$ rpki-client -vvf repo-rpki.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/4A243A1EC4991C40D3A6148515E3C51981B425F7.mft File: 4A243A1EC4991C40D3A6148515E3C51981B425F7.mft (raw, json) Hash identifier: 88w3NgHmfBhC3w8Ln6KvLYxFYrUsu5GUdczAdFigUzk= Subject key identifier: 73:A0:51:3B:6A:6A:90:98:D6:EA:CA:F5:B9:E3:A1:22:28:AD:F9:C9 Authority key identifier: 4A:24:3A:1E:C4:99:1C:40:D3:A6:14:85:15:E3:C5:19:81:B4:25:F7 Certificate issuer: /CN=4A243A1EC4991C40D3A6148515E3C51981B425F7 Certificate serial: 263D85A542CBDD83AE6E97B064DB2E79ECF9B8BC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A243A1EC4991C40D3A6148515E3C51981B425F7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/4A243A1EC4991C40D3A6148515E3C51981B425F7.mft Manifest number: 0173 Signing time: Thu 05 Jun 2025 12:00:58 +0000 Manifest this update: Thu 05 Jun 2025 11:55:58 +0000 Manifest next update: Sun 08 Jun 2025 23:01:58 +0000 Files and hashes: 1: 3130332e3130392e3230372e302f32342d3234203d3e20313530393335.roa (hash: W7qNwUKI6yVYK0QKsHqMQf5TpfiakU3FHDTDzkx2y0k=) 2: 3130332e3130392e3230362e302f32342d3234203d3e20313530393335.roa (hash: Rcu96XphgA8WvPbRK/1ptZ3CZTir4MCBj7MHKlWlNMw=) 3: 4A243A1EC4991C40D3A6148515E3C51981B425F7.crl (hash: NhIEtuT3sHNLIjEILoF4b4QWegpJx3kZyJE81O/jEpA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/4A243A1EC4991C40D3A6148515E3C51981B425F7.crl rsync://repo-rpki.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/4A243A1EC4991C40D3A6148515E3C51981B425F7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A243A1EC4991C40D3A6148515E3C51981B425F7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 19:48:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:3d:85:a5:42:cb:dd:83:ae:6e:97:b0:64:db:2e:79:ec:f9:b8:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A243A1EC4991C40D3A6148515E3C51981B425F7 Validity Not Before: Jun 5 11:55:58 2025 GMT Not After : Jun 8 23:01:58 2025 GMT Subject: CN=73A0513B6A6A9098D6EACAF5B9E3A12228ADF9C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:83:dc:1b:67:a2:3f:db:77:8f:46:b7:87:87: ba:90:da:32:aa:7a:f8:1a:b2:e6:12:74:38:b0:99: 4d:46:b2:87:62:fe:4c:05:31:01:61:a6:f6:54:e2: 40:16:0d:20:4b:43:25:59:91:eb:1c:97:9c:9b:c1: 59:3a:0a:73:08:b9:05:64:b7:00:d4:39:9c:48:63: 82:1e:7d:c5:45:76:fc:6a:ad:4e:73:43:5f:a6:29: 07:fe:92:36:5d:2c:7c:9c:9e:15:60:5f:8a:a5:af: 1f:2b:e0:a9:f1:f5:58:b5:32:3f:d2:4d:67:75:95: e4:23:24:27:62:97:e8:6c:9e:fc:91:66:f6:e7:65: 3d:66:26:b4:92:a0:38:88:ca:b2:59:57:87:98:33: ee:6b:c5:d7:d9:c2:8a:da:60:18:68:60:d6:e8:82: e1:f1:ef:59:89:3c:16:95:ad:0b:c5:26:30:0d:06: 0d:7c:14:cd:37:ec:7c:96:02:1d:5a:3e:03:de:09: 63:35:4a:a1:3f:cf:61:c5:f7:70:bd:11:d6:9a:44: f0:cb:db:2a:01:f0:a1:b7:74:6c:f8:d4:3b:df:5f: f7:c5:52:54:b1:cf:5d:bf:94:38:44:55:f5:95:dd: 7c:4f:12:7b:34:f7:1b:42:c7:1e:97:62:5f:d6:8f: 45:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:A0:51:3B:6A:6A:90:98:D6:EA:CA:F5:B9:E3:A1:22:28:AD:F9:C9 X509v3 Authority Key Identifier: keyid:4A:24:3A:1E:C4:99:1C:40:D3:A6:14:85:15:E3:C5:19:81:B4:25:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/4A243A1EC4991C40D3A6148515E3C51981B425F7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A243A1EC4991C40D3A6148515E3C51981B425F7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/4A243A1EC4991C40D3A6148515E3C51981B425F7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:db:e8:07:34:63:9d:aa:31:3e:6a:d6:74:6b:b5:ca:97:6a: fc:9f:4d:73:72:cb:82:9b:c6:c6:60:54:0c:ea:e1:45:a1:56: f1:65:76:72:0a:1f:eb:99:fe:75:9a:9d:15:6a:93:22:ab:91: a5:9a:3c:88:b6:73:84:fb:12:74:3a:b1:1f:cf:cf:a1:cf:33: 60:0d:5e:f4:44:ef:22:95:80:75:a3:85:fb:3a:7c:da:88:ca: a8:c9:eb:b5:54:92:7f:fd:f7:e2:54:8f:c9:a7:a4:cd:72:5d: 5f:e1:7e:b8:b0:84:84:97:2c:87:72:3c:f3:a4:29:7d:06:b8: 06:c4:61:2a:38:87:05:c6:2c:80:1d:2e:81:c7:65:46:f1:92: 11:94:00:3d:38:53:e4:65:6f:2f:55:5f:1a:2b:f5:4b:f9:3d: 14:a3:b7:f7:e7:a0:b3:f4:fd:5e:67:8b:f5:51:ea:8b:ce:e9: dc:81:8d:a4:a4:2d:f2:1e:6d:f7:a9:91:c1:63:69:8a:f4:67: 77:26:af:ad:2d:54:e2:cf:51:8b:ca:33:9d:70:24:08:14:23: db:76:7d:7a:9f:80:91:a2:0c:f5:37:e6:e1:ea:67:7d:d9:b7: c5:5f:4d:23:b9:12:f0:ea:66:9d:f0:6b:a2:01:43:c3:a2:cd: 9b:6e:3c:65 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJj2FpULL3YOubpewZNsueez5uLwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEEyNDNBMUVDNDk5MUM0MEQzQTYxNDg1MTVFM0M1MTk4 MUI0MjVGNzAeFw0yNTA2MDUxMTU1NThaFw0yNTA2MDgyMzAxNThaMDMxMTAvBgNV BAMTKDczQTA1MTNCNkE2QTkwOThENkVBQ0FGNUI5RTNBMTIyMjhBREY5QzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdg9wbZ6I/23ePRreHh7qQ2jKq evgasuYSdDiwmU1Gsodi/kwFMQFhpvZU4kAWDSBLQyVZkescl5ybwVk6CnMIuQVk twDUOZxIY4IefcVFdvxqrU5zQ1+mKQf+kjZdLHycnhVgX4qlrx8r4Knx9Vi1Mj/S TWd1leQjJCdil+hsnvyRZvbnZT1mJrSSoDiIyrJZV4eYM+5rxdfZworaYBhoYNbo guHx71mJPBaVrQvFJjANBg18FM037HyWAh1aPgPeCWM1SqE/z2HF93C9EdaaRPDL 2yoB8KG3dGz41DvfX/fFUlSxz12/lDhEVfWV3XxPEns09xtCxx6XYl/Wj0U/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUc6BRO2pqkJjW6sr1ueOhIiit+ckwHwYDVR0j BBgwFoAUSiQ6HsSZHEDTphSFFePFGYG0JfcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l Yzg4OTJlYi1kZGMwLTRjYjYtOTU3Yy1iNjUzZjI4YmJmMzkvMC80QTI0M0ExRUM0 OTkxQzQwRDNBNjE0ODUxNUUzQzUxOTgxQjQyNUY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEEyNDNBMUVDNDk5MUM0MEQzQTYxNDg1MTVFM0M1MTk4MUI0 MjVGNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWM4ODkyZWItZGRjMC00Y2I2LTk1 N2MtYjY1M2YyOGJiZjM5LzAvNEEyNDNBMUVDNDk5MUM0MEQzQTYxNDg1MTVFM0M1 MTk4MUI0MjVGNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADLb6Ac0Y52qMT5q1nRrtcqXavyfTXNyy4Kb xsZgVAzq4UWhVvFldnIKH+uZ/nWanRVqkyKrkaWaPIi2c4T7EnQ6sR/Pz6HPM2AN XvRE7yKVgHWjhfs6fNqIyqjJ67VUkn/99+JUj8mnpM1yXV/hfriwhISXLIdyPPOk KX0GuAbEYSo4hwXGLIAdLoHHZUbxkhGUAD04U+Rlby9VXxor9Uv5PRSjt/fnoLP0 /V5ni/VR6ovO6dyBjaSkLfIebfepkcFjaYr0Z3cmr60tVOLPUYvKM51wJAgUI9t2 fXqfgJGiDPU35uHqZ33Zt8VfTSO5EvDqZp3wa6IBQ8OizZtuPGU= -----END CERTIFICATE-----Generated at Thu Jun 5 18:12:18 2025 by rpki-client