$ rpki-client -vvf repo-rpki.idnic.net/repo/12c511be-67a2-44c9-b182-a911ba95be00/0/4412C369832E86CF255C7255EB1ECA7938910246.mft File: 4412C369832E86CF255C7255EB1ECA7938910246.mft (raw, json) Hash identifier: FbD9u+IjHjnv/YeVse4IYTJde4nDjm2stFPWye8p5QI= Subject key identifier: 16:B4:90:89:85:A6:A5:9F:83:49:10:93:E1:42:11:96:A4:94:DC:85 Authority key identifier: 44:12:C3:69:83:2E:86:CF:25:5C:72:55:EB:1E:CA:79:38:91:02:46 Certificate issuer: /CN=4412C369832E86CF255C7255EB1ECA7938910246 Certificate serial: 13A3217F128DF7B6CE31ABA9F51385FAE39AD04F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4412C369832E86CF255C7255EB1ECA7938910246.cer Subject info access: rsync://repo-rpki.idnic.net/repo/12c511be-67a2-44c9-b182-a911ba95be00/0/4412C369832E86CF255C7255EB1ECA7938910246.mft Manifest number: 0473 Signing time: Sat 14 Jun 2025 12:10:50 +0000 Manifest this update: Sat 14 Jun 2025 12:05:50 +0000 Manifest next update: Tue 17 Jun 2025 12:28:50 +0000 Files and hashes: 1: 4412C369832E86CF255C7255EB1ECA7938910246.crl (hash: RfJ+5gOsvK3My4yFF39l39oQKPt3kJxdF+8hwhPxTSw=) 2: 323030313a6466353a353238303a3a2f34382d3438203d3e20313431313237.roa (hash: ytsbJoowjejam8im/CXHpxBx0NQjILkSC74yHsn7Jos=) 3: 3130332e3135382e3132312e302f32342d3234203d3e20313431313237.roa (hash: BsPjaPAJfoOsDEE1I3aoHNDcatuZ5kuXKVlMx6806B8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/12c511be-67a2-44c9-b182-a911ba95be00/0/4412C369832E86CF255C7255EB1ECA7938910246.crl rsync://repo-rpki.idnic.net/repo/12c511be-67a2-44c9-b182-a911ba95be00/0/4412C369832E86CF255C7255EB1ECA7938910246.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4412C369832E86CF255C7255EB1ECA7938910246.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 12:28:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:a3:21:7f:12:8d:f7:b6:ce:31:ab:a9:f5:13:85:fa:e3:9a:d0:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4412C369832E86CF255C7255EB1ECA7938910246 Validity Not Before: Jun 14 12:05:50 2025 GMT Not After : Jun 17 12:28:50 2025 GMT Subject: CN=16B4908985A6A59F83491093E1421196A494DC85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:a0:92:b2:08:fe:dc:a7:be:52:06:a9:56:a7: 17:c7:27:08:7b:5d:9a:6e:27:51:a2:7f:9c:87:18: ff:0a:3f:6e:80:ae:8f:c3:ef:d7:49:d3:5b:b2:14: 8b:87:48:15:f2:9b:8b:22:16:b5:f4:9a:f0:44:8f: a3:35:25:b9:05:c8:27:ee:a6:eb:14:90:46:0a:9c: 53:85:44:89:2a:bd:a0:89:33:fe:88:c2:86:7f:95: dc:6e:a6:08:87:4b:26:30:f6:e3:24:42:c1:52:a4: 70:7d:eb:79:62:21:8c:b3:7a:81:1a:5f:ae:77:e7: 32:27:2a:eb:c5:66:0f:38:1c:24:19:12:7e:6a:77: be:36:a9:b8:1e:9a:73:e3:da:28:49:29:43:64:3a: 7c:d3:89:00:ae:2b:c5:2e:88:a7:ae:67:59:57:61: 61:eb:72:91:a8:62:87:95:8b:75:f2:fc:7e:f1:31: 8a:d2:d9:8c:d5:75:a8:8c:66:9d:58:3b:cb:a1:1c: 2f:5a:f0:d3:be:9d:b7:16:e2:e2:9c:9e:e6:6d:5f: d3:eb:37:f4:11:df:88:28:82:ab:7f:15:df:67:ac: 43:53:60:bb:7c:22:26:37:57:9b:1d:e1:f2:86:50: 6e:74:13:6e:5a:46:49:c0:af:4c:dd:49:51:e8:3a: 40:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:B4:90:89:85:A6:A5:9F:83:49:10:93:E1:42:11:96:A4:94:DC:85 X509v3 Authority Key Identifier: keyid:44:12:C3:69:83:2E:86:CF:25:5C:72:55:EB:1E:CA:79:38:91:02:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/12c511be-67a2-44c9-b182-a911ba95be00/0/4412C369832E86CF255C7255EB1ECA7938910246.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4412C369832E86CF255C7255EB1ECA7938910246.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/12c511be-67a2-44c9-b182-a911ba95be00/0/4412C369832E86CF255C7255EB1ECA7938910246.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:18:0f:ed:1f:5c:f9:ad:65:bc:52:b7:dd:f9:22:e2:8b:7c: d9:05:21:ee:37:72:6f:52:5d:6b:6d:31:05:8d:15:11:3c:2e: bc:98:8a:1d:28:98:40:85:b7:6c:aa:82:ae:78:bc:30:98:4b: df:2c:16:ff:63:ae:2e:9c:a9:c7:35:cf:1e:25:68:95:7e:6b: 81:9a:ba:3f:78:6e:bd:c8:55:f7:40:15:10:d9:e8:68:22:09: c0:09:77:20:2f:f3:01:6c:31:30:9c:a3:7c:b4:0a:89:0f:54: e2:e6:60:e3:0b:fd:79:c6:be:02:54:db:d3:87:3c:0c:7b:1a: c1:59:03:81:57:e6:61:4d:28:91:40:59:df:b7:ba:4d:87:86: 28:9a:27:f1:12:f8:02:76:dc:00:4a:ab:c7:5e:7c:9c:4f:ef: 7c:a1:d7:f8:61:0e:88:ee:53:ea:af:ae:b2:f0:22:4c:c2:df: 4c:06:df:b8:04:03:09:04:f5:96:6c:b4:36:35:00:30:07:03: 09:2f:23:f2:64:ea:8c:70:64:6a:b4:9f:24:14:d2:42:44:30: f8:78:1a:e7:9b:70:ca:0a:fe:ba:87:a6:f5:56:0c:85:d7:c1: c4:40:72:84:01:38:2a:95:6e:f8:00:c2:92:75:92:97:99:94: c1:b4:be:f5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE6MhfxKN97bOMaup9ROF+uOa0E8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDQxMkMzNjk4MzJFODZDRjI1NUM3MjU1RUIxRUNBNzkz ODkxMDI0NjAeFw0yNTA2MTQxMjA1NTBaFw0yNTA2MTcxMjI4NTBaMDMxMTAvBgNV BAMTKDE2QjQ5MDg5ODVBNkE1OUY4MzQ5MTA5M0UxNDIxMTk2QTQ5NERDODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCioJKyCP7cp75SBqlWpxfHJwh7 XZpuJ1Gif5yHGP8KP26Aro/D79dJ01uyFIuHSBXym4siFrX0mvBEj6M1JbkFyCfu pusUkEYKnFOFRIkqvaCJM/6IwoZ/ldxupgiHSyYw9uMkQsFSpHB963liIYyzeoEa X6535zInKuvFZg84HCQZEn5qd742qbgemnPj2ihJKUNkOnzTiQCuK8UuiKeuZ1lX YWHrcpGoYoeVi3Xy/H7xMYrS2YzVdaiMZp1YO8uhHC9a8NO+nbcW4uKcnuZtX9Pr N/QR34gogqt/Fd9nrENTYLt8IiY3V5sd4fKGUG50E25aRknAr0zdSVHoOkCJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFrSQiYWmpZ+DSRCT4UIRlqSU3IUwHwYDVR0j BBgwFoAURBLDaYMuhs8lXHJV6x7KeTiRAkYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MmM1MTFiZS02N2EyLTQ0YzktYjE4Mi1hOTExYmE5NWJlMDAvMC80NDEyQzM2OTgz MkU4NkNGMjU1QzcyNTVFQjFFQ0E3OTM4OTEwMjQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDQxMkMzNjk4MzJFODZDRjI1NUM3MjU1RUIxRUNBNzkzODkx MDI0Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTJjNTExYmUtNjdhMi00NGM5LWIx ODItYTkxMWJhOTViZTAwLzAvNDQxMkMzNjk4MzJFODZDRjI1NUM3MjU1RUIxRUNB NzkzODkxMDI0Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALwYD+0fXPmtZbxSt935IuKLfNkFIe43cm9S XWttMQWNFRE8LryYih0omECFt2yqgq54vDCYS98sFv9jri6cqcc1zx4laJV+a4Ga uj94br3IVfdAFRDZ6GgiCcAJdyAv8wFsMTCco3y0CokPVOLmYOML/XnGvgJU29OH PAx7GsFZA4FX5mFNKJFAWd+3uk2HhiiaJ/ES+AJ23ABKq8defJxP73yh1/hhDoju U+qvrrLwIkzC30wG37gEAwkE9ZZstDY1ADAHAwkvI/Jk6oxwZGq0nyQU0kJEMPh4 GuebcMoK/rqHpvVWDIXXwcRAcoQBOCqVbvgAwpJ1kpeZlMG0vvU= -----END CERTIFICATE-----Generated at Sun Jun 15 15:32:14 2025 by rpki-client