$ rpki-client -vvf repo-rpki.idnic.net/repo/dec2a1ac-5ae4-47ad-8db1-652c7f3f7e8f/0/469F8799C9283F6AFAB227A7A8E070D32DC1E876.mft File: 469F8799C9283F6AFAB227A7A8E070D32DC1E876.mft (raw, json) Hash identifier: HLHjYTW1G8B91nPJDKIEwAJEDqVYWjuk6L5lL6uS/0U= Subject key identifier: 59:3E:53:6E:28:AB:B6:08:90:92:A7:92:C0:D2:F7:15:F0:D0:E4:B3 Authority key identifier: 46:9F:87:99:C9:28:3F:6A:FA:B2:27:A7:A8:E0:70:D3:2D:C1:E8:76 Certificate issuer: /CN=469F8799C9283F6AFAB227A7A8E070D32DC1E876 Certificate serial: 62759DF3BFBED91AC83D3475047DF7659ED1F203 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/469F8799C9283F6AFAB227A7A8E070D32DC1E876.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dec2a1ac-5ae4-47ad-8db1-652c7f3f7e8f/0/469F8799C9283F6AFAB227A7A8E070D32DC1E876.mft Manifest number: 6C Signing time: Sat 12 Apr 2025 06:30:39 +0000 Manifest this update: Sat 12 Apr 2025 06:25:39 +0000 Manifest next update: Tue 15 Apr 2025 15:34:39 +0000 Files and hashes: 1: 469F8799C9283F6AFAB227A7A8E070D32DC1E876.crl (hash: IrDrMdFh7t5WdscFQSEiH5ClhfbnswKzrRVpesoM6ek=) 2: 3136302e32352e3233362e302f32332d3234203d3e20313533313035.roa (hash: lWon/bpPDruvghAxoP8snJ5P79Rkgid1TXsqKBojJB4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dec2a1ac-5ae4-47ad-8db1-652c7f3f7e8f/0/469F8799C9283F6AFAB227A7A8E070D32DC1E876.crl rsync://repo-rpki.idnic.net/repo/dec2a1ac-5ae4-47ad-8db1-652c7f3f7e8f/0/469F8799C9283F6AFAB227A7A8E070D32DC1E876.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/469F8799C9283F6AFAB227A7A8E070D32DC1E876.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 15 Apr 2025 15:34:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:75:9d:f3:bf:be:d9:1a:c8:3d:34:75:04:7d:f7:65:9e:d1:f2:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=469F8799C9283F6AFAB227A7A8E070D32DC1E876 Validity Not Before: Apr 12 06:25:39 2025 GMT Not After : Apr 15 15:34:39 2025 GMT Subject: CN=593E536E28ABB6089092A792C0D2F715F0D0E4B3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:9b:d9:e9:77:95:41:ee:c6:b7:81:05:f2:34: 9d:6b:49:30:a8:6f:d9:cb:25:30:75:be:8b:7e:72: d9:03:1f:44:d0:4d:8f:bd:17:67:44:3b:34:3b:cc: d6:31:9c:6e:b2:e0:0b:cf:8e:a8:39:17:93:7f:45: d8:57:ab:da:a0:3f:86:03:6b:85:66:81:09:12:4b: bb:0a:24:7f:49:07:b9:b9:c8:94:b7:a6:88:93:93: 65:0b:54:33:f3:af:17:6d:cb:80:0a:8d:e4:c9:f5: 6a:09:e3:fe:c2:6f:a4:7d:7e:1c:a5:86:bc:db:07: 12:42:66:c4:3c:4c:79:20:b5:0e:7f:21:76:b5:a6: 92:af:37:90:ab:5d:32:84:9e:13:be:19:c7:74:3e: 69:29:a3:04:82:69:db:94:c0:47:ce:58:98:c5:7c: 6c:2c:a6:e6:7f:62:0b:74:1e:13:6c:3c:4a:15:81: e2:36:83:a1:65:ba:6e:a4:fe:30:2c:40:24:8c:c3: e7:9d:95:ec:5c:0b:18:29:60:7a:bd:19:96:ef:e0: 42:5a:c3:88:2d:72:59:df:11:7a:c0:2d:de:b3:5f: 7f:f7:e7:48:c8:fb:a4:45:8a:26:33:d2:c7:4c:c3: 66:cc:d4:56:6a:37:8d:f7:ba:0b:1b:e8:02:81:9c: cc:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:3E:53:6E:28:AB:B6:08:90:92:A7:92:C0:D2:F7:15:F0:D0:E4:B3 X509v3 Authority Key Identifier: keyid:46:9F:87:99:C9:28:3F:6A:FA:B2:27:A7:A8:E0:70:D3:2D:C1:E8:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dec2a1ac-5ae4-47ad-8db1-652c7f3f7e8f/0/469F8799C9283F6AFAB227A7A8E070D32DC1E876.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/469F8799C9283F6AFAB227A7A8E070D32DC1E876.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dec2a1ac-5ae4-47ad-8db1-652c7f3f7e8f/0/469F8799C9283F6AFAB227A7A8E070D32DC1E876.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:db:09:1e:12:3a:df:04:41:e6:8b:3f:96:46:df:a8:ac:da: da:30:93:cc:4e:ca:7a:2f:a7:93:28:c3:bc:de:68:ed:3a:42: 52:02:86:a7:09:6c:73:90:4c:51:2b:62:cb:82:93:70:bb:76: f9:46:28:a4:f8:1b:58:a2:09:7d:b3:81:eb:7f:b1:7b:15:27: 64:ee:c4:7c:47:f6:eb:db:ef:87:d9:ff:ec:56:4b:bb:de:0a: 69:e9:7a:d3:b0:31:55:98:be:93:dc:0c:80:dd:32:1a:e1:be: ab:ff:f5:80:92:16:ae:d7:1a:0e:52:c1:da:ef:eb:10:54:3a: 96:fc:90:d7:1c:44:fb:18:ef:28:a4:10:7a:ea:41:3a:72:fd: 69:81:76:76:f7:b9:ed:6a:71:80:83:b7:7b:33:45:be:a6:6b: 59:9e:09:2b:f1:88:ff:09:1b:39:90:f3:34:3d:4a:e4:7c:44: 46:ac:8a:4b:79:f5:1d:78:2e:c5:8f:22:17:c8:93:86:a3:5f: 76:15:42:0f:ee:08:f6:c3:57:19:a0:d5:82:72:cd:ca:5d:05: 11:23:af:37:c6:8a:91:dd:b1:42:3b:85:51:e1:55:23:e0:e5: 14:4d:7d:33:85:c7:a6:6c:0c:c9:e2:ac:4d:81:b8:92:19:35: 56:74:b0:21 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYnWd87++2RrIPTR1BH33ZZ7R8gMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDY5Rjg3OTlDOTI4M0Y2QUZBQjIyN0E3QThFMDcwRDMy REMxRTg3NjAeFw0yNTA0MTIwNjI1MzlaFw0yNTA0MTUxNTM0MzlaMDMxMTAvBgNV BAMTKDU5M0U1MzZFMjhBQkI2MDg5MDkyQTc5MkMwRDJGNzE1RjBEMEU0QjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqm9npd5VB7sa3gQXyNJ1rSTCo b9nLJTB1vot+ctkDH0TQTY+9F2dEOzQ7zNYxnG6y4AvPjqg5F5N/RdhXq9qgP4YD a4VmgQkSS7sKJH9JB7m5yJS3poiTk2ULVDPzrxdty4AKjeTJ9WoJ4/7Cb6R9fhyl hrzbBxJCZsQ8THkgtQ5/IXa1ppKvN5CrXTKEnhO+Gcd0PmkpowSCaduUwEfOWJjF fGwspuZ/Ygt0HhNsPEoVgeI2g6Flum6k/jAsQCSMw+edlexcCxgpYHq9GZbv4EJa w4gtclnfEXrALd6zX3/350jI+6RFiiYz0sdMw2bM1FZqN433ugsb6AKBnMz5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWT5TbiirtgiQkqeSwNL3FfDQ5LMwHwYDVR0j BBgwFoAURp+HmckoP2r6sienqOBw0y3B6HYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZWMyYTFhYy01YWU0LTQ3YWQtOGRiMS02NTJjN2YzZjdlOGYvMC80NjlGODc5OUM5 MjgzRjZBRkFCMjI3QTdBOEUwNzBEMzJEQzFFODc2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNDY5Rjg3OTlDOTI4M0Y2QUZBQjIyN0E3QThFMDcwRDMyREMx RTg3Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGVjMmExYWMtNWFlNC00N2FkLThk YjEtNjUyYzdmM2Y3ZThmLzAvNDY5Rjg3OTlDOTI4M0Y2QUZBQjIyN0E3QThFMDcw RDMyREMxRTg3Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFjbCR4SOt8EQeaLP5ZG36is2towk8xOynov p5Mow7zeaO06QlIChqcJbHOQTFErYsuCk3C7dvlGKKT4G1iiCX2zget/sXsVJ2Tu xHxH9uvb74fZ/+xWS7veCmnpetOwMVWYvpPcDIDdMhrhvqv/9YCSFq7XGg5Swdrv 6xBUOpb8kNccRPsY7yikEHrqQTpy/WmBdnb3ue1qcYCDt3szRb6ma1meCSvxiP8J GzmQ8zQ9SuR8REasikt59R14LsWPIhfIk4ajX3YVQg/uCPbDVxmg1YJyzcpdBREj rzfGipHdsUI7hVHhVSPg5RRNfTOFx6ZsDMnirE2BuJIZNVZ0sCE= -----END CERTIFICATE-----Generated at Mon Apr 14 04:36:35 2025 by rpki-client