$ rpki-client -vvf repo-rpki.idnic.net/repo/f398063e-57a1-40f2-8527-4d0a69c5d647/0/4E054E064DCDF2E49F7282D7370B9EAFF42A944B.mft File: 4E054E064DCDF2E49F7282D7370B9EAFF42A944B.mft (raw, json) Hash identifier: 2B2R8t3VLYb+YER9Cq4qSI05wHBugti7eeaDjzd8Bzs= Subject key identifier: C5:55:9B:EA:F3:35:54:55:EE:6F:36:99:14:1E:C2:43:A2:0D:BB:34 Authority key identifier: 4E:05:4E:06:4D:CD:F2:E4:9F:72:82:D7:37:0B:9E:AF:F4:2A:94:4B Certificate issuer: /CN=4E054E064DCDF2E49F7282D7370B9EAFF42A944B Certificate serial: 5D34E7E69CFA9D496FA16A4BE27EBD123504F05C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E054E064DCDF2E49F7282D7370B9EAFF42A944B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f398063e-57a1-40f2-8527-4d0a69c5d647/0/4E054E064DCDF2E49F7282D7370B9EAFF42A944B.mft Manifest number: EF Signing time: Sat 05 Apr 2025 10:31:49 +0000 Manifest this update: Sat 05 Apr 2025 10:26:49 +0000 Manifest next update: Tue 08 Apr 2025 10:40:49 +0000 Files and hashes: 1: 3130332e3233392e32322e302f32342d3234203d3e20313336383635.roa (hash: f+ikvw3lFJQBhoG9P7rO8nWG3RR5gcK3OF+btbUSD1M=) 2: 3130332e3233392e32332e302f32342d3234203d3e20313336383635.roa (hash: POSivOx077pF2p/pUXYP2nnbwfTRFol262TOLoHtTCE=) 3: 4E054E064DCDF2E49F7282D7370B9EAFF42A944B.crl (hash: HIJXNKV3BLZUVKtmB3P69vCVsFrONefch+fNOC2vT70=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f398063e-57a1-40f2-8527-4d0a69c5d647/0/4E054E064DCDF2E49F7282D7370B9EAFF42A944B.crl rsync://repo-rpki.idnic.net/repo/f398063e-57a1-40f2-8527-4d0a69c5d647/0/4E054E064DCDF2E49F7282D7370B9EAFF42A944B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E054E064DCDF2E49F7282D7370B9EAFF42A944B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:34:e7:e6:9c:fa:9d:49:6f:a1:6a:4b:e2:7e:bd:12:35:04:f0:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4E054E064DCDF2E49F7282D7370B9EAFF42A944B Validity Not Before: Apr 5 10:26:49 2025 GMT Not After : Apr 8 10:40:49 2025 GMT Subject: CN=C5559BEAF3355455EE6F3699141EC243A20DBB34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:2f:5b:31:26:c8:05:20:54:9d:48:6f:3c:33: de:84:ed:87:d5:eb:ec:b1:a3:5f:0e:03:85:79:1f: 3e:5c:cb:bb:a1:e2:0c:65:94:06:e6:13:4c:19:d5: a1:1d:23:84:b6:d2:a2:90:05:37:6b:16:7f:c7:9c: b9:f4:21:87:1a:91:4d:ce:84:d7:d7:55:44:bc:37: 1f:cb:b8:c4:d9:9d:9f:6f:df:4d:7f:89:b2:1c:35: c2:83:a8:61:57:49:78:65:97:2c:c9:03:db:b6:5c: 71:70:28:1d:c5:c3:9d:db:f4:77:dd:06:95:5a:42: 29:c2:80:aa:d4:c6:ff:67:38:5c:9f:9a:5b:a8:71: 9d:e3:6e:90:f4:24:21:66:4b:af:76:03:07:b8:a1: 8e:c4:29:91:48:31:a2:0d:4a:2d:41:d0:fb:a4:0e: 9f:df:64:02:00:d5:1b:a8:34:35:14:26:57:d6:a5: 31:b9:f4:94:1d:0d:d1:84:81:8c:56:c5:e3:1b:bc: 9e:8d:90:42:d5:e8:78:d4:f8:f1:9b:e2:6d:b1:34: 48:8c:c9:c4:69:70:40:d8:89:50:4e:f0:02:cd:40: df:88:56:4f:fb:5c:8f:9f:44:ec:09:76:f1:b0:97: 60:78:f7:08:5d:5c:8b:06:de:2e:93:63:be:70:f1: 1e:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:55:9B:EA:F3:35:54:55:EE:6F:36:99:14:1E:C2:43:A2:0D:BB:34 X509v3 Authority Key Identifier: keyid:4E:05:4E:06:4D:CD:F2:E4:9F:72:82:D7:37:0B:9E:AF:F4:2A:94:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f398063e-57a1-40f2-8527-4d0a69c5d647/0/4E054E064DCDF2E49F7282D7370B9EAFF42A944B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E054E064DCDF2E49F7282D7370B9EAFF42A944B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f398063e-57a1-40f2-8527-4d0a69c5d647/0/4E054E064DCDF2E49F7282D7370B9EAFF42A944B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:b9:b0:31:9b:cd:4f:cc:52:64:15:4a:d0:dd:09:ba:de:a4: 94:4e:ea:31:57:d5:71:07:7e:52:f2:dd:21:b0:66:f5:b5:31: bc:9e:81:2d:87:6e:2c:4f:a4:69:c6:19:dc:28:89:74:32:89: b0:bb:1c:e6:fd:30:62:d4:43:02:21:70:fb:5c:b2:7e:74:b7: 58:4b:56:56:69:02:96:dd:93:14:25:40:4c:52:f8:aa:af:48: f7:00:85:08:f4:91:9d:7f:ea:12:84:53:3e:70:3d:fc:09:9e: 73:aa:e8:c7:84:02:cf:59:07:e8:46:10:ce:35:9d:24:31:fb: 1f:61:26:56:1f:d9:51:47:aa:09:cc:50:d6:c6:42:e8:37:cd: 16:8a:3b:75:0c:32:b5:7f:7e:75:85:ef:18:61:97:f8:08:15: d2:8c:21:3b:fd:1b:13:ad:92:4c:a9:fe:c2:d0:9f:a0:76:a5: 31:ed:e6:e7:9c:c4:88:ce:e4:ea:4e:e6:f6:45:50:16:12:33: 70:5a:01:5c:20:a8:f1:73:6e:be:ab:1d:34:af:ec:db:1f:d0: 82:cb:49:65:7b:7d:43:5b:b1:f2:94:90:ba:29:9a:a5:72:bd: 97:14:d9:4b:18:c1:fa:cc:21:b6:74:98:e3:4c:89:cb:1e:00: 3d:78:30:06 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXTTn5pz6nUlvoWpL4n69EjUE8FwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEUwNTRFMDY0RENERjJFNDlGNzI4MkQ3MzcwQjlFQUZG NDJBOTQ0QjAeFw0yNTA0MDUxMDI2NDlaFw0yNTA0MDgxMDQwNDlaMDMxMTAvBgNV BAMTKEM1NTU5QkVBRjMzNTU0NTVFRTZGMzY5OTE0MUVDMjQzQTIwREJCMzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/L1sxJsgFIFSdSG88M96E7YfV 6+yxo18OA4V5Hz5cy7uh4gxllAbmE0wZ1aEdI4S20qKQBTdrFn/HnLn0IYcakU3O hNfXVUS8Nx/LuMTZnZ9v301/ibIcNcKDqGFXSXhllyzJA9u2XHFwKB3Fw53b9Hfd BpVaQinCgKrUxv9nOFyfmluocZ3jbpD0JCFmS692Awe4oY7EKZFIMaINSi1B0Puk Dp/fZAIA1RuoNDUUJlfWpTG59JQdDdGEgYxWxeMbvJ6NkELV6HjU+PGb4m2xNEiM ycRpcEDYiVBO8ALNQN+IVk/7XI+fROwJdvGwl2B49whdXIsG3i6TY75w8R6HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxVWb6vM1VFXubzaZFB7CQ6INuzQwHwYDVR0j BBgwFoAUTgVOBk3N8uSfcoLXNwuer/QqlEswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m Mzk4MDYzZS01N2ExLTQwZjItODUyNy00ZDBhNjljNWQ2NDcvMC80RTA1NEUwNjRE Q0RGMkU0OUY3MjgyRDczNzBCOUVBRkY0MkE5NDRCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEUwNTRFMDY0RENERjJFNDlGNzI4MkQ3MzcwQjlFQUZGNDJB OTQ0Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjM5ODA2M2UtNTdhMS00MGYyLTg1 MjctNGQwYTY5YzVkNjQ3LzAvNEUwNTRFMDY0RENERjJFNDlGNzI4MkQ3MzcwQjlF QUZGNDJBOTQ0Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA25sDGbzU/MUmQVStDdCbrepJRO6jFX1XEH flLy3SGwZvW1MbyegS2HbixPpGnGGdwoiXQyibC7HOb9MGLUQwIhcPtcsn50t1hL VlZpApbdkxQlQExS+KqvSPcAhQj0kZ1/6hKEUz5wPfwJnnOq6MeEAs9ZB+hGEM41 nSQx+x9hJlYf2VFHqgnMUNbGQug3zRaKO3UMMrV/fnWF7xhhl/gIFdKMITv9GxOt kkyp/sLQn6B2pTHt5uecxIjO5OpO5vZFUBYSM3BaAVwgqPFzbr6rHTSv7Nsf0ILL SWV7fUNbsfKUkLopmqVyvZcU2UsYwfrMIbZ0mONMicseAD14MAY= -----END CERTIFICATE-----Generated at Sat Apr 5 16:42:10 2025 by rpki-client