$ rpki-client -vvf repo-rpki.idnic.net/repo/ea47231f-02dd-49e8-aa25-2d54c0a999ca/0/439A4981549ABB151B12D6EC85FC8D0DBF99A81E.mft File: 439A4981549ABB151B12D6EC85FC8D0DBF99A81E.mft (raw, json) Hash identifier: yFJpXtL4ISA33YH8ffFQSEr7yKCDZcUzfeIpD1sbkkM= Subject key identifier: E4:AD:68:0D:3B:09:E6:92:4C:98:A0:A2:4A:16:E5:18:75:60:99:C3 Authority key identifier: 43:9A:49:81:54:9A:BB:15:1B:12:D6:EC:85:FC:8D:0D:BF:99:A8:1E Certificate issuer: /CN=439A4981549ABB151B12D6EC85FC8D0DBF99A81E Certificate serial: 7BFC608B0197D12EB6B6A2E631A3F8B1C29F780E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/439A4981549ABB151B12D6EC85FC8D0DBF99A81E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ea47231f-02dd-49e8-aa25-2d54c0a999ca/0/439A4981549ABB151B12D6EC85FC8D0DBF99A81E.mft Manifest number: 0428 Signing time: Fri 06 Jun 2025 17:50:42 +0000 Manifest this update: Fri 06 Jun 2025 17:45:42 +0000 Manifest next update: Mon 09 Jun 2025 18:44:42 +0000 Files and hashes: 1: 439A4981549ABB151B12D6EC85FC8D0DBF99A81E.crl (hash: x5ouW1HEjzKXqKY+eCjaob3KmAH983wuPOgG0HZnAkM=) 2: 3130332e3233332e3130322e302f32332d3234203d3e20313336313037.roa (hash: JI3pjhPmyInlzEtZ8PXbjRWk78z+cy0q6o/inypVTws=) 3: 3130332e3131322e3234342e302f32332d3234203d3e20313336313037.roa (hash: QOFHoPuY9NpdPQj6xa7cBpnTsr+iASD85o3lNcYlh68=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ea47231f-02dd-49e8-aa25-2d54c0a999ca/0/439A4981549ABB151B12D6EC85FC8D0DBF99A81E.crl rsync://repo-rpki.idnic.net/repo/ea47231f-02dd-49e8-aa25-2d54c0a999ca/0/439A4981549ABB151B12D6EC85FC8D0DBF99A81E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/439A4981549ABB151B12D6EC85FC8D0DBF99A81E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 18:44:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:fc:60:8b:01:97:d1:2e:b6:b6:a2:e6:31:a3:f8:b1:c2:9f:78:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=439A4981549ABB151B12D6EC85FC8D0DBF99A81E Validity Not Before: Jun 6 17:45:42 2025 GMT Not After : Jun 9 18:44:42 2025 GMT Subject: CN=E4AD680D3B09E6924C98A0A24A16E518756099C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:6a:41:ab:82:01:b7:1a:29:31:7f:a9:d9:6d: b3:cf:e9:56:19:8d:eb:44:8b:0b:9b:6a:3c:37:d7: 8c:c4:91:da:96:d3:ef:e1:9d:7f:ce:e9:c7:42:ac: 44:2f:03:6a:29:36:64:08:92:38:c0:98:b9:41:e9: 7f:58:b6:d1:e2:a3:d1:32:77:ed:24:c0:10:51:b6: c0:b8:44:0c:20:cf:be:89:9e:a9:50:1e:c9:61:44: e6:d7:a9:36:8f:82:7d:48:cc:0b:ca:33:31:ed:d2: b0:ed:15:81:79:87:68:32:b0:45:fc:52:bf:4e:60: 76:04:2e:2d:7d:9e:e7:53:b7:13:a4:e2:b8:9c:2e: da:31:f1:ac:a4:e9:a4:f7:90:e1:f3:8f:24:9d:0c: e5:41:dd:be:fe:f2:21:68:05:51:2f:70:96:27:e6: e1:69:cf:89:27:8d:86:fd:3b:70:8a:9f:da:aa:79: ea:28:04:a4:ae:4f:67:2b:00:c4:a6:dc:af:9b:13: 60:e8:e0:a5:f1:80:21:3a:b2:d3:00:0e:4f:09:21: 90:8b:5b:0b:98:f0:e8:c5:a7:4a:02:5d:c9:4f:1d: a2:99:5f:8a:a0:15:0b:99:62:d2:3a:49:25:30:80: e8:1d:02:d3:2c:1c:cb:c9:9c:23:cb:87:50:bb:f9: a1:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:AD:68:0D:3B:09:E6:92:4C:98:A0:A2:4A:16:E5:18:75:60:99:C3 X509v3 Authority Key Identifier: keyid:43:9A:49:81:54:9A:BB:15:1B:12:D6:EC:85:FC:8D:0D:BF:99:A8:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ea47231f-02dd-49e8-aa25-2d54c0a999ca/0/439A4981549ABB151B12D6EC85FC8D0DBF99A81E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/439A4981549ABB151B12D6EC85FC8D0DBF99A81E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea47231f-02dd-49e8-aa25-2d54c0a999ca/0/439A4981549ABB151B12D6EC85FC8D0DBF99A81E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:5f:6b:35:6e:85:7f:5a:fc:6a:c8:ea:be:29:d1:23:52:e5: ba:93:a8:19:8e:da:66:4b:e4:cd:4d:2e:b7:83:53:ca:f1:45: 9b:e2:c9:9c:78:c6:09:1e:b5:a2:00:a5:8d:1e:11:71:04:df: 92:49:0b:6f:69:59:81:72:74:d8:35:53:5c:3c:79:91:d8:46: 92:b2:99:20:01:8a:a1:7d:71:f4:c8:f1:26:0d:1a:c1:8e:46: 7b:f9:77:1c:8c:04:60:30:55:48:5f:43:87:9a:f2:cb:ab:08: 12:ee:b6:84:6d:76:07:5b:a1:14:4b:ca:4c:63:98:cf:12:8f: b0:00:d3:20:fe:94:08:09:5e:fa:12:72:dc:61:8f:02:28:a0: 00:08:25:53:9e:e6:8d:11:4c:53:2f:d2:bb:3b:4d:c8:e4:22: 30:f3:93:2b:d0:32:3d:5e:be:de:e3:c8:81:52:df:71:c6:b4: 3d:07:1b:9d:b0:a4:57:3a:a7:91:a8:31:e0:4c:56:f8:ef:d0: ab:49:3e:7d:68:70:b4:d5:db:b7:83:20:1c:25:06:83:98:aa: 11:7e:26:4d:ca:52:e7:a9:e3:78:3b:de:5b:c1:8c:c1:ef:3c: 62:df:7d:cf:0a:a2:6e:97:84:b3:c0:5c:d6:ce:d0:d1:ad:3e: 3f:16:e6:6e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe/xgiwGX0S62tqLmMaP4scKfeA4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDM5QTQ5ODE1NDlBQkIxNTFCMTJENkVDODVGQzhEMERC Rjk5QTgxRTAeFw0yNTA2MDYxNzQ1NDJaFw0yNTA2MDkxODQ0NDJaMDMxMTAvBgNV BAMTKEU0QUQ2ODBEM0IwOUU2OTI0Qzk4QTBBMjRBMTZFNTE4NzU2MDk5QzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaakGrggG3Gikxf6nZbbPP6VYZ jetEiwubajw314zEkdqW0+/hnX/O6cdCrEQvA2opNmQIkjjAmLlB6X9YttHio9Ey d+0kwBBRtsC4RAwgz76JnqlQHslhRObXqTaPgn1IzAvKMzHt0rDtFYF5h2gysEX8 Ur9OYHYELi19nudTtxOk4ricLtox8ayk6aT3kOHzjySdDOVB3b7+8iFoBVEvcJYn 5uFpz4knjYb9O3CKn9qqeeooBKSuT2crAMSm3K+bE2Do4KXxgCE6stMADk8JIZCL WwuY8OjFp0oCXclPHaKZX4qgFQuZYtI6SSUwgOgdAtMsHMvJnCPLh1C7+aFpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5K1oDTsJ5pJMmKCiShblGHVgmcMwHwYDVR0j BBgwFoAUQ5pJgVSauxUbEtbshfyNDb+ZqB4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YTQ3MjMxZi0wMmRkLTQ5ZTgtYWEyNS0yZDU0YzBhOTk5Y2EvMC80MzlBNDk4MTU0 OUFCQjE1MUIxMkQ2RUM4NUZDOEQwREJGOTlBODFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDM5QTQ5ODE1NDlBQkIxNTFCMTJENkVDODVGQzhEMERCRjk5 QTgxRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWE0NzIzMWYtMDJkZC00OWU4LWFh MjUtMmQ1NGMwYTk5OWNhLzAvNDM5QTQ5ODE1NDlBQkIxNTFCMTJENkVDODVGQzhE MERCRjk5QTgxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAVfazVuhX9a/GrI6r4p0SNS5bqTqBmO2mZL 5M1NLreDU8rxRZviyZx4xgketaIApY0eEXEE35JJC29pWYFydNg1U1w8eZHYRpKy mSABiqF9cfTI8SYNGsGORnv5dxyMBGAwVUhfQ4ea8surCBLutoRtdgdboRRLykxj mM8Sj7AA0yD+lAgJXvoSctxhjwIooAAIJVOe5o0RTFMv0rs7TcjkIjDzkyvQMj1e vt7jyIFS33HGtD0HG52wpFc6p5GoMeBMVvjv0KtJPn1ocLTV27eDIBwlBoOYqhF+ Jk3KUuep43g73lvBjMHvPGLffc8Kom6XhLPAXNbO0NGtPj8W5m4= -----END CERTIFICATE-----Generated at Sat Jun 7 04:21:48 2025 by rpki-client