$ rpki-client -vvf repo-rpki.idnic.net/repo/fd3a2fdf-bcba-4757-b366-e1a0ad2d374a/0/4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.mft File: 4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.mft (raw, json) Hash identifier: JJ+I6aQnegJddG9zNHbUDMtS1d+RrAVkK2H7l6Z/LIU= Subject key identifier: 74:B0:2B:51:28:87:C1:A6:AD:77:80:C1:4F:B7:11:52:BC:A7:61:51 Authority key identifier: 4A:37:76:4C:C8:0D:1B:8A:68:19:E0:F0:F1:45:46:6E:0B:E5:2C:BD Certificate issuer: /CN=4A37764CC80D1B8A6819E0F0F145466E0BE52CBD Certificate serial: 76677256971C9370C537E71B48E07CD7C1E95125 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fd3a2fdf-bcba-4757-b366-e1a0ad2d374a/0/4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.mft Manifest number: C1 Signing time: Sat 07 Jun 2025 23:11:36 +0000 Manifest this update: Sat 07 Jun 2025 23:06:36 +0000 Manifest next update: Wed 11 Jun 2025 09:20:36 +0000 Files and hashes: 1: 4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.crl (hash: Ec3S1DdJXfUOd9UqxuNZTGie8ayTNw2a2DH2hq/XXis=) 2: 3135372e31302e36332e302f32342d3234203d3e20313532303835.roa (hash: 9mpAVpAO+aHJhHpBlGcLDx3eGU5On+hoBdAGOhixT1Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fd3a2fdf-bcba-4757-b366-e1a0ad2d374a/0/4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.crl rsync://repo-rpki.idnic.net/repo/fd3a2fdf-bcba-4757-b366-e1a0ad2d374a/0/4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 06:30:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:67:72:56:97:1c:93:70:c5:37:e7:1b:48:e0:7c:d7:c1:e9:51:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A37764CC80D1B8A6819E0F0F145466E0BE52CBD Validity Not Before: Jun 7 23:06:36 2025 GMT Not After : Jun 11 09:20:36 2025 GMT Subject: CN=74B02B512887C1A6AD7780C14FB71152BCA76151 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:9b:4e:27:84:9a:08:f9:cb:2c:4a:cc:1b:8a: 04:b1:a2:b1:99:62:3f:20:d5:3e:9d:ca:dd:71:f4: 96:ac:82:77:6c:2a:cb:f9:dc:2e:73:05:b0:ee:2a: 24:c1:45:39:d3:4b:d7:68:be:35:e3:6a:fa:b4:09: 02:68:4a:53:9d:e3:c6:3d:4b:87:49:5a:2b:b8:11: 5a:f9:68:4b:d4:20:ad:8b:38:1a:3e:b5:d8:a1:e3: 14:cc:17:13:72:d0:ce:b0:12:d8:09:62:5d:5d:2f: b3:85:54:0e:87:50:46:5b:fc:77:d5:9f:e5:c5:6b: 1f:e7:c3:de:d1:fe:2e:ad:65:1b:76:f9:49:94:83: 96:e1:37:d6:2f:3d:4b:f2:00:ed:02:2d:50:38:da: ea:2f:c1:c9:bc:8f:f7:35:fb:c0:97:d0:13:4f:bf: 1f:01:05:34:fc:9d:10:c0:77:8f:d8:b7:10:b7:ac: 3e:b2:fd:33:86:4e:97:8c:3d:47:91:b3:2f:e1:46: 7c:64:b4:73:d3:ed:c6:53:99:d7:90:f5:8c:ed:fa: 09:d3:3b:e2:cb:53:7a:b2:3a:36:a3:aa:0a:61:68: 84:93:c4:c1:34:dc:a8:5b:9d:77:24:93:ef:a1:84: 39:56:a7:2a:99:a9:55:8c:a4:b2:13:9c:d8:08:31: ed:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:B0:2B:51:28:87:C1:A6:AD:77:80:C1:4F:B7:11:52:BC:A7:61:51 X509v3 Authority Key Identifier: keyid:4A:37:76:4C:C8:0D:1B:8A:68:19:E0:F0:F1:45:46:6E:0B:E5:2C:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fd3a2fdf-bcba-4757-b366-e1a0ad2d374a/0/4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fd3a2fdf-bcba-4757-b366-e1a0ad2d374a/0/4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:bf:ca:25:83:c8:6b:25:9c:cf:ec:85:ae:2a:87:e0:f3:56: 30:5d:4c:c9:f1:97:71:32:62:b5:15:a2:fe:1f:43:54:c1:e6: 04:83:6d:eb:51:19:55:e8:5a:72:4c:ad:d7:62:9d:d1:cf:e8: ea:52:d1:25:23:53:9d:47:a6:07:03:a9:0c:68:f0:95:ab:0d: 6b:c5:a3:b9:f7:76:34:60:f4:54:29:e5:cb:84:56:b5:ad:fd: 8b:83:fd:ba:6f:93:ad:30:71:1e:7b:7e:f3:19:f1:dd:73:46: da:a8:0b:e4:eb:b0:5c:6f:92:0f:0d:8f:c4:38:90:32:bf:2f: ef:5b:67:36:8a:5b:3f:bd:a0:95:6c:51:7e:ef:0c:4d:1c:57: 89:d9:4c:87:ed:8a:2a:1e:4e:31:06:21:47:d3:43:08:46:d5: 3d:10:7d:80:c0:8c:d0:6c:ec:e7:92:bf:f9:71:46:26:e1:28: a0:85:57:08:65:6d:34:0c:41:5e:51:e4:c1:c8:84:fb:7e:c3: 29:c1:b6:21:57:90:e5:ad:10:b4:b4:44:ad:79:c4:8a:ea:15: 3b:7b:b6:3a:1c:77:da:89:d1:c4:aa:b3:64:22:76:f8:2c:2d: 81:ae:ee:2a:33:f5:c6:98:d3:48:cb:12:61:02:2b:41:fd:28: b7:da:ef:d8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdmdyVpcck3DFN+cbSOB818HpUSUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEEzNzc2NENDODBEMUI4QTY4MTlFMEYwRjE0NTQ2NkUw QkU1MkNCRDAeFw0yNTA2MDcyMzA2MzZaFw0yNTA2MTEwOTIwMzZaMDMxMTAvBgNV BAMTKDc0QjAyQjUxMjg4N0MxQTZBRDc3ODBDMTRGQjcxMTUyQkNBNzYxNTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpm04nhJoI+cssSswbigSxorGZ Yj8g1T6dyt1x9JasgndsKsv53C5zBbDuKiTBRTnTS9dovjXjavq0CQJoSlOd48Y9 S4dJWiu4EVr5aEvUIK2LOBo+tdih4xTMFxNy0M6wEtgJYl1dL7OFVA6HUEZb/HfV n+XFax/nw97R/i6tZRt2+UmUg5bhN9YvPUvyAO0CLVA42uovwcm8j/c1+8CX0BNP vx8BBTT8nRDAd4/YtxC3rD6y/TOGTpeMPUeRsy/hRnxktHPT7cZTmdeQ9Yzt+gnT O+LLU3qyOjajqgphaISTxME03KhbnXckk++hhDlWpyqZqVWMpLITnNgIMe2dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdLArUSiHwaatd4DBT7cRUrynYVEwHwYDVR0j BBgwFoAUSjd2TMgNG4poGeDw8UVGbgvlLL0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZDNhMmZkZi1iY2JhLTQ3NTctYjM2Ni1lMWEwYWQyZDM3NGEvMC80QTM3NzY0Q0M4 MEQxQjhBNjgxOUUwRjBGMTQ1NDY2RTBCRTUyQ0JELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNEEzNzc2NENDODBEMUI4QTY4MTlFMEYwRjE0NTQ2NkUwQkU1 MkNCRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmQzYTJmZGYtYmNiYS00NzU3LWIz NjYtZTFhMGFkMmQzNzRhLzAvNEEzNzc2NENDODBEMUI4QTY4MTlFMEYwRjE0NTQ2 NkUwQkU1MkNCRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIW/yiWDyGslnM/sha4qh+DzVjBdTMnxl3Ey YrUVov4fQ1TB5gSDbetRGVXoWnJMrddindHP6OpS0SUjU51HpgcDqQxo8JWrDWvF o7n3djRg9FQp5cuEVrWt/YuD/bpvk60wcR57fvMZ8d1zRtqoC+TrsFxvkg8Nj8Q4 kDK/L+9bZzaKWz+9oJVsUX7vDE0cV4nZTIftiioeTjEGIUfTQwhG1T0QfYDAjNBs 7OeSv/lxRibhKKCFVwhlbTQMQV5R5MHIhPt+wynBtiFXkOWtELS0RK15xIrqFTt7 tjocd9qJ0cSqs2QidvgsLYGu7ioz9caY00jLEmECK0H9KLfa79g= -----END CERTIFICATE-----Generated at Mon Jun 9 00:36:27 2025 by rpki-client