e:f3:eb:a0:fd: 8e:c1:22:93:3f:18:5c:0d:b0:54:5c:0c:8d:f9:4c: d1:c2:0c:6f:25:b0:bb:ea:87:d0:27:2f:a7:ed:12: a1:61:21:5b:e1:4d:6a:c5:20:b2:ea:7d:85:17:68: b8:0f:2e:4a:c4:26:e1:6f:36:85:b0:e8:43:f3:fd: 35:46:ad:9c:c3:b1:fb:eb:fe:83:a8:2d:af:70:cf: f1:2f:93:20:ec:82:9a:3d:3d:26:32:c0:a2:bf:f0: 26:b8:cb:85:7f:b4:a8:3a:e4:fa:43:32:e9:a8:8b: be:28:a2:7b:6b:d9:4c:b3:af:87:5e:de:ed:09:61: af:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:13:49:C8:51:37:95:F9:01:7A:14:6D:8A:98:05:87:22:D4:06:EF X509v3 Authority Key Identifier: keyid:4B:6A:F7:33:5E:C0:7F:E7:46:BC:2A:36:83:02:43:6E:F6:B1:B9:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d07cf202-f5ec-4101-8085-ceb86ea65b3e/0/4B6AF7335EC07FE746BC2A368302436EF6B1B9EB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4B6AF7335EC07FE746BC2A368302436EF6B1B9EB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d07cf202-f5ec-4101-8085-ceb86ea65b3e/0/4B6AF7335EC07FE746BC2A368302436EF6B1B9EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:28:83:af:fb:32:ea:cf:bf:14:56:e4:54:99:bf:8b:4b:c9: 36:41:71:29:92:a8:af:dd:a6:9d:fe:83:e9:15:9e:64:8b:9d: 29:44:ac:c7:62:49:24:eb:36:3c:ee:5f:b5:84:be:e6:fb:53: 5d:6c:68:6d:02:d3:9c:9f:5d:91:4d:8c:5d:36:33:77:3d:68: 6d:f7:cd:68:8c:4a:0f:fe:08:83:8e:6e:63:38:97:03:25:9d: fa:8b:94:9c:60:01:37:37:f9:3f:da:16:97:3f:8c:50:da:b1: b2:12:b5:11:ec:61:60:0e:e6:ab:8d:88:c2:16:3d:d8:33:02: aa:5b:b0:95:2e:91:e9:cc:e0:bd:8c:5d:32:4e:71:fd:4e:ed: 04:d9:f6:9d:f6:81:9c:c6:b0:c7:fa:3d:99:51:71:99:1c:e0: 23:3a:a6:f7:05:ac:ee:e7:44:89:9f:b7:8c:92:b0:14:cb:3e: 3d:7c:41:5c:ed:5c:60:9d:fa:49:6d:e7:b6:fa:0a:2f:51:4f: e7:11:80:48:61:bb:a7:84:b1:35:ed:db:b6:52:7e:8e:9a:32: 44:21:a7:05:b0:f0:15:60:73:b2:7a:ad:d2:d8:c3:41:99:63: f1:0e:db:8a:8b:2e:fb:cb:d8:ef:aa:b7:bc:b1:5b:39:38:0f: 16:7d:f5:9c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA1BHxz4FNIkKU65wTBSi6Y6gnW4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEI2QUY3MzM1RUMwN0ZFNzQ2QkMyQTM2ODMwMjQzNkVG NkIxQjlFQjAeFw0yNTA2MDQwMzE2MjZaFw0yNTA2MDcxMzQzMjZaMDMxMTAvBgNV BAMTKEFBMTM0OUM4NTEzNzk1RjkwMTdBMTQ2RDhBOTgwNTg3MjJENDA2RUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiYKGkB/klsBEcXQpJQM/V09XZ 0W8DqQi9rVDE6NoQje4akkZuf2cV57OsfdTNsMqRCrZEpPNnY2Z2CqVnnuHHf05T Z/g3TVpnMVM/d7weB69ZQYlTV0ZuTzBZjeRXPi5l8TI2olgVhl1bVa2gpM8/pNTd uzzklREnEia9Okbcell+8+ug/Y7BIpM/GFwNsFRcDI35TNHCDG8lsLvqh9AnL6ft EqFhIVvhTWrFILLqfYUXaLgPLkrEJuFvNoWw6EPz/TVGrZzDsfvr/oOoLa9wz/Ev kyDsgpo9PSYywKK/8Ca4y4V/tKg65PpDMumoi74oontr2Uyzr4de3u0JYa+XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqhNJyFE3lfkBehRtipgFhyLUBu8wHwYDVR0j BBgwFoAUS2r3M17Af+dGvCo2gwJDbvaxueswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MDdjZjIwMi1mNWVjLTQxMDEtODA4NS1jZWI4NmVhNjViM2UvMC80QjZBRjczMzVF QzA3RkU3NDZCQzJBMzY4MzAyNDM2RUY2QjFCOUVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEI2QUY3MzM1RUMwN0ZFNzQ2QkMyQTM2ODMwMjQzNkVGNkIx QjlFQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDA3Y2YyMDItZjVlYy00MTAxLTgw ODUtY2ViODZlYTY1YjNlLzAvNEI2QUY3MzM1RUMwN0ZFNzQ2QkMyQTM2ODMwMjQz NkVGNkIxQjlFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADAog6/7MurPvxRW5FSZv4tLyTZBcSmSqK/d pp3+g+kVnmSLnSlErMdiSSTrNjzuX7WEvub7U11saG0C05yfXZFNjF02M3c9aG33 zWiMSg/+CIOObmM4lwMlnfqLlJxgATc3+T/aFpc/jFDasbIStRHsYWAO5quNiMIW PdgzAqpbsJUukenM4L2MXTJOcf1O7QTZ9p32gZzGsMf6PZlRcZkc4CM6pvcFrO7n RImft4ySsBTLPj18QVztXGCd+klt57b6Ci9RT+cRgEhhu6eEsTXt27ZSfo6aMkQh pwWw8BVgc7J6rdLYw0GZY/EO24qLLvvL2O+qt7yxWzk4DxZ99Zw= -----END CERTIFICATE-----Generated at Thu Jun 5 18:16:24 2025 by rpki-client