$ rpki-client -vvf repo-rpki.idnic.net/repo/f3a62c9a-d4f0-454b-807f-84f9b3c202b3/0/4551A032C44485FF6593E043527E3E1CE35B4C46.mft File: 4551A032C44485FF6593E043527E3E1CE35B4C46.mft (raw, json) Hash identifier: BrAFFB6BkImA9MwxPvm77dGgx08JEDPpxnfrlN2bWv4= Subject key identifier: 33:44:99:D8:10:B6:BF:B1:AC:E6:BB:4C:77:7A:98:6A:93:CF:E6:5E Authority key identifier: 45:51:A0:32:C4:44:85:FF:65:93:E0:43:52:7E:3E:1C:E3:5B:4C:46 Certificate issuer: /CN=4551A032C44485FF6593E043527E3E1CE35B4C46 Certificate serial: 196B50EBE138ECFC44BBC75A9D943DC369AC0B5F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4551A032C44485FF6593E043527E3E1CE35B4C46.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f3a62c9a-d4f0-454b-807f-84f9b3c202b3/0/4551A032C44485FF6593E043527E3E1CE35B4C46.mft Manifest number: 04DA Signing time: Mon 02 Jun 2025 02:04:17 +0000 Manifest this update: Mon 02 Jun 2025 01:59:17 +0000 Manifest next update: Thu 05 Jun 2025 13:38:17 +0000 Files and hashes: 1: 3130332e3231392e37322e302f32322d3234203d3e20313335343635.roa (hash: cwL/Wm98vbTxoyJQfTlH4ycMGF6EbITvKpTsxzWifEM=) 2: 4551A032C44485FF6593E043527E3E1CE35B4C46.crl (hash: 9Emyp64N2vggljqK7FVfEaPcdQD9fWgoU6rdpyy7Ras=) 3: 323430353a346338303a3a2f33322d3438203d3e20313335343635.roa (hash: MKGEqu2Psk6FQlMCBwUj3C02UOwY+xcEBLE/JQF9Mu0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f3a62c9a-d4f0-454b-807f-84f9b3c202b3/0/4551A032C44485FF6593E043527E3E1CE35B4C46.crl rsync://repo-rpki.idnic.net/repo/f3a62c9a-d4f0-454b-807f-84f9b3c202b3/0/4551A032C44485FF6593E043527E3E1CE35B4C46.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4551A032C44485FF6593E043527E3E1CE35B4C46.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 13:38:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:6b:50:eb:e1:38:ec:fc:44:bb:c7:5a:9d:94:3d:c3:69:ac:0b:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4551A032C44485FF6593E043527E3E1CE35B4C46 Validity Not Before: Jun 2 01:59:17 2025 GMT Not After : Jun 5 13:38:17 2025 GMT Subject: CN=334499D810B6BFB1ACE6BB4C777A986A93CFE65E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:b2:3f:85:24:76:c6:e8:73:13:7e:25:58:1f: bb:03:66:a0:2b:80:a8:57:7e:d2:87:42:ad:a9:37: 48:aa:be:10:30:e0:8d:96:75:d9:44:bc:7c:0b:24: 42:81:06:f1:e7:e8:4e:37:b0:f9:ae:6b:a3:59:68: fc:ab:15:5b:11:04:94:da:51:b2:5f:23:e4:d7:38: 03:a7:33:ad:74:61:62:68:26:a0:76:b3:17:7d:eb: 58:07:df:e9:84:22:42:cb:cf:e6:f5:a4:16:ad:16: 6c:5c:8d:09:d4:ed:b2:a4:05:e2:7f:9f:3a:40:83: 4b:9b:ca:05:70:7d:03:ef:1c:5b:9a:0c:b7:9b:ec: 1d:cf:2e:3e:74:ea:90:86:6e:6a:c3:1d:38:24:f1: 52:f2:31:3a:64:c8:a9:9c:34:3f:c3:8d:19:82:9a: 9b:8b:70:1e:5a:b6:7f:a3:c3:a9:94:4f:e9:c7:35: f3:81:cf:63:20:5f:0c:17:66:c5:de:04:84:09:b5: 51:e1:c2:2d:9c:df:79:53:ff:7c:bb:90:11:d1:4a: 48:77:8b:88:85:a6:cf:e0:9b:18:4d:11:47:8a:f2: 03:ed:9c:9f:ee:ff:c2:1d:fe:f0:b6:59:8e:95:e0: c0:6d:1e:76:91:a2:da:d5:07:22:29:d3:24:c8:34: ca:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:44:99:D8:10:B6:BF:B1:AC:E6:BB:4C:77:7A:98:6A:93:CF:E6:5E X509v3 Authority Key Identifier: keyid:45:51:A0:32:C4:44:85:FF:65:93:E0:43:52:7E:3E:1C:E3:5B:4C:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f3a62c9a-d4f0-454b-807f-84f9b3c202b3/0/4551A032C44485FF6593E043527E3E1CE35B4C46.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4551A032C44485FF6593E043527E3E1CE35B4C46.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f3a62c9a-d4f0-454b-807f-84f9b3c202b3/0/4551A032C44485FF6593E043527E3E1CE35B4C46.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:9d:f9:1d:9e:e4:1c:96:37:39:66:a0:62:1d:db:62:bb:19: 55:fe:54:2b:b7:28:f9:99:12:20:de:3d:49:27:bb:2e:c1:00: 8f:e6:24:c1:48:10:fd:6e:a9:da:29:18:80:27:eb:45:a9:3e: c9:83:3d:12:7d:06:ca:0b:9c:1c:9c:2c:fe:07:39:de:e6:96: d1:76:68:7f:3d:e8:ae:ed:bc:04:6e:68:29:45:94:fd:9c:b4: d0:6c:c8:16:1a:37:48:b3:5f:24:4d:e1:d8:a5:f2:82:4a:74: f6:3a:f6:83:03:3f:e8:4d:c0:7d:f4:e0:fe:8a:83:37:0a:1c: 10:a1:a9:63:b2:5e:d2:ed:8c:10:27:c2:08:31:03:f7:ac:6f: 9c:5c:10:41:e0:08:89:48:d3:2f:8e:f4:9e:2b:a6:0a:a8:2f: 55:0f:2a:d4:c8:2b:e8:62:8f:9b:12:11:76:7e:6b:bd:00:1c: f7:70:10:3b:2c:4f:b7:58:0b:02:2c:9f:b2:a2:b0:79:ee:98: c5:94:ba:e4:0c:be:dc:64:2c:b7:90:01:39:3f:0c:1a:5d:71: 92:7e:42:87:5a:2c:77:b9:66:32:c5:0a:c5:a6:ab:67:13:97: 15:e4:ee:b1:3b:92:f1:3d:1e:67:42:c0:23:89:f5:81:87:cc: 75:2a:f4:86 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGWtQ6+E47PxEu8danZQ9w2msC18wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDU1MUEwMzJDNDQ0ODVGRjY1OTNFMDQzNTI3RTNFMUNF MzVCNEM0NjAeFw0yNTA2MDIwMTU5MTdaFw0yNTA2MDUxMzM4MTdaMDMxMTAvBgNV BAMTKDMzNDQ5OUQ4MTBCNkJGQjFBQ0U2QkI0Qzc3N0E5ODZBOTNDRkU2NUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXsj+FJHbG6HMTfiVYH7sDZqAr gKhXftKHQq2pN0iqvhAw4I2WddlEvHwLJEKBBvHn6E43sPmua6NZaPyrFVsRBJTa UbJfI+TXOAOnM610YWJoJqB2sxd961gH3+mEIkLLz+b1pBatFmxcjQnU7bKkBeJ/ nzpAg0ubygVwfQPvHFuaDLeb7B3PLj506pCGbmrDHTgk8VLyMTpkyKmcND/DjRmC mpuLcB5atn+jw6mUT+nHNfOBz2MgXwwXZsXeBIQJtVHhwi2c33lT/3y7kBHRSkh3 i4iFps/gmxhNEUeK8gPtnJ/u/8Id/vC2WY6V4MBtHnaRotrVByIp0yTINMo9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUM0SZ2BC2v7Gs5rtMd3qYapPP5l4wHwYDVR0j BBgwFoAURVGgMsREhf9lk+BDUn4+HONbTEYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m M2E2MmM5YS1kNGYwLTQ1NGItODA3Zi04NGY5YjNjMjAyYjMvMC80NTUxQTAzMkM0 NDQ4NUZGNjU5M0UwNDM1MjdFM0UxQ0UzNUI0QzQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDU1MUEwMzJDNDQ0ODVGRjY1OTNFMDQzNTI3RTNFMUNFMzVC NEM0Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjNhNjJjOWEtZDRmMC00NTRiLTgw N2YtODRmOWIzYzIwMmIzLzAvNDU1MUEwMzJDNDQ0ODVGRjY1OTNFMDQzNTI3RTNF MUNFMzVCNEM0Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEad+R2e5ByWNzlmoGId22K7GVX+VCu3KPmZ EiDePUknuy7BAI/mJMFIEP1uqdopGIAn60WpPsmDPRJ9BsoLnBycLP4HOd7mltF2 aH896K7tvARuaClFlP2ctNBsyBYaN0izXyRN4dil8oJKdPY69oMDP+hNwH304P6K gzcKHBChqWOyXtLtjBAnwggxA/esb5xcEEHgCIlI0y+O9J4rpgqoL1UPKtTIK+hi j5sSEXZ+a70AHPdwEDssT7dYCwIsn7KisHnumMWUuuQMvtxkLLeQATk/DBpdcZJ+ QodaLHe5ZjLFCsWmq2cTlxXk7rE7kvE9HmdCwCOJ9YGHzHUq9IY= -----END CERTIFICATE-----Generated at Tue Jun 3 23:26:35 2025 by rpki-client