$ rpki-client -vvf repo-rpki.idnic.net/repo/faa6a67d-cba3-427b-9055-5f528f2d232f/0/4A688B72A804A426A9096ECA60105A4D831C5FA8.mft File: 4A688B72A804A426A9096ECA60105A4D831C5FA8.mft (raw, json) Hash identifier: 9xAhp1jZuEBtYU553jwQuhdadYymZNFFt4+1PQFNSNI= Subject key identifier: 4D:B3:4A:B4:A8:DD:ED:98:52:E2:FF:81:8E:7C:47:35:4D:34:CB:F3 Authority key identifier: 4A:68:8B:72:A8:04:A4:26:A9:09:6E:CA:60:10:5A:4D:83:1C:5F:A8 Certificate issuer: /CN=4A688B72A804A426A9096ECA60105A4D831C5FA8 Certificate serial: 4A13A197CD6E5C6D4BDA7FBA41A4C0BF04B74BE9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A688B72A804A426A9096ECA60105A4D831C5FA8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/faa6a67d-cba3-427b-9055-5f528f2d232f/0/4A688B72A804A426A9096ECA60105A4D831C5FA8.mft Manifest number: 02B8 Signing time: Mon 02 Jun 2025 03:32:12 +0000 Manifest this update: Mon 02 Jun 2025 03:27:12 +0000 Manifest next update: Thu 05 Jun 2025 08:18:12 +0000 Files and hashes: 1: 4A688B72A804A426A9096ECA60105A4D831C5FA8.crl (hash: 5oDU0Txbnx2422WhBZuBu0nKO2cFXPGLpsA149LG7Jw=) 2: 3130332e3137352e3230362e302f32332d3234203d3e20313437313234.roa (hash: FLVGwqj4yD54Hf3ac0cSht3WEYb1ToOJ+k3OEsbAbwE=) 3: 3130332e3137352e3230372e302f32342d3234203d3e20313437313234.roa (hash: aQ3bZ8U/53lOgq6IbJ4jaeEks7cypqeVb0bEi+y+Pus=) 4: 3130332e3137352e3230362e302f32342d3234203d3e20313437313234.roa (hash: eQ2W59Sl25b9+tbhRBYK+eiWkdxaKDr4YfWFXlk9jXI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/faa6a67d-cba3-427b-9055-5f528f2d232f/0/4A688B72A804A426A9096ECA60105A4D831C5FA8.crl rsync://repo-rpki.idnic.net/repo/faa6a67d-cba3-427b-9055-5f528f2d232f/0/4A688B72A804A426A9096ECA60105A4D831C5FA8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A688B72A804A426A9096ECA60105A4D831C5FA8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 08:18:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:13:a1:97:cd:6e:5c:6d:4b:da:7f:ba:41:a4:c0:bf:04:b7:4b:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A688B72A804A426A9096ECA60105A4D831C5FA8 Validity Not Before: Jun 2 03:27:12 2025 GMT Not After : Jun 5 08:18:12 2025 GMT Subject: CN=4DB34AB4A8DDED9852E2FF818E7C47354D34CBF3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:b5:bf:3d:0b:fe:d7:1d:ac:79:b8:3a:e3:75: db:d4:a2:c7:24:8b:58:84:0b:52:6f:7c:30:09:ab: 07:52:a5:08:f7:2a:98:3e:4f:e4:5d:d5:e9:d5:01: 96:70:aa:68:07:35:1e:8c:67:c0:92:64:fd:15:0f: 0a:9f:bf:49:cc:39:71:f7:5c:69:bb:14:09:2f:75: 7d:25:b6:ab:ac:fa:be:0e:69:8c:f1:5d:70:6e:cc: 90:b9:f2:40:6e:f1:c6:92:e7:00:04:88:4f:e6:d8: 23:1c:e4:de:76:30:14:97:36:bd:5f:8c:ed:98:26: 7f:66:55:98:76:86:0f:19:53:2c:6d:73:9c:cf:2f: c2:a9:39:b5:8f:54:8d:55:71:c4:c9:84:30:41:a0: 42:19:cd:2f:29:d0:0f:a6:42:2c:80:30:84:0c:37: c2:54:c8:39:89:ca:19:ff:cc:c2:99:3f:27:0e:6c: f6:69:6b:d9:06:ae:21:b0:4e:b9:ac:24:9a:3b:dd: 84:47:b3:f5:39:73:7f:2c:53:06:63:5f:40:cd:0a: 2e:f5:27:f9:c8:67:2d:24:75:8d:f0:aa:53:a0:7e: e7:f9:37:eb:15:b6:5c:e7:59:36:8a:b7:33:81:f3: 94:07:e5:6c:8a:b7:07:0c:5e:c4:f4:0d:50:35:a8: 79:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:B3:4A:B4:A8:DD:ED:98:52:E2:FF:81:8E:7C:47:35:4D:34:CB:F3 X509v3 Authority Key Identifier: keyid:4A:68:8B:72:A8:04:A4:26:A9:09:6E:CA:60:10:5A:4D:83:1C:5F:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/faa6a67d-cba3-427b-9055-5f528f2d232f/0/4A688B72A804A426A9096ECA60105A4D831C5FA8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A688B72A804A426A9096ECA60105A4D831C5FA8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/faa6a67d-cba3-427b-9055-5f528f2d232f/0/4A688B72A804A426A9096ECA60105A4D831C5FA8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:a5:26:df:1e:ea:c4:cd:c9:9f:a9:59:7e:16:b7:eb:13:69: 21:8b:f1:69:eb:a5:88:b1:69:b7:5c:ab:91:ad:da:47:05:71: f6:90:95:87:a4:2b:4a:d4:7b:2b:97:43:ef:cd:8d:f0:0d:9b: ec:84:64:5b:92:8d:00:d7:f6:0f:59:3a:11:d5:39:0c:d5:82: d2:f6:84:e1:d3:4d:f4:dc:f3:ae:a5:5f:c5:d5:55:c3:97:57: 96:3e:ad:3d:83:3c:a0:71:b6:53:8f:2c:76:7b:e9:bd:3f:23: 34:e1:21:42:36:ae:e5:7c:ce:1b:fa:d1:2a:52:cb:c6:87:8a: 27:74:97:a3:d5:1b:84:29:8d:2d:7b:93:cf:aa:7b:d7:96:10: e7:5a:ea:5a:8c:bd:07:cc:14:88:a9:ce:07:c0:10:36:bf:46: 71:42:5f:45:05:31:34:73:ba:4e:11:26:4f:8e:ab:7d:43:ec: 2a:26:c2:72:67:93:1f:1e:64:b9:84:c9:06:cb:d7:2c:4e:24: da:71:b7:be:ec:28:cd:7c:74:73:5d:06:79:f3:2a:ce:e1:1e: 89:17:a4:02:a5:ef:9e:3a:93:23:53:4d:b5:1f:49:ee:4a:91: db:af:7d:a1:a7:ea:ec:21:3b:2a:69:7d:d1:f8:5c:f9:d4:c3: 61:30:44:60 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUShOhl81uXG1L2n+6QaTAvwS3S+kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEE2ODhCNzJBODA0QTQyNkE5MDk2RUNBNjAxMDVBNEQ4 MzFDNUZBODAeFw0yNTA2MDIwMzI3MTJaFw0yNTA2MDUwODE4MTJaMDMxMTAvBgNV BAMTKDREQjM0QUI0QThEREVEOTg1MkUyRkY4MThFN0M0NzM1NEQzNENCRjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDstb89C/7XHax5uDrjddvUosck i1iEC1JvfDAJqwdSpQj3Kpg+T+Rd1enVAZZwqmgHNR6MZ8CSZP0VDwqfv0nMOXH3 XGm7FAkvdX0ltqus+r4OaYzxXXBuzJC58kBu8caS5wAEiE/m2CMc5N52MBSXNr1f jO2YJn9mVZh2hg8ZUyxtc5zPL8KpObWPVI1VccTJhDBBoEIZzS8p0A+mQiyAMIQM N8JUyDmJyhn/zMKZPycObPZpa9kGriGwTrmsJJo73YRHs/U5c38sUwZjX0DNCi71 J/nIZy0kdY3wqlOgfuf5N+sVtlznWTaKtzOB85QH5WyKtwcMXsT0DVA1qHlNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTbNKtKjd7ZhS4v+BjnxHNU00y/MwHwYDVR0j BBgwFoAUSmiLcqgEpCapCW7KYBBaTYMcX6gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YWE2YTY3ZC1jYmEzLTQyN2ItOTA1NS01ZjUyOGYyZDIzMmYvMC80QTY4OEI3MkE4 MDRBNDI2QTkwOTZFQ0E2MDEwNUE0RDgzMUM1RkE4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEE2ODhCNzJBODA0QTQyNkE5MDk2RUNBNjAxMDVBNEQ4MzFD NUZBOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmFhNmE2N2QtY2JhMy00MjdiLTkw NTUtNWY1MjhmMmQyMzJmLzAvNEE2ODhCNzJBODA0QTQyNkE5MDk2RUNBNjAxMDVB NEQ4MzFDNUZBOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABmlJt8e6sTNyZ+pWX4Wt+sTaSGL8WnrpYix abdcq5Gt2kcFcfaQlYekK0rUeyuXQ+/NjfANm+yEZFuSjQDX9g9ZOhHVOQzVgtL2 hOHTTfTc866lX8XVVcOXV5Y+rT2DPKBxtlOPLHZ76b0/IzThIUI2ruV8zhv60SpS y8aHiid0l6PVG4QpjS17k8+qe9eWEOda6lqMvQfMFIipzgfAEDa/RnFCX0UFMTRz uk4RJk+Oq31D7ComwnJnkx8eZLmEyQbL1yxOJNpxt77sKM18dHNdBnnzKs7hHokX pAKl7546kyNTTbUfSe5KkduvfaGn6uwhOyppfdH4XPnUw2EwRGA= -----END CERTIFICATE-----Generated at Tue Jun 3 23:43:12 2025 by rpki-client