$ rpki-client -vvf repo-rpki.idnic.net/repo/f3a62c9a-d4f0-454b-807f-84f9b3c202b3/0/4551A032C44485FF6593E043527E3E1CE35B4C46.mft File: 4551A032C44485FF6593E043527E3E1CE35B4C46.mft (raw, json) Hash identifier: XPNX8OZOsOdHvAKXH5nSaVkSlDP3kkjsHpbpoAERylI= Subject key identifier: F9:03:79:AF:F8:48:E4:D6:04:1C:AD:E8:DD:9E:78:36:66:82:07:2D Authority key identifier: 45:51:A0:32:C4:44:85:FF:65:93:E0:43:52:7E:3E:1C:E3:5B:4C:46 Certificate issuer: /CN=4551A032C44485FF6593E043527E3E1CE35B4C46 Certificate serial: 21844521F136E8B2045460D4F5C26DED2261BAFF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4551A032C44485FF6593E043527E3E1CE35B4C46.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f3a62c9a-d4f0-454b-807f-84f9b3c202b3/0/4551A032C44485FF6593E043527E3E1CE35B4C46.mft Manifest number: 04BF Signing time: Thu 03 Apr 2025 16:41:11 +0000 Manifest this update: Thu 03 Apr 2025 16:36:11 +0000 Manifest next update: Sun 06 Apr 2025 23:37:11 +0000 Files and hashes: 1: 323430353a346338303a3a2f33322d3438203d3e20313335343635.roa (hash: OYU7ZkcN3C3+DAiJQaAnt/A43gCXXQ/u9mZU7QAOaPs=) 2: 4551A032C44485FF6593E043527E3E1CE35B4C46.crl (hash: ZshY1nvNasrKJDNYnCp+jf8BJiziqgdibuUa7sTHOjk=) 3: 3130332e3231392e37322e302f32322d3234203d3e20313335343635.roa (hash: EXu9NdkahR7wHeyrZX5hyK8z7OlXRnuNpluHlhH9hpY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f3a62c9a-d4f0-454b-807f-84f9b3c202b3/0/4551A032C44485FF6593E043527E3E1CE35B4C46.crl rsync://repo-rpki.idnic.net/repo/f3a62c9a-d4f0-454b-807f-84f9b3c202b3/0/4551A032C44485FF6593E043527E3E1CE35B4C46.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4551A032C44485FF6593E043527E3E1CE35B4C46.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Apr 2025 23:37:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:84:45:21:f1:36:e8:b2:04:54:60:d4:f5:c2:6d:ed:22:61:ba:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4551A032C44485FF6593E043527E3E1CE35B4C46 Validity Not Before: Apr 3 16:36:11 2025 GMT Not After : Apr 6 23:37:11 2025 GMT Subject: CN=F90379AFF848E4D6041CADE8DD9E78366682072D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:85:cd:78:45:ea:a7:a1:dc:87:1f:28:b5:76: 6d:17:e2:b2:5f:74:9d:2d:28:4c:c9:86:27:2d:1c: e4:bc:a5:06:82:e6:90:14:4c:c1:f4:8a:35:58:a6: d5:d7:82:93:b0:e1:5d:db:28:53:39:68:26:a7:cc: bf:3d:a6:2d:61:c3:25:d0:a6:14:7c:06:03:0f:d8: d7:d8:4c:f4:41:01:9b:d0:f4:91:2d:ce:14:3a:ae: 24:39:c8:98:ea:db:5c:85:6e:74:c5:57:ec:eb:f1: 01:12:5e:70:5b:a4:06:e0:cf:01:25:e5:68:b7:0b: 0b:3e:d1:3d:23:ac:d6:d0:21:5b:dd:b6:c2:16:7d: 26:2f:78:c9:37:aa:02:c5:98:8d:64:f0:a2:31:ec: c9:ad:00:75:aa:fd:a8:0c:98:d5:03:58:82:ef:cd: 66:39:66:ba:ea:b3:83:97:c4:f1:2d:d7:d7:c5:39: bf:07:e3:c8:04:01:94:65:45:0e:09:ac:bb:36:14: 4c:82:50:7d:5f:37:a7:a6:da:97:eb:af:1f:6a:62: 75:3c:8d:bf:4e:d1:b3:b5:57:07:f3:ad:45:96:4b: 7e:61:95:80:d4:a9:a5:ba:be:cb:88:56:0c:75:7a: 13:43:31:ca:0e:b3:70:be:75:ba:d1:fb:be:36:3f: cc:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:03:79:AF:F8:48:E4:D6:04:1C:AD:E8:DD:9E:78:36:66:82:07:2D X509v3 Authority Key Identifier: keyid:45:51:A0:32:C4:44:85:FF:65:93:E0:43:52:7E:3E:1C:E3:5B:4C:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f3a62c9a-d4f0-454b-807f-84f9b3c202b3/0/4551A032C44485FF6593E043527E3E1CE35B4C46.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4551A032C44485FF6593E043527E3E1CE35B4C46.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f3a62c9a-d4f0-454b-807f-84f9b3c202b3/0/4551A032C44485FF6593E043527E3E1CE35B4C46.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:ee:b4:ee:a2:91:67:fd:4f:8d:a3:6c:6e:e0:13:15:8b:9f: 6c:a4:4f:8c:9b:7f:7f:e0:8a:eb:64:90:90:8c:da:83:b7:9c: ee:5a:81:57:3b:e0:54:1f:44:81:f5:f3:f7:64:5c:63:33:09: 69:96:be:6c:54:a6:ed:28:a8:19:79:50:46:4d:e3:e5:31:f4: 24:2b:1a:df:27:65:a6:da:05:de:40:79:55:cf:e8:bf:06:12: a2:09:2b:54:44:ef:8c:b7:08:98:4b:cb:70:10:cf:66:4f:58: 2a:ae:4b:f4:94:79:11:85:84:c5:33:a2:12:94:78:3d:07:ae: 0d:1b:83:07:e1:5a:b2:fa:bd:09:1a:9e:5f:f7:8f:8f:a1:57: 0d:ee:d7:68:92:0f:3e:a8:bf:16:2d:d4:a1:f1:a5:f8:c8:3d: a4:c8:5c:cf:aa:1d:0f:6c:82:56:b1:31:09:33:4d:7a:e4:84: c7:0b:53:66:da:2c:9f:7e:59:aa:fa:43:c6:9b:95:4a:10:03: 19:72:f3:d9:2b:42:d0:a4:9c:26:35:41:b6:c5:10:c4:61:1a: b1:21:07:34:af:92:c4:30:ea:ed:85:3c:97:57:2a:97:8c:32: a3:73:f3:a4:09:a0:e6:a3:80:6f:8c:61:5e:15:31:d4:8c:39: 98:8c:cd:98 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIYRFIfE26LIEVGDU9cJt7SJhuv8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDU1MUEwMzJDNDQ0ODVGRjY1OTNFMDQzNTI3RTNFMUNF MzVCNEM0NjAeFw0yNTA0MDMxNjM2MTFaFw0yNTA0MDYyMzM3MTFaMDMxMTAvBgNV BAMTKEY5MDM3OUFGRjg0OEU0RDYwNDFDQURFOEREOUU3ODM2NjY4MjA3MkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1hc14ReqnodyHHyi1dm0X4rJf dJ0tKEzJhictHOS8pQaC5pAUTMH0ijVYptXXgpOw4V3bKFM5aCanzL89pi1hwyXQ phR8BgMP2NfYTPRBAZvQ9JEtzhQ6riQ5yJjq21yFbnTFV+zr8QESXnBbpAbgzwEl 5Wi3Cws+0T0jrNbQIVvdtsIWfSYveMk3qgLFmI1k8KIx7MmtAHWq/agMmNUDWILv zWY5Zrrqs4OXxPEt19fFOb8H48gEAZRlRQ4JrLs2FEyCUH1fN6em2pfrrx9qYnU8 jb9O0bO1VwfzrUWWS35hlYDUqaW6vsuIVgx1ehNDMcoOs3C+dbrR+742P8wnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+QN5r/hI5NYEHK3o3Z54NmaCBy0wHwYDVR0j BBgwFoAURVGgMsREhf9lk+BDUn4+HONbTEYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m M2E2MmM5YS1kNGYwLTQ1NGItODA3Zi04NGY5YjNjMjAyYjMvMC80NTUxQTAzMkM0 NDQ4NUZGNjU5M0UwNDM1MjdFM0UxQ0UzNUI0QzQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDU1MUEwMzJDNDQ0ODVGRjY1OTNFMDQzNTI3RTNFMUNFMzVC NEM0Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjNhNjJjOWEtZDRmMC00NTRiLTgw N2YtODRmOWIzYzIwMmIzLzAvNDU1MUEwMzJDNDQ0ODVGRjY1OTNFMDQzNTI3RTNF MUNFMzVCNEM0Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF3utO6ikWf9T42jbG7gExWLn2ykT4ybf3/g iutkkJCM2oO3nO5agVc74FQfRIH18/dkXGMzCWmWvmxUpu0oqBl5UEZN4+Ux9CQr Gt8nZabaBd5AeVXP6L8GEqIJK1RE74y3CJhLy3AQz2ZPWCquS/SUeRGFhMUzohKU eD0Hrg0bgwfhWrL6vQkanl/3j4+hVw3u12iSDz6ovxYt1KHxpfjIPaTIXM+qHQ9s glaxMQkzTXrkhMcLU2baLJ9+War6Q8ablUoQAxly89krQtCknCY1QbbFEMRhGrEh BzSvksQw6u2FPJdXKpeMMqNz86QJoOajgG+MYV4VMdSMOZiMzZg= -----END CERTIFICATE-----Generated at Sat Apr 5 21:19:40 2025 by rpki-client