$ rpki-client -vvf repo-rpki.idnic.net/repo/e0620cfc-b46c-457c-9fde-297710c546a9/0/473225269441779F80E443B1EA516CC99E4ED4DA.mft File: 473225269441779F80E443B1EA516CC99E4ED4DA.mft (raw, json) Hash identifier: 4wXuP/v+n0SN5cgFWsp1XlLb41F1rUS+avbDmQ44K/g= Subject key identifier: 3E:9E:C0:9C:CF:45:D9:85:EE:1C:72:16:1E:73:75:C9:D8:B2:B7:55 Authority key identifier: 47:32:25:26:94:41:77:9F:80:E4:43:B1:EA:51:6C:C9:9E:4E:D4:DA Certificate issuer: /CN=473225269441779F80E443B1EA516CC99E4ED4DA Certificate serial: 75A48A6549F61B979756835BF73D23211DC41B56 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/473225269441779F80E443B1EA516CC99E4ED4DA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e0620cfc-b46c-457c-9fde-297710c546a9/0/473225269441779F80E443B1EA516CC99E4ED4DA.mft Manifest number: 0154 Signing time: Tue 03 Jun 2025 17:22:40 +0000 Manifest this update: Tue 03 Jun 2025 17:17:40 +0000 Manifest next update: Fri 06 Jun 2025 20:22:40 +0000 Files and hashes: 1: 3130332e3132312e3138362e302f32342d3234203d3e20313431393039.roa (hash: opCF0u3jko4hNWDE/2pVcJdIdU0FHQiXsJlqg5I4v5U=) 2: 473225269441779F80E443B1EA516CC99E4ED4DA.crl (hash: UK1Um06FxySYguM3Mbu+Vk6UF/dgcYCeSNPfQhS01T0=) 3: 3130332e3132312e3138372e302f32342d3234203d3e20313431393039.roa (hash: ICTrr1zawcyGxqE9qaGBu/NO12Zp3KpSJLdHGzxMVFA=) 4: 3130332e3132312e3138362e302f32332d3233203d3e20313431393039.roa (hash: oAysGbdydhifr7l/UknID+HyQ/T/iVxBHJ4DGeZc8gQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e0620cfc-b46c-457c-9fde-297710c546a9/0/473225269441779F80E443B1EA516CC99E4ED4DA.crl rsync://repo-rpki.idnic.net/repo/e0620cfc-b46c-457c-9fde-297710c546a9/0/473225269441779F80E443B1EA516CC99E4ED4DA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/473225269441779F80E443B1EA516CC99E4ED4DA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 20:22:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:a4:8a:65:49:f6:1b:97:97:56:83:5b:f7:3d:23:21:1d:c4:1b:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=473225269441779F80E443B1EA516CC99E4ED4DA Validity Not Before: Jun 3 17:17:40 2025 GMT Not After : Jun 6 20:22:40 2025 GMT Subject: CN=3E9EC09CCF45D985EE1C72161E7375C9D8B2B755 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f6:1d:8a:06:0a:7f:cc:2a:7a:52:5c:bc:72: 83:84:a9:5e:79:91:0d:34:21:87:12:2e:d9:05:d5: 49:2d:b4:0f:75:65:82:1f:ce:7a:c7:41:d6:cd:ab: 97:88:02:7b:07:c4:42:07:d5:9a:79:f3:59:e2:4c: 2a:98:6f:73:bc:35:e1:ed:8d:23:3c:43:55:14:45: 82:37:59:b1:1a:97:c9:83:26:31:e8:0f:5b:17:e5: 76:e6:bf:e1:d0:e3:8d:78:5a:59:bb:b5:3a:dc:8e: b2:fe:ab:bd:e1:be:18:55:eb:fc:6c:ed:ea:b8:50: 59:83:dc:49:28:70:56:6f:60:a2:e9:6f:54:72:49: df:3f:75:02:f8:d0:8b:bc:3c:87:90:0d:17:ff:e8: b1:75:3b:97:32:22:63:34:01:20:d6:7e:4a:52:2c: 22:87:9d:ef:9c:ca:83:70:eb:ac:29:4a:df:cd:7c: 1b:7d:8e:08:e7:16:35:b5:b1:6c:65:6c:db:68:86: d3:7b:41:e4:b8:cd:92:b8:47:6f:1a:7a:fd:d1:c9: dd:4f:ba:56:85:e3:92:92:93:e4:32:4f:0e:58:df: fa:d4:aa:d0:51:54:e9:33:aa:76:0e:a2:eb:a3:f5: ef:0c:5a:e9:88:71:95:99:45:21:73:94:88:dc:13: f5:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:9E:C0:9C:CF:45:D9:85:EE:1C:72:16:1E:73:75:C9:D8:B2:B7:55 X509v3 Authority Key Identifier: keyid:47:32:25:26:94:41:77:9F:80:E4:43:B1:EA:51:6C:C9:9E:4E:D4:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e0620cfc-b46c-457c-9fde-297710c546a9/0/473225269441779F80E443B1EA516CC99E4ED4DA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/473225269441779F80E443B1EA516CC99E4ED4DA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e0620cfc-b46c-457c-9fde-297710c546a9/0/473225269441779F80E443B1EA516CC99E4ED4DA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:95:ec:2d:03:6e:f7:11:38:78:c9:81:d9:69:44:e6:a2:29: ed:29:1a:5b:b2:2e:71:a7:a8:a0:9a:8e:69:71:ae:fb:8f:dd: 75:00:d5:f8:70:48:3b:fe:f9:50:96:a4:6e:f6:1a:5b:21:b4: 39:64:01:81:5c:e6:64:26:b0:55:48:17:c8:f8:47:e0:a6:cc: ef:31:04:98:c4:4c:68:e0:cd:5e:f8:1b:cd:4b:8b:b5:42:e1: ac:f4:78:29:9a:6d:a1:e9:d9:11:82:84:69:da:05:8c:b1:61: 65:76:fe:28:69:b7:72:c1:c0:ca:9f:a2:dc:45:8c:4d:68:5e: 46:b9:dd:63:bd:a7:80:86:28:d2:78:12:9d:3d:82:2f:e8:ab: 61:5b:59:d7:89:bc:e3:44:5b:a5:d6:3d:30:33:93:66:f6:db: 45:b3:c9:81:3e:7c:2b:6d:a5:a0:04:eb:33:b1:84:af:a7:6f: 6d:33:37:b9:91:3d:80:68:30:c9:a0:48:ef:c1:e4:fe:d3:13: 55:8a:01:2b:84:f6:bd:d6:e9:fc:f4:e8:d7:7d:6d:06:3b:f3: 25:c2:5a:2c:a7:31:e9:c0:06:53:fa:91:9f:9b:21:75:30:94: bc:b6:b0:30:a2:e7:60:74:6d:a1:ec:17:38:dc:5d:31:17:50: d8:77:30:95 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdaSKZUn2G5eXVoNb9z0jIR3EG1YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDczMjI1MjY5NDQxNzc5RjgwRTQ0M0IxRUE1MTZDQzk5 RTRFRDREQTAeFw0yNTA2MDMxNzE3NDBaFw0yNTA2MDYyMDIyNDBaMDMxMTAvBgNV BAMTKDNFOUVDMDlDQ0Y0NUQ5ODVFRTFDNzIxNjFFNzM3NUM5RDhCMkI3NTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC59h2KBgp/zCp6Uly8coOEqV55 kQ00IYcSLtkF1UkttA91ZYIfznrHQdbNq5eIAnsHxEIH1Zp581niTCqYb3O8NeHt jSM8Q1UURYI3WbEal8mDJjHoD1sX5Xbmv+HQ4414Wlm7tTrcjrL+q73hvhhV6/xs 7eq4UFmD3EkocFZvYKLpb1RySd8/dQL40Iu8PIeQDRf/6LF1O5cyImM0ASDWfkpS LCKHne+cyoNw66wpSt/NfBt9jgjnFjW1sWxlbNtohtN7QeS4zZK4R28aev3Ryd1P ulaF45KSk+QyTw5Y3/rUqtBRVOkzqnYOouuj9e8MWumIcZWZRSFzlIjcE/WXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPp7AnM9F2YXuHHIWHnN1ydiyt1UwHwYDVR0j BBgwFoAURzIlJpRBd5+A5EOx6lFsyZ5O1NowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MDYyMGNmYy1iNDZjLTQ1N2MtOWZkZS0yOTc3MTBjNTQ2YTkvMC80NzMyMjUyNjk0 NDE3NzlGODBFNDQzQjFFQTUxNkNDOTlFNEVENERBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDczMjI1MjY5NDQxNzc5RjgwRTQ0M0IxRUE1MTZDQzk5RTRF RDREQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTA2MjBjZmMtYjQ2Yy00NTdjLTlm ZGUtMjk3NzEwYzU0NmE5LzAvNDczMjI1MjY5NDQxNzc5RjgwRTQ0M0IxRUE1MTZD Qzk5RTRFRDREQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALmV7C0DbvcROHjJgdlpROaiKe0pGluyLnGn qKCajmlxrvuP3XUA1fhwSDv++VCWpG72GlshtDlkAYFc5mQmsFVIF8j4R+CmzO8x BJjETGjgzV74G81Li7VC4az0eCmabaHp2RGChGnaBYyxYWV2/ihpt3LBwMqfotxF jE1oXka53WO9p4CGKNJ4Ep09gi/oq2FbWdeJvONEW6XWPTAzk2b220WzyYE+fCtt paAE6zOxhK+nb20zN7mRPYBoMMmgSO/B5P7TE1WKASuE9r3W6fz06Nd9bQY78yXC WiynMenABlP6kZ+bIXUwlLy2sDCi52B0baHsFzjcXTEXUNh3MJU= -----END CERTIFICATE-----Generated at Tue Jun 3 23:16:00 2025 by rpki-client